last executing test programs: 16m35.353786209s ago: executing program 2 (id=1595): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D1\x00', 0x46aa81, 0x0) write$auto(0xca, &(0x7f00000000c0)='\x04>2\x04!\xe2\x00\x94\xf2\xa2\x00\x00', 0x7e) write$auto(0xca, 0x0, 0xf) r1 = openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f0000000840), 0x1, 0x0) mmap$auto(0x6, 0x400008, 0xd98e, 0x9b72, 0xffffffffffffffff, 0x200200000000000) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0x28000) r2 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r3 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r3, 0x3b8e, r2) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) keyctl$auto_KEYCTL_CAPABILITIES(0x1f, 0x3, 0x7, 0x7, 0xbe9) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r4, 0x4001af84, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) socket(0xa, 0x801, 0x106) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_available_congestion_control\x00', 0x0, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/devcoredump/disabled\x00', 0xe3102, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x201, 0x0) write$auto(r6, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89_\x19.)\x17V\x94\x151$\xefC:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d$/\x1d\x804\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xa7\xc9j\xfb\xff\xa1\xbe', 0x100000a3d9) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x7, 0xfffffffffffffff6, 0x7, 0x9, 0x79d, 0x6, 0x100000000000000, 0xfffffffffffffffe, 0xf]}, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0xfffffffe) writev$auto(r1, &(0x7f0000000940)={0x0, 0xb}, 0x3) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x318f, 0x4, 0x0, 0xff, "50cfeeca8e00"}) close_range$auto(r0, 0xffffffffffffffff, 0x0) 16m33.488716841s ago: executing program 2 (id=1603): socket(0xa, 0x3, 0xff) r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) fadvise64$auto_POSIX_FADV_DONTNEED(r2, 0x5, 0x80005, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) open_tree_attr$auto(0xffffffffffffffff, 0x0, 0x3000, 0x0, 0x7ff) read$auto(r3, &(0x7f0000000140)='/dev/audio1\x00', 0xffffffffffff8000) prctl$auto(0x1ff, 0x1, 0x0, 0x1, 0x3) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sysfs$auto(0x2, 0x23, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x4) rseq$auto(0x0, 0x8000, 0x0, 0x6) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r4 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r4, 0x0, 0x1) r5 = openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/options/test_nop_accept\x00', 0x5, 0x0) write$auto(r5, 0x0, 0x6) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, r0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0xc, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x8, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x688cfcf374ddd4c2}, 0x4048000) 16m32.424003208s ago: executing program 2 (id=1606): setresuid$auto(0x8, 0x8, 0x0) r0 = setfsuid$auto(0xee00) setreuid$auto(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r1) sendmsg$auto_NET_SHAPER_CMD_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090027bd7000fbdbdf250300000008000800", @ANYRES32, @ANYBLOB="04000280"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) msgsnd$auto(0x2, &(0x7f0000000300)={0x4, 0x9}, 0x65, 0xfffffffd) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r4, 0x0, 0x4) mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) r5 = waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x3, &(0x7f0000000440)={{0x8, 0x6}, {0x0, 0xc5e}, 0x100000011, 0x3, 0x5, 0xf9, 0xfffffffffffffffc, 0x80005, 0x5, 0x9, 0x0, 0x400000b, 0x35d, 0x439c, 0x9, 0x7}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/ptp/ptp0/max_vclocks\x00', 0x103841, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) r7 = io_uring_setup$auto(0x1, 0x0) ioctl$auto(r6, 0xc0585604, r7) r8 = prctl$auto(0x2, 0x1002, r5, 0x7, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f00000006c0)={0x208200700, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58) unshare$auto(0x40000080) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) fcntl$auto(0x0, 0x8, 0x0) 16m29.432692829s ago: executing program 2 (id=1612): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32) io_uring_setup$auto(0x1, 0x0) (rerun: 32) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/md_mod/parameters/new_array\x00', 0xa001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x942, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async, rerun: 64) socket(0x2, 0x1, 0x106) (async, rerun: 64) userfaultfd$auto(0x1) (async) ioctl$auto(0x3, 0xc018aa3f, 0xf0b) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x801, 0x106) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async, rerun: 32) ioctl$auto(r0, 0x541c, r1) (rerun: 32) 16m28.193115465s ago: executing program 2 (id=1617): socket(0x2, 0x80002, 0x73) (async) ioctl$auto(0xffffffffffffffff, 0x40045109, 0xffffffffffffffff) (async) connect$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x4e20, @loopback}, 0x1) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (rerun: 64) r0 = socket(0xa, 0x1, 0x84) getsockopt$auto(r0, 0x84, 0x3, 0x0, 0x0) (async) r1 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r1, 0x0, 0xfffffdf1) linkat$auto(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) (async) unshare$auto(0x40000080) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2405a0, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xf, 0x800, 0x0) (async) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) 16m15.373661569s ago: executing program 2 (id=1637): close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) select$auto(0x7, 0x0, &(0x7f0000000000)={[0x209c, 0x40, 0x8, 0x19, 0xffffffffffffeff7, 0x47, 0xc, 0x200000f, 0x0, 0x0, 0x12, 0xd59, 0x100000000101, 0x9b, 0x2, 0xffffffffffffffff]}, 0x0, 0x0) (async) select$auto(0x7, 0x0, &(0x7f0000000000)={[0x209c, 0x40, 0x8, 0x19, 0xffffffffffffeff7, 0x47, 0xc, 0x200000f, 0x0, 0x0, 0x12, 0xd59, 0x100000000101, 0x9b, 0x2, 0xffffffffffffffff]}, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$auto_PR_SET_MM(0x23, 0x7, 0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) (async) memfd_create$auto(0x0, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x1, 0xfff, 0x9, 0x0, 0xffffffffffffff7f, 0x368e, 0x2, {0xffffffff, 0x20000000010000}, 0x5, 0x6, 0xfffffffffffffffd, 0x47, 0x0, 0x9, 0x81, 0x800, 0xa747, 0xdead, 0x804}) (async) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x1, 0xfff, 0x9, 0x0, 0xffffffffffffff7f, 0x368e, 0x2, {0xffffffff, 0x20000000010000}, 0x5, 0x6, 0xfffffffffffffffd, 0x47, 0x0, 0x9, 0x81, 0x800, 0xa747, 0xdead, 0x804}) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x581402, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0) (async) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0x400, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) waitid$auto_P_ALL(0x0, 0x3b000, &(0x7f0000000280)={@siginfo_0_0={0x200, 0x0, 0x6, @_sigsys={&(0x7f00000000c0)="55eb8df319677f9aebf453b195011dc75b314a6a2de037085459dc03a1ad199752151699faea53575d94e9e2f930abeb4f1cd2fa58eef0e25b15baeca5f900c19f32e51de1ba99fb4f82871232b300"/88, 0x1000, 0x826}}}, 0x3, &(0x7f0000000300)={{0xda0000000000000, 0x969d}, {0x2, 0x6}, 0x8000000000000000, 0xa, 0x8, 0xd11c, 0xb871, 0x2, 0x9ffd, 0x81, 0x4, 0x1000000000f8c5, 0x1000, 0x81, 0xc, 0xd}) mmap$auto(0x800000000, 0x5, 0x3, 0x14, r2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x1d) (async) madvise$auto(0x0, 0x200007, 0x1d) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) open(&(0x7f0000000040)='./cgroup\x00', 0x400902, 0x36ff13dcfd43a77a) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) 15m59.7763157s ago: executing program 32 (id=1637): close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) select$auto(0x7, 0x0, &(0x7f0000000000)={[0x209c, 0x40, 0x8, 0x19, 0xffffffffffffeff7, 0x47, 0xc, 0x200000f, 0x0, 0x0, 0x12, 0xd59, 0x100000000101, 0x9b, 0x2, 0xffffffffffffffff]}, 0x0, 0x0) (async) select$auto(0x7, 0x0, &(0x7f0000000000)={[0x209c, 0x40, 0x8, 0x19, 0xffffffffffffeff7, 0x47, 0xc, 0x200000f, 0x0, 0x0, 0x12, 0xd59, 0x100000000101, 0x9b, 0x2, 0xffffffffffffffff]}, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$auto_PR_SET_MM(0x23, 0x7, 0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) (async) memfd_create$auto(0x0, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x1, 0xfff, 0x9, 0x0, 0xffffffffffffff7f, 0x368e, 0x2, {0xffffffff, 0x20000000010000}, 0x5, 0x6, 0xfffffffffffffffd, 0x47, 0x0, 0x9, 0x81, 0x800, 0xa747, 0xdead, 0x804}) (async) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x1, 0xfff, 0x9, 0x0, 0xffffffffffffff7f, 0x368e, 0x2, {0xffffffff, 0x20000000010000}, 0x5, 0x6, 0xfffffffffffffffd, 0x47, 0x0, 0x9, 0x81, 0x800, 0xa747, 0xdead, 0x804}) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x581402, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0) (async) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0x400, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) waitid$auto_P_ALL(0x0, 0x3b000, &(0x7f0000000280)={@siginfo_0_0={0x200, 0x0, 0x6, @_sigsys={&(0x7f00000000c0)="55eb8df319677f9aebf453b195011dc75b314a6a2de037085459dc03a1ad199752151699faea53575d94e9e2f930abeb4f1cd2fa58eef0e25b15baeca5f900c19f32e51de1ba99fb4f82871232b300"/88, 0x1000, 0x826}}}, 0x3, &(0x7f0000000300)={{0xda0000000000000, 0x969d}, {0x2, 0x6}, 0x8000000000000000, 0xa, 0x8, 0xd11c, 0xb871, 0x2, 0x9ffd, 0x81, 0x4, 0x1000000000f8c5, 0x1000, 0x81, 0xc, 0xd}) mmap$auto(0x800000000, 0x5, 0x3, 0x14, r2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x1d) (async) madvise$auto(0x0, 0x200007, 0x1d) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) open(&(0x7f0000000040)='./cgroup\x00', 0x400902, 0x36ff13dcfd43a77a) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) 10m4.803086956s ago: executing program 3 (id=2778): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) socketpair$auto(0x2d, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/seccomp/actions_logged\x00', 0x8202, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr0\x00', 0x60540, 0x0) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x7e1b, 0x0) r0 = socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socketpair$auto(0x1, 0x5, 0x100000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) read$auto(0x3, 0x0, 0x7fffffff) close_range$auto(0x2, 0xa, 0x0) 10m3.217489491s ago: executing program 3 (id=2782): mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)="205c202002200dc0023af10e9bfa1babfa203753ca9a20370a", 0x19) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) sendmmsg$auto(r1, &(0x7f0000000000)={{0x0, 0x6, 0x0, 0x106, 0x0, 0x1, 0x3}, 0x57177fc5}, 0x9, 0x0) r2 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=0x4, 0x4, @old_map_fd=r1}, 0xa3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 10m2.362496365s ago: executing program 3 (id=2783): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop4/queue/wbt_lat_usec\x00', 0x10b142, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/veth0_to_team/router_solicitations\x00', 0x800, 0x0) sendfile$auto(r0, r1, 0x0, 0x2ee) 10m1.054152457s ago: executing program 3 (id=2786): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x581d40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0)) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0) sendfile$auto(r2, r2, 0x0, 0x7) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000380), 0x103000, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x4) ioctl$auto_FIDEDUPERANGE(r3, 0xc0189436, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r6, r5, 0x4, 0x1ff, 0xffffffffffffffff, @relative_id=0x13, 0xe600}, 0xf) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'veth0\x00'}) keyctl$auto_KEYCTL_SETPERM(0x5, 0xfffffffffffffffb, 0x200, 0x1, 0x100) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="100c2cbd7000ffdbdf25070000000400018039a58414d23330ce9ecb075c79759abcd1922da7fd391a3769778e0c182ec725dd5c41c3f596635ce8d11773b58099ddd164346eb79e565f75f331e6de8beaf572e4f694eb2d5a9da69de054a12238ecd34ccae5dd4af00865a3b9d634aec9a60ed269211e"], 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x0) sysfs$auto(0x2, 0x11, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC0D0p\x00', 0x2, 0x0) prlimit64$auto(0x0, 0x7, 0x0, &(0x7f00000001c0)={0x6, 0x4}) r7 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/conf/sit0/arp_evict_nocarrier\x00', 0x6a0002, 0x0) write$auto(r7, &(0x7f0000005900)='\x00', 0x6) r8 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000040), 0x1203f, 0x0) ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(r8, 0x3304, 0x0) ioctl$auto_BTRFS_IOC_ENCODED_READ(0xffffffffffffffff, 0x80809440, &(0x7f0000000180)={&(0x7f0000000140)={&(0x7f0000000080)="a9e5ec756dea6e27f17a062cf6bfa5613604a20e8c1826074585eb302fb5cabbaab6a6a6256ffc1c199316793021fc78d56b2342cfc66532b84f5256be3ce986319ba7d78ed26925094aa6af8b50344eb6599dbbde39be7d10e8b1fb01e6c84b38ccee208f0c0877a416bdd4950993fb111d5588234c44573f0a2fd99aabe36852b0b519dd8af2b61c7cd0b256a734949ef1e5b6d5beed506fef2da6f1", 0xffffffffffff5318}, 0x2, 0x2, 0x1000, 0x3, 0x0, 0x1, 0x239, 0x8, "2880aeeaba9eafcb409d7e0746f4b7e448026f57b8047d097bc76ec83fab1ebc04544645016ee3e8e8def8cfafc8b94005c2dd9b9d1beece496c77ac78a70301"}) 9m57.317816716s ago: executing program 3 (id=2795): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0x2, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x101, 0x4, 0x8}, {0xfff7ffff, 0x2, 0x0, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) getsockopt$auto_SO_OOBINLINE(r0, 0x4, 0xa, &(0x7f0000000100)='+%!\x00', &(0x7f0000000140)=0x1fffc000) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socketpair$auto(0x8, 0x7, 0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_TCFLSH2(r1, 0x8925, 0x0) r2 = getpid() set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) memfd_create$auto(0x0, 0x4) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) socket(0xa, 0x2, 0x0) acct$auto(&(0x7f0000000040)='/dev/pts/ptmx\x00') 9m53.565654655s ago: executing program 3 (id=2802): mmap$auto(0x0, 0x4010003, 0xf919, 0x9b72, 0xffffffffffffffff, 0x398) write$auto(0xffffffffffffffff, &(0x7f0000000000)='/sys/devices/virtual/sound/ctl-led/speaker/card2/detach\x00', 0x7fffffff) mmap$auto(0x1, 0x9, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) mmap$auto(0x0, 0x2000f, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = socket(0x29, 0x800, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r3 = getpid() setsockopt$auto_SO_TYPE(0xffffffffffffffff, 0x53, 0x3, &(0x7f0000000040)='\x00', 0x9) bpf$auto_BPF_LINK_DETACH(0x22, &(0x7f00000001c0)=@bpf_attr_7={@prog_id=0xa7, 0x35af6f2a, 0x0, r0}, 0x0) mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x7) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2) write$auto(r4, &(0x7f0000000000)='//\xf2\x00', 0x80000000) prctl$auto(0x1, 0xfffffffffffff8a9, r3, 0x4, 0x2) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) read$auto_fragmentation_threshold_ops_(r2, &(0x7f00000000c0)=""/118, 0x76) msync$auto(0x0, 0xe0, 0x6) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x401, 0x15) r6 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000002c0), 0x480, 0x0) pread64$auto(r6, &(0x7f0000000000)='\x00\x80_\x93gX\x90\x8cA;O0\x03\xcab\xa6\x8bU/t\xc5', 0xd56c, 0xa84) io_uring_setup$auto(0x6, 0x0) close_range$auto(r5, 0x8, 0x0) 9m38.50754453s ago: executing program 33 (id=2802): mmap$auto(0x0, 0x4010003, 0xf919, 0x9b72, 0xffffffffffffffff, 0x398) write$auto(0xffffffffffffffff, &(0x7f0000000000)='/sys/devices/virtual/sound/ctl-led/speaker/card2/detach\x00', 0x7fffffff) mmap$auto(0x1, 0x9, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) mmap$auto(0x0, 0x2000f, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = socket(0x29, 0x800, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r3 = getpid() setsockopt$auto_SO_TYPE(0xffffffffffffffff, 0x53, 0x3, &(0x7f0000000040)='\x00', 0x9) bpf$auto_BPF_LINK_DETACH(0x22, &(0x7f00000001c0)=@bpf_attr_7={@prog_id=0xa7, 0x35af6f2a, 0x0, r0}, 0x0) mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x7) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2) write$auto(r4, &(0x7f0000000000)='//\xf2\x00', 0x80000000) prctl$auto(0x1, 0xfffffffffffff8a9, r3, 0x4, 0x2) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) read$auto_fragmentation_threshold_ops_(r2, &(0x7f00000000c0)=""/118, 0x76) msync$auto(0x0, 0xe0, 0x6) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x401, 0x15) r6 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000002c0), 0x480, 0x0) pread64$auto(r6, &(0x7f0000000000)='\x00\x80_\x93gX\x90\x8cA;O0\x03\xcab\xa6\x8bU/t\xc5', 0xd56c, 0xa84) io_uring_setup$auto(0x6, 0x0) close_range$auto(r5, 0x8, 0x0) 8m59.39234013s ago: executing program 4 (id=2964): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) r0 = socket(0x2a, 0x2, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x1, 0x0, 0x36, 0x828, 0x9, 0x8000000000000000, 0x9f, 0x7, 0x9, 0x8, 0x2, 0x9, 0x3, 0x8, 0x0, 0x200000000000f, 0x100, 0x1, 0x10001, 0x2cf8}, 0xe3c, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='N\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) setresuid$auto(0x2, 0x7, 0x8080) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto(r0, 0x8912, 0x38) 8m55.793239077s ago: executing program 4 (id=2972): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/bluetooth/hci5/msft_opcode\x00', 0x3, 0x0) (async) r0 = openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/bluetooth/hci5/msft_opcode\x00', 0x3, 0x0) ioctl$auto_FIDEDUPERANGE(r0, 0xc0189436, 0x4) close_range$auto(0x2, 0x8, 0x0) r1 = open(&(0x7f0000000100)='./cgroup\x00', 0x50800, 0x412) r2 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vkms/internal_clients\x00', 0x101402, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(r2, &(0x7f0000000240)=""/194, 0xc2) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0xb4, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x100}, @NFSD_A_SERVER_GRACETIME={0x8}, @NFSD_A_SERVER_SCOPE={0x30, 0x4, '/sys/kernel/debug/dri/vkms/internal_clients\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x8}, @NFSD_A_SERVER_LEASETIME={0x8}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x1}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x9}, @NFSD_A_SERVER_SCOPE={0x30, 0x4, '/sys/kernel/debug/dri/vkms/internal_clients\x00'}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x3ff}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0xb4}}, 0x8010) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) r4 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) (async) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) mmap$auto_mtd_fops_mtdchar(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x2010, r4, 0x0) (async) mmap$auto_mtd_fops_mtdchar(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x2010, r4, 0x0) ioctl$auto(0x3, 0x4048aec9, r3) 8m55.158850678s ago: executing program 4 (id=2974): statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x7fff, 0x43b, 0x1, 0x42, 0x200000000065f, 0x401ffde, 0x7, 0x3, 0x2, 0x7, 0x3eb, 0x0, 0x2, 0x735, 0x2, 0x6, 0x10003, 0x6, 0x6, 0x0, 0x7, 0x1ffb, 0x203, 0x400, 0x8, 0x0, 0x0, 0xffffffff, 0x0, 0x0, [0x0, 0x0, 0x80000000, 0x4, 0xfffffffffffffffc, 0x4, 0x8000000, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x1, 0x4, 0x1, 0x5, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x1000001, 0x0, 0x2]}, 0x7, 0xd) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x204880, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x5, 0x2) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa0302, 0x0) sendfile$auto(r0, r0, 0x0, 0x7ffff000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) mmap$auto(0x3ff, 0x202000c, 0x3, 0xeb2, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x80842, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x85) mknod$auto(0x0, 0x1001, 0x4) statmount$auto(&(0x7f0000000080)={0x1f, @raw, 0x80000020, 0x5, 0xefa}, 0x0, 0x206, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101200, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000014c0)={@raw=0xfffffffffffffff7, 0xfffffffffffffffa, 0xaf9, @btrfs_ioctl_vol_args_v2_3_0={0x9, &(0x7f00000000c0)={0x1, 0x4, 0x5, 0x800, {0x6, 0x4, 0x7, 0x18064d98}}}, @name="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"}) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x200, 0xfffffdff, 0x1}]}) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/fs/jfs/TxAnchor\x00', 0x80000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r5, &(0x7f0000000180)=""/250, 0xfa) 8m53.850528454s ago: executing program 4 (id=2976): mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_setup$auto(0x2, 0x0) mlockall$auto(0x7) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) mmap$auto(0xfffffffffffff25c, 0x3, 0x121, 0x16, r0, 0x8) setsockopt$auto_SO_CNX_ADVICE(0xffffffffffffffff, 0x200, 0x35, &(0x7f0000000680)='/proc/sys/net/ipv4/udp_early_demux\x00', 0x8) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000100)={{@raw=0x2, 0x85, 0x20e, 0x1, "669cbbd9e9756f22fdffa199e0f106000000000000000b2f4ab8633824f2d2252ca5f200", @raw=0x8}, 0x0, @integer=@value=[0x0, 0x4, 0xf, 0x80000001, 0xfffffffffffffff7, 0x4, 0xc, 0x3, 0x8f, 0x2, 0x3, 0xa4f, 0x101, 0x5, 0x0, 0x8, 0x1, 0x6, 0x3, 0x2, 0x2, 0x1, 0x8, 0x4, 0x2, 0x0, 0x7, 0xfb, 0xf, 0x100000000, 0x10, 0x6, 0x10d9, 0x7, 0x8000000000000008, 0x81, 0x8, 0x6, 0x6, 0x8, 0x56d1, 0x1, 0x7, 0x0, 0x7, 0xc, 0x9, 0xd4, 0x800, 0x3, 0x2, 0x25489d7a, 0x2, 0x90000000000000, 0x9, 0xfffffffffffffff8, 0x2d, 0x7, 0xffff, 0x6, 0x400000000000005, 0x3, 0xc69, 0x96, 0x7, 0x6, 0x7, 0x5, 0xfffffffffffffffd, 0x4, 0x4, 0xb000000000, 0x6, 0x80000001, 0x1, 0x8, 0x4, 0x14, 0xd8, 0xa, 0x443, 0x7, 0x0, 0x4, 0x3, 0x9, 0xc, 0x1, 0x5, 0x5, 0x1, 0x3, 0x10001, 0x1, 0xed4, 0xfffffffffffffffe, 0x2, 0xfffffffffffffff9, 0x5, 0x3, 0xfffffffffffffff8, 0xffffffff7fffffff, 0xa7, 0x4, 0x1, 0x100000000, 0x51a, 0x1, 0x6, 0x4, 0x2d4, 0x40e9, 0x5, 0x5, 0xffffffffffffffff, 0xd, 0x1, 0x2, 0x7fffffffffffffff, 0x550, 0x3a1, 0x1, 0x1, 0x9, 0x8, 0x2, 0x2], "282f77b07e718e11749a346177741dc299a28a585e87e0d908e2c8e50de501951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c8500"}) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000640), 0x6c0a43, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async\x00', 0x183941, 0x0) write$auto(0x3, 0x0, 0x100082) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0xfffffffd) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/udp_early_demux\x00', 0x28802, 0x0) read$auto(0x3, 0x0, 0x80) r1 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim0/ports/3/pp_hold\x00', 0xc0b02, 0x0) write$auto(r1, 0x0, 0xc70) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x505800, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000600), 0x40080, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) signalfd$auto(0xffffffffffffffff, 0x0, 0x8) epoll_create$auto(0x3e) close_range$auto(0x2, 0x8, 0x0) 8m51.189738327s ago: executing program 4 (id=2982): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) unshare$auto(0x40000080) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x10400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x7fffffff, 0x0, 0x9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000040), 0x101480, 0x0) ioctl$auto_SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000080)=0x7) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) chdir$auto(&(0x7f00000000c0)='./file0\x00') r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/scsi/scsi\x00', 0x400, 0x0) read$auto(r1, &(0x7f0000000000)='/\x00', 0x6) geteuid() msgctl$auto_MSG_STAT_ANY(0x800, 0xd, &(0x7f0000000240)={{0x84da, 0xee01, 0x0, 0x7ff, 0x7, 0xffff0001, 0x667e}, &(0x7f0000000100)=0x40, &(0x7f0000000200)=0x4, 0x6, 0x9, 0xb, 0xfffffffeffffefff, 0x1, 0x7d92, 0x3, 0x1ff, @inferred, @inferred=0xffffffffffffffff}) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$auto_UI_SET_FFBIT(r2, 0x4004556b, &(0x7f0000000040)=0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) time$auto(0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video17\x00', 0x80800, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/stats\x00', 0x900, 0x0) pread64$auto(r3, &(0x7f00000001c0)='/sys/kernel/irq/2/hwirq\x00', 0x3, 0x7f) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/block/nbd11/sched/queued\x00', 0xa000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x51, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) write$auto(r4, &(0x7f0000000040)='S\x00\x00\x00\xfc\xff\xff\xff', 0x8587) 8m46.128745396s ago: executing program 4 (id=2997): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r0 = open(0x0, 0x261c2, 0x84) r1 = userfaultfd$auto(0x1) statx$auto(r1, 0x0, 0x1000, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000280)=@bpf_attr_5={@target_ifindex=r5, r4, 0x8, 0x1, 0xffffffffffffffff, @relative_fd=r2, 0x800000000e600}, 0xf) bpf$auto(0x2, &(0x7f0000000340)=@raw_tracepoint={0x5, r0, 0x0, 0x2}, 0xc) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) getsockname$auto(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) 8m31.060297275s ago: executing program 34 (id=2997): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r0 = open(0x0, 0x261c2, 0x84) r1 = userfaultfd$auto(0x1) statx$auto(r1, 0x0, 0x1000, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000280)=@bpf_attr_5={@target_ifindex=r5, r4, 0x8, 0x1, 0xffffffffffffffff, @relative_fd=r2, 0x800000000e600}, 0xf) bpf$auto(0x2, &(0x7f0000000340)=@raw_tracepoint={0x5, r0, 0x0, 0x2}, 0xc) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) getsockname$auto(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) 7m37.512895015s ago: executing program 0 (id=3191): close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x24ca03, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x400000f1, 0x400, 0x9}]}) 7m37.094873401s ago: executing program 0 (id=3193): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0x80000e9e, 0x1, 0xd, 0xfffffffffffffffb, 0x100000000, 0x2c2, 0x800002017d, 0x4, 0x40, 0xd, 0xd59, 0xfb, 0xff, 0x21, 0x100000005]}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000001200)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x19U\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x81\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xecWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xfbJ7\xd1\xdc\xe1\x80yi\xef\x91M\xfbB\x97\x80\x9a\xbep\x86\x93\xcc4\xe5\xba\x015I\x1d\r\xdf\xc1Q\x8eM\xa6\t$\xb7ZR\xdcs\x94\xccn\x05\xb8\x06', 0x500000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) (async) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) madvise$auto(0x1afd, 0x7fffffff, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) mkdir$auto(&(0x7f0000000200)='}[,&*}/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc001) (async) mkdir$auto(&(0x7f0000000200)='}[,&*}/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc001) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r2, &(0x7f0000000000)="49a915e2c65063b5eed0271e3bf618c3a92a6c46c02481f53ecdd0569816336e1770544afb40f22e9bf0182771dea9a092", 0x31) mmap$auto(0x0, 0x4020009, 0x2, 0xeb1, 0x401, 0x8000) 7m34.825021077s ago: executing program 0 (id=3201): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x40, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000300)={{@raw=0x1, 0xa, 0xf8, 0x4671, "a401d243991a4dc376cc2bd4dbe3040e3cff152230323227f8d6c24be7ceeed84366bbadec197ea40209a468", @raw}, 0x1ea, 0x81, 0x1, @raw=0x8f10, @reserved="b2089ab0bbaab63c40853405fb772ade9448008d0040560232dbb586cf8f11ca82a2ba37174118952b850ad2099d3a3bc1c77e916330e96e2989bebf719430efe8c9a59c9349eac701c2bbb3122607916561a6da1cfdfc5dc83f4cc979d6dbf96bcb58d1f9042592b39ceec6193960c9a37975bc0153c5fce4d94f329d47f6d4", "2bb2d72b107f03a0ef0c6760e2e1fd64b8ae4a5be70b75810dfa4cc7182ed519d3613ea5b4243440fc9595b760cee784decb284ff015aa97d8f86dd61fd4f929"}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x169443, 0x114) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x400002, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmstat\x00', 0x20000, 0x0) pread64$auto(r2, &(0x7f00000002c0)='\x04\xefr\tbgc/\xd0\xe1\xf7$/tg/,s\b\xf5\xf7\x0f\x03\xd5\xef\xbf\xf6j\xe2\xed\x7f0\b\xff^\xe3th\xd2\x1bA\xba&\xba\xd0\xbb\xca\xb0\xa1\t\x00\x00\r(\xccF\xeeg\n\x00\x00\xa9l\x9cd\xcf\xff\x97=\xf4\xa1\xca\x82j\xf2\x17\t\x00\x00\x00\x00\x00\x00\x000\xf76\xb96\xd1\xb9\xde\xe2\x167\xc5\x94\x00A[B\xd9\x82\xaa\xc5\xfcoB\xfe\'\xfbI\xc9\xcb\xc3\xc1\x1e6~\x81\xb9\x0ff\x8e\xd3\x06\xba;yX\x966\x97#\xfb\x8d!F\xfc\x99\x86\x1d\xbb\xaf(\x92\x887\x01Z\xa7\xe3Y\x17\xd2#\x8aO\xef\r\xfa\xe0\x18IiI\xaek\xa9R\x02N;+@\x12>\'\x1a\xa6i\x93\x8c\x16BO@ \xb5\xd9\xd0\xb6S\xfc\x17\x11\x04\x8b?