last executing test programs: 8.804691215s ago: executing program 2 (id=81): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0xf, r0, 0xfffffffffffff57e, 0x7) ptrace$auto(0xc, r0, 0x9, 0xfffffffffffff6de) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000040)="158f4a2b") r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/orangefs/getattr_timeout_msecs\x00', 0x8a82b6a56f18970a, 0x0) sendfile$auto(r2, r4, 0x0, 0x7) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000780)="906f319d493614e6834bb14c5d8ba668ea3fe49b929347b1a2f5cd2d8bbea5a6e4a616ae542f1291fe274b9b559d6f3f0108fbb2b68f1c04d38107f490c44e278f81cb231be4de752bb862cc", 0x100000000}, 0x6, 0x0) statx$auto(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x3, 0x7fffffff, &(0x7f0000000140)={0x9, 0xf, 0xb476, 0x0, 0x0, 0x0, 0xffff, 0xb9, 0x3, 0x7, 0x3, 0x80, {0x7, 0x10000}, {0x2, 0x9}, {0x7378, 0x7}, {0x5, 0x1}, 0x8, 0xfffffffc, 0x1, 0x401, 0x400000000006, 0x7, 0x6, 0x2, 0x8001, 0x6, 0x0, 0x9, [0xff, 0xf, 0x7fffffffffffffff, 0x81, 0xd, 0x8001, 0x5, 0x3, 0x9]}) setresuid$auto(0x0, 0x0, 0x0) shmctl$auto_IPC_RMID(0x0, 0x0, &(0x7f0000000480)={{0xa, 0x0, 0x0, 0x6, 0x0, 0xfffffffd, 0x9}, 0x6ab, 0x6, 0x3, 0x8000000000000000, @inferred=0xffffffffffffffff, @raw=0xc1f, 0x3000, 0x0, &(0x7f0000000340)="de029906c9fdbd6e52a9b192e1eda36e11562662d39dee67e118a2ae1300895a41042fcbe1436712ed4619078cbcc52e729415a58d3bb3a460315665c395918e49917e3952f155b12c2e9a363f513d78f420ac395aa964d885d788a41099b7c17d9422cffce8a1ebf89ad42efddee1de0489e7e82fda0f", &(0x7f0000000400)}) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.0/usb1/power/wakeup_active_count\x00', 0x0, 0x0) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="c80d1b5d399b58", 0xfdef) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) ioctl$auto_EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000500)={0x6, 0x3, 0x4, 0x0, 0x1, 0x0, [{0xffffffffffff7a7e, 0x6, 0x80000000, '\x00', 0x8}, {0xf, 0x9, 0x5}, {0x7, 0x0, 0xf, '\x00', 0x7}, {0xc, 0xc66f, 0xa, '\x00', 0xa}, {0x2, 0x0, 0x3, '\x00', 0x4f}, {0x1, 0x3, 0x4, '\x00', 0x101}, {0x0, 0x6, 0x10, '\x00', 0x99eb}, {0x3, 0x5, 0x3, '\x00', 0x2}, {0xd14ef1, 0x7, 0x9, '\x00', 0x903}, {0xfffffffffffff01a, 0xba, 0x1}]}) kexec_load$auto(0x6, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) read$auto(r3, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) write$auto(r1, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) 8.498375306s ago: executing program 3 (id=83): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/bus/pci/drivers/c3xxx/uevent\x00', 0x402300, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="13000000", @ANYBLOB='N\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000340), 0x7, 0xa505}, 0x800}, 0x7, 0x4007) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/rc_rateidx_mcs_mask_2ghz\x00', 0x88000, 0x0) mmap$auto(0x0, 0x400008, 0x200, 0x3a, 0xffffffffffffffff, 0x3) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) sysfs$auto(0x2, 0x10000000000002c, 0x0) r0 = fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x149942, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) write$auto_uhid_fops_uhid(r0, 0x0, 0x0) memfd_create$auto(&(0x7f0000000100)='l2tp\x00', 0x100) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x1, 0x4, 0xfffffffffffffffb) prctl$auto(0x59616d61, 0x1, 0x1, 0xfffffffffffffffb, 0xffffffffffffffe5) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000380), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) clock_settime$auto(0x14, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf25040000002d0011009b"], 