$\xean\xa1|D\xbbV%\xde\x87\xd1@\x00\x8cM\xfdr\xc9\x86\xbaq', 0x100003ffd, 0x6) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x7, 0x5, 0x1007181, 0x8a0d, 0x7, 0x7, 0x7ff, 0x89, 0x26, 0x4, 0x200000000001, 0x384, 0xfffffffffffffffa, 0x8, 0x0, 0x30, 0x0, 0x864, 0xe, 0x22000, 0x9, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0xba85, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x9, 0xd) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffff7effffd05, &(0x7f00000001c0)) fcntl$auto(r1, 0x5, 0xffffffffffffffff) read$auto_hwsim_simulate_radar_(r1, &(0x7f0000000040)=""/54, 0x36) 7m34.369281399s ago: executing program 0 (id=3202): waitid$auto(0x8, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0x5, 0x98, 0x10, @_timer={0x0, 0x2, @sival_int=0x7, 0x2}}}, 0x3, &(0x7f0000000180)={{0xfffffffffffffff9, 0x80}, {0x2, 0x6}, 0x4, 0x8, 0x1, 0x3, 0x0, 0x8000, 0x800000080000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0xf}) (async) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), r1) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)=ANY=[@ANYBLOB="20105d9d29a9ead3c2adb3d2baeebc3548e1cbaa739c03918195761755f1496929dc69926ad81b974ca1e1a5dbe06196141d2ef94fc63fa6c9119f4f94527c8e958f076d8686ac491ae5939dc1c7af723c5cf45212aaedc2a1475c819685a6ef71a98b0cd63aab828a771d97fdc16c66faa39605a73897d354bfc3501c063dd930dc5dc87c00000000ef1ef48c4f970ebad39f0e6bfe8d5ca2f2c4c3121e7fb234fb204f02b4269d105afef04af9eb710ebe372def", @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbdf25010000000c0001800800040007000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x10) (async) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) (async) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) (async) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31) mmap$auto(0x0, 0x1, 0xfd5, 0x12, r3, 0x0) (async) ioctl$auto_USBDEVFS_CLEAR_HALT(r3, 0x80045515, &(0x7f0000000040)=0x6ae) (async) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r4, 0x4008af25, 0x0) (async) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) (async) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6, "551e7285968d8e86bd4794a0e875ee9f7b35db28d0a7e72b7a19039c336389cb57a05ba0582cc612c6c0be4beb4cc54d8337d40c93638ba34c4a0435c32a206e808194584d8c359d418662d18943a5e3c6234e712a096205457b56f0a1e5d4d19835696295a54f38117d9d751e23b5fb61daa5a6b2c75148106dc167a20061e3fe55cc53ffadf62b0945da4b27515a0102a8d2d002a842362b4744b8972a5e11e8a6aab89c7b85947f3901d696d459641aa7e6b89b73387ec5fa2d2af6c992213d82c5774c4bcd4187585bcf652af094e988e75002e01f607abf5e25ae0f5548fd13175b681fc059c1f9160aef893bae78cf6cf62c30fa3f0c5c60cbe383a9c0cc1289519b0c7cff81cc3b4fec739fad19c662b0f98d607b61d825d10e2dd3b27b0f7a6b1adc5a452f344c39da5f086ea7c5d99674ca69c4f5635776e67c151bad72f906cd65231da3a55d6056e23b00686723714fabd752f3e2c86dafdee9d379230c0abeabfde9cf88cae099f3ccc76ea7e64a3734ced5ffe749a8012db53ad4d6a5e347bdd83bb409c1bdb762f4aba145df74833d73ccd583797d4fb4ed3e0c7c29d502aacaef02e114d9e60ca6b0bcb28f825f5d49e94ccd2f830933c39a3ba3782505453e3de872ad8da84a6a22aaa62970428bb9a95d1817dbeeded1c53c5d508dea6cc53d80153b05f954c263278bb9c8bc02f3b1805dd9299dc8b97ebff0165d615ba7bf5ce8c490f4dd273642a18267b0a61a594cb1d608f3dffb292991ea32bb647a6f9b951f283e118dc73b45843b5aa883410e402e3bec9ba889ec237462042cedaed761cca0c3b7058d3ffc276c9a75e18b79804f4e21650d911edbedb9fedd31959a8783b1e39d7d6408554bddb2a5d67703d225fe4422bf2367ca483e77fe479495be3235f4c77b3872a9e33946d2602486b83e84e7d8d1742d369e2d00b9dbb552385502c0f597b3615bed54de65af106b58d2b6bebbdd3fe625152527af965b67e9424da7be2e2574e1492aed568d4faaa9da508e0a2e687876fa291e38b7c3ef38643e2c49e0d46d0f2d53352da2f184c4ced2305865ab0ad1435644419773ea82336ffdf62dd325a6a8b2d199d96dba8a13bb5a86ff65b80818ceb37ee8a2b2a8813b33e474e5b110e1ed13dbc4f52efabbce38935a8ada53a0ed5a1a01453a254a1dc528492159591aa192ff6cfa0b372caf236c78d1a0c94dc37916746358b4cf3cc1c0132657818ce6465e58936dbf5991dfb74ff97382c066ba0ceb06ac4f0c005e4c9166e94161bc08e1c23df7ed3419b10ae229aa6bafb19e6af003c9e319956723d839dc50a7edd8d80bce971ba504e0aac811d76e65acffdc4f7e9836396ba98b824be6cc704c59f5849642b191437a5cf902fc1ac491e8c59241586c6791b282b5cfae57eb7e6792048c4769b5b3f21987ec5097e530fd001da5d2999db4ded708225e9a53a2b48d2be3401a063da3c19168769eccaef710d7c2e06818bb05c4a9aa0ce2785a5a6d2846bac9836f1905a9b042029dcc59d918450b6affb522fbf78116941c5cef4ecb82a2134ee8e67ea6091170b67bfc3abec9e2cfc8208d4ba3bb732230fe6a9470c1152ebdc31bbce93cb742b4484bc1cef4298ce897a36c7e8b3ef8bd1b0e3d4dfa46da8bf89b06d67d8a5da465e8f68f999ec38ef8d1b7972125d2d8492680f6698419313afb74b5f715c90aa5ca0a6ea5561acd89a25d0fd066234b1752d6535251be347d8e69afea162f0ae84aa08a1a5475e6860af5956babe0530b6349e918fa97f14e6a83f7e2054c85ec37424757c49c6b76a889cde8473eebc495ac1088fda54f5c70bb17ef4873bf7b524ae892cd8267adfcd1e7054ac0c8b904855f816cbab8a6c5332d2221060b97931130187e1f07b0b9fad917c06f56d3f9fbca9d0ad93c300d88a6025359eb609e86c2b604d6834cde1351ccb0ba238715d6a77953f58b23a78db05bc38cf1e47d5336226a966af0a88fa19b4d992fc82310b7fceee45a202bfdf759dedee618361082881f91f85020e5282fd6a4ff376455f09bd1ca73b16549"}, 0x6, 0x3, 0xff) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r5 = socket(0xa, 0x1, 0x84) getsockopt$auto(r5, 0x84, 0x3, 0x0, 0x0) (async) r6 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r6, 0x0, 0xfffffdf1) (async) linkat$auto(r6, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x154) (async) open(&(0x7f0000000380)='./file0/file0\x00', 0x22240, 0x108) mprotect$auto(0x0, 0x8000000000000001, 0x8) (async) prctl$auto(0x1000000001a, 0x1, 0x9, 0x7, 0x32) (async) mmap$auto(0x9, 0x2020007, 0x8000000000000203, 0x40000000000eb2, 0xffffffffffffffff, 0x8000) 7m32.337129726s ago: executing program 0 (id=3209): mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0x8000000000000eb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) socket(0x1d, 0x2, 0x6) r0 = socket(0x2, 0x1, 0x0) memfd_create$auto(0x0, 0x19) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1, 0xfd}, 0x6a) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x6}, 0x1, 0x0, 0x3, 0xa}, 0x8}, 0x5, 0xffb) mmap$auto(0x0, 0x200, 0xdd, 0x13, 0x2, 0x8800) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x80302, 0x0) ioctl$auto_SW_SYNC_IOC_INC(r2, 0x40045701, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x2100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r3 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000000), 0x20140, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/pcm0p/oss\x00', 0x101000, 0x0) ioctl$auto_IOCTL_STOP_ACCEL_DEV(r3, 0x40096101, &(0x7f0000000240)={@padding, 0xfe}) socket(0xa, 0x1, 0x100) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x2, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc40, 0x0) write$auto(0xca, &(0x7f00000001c0)='\x04>\x01\n\xfb\xff\xf6OL\xe8\xbe\x94\xf2\xa2\x00\x00', 0x2d9) socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x100, 0x20000000ffb, 0x8000000008012, 0x3, 0x0) mmap$auto(0x4, 0x2000a, 0x4000000000df, 0xeb1, 0x401, 0x7ffc) 7m31.126583402s ago: executing program 0 (id=3213): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = socket(0x2, 0x1, 0x0) recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x4, &(0x7f0000000280)={0x0, 0x4040009}, 0xc, &(0x7f0000000000), 0x16, 0x8}, 0x5a55}, 0xd, 0x3, 0x0) (async) mmap$auto(0x8, 0x4000000001, 0x4000000000df, 0x40eb1, r0, 0x300000000000) (async) r1 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='p'], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) (async) r2 = socketpair$auto(0x1e, 0x5, 0x9, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) (async) shmdt$auto(0x0) (async) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x820}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r3, @ANYBLOB="000328bd7000fedbdf2505000000080019000b00000006001d00f7ff00000500120005000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r4, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000400)={0x38, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0x18, 0x4, 0x0, 0x1, [@nested={0x14, 0x2a, 0x0, 0x1, [@nested={0x8, 0xcc, 0x0, 0x1, [@generic="85f65a9a"]}, @typed={0x8, 0x2, 0x0, 0x0, @uid}]}]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x4000) getrandom$auto(0x0, 0x6000000, 0x3) (async) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x6, 0x4) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptys5\x00', 0x2000, 0x0) ioctl$auto_TIOCSETD2(r6, 0x5423, 0x0) ioctl$auto(0x3, 0x540b, 0x1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 7m15.833281103s ago: executing program 35 (id=3213): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = socket(0x2, 0x1, 0x0) recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x4, &(0x7f0000000280)={0x0, 0x4040009}, 0xc, &(0x7f0000000000), 0x16, 0x8}, 0x5a55}, 0xd, 0x3, 0x0) (async) mmap$auto(0x8, 0x4000000001, 0x4000000000df, 0x40eb1, r0, 0x300000000000) (async) r1 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='p'], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) (async) r2 = socketpair$auto(0x1e, 0x5, 0x9, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) (async) shmdt$auto(0x0) (async) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x820}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r3, @ANYBLOB="000328bd7000fedbdf2505000000080019000b00000006001d00f7ff00000500120005000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r4, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000400)={0x38, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0x18, 0x4, 0x0, 0x1, [@nested={0x14, 0x2a, 0x0, 0x1, [@nested={0x8, 0xcc, 0x0, 0x1, [@generic="85f65a9a"]}, @typed={0x8, 0x2, 0x0, 0x0, @uid}]}]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x4000) getrandom$auto(0x0, 0x6000000, 0x3) (async) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x6, 0x4) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptys5\x00', 0x2000, 0x0) ioctl$auto_TIOCSETD2(r6, 0x5423, 0x0) ioctl$auto(0x3, 0x540b, 0x1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 3m50.606518366s ago: executing program 1 (id=3769): madvise$auto_MADV_FREE(0x135a, 0xc67f, 0x8) madvise$auto_MADV_FREE(0x0, 0x80000001, 0x8) madvise$auto_MADV_FREE(0x6, 0x3, 0x8) madvise$auto_MADV_FREE(0x5, 0x1, 0x8) madvise$auto_MADV_FREE(0x4, 0x9, 0x8) madvise$auto_MADV_FREE(0x1, 0x6, 0x8) madvise$auto_MADV_FREE(0x4, 0x10000, 0x8) madvise$auto_MADV_FREE(0x5, 0x5, 0x8) madvise$auto_MADV_FREE(0x9, 0x4, 0x8) madvise$auto_MADV_FREE(0x3ff, 0x2, 0x8) madvise$auto_MADV_FREE(0x8000, 0x3, 0x8) madvise$auto_MADV_FREE(0x79b, 0x6, 0x8) madvise$auto_MADV_FREE(0x9, 0x1, 0x8) madvise$auto_MADV_FREE(0xfffffffffffffffd, 0x6, 0x8) madvise$auto_MADV_FREE(0x1, 0x1, 0x8) madvise$auto_MADV_FREE(0xfffffffffffffff8, 0x8, 0x8) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x450282, 0x0) r1 = ioctl$auto_TUNSETGROUP(r0, 0x400454ce, &(0x7f0000000040)=0x2) madvise$auto_MADV_FREE(0x3b, 0xffff, 0x8) madvise$auto_MADV_FREE(0xeefe, 0x8, 0x8) madvise$auto_MADV_FREE(0x6, 0x0, 0x8) madvise$auto_MADV_FREE(0x9, 0x6, 0x8) madvise$auto_MADV_FREE(0x7, 0xb, 0x8) madvise$auto_MADV_FREE(0x400, 0x2036513, 0x8) pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD_GROUP(r1, 0x0, &(0x7f0000000080)={@_si_pad}, 0x2) madvise$auto_MADV_FREE(0x7, 0x101, 0x8) madvise$auto_MADV_FREE(0x1000, 0x2, 0x8) madvise$auto_MADV_FREE(0xd8, 0x3, 0x8) madvise$auto_MADV_FREE(0x7f, 0x100, 0x8) madvise$auto_MADV_FREE(0x80000000, 0x10001, 0x8) 3m50.303439327s ago: executing program 1 (id=3772): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/state\x00', 0x604800, 0x0) read$auto(r0, &(0x7f0000000240)='$\x00', 0xb) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/rose3/statistics/rx_frame_errors\x00', 0x0, 0x0) sendfile$auto(r1, r1, 0x0, 0x2) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4106, 0x100a) 3m49.952224832s ago: executing program 1 (id=3774): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0xb2) r1 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x4, 0x8000000000001, 0x5}, 0x9, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100cda4429629bd7100f9db"], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) (async) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000001100)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001200)=ANY=[], 0x340}, 0x1, 0x0, 0x0, 0x4000}, 0x4084) (async) landlock_restrict_self$auto(r1, 0x7) (async, rerun: 32) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/dbroot\x00', 0x109103, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdb, 0x9b72, 0x2, 0x8000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) socket(0x2b, 0x1, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) statx$auto(r4, 0x0, 0x6d7, 0x80000008, 0x0) mlock$auto(0x36a, 0xfffffffffffffffd) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) (async) listmount$auto(&(0x7f0000000080)={0x1d, @inferred=r4, 0x6, 0xa17, 0x20000000008}, 0x0, 0x10, 0x1) (async) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) mlock$auto(0x81, 0xffff) (async) r5 = gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) (async) kill$auto(r5, 0x11) (async) epoll_pwait$auto(0xffffffffffffffff, 0x0, 0x80000001, 0x3ff, &(0x7f0000000080)={0x4}, 0x8) r6 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)=ANY=[@ANYRES16=r2, @ANYRES16=r6, @ANYBLOB="010028a4950000000000000000001400010000000000000000000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async, rerun: 64) tgkill$auto(r5, r5, 0x0) (async, rerun: 64) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000001340)={&(0x7f0000001180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x80) 3m49.341269281s ago: executing program 1 (id=3777): mmap$auto(0xff, 0x2020009, 0x3, 0x9b, 0xfffffffffffffffa, 0x8) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) ioctl$auto_VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x5) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) semctl$auto(0x1, 0xfffffffe, 0x3, 0x5) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r0, 0x0, 0xc3) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010027bd7000fddbdf2560000000080003", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) fadvise64$auto_POSIX_FADV_NOREUSE(r2, 0x2, 0xb, 0x5) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r5) read$auto(r5, &(0x7f0000000000)='\x00', 0x91e2) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MACSEC_CMD_DEL_RXSC(r6, &(0x7f0000007500)={0x0, 0x0, &(0x7f00000074c0)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@MACSEC_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) 3m45.347528928s ago: executing program 1 (id=3783): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) (async) r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/oom_score\x00', 0x0, 0x0) semctl$auto_IPC_INFO(0x3, 0x3, 0x3, 0x3) (async) readv$auto(r0, &(0x7f00000001c0)={0x0, 0xb}, 0x7) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x9}, 0x7) 3m44.104955648s ago: executing program 1 (id=3786): socket(0x18, 0x2, 0xfffffffd) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000026d00)='/dev/dri/card0\x00', 0x103883, 0x0) mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x3, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x115) copy_file_range$auto(r1, 0x0, r2, 0x0, 0x2400000000, 0x0) unshare$auto(0x8000000) r3 = openat$auto_ptdump_curknl_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x143900, 0x0) pread64$auto(r3, 0x0, 0x9, 0x1) shmget$auto(0x0, 0x8000000000000000, 0x8007e) socket(0x1d, 0x3, 0x80011) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) ioctl$auto(r0, 0x64c9, r0) 3m28.94141375s ago: executing program 36 (id=3786): socket(0x18, 0x2, 0xfffffffd) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000026d00)='/dev/dri/card0\x00', 0x103883, 0x0) mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x3, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x115) copy_file_range$auto(r1, 0x0, r2, 0x0, 0x2400000000, 0x0) unshare$auto(0x8000000) r3 = openat$auto_ptdump_curknl_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x143900, 0x0) pread64$auto(r3, 0x0, 0x9, 0x1) shmget$auto(0x0, 0x8000000000000000, 0x8007e) socket(0x1d, 0x3, 0x80011) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) ioctl$auto(r0, 0x64c9, r0) 17.554996415s ago: executing program 5 (id=4374): ioctl$auto(0xc9, 0x100000002, 0x4000000005c8d) (async) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6) keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) (async) keyctl$auto_KEY_REQKEY_DEFL_NO_CHANGE(0x4, 0xffffffffffffffff, 0x0, 0x0, 0xf0) r0 = socketcall$auto(0x6, &(0x7f0000000000)=0xfffffffffffff801) (async) r1 = memfd_secret$auto(0x0) fcntl$auto_F_UNLCK(r1, 0x8, 0x2) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x8000) r2 = semctl$auto_GETPID(0x6, 0x6, 0xb, 0x6) prctl$auto(0x3e, 0x1, r2, 0x2000000000000001, 0x0) (async) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000001100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000010c0)={&(0x7f0000000080)={0x1020, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SUPPORTED_COMMANDS={0x1004, 0x19, 0x0, 0x1, [@generic="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"]}, @NL802154_ATTR_PID={0x8, 0x1c, r2}]}, 0x1020}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async) keyctl$auto(0x2, 0x0, 0x0, 0x3, 0x3ff) 16.744987328s ago: executing program 5 (id=4378): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x450481, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_CQM(r0, 0x0, 0x40800) getpriority$auto_PRIO_USER(0x2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/netfilter/nf_conntrack_log_invalid\x00', 0x101202, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r1 = socket$nl_generic(0x11, 0x3, 0x10) bind$auto(r1, &(0x7f0000000200)=@generic={0x11, "0000100000000000929e006300"}, 0x80) getsockname$auto(0x3, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r2 = socket(0xa, 0x1, 0x84) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000002940)="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", 0x102) ioctl$auto_UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000000c0)={r3, 0x80000001, 0x3763, 0x3ac3}) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000140), r2) sendmsg$auto_NL802154_CMD_ABORT_SCAN(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20006001}, 0x4001) ioctl$auto_XFS_IOC_FREESP(0xffffffffffffffff, 0x4030580b, &(0x7f0000000080)={0x1, 0x1ff, 0x8000, 0x1, 0x7f, 0x0}) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="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"], 0x344}, 0x1, 0x0, 0x0, 0x20008081}, 0x40000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fd038004001298"], 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) madvise$auto(0x0, 0xffffffffffff0009, 0x19) 15.19173081s ago: executing program 6 (id=4381): r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004f40)={&(0x7f0000004f80)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="a95f28bd7000f140fd2215816b3204000280"], 0x18}, 0x1, 0x0, 0x0, 0x20000800}, 0x14) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/iosched/write_expire\x00', 0x20681, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x28000000000000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0x20499d, 0x9) capset$auto(&(0x7f0000000200)={0x20080522}, 0x0) semctl$auto_GETPID(0x0, 0x3, 0xb, 0x9) socket(0x2, 0x3, 0xa) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) name_to_handle_at$auto(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/blkio.bfq.dequeue\x00', 0x0, &(0x7f0000001180), 0x2) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/binder1\x00', 0x4000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) keyctl$auto_KEY_SPEC_SESSION_KEYRING(0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffd) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x4, 0x6, 0x2}, 0x8000, 0x0, 0x6) capset$auto(0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x100fe) io_submit$auto(0x0, 0xfffffffffffffffd, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x261c2, 0x184) 14.677946772s ago: executing program 8 (id=4382): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r0 = socketcall$auto(0x8000, 0x0) (async) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0xeb) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) (async) fallocate$auto(r1, 0x1, 0x820, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14da02, 0x0) (async, rerun: 32) mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (rerun: 32) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) unshare$auto(0x40000080) (async) memfd_secret$auto(0x3) (async) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x201, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (async, rerun: 32) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2903c2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) 14.673588521s ago: executing program 5 (id=4383): write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000000140)="09bdf9beb3c7947ece9c080900000000000000222316531d4e25ccced3fbcfce69ca7b18c2902c9970ae8f3616e2df3fd0943a43457d3c0140e5fe2af4d54e922060e7f5cedb13784ca80afa301f95499b40019ff55da8a18af3989591689b9838ad7379388a4f19e348795b9f8f25fb98ab643cff63a941c6e7ead5f4b083182c4b080060f269", 0x87) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/kexec_crash_size\x00', 0x302, 0x0) mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000029, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x16240, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5') socket(0x10, 0x2, 0x0) fallocate$auto(0x3, 0x0, 0xe, 0x8ec5) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) socket(0x18, 0x80000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(r1, &(0x7f0000001240)={{&(0x7f0000000100)="b0e81c56217c8709c9d167467fda06bd7007c9561a06bdc18f3b10df635f5fa0b6be2161158ad003c0a4128ec57a580e3fe218641ebda1a339391cf51c066dde2c4f71b97fa7bed4fc1b983bc872d063d780901b76c9a88e03a2ac02ff4c4935f854272e47316754d93cacc333d401f6", 0x9d26, &(0x7f00000011c0)={&(0x7f00000001c0)="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", 0x9}, 0xfffffffffffff801, &(0x7f0000001200), 0x23, 0x2}, 0x2}, 0x7, 0xd529) writev$auto(0xca, &(0x7f0000000080)={&(0x7f00000000c0), 0x2}, 0x2000000000000003) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x6) write$auto(0x3, 0x0, 0x100086) 13.024439223s ago: executing program 6 (id=4386): close_range$auto(0x0, 0xfffffffffffff000, 0x2) io_uring_setup$auto(0x59, &(0x7f0000000000)={0x3, 0x3ff, 0x2, 0x1, 0x2, 0xa, 0xffffffffffffffff, [], {0x8, 0x1, 0x1, 0x8998d5c, 0x8000100, 0x581, 0x101, 0x1000006, 0xffffffffffffffff}, {0xbfc7, 0x1, 0x52, 0x8, 0x3, 0x3d, 0x8, 0x7, 0x100000000}}) r0 = open(&(0x7f0000000080)='./bus\x00', 0x64040, 0xc0) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) socket(0xa, 0x1, 0x84) r1 = socket(0xa, 0x801, 0x84) capget$auto(0x0, 0xfffffffffffffffe) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x3a) open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) setsockopt$auto(r1, 0x10000000084, 0x0, 0x0, 0x10) fcntl$auto(r0, 0x0, 0xa8) 12.490381631s ago: executing program 6 (id=4387): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="67d89f3ca5c2dc71ec503091b9b4f15aabe261d481323dcf70ebf79893725bb80d28ade464bca611250b8e875ae41e9f690f7581e70a405e60cc662988ad3f21e0ecbe9512ea3cfc84c4affeb8781b41382e330fddb24eca3123ca8542fde6ea21781a76980760539c50a1dee1b4fe7d08b74f9db80c8f822a1d6886200c8c16", @ANYRES16=r1, @ANYBLOB="01002cbd7000fedbdf25040000000400"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) mmap$auto(0xffffffffffffffff, 0x40000c, 0x45bd, 0x1c, 0x2, 0x8000) r2 = epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0x3, 0x0, 0x5c8) setfsgid$auto(0x0) keyctl$auto_KEY_SPEC_THREAD_KEYRING(0xe7, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = set_tid_address$auto(&(0x7f00000004c0)=0x9) r5 = fcntl$getown(r2, 0x9) msgctl$auto_MSG_STAT_ANY(0xff, 0xd, &(0x7f0000000500)={{0x5, 0x0, 0x0, 0x8, 0x7, 0x80000001, 0x8001}, &(0x7f0000000100)=0x4, &(0x7f0000000140)=0x2, 0xffff, 0x0, 0x0, 0x100000001, 0xc85, 0x7, 0x7, 0x54f, @inferred=r4, @inferred=r5}) statmount$auto(0x0, &(0x7f0000000180)={0x5, 0xfffffffe, 0x8, 0x4, 0x4002, 0x0, 0x3ffde, 0x400, 0x3, 0x9, 0x6, 0x6, 0x4, 0x11ffffffffffb, 0xb2, 0x2, 0xfe74, 0x10, 0x80, 0x800000029f, 0x8000, 0x1, 0x1, 0x205, 0x9, 0xbca7, 0x4, 0x0, 0x0, 0x0, 0x0, [0x2, 0x6, 0x0, 0x40000000005, 0x0, 0x0, 0x10004, 0x0, 0x0, 0x3, 0x2, 0x0, 0x8, 0xfffffffffffffc01, 0x7fffffff, 0xfffffffffffffffb, 0xe, 0x9, 0x2000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000010000000000, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x20000000000000, 0xfffffffffffffffd, 0x7, 0x8, 0x400, 0x94, 0x9, 0x4, 0xe17, 0x0, 0x6]}, 0x1fe, 0x1) r6 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, 0x0) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x480001, 0x0) sendmsg$auto_IEEE802154_DISASSOCIATE_REQ(r2, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000379ede783706ff3c98ee2cf25276f3649ec394a5e121eb5922951c7893539541a66b28415b30f28a528f45c88dc61f7f6037ce8f96e98ffe25522e0051e66667e21290222c505cd3948739b857b8e605eff86809f336851a63a7dc22016011500b0b3f21120875700f9298ffa79fb60578b231bbfa4bd7846622638754bcca00d2bab314ff665361ccfb37e79d7a787a18749f4dbf2d6c5c0ebdb8cc29fc8071601ae6a88b073b8f961c4f3a4437fd26f9dc920000000000", @ANYRES16=0x0, @ANYBLOB="01002cbd70000c00000003000000050025", @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4893}, 0x8040) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xb, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x4000000000000000, 0xd, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r7, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) timerfd_gettime$auto(0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x5a99, 0xffffffffffffffff, 0x28000) madvise$auto(0x0, 0x2003f0, 0x15) ioctl$auto__ctl_fops_dm_ioctl(r6, 0xfffffffffffffd03, &(0x7f00000001c0)) 12.357554507s ago: executing program 8 (id=4388): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x23, 0x5, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) pidfd_send_signal$auto_PIDFD_SELF_THREAD(0xffffffffffffd8ef, 0x0, 0x0, 0x1) ioctl$auto_XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x9, 0x81, 0xa006, 0x401}) r2 = socket(0x11, 0x80003, 0x300) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000140), r2) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/time_for_children\x00') sendmsg$auto_NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040025bd7000fbdbdf250b0000000c001700000900000000000008001d00", @ANYRES32=r4, @ANYBLOB="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"], 0x220}}, 0x4880) socket(0x10, 0x2, 0x0) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100f9020000fbdbdf250100000008000b00ac141420080001"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = socket(0x11, 0x3, 0x9) socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) readv$auto(0x3, 0x0, 0x1) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r5, @ANYRES8=r6], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r7, &(0x7f0000000000)='-\x00', 0xfdef) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r1, 0x0, 0x4008000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffff004, 0x2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x1, 0x106) 12.07254534s ago: executing program 5 (id=4389): io_uring_setup$auto(0x6, 0x0) r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x100000000020204, 0x1ff, 0xebd, r0, 0x7) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x12}}, 0x54) getsockopt$auto(r0, 0x84, 0x85, 0x0, &(0x7f0000000000)=0x7ffe) unshare$auto(0x40000080) r1 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) write$auto_ftrace_enable_fops_trace_events(0xffffffffffffffff, &(0x7f0000000000)="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", 0x28f) mount$auto(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='cifs\x00', 0x8002, &(0x7f00000001c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x2000, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, &(0x7f00000002c0)=0x3) ioctl$auto_MEMISLOCKED(r3, 0x80084d17, &(0x7f0000000080)={0xfffffffc, 0x4f90}) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), r2) sendmsg$auto_NL80211_CMD_SET_PMK(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="34c9f300", @ANYRES16=r4, @ANYBLOB="04002bbd7000fcdbdf257b000000080037000b00000005002001090000000c0099007f0000000000000004004400"], 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) r5 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f00000003c0), 0x800, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000200)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0508722dbd5d00fbdfdf25760000"], 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x4008040) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) modify_ldt$auto(0x1, &(0x7f00000001c0), 0x10) r6 = socket(0xa, 0x1, 0x100) setsockopt$auto(r6, 0x6, 0xa, 0x0, 0xfb3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x40802, 0x0) socket(0xa, 0x5, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000000c0)={[0x1ff, 0x8, 0xd, 0x7d48, 0x948b, 0x4, 0x15f4da0c, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x4, 0x5, 0x2, 0x1]}, 0x0) ioctl$auto(0xffffffffffffffff, 0x1fffe000, r5) 11.723265857s ago: executing program 8 (id=4390): write$auto(0xffffffffffffffff, 0x0, 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x1, 0x84) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) fanotify_mark$auto(0x0, 0x105, 0x8009, 0xffffffffffffffff, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) io_uring_register$auto(0xffffffffffffffff, 0x18, 0x0, 0x9) timer_create$auto(0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4890) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x23) read$auto_kernfs_file_fops_kernfs_internal(r4, 0x0, 0x0) mmap$auto(0x6, 0x4, 0x4000000000dd, 0x40eb1, r4, 0x300000000000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000020c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MM_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r6, 0x301, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44808}, 0x2004c894) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mlock$auto(0xfbea, 0x7fffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 9.493208869s ago: executing program 7 (id=4391): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) epoll_ctl$auto(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket(0x2, 0x1, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0xce1, 0x0) ioctl$auto(0x1, 0x890b, 0x8) ioctl$auto_EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0xb) sendmsg$auto_MACSEC_CMD_UPD_RXSA(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0xd0) socket(0x10, 0x2, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0x83) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x8001, 0x2) read$auto_proc_pid_maps_operations_internal(r0, &(0x7f0000000900)=""/4096, 0x1000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x4, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x1, 0xfffffffffffff001, 0xe) madvise$auto(0x0, 0x200007, 0x19) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/system/cpu/cpu0/topology/package_cpus\x00', 0x0, 0x0) read$auto(r1, &(0x7f0000000100)='\xcb%)\x00', 0x7) 9.214719193s ago: executing program 6 (id=4392): r0 = socket(0x10, 0x802, 0x0) mmap$auto(0x1, 0x6, 0x400000, 0x40ebd, 0x401, 0x300000000000) (async) sendmmsg$auto(0x3, 0x0, 0x2, 0x1) (async) r1 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r1, 0x3) syz_clone3(&(0x7f0000000200)={0x186800080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket(0xa, 0x5, 0x0) getsockopt$auto(r3, 0x84, 0x0, &(0x7f0000000000)='\xc8\xfdV%A$\\\xf7\\\x00', &(0x7f0000000040)=0x1008) close_range$auto(r2, r0, 0x9) (async) ioctl$auto_SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000040)="27c30f653495d2bbce339047c86c92fccf6e7bd7e666f882abc4a52968881710502a066373be241c6c88095c729e0d5e96db4ddf7f9bc1db25659b5de1eef0b5d70c077f16c3d92a641fe4d7d7f3df9c5daa64ce82597dbb4c4117f76ed945dcdf57557e6212f62f6c420a7748e1c5ff2c2c610635b7d8b4bbf24a2f8a50a0b96ded038897c9fc56ddbdcbff63c09fca06d3010fe123823c71c7a9a862e23321a06f647c275eaedcf8b472fd63d4e4ec65") landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x401, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0x2) kill$auto(0x0, 0x21) (async) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r4, 0x8000) (async) ioctl$auto_BLKRRPART(r4, 0x125f, 0x0) (async, rerun: 32) r5 = socket(0x10, 0x2, 0x0) (async, rerun: 32) r6 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r5, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fddbdb250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x810) 8.407030947s ago: executing program 8 (id=4393): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0xb2) (async) r1 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x4, 0x8000000000001, 0x5}, 0x9, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100cda4429629bd7100f9db"], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) (async) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000001100)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001200)=ANY=[], 0x340}, 0x1, 0x0, 0x0, 0x4000}, 0x4084) (async) landlock_restrict_self$auto(r1, 0x7) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/dbroot\x00', 0x109103, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdb, 0x9b72, 0x2, 0x8000) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) socket(0x2b, 0x1, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) statx$auto(r4, 0x0, 0x6d7, 0x80000008, 0x0) (async) mlock$auto(0x36a, 0xfffffffffffffffd) (async) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) listmount$auto(&(0x7f0000000080)={0x1d, @inferred=r4, 0x6, 0xa17, 0x20000000008}, 0x0, 0x10, 0x1) (async) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) (async) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) (async) mlock$auto(0x81, 0xffff) (async) r5 = gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) (async) kill$auto(r5, 0x11) (async) epoll_pwait$auto(0xffffffffffffffff, 0x0, 0x80000001, 0x3ff, &(0x7f0000000080)={0x4}, 0x8) (async) r6 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) bpf$auto(0x0, &(0x7f0000000000)=@token_create={0x10}, 0xa3) sendmsg$auto_SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)=ANY=[@ANYRES16=r2, @ANYRES16=r6, @ANYBLOB="010028a4950000000000000000001400010000000000000000000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000001340)={&(0x7f0000001180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x80) 7.898263271s ago: executing program 7 (id=4394): r0 = socket(0x2, 0x1, 0x0) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xa, 0x0, 0x10000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) (async) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r0, 0x0, 0x10) (async) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x11, 0x3, 0x7) (async) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) fremovexattr$auto(r1, &(0x7f0000000640)='syst%m.posi\x96_acl_access\x00+\xe6P/CR\xf6\x88\xe3(\v\xf7e\xb1Z)\x99`\x9f\xf2\x8d\\\x0f\xaf\xdb\xdc\xdbj[(\xcf\xc6\xa3\x8f\xe4\xd2wi\xc2\xffEn\x8d\xed \x91\x95\xbf\x15\xaa@\xbe\xc6M\x16\x06\xa8\xc9\xa9\x02\xb1\xc0\xc2\x1dR\"\x8c\xd7\bL\x946\x10\x17y\va\xf3s\xd8\x86C\x1a\x1b\xf3\x854\xe3\xd1\xb6\xdc~\xfd\xc1\xdb\xca &\xe4\xdau\xbcW\x1ap\xee\x84\xa6\xd5\xbf\x1d\xc4P\xdf\xfc\x8d\xef\x94\x00\xb5&\xbc|\x87\xfc\x1d\xf7L\':P\xb3\xd0~h\x9f\xd2P\xcaGuir\xf3\xcc\x10\xdb68\xa1;\xb6\xd2\xa4U\x8a\xc7\xacF\xafRy\xfeL\xe1(\x87\'\xc9\xcfl\xd1\r\xad\xa1l\xc3\xc0P\xb2\xd5R\xd6[\t\x89\x02\xe5.\xddr\xf7\x81F\x19\x0fN\xb1\x81\xe63\x0f\x9e\x7f\x1e\xb3oN\xae\x109\x9bf6\xf1\x03`\xad\xbcX\x93\xc2u\x97Yg\xdf\xaa\xf1M\xf0eP\xfb4zR)\x15\xc7o\x82\xa5E\xdc;S\x17Y\x8cF\x9d\xf9\x8e\v\xe0<:\xb8\xa0Km9\xa2Z\xe4\xbc\xccH\xb6\x18[F$l\xecaDl\xac\xc6\xd9\xb5/x\"\x9b\r\xe7\xb6\xd6\x98\x06n\x14\x00\x9a\x89`\x94Q\x9b\xddU\xc0\x11\x88^\x06\x9d0\xc5}\xf7\xa4\xf8\x0e>\xc2\xf23\xd0\xb0<\xa5\x87L\xa8\xfe\x8e\xf9h\xa9(\xc06\x98\xb4\xad\x12\xd4\x1c\xd4\x9b\x89\xf4\x88y2\x9b\xe1\xa9\xcd\xcdr4\xf6\xb1\xcbT\x88\xa8\x93\x19.\x95\xab\xc1\\\x1b@Z\x86\xa2$[n2par(\xb8O\xf8\xabt\xbb\xaeg\xb4\xef\xbfw/\x11\x93\x9d\x86M\xb3\xed\xe5\xda\x7f\x94C\xdf\xe0\xc4\x1c\x91!\xce\x1d\x7f\xf1\xf44\xfdr\n\xc8\xb7xxJ~\xed\xb745 \xd1Ov\tA\xe6\x9d_\x1f\x15YE\xfa\r\xf0j\x12\xca\xa6B\xf7\xf8\xa5\r5\xc8\xfcr\xc7\x16\x18\xe9AL\t\a\"l') close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) write$auto(0x3, 0x0, 0x7fffffff) (async) r2 = socket(0x2, 0x801, 0x106) setsockopt$auto(r2, 0x6, 0x9, 0x0, 0x3) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) (async) close_range$auto(0x2, 0x8, 0x0) (async) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x80) (async) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000400), r3) sendmsg$auto_IPVS_CMD_ZERO(r3, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000002600)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01002bbd7c00fddbdf2510"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async) syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) gettid() (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x101000, 0x0) 7.753160818s ago: executing program 6 (id=4395): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto_TCFLSH2(r0, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x640, 0x0) ioctl$auto_MON_IOCX_GET(r1, 0x40189206, 0x0) read$auto_mon_fops_binary_mon_bin(r1, 0x0, 0x0) pidfd_open$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x28e40, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) socket(0x1d, 0x80008, 0x7fff) mmap$auto(0x0, 0xe, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) write$auto(0x3, 0x0, 0x100082) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/mm/hugepages/hugepages-1048576kB/nr_overcommit_hugepages\x00', 0x10000, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/inhibited\x00', 0x20b42, 0x0) write$auto(r3, &(0x7f0000000300)='1\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\x06\x00\x00\x00\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\x15\x9aL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0x4) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000100), 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0xffff) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/members\x00', 0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/lapb3/threaded\x00', 0xae841, 0x0) write$auto(r4, &(0x7f00000001c0)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xf0PH\v2 \xa3\x93\x81\xcaB\x8ax\xf7e\xae\xb0\xdc\xf8Hl\x80Q\x14B-\xfbUl\x983\xf5\x0f)\xfdp\x88\'\xa9\xdfS\n\xe4Q0\x9byZ\xce\xce{\x9ev$:\xfe\xe0\xf1]\x10\x8e\t\xd5 A\xdf\xc9', 0x86) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/oom_adj\x00', 0x142, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/max_ptes_none\x00', 0x183042, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) 7.503910959s ago: executing program 5 (id=4396): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r0 = socket(0x23, 0x80805, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) listen$auto(0x3, 0x83) connect$auto(0xffffffffffffffff, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x5b) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000000), 0x7114}, 0x8) open(&(0x7f00000000c0)='./file0\x00', 0x10800, 0x3c7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_l2tp(0x0, r0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r1 = io_uring_setup$auto(0x3, 0x0) socket(0x25, 0x3, 0x6) syz_genetlink_get_family_id$auto_nlbl_unlbl(0x0, r1) socket$nl_generic(0x10, 0x3, 0x10) semctl$auto(0xff, 0xffffff16, 0x11, 0x2) r2 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r2, 0x29, 0x20, 0x0, 0x20) acct$auto(&(0x7f0000000040)='/dev/sda1\x00') mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) socketpair$auto(0x20000001, 0x2, 0x3, 0x0) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) 6.686087626s ago: executing program 8 (id=4397): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x54) r1 = prctl$auto(0x3, 0x1002, 0x0, 0x0, 0xfffffffffffffff7) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f00000006c0)={0x208200700, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) (async) syz_clone3(&(0x7f00000006c0)={0x208200700, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x20100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xae00, 0x0) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xae00, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0x4018aebd, r2) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) (async) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r4, 0x0, 0x9a28) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) bpf$auto(0xa, 0x0, 0x95) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x800, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r0, 0x43403d05, 0x0) (async) ioctl$auto_posix_clock_file_operations_posix_clock(r0, 0x43403d05, 0x0) 6.328986359s ago: executing program 7 (id=4398): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x23, 0x5, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) pidfd_send_signal$auto_PIDFD_SELF_THREAD(0xffffffffffffd8ef, 0x0, 0x0, 0x1) ioctl$auto_XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x9, 0x81, 0xa006, 0x401}) r2 = socket(0x11, 0x80003, 0x300) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000140), r2) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/time_for_children\x00') sendmsg$auto_NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040025bd7000fbdbdf250b0000000c001700000900000000000008001d00", @ANYRES32=r4, @ANYBLOB="f00118802d782d01e46874f8181dfcdbf77d00c19216bb11023f24c92496e4317dd1b760453e8d713a33d71a2d755dd41601dbd0228f42c1673ba78e5ad3279b3ff1dba5dd293db62a60515fdbd5b6147008001d00ff000000743183348746f5d304032ff1de0b1583a6d06ccbfe0ec3ae198a00da5a437110a81dc3c2d7bdbc13b21b87c348cc75bebf79f17e82eb955e33448a0a53c1c445f685b7875451d9115ff1f0898c50b3e3d3f9c41756dd30066b0872ff36727f639a82b7bde2928a98c12c4285353529c974810c88d3c7cae40cdd5114204c5e8e02f84bbb7dfafd2e6a45d55d9b580d25b76797acd4a87d438c1e8313ee5b214f4bcc5a1c64089987d2bb77b18a3f78acf4ebfe6c524839b929e85896f3d7bf69e5d87c7c60d272297b020de938fd43370f8581a2484f103c4a6a37d049e2535aa06bb710d335353abe7358453e9149c83cea801c7ea66c1a77d203ef6ebe03d0fde84dbc2bcca997508da69538d34bbdf3b495b2ad0466e0677c5b4c974d9018c176fce4770cd05a0ccefc80ccbea14f206398daa0ce2f2fb1075130d9019afb2679783e70870f441353b507c27edd69de1164213b8a92546d1f0aa0c5ecfde2232530fa8ae3d3fbcf1a50f2607ea37eb556dc4762fbd9de4d1749c8a0cc6c933ec3e04ee67df4fd4025abfe34e53883728f00c47912f20500260002000000"], 0x220}}, 0x4880) socket(0x10, 0x2, 0x0) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100f9020000fbdbdf250100000008000b00ac141420080001"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = socket(0x11, 0x3, 0x9) socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) readv$auto(0x3, 0x0, 0x1) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r5, @ANYRES8=r6], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r7, &(0x7f0000000000)='-\x00', 0xfdef) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r1, 0x0, 0x4008000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffff004, 0x2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x1, 0x106) 4.443373378s ago: executing program 7 (id=4399): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x100e42, 0x0) write$auto_sg_fops_sg(r0, &(0x7f00000001c0)="bf5b1a8c24000000dbcbc7a996eea7f3804ca6c7591afff6578d2f5f520f687f316ba7327b581cd8d5", 0x29) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) write$auto(r1, &(0x7f0000000340)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x0e\xfa{\x15\x1d\x11\x85o\xf1g\xb7\xb3\xdd\\\xfdG\xa9\x16R\xa4\xe9\xd1\xf4S\x94\xe1\x9c\x88\x1b\xe6.\x11\xa3\xe1\xddi\xb66\xaa\xa3\xc7iB\xc84\x11\xac\xfd\x1a*\xd4a\xfe\x05\x96\x0ec\x12\xea\xd5K\xea\xda\xa3\xfa\xc3\xedr\x17\xa5\x1c\x88{v\xb8\bj\x84\xd8g\x05r\xe7n\x7f^\x9d\xc7V\x92\xb9Z.Uc*K', 0x81) mq_timedreceive$auto(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) setgroups$auto(0xd5d, &(0x7f0000000000)=0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = open(&(0x7f0000000100)='.\x00', 0x595082, 0x0) write$auto(r2, 0x0, 0xfffffdf1) linkat$auto(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) fsetxattr$auto(r2, &(0x7f0000000180)=':\xbf+<\x8a}\x00\xeb\xfa\xe6\x8d\x02\\VD\x04\x00\x00\x00*\x80\xa4\xf4vql\xa9\x05o\xf7\x9e\xfd\xf7\x00\x00\x00\x00H_/Z>n\xf5F\xbf\xd3\xefi\x91\x88\x1daIu7\xef!\xd0\x04\xdes\xfe`\xf5e;4\xbek\xf9\xec%\xbc\xd4\xfc`\xb9\n\xb5\xa5V\x98\x14]\x8a\x03\xd9', 0x0, 0x7bd, 0x1) mprotect$auto(0x0, 0x8000000000000001, 0x8) write$auto(0x3, 0x0, 0xfffffdef) 2.803333552s ago: executing program 7 (id=4400): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/rpc/auth.unix.gid/content\x00', 0x20881, 0x0) write$auto(0x3, 0x0, 0x81) r1 = socket(0x2, 0x1, 0x0) bind$auto(r1, &(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast2, 0x10000001}, 0x6a) socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) unshare$auto(0x40000080) write$auto(r0, 0x0, 0xbcd1) futex$auto(&(0x7f0000000080)=0x2945, 0x3ff, 0x294b, 0x0, 0x0, 0x3) futex$auto(0x0, 0x0, 0x2948, 0x0, 0x0, 0x5) futex$auto(0x0, 0x3, 0x1, 0x0, &(0x7f0000000000)=0x14, 0x2) clock_settime$auto(0xffff418f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x2, 0x1) syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000000c0), r2) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0xa, 0x5, 0x85) r4 = getsockopt$auto(r3, 0x84, 0x86, 0x0, &(0x7f0000000000)=0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2a, 0x2, 0xfffdfffa) syslog$auto(0x9, &(0x7f0000000200)='..\xfd\xadc\x89\xc9\xfd\xb4-lyx\x84 \x06\xdd\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/time\x00') getdents64$auto(r5, 0x0, 0x18) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x5) ioctl$auto(0xffffffffffffffff, 0x4008af03, 0x0) socket(0x11, 0x80003, 0x300) ioctl$auto(0x3, 0x80108907, 0x38) 808.997778ms ago: executing program 8 (id=4401): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_output_bpc_fops_(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/dri/vkms/Virtual-1/output_bpc\x00', 0x48000, 0x0) bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f0000000340)=@batch={0x1987, 0x401, 0x8023, 0x7, 0x0, r0, 0x8001, 0x6}, 0x6a1e) mmap$auto(0x0, 0x7ff, 0x2, 0x40eb1, 0x602, 0x2f) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) close_range$auto(r1, 0x8, 0x0) brk$auto(0x40008000) syslog$auto(0x10000, &(0x7f0000000180)='/dev/snapshot\x00', 0xc0) r4 = fanotify_init$auto(0x5, 0x2000000000002) r5 = open(&(0x7f0000000000)='.\x00', 0xc00, 0x409) fanotify_mark$auto(r4, 0x9, 0x9, 0xffffffffffffffff, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) move_pages$auto(0x0, 0x5, &(0x7f0000000380)=&(0x7f0000000280), &(0x7f00000003c0)=0x1, 0x0, 0x2) r6 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/filesystems\x00', 0x400042, 0x0) pread64$auto(r6, 0x0, 0x800003, 0x270) mlockall$auto(0x7) r7 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000100), 0x202, 0x0) personality$auto(0xfffff032) ppoll$auto(&(0x7f0000001ac0)={r7, 0x9, 0x7}, 0x8, &(0x7f0000001b00)={0xf2, 0x408000000}, &(0x7f00000002c0)={0x10000}, 0x8) mprotect$auto(0x110c230000, 0xa588, 0x6) mremap$auto(0x110c231000, 0x0, 0x101, 0x3, 0x0) move_pages$auto(0x0, 0x9, 0x0, 0x0, 0x0, 0x2) msgctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000000480)={{0x7b0, 0x0, 0x0, 0x8758, 0x0, 0x7, 0xb}, &(0x7f0000000400)=0x9, &(0x7f0000000440)=0x10, 0x1, 0xd80, 0xd, 0x6c4a, 0x8000000000000000, 0x6, 0xa, 0xfff9}) 614.656782ms ago: executing program 6 (id=4402): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = socket(0x10, 0x80002, 0x0) timerfd_settime$auto(r0, 0x3, 0x0, 0x0) bind$auto(r0, &(0x7f0000000000)=@l2tp={0x2, 0x0, @rand_addr=0x64010101}, 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/freezer.state\x00', 0x10b342, 0x0) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x101802, 0x0) ioctl$auto_VHOST_GET_BACKEND_FEATURES2(r2, 0x8008af26, &(0x7f0000000340)=0x4) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/arp\x00', 0x101000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000100)=""/92, 0x5c) pwrite64$auto(r1, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x06\x00\x06\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0x2, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/binder/parameters/stop_on_user_error\x00', 0x2, 0x0) keyctl$auto(0xe, 0x1, 0x0, 0x5eaf, 0x8) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe$auto(&(0x7f0000001480)=0xffffffffffffffff) socket(0x2c, 0x80003, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x3) vmsplice$auto(r5, &(0x7f0000000000)={0x0, 0x7}, 0x5, 0x1) socket(0x28, 0x800, 0x0) sysfs$auto(0x2, 0x10, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto(0xffffffffffffffff, 0x5407, 0x38) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000100)='1', 0x1) 316.586745ms ago: executing program 7 (id=4403): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x800, 0xa) r0 = openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x200, 0x0) read$auto_trace_time_stamp_mode_fops_trace(r0, &(0x7f00000000c0)=""/45, 0x2d) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0xfffffffffffffffd, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) listmount$auto(&(0x7f0000000100)={0x20, @raw, 0xffffffffffffffff}, 0x0, 0xf4240, 0x1) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0x401, 0x200000008000) r2 = socket(0x1d, 0x2, 0x6) getsockname$auto(r2, &(0x7f00000002c0)=@llc={0x1a, 0x323, 0x9f, 0x80, 0x3, 0x1, @random="0696b3781410"}, &(0x7f0000000180)=0x10481) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) prctl$auto_PR_SCHED_CORE_CREATE(0x9, 0x1, 0x0, 0x10, 0xf5) fcntl$auto(0x3, 0x8, 0x9ebfffffffffffff) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="140008", @ANYRES16, @ANYBLOB="010028bd7000fcdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4048c40}, 0x4) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r5, 0x0, 0xfff) r6 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, 0x6) 0s ago: executing program 5 (id=4404): r0 = socket(0xa, 0x801, 0x84) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) fchdir$auto(r1) exit$auto(0x7) pivot_root$auto(&(0x7f0000000040)='..\x00', &(0x7f0000000080)='.\x00') mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r2 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'pimreg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'dvmrp0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_virt_wifi\x00', 0x0}) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$auto_ILA_CMD_DEL(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="000225bd7000fbdbdf2502000000cbfc0300000000000000000008000400", @ANYBLOB="2e94155a31e4e0128bec987305e7eb1b60a4c04fd1e367ef67883517b6718d3e8d0a8a6958d798bb802e51e30433e408054965526965ec888503122274982e7cab5b49ea3eea96b665ca3c754eca854e72e6f52e0a0bb178d8116a120c9b9eb75cd93caa1bff626e4cf8d4b6e9a2fc2180b4d24f5f7475e56ef4cb5145897f9f49ac4b949cb6dd03e9913192e1efa7265715bf9b1e967aa74d9d839384df461aff9643da754b914f9a28b0a420036c00b1ad375c4c3a4ad6771ca93dcdb5baeccf146d", @ANYBLOB="0c000100230300000000000008000400", @ANYRES32=r7, @ANYBLOB="a5180800906b2b34cae871365fc0458531f473f113d8abffcbb839ac44aadea1168d68e546939d03c88429792f47", @ANYRES32=r3, @ANYBLOB="08000400", @ANYRES32=r4, @ANYBLOB="0c00030000000000000000800c000300c60a00000000000008000400", @ANYRES32=r8, @ANYBLOB="0c000300fdffffffffffffff0000070006000000"], 0x84}}, 0x4050) close_range$auto(r0, r0, 0x0) r9 = socket(0x2a, 0x2, 0x1) connect$auto(r9, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x55) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) close_range$auto(0x2, 0x8, 0x13d28000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r10 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r11 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x688a01, 0x0) ioctl$auto_KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, r10) kernel console output (not intermixed with test programs): tering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.238827][T25188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1383.278516][T25188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1383.594248][ T7903] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.669500][T11548] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.696591][T11548] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.802753][ T7903] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.879041][T11548] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.968599][T11548] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1384.616134][ T7903] netdevsim netdevsim1335 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.789766][T11548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1384.848682][T11548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1385.037687][T25353] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3866'. [ 1385.062203][T18394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1385.176261][T18394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1385.705846][ T7903] bridge_slave_1: left allmulticast mode [ 1385.749588][ T7903] bridge_slave_1: left promiscuous mode [ 1385.755456][ T7903] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.841096][T25365] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3829'. [ 1385.888023][T25368] random: crng reseeded on system resumption [ 1385.896734][ T7903] bridge_slave_0: left allmulticast mode [ 1385.916898][T25365] netlink: 21 bytes leftover after parsing attributes in process `syz.8.3829'. [ 1385.947982][ T7903] bridge_slave_0: left promiscuous mode [ 1386.001518][ T7903] bridge0: port 1(bridge_slave_0) entered disabled state [ 1388.688041][T25411] QAT: Invalid ioctl 21531 [ 1389.204440][ T7903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1389.457715][ T7903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1389.562949][T25418] FAULT_INJECTION: forcing a failure. [ 1389.562949][T25418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1389.585817][ T7903] bond0 (unregistering): Released all slaves [ 1389.917855][T25418] CPU: 0 UID: 0 PID: 25418 Comm: syz.5.3878 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1389.917897][T25418] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1389.917907][T25418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1389.917922][T25418] Call Trace: [ 1389.917930][T25418] [ 1389.917940][T25418] dump_stack_lvl+0x16c/0x1f0 [ 1389.917982][T25418] should_fail_ex+0x512/0x640 [ 1389.918014][T25418] _copy_from_user+0x2e/0xd0 [ 1389.918042][T25418] do_sys_name_to_handle+0x205/0x830 [ 1389.918088][T25418] ? __pfx_do_sys_name_to_handle+0x10/0x10 [ 1389.918133][T25418] ? putname+0xf5/0x1a0 [ 1389.918153][T25418] ? putname+0xf5/0x1a0 [ 1389.918179][T25418] __x64_sys_name_to_handle_at+0x2af/0x310 [ 1389.918230][T25418] ? __pfx___x64_sys_name_to_handle_at+0x10/0x10 [ 1389.918280][T25418] do_syscall_64+0xcd/0xf80 [ 1389.918320][T25418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1389.918345][T25418] RIP: 0033:0x7ffa2218f7c9 [ 1389.918365][T25418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1389.918390][T25418] RSP: 002b:00007ffa22f7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 1389.918413][T25418] RAX: ffffffffffffffda RBX: 00007ffa223e6180 RCX: 00007ffa2218f7c9 [ 1389.918430][T25418] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1389.918446][T25418] RBP: 00007ffa22213f91 R08: 0000000000000002 R09: 0000000000000000 [ 1389.918461][T25418] R10: 0000200000001180 R11: 0000000000000246 R12: 0000000000000000 [ 1389.918476][T25418] R13: 00007ffa223e6218 R14: 00007ffa223e6180 R15: 00007ffdfe62e0b8 [ 1389.918507][T25418] [ 1392.407211][ T7903] hsr_slave_0: left promiscuous mode [ 1392.469431][ T7903] hsr_slave_1: left promiscuous mode [ 1392.521186][ T7903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1392.602852][ T7903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1392.667981][ T7903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1392.719718][ T7903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1392.855233][ T7903] veth1_macvtap: left promiscuous mode [ 1392.938115][ T7903] veth0_macvtap: left promiscuous mode [ 1392.988604][ T7903] veth1_vlan: left promiscuous mode [ 1393.027304][ T7903] veth0_vlan: left promiscuous mode [ 1395.725979][ T7903] team0 (unregistering): Port device team_slave_1 removed [ 1395.863747][ T7903] team0 (unregistering): Port device team_slave_0 removed [ 1397.684310][T25509] netlink: Unknown NAT attribute (type=262, max=9) [ 1398.260912][T25523] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1401.607377][T25588] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3909'. [ 1402.092525][T25596] size and base must be multiples of 4 kiB [ 1402.154405][T25596] CPU: 0 UID: 0 PID: 25596 Comm: syz.7.3911 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1402.154446][T25596] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1402.154455][T25596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1402.154469][T25596] Call Trace: [ 1402.154477][T25596] [ 1402.154486][T25596] dump_stack_lvl+0x16c/0x1f0 [ 1402.154555][T25596] mtrr_add+0xdf/0x110 [ 1402.154594][T25596] mtrr_ioctl+0x7ef/0xcf0 [ 1402.154615][T25596] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1402.154642][T25596] ? find_held_lock+0x2b/0x80 [ 1402.154680][T25596] ? __fget_files+0x20e/0x3c0 [ 1402.154714][T25596] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1402.154735][T25596] proc_reg_unlocked_ioctl+0x229/0x320 [ 1402.154765][T25596] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1402.154797][T25596] __x64_sys_ioctl+0x18e/0x210 [ 1402.154828][T25596] do_syscall_64+0xcd/0xf80 [ 1402.154866][T25596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1402.154889][T25596] RIP: 0033:0x7f4461d8f7c9 [ 1402.154907][T25596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1402.154930][T25596] RSP: 002b:00007f4462d01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1402.154952][T25596] RAX: ffffffffffffffda RBX: 00007f4461fe5fa0 RCX: 00007f4461d8f7c9 [ 1402.154968][T25596] RDX: 0000000000000005 RSI: 00000000400c4d01 RDI: 0000000000000005 [ 1402.154982][T25596] RBP: 00007f4461e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1402.154996][T25596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1402.155010][T25596] R13: 00007f4461fe6038 R14: 00007f4461fe5fa0 R15: 00007fff851bc6b8 [ 1402.155040][T25596] [ 1402.536145][T25598] cougar: G6 mapped to space [ 1402.545403][T25596] cougar: G6 mapped to space [ 1402.745736][T25601] mkiss: ax0: crc mode is auto. [ 1403.924080][T25622] FAULT_INJECTION: forcing a failure. [ 1403.924080][T25622] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1404.120842][T25622] CPU: 0 UID: 0 PID: 25622 Comm: syz.8.3916 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1404.120886][T25622] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1404.120896][T25622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1404.120910][T25622] Call Trace: [ 1404.120921][T25622] [ 1404.120931][T25622] dump_stack_lvl+0x16c/0x1f0 [ 1404.120975][T25622] should_fail_ex+0x512/0x640 [ 1404.121007][T25622] should_fail_alloc_page+0xe7/0x130 [ 1404.121049][T25622] prepare_alloc_pages+0x401/0x670 [ 1404.121093][T25622] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 1404.121142][T25622] ? stack_trace_save+0x8e/0xc0 [ 1404.121183][T25622] ? __pfx_stack_trace_save+0x10/0x10 [ 1404.121223][T25622] ? stack_depot_save_flags+0x29/0x9b0 [ 1404.121251][T25622] ? __lock_acquire+0x436/0x2890 [ 1404.121279][T25622] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1404.121309][T25622] ? __kasan_kmalloc+0xaa/0xb0 [ 1404.121344][T25622] ? copy_splice_read+0x1a8/0xc20 [ 1404.121393][T25622] ? splice_direct_to_actor+0x2a1/0xa30 [ 1404.121428][T25622] ? do_splice_direct+0x174/0x240 [ 1404.121462][T25622] ? do_sendfile+0xb06/0xe50 [ 1404.121517][T25622] ? __x64_sys_sendfile64+0x1d8/0x220 [ 1404.121540][T25622] ? do_syscall_64+0xcd/0xf80 [ 1404.121576][T25622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.121622][T25622] alloc_pages_bulk_noprof+0x77a/0x1410 [ 1404.121662][T25622] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1404.121703][T25622] ? copy_splice_read+0x1a8/0xc20 [ 1404.121743][T25622] copy_splice_read+0x1e1/0xc20 [ 1404.121786][T25622] ? __pfx_copy_splice_read+0x10/0x10 [ 1404.121832][T25622] ? find_held_lock+0x2b/0x80 [ 1404.121867][T25622] ? __pfx_copy_splice_read+0x10/0x10 [ 1404.121902][T25622] do_splice_read+0x285/0x370 [ 1404.121940][T25622] splice_direct_to_actor+0x2a1/0xa30 [ 1404.121979][T25622] ? __pfx_direct_splice_actor+0x10/0x10 [ 1404.122022][T25622] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1404.122057][T25622] ? do_raw_spin_lock+0x12c/0x2b0 [ 1404.122093][T25622] do_splice_direct+0x174/0x240 [ 1404.122136][T25622] ? __pfx_do_splice_direct+0x10/0x10 [ 1404.122175][T25622] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1404.122216][T25622] ? rw_verify_area+0xcf/0x6c0 [ 1404.122250][T25622] do_sendfile+0xb06/0xe50 [ 1404.122289][T25622] ? __pfx_do_sendfile+0x10/0x10 [ 1404.122322][T25622] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1404.122357][T25622] ? irqentry_exit+0x1dd/0x8c0 [ 1404.122403][T25622] __x64_sys_sendfile64+0x1d8/0x220 [ 1404.122427][T25622] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1404.122450][T25622] ? rcu_is_watching+0x12/0xc0 [ 1404.122493][T25622] do_syscall_64+0xcd/0xf80 [ 1404.122532][T25622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.122557][T25622] RIP: 0033:0x7fb8e0b8f7c9 [ 1404.122578][T25622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1404.122601][T25622] RSP: 002b:00007fb8e1998038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1404.122624][T25622] RAX: ffffffffffffffda RBX: 00007fb8e0de5fa0 RCX: 00007fb8e0b8f7c9 [ 1404.122640][T25622] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 1404.122655][T25622] RBP: 00007fb8e0c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1404.122670][T25622] R10: 000000007fffe000 R11: 0000000000000246 R12: 0000000000000000 [ 1404.122686][T25622] R13: 00007fb8e0de6038 R14: 00007fb8e0de5fa0 R15: 00007fff0a09a968 [ 1404.122719][T25622] [ 1405.887708][T25645] netlink: 9 bytes leftover after parsing attributes in process `syz.6.3920'. [ 1407.425852][T25664] FAULT_INJECTION: forcing a failure. [ 1407.425852][T25664] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1407.845897][T25664] CPU: 0 UID: 0 PID: 25664 Comm: syz.6.3922 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1407.845939][T25664] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1407.845949][T25664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1407.845963][T25664] Call Trace: [ 1407.845971][T25664] [ 1407.845980][T25664] dump_stack_lvl+0x16c/0x1f0 [ 1407.846022][T25664] should_fail_ex+0x512/0x640 [ 1407.846072][T25664] get_futex_key+0x1d0/0x15f0 [ 1407.846102][T25664] ? __pfx_get_futex_key+0x10/0x10 [ 1407.846138][T25664] futex_wake+0xea/0x530 [ 1407.846174][T25664] ? __pfx_futex_wake+0x10/0x10 [ 1407.846211][T25664] ? lockdep_hardirqs_on+0x7c/0x110 [ 1407.846256][T25664] do_futex+0x1e3/0x350 [ 1407.846284][T25664] ? __pfx_do_futex+0x10/0x10 [ 1407.846315][T25664] ? __fput+0x68d/0xb70 [ 1407.846341][T25664] __x64_sys_futex+0x1e0/0x4c0 [ 1407.846373][T25664] ? __pfx___x64_sys_futex+0x10/0x10 [ 1407.846402][T25664] ? dnotify_flush+0x79/0x4c0 [ 1407.846438][T25664] do_syscall_64+0xcd/0xf80 [ 1407.846477][T25664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.846502][T25664] RIP: 0033:0x7fa66b78f7c9 [ 1407.846521][T25664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1407.846545][T25664] RSP: 002b:00007fa66c6590e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1407.846568][T25664] RAX: ffffffffffffffda RBX: 00007fa66b9e5fa8 RCX: 00007fa66b78f7c9 [ 1407.846585][T25664] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa66b9e5fac [ 1407.846600][T25664] RBP: 00007fa66b9e5fa0 R08: 00007fa66c65a000 R09: 0000000000000000 [ 1407.846615][T25664] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1407.846630][T25664] R13: 00007fa66b9e6038 R14: 00007fff2580b3f0 R15: 00007fff2580b4d8 [ 1407.846661][T25664] [ 1408.494676][T25678] Invalid ELF header magic: != ELF [ 1409.599769][T25688] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3926'. [ 1410.180492][T25696] FAULT_INJECTION: forcing a failure. [ 1410.180492][T25696] name failslab, interval 1, probability 0, space 0, times 0 [ 1410.275159][T25696] CPU: 0 UID: 0 PID: 25696 Comm: syz.6.3928 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1410.275207][T25696] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1410.275217][T25696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1410.275232][T25696] Call Trace: [ 1410.275240][T25696] [ 1410.275249][T25696] dump_stack_lvl+0x16c/0x1f0 [ 1410.275292][T25696] should_fail_ex+0x512/0x640 [ 1410.275319][T25696] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1410.275352][T25696] should_failslab+0xc2/0x120 [ 1410.275392][T25696] kmem_cache_alloc_noprof+0x83/0x770 [ 1410.275422][T25696] ? stack_depot_save_flags+0x29/0x9b0 [ 1410.275449][T25696] ? alloc_empty_file+0x55/0x1e0 [ 1410.275480][T25696] ? alloc_empty_file+0x55/0x1e0 [ 1410.275504][T25696] ? kasan_save_track+0x14/0x30 [ 1410.275537][T25696] alloc_empty_file+0x55/0x1e0 [ 1410.275564][T25696] path_openat+0xde/0x3140 [ 1410.275600][T25696] ? do_syscall_64+0xcd/0xf80 [ 1410.275636][T25696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.275670][T25696] ? __pfx_path_openat+0x10/0x10 [ 1410.275719][T25696] do_filp_open+0x20b/0x470 [ 1410.275757][T25696] ? __pfx_do_filp_open+0x10/0x10 [ 1410.275816][T25696] ? alloc_fd+0x471/0x7d0 [ 1410.275860][T25696] do_sys_openat2+0x121/0x290 [ 1410.275888][T25696] ? __pfx_do_sys_openat2+0x10/0x10 [ 1410.275936][T25696] __x64_sys_openat+0x174/0x210 [ 1410.275965][T25696] ? __pfx___x64_sys_openat+0x10/0x10 [ 1410.276006][T25696] do_syscall_64+0xcd/0xf80 [ 1410.276045][T25696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.276070][T25696] RIP: 0033:0x7fa66b78f7c9 [ 1410.276091][T25696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1410.276115][T25696] RSP: 002b:00007fa66c659038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1410.276139][T25696] RAX: ffffffffffffffda RBX: 00007fa66b9e5fa0 RCX: 00007fa66b78f7c9 [ 1410.276156][T25696] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1410.276172][T25696] RBP: 00007fa66b813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1410.276187][T25696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1410.276202][T25696] R13: 00007fa66b9e6038 R14: 00007fa66b9e5fa0 R15: 00007fff2580b4d8 [ 1410.276233][T25696] [ 1411.020584][T25691] slcan: can't register candev [ 1411.575400][T25706] netlink: 9 bytes leftover after parsing attributes in process `syz.7.3930'. [ 1413.429391][T25743] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3939'. [ 1413.676030][T25743] bridge0: port 2(bridge_slave_1) entered disabled state [ 1414.058935][T25752] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3941'. [ 1414.334725][T25743] bridge_slave_1 (unregistering): left allmulticast mode [ 1414.437723][T25743] bridge_slave_1 (unregistering): left promiscuous mode [ 1414.526698][T25743] bridge0: port 2(bridge_slave_1) entered disabled state [ 1415.517260][T25762] FAULT_INJECTION: forcing a failure. [ 1415.517260][T25762] name failslab, interval 1, probability 0, space 0, times 0 [ 1415.598891][T25762] CPU: 0 UID: 0 PID: 25762 Comm: syz.5.3943 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1415.598930][T25762] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1415.598940][T25762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1415.598954][T25762] Call Trace: [ 1415.598961][T25762] [ 1415.598970][T25762] dump_stack_lvl+0x16c/0x1f0 [ 1415.599011][T25762] should_fail_ex+0x512/0x640 [ 1415.599037][T25762] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1415.599068][T25762] should_failslab+0xc2/0x120 [ 1415.599104][T25762] kmem_cache_alloc_noprof+0x83/0x770 [ 1415.599131][T25762] ? __pfx_acct_collect+0x10/0x10 [ 1415.599163][T25762] ? taskstats_exit+0x654/0xbe0 [ 1415.599200][T25762] ? taskstats_exit+0x654/0xbe0 [ 1415.599240][T25762] taskstats_exit+0x654/0xbe0 [ 1415.599277][T25762] ? __pfx_taskstats_exit+0x10/0x10 [ 1415.599314][T25762] ? exit_signals+0x388/0xb00 [ 1415.599350][T25762] do_exit+0x5e4/0x2bd0 [ 1415.599378][T25762] ? __pfx_do_exit+0x10/0x10 [ 1415.599400][T25762] ? do_raw_spin_lock+0x12c/0x2b0 [ 1415.599427][T25762] ? find_held_lock+0x2b/0x80 [ 1415.599462][T25762] do_group_exit+0xd3/0x2a0 [ 1415.599487][T25762] get_signal+0x2671/0x26d0 [ 1415.599526][T25762] ? vfs_write+0x15d/0x11d0 [ 1415.599561][T25762] ? __pfx_get_signal+0x10/0x10 [ 1415.599596][T25762] ? do_futex+0x122/0x350 [ 1415.599625][T25762] arch_do_signal_or_restart+0x8f/0x7a0 [ 1415.599661][T25762] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1415.599702][T25762] ? fdget_pos+0x2b8/0x370 [ 1415.599739][T25762] ? __pfx___x64_sys_futex+0x10/0x10 [ 1415.599772][T25762] exit_to_user_mode_loop+0x8c/0x540 [ 1415.599805][T25762] do_syscall_64+0x4ee/0xf80 [ 1415.599843][T25762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.599867][T25762] RIP: 0033:0x7ffa2218f7c9 [ 1415.599887][T25762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1415.599911][T25762] RSP: 002b:00007ffa22fa00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1415.599933][T25762] RAX: fffffffffffffe00 RBX: 00007ffa223e6098 RCX: 00007ffa2218f7c9 [ 1415.599949][T25762] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ffa223e6098 [ 1415.599964][T25762] RBP: 00007ffa223e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1415.599979][T25762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1415.599993][T25762] R13: 00007ffa223e6128 R14: 00007ffdfe62dfd0 R15: 00007ffdfe62e0b8 [ 1415.600024][T25762] [ 1416.468878][T25777] netlink: 9 bytes leftover after parsing attributes in process `syz.8.3948'. [ 1417.536131][T25790] netlink: 9 bytes leftover after parsing attributes in process `syz.6.3951'. [ 1419.157353][T25807] Invalid ELF header magic: != ELF [ 1419.693467][T25825] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3958'. [ 1419.817696][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 1419.817714][ T31] audit: type=1800 audit(4294967423.130:63): pid=25827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3959" name="dbroot" dev="configfs" ino=127215 res=0 errno=0 [ 1420.575068][T25838] ptrace attach of "./syz-executor exec"[20344] was attempted by "./syz-executor exec"[25838] [ 1422.340002][T25871] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3965'. [ 1422.994257][T25878] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x2bd pfn:0x78402 [ 1423.052903][T25878] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1423.155754][T25878] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1423.236116][T25878] raw: 00000000000002bd 0000000000000000 00000001ffffffff 0000000000000000 [ 1423.295835][T25878] page dumped because: unmovable page [ 1423.346466][T25878] page_owner tracks the page as allocated [ 1423.406812][T25878] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO), pid 7429, tgid 7423 (syz.0.320), ts 200845646599, free_ts 182493421671 [ 1423.526060][T25878] post_alloc_hook+0x1af/0x220 [ 1423.569368][T25878] get_page_from_freelist+0xd0b/0x31a0 [ 1423.621369][T25878] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 1423.685671][T25878] alloc_pages_mpol+0x1fb/0x550 [ 1423.700842][T25878] alloc_pages_noprof+0x131/0x390 [ 1423.747128][T25878] brd_submit_bio+0x11ce/0x2490 [ 1423.777497][T25878] __submit_bio+0x304/0x690 [ 1423.782090][T25878] submit_bio_noacct_nocheck+0x72f/0xbe0 [ 1423.833891][T25878] submit_bio_noacct+0x5bd/0x1f40 [ 1423.864917][T25878] blkdev_direct_IO+0x1487/0x1fe0 [ 1423.901381][T25878] blkdev_write_iter+0x703/0xe00 [ 1423.925629][T25878] vfs_write+0x7d3/0x11d0 [ 1423.953541][T25878] ksys_write+0x12a/0x250 [ 1423.983893][T25878] do_syscall_64+0xcd/0xf80 [ 1424.005931][T25878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1424.012242][T25878] page last free pid 5883 tgid 5883 stack trace: [ 1424.089823][T25878] __free_frozen_pages+0x7df/0x1170 [ 1424.095127][T25878] pcpu_free_pages.constprop.0+0x126/0x210 [ 1424.151624][T25878] pcpu_balance_workfn+0x26b/0xe00 [ 1424.195652][T25878] process_one_work+0x9ba/0x1b20 [ 1424.215885][T25878] worker_thread+0x6c8/0xf10 [ 1424.220550][T25878] kthread+0x3c5/0x780 [ 1424.272143][T25878] ret_from_fork+0x983/0xb10 [ 1424.306175][T25878] ret_from_fork_asm+0x1a/0x30 [ 1429.969337][ T52] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 1430.951510][T26013] FAULT_INJECTION: forcing a failure. [ 1430.951510][T26013] name failslab, interval 1, probability 0, space 0, times 0 [ 1431.188541][T26013] CPU: 0 UID: 0 PID: 26013 Comm: syz.8.3986 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1431.188581][T26013] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1431.188590][T26013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1431.188605][T26013] Call Trace: [ 1431.188613][T26013] [ 1431.188622][T26013] dump_stack_lvl+0x16c/0x1f0 [ 1431.188664][T26013] should_fail_ex+0x512/0x640 [ 1431.188696][T26013] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1431.188729][T26013] should_failslab+0xc2/0x120 [ 1431.188766][T26013] kmem_cache_alloc_noprof+0x83/0x770 [ 1431.188795][T26013] ? __kernfs_new_node+0xd2/0x990 [ 1431.188829][T26013] ? __kernfs_new_node+0xd2/0x990 [ 1431.188855][T26013] __kernfs_new_node+0xd2/0x990 [ 1431.188886][T26013] ? __pfx___kernfs_new_node+0x10/0x10 [ 1431.188922][T26013] ? find_held_lock+0x2b/0x80 [ 1431.188954][T26013] ? kernfs_root+0xee/0x2a0 [ 1431.188988][T26013] kernfs_new_node+0x13c/0x1e0 [ 1431.189025][T26013] __kernfs_create_file+0x53/0x350 [ 1431.189067][T26013] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1431.189101][T26013] internal_create_group+0x597/0xf70 [ 1431.189138][T26013] ? __pfx_internal_create_group+0x10/0x10 [ 1431.189179][T26013] sysfs_slab_add+0x1a9/0x1f0 [ 1431.189210][T26013] do_kmem_cache_create+0x5c1/0x740 [ 1431.189251][T26013] __kmem_cache_create_args+0x1fc/0x3b0 [ 1431.189281][T26013] mon_text_open+0x333/0x510 [ 1431.189315][T26013] ? __pfx_mon_text_open+0x10/0x10 [ 1431.189350][T26013] ? __pfx_mon_text_ctor+0x10/0x10 [ 1431.189381][T26013] ? find_held_lock+0x2b/0x80 [ 1431.189416][T26013] ? __pfx_apparmor_file_open+0x10/0x10 [ 1431.189439][T26013] ? lockdown_is_locked_down+0x3f/0x130 [ 1431.189476][T26013] ? bpf_lsm_locked_down+0x9/0x10 [ 1431.189512][T26013] ? __pfx_mon_text_open+0x10/0x10 [ 1431.189542][T26013] full_proxy_open_regular+0x1b9/0x350 [ 1431.189581][T26013] do_dentry_open+0x748/0x1590 [ 1431.189615][T26013] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 1431.189659][T26013] vfs_open+0x82/0x3f0 [ 1431.189688][T26013] path_openat+0x2078/0x3140 [ 1431.189734][T26013] ? __pfx_path_openat+0x10/0x10 [ 1431.189784][T26013] do_filp_open+0x20b/0x470 [ 1431.189821][T26013] ? __pfx_do_filp_open+0x10/0x10 [ 1431.189879][T26013] ? alloc_fd+0x471/0x7d0 [ 1431.189923][T26013] do_sys_openat2+0x121/0x290 [ 1431.189949][T26013] ? __pfx_do_sys_openat2+0x10/0x10 [ 1431.189978][T26013] ? count_memcg_events+0x122/0x290 [ 1431.190019][T26013] __x64_sys_openat+0x174/0x210 [ 1431.190048][T26013] ? __pfx___x64_sys_openat+0x10/0x10 [ 1431.190087][T26013] do_syscall_64+0xcd/0xf80 [ 1431.190126][T26013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1431.190150][T26013] RIP: 0033:0x7fb8e0b8f7c9 [ 1431.190169][T26013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1431.190193][T26013] RSP: 002b:00007fb8e1977038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1431.190215][T26013] RAX: ffffffffffffffda RBX: 00007fb8e0de6090 RCX: 00007fb8e0b8f7c9 [ 1431.190232][T26013] RDX: 0000000000020202 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 1431.190247][T26013] RBP: 00007fb8e0c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1431.190262][T26013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1431.190276][T26013] R13: 00007fb8e0de6128 R14: 00007fb8e0de6090 R15: 00007fff0a09a968 [ 1431.190307][T26013] [ 1431.888268][T26013] SLUB: Unable to add cache mon_text_ffff88805ca4e000 to sysfs [ 1432.352707][T26019] Console: switching to colour VGA+ 80x25 [ 1432.599111][T26019] Console: switching to colour frame buffer device 14x6 [ 1432.698177][T26019] Console: switching to colour VGA+ 80x25 [ 1433.198933][T26035] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3990'. [ 1433.426077][T26038] netlink: 13 bytes leftover after parsing attributes in process `syz.8.3990'. [ 1433.774723][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1433.781504][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1434.411170][T26061] program syz.8.3995 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1434.490036][T26063] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3994'. [ 1434.761711][T26063] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3994'. [ 1435.238413][T26079] : entered promiscuous mode [ 1436.222952][T26091] input: jJǸ-9%v as /devices/virtual/input/input67 [ 1436.245377][T26093] netlink: 9 bytes leftover after parsing attributes in process `syz.8.3999'. [ 1439.783753][T26141] netlink: 9 bytes leftover after parsing attributes in process `syz.6.4009'. [ 1440.392862][T26149] FAULT_INJECTION: forcing a failure. [ 1440.392862][T26149] name failslab, interval 1, probability 0, space 0, times 0 [ 1440.486443][T26149] CPU: 0 UID: 0 PID: 26149 Comm: syz.8.4011 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1440.486495][T26149] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1440.486505][T26149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1440.486520][T26149] Call Trace: [ 1440.486528][T26149] [ 1440.486538][T26149] dump_stack_lvl+0x16c/0x1f0 [ 1440.486580][T26149] should_fail_ex+0x512/0x640 [ 1440.486607][T26149] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1440.486638][T26149] should_failslab+0xc2/0x120 [ 1440.486677][T26149] __kmalloc_cache_noprof+0x80/0x800 [ 1440.486704][T26149] ? do_raw_spin_unlock+0x172/0x230 [ 1440.486734][T26149] ? snd_rawmidi_open+0x3c3/0xbf0 [ 1440.486763][T26149] ? snd_card_file_add+0x26e/0x340 [ 1440.486789][T26149] ? snd_rawmidi_open+0x3c3/0xbf0 [ 1440.486816][T26149] snd_rawmidi_open+0x3c3/0xbf0 [ 1440.486851][T26149] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 1440.486886][T26149] ? kobject_get_unless_zero+0x156/0x1e0 [ 1440.486929][T26149] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 1440.486957][T26149] snd_open+0x22d/0x4c0 [ 1440.486994][T26149] ? __pfx_snd_open+0x10/0x10 [ 1440.487030][T26149] chrdev_open+0x234/0x6a0 [ 1440.487066][T26149] ? __pfx_apparmor_file_open+0x10/0x10 [ 1440.487090][T26149] ? __pfx_chrdev_open+0x10/0x10 [ 1440.487129][T26149] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1440.487174][T26149] do_dentry_open+0x748/0x1590 [ 1440.487209][T26149] ? __pfx_chrdev_open+0x10/0x10 [ 1440.487254][T26149] vfs_open+0x82/0x3f0 [ 1440.487283][T26149] path_openat+0x2078/0x3140 [ 1440.487328][T26149] ? __pfx_path_openat+0x10/0x10 [ 1440.487375][T26149] do_filp_open+0x20b/0x470 [ 1440.487412][T26149] ? __pfx_do_filp_open+0x10/0x10 [ 1440.487476][T26149] ? alloc_fd+0x471/0x7d0 [ 1440.487522][T26149] do_sys_openat2+0x121/0x290 [ 1440.487549][T26149] ? __pfx_do_sys_openat2+0x10/0x10 [ 1440.487588][T26149] __x64_sys_openat+0x174/0x210 [ 1440.487617][T26149] ? __pfx___x64_sys_openat+0x10/0x10 [ 1440.487657][T26149] do_syscall_64+0xcd/0xf80 [ 1440.487697][T26149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.487721][T26149] RIP: 0033:0x7fb8e0b8f7c9 [ 1440.487741][T26149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1440.487765][T26149] RSP: 002b:00007fb8e1998038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1440.487788][T26149] RAX: ffffffffffffffda RBX: 00007fb8e0de5fa0 RCX: 00007fb8e0b8f7c9 [ 1440.487805][T26149] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1440.487821][T26149] RBP: 00007fb8e0c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1440.487837][T26149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1440.487852][T26149] R13: 00007fb8e0de6038 R14: 00007fb8e0de5fa0 R15: 00007fff0a09a968 [ 1440.487885][T26149] [ 1442.095272][T26167] Format for linking two devices is "netnsfd_a:ifidx_a netnsfd_b:ifidx_b" (int uint int uint). [ 1444.424733][T26213] Setting dangerous option i915.mitigations - tainting kernel [ 1446.755471][T26225] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1446.832711][T26225] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1446.886178][T26225] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1446.974671][T26225] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1447.085678][T26225] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1447.199481][T26225] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1447.525748][T26225] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1448.396307][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 1448.790110][T26263] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4043'. [ 1448.876273][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 1448.965790][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 1449.035742][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 1449.116868][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 1450.656968][T26295] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input68 [ 1450.763936][T26291] FAULT_INJECTION: forcing a failure. [ 1450.763936][T26291] name failslab, interval 1, probability 0, space 0, times 0 [ 1450.982239][T26303] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4052'. [ 1451.066812][T26291] CPU: 0 UID: 0 PID: 26291 Comm: syz.7.4051 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1451.066852][T26291] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1451.066861][T26291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1451.066875][T26291] Call Trace: [ 1451.066883][T26291] [ 1451.066892][T26291] dump_stack_lvl+0x16c/0x1f0 [ 1451.066934][T26291] should_fail_ex+0x512/0x640 [ 1451.066961][T26291] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 1451.066994][T26291] should_failslab+0xc2/0x120 [ 1451.067031][T26291] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 1451.067060][T26291] ? __pfx___might_resched+0x10/0x10 [ 1451.067094][T26291] ? sock_alloc_inode+0x25/0x1c0 [ 1451.067135][T26291] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1451.067168][T26291] ? sock_alloc_inode+0x25/0x1c0 [ 1451.067202][T26291] sock_alloc_inode+0x25/0x1c0 [ 1451.067237][T26291] alloc_inode+0x64/0x240 [ 1451.067264][T26291] sock_alloc+0x40/0x280 [ 1451.067297][T26291] __sock_create+0xc2/0x8a0 [ 1451.067324][T26291] __sys_socket+0x14d/0x260 [ 1451.067347][T26291] ? __pfx___sys_socket+0x10/0x10 [ 1451.067371][T26291] ? do_user_addr_fault+0x843/0x1370 [ 1451.067405][T26291] __x64_sys_socket+0x72/0xb0 [ 1451.067426][T26291] ? lockdep_hardirqs_on+0x7c/0x110 [ 1451.067462][T26291] do_syscall_64+0xcd/0xf80 [ 1451.067500][T26291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.067525][T26291] RIP: 0033:0x7f4461d916e7 [ 1451.067544][T26291] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1451.067568][T26291] RSP: 002b:00007f4462cfffa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1451.067590][T26291] RAX: ffffffffffffffda RBX: 00007f4461fe5fa0 RCX: 00007f4461d916e7 [ 1451.067606][T26291] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1451.067626][T26291] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1451.067641][T26291] R10: 0000200000000180 R11: 0000000000000286 R12: 0000000000000000 [ 1451.067656][T26291] R13: 00007f4461fe6038 R14: 00007f4461fe5fa0 R15: 00007fff851bc6b8 [ 1451.067686][T26291] [ 1451.067698][T26291] socket: no more sockets [ 1451.345903][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 1451.750133][T26312] netlink: 9 bytes leftover after parsing attributes in process `syz.5.4053'. [ 1452.245065][T26315] netlink: 9 bytes leftover after parsing attributes in process `syz.8.4054'. [ 1452.867524][T26329] netlink: 330 bytes leftover after parsing attributes in process `syz.5.4057'. [ 1453.061174][T26329] mac80211_hwsim hwsim44 : renamed from wlan0 (while UP) [ 1453.355823][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 1453.571762][T26333] zswap: compressor not available [ 1453.969852][T26345] netlink: zone id is out of range [ 1454.015729][T26345] netlink: zone id is out of range [ 1454.033512][T26345] netlink: zone id is out of range [ 1454.056407][T26345] netlink: zone id is out of range [ 1454.083734][T26345] netlink: del zone limit has 4 unknown bytes [ 1454.112601][T26345] netlink: zone id is out of range [ 1454.142692][T26345] netlink: zone id is out of range [ 1454.165675][T26345] netlink: zone id is out of range [ 1454.205790][T26345] netlink: zone id is out of range [ 1456.595935][T26391] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4073'. [ 1457.276044][T26396] zswap: compressor  not available [ 1457.324634][T26405] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 1458.190862][T26416] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4078'. [ 1458.706637][T26424] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4079'. [ 1461.712391][T26464] FAULT_INJECTION: forcing a failure. [ 1461.712391][T26464] name failslab, interval 1, probability 0, space 0, times 0 [ 1461.797164][T26464] CPU: 0 UID: 0 PID: 26464 Comm: syz.8.4088 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1461.797207][T26464] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1461.797216][T26464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1461.797240][T26464] Call Trace: [ 1461.797272][T26464] [ 1461.797282][T26464] dump_stack_lvl+0x16c/0x1f0 [ 1461.797334][T26464] should_fail_ex+0x512/0x640 [ 1461.797362][T26464] ? fs_reclaim_acquire+0xae/0x150 [ 1461.797405][T26464] should_failslab+0xc2/0x120 [ 1461.797453][T26464] __kmalloc_noprof+0xeb/0x910 [ 1461.797482][T26464] ? tomoyo_encode2+0x100/0x3e0 [ 1461.797521][T26464] ? tomoyo_encode2+0x100/0x3e0 [ 1461.797553][T26464] tomoyo_encode2+0x100/0x3e0 [ 1461.797591][T26464] tomoyo_encode+0x29/0x50 [ 1461.797629][T26464] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1461.797673][T26464] tomoyo_check_open_permission+0x2ab/0x3c0 [ 1461.797703][T26464] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1461.797763][T26464] ? do_raw_spin_lock+0x12c/0x2b0 [ 1461.797808][T26464] tomoyo_file_open+0x6b/0x90 [ 1461.797848][T26464] security_file_open+0x84/0x1e0 [ 1461.797881][T26464] do_dentry_open+0x597/0x1590 [ 1461.797921][T26464] ? security_inode_permission+0xbf/0x260 [ 1461.797955][T26464] vfs_open+0x82/0x3f0 [ 1461.797985][T26464] path_openat+0x2078/0x3140 [ 1461.798031][T26464] ? __pfx_path_openat+0x10/0x10 [ 1461.798255][T26464] do_filp_open+0x20b/0x470 [ 1461.798299][T26464] ? __pfx_do_filp_open+0x10/0x10 [ 1461.798358][T26464] ? alloc_fd+0x471/0x7d0 [ 1461.798404][T26464] do_sys_openat2+0x121/0x290 [ 1461.798442][T26464] ? __pfx_do_sys_openat2+0x10/0x10 [ 1461.798483][T26464] __x64_sys_openat+0x174/0x210 [ 1461.798518][T26464] ? __pfx___x64_sys_openat+0x10/0x10 [ 1461.798560][T26464] do_syscall_64+0xcd/0xf80 [ 1461.798601][T26464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.798627][T26464] RIP: 0033:0x7fb8e0b8f7c9 [ 1461.798647][T26464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1461.798673][T26464] RSP: 002b:00007fb8e1998038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1461.798697][T26464] RAX: ffffffffffffffda RBX: 00007fb8e0de5fa0 RCX: 00007fb8e0b8f7c9 [ 1461.798714][T26464] RDX: 0000000000002002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1461.798731][T26464] RBP: 00007fb8e0c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1461.798747][T26464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1461.798763][T26464] R13: 00007fb8e0de6038 R14: 00007fb8e0de5fa0 R15: 00007fff0a09a968 [ 1461.798795][T26464] [ 1462.066133][T26464] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1462.437668][T26467] vivid-012: kernel_thread() failed [ 1463.202427][T26462] zswap: compressor  not available [ 1464.091912][T26483] FAULT_INJECTION: forcing a failure. [ 1464.091912][T26483] name failslab, interval 1, probability 0, space 0, times 0 [ 1464.166523][T26482] Invalid ELF header magic: != ELF [ 1464.225922][T26483] CPU: 0 UID: 0 PID: 26483 Comm: syz.7.4092 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1464.225963][T26483] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1464.225972][T26483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1464.225987][T26483] Call Trace: [ 1464.225996][T26483] [ 1464.226006][T26483] dump_stack_lvl+0x16c/0x1f0 [ 1464.226047][T26483] should_fail_ex+0x512/0x640 [ 1464.226075][T26483] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 1464.226109][T26483] should_failslab+0xc2/0x120 [ 1464.226148][T26483] kmem_cache_alloc_node_noprof+0x86/0x800 [ 1464.226178][T26483] ? __alloc_skb+0x156/0x410 [ 1464.226211][T26483] ? __alloc_skb+0x156/0x410 [ 1464.226236][T26483] __alloc_skb+0x156/0x410 [ 1464.226261][T26483] ? __alloc_skb+0x35d/0x410 [ 1464.226287][T26483] ? __pfx___alloc_skb+0x10/0x10 [ 1464.226316][T26483] ? __pfx___might_resched+0x10/0x10 [ 1464.226351][T26483] ? __lock_acquire+0x436/0x2890 [ 1464.226378][T26483] netlink_alloc_large_skb+0x69/0x140 [ 1464.226417][T26483] netlink_sendmsg+0x698/0xdd0 [ 1464.226457][T26483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1464.226497][T26483] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1464.226543][T26483] ____sys_sendmsg+0xa5d/0xc30 [ 1464.226583][T26483] ? copy_msghdr_from_user+0x10a/0x160 [ 1464.226615][T26483] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1464.226659][T26483] ? __pfx___schedule+0x10/0x10 [ 1464.226698][T26483] ___sys_sendmsg+0x134/0x1d0 [ 1464.226732][T26483] ? __pfx____sys_sendmsg+0x10/0x10 [ 1464.226789][T26483] ? __pfx___might_resched+0x10/0x10 [ 1464.226829][T26483] __sys_sendmmsg+0x200/0x420 [ 1464.226874][T26483] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1464.226919][T26483] ? __pfx_do_futex+0x10/0x10 [ 1464.226960][T26483] ? __fget_files+0x20e/0x3c0 [ 1464.226996][T26483] ? xfd_validate_state+0x61/0x180 [ 1464.227025][T26483] __x64_sys_sendmmsg+0x9c/0x100 [ 1464.227057][T26483] ? lockdep_hardirqs_on+0x7c/0x110 [ 1464.227094][T26483] do_syscall_64+0xcd/0xf80 [ 1464.227134][T26483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.227159][T26483] RIP: 0033:0x7f4461d8f7c9 [ 1464.227180][T26483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1464.227205][T26483] RSP: 002b:00007f4462d01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1464.227227][T26483] RAX: ffffffffffffffda RBX: 00007f4461fe5fa0 RCX: 00007f4461d8f7c9 [ 1464.227244][T26483] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 000000000000000c [ 1464.227260][T26483] RBP: 00007f4461e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1464.227275][T26483] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000000 [ 1464.227290][T26483] R13: 00007f4461fe6038 R14: 00007f4461fe5fa0 R15: 00007fff851bc6b8 [ 1464.227322][T26483] [ 1464.733940][T26489] FAULT_INJECTION: forcing a failure. [ 1464.733940][T26489] name failslab, interval 1, probability 0, space 0, times 0 [ 1464.747350][T26489] CPU: 0 UID: 0 PID: 26489 Comm: syz.5.4094 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1464.747392][T26489] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1464.747401][T26489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1464.747417][T26489] Call Trace: [ 1464.747427][T26489] [ 1464.747437][T26489] dump_stack_lvl+0x16c/0x1f0 [ 1464.747480][T26489] should_fail_ex+0x512/0x640 [ 1464.747508][T26489] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1464.747540][T26489] should_failslab+0xc2/0x120 [ 1464.747578][T26489] __kmalloc_cache_noprof+0x80/0x800 [ 1464.747606][T26489] ? rcu_is_watching+0x12/0xc0 [ 1464.747641][T26489] ? single_open+0x4d/0x1f0 [ 1464.747696][T26489] ? __pfx_proc_dma_show+0x10/0x10 [ 1464.747730][T26489] ? single_open+0x4d/0x1f0 [ 1464.747758][T26489] single_open+0x4d/0x1f0 [ 1464.747785][T26489] ? __pfx_proc_single_open+0x10/0x10 [ 1464.747819][T26489] proc_reg_open+0x2ab/0x5f0 [ 1464.747852][T26489] do_dentry_open+0x748/0x1590 [ 1464.747888][T26489] ? __pfx_proc_reg_open+0x10/0x10 [ 1464.747926][T26489] vfs_open+0x82/0x3f0 [ 1464.747956][T26489] path_openat+0x2078/0x3140 [ 1464.748003][T26489] ? __pfx_path_openat+0x10/0x10 [ 1464.748051][T26489] do_filp_open+0x20b/0x470 [ 1464.748089][T26489] ? __pfx_do_filp_open+0x10/0x10 [ 1464.748148][T26489] ? alloc_fd+0x471/0x7d0 [ 1464.748192][T26489] do_sys_openat2+0x121/0x290 [ 1464.748226][T26489] ? __pfx_do_sys_openat2+0x10/0x10 [ 1464.748266][T26489] __x64_sys_openat+0x174/0x210 [ 1464.748295][T26489] ? __pfx___x64_sys_openat+0x10/0x10 [ 1464.748326][T26489] ? syscall_user_dispatch+0x78/0x140 [ 1464.748366][T26489] do_syscall_64+0xcd/0xf80 [ 1464.748406][T26489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.748431][T26489] RIP: 0033:0x7ffa2218f7c9 [ 1464.748451][T26489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1464.748476][T26489] RSP: 002b:00007ffa22fc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1464.748498][T26489] RAX: ffffffffffffffda RBX: 00007ffa223e5fa0 RCX: 00007ffa2218f7c9 [ 1464.748515][T26489] RDX: 0000000000008340 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 1464.748531][T26489] RBP: 00007ffa22213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1464.748562][T26489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1464.748577][T26489] R13: 00007ffa223e6038 R14: 00007ffa223e5fa0 R15: 00007ffdfe62e0b8 [ 1464.748609][T26489] [ 1469.622979][T26559] FAULT_INJECTION: forcing a failure. [ 1469.622979][T26559] name failslab, interval 1, probability 0, space 0, times 0 [ 1469.775598][T26559] CPU: 0 UID: 0 PID: 26559 Comm: syz.5.4109 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1469.775639][T26559] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1469.775649][T26559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1469.775663][T26559] Call Trace: [ 1469.775671][T26559] [ 1469.775680][T26559] dump_stack_lvl+0x16c/0x1f0 [ 1469.775721][T26559] should_fail_ex+0x512/0x640 [ 1469.775751][T26559] should_failslab+0xc2/0x120 [ 1469.775788][T26559] kmem_cache_alloc_node_noprof+0x86/0x800 [ 1469.775818][T26559] ? zswap_store+0x850/0x2800 [ 1469.775849][T26559] ? zswap_store+0x850/0x2800 [ 1469.775872][T26559] zswap_store+0x850/0x2800 [ 1469.775909][T26559] ? __pfx_zswap_store+0x10/0x10 [ 1469.775934][T26559] ? folio_free_swap+0x229/0x740 [ 1469.775971][T26559] ? do_raw_spin_unlock+0x172/0x230 [ 1469.775999][T26559] ? _raw_spin_unlock+0x28/0x50 [ 1469.776030][T26559] ? folio_free_swap+0x285/0x740 [ 1469.776063][T26559] ? __pfx_try_to_unmap+0x10/0x10 [ 1469.776092][T26559] swap_writeout+0x3f4/0x1090 [ 1469.776123][T26559] shrink_folio_list+0x3f0a/0x4bc0 [ 1469.776158][T26559] ? __pfx_shrink_folio_list+0x10/0x10 [ 1469.776184][T26559] ? rcu_is_watching+0x12/0xc0 [ 1469.776235][T26559] ? __lock_acquire+0x436/0x2890 [ 1469.776259][T26559] ? set_next_entity+0x11a/0x9d0 [ 1469.776306][T26559] ? lock_acquire+0x179/0x330 [ 1469.776328][T26559] ? find_held_lock+0x2b/0x80 [ 1469.776364][T26559] reclaim_folio_list+0xda/0x5a0 [ 1469.776396][T26559] ? __pfx_reclaim_folio_list+0x10/0x10 [ 1469.776440][T26559] ? do_raw_spin_lock+0x12c/0x2b0 [ 1469.776468][T26559] ? lru_gen_del_folio+0x32b/0x540 [ 1469.776508][T26559] reclaim_pages+0x3ec/0x570 [ 1469.776536][T26559] ? __pfx_reclaim_pages+0x10/0x10 [ 1469.776559][T26559] ? find_held_lock+0x2b/0x80 [ 1469.776590][T26559] ? madvise_cold_or_pageout_pte_range+0x739/0x2100 [ 1469.776620][T26559] madvise_cold_or_pageout_pte_range+0x1624/0x2100 [ 1469.776658][T26559] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 1469.776683][T26559] ? debug_check_no_obj_freed+0x31f/0x600 [ 1469.776731][T26559] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 1469.776758][T26559] walk_pgd_range+0xc10/0x1f80 [ 1469.776794][T26559] ? do_raw_spin_unlock+0x172/0x230 [ 1469.776834][T26559] ? __pfx_walk_pgd_range+0x10/0x10 [ 1469.776866][T26559] ? folios_put_refs+0x51d/0x750 [ 1469.776899][T26559] __walk_page_range+0x163/0x820 [ 1469.776944][T26559] walk_page_range_vma_unsafe+0x23f/0x9e0 [ 1469.776981][T26559] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 1469.777019][T26559] ? find_held_lock+0x2b/0x80 [ 1469.777050][T26559] ? mlock_drain_local+0x22d/0x4e0 [ 1469.777082][T26559] walk_page_range_vma+0x63/0x90 [ 1469.777116][T26559] madvise_pageout+0x257/0x540 [ 1469.777155][T26559] ? __pfx_madvise_pageout+0x10/0x10 [ 1469.777211][T26559] ? mas_next_slot+0x12d3/0x1cb0 [ 1469.777241][T26559] madvise_vma_behavior+0x912/0x29e0 [ 1469.777269][T26559] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1469.777295][T26559] ? __pfx_mt_find+0x10/0x10 [ 1469.777324][T26559] ? find_vma_prev+0xd3/0x150 [ 1469.777367][T26559] ? find_vma+0xbf/0x140 [ 1469.777398][T26559] ? __pfx_find_vma+0x10/0x10 [ 1469.777431][T26559] ? __futex_wait+0x24b/0x2f0 [ 1469.777469][T26559] madvise_walk_vmas+0x31f/0xac0 [ 1469.777497][T26559] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1469.777529][T26559] madvise_do_behavior+0x1e2/0x530 [ 1469.777551][T26559] ? futex_private_hash_put+0x160/0x1b0 [ 1469.777578][T26559] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1469.777603][T26559] ? down_read+0x13d/0x460 [ 1469.777640][T26559] do_madvise+0x176/0x240 [ 1469.777661][T26559] ? __pfx_do_madvise+0x10/0x10 [ 1469.777682][T26559] ? do_futex+0x122/0x350 [ 1469.777714][T26559] ? find_held_lock+0x2b/0x80 [ 1469.777756][T26559] ? xfd_validate_state+0x61/0x180 [ 1469.777784][T26559] __x64_sys_madvise+0xa9/0x110 [ 1469.777807][T26559] ? lockdep_hardirqs_on+0x7c/0x110 [ 1469.777843][T26559] do_syscall_64+0xcd/0xf80 [ 1469.777881][T26559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1469.777905][T26559] RIP: 0033:0x7ffa2218f7c9 [ 1469.777924][T26559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1469.777948][T26559] RSP: 002b:00007ffa22fa0038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1469.777971][T26559] RAX: ffffffffffffffda RBX: 00007ffa223e6090 RCX: 00007ffa2218f7c9 [ 1469.777987][T26559] RDX: 0000000000000015 RSI: ffffffffffff0001 RDI: 0000000000000000 [ 1469.778001][T26559] RBP: 00007ffa22213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1469.778016][T26559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1469.778030][T26559] R13: 00007ffa223e6128 R14: 00007ffa223e6090 R15: 00007ffdfe62e0b8 [ 1469.778061][T26559] [ 1472.118984][T26584] FAULT_INJECTION: forcing a failure. [ 1472.118984][T26584] name failslab, interval 1, probability 0, space 0, times 0 [ 1472.264982][T26584] CPU: 0 UID: 0 PID: 26584 Comm: syz.7.4113 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1472.265028][T26584] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1472.265038][T26584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1472.265053][T26584] Call Trace: [ 1472.265061][T26584] [ 1472.265070][T26584] dump_stack_lvl+0x16c/0x1f0 [ 1472.265110][T26584] should_fail_ex+0x512/0x640 [ 1472.265137][T26584] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1472.265169][T26584] should_failslab+0xc2/0x120 [ 1472.265207][T26584] kmem_cache_alloc_noprof+0x83/0x770 [ 1472.265236][T26584] ? security_file_alloc+0x34/0x2b0 [ 1472.265273][T26584] ? security_file_alloc+0x34/0x2b0 [ 1472.265302][T26584] security_file_alloc+0x34/0x2b0 [ 1472.265333][T26584] init_file+0x93/0x4c0 [ 1472.265358][T26584] alloc_empty_file+0x73/0x1e0 [ 1472.265384][T26584] alloc_file_pseudo+0x13a/0x230 [ 1472.265411][T26584] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1472.265439][T26584] ? alloc_fd+0x471/0x7d0 [ 1472.265479][T26584] sock_alloc_file+0x50/0x210 [ 1472.265517][T26584] __sys_socket+0x1c0/0x260 [ 1472.265538][T26584] ? fput+0x70/0xf0 [ 1472.265560][T26584] ? __pfx___sys_socket+0x10/0x10 [ 1472.265582][T26584] ? xfd_validate_state+0x61/0x180 [ 1472.265603][T26584] ? __pfx_ksys_write+0x10/0x10 [ 1472.265643][T26584] __x64_sys_socket+0x72/0xb0 [ 1472.265665][T26584] ? lockdep_hardirqs_on+0x7c/0x110 [ 1472.265702][T26584] do_syscall_64+0xcd/0xf80 [ 1472.265741][T26584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1472.265765][T26584] RIP: 0033:0x7f4461d8f7c9 [ 1472.265784][T26584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1472.265808][T26584] RSP: 002b:00007f4462ce0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1472.265831][T26584] RAX: ffffffffffffffda RBX: 00007f4461fe6090 RCX: 00007f4461d8f7c9 [ 1472.265847][T26584] RDX: 0000000000000001 RSI: 0000000000000002 RDI: 000000000000002a [ 1472.265861][T26584] RBP: 00007f4461e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1472.265875][T26584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1472.265890][T26584] R13: 00007f4461fe6128 R14: 00007f4461fe6090 R15: 00007fff851bc6b8 [ 1472.265920][T26584] [ 1472.857099][T26585] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 1474.725165][T26604] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1474.756733][T26604] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1474.776983][T26604] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1474.802110][T26604] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1474.833312][T26604] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1474.868076][T26612] FAULT_INJECTION: forcing a failure. [ 1474.868076][T26612] name failslab, interval 1, probability 0, space 0, times 0 [ 1474.950268][T26612] CPU: 0 UID: 0 PID: 26612 Comm: syz.5.4118 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1474.950310][T26612] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1474.950320][T26612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1474.950336][T26612] Call Trace: [ 1474.950343][T26612] [ 1474.950353][T26612] dump_stack_lvl+0x16c/0x1f0 [ 1474.950396][T26612] should_fail_ex+0x512/0x640 [ 1474.950424][T26612] ? __kmalloc_cache_node_noprof+0x62/0x830 [ 1474.950464][T26612] should_failslab+0xc2/0x120 [ 1474.950503][T26612] __kmalloc_cache_node_noprof+0x83/0x830 [ 1474.950540][T26612] ? __alloc_workqueue+0x801/0x1810 [ 1474.950585][T26612] ? __alloc_workqueue+0x801/0x1810 [ 1474.950623][T26612] __alloc_workqueue+0x801/0x1810 [ 1474.950670][T26612] alloc_workqueue_noprof+0xd2/0x200 [ 1474.950710][T26612] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1474.950767][T26612] nci_register_device+0x394/0xb80 [ 1474.950799][T26612] ? __pfx_nci_register_device+0x10/0x10 [ 1474.950834][T26612] ? lockdep_init_map_type+0x5c/0x270 [ 1474.950865][T26612] virtual_ncidev_open+0x141/0x220 [ 1474.950907][T26612] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1474.950948][T26612] misc_open+0x26d/0x450 [ 1474.950977][T26612] ? __pfx_misc_open+0x10/0x10 [ 1474.951005][T26612] chrdev_open+0x234/0x6a0 [ 1474.951044][T26612] ? __pfx_apparmor_file_open+0x10/0x10 [ 1474.951070][T26612] ? __pfx_chrdev_open+0x10/0x10 [ 1474.951111][T26612] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1474.951165][T26612] do_dentry_open+0x748/0x1590 [ 1474.951203][T26612] ? __pfx_chrdev_open+0x10/0x10 [ 1474.951249][T26612] vfs_open+0x82/0x3f0 [ 1474.951283][T26612] path_openat+0x2078/0x3140 [ 1474.951330][T26612] ? __pfx_path_openat+0x10/0x10 [ 1474.951378][T26612] do_filp_open+0x20b/0x470 [ 1474.951416][T26612] ? __pfx_do_filp_open+0x10/0x10 [ 1474.951475][T26612] ? alloc_fd+0x471/0x7d0 [ 1474.951519][T26612] do_sys_openat2+0x121/0x290 [ 1474.951546][T26612] ? __pfx_do_sys_openat2+0x10/0x10 [ 1474.951576][T26612] ? __fput+0x68d/0xb70 [ 1474.951605][T26612] __x64_sys_openat+0x174/0x210 [ 1474.951634][T26612] ? __pfx___x64_sys_openat+0x10/0x10 [ 1474.951675][T26612] do_syscall_64+0xcd/0xf80 [ 1474.951714][T26612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.951739][T26612] RIP: 0033:0x7ffa2218f7c9 [ 1474.951760][T26612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1474.951784][T26612] RSP: 002b:00007ffa22fa0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1474.951807][T26612] RAX: ffffffffffffffda RBX: 00007ffa223e6090 RCX: 00007ffa2218f7c9 [ 1474.951824][T26612] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1474.951840][T26612] RBP: 00007ffa22213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1474.951855][T26612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1474.951870][T26612] R13: 00007ffa223e6128 R14: 00007ffa223e6090 R15: 00007ffdfe62e0b8 [ 1474.951903][T26612] [ 1476.001276][T26626] netlink: 25 bytes leftover after parsing attributes in process `syz.8.4122'. [ 1476.118481][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 1476.303875][T26635] forcing mempool usage for bvec_alloc+0x192/0x210 [ 1476.800981][T19365] Bluetooth: hci1: command 0x0c1a tx timeout [ 1476.809960][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 1476.881291][T19365] Bluetooth: hci4: command 0x0406 tx timeout [ 1476.887492][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 1478.986435][T26657] kexec: Could not allocate control_code_buffer [ 1479.515422][T26679] mkiss: ax0: crc mode is auto. [ 1480.376528][T26686] netlink: 9 bytes leftover after parsing attributes in process `syz.5.4134'. [ 1481.243241][T26699] netlink: 9 bytes leftover after parsing attributes in process `syz.6.4138'. [ 1482.712194][T26692] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1482.742049][T26692] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1482.777001][T26692] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1482.806506][T26692] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1482.849571][T26692] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1483.277104][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 1483.285865][T26716] netlink: 'syz.5.4141': attribute type 11 has an invalid length. [ 1483.335795][T26716] netlink: 'syz.5.4141': attribute type 11 has an invalid length. [ 1483.375936][T26716] netlink: 'syz.5.4141': attribute type 11 has an invalid length. [ 1483.418224][T26716] netlink: 'syz.5.4141': attribute type 11 has an invalid length. [ 1483.971447][T26721] zswap: compressor not available [ 1484.408866][T26738] mkiss: ax0: crc mode is auto. [ 1484.764628][T26751] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4147'. [ 1484.800629][T19365] Bluetooth: hci1: command 0x0c1a tx timeout [ 1484.806837][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 1484.875688][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 1484.882000][T19365] Bluetooth: hci2: command 0x0c1a tx timeout [ 1485.511596][T26759] netlink: 9 bytes leftover after parsing attributes in process `syz.7.4149'. [ 1488.786273][T26803] netlink: 9 bytes leftover after parsing attributes in process `syz.6.4159'. [ 1489.354476][T26807] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4160'. [ 1491.286442][T26836] Invalid ELF header magic: != ELF [ 1493.709366][T26852] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4166'. [ 1493.800145][T26851] netlink: 9 bytes leftover after parsing attributes in process `syz.7.4167'. [ 1493.856319][T26852] veth0_macvtap: left promiscuous mode [ 1493.935843][T26852] macvtap0: entered promiscuous mode [ 1493.965618][T26852] macvtap0: entered allmulticast mode [ 1494.234418][T26857] netlink: 9 bytes leftover after parsing attributes in process `syz.7.4169'. [ 1495.200763][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1495.207364][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1497.240805][T26893] netlink: 9 bytes leftover after parsing attributes in process `syz.7.4178'. [ 1497.354015][T26890] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4174'. [ 1498.204517][T26915] netlink: 9 bytes leftover after parsing attributes in process `syz.6.4183'. [ 1498.477720][T18392] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 929 with max blocks 6 with error 117 [ 1498.550786][T18392] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1498.550786][T18392] [ 1499.006325][T26927] futex_wake_op: syz.5.4186 tries to shift op by -2048; fix this program [ 1499.073572][T26927] futex_wake_op: syz.5.4186 tries to shift op by -2048; fix this program [ 1499.190947][T26929] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1499.260670][T26927] 0x000000000001-0x000000020000 : "" [ 1499.364655][T26927] ftl_cs: FTL header corrupt! [ 1499.650119][T26937] mmap: syz.8.4187 (26937): VmData 54243328 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 1500.041844][T26943] bridge_slave_1: left allmulticast mode [ 1500.083075][T26943] bridge_slave_1: left promiscuous mode [ 1500.121172][T26943] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.666694][T26970] netlink: 9 bytes leftover after parsing attributes in process `syz.8.4195'. [ 1502.023456][T26971] zswap: compressor not available [ 1502.971795][T27001] binder: BINDER_SET_CONTEXT_MGR already set [ 1503.016558][T27001] binder: 27000:27001 ioctl 4018620d 9 returned -16 [ 1505.197565][T19365] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1505.419146][T27042] futex_wake_op: syz.6.4208 tries to shift op by -2048; fix this program [ 1505.491842][T27042] futex_wake_op: syz.6.4208 tries to shift op by -2048; fix this program [ 1505.665412][T27042] 0x000000000001-0x000000020000 : "" [ 1505.719853][T27042] ftl_cs: FTL header corrupt! [ 1508.855129][T27071] random: crng reseeded on system resumption [ 1509.102284][T27074] netlink: 9 bytes leftover after parsing attributes in process `syz.6.4214'. [ 1510.612703][T27094] netlink: 334 bytes leftover after parsing attributes in process `syz.7.4218'. [ 1511.217935][T27100] FAULT_INJECTION: forcing a failure. [ 1511.217935][T27100] name failslab, interval 1, probability 0, space 0, times 0 [ 1511.321959][T27100] CPU: 0 UID: 0 PID: 27100 Comm: syz.7.4220 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1511.322001][T27100] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1511.322011][T27100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1511.322027][T27100] Call Trace: [ 1511.322036][T27100] [ 1511.322046][T27100] dump_stack_lvl+0x16c/0x1f0 [ 1511.322088][T27100] should_fail_ex+0x512/0x640 [ 1511.322117][T27100] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 1511.322157][T27100] should_failslab+0xc2/0x120 [ 1511.322195][T27100] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 1511.322226][T27100] ? __d_lookup+0x25c/0x4a0 [ 1511.322255][T27100] ? __d_alloc+0x35/0xa80 [ 1511.322281][T27100] ? __d_alloc+0x35/0xa80 [ 1511.322300][T27100] __d_alloc+0x35/0xa80 [ 1511.322325][T27100] d_alloc+0x4a/0x1e0 [ 1511.322347][T27100] lookup_one_qstr_excl+0x175/0x250 [ 1511.322379][T27100] start_dirop+0x59/0xb0 [ 1511.322414][T27100] simple_start_creating+0xf4/0x100 [ 1511.322449][T27100] ? __pfx_simple_start_creating+0x10/0x10 [ 1511.322487][T27100] ? simple_inode_init_ts+0x1d/0x130 [ 1511.322519][T27100] nfsd_mkdir+0xf6/0x460 [ 1511.322557][T27100] ? dput.part.0+0xd8/0x570 [ 1511.322590][T27100] nfsd_fill_super+0x41a/0x5a0 [ 1511.322633][T27100] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1511.322672][T27100] get_tree_keyed+0x10e/0x1d0 [ 1511.322708][T27100] vfs_get_tree+0x8e/0x330 [ 1511.322737][T27100] path_mount+0x7bf/0x23a0 [ 1511.322761][T27100] ? rcu_is_watching+0x12/0xc0 [ 1511.322799][T27100] ? __pfx_path_mount+0x10/0x10 [ 1511.322823][T27100] ? kmem_cache_free+0x2d8/0x770 [ 1511.322854][T27100] ? putname+0xf5/0x1a0 [ 1511.322881][T27100] ? putname+0xf5/0x1a0 [ 1511.322900][T27100] ? putname+0xf5/0x1a0 [ 1511.322924][T27100] ? __x64_sys_mount+0x293/0x310 [ 1511.322946][T27100] __x64_sys_mount+0x293/0x310 [ 1511.322971][T27100] ? __pfx___x64_sys_mount+0x10/0x10 [ 1511.323004][T27100] do_syscall_64+0xcd/0xf80 [ 1511.323044][T27100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1511.323068][T27100] RIP: 0033:0x7f4461d8f7c9 [ 1511.323089][T27100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1511.323113][T27100] RSP: 002b:00007f4462d01038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1511.323140][T27100] RAX: ffffffffffffffda RBX: 00007f4461fe5fa0 RCX: 00007f4461d8f7c9 [ 1511.323157][T27100] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1511.323173][T27100] RBP: 00007f4461e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1511.323187][T27100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1511.323202][T27100] R13: 00007f4461fe6038 R14: 00007f4461fe5fa0 R15: 00007fff851bc6b8 [ 1511.323234][T27100] [ 1511.601203][T27107] sd 0:0:1:0: PR command failed: 1026 [ 1511.608021][T27108] sd 0:0:1:0: PR command failed: 1026 [ 1511.613596][T27107] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1511.620856][T27107] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1511.628188][T27108] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1511.634905][T27108] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1513.857572][T27135] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1518.058329][T27196] sg_write: data in/out 14745563/34144 bytes for SCSI command 0x0-- guessing data in; [ 1518.058329][T27196] program syz.6.4240 not setting count and/or reply_len properly [ 1518.216212][T27189] zswap: compressor not available [ 1518.252906][T27191] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 1518.783312][T27207] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1518.905872][T27207] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1518.968375][T27207] veth0_to_bridge: entered allmulticast mode [ 1519.046376][T27207] veth0_to_bridge: entered promiscuous mode [ 1519.116435][T27207] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1519.241777][T27207] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1519.249212][T27207] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 1519.652317][T27222] random: crng reseeded on system resumption [ 1520.039045][T27230] Invalid ELF header magic: != ELF [ 1521.032814][T27241] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4249'. [ 1522.930723][T27272] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4258'. [ 1523.638735][T27273] binder: 27270:27273 ioctl c018620c 0 returned -22 [ 1524.353078][T27285] FAULT_INJECTION: forcing a failure. [ 1524.353078][T27285] name failslab, interval 1, probability 0, space 0, times 0 [ 1524.443144][T27285] CPU: 0 UID: 0 PID: 27285 Comm: syz.6.4260 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1524.443209][T27285] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1524.443219][T27285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1524.443234][T27285] Call Trace: [ 1524.443242][T27285] [ 1524.443252][T27285] dump_stack_lvl+0x16c/0x1f0 [ 1524.443294][T27285] should_fail_ex+0x512/0x640 [ 1524.443321][T27285] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1524.443355][T27285] should_failslab+0xc2/0x120 [ 1524.443393][T27285] kmem_cache_alloc_noprof+0x83/0x770 [ 1524.443423][T27285] ? audit_log_start+0x29b/0x950 [ 1524.443460][T27285] ? audit_log_start+0x29b/0x950 [ 1524.443488][T27285] audit_log_start+0x29b/0x950 [ 1524.443521][T27285] ? __pfx_audit_log_start+0x10/0x10 [ 1524.443559][T27285] ? integrity_audit_msg+0x41/0x60 [ 1524.443598][T27285] integrity_audit_message+0x10c/0x580 [ 1524.443637][T27285] ? __pfx_integrity_audit_message+0x10/0x10 [ 1524.443675][T27285] ? __pfx_ima_add_template_entry+0x10/0x10 [ 1524.443718][T27285] integrity_audit_msg+0x41/0x60 [ 1524.443756][T27285] ima_add_violation+0x1b4/0x3d0 [ 1524.443787][T27285] ? __pfx_ima_add_violation+0x10/0x10 [ 1524.443813][T27285] ? ima_d_path+0x12b/0x2a0 [ 1524.443836][T27285] ? __pfx___might_resched+0x10/0x10 [ 1524.443872][T27285] ? __pfx_ima_d_path+0x10/0x10 [ 1524.443902][T27285] ? __pfx_down_write+0x10/0x10 [ 1524.443934][T27285] process_measurement+0x16d7/0x22d0 [ 1524.443983][T27285] ? __pfx_process_measurement+0x10/0x10 [ 1524.444026][T27285] ? trace_contention_end+0xdd/0x110 [ 1524.444051][T27285] ? __mutex_lock+0x27b/0x1ca0 [ 1524.444106][T27285] ? find_held_lock+0x2b/0x80 [ 1524.444139][T27285] ? tracing_check_open_get_tr.part.0+0xdc/0x190 [ 1524.444207][T27285] ? tracing_check_open_get_tr.part.0+0xe1/0x190 [ 1524.444242][T27285] ? inode_to_bdi+0x9e/0x160 [ 1524.444278][T27285] ima_file_check+0xc7/0x110 [ 1524.444318][T27285] ? __pfx_ima_file_check+0x10/0x10 [ 1524.444366][T27285] security_file_post_open+0x8e/0x210 [ 1524.444397][T27285] path_openat+0xe5f/0x3140 [ 1524.444444][T27285] ? __pfx_path_openat+0x10/0x10 [ 1524.444492][T27285] do_filp_open+0x20b/0x470 [ 1524.444530][T27285] ? __pfx_do_filp_open+0x10/0x10 [ 1524.444589][T27285] ? alloc_fd+0x471/0x7d0 [ 1524.444633][T27285] do_sys_openat2+0x121/0x290 [ 1524.444661][T27285] ? __pfx_do_sys_openat2+0x10/0x10 [ 1524.444700][T27285] __x64_sys_openat+0x174/0x210 [ 1524.444729][T27285] ? __pfx___x64_sys_openat+0x10/0x10 [ 1524.444769][T27285] do_syscall_64+0xcd/0xf80 [ 1524.444809][T27285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1524.444834][T27285] RIP: 0033:0x7fa66b78f7c9 [ 1524.444854][T27285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1524.444879][T27285] RSP: 002b:00007fa66c659038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1524.444902][T27285] RAX: ffffffffffffffda RBX: 00007fa66b9e5fa0 RCX: 00007fa66b78f7c9 [ 1524.444918][T27285] RDX: 0000000000040000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1524.444935][T27285] RBP: 00007fa66b813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1524.444950][T27285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1524.444966][T27285] R13: 00007fa66b9e6038 R14: 00007fa66b9e5fa0 R15: 00007fff2580b4d8 [ 1524.444998][T27285] [ 1524.445010][T27285] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 1526.173111][T27285] audit: out of memory in audit_log_start [ 1526.763666][T27327] random: crng reseeded on system resumption [ 1527.885444][T27341] blktrace: Concurrent blktraces are not allowed on loop2 [ 1528.398248][T27344] ima: policy update failed [ 1528.446007][ T31] audit: type=1802 audit(4294967531.760:64): pid=27344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.4274" res=0 errno=0 [ 1529.339554][T27361] net_ratelimit: 316 callbacks suppressed [ 1529.339575][T27361] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 1531.662893][T27388] nfs: Bad value for 'source' [ 1532.399054][T27399] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x2bd pfn:0x78402 [ 1532.456737][T27399] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1532.527293][T27399] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1532.575381][T27399] raw: 00000000000002bd 0000000000000000 00000001ffffffff 0000000000000000 [ 1532.635323][T27399] page dumped because: unmovable page [ 1532.674597][T27399] page_owner tracks the page as allocated [ 1532.715599][T27399] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO), pid 7429, tgid 7423 (syz.0.320), ts 200845646599, free_ts 182493421671 [ 1532.785951][T27396] zswap: compressor not available [ 1532.808373][T27399] post_alloc_hook+0x1af/0x220 [ 1532.832688][T27399] get_page_from_freelist+0xd0b/0x31a0 [ 1532.858894][T27399] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 1532.883745][T27399] alloc_pages_mpol+0x1fb/0x550 [ 1532.912431][T27399] alloc_pages_noprof+0x131/0x390 [ 1532.935857][T27399] brd_submit_bio+0x11ce/0x2490 [ 1532.965624][T27399] __submit_bio+0x304/0x690 [ 1532.970204][T27399] submit_bio_noacct_nocheck+0x72f/0xbe0 [ 1533.031545][T27399] submit_bio_noacct+0x5bd/0x1f40 [ 1533.077093][T27399] blkdev_direct_IO+0x1487/0x1fe0 [ 1533.095649][T27399] blkdev_write_iter+0x703/0xe00 [ 1533.103688][T27400] __vm_enough_memory: pid: 27400, comm: syz.6.4285, bytes: 4398046511104 not enough memory for the allocation [ 1533.136427][T27399] vfs_write+0x7d3/0x11d0 [ 1533.140844][T27399] ksys_write+0x12a/0x250 [ 1533.145225][T27399] do_syscall_64+0xcd/0xf80 [ 1533.205612][T27399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1533.242906][T27399] page last free pid 5883 tgid 5883 stack trace: [ 1533.287023][T27399] __free_frozen_pages+0x7df/0x1170 [ 1533.314870][T27399] pcpu_free_pages.constprop.0+0x126/0x210 [ 1533.342097][T27399] pcpu_balance_workfn+0x26b/0xe00 [ 1533.366485][T27399] process_one_work+0x9ba/0x1b20 [ 1533.399150][T27399] worker_thread+0x6c8/0xf10 [ 1533.410828][T27399] kthread+0x3c5/0x780 [ 1533.425029][T27399] ret_from_fork+0x983/0xb10 [ 1533.447624][T27399] ret_from_fork_asm+0x1a/0x30 [ 1533.509678][T27398] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x2bd pfn:0x78402 [ 1533.573315][T27398] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1533.615594][T27398] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1533.679818][T27398] raw: 00000000000002bd 0000000000000000 00000001ffffffff 0000000000000000 [ 1533.714372][T27398] page dumped because: unmovable page [ 1533.765356][T27398] page_owner tracks the page as allocated [ 1533.792619][T27398] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO), pid 7429, tgid 7423 (syz.0.320), ts 200845646599, free_ts 182493421671 [ 1533.880046][T27398] post_alloc_hook+0x1af/0x220 [ 1533.915908][T27398] get_page_from_freelist+0xd0b/0x31a0 [ 1533.936256][T27398] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 1533.967531][T27398] alloc_pages_mpol+0x1fb/0x550 [ 1533.972496][T27398] alloc_pages_noprof+0x131/0x390 [ 1534.009326][T27398] brd_submit_bio+0x11ce/0x2490 [ 1534.014262][T27398] __submit_bio+0x304/0x690 [ 1534.056506][T27398] submit_bio_noacct_nocheck+0x72f/0xbe0 [ 1534.085607][T27398] submit_bio_noacct+0x5bd/0x1f40 [ 1534.090705][T27398] blkdev_direct_IO+0x1487/0x1fe0 [ 1534.130429][T27398] blkdev_write_iter+0x703/0xe00 [ 1534.145398][T27398] vfs_write+0x7d3/0x11d0 [ 1534.170685][T27398] ksys_write+0x12a/0x250 [ 1534.175170][T27398] do_syscall_64+0xcd/0xf80 [ 1534.211621][T27398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.234511][T27398] page last free pid 5883 tgid 5883 stack trace: [ 1534.275216][T27398] __free_frozen_pages+0x7df/0x1170 [ 1534.299678][T27398] pcpu_free_pages.constprop.0+0x126/0x210 [ 1534.337804][T27398] pcpu_balance_workfn+0x26b/0xe00 [ 1534.377903][T27398] process_one_work+0x9ba/0x1b20 [ 1534.383020][T27398] worker_thread+0x6c8/0xf10 [ 1534.436733][T27398] kthread+0x3c5/0x780 [ 1534.440900][T27398] ret_from_fork+0x983/0xb10 [ 1534.484990][T27398] ret_from_fork_asm+0x1a/0x30 [ 1536.487970][T27460] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4296'. [ 1536.597903][T27460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1536.739004][T27460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1537.254504][T27464] netlink: 9 bytes leftover after parsing attributes in process `syz.6.4298'. [ 1538.556502][T27482] usb usb36: usbfs: process 27482 (syz.8.4303) did not claim interface 0 before use [ 1540.219060][T27506] zswap: compressor not available [ 1540.474966][T27512] FAULT_INJECTION: forcing a failure. [ 1540.474966][T27512] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1540.566680][T27512] CPU: 0 UID: 0 PID: 27512 Comm: syz.7.4311 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1540.566721][T27512] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1540.566731][T27512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1540.566746][T27512] Call Trace: [ 1540.566754][T27512] [ 1540.566763][T27512] dump_stack_lvl+0x16c/0x1f0 [ 1540.566804][T27512] should_fail_ex+0x512/0x640 [ 1540.566835][T27512] get_futex_key+0x1085/0x15f0 [ 1540.566865][T27512] ? __pfx_get_futex_key+0x10/0x10 [ 1540.566907][T27512] futex_wake+0xea/0x530 [ 1540.566943][T27512] ? __pfx_futex_wake+0x10/0x10 [ 1540.566988][T27512] do_futex+0x1e3/0x350 [ 1540.567015][T27512] ? __pfx_do_futex+0x10/0x10 [ 1540.567040][T27512] ? __might_fault+0xe3/0x190 [ 1540.567075][T27512] mm_release+0x24e/0x300 [ 1540.567108][T27512] do_exit+0x69e/0x2bd0 [ 1540.567136][T27512] ? __pfx_do_exit+0x10/0x10 [ 1540.567159][T27512] ? do_raw_spin_lock+0x12c/0x2b0 [ 1540.567186][T27512] ? find_held_lock+0x2b/0x80 [ 1540.567221][T27512] do_group_exit+0xd3/0x2a0 [ 1540.567247][T27512] get_signal+0x2671/0x26d0 [ 1540.567290][T27512] ? __pfx_get_signal+0x10/0x10 [ 1540.567325][T27512] ? do_futex+0x122/0x350 [ 1540.567354][T27512] arch_do_signal_or_restart+0x8f/0x7a0 [ 1540.567390][T27512] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1540.567431][T27512] ? __sys_socket+0xac/0x260 [ 1540.567455][T27512] ? __pfx___x64_sys_futex+0x10/0x10 [ 1540.567488][T27512] exit_to_user_mode_loop+0x8c/0x540 [ 1540.567521][T27512] do_syscall_64+0x4ee/0xf80 [ 1540.567561][T27512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1540.567585][T27512] RIP: 0033:0x7f4461d8f7c9 [ 1540.567605][T27512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1540.567628][T27512] RSP: 002b:00007f4462d010e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1540.567651][T27512] RAX: fffffffffffffe00 RBX: 00007f4461fe5fa8 RCX: 00007f4461d8f7c9 [ 1540.567666][T27512] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4461fe5fa8 [ 1540.567680][T27512] RBP: 00007f4461fe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1540.567695][T27512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1540.567709][T27512] R13: 00007f4461fe6038 R14: 00007fff851bc5d0 R15: 00007fff851bc6b8 [ 1540.567739][T27512] [ 1541.220542][T27529] FAULT_INJECTION: forcing a failure. [ 1541.220542][T27529] name failslab, interval 1, probability 0, space 0, times 0 [ 1541.272244][T27529] CPU: 0 UID: 0 PID: 27529 Comm: syz.7.4313 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1541.272285][T27529] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1541.272295][T27529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1541.272310][T27529] Call Trace: [ 1541.272318][T27529] [ 1541.272327][T27529] dump_stack_lvl+0x16c/0x1f0 [ 1541.272369][T27529] should_fail_ex+0x512/0x640 [ 1541.272397][T27529] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1541.272430][T27529] should_failslab+0xc2/0x120 [ 1541.272469][T27529] __kmalloc_cache_noprof+0x80/0x800 [ 1541.272498][T27529] ? vkms_plane_duplicate_state+0x45/0x130 [ 1541.272534][T27529] ? vkms_plane_duplicate_state+0x45/0x130 [ 1541.272564][T27529] vkms_plane_duplicate_state+0x45/0x130 [ 1541.272594][T27529] drm_atomic_get_plane_state+0x279/0x760 [ 1541.272624][T27529] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 1541.272658][T27529] ? rcu_is_watching+0x12/0xc0 [ 1541.272700][T27529] ? __mutex_lock+0x27b/0x1ca0 [ 1541.272740][T27529] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1541.272773][T27529] ? trace_contention_end+0xdd/0x110 [ 1541.272829][T27529] drm_client_modeset_commit_locked+0x14d/0x580 [ 1541.272878][T27529] drm_client_modeset_commit+0x4f/0x80 [ 1541.272911][T27529] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 1541.272947][T27529] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 1541.272981][T27529] drm_fbdev_client_restore+0x1b/0x30 [ 1541.273022][T27529] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 1541.273062][T27529] drm_client_dev_restore+0x200/0x2a0 [ 1541.273099][T27529] drm_release+0x2c6/0x360 [ 1541.273128][T27529] ? __pfx_drm_release+0x10/0x10 [ 1541.273155][T27529] __fput+0x402/0xb70 [ 1541.273187][T27529] task_work_run+0x150/0x240 [ 1541.273215][T27529] ? __pfx_task_work_run+0x10/0x10 [ 1541.273240][T27529] ? __do_sys_close_range+0x278/0x730 [ 1541.273287][T27529] exit_to_user_mode_loop+0xfb/0x540 [ 1541.273322][T27529] do_syscall_64+0x4ee/0xf80 [ 1541.273362][T27529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1541.273387][T27529] RIP: 0033:0x7f4461d8f7c9 [ 1541.273406][T27529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1541.273432][T27529] RSP: 002b:00007f4462d01038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1541.273455][T27529] RAX: 0000000000000000 RBX: 00007f4461fe5fa0 RCX: 00007f4461d8f7c9 [ 1541.273471][T27529] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1541.273486][T27529] RBP: 00007f4461e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1541.273501][T27529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1541.273517][T27529] R13: 00007f4461fe6038 R14: 00007f4461fe5fa0 R15: 00007fff851bc6b8 [ 1541.273550][T27529] [ 1542.314270][T27532] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1542.698479][T27546] netlink: 'syz.6.4316': attribute type 1 has an invalid length. [ 1544.728894][T27594] queue_state_write: unsupported operation '' [ 1544.766792][T27594] queue_state_write: use 'run', 'start' or 'kick' [ 1545.609178][T27603] sd 0:0:1:0: PR command failed: 1026 [ 1545.669680][T27603] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1545.769745][T27603] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1545.833065][T27604] : Can't lookup blockdev [ 1546.181058][T27588] kexec: Could not allocate control_code_buffer [ 1547.911550][T27647] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4340'. [ 1548.846843][T27659] netlink: 252 bytes leftover after parsing attributes in process `syz.6.4343'. [ 1549.972344][T27671] netlink: 9 bytes leftover after parsing attributes in process `syz.7.4347'. [ 1550.647032][T27686] FAULT_INJECTION: forcing a failure. [ 1550.647032][T27686] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1550.768439][T27693] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4348'. [ 1550.839840][T27686] CPU: 0 UID: 0 PID: 27686 Comm: syz.6.4348 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1550.839882][T27686] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1550.839892][T27686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1550.839907][T27686] Call Trace: [ 1550.839915][T27686] [ 1550.839925][T27686] dump_stack_lvl+0x16c/0x1f0 [ 1550.839968][T27686] should_fail_ex+0x512/0x640 [ 1550.840000][T27686] get_futex_key+0x1d0/0x15f0 [ 1550.840030][T27686] ? __pfx_get_futex_key+0x10/0x10 [ 1550.840066][T27686] futex_wake+0xea/0x530 [ 1550.840097][T27686] ? futex_wait+0x120/0x380 [ 1550.840130][T27686] ? __pfx_futex_wait+0x10/0x10 [ 1550.840165][T27686] ? __pfx_futex_wake+0x10/0x10 [ 1550.840217][T27686] do_futex+0x1e3/0x350 [ 1550.840245][T27686] ? __pfx_do_futex+0x10/0x10 [ 1550.840271][T27686] ? iput+0x35/0x40 [ 1550.840295][T27686] ? __sock_release+0x20b/0x270 [ 1550.840334][T27686] __x64_sys_futex+0x1e0/0x4c0 [ 1550.840365][T27686] ? __do_sys_close_range+0x278/0x730 [ 1550.840402][T27686] ? fput+0x70/0xf0 [ 1550.840425][T27686] ? __pfx___x64_sys_futex+0x10/0x10 [ 1550.840460][T27686] ? syscall_user_dispatch+0x78/0x140 [ 1550.840500][T27686] do_syscall_64+0xcd/0xf80 [ 1550.840540][T27686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1550.840565][T27686] RIP: 0033:0x7fa66b78f7c9 [ 1550.840585][T27686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1550.840610][T27686] RSP: 002b:00007fa66c6380e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1550.840633][T27686] RAX: ffffffffffffffda RBX: 00007fa66b9e6098 RCX: 00007fa66b78f7c9 [ 1550.840650][T27686] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa66b9e609c [ 1550.840665][T27686] RBP: 00007fa66b9e6090 R08: 00007fa66c65a000 R09: 0000000000000000 [ 1550.840681][T27686] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1550.840697][T27686] R13: 00007fa66b9e6128 R14: 00007fff2580b3f0 R15: 00007fff2580b4d8 [ 1550.840729][T27686] [ 1551.747085][T27700] FAULT_INJECTION: forcing a failure. [ 1551.747085][T27700] name failslab, interval 1, probability 0, space 0, times 0 [ 1551.818303][T27700] CPU: 0 UID: 0 PID: 27700 Comm: syz.7.4352 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1551.818345][T27700] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1551.818354][T27700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1551.818369][T27700] Call Trace: [ 1551.818377][T27700] [ 1551.818387][T27700] dump_stack_lvl+0x16c/0x1f0 [ 1551.818429][T27700] should_fail_ex+0x512/0x640 [ 1551.818456][T27700] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 1551.818491][T27700] should_failslab+0xc2/0x120 [ 1551.818529][T27700] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 1551.818562][T27700] ? shmem_alloc_inode+0x25/0x50 [ 1551.818602][T27700] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1551.818635][T27700] ? shmem_alloc_inode+0x25/0x50 [ 1551.818668][T27700] shmem_alloc_inode+0x25/0x50 [ 1551.818702][T27700] alloc_inode+0x64/0x240 [ 1551.818730][T27700] new_inode+0x22/0x1c0 [ 1551.818760][T27700] shmem_get_inode+0x19a/0xfb0 [ 1551.818799][T27700] ? __vm_enough_memory+0x184/0x3f0 [ 1551.818839][T27700] __shmem_file_setup+0x290/0x350 [ 1551.818882][T27700] shmem_zero_setup+0x93/0x1b0 [ 1551.818914][T27700] __mmap_region+0x2271/0x2a00 [ 1551.818947][T27700] ? __lock_acquire+0x436/0x2890 [ 1551.818971][T27700] ? __pfx___mmap_region+0x10/0x10 [ 1551.819009][T27700] ? lock_acquire+0x179/0x330 [ 1551.819043][T27700] ? finish_task_switch.isra.0+0x207/0xbd0 [ 1551.819134][T27700] ? rcu_is_watching+0x12/0xc0 [ 1551.819183][T27700] mmap_region+0x1ab/0x3f0 [ 1551.819212][T27700] ? __get_unmapped_area+0x267/0x3f0 [ 1551.819253][T27700] do_mmap+0xa3e/0x1210 [ 1551.819294][T27700] ? __pfx_do_mmap+0x10/0x10 [ 1551.819331][T27700] ? __pfx_down_write_killable+0x10/0x10 [ 1551.819362][T27700] vm_mmap_pgoff+0x29e/0x470 [ 1551.819403][T27700] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1551.819437][T27700] ? __pfx_do_sendfile+0x10/0x10 [ 1551.819475][T27700] ? __x64_sys_futex+0x1e0/0x4c0 [ 1551.819502][T27700] ? __x64_sys_futex+0x1e9/0x4c0 [ 1551.819534][T27700] ksys_mmap_pgoff+0x7d/0x5c0 [ 1551.819570][T27700] ? syscall_user_dispatch+0x78/0x140 [ 1551.819604][T27700] __x64_sys_mmap+0x125/0x190 [ 1551.819632][T27700] do_syscall_64+0xcd/0xf80 [ 1551.819672][T27700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1551.819697][T27700] RIP: 0033:0x7f4461d8f7c9 [ 1551.819717][T27700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1551.819741][T27700] RSP: 002b:00007f4462ce0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1551.819763][T27700] RAX: ffffffffffffffda RBX: 00007f4461fe6090 RCX: 00007f4461d8f7c9 [ 1551.819779][T27700] RDX: 00000000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 1551.819795][T27700] RBP: 00007f4461e13f91 R08: 0000000000000401 R09: 0000000000000000 [ 1551.819812][T27700] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1551.819827][T27700] R13: 00007f4461fe6128 R14: 00007f4461fe6090 R15: 00007fff851bc6b8 [ 1551.819858][T27700] [ 1552.133735][T27705] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4352'. [ 1553.725189][T27715] Unable to find swap-space signature [ 1554.396854][T19365] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1554.482728][ T52] Bluetooth: hci2: Unable to find connection for big 0xd2 [ 1555.878886][T27750] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4361'. [ 1556.651495][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1556.660021][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1556.885071][T27762] netlink: 9 bytes leftover after parsing attributes in process `syz.7.4366'. [ 1557.726338][T27771] netlink: 186 bytes leftover after parsing attributes in process `syz.6.4368'. [ 1561.354538][ T31] audit: type=1800 audit(4294975364.653:65): pid=27820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4380" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 1562.678559][T27827] FAULT_INJECTION: forcing a failure. [ 1562.678559][T27827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1562.985599][T27827] CPU: 0 UID: 0 PID: 27827 Comm: syz.6.4381 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1562.985641][T27827] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1562.985650][T27827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1562.985665][T27827] Call Trace: [ 1562.985673][T27827] [ 1562.985682][T27827] dump_stack_lvl+0x16c/0x1f0 [ 1562.985723][T27827] should_fail_ex+0x512/0x640 [ 1562.985754][T27827] _copy_from_user+0x2e/0xd0 [ 1562.985781][T27827] get_timespec64+0x8b/0x1b0 [ 1562.985805][T27827] ? __pfx_get_timespec64+0x10/0x10 [ 1562.985837][T27827] __x64_sys_futex+0x288/0x4c0 [ 1562.985869][T27827] ? __pfx___x64_sys_futex+0x10/0x10 [ 1562.985907][T27827] do_syscall_64+0xcd/0xf80 [ 1562.985946][T27827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.985971][T27827] RIP: 0033:0x7fa66b78f7c9 [ 1562.985990][T27827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1562.986013][T27827] RSP: 002b:00007fff2580b638 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1562.986036][T27827] RAX: ffffffffffffffda RBX: 000000000017d7af RCX: 00007fa66b78f7c9 [ 1562.986056][T27827] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa66b9e609c [ 1562.986071][T27827] RBP: 0000000000000032 R08: 00007fa66c65a000 R09: 000000142580b92f [ 1562.986087][T27827] R10: 00007fff2580b730 R11: 0000000000000246 R12: 00007fa66b9e609c [ 1562.986103][T27827] R13: 00007fff2580b730 R14: 000000000017d7e1 R15: 00007fff2580b750 [ 1562.986133][T27827] [ 1564.852853][T27863] netlink: 9 bytes leftover after parsing attributes in process `syz.8.4388'. [ 1565.339825][T27871] FAULT_INJECTION: forcing a failure. [ 1565.339825][T27871] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1565.416020][T27871] CPU: 0 UID: 0 PID: 27871 Comm: syz.8.4390 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1565.416070][T27871] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1565.416079][T27871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1565.416094][T27871] Call Trace: [ 1565.416102][T27871] [ 1565.416111][T27871] dump_stack_lvl+0x16c/0x1f0 [ 1565.416154][T27871] should_fail_ex+0x512/0x640 [ 1565.416186][T27871] get_futex_key+0x1d0/0x15f0 [ 1565.416217][T27871] ? __pfx_get_futex_key+0x10/0x10 [ 1565.416247][T27871] ? __pfx___might_resched+0x10/0x10 [ 1565.416286][T27871] futex_wake+0xea/0x530 [ 1565.416322][T27871] ? __pfx_futex_wake+0x10/0x10 [ 1565.416355][T27871] ? __pfx_aa_sk_perm+0x10/0x10 [ 1565.416386][T27871] ? __might_fault+0xe3/0x190 [ 1565.416412][T27871] ? __might_fault+0x13b/0x190 [ 1565.416446][T27871] do_futex+0x1e3/0x350 [ 1565.416475][T27871] ? __pfx_do_futex+0x10/0x10 [ 1565.416502][T27871] ? fput+0x70/0xf0 [ 1565.416526][T27871] ? __sys_connect+0xe0/0x160 [ 1565.416556][T27871] __x64_sys_futex+0x1e0/0x4c0 [ 1565.416588][T27871] ? __pfx___x64_sys_futex+0x10/0x10 [ 1565.416617][T27871] ? xfd_validate_state+0x61/0x180 [ 1565.416639][T27871] ? __pfx_ksys_write+0x10/0x10 [ 1565.416683][T27871] do_syscall_64+0xcd/0xf80 [ 1565.416722][T27871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1565.416748][T27871] RIP: 0033:0x7fb8e0b8f7c9 [ 1565.416767][T27871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1565.416792][T27871] RSP: 002b:00007fb8e19980e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1565.416816][T27871] RAX: ffffffffffffffda RBX: 00007fb8e0de5fa8 RCX: 00007fb8e0b8f7c9 [ 1565.416833][T27871] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb8e0de5fac [ 1565.416848][T27871] RBP: 00007fb8e0de5fa0 R08: 00007fb8e1999000 R09: 0000000000000000 [ 1565.416863][T27871] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1565.416879][T27871] R13: 00007fb8e0de6038 R14: 00007fff0a09a880 R15: 00007fff0a09a968 [ 1565.416910][T27871] [ 1565.946894][T27877] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek [ 1570.814893][T27931] dump_stack_lvl+0x16c/0x1f0 [ 1570.814935][T27931] should_fail_ex+0x512/0x640 [ 1570.814962][T27931] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 1570.814996][T27931] should_failslab+0xc2/0x120 [ 1570.815033][T27931] kmem_cache_alloc_node_noprof+0x86/0x800 [ 1570.815062][T27931] ? do_kmem_cache_create+0x25e/0x740 [ 1570.815104][T27931] ? do_kmem_cache_create+0x25e/0x740 [ 1570.815139][T27931] do_kmem_cache_create+0x25e/0x740 [ 1570.815180][T27931] __kmem_cache_create_args+0x1fc/0x3b0 [ 1570.815209][T27931] mon_text_open+0x333/0x510 [ 1570.815243][T27931] ? __pfx_mon_text_open+0x10/0x10 [ 1570.815277][T27931] ? __pfx_mon_text_ctor+0x10/0x10 [ 1570.815310][T27931] ? __pfx_apparmor_file_open+0x10/0x10 [ 1570.815333][T27931] ? lockdown_is_locked_down+0x3f/0x130 [ 1570.815370][T27931] ? bpf_lsm_locked_down+0x9/0x10 [ 1570.815406][T27931] ? __pfx_mon_text_open+0x10/0x10 [ 1570.815436][T27931] full_proxy_open_regular+0x1b9/0x350 [ 1570.815479][T27931] do_dentry_open+0x748/0x1590 [ 1570.815514][T27931] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 1570.815557][T27931] vfs_open+0x82/0x3f0 [ 1570.815586][T27931] path_openat+0x2078/0x3140 [ 1570.815632][T27931] ? __pfx_path_openat+0x10/0x10 [ 1570.815685][T27931] do_filp_open+0x20b/0x470 [ 1570.815722][T27931] ? __pfx_do_filp_open+0x10/0x10 [ 1570.815780][T27931] ? alloc_fd+0x471/0x7d0 [ 1570.815824][T27931] do_sys_openat2+0x121/0x290 [ 1570.815851][T27931] ? __pfx_do_sys_openat2+0x10/0x10 [ 1570.815889][T27931] __x64_sys_openat+0x174/0x210 [ 1570.815917][T27931] ? __pfx___x64_sys_openat+0x10/0x10 [ 1570.815957][T27931] do_syscall_64+0xcd/0xf80 [ 1570.815995][T27931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1570.816020][T27931] RIP: 0033:0x7fb8e0b8f7c9 [ 1570.816039][T27931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1570.816063][T27931] RSP: 002b:00007fb8e1977038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1570.816085][T27931] RAX: ffffffffffffffda RBX: 00007fb8e0de6090 RCX: 00007fb8e0b8f7c9 [ 1570.816101][T27931] RDX: 0000000000000800 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 1570.816117][T27931] RBP: 00007fb8e0c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1570.816132][T27931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1570.816147][T27931] R13: 00007fb8e0de6128 R14: 00007fb8e0de6090 R15: 00007fff0a09a968 [ 1570.816179][T27931] [ 1571.534979][T27938] netlink: 9 bytes leftover after parsing attributes in process `syz.7.4398'. [ 1572.869591][T27947] FAULT_INJECTION: forcing a failure. [ 1572.869591][T27947] name failslab, interval 1, probability 0, space 0, times 0 [ 1573.166551][T27931] __kmem_cache_create_args(mon_text_ffff888050ad0800) failed with error -22 [ 1573.226630][T27947] CPU: 0 UID: 0 PID: 27947 Comm: syz.7.4399 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1573.226672][T27947] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1573.226681][T27947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1573.226696][T27947] Call Trace: [ 1573.226704][T27947] [ 1573.226713][T27947] dump_stack_lvl+0x16c/0x1f0 [ 1573.226754][T27947] should_fail_ex+0x512/0x640 [ 1573.226782][T27947] ? __kmalloc_noprof+0xca/0x910 [ 1573.226811][T27947] should_failslab+0xc2/0x120 [ 1573.226850][T27947] __kmalloc_noprof+0xeb/0x910 [ 1573.226877][T27947] ? lsm_blob_alloc+0x68/0x90 [ 1573.226918][T27947] ? lsm_blob_alloc+0x68/0x90 [ 1573.226952][T27947] lsm_blob_alloc+0x68/0x90 [ 1573.226989][T27947] security_prepare_creds+0x2f/0x270 [ 1573.227025][T27947] prepare_creds+0x5d6/0x940 [ 1573.227057][T27947] set_current_groups+0x15/0xd0 [ 1573.227084][T27947] __do_sys_setgroups+0x3e0/0x4f0 [ 1573.227116][T27947] do_syscall_64+0xcd/0xf80 [ 1573.227156][T27947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.227181][T27947] RIP: 0033:0x7f4461d8f7c9 [ 1573.227200][T27947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1573.227224][T27947] RSP: 002b:00007f4462d01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 1573.227247][T27947] RAX: ffffffffffffffda RBX: 00007f4461fe5fa0 RCX: 00007f4461d8f7c9 [ 1573.227264][T27947] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000d5d [ 1573.227279][T27947] RBP: 00007f4461e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1573.227294][T27947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1573.227309][T27947] R13: 00007f4461fe6038 R14: 00007f4461fe5fa0 R15: 00007fff851bc6b8 [ 1573.227340][T27947] [ 1573.640607][T27931] CPU: 0 UID: 0 PID: 27931 Comm: syz.8.4397 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1573.640650][T27931] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1573.640659][T27931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1573.640673][T27931] Call Trace: [ 1573.640681][T27931] [ 1573.640690][T27931] dump_stack_lvl+0x16c/0x1f0 [ 1573.640731][T27931] __kmem_cache_create_args+0x122/0x3b0 [ 1573.640762][T27931] mon_text_open+0x333/0x510 [ 1573.640797][T27931] ? __pfx_mon_text_open+0x10/0x10 [ 1573.640832][T27931] ? __pfx_mon_text_ctor+0x10/0x10 [ 1573.640864][T27931] ? __pfx_apparmor_file_open+0x10/0x10 [ 1573.640888][T27931] ? lockdown_is_locked_down+0x3f/0x130 [ 1573.640924][T27931] ? bpf_lsm_locked_down+0x9/0x10 [ 1573.640960][T27931] ? __pfx_mon_text_open+0x10/0x10 [ 1573.640990][T27931] full_proxy_open_regular+0x1b9/0x350 [ 1573.641029][T27931] do_dentry_open+0x748/0x1590 [ 1573.641064][T27931] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 1573.641108][T27931] vfs_open+0x82/0x3f0 [ 1573.641137][T27931] path_openat+0x2078/0x3140 [ 1573.641182][T27931] ? __pfx_path_openat+0x10/0x10 [ 1573.641231][T27931] do_filp_open+0x20b/0x470 [ 1573.641269][T27931] ? __pfx_do_filp_open+0x10/0x10 [ 1573.641326][T27931] ? alloc_fd+0x471/0x7d0 [ 1573.641371][T27931] do_sys_openat2+0x121/0x290 [ 1573.641397][T27931] ? __pfx_do_sys_openat2+0x10/0x10 [ 1573.641435][T27931] __x64_sys_openat+0x174/0x210 [ 1573.641469][T27931] ? __pfx___x64_sys_openat+0x10/0x10 [ 1573.641508][T27931] do_syscall_64+0xcd/0xf80 [ 1573.641547][T27931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.641571][T27931] RIP: 0033:0x7fb8e0b8f7c9 [ 1573.641591][T27931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1573.641614][T27931] RSP: 002b:00007fb8e1977038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1573.641637][T27931] RAX: ffffffffffffffda RBX: 00007fb8e0de6090 RCX: 00007fb8e0b8f7c9 [ 1573.641653][T27931] RDX: 0000000000000800 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 1573.641668][T27931] RBP: 00007fb8e0c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1573.641683][T27931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1573.641697][T27931] R13: 00007fb8e0de6128 R14: 00007fb8e0de6090 R15: 00007fff0a09a968 [ 1573.641729][T27931] [ 1576.223253][T27973] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4401'. [ 1582.244388][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1582.257933][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1582.271511][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1582.284796][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1582.298133][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1582.311466][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1582.324745][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1582.337991][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1582.351496][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1582.364804][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1587.246037][ C0] net_ratelimit: 4329 callbacks suppressed [ 1587.246059][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1587.265172][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1587.278301][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1587.291478][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1587.304703][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1587.317821][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1587.330976][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1587.344115][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1587.357973][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1587.371294][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1590.205485][ C0] sched: DL replenish lagged too much [ 1592.256353][ C0] net_ratelimit: 4339 callbacks suppressed [ 1592.256375][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1592.275793][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1592.289053][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1592.302287][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1592.315615][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1592.328887][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1592.342696][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1592.356277][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1592.369495][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1592.382698][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1597.265782][ C0] net_ratelimit: 6507 callbacks suppressed [ 1597.265807][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1597.285089][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1597.297845][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1597.311761][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1597.324127][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1597.337504][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1597.350496][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1597.363817][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1597.376288][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1597.389415][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1602.275483][ C0] net_ratelimit: 6607 callbacks suppressed [ 1602.275506][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1602.293832][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1602.307040][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1602.319468][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1602.332701][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1602.345170][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1602.358685][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1602.371445][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1602.384767][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1602.397281][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1607.285667][ C0] net_ratelimit: 6566 callbacks suppressed [ 1607.285688][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1607.304066][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1607.317450][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1607.329914][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1607.343623][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1607.356315][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1607.369528][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1607.381892][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1607.395117][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1607.407734][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1612.295493][ C0] net_ratelimit: 6701 callbacks suppressed [ 1612.295523][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1612.314744][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1612.327171][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1612.340352][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1612.352760][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1612.366010][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1612.378424][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1612.391603][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1612.404147][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1612.417255][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1617.305729][ C0] net_ratelimit: 6607 callbacks suppressed [ 1617.305750][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1617.324456][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1617.337681][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1617.350151][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1617.363263][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1617.375702][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1617.388882][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1617.401399][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1617.414504][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1617.427125][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1622.315484][ C0] net_ratelimit: 6760 callbacks suppressed [ 1622.315507][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1622.333768][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1622.347016][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1622.359401][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1622.373136][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1622.385584][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1622.398826][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1622.411307][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1622.424481][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1622.437919][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1627.326014][ C0] net_ratelimit: 6852 callbacks suppressed [ 1627.326035][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1627.344250][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1627.357450][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1627.369808][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1627.383274][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1627.395750][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1627.408969][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1627.421879][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1627.435027][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1627.447424][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1632.336088][ C0] net_ratelimit: 6638 callbacks suppressed [ 1632.336110][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1632.354540][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1632.367658][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1632.380053][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1632.393134][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1632.405656][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1632.418939][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1632.431989][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1632.445201][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1632.457598][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1637.346236][ C0] net_ratelimit: 6632 callbacks suppressed [ 1637.346258][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1637.364638][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1637.377785][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1637.390143][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1637.403360][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1637.415810][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1637.428970][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1637.441898][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1637.455845][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1637.468249][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1640.385837][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1642.355600][ C0] net_ratelimit: 6831 callbacks suppressed [ 1642.355621][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1642.374871][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1642.387560][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1642.400732][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1642.413476][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1642.426770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1642.439219][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1642.452605][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1642.465059][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1642.480807][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1647.366554][ C0] net_ratelimit: 6737 callbacks suppressed [ 1647.366576][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1647.385030][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1647.398350][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1647.411608][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1647.424704][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1647.437288][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1647.450653][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1647.463107][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1647.476415][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1647.488775][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1647.778833][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1652.375792][ C0] net_ratelimit: 6809 callbacks suppressed [ 1652.375814][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1652.395219][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1652.407652][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1652.420974][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1652.433728][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1652.446901][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1652.459343][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1652.473308][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1652.486289][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1652.499772][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1657.385469][ C0] net_ratelimit: 6807 callbacks suppressed [ 1657.385491][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1657.403778][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1657.417049][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1657.429517][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1657.442983][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1657.455511][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1657.468998][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1657.481453][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1657.494819][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1657.507262][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1662.396510][ C0] net_ratelimit: 6616 callbacks suppressed [ 1662.396535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1662.414911][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1662.428297][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1662.440884][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1662.454574][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1662.467033][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1662.480890][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1662.493574][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1662.506778][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1662.519178][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1667.406276][ C0] net_ratelimit: 6888 callbacks suppressed [ 1667.406297][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1667.424561][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1667.437731][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1667.450175][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1667.463794][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1667.476257][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1667.489807][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1667.502485][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1667.515819][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1667.529106][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1672.415700][ C0] net_ratelimit: 6596 callbacks suppressed [ 1672.415723][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1672.434175][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1672.447358][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1672.459872][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1672.473272][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1672.485962][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1672.499195][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1672.511599][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1672.524737][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1672.537276][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1677.425998][ C0] net_ratelimit: 6812 callbacks suppressed [ 1677.426019][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1677.444457][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1677.457646][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1677.470425][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1677.483625][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1677.496049][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1677.509310][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1677.522657][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1677.536346][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1677.548740][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1679.644908][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1679.662421][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1682.105420][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1682.112470][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P27978/1:b..l P27986/1:b..l [ 1682.122331][ C0] rcu: (detected by 0, t=10502 jiffies, g=199997, q=628 ncpus=1) [ 1682.130151][ C0] task:syz.7.4403 state:R running task stack:26120 pid:27986 tgid:27980 ppid:22468 task_flags:0x400140 flags:0x00080000 [ 1682.145100][ C0] Call Trace: [ 1682.148421][ C0] [ 1682.151370][ C0] ? __schedule+0x10b9/0x6150 [ 1682.156187][ C0] __schedule+0x1139/0x6150 [ 1682.160748][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1682.166981][ C0] ? kernel_text_address+0x8d/0x100 [ 1682.172211][ C0] ? find_held_lock+0x2b/0x80 [ 1682.176930][ C0] ? __kernel_text_address+0xd/0x40 [ 1682.182151][ C0] ? __pfx___schedule+0x10/0x10 [ 1682.187061][ C0] preempt_schedule_irq+0x51/0x90 [ 1682.192209][ C0] irqentry_exit+0x1d8/0x8c0 [ 1682.196869][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1682.202881][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 1682.208982][ C0] Code: e9 cd 24 5d 00 be 03 00 00 00 5b e9 c2 18 ec 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 34 24 <65> 48 8b 15 68 e7 f3 11 65 8b 05 79 e7 f3 11 a9 00 01 ff 00 74 1d [ 1682.228612][ C0] RSP: 0018:ffffc90003367558 EFLAGS: 00000283 [ 1682.234717][ C0] RAX: 0000000000000002 RBX: ffff88801d602628 RCX: ffffffff8231cd03 [ 1682.242701][ C0] RDX: ffff888032890000 RSI: ffffffff8231cd12 RDI: 0000000000000007 [ 1682.250689][ C0] RBP: 000000000000000b R08: 0000000000000007 R09: 0000000000000010 [ 1682.258763][ C0] R10: 000000000000000b R11: ffff888032890b30 R12: ffff88801d602600 [ 1682.266777][ C0] R13: dffffc0000000000 R14: 00000000000002e0 R15: 000000000000000a [ 1682.274872][ C0] ? __update_page_owner_handle+0x2d3/0x550 [ 1682.281004][ C0] ? __update_page_owner_handle+0x2e2/0x550 [ 1682.286964][ C0] __update_page_owner_handle+0x2e2/0x550 [ 1682.292727][ C0] __set_page_owner+0x126/0x560 [ 1682.297697][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 1682.303096][ C0] ? rcu_is_watching+0x12/0xc0 [ 1682.307922][ C0] ? bad_range+0x261/0x4c0 [ 1682.312371][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1682.317604][ C0] post_alloc_hook+0x1af/0x220 [ 1682.322420][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1682.328261][ C0] get_page_from_freelist+0xd0b/0x31a0 [ 1682.334023][ C0] ? should_fail_alloc_page+0xee/0x130 [ 1682.339524][ C0] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 1682.345484][ C0] ? __pfx_vmap_small_pages_range_noflush+0x10/0x10 [ 1682.352115][ C0] ? __pfx___split_page_owner+0x10/0x10 [ 1682.357807][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1682.364163][ C0] ? __kasan_unpoison_vmalloc+0x22/0x30 [ 1682.369758][ C0] ? __vmalloc_node_range_noprof+0x1259/0x16b0 [ 1682.375952][ C0] ? find_held_lock+0x2b/0x80 [ 1682.380666][ C0] ? __split_page_owner+0x23b/0x3b0 [ 1682.385898][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1682.391828][ C0] ? policy_nodemask+0xea/0x4e0 [ 1682.396712][ C0] alloc_pages_mpol+0x1fb/0x550 [ 1682.401597][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1682.407014][ C0] alloc_pages_noprof+0x131/0x390 [ 1682.412165][ C0] __vmalloc_node_range_noprof+0xe6c/0x16b0 [ 1682.418108][ C0] ? __do_sys_listmount+0x27f/0xf40 [ 1682.423365][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1682.428816][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1682.435266][ C0] ? ___kmalloc_large_node+0x10c/0x150 [ 1682.440760][ C0] __kvmalloc_node_noprof+0x42c/0xa40 [ 1682.446162][ C0] ? __do_sys_listmount+0x27f/0xf40 [ 1682.451459][ C0] ? __do_sys_listmount+0x27f/0xf40 [ 1682.456793][ C0] ? _copy_from_user+0x59/0xd0 [ 1682.461593][ C0] ? __do_sys_listmount+0x27f/0xf40 [ 1682.466842][ C0] __do_sys_listmount+0x27f/0xf40 [ 1682.472545][ C0] ? __pfx___do_sys_listmount+0x10/0x10 [ 1682.478672][ C0] do_syscall_64+0xcd/0xf80 [ 1682.483212][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1682.489303][ C0] RIP: 0033:0x7f4461d8f7c9 [ 1682.493756][ C0] RSP: 002b:00007f4462cbf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 1682.502212][ C0] RAX: ffffffffffffffda RBX: 00007f4461fe6180 RCX: 00007f4461d8f7c9 [ 1682.510201][ C0] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 1682.518192][ C0] RBP: 00007f4461e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1682.526185][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1682.534526][ C0] R13: 00007f4461fe6218 R14: 00007f4461fe6180 R15: 00007fff851bc6b8 [ 1682.542543][ C0] [ 1682.545597][ C0] task:syz.6.4402 state:R running task stack:24568 pid:27978 tgid:27977 ppid:21355 task_flags:0x400140 flags:0x00080000 [ 1682.559421][ C0] Call Trace: [ 1682.562826][ C0] [ 1682.565805][ C0] ? __schedule+0x10b9/0x6150 [ 1682.570519][ C0] __schedule+0x1139/0x6150 [ 1682.575078][ C0] ? mark_held_locks+0x49/0x80 [ 1682.579863][ C0] ? __pfx___schedule+0x10/0x10 [ 1682.584763][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1682.590547][ C0] preempt_schedule_common+0x44/0xc0 [ 1682.595905][ C0] preempt_schedule_thunk+0x16/0x30 [ 1682.601153][ C0] _raw_spin_unlock+0x3e/0x50 [ 1682.605873][ C0] madvise_cold_or_pageout_pte_range+0x70e/0x2100 [ 1682.612431][ C0] ? stack_trace_consume_entry+0x150/0x170 [ 1682.618330][ C0] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 1682.625221][ C0] ? find_held_lock+0x2b/0x80 [ 1682.629933][ C0] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 1682.636808][ C0] walk_pgd_range+0xc10/0x1f80 [ 1682.641623][ C0] ? __pfx_walk_pgd_range+0x10/0x10 [ 1682.646849][ C0] ? folios_put_refs+0x51d/0x750 [ 1682.651868][ C0] __walk_page_range+0x163/0x820 [ 1682.656870][ C0] walk_page_range_vma_unsafe+0x23f/0x9e0 [ 1682.662715][ C0] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 1682.669024][ C0] ? find_held_lock+0x2b/0x80 [ 1682.673776][ C0] ? mlock_drain_local+0x22d/0x4e0 [ 1682.679006][ C0] walk_page_range_vma+0x63/0x90 [ 1682.683976][ C0] madvise_pageout+0x257/0x540 [ 1682.688784][ C0] ? __pfx_madvise_pageout+0x10/0x10 [ 1682.694205][ C0] ? mtree_range_walk+0x718/0xc00 [ 1682.699374][ C0] madvise_vma_behavior+0x912/0x29e0 [ 1682.704686][ C0] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1682.710427][ C0] ? __pfx_mt_find+0x10/0x10 [ 1682.715049][ C0] ? find_vma_prev+0xd3/0x150 [ 1682.719778][ C0] ? find_vma+0xbf/0x140 [ 1682.724046][ C0] ? __pfx_find_vma+0x10/0x10 [ 1682.728753][ C0] ? __futex_wait+0x24b/0x2f0 [ 1682.733484][ C0] madvise_walk_vmas+0x31f/0xac0 [ 1682.738493][ C0] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1682.744005][ C0] madvise_do_behavior+0x1e2/0x530 [ 1682.749163][ C0] ? futex_private_hash_put+0x160/0x1b0 [ 1682.754815][ C0] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1682.760474][ C0] ? down_read+0x13d/0x460 [ 1682.764923][ C0] do_madvise+0x176/0x240 [ 1682.769292][ C0] ? __pfx_do_madvise+0x10/0x10 [ 1682.774179][ C0] ? do_futex+0x122/0x350 [ 1682.778543][ C0] ? find_held_lock+0x2b/0x80 [ 1682.783257][ C0] ? xfd_validate_state+0x61/0x180 [ 1682.788430][ C0] __x64_sys_madvise+0xa9/0x110 [ 1682.793313][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1682.798543][ C0] do_syscall_64+0xcd/0xf80 [ 1682.803081][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1682.808993][ C0] RIP: 0033:0x7fa66b78f7c9 [ 1682.813446][ C0] RSP: 002b:00007fa66c659038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1682.821877][ C0] RAX: ffffffffffffffda RBX: 00007fa66b9e5fa0 RCX: 00007fa66b78f7c9 [ 1682.829883][ C0] RDX: 0000000000000015 RSI: ffffffffffff0001 RDI: 0000000000000000 [ 1682.837874][ C0] RBP: 00007fa66b813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1682.845870][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1682.853858][ C0] R13: 00007fa66b9e6038 R14: 00007fa66b9e5fa0 R15: 00007fff2580b4d8 [ 1682.861890][ C0] [ 1682.864933][ C0] rcu: rcu_preempt kthread starved for 751 jiffies! g199997 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1682.876073][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1682.886159][ C0] rcu: RCU grace-period kthread stack dump: [ 1682.892082][ C0] task:rcu_preempt state:R running task stack:27736 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1682.905975][ C0] Call Trace: [ 1682.909276][ C0] [ 1682.912235][ C0] ? __schedule+0x10b9/0x6150 [ 1682.916955][ C0] __schedule+0x1139/0x6150 [ 1682.921505][ C0] ? __lock_acquire+0x436/0x2890 [ 1682.926503][ C0] ? __mod_timer+0x8f2/0xd30 [ 1682.931231][ C0] ? __pfx___schedule+0x10/0x10 [ 1682.936207][ C0] ? find_held_lock+0x2b/0x80 [ 1682.940915][ C0] ? schedule+0x2d7/0x3a0 [ 1682.945273][ C0] schedule+0xe7/0x3a0 [ 1682.949390][ C0] schedule_timeout+0x123/0x290 [ 1682.954293][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1682.959739][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1682.965553][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1682.971537][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 1682.977143][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 1682.981961][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1682.987548][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1682.992815][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1682.997805][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 1683.002705][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1683.008556][ C0] rcu_gp_kthread+0x26d/0x380 [ 1683.013264][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1683.018482][ C0] ? rcu_is_watching+0x12/0xc0 [ 1683.023302][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1683.028556][ C0] ? __kthread_parkme+0x19e/0x250 [ 1683.033784][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1683.039111][ C0] kthread+0x3c5/0x780 [ 1683.043201][ C0] ? __pfx_kthread+0x10/0x10 [ 1683.047818][ C0] ? rcu_is_watching+0x12/0xc0 [ 1683.052699][ C0] ? __pfx_kthread+0x10/0x10 [ 1683.057314][ C0] ret_from_fork+0x983/0xb10 [ 1683.061927][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1683.067105][ C0] ? __switch_to+0x7af/0x10d0 [ 1683.071811][ C0] ? __pfx_kthread+0x10/0x10 [ 1683.076510][ C0] ret_from_fork_asm+0x1a/0x30 [ 1683.081344][ C0] [ 1683.084377][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1683.090725][ C0] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1683.102136][ C0] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1683.107346][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1683.117420][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 1683.124394][ C0] RIP: 0010:__nr_to_section+0x2/0xe0 [ 1683.129704][ C0] Code: b4 db f3 ff eb 9b 48 89 df e8 aa db f3 ff eb cd 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 54 <55> 53 48 89 fb 48 89 dd 48 c1 ed 07 e8 2d f9 8a ff e9 94 00 00 00 [ 1683.149556][ C0] RSP: 0018:ffffc90000006ad8 EFLAGS: 00000203 [ 1683.155727][ C0] RAX: 1ffffffff1bad8ac RBX: 00000000000859ff RCX: ffffffff8231ce05 [ 1683.163800][ C0] RDX: dffffc0000000000 RSI: ffffffff823364e0 RDI: 0000000000000010 [ 1683.171787][ C0] RBP: 00000000000859ff R08: 0000000000000001 R09: 0000000000000000 [ 1683.179770][ C0] R10: 0000000000000001 R11: ffff88801d6e29b0 R12: 0000000000000001 [ 1683.187750][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1683.195734][ C0] FS: 0000000000000000(0000) GS:ffff8881248fc000(0000) knlGS:0000000000000000 [ 1683.204682][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1683.211283][ C0] CR2: 00005588092f1088 CR3: 000000000e184000 CR4: 00000000003526f0 [ 1683.219293][ C0] Call Trace: [ 1683.222605][ C0] [ 1683.225468][ C0] lookup_page_ext+0x46/0x100 [ 1683.230447][ C0] __update_page_owner_handle+0xd9/0x550 [ 1683.236125][ C0] ? br_nf_pre_routing_finish_ipv6+0x76a/0xfc0 [ 1683.242333][ C0] ? __lock_acquire+0x436/0x2890 [ 1683.247636][ C0] __set_page_owner+0x126/0x560 [ 1683.252528][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 1683.257927][ C0] ? mark_held_locks+0x49/0x80 [ 1683.262804][ C0] ? bad_range+0x261/0x4c0 [ 1683.267251][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1683.272500][ C0] post_alloc_hook+0x1af/0x220 [ 1683.277722][ C0] get_page_from_freelist+0xd0b/0x31a0 [ 1683.283246][ C0] ? nf_hook_slow+0xbe/0x200 [ 1683.287859][ C0] ? __netif_receive_skb_one_core+0x12d/0x1e0 [ 1683.293959][ C0] ? br_pass_frame_up+0x346/0x490 [ 1683.299030][ C0] ? br_handle_frame_finish+0x10e8/0x1f00 [ 1683.304796][ C0] ? should_fail_alloc_page+0xee/0x130 [ 1683.310296][ C0] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 1683.316224][ C0] ? dsa_user_dev_check+0xd/0x40 [ 1683.321187][ C0] ? switchdev_lower_dev_walk+0xdc/0x160 [ 1683.326972][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1683.333352][ C0] ? netdev_walk_all_lower_dev_rcu+0x24f/0x360 [ 1683.339641][ C0] ? __pfx_switchdev_lower_dev_walk+0x10/0x10 [ 1683.345757][ C0] ? __pfx_netdev_walk_all_lower_dev_rcu+0x10/0x10 [ 1683.352399][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1683.358332][ C0] ? policy_nodemask+0xea/0x4e0 [ 1683.363214][ C0] alloc_pages_mpol+0x1fb/0x550 [ 1683.368100][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1683.373500][ C0] new_slab+0x2c3/0x430 [ 1683.377848][ C0] ___slab_alloc+0xe18/0x1c90 [ 1683.382573][ C0] ? __pfx_dsa_user_dev_check+0x10/0x10 [ 1683.388142][ C0] ? __pfx_dsa_foreign_dev_check+0x10/0x10 [ 1683.393998][ C0] ? __alloc_skb+0x156/0x410 [ 1683.398610][ C0] ? __alloc_skb+0x156/0x410 [ 1683.403217][ C0] ? __slab_alloc.constprop.0+0x63/0x110 [ 1683.409110][ C0] __slab_alloc.constprop.0+0x63/0x110 [ 1683.414629][ C0] kmem_cache_alloc_node_noprof+0x44a/0x800 [ 1683.420565][ C0] ? __alloc_skb+0x156/0x410 [ 1683.425191][ C0] ? __alloc_skb+0x156/0x410 [ 1683.429815][ C0] __alloc_skb+0x156/0x410 [ 1683.434253][ C0] ? __alloc_skb+0x35d/0x410 [ 1683.438866][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 1683.443833][ C0] fdb_notify+0xa4/0x1a0 [ 1683.448099][ C0] br_fdb_update+0x323/0x7c0 [ 1683.452725][ C0] ? __pfx_br_fdb_update+0x10/0x10 [ 1683.457863][ C0] ? mark_held_locks+0x49/0x80 [ 1683.462743][ C0] br_handle_frame_finish+0xdf1/0x1f00 [ 1683.468323][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1683.474257][ C0] ? ip6t_do_table+0xc25/0x1c30 [ 1683.479247][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 1683.484482][ C0] ? nf_hook_slow+0x132/0x200 [ 1683.489196][ C0] br_nf_hook_thresh+0x307/0x410 [ 1683.494174][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1683.500102][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1683.505590][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1683.511599][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 1683.516814][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1683.522759][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1683.528685][ C0] br_nf_pre_routing_finish_ipv6+0x76a/0xfc0 [ 1683.534694][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1683.540623][ C0] br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 1683.546200][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1683.552128][ C0] ? lock_acquire+0x179/0x330 [ 1683.556858][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1683.563388][ C0] ? net_generic+0xea/0x2a0 [ 1683.567917][ C0] br_nf_pre_routing+0x860/0x15b0 [ 1683.572973][ C0] br_handle_frame+0xb28/0x14e0 [ 1683.577853][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1683.583185][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1683.589121][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1683.594912][ C0] __netif_receive_skb_core.constprop.0+0x6b3/0x35b0 [ 1683.601621][ C0] ? kmem_cache_free+0x2d8/0x770 [ 1683.606593][ C0] ? find_held_lock+0x2b/0x80 [ 1683.611294][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 1683.615992][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 1683.623126][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 1683.627817][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 1683.632542][ C0] ? sk_skb_reason_drop+0x136/0x1a0 [ 1683.637876][ C0] ? ip6_mc_input+0x515/0xf60 [ 1683.642577][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 1683.647624][ C0] ? __lock_acquire+0x436/0x2890 [ 1683.652584][ C0] ? process_backlog+0x450/0x1650 [ 1683.657624][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 1683.663447][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1683.669881][ C0] ? lock_acquire+0x179/0x330 [ 1683.674605][ C0] ? process_backlog+0x450/0x1650 [ 1683.679735][ C0] __netif_receive_skb+0x1d/0x160 [ 1683.684781][ C0] process_backlog+0x4a2/0x1650 [ 1683.690099][ C0] __napi_poll.constprop.0+0xb3/0x540 [ 1683.695496][ C0] net_rx_action+0x9f9/0xfa0 [ 1683.700116][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1683.705272][ C0] ? mark_held_locks+0x49/0x80 [ 1683.710049][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1683.715279][ C0] ? tmigr_handle_remote+0x132/0x380 [ 1683.720599][ C0] ? run_timer_base+0x121/0x190 [ 1683.725466][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1683.730774][ C0] handle_softirqs+0x219/0x950 [ 1683.735567][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1683.740876][ C0] ? irqtime_account_irq+0x18d/0x2e0 [ 1683.746193][ C0] ? neigh_periodic_work+0x6da/0xc10 [ 1683.751513][ C0] do_softirq+0xb2/0xf0 [ 1683.755697][ C0] [ 1683.758636][ C0] [ 1683.761583][ C0] __local_bh_enable_ip+0x100/0x120 [ 1683.766811][ C0] neigh_periodic_work+0x6da/0xc10 [ 1683.771958][ C0] ? __pfx_neigh_periodic_work+0x10/0x10 [ 1683.777630][ C0] ? rcu_is_watching+0x12/0xc0 [ 1683.782454][ C0] process_one_work+0x9ba/0x1b20 [ 1683.787478][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1683.792876][ C0] ? assign_work+0x1a0/0x250 [ 1683.797492][ C0] worker_thread+0x6c8/0xf10 [ 1683.802289][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1683.807529][ C0] kthread+0x3c5/0x780 [ 1683.811737][ C0] ? __pfx_kthread+0x10/0x10 [ 1683.816519][ C0] ? rcu_is_watching+0x12/0xc0 [ 1683.821418][ C0] ? __pfx_kthread+0x10/0x10 [ 1683.826066][ C0] ret_from_fork+0x983/0xb10 [ 1683.830793][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1683.835933][ C0] ? __switch_to+0x7af/0x10d0 [ 1683.840635][ C0] ? __pfx_kthread+0x10/0x10 [ 1683.845245][ C0] ret_from_fork_asm+0x1a/0x30 [ 1683.850054][ C0] [ 1683.854475][ C0] net_ratelimit: 6306 callbacks suppressed [ 1683.854495][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1683.873013][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1683.886166][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1683.898527][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1683.911613][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1683.926234][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1683.939497][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1683.952046][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1683.965222][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1683.977702][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1688.856118][ C0] net_ratelimit: 6454 callbacks suppressed [ 1688.856141][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1688.874500][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1688.887683][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1688.900176][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1688.913468][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1688.925973][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1688.939212][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1688.951777][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0) [ 1688.965177][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1688.978455][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:b0:e1:bc:32:cb, vlan:0)