0x44}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) 7.505529742s ago: executing program 3 (id=84): r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) process_madvise$auto_MADV_PAGEOUT(r0, &(0x7f0000000180)={&(0x7f00000000c0)="6bc435df379d38af2070e83ab820b0b15150be99d3063202de267667bb5fa15ce74ac0fb440ea2015d190f8ebd6e6427cb9a59d3cad3d2819c4e21caabd133d6cccdbae60f4ae89d62159cdb0cd02b6c24f2f4b16912ffec395de0e2a131d6047ed554bff8eed5782198b7615f59bd171d433765771e3ebe9ba010b66a31cb92dc09aab37592b5f66bbc92184733254768720007c7d6097032cea9fe5d18b38b4598956717fe92912375382c9e061b42", 0x3}, 0x1, 0x15, 0x5) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) select$auto(0xd, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1, 0x401}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/ns_last_pid\x00', 0x88642, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) write$auto(0xffffffffffffffff, &(0x7f0000000180)='7\x00\xe6\xeaA\r\nW\xa6&\xff\xff\f\x00\x00\x00\xff\x00\x00\x00\x00\x00\x1f\xde\x00\x00\x00\x00\x00\x00\x00', 0x9) set_mempolicy$auto(0x6, 0x0, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xe01, 0x0) fadvise64$auto_POSIX_FADV_DONTNEED(0xffffffffffffffff, 0x10, 0x8, 0x4) setresgid$auto(0xffffffffffffffff, 0xee00, 0x0) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r2, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2T\xc0\x1d\xa4\x10r\xc4\xa2\xb1y\t\x05\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xed\rW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1', 0x100000001) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x2, 0x0) ioctl$auto_TUNSETCARRIER(r0, 0x400454e2, 0x0) socket(0x2, 0x805, 0x4) r3 = socket(0x2a, 0x2, 0x1) bind$auto(r3, &(0x7f0000000080)=@rc={0x1f, @none, 0x48}, 0x6c) connect$auto(r3, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x57) 6.532883729s ago: executing program 1 (id=85): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd11\x00', 0x4ea02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) r0 = socket(0xa, 0x3, 0xfffff129) close$auto(r0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(0x0, 0x0, 0x408) r1 = socketcall$auto_SYS_SOCKETPAIR(0x8, 0x0) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) ioctl$auto_TIOCGETD2(r1, 0x5424, &(0x7f00000000c0)="d4a922f9527adb91296b350d81ecdfb47013e5694596e86bb9c0bb7da0917bfc96089f6854e37ed1ae3d3f23db4bdb7a5e3f3f5e531ccb63187d1fae2221451bdc45f8b13bf9d33a0a7267fd9d3470b1732f5aae1fd2a1dc3955df05616ec65ffe0b64262dc223a5eba888c6e4b842c62d52fe0055e8e15543bfcbd82bb40ef1df886aee16a90f60376cb1a07f54d0d2b08bb4a7d2452f4a30101b37b1e93d55674a8495eb024e19a7c93f2f363089112eb02496b24f44d185880e1accfb4f00b7a0480d8a2b1144e839d5253c11cf946093ab36a38d7d65d5f121c800f2e0a108e8fc5508acc501b92f") syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000001c0)={@siginfo_0_0={0xffffffff, 0x401, 0x1, @_sigchld={0x0, 0x0, 0x2, 0x2d, 0xc91}}}, 0x5, &(0x7f0000000240)={{0xc4d, 0xffffffffffffff37}, {0x34, 0x5}, 0x5, 0x4, 0x8000, 0x7, 0x4, 0x1, 0x100000000f, 0x6, 0xf, 0x7f, 0x6, 0x5e97, 0xd, 0x5}) migrate_pages$auto(0x0, 0x8, &(0x7f0000000000)=0x4, &(0x7f0000000040)=0x3) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000300)=""/4096, 0x1000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/pnp0/00:02/resources\x00', 0x63102, 0x0) sendfile$auto(r1, r3, 0x0, 0x400000000006) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x80003, 0x304) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x5) ioctl$auto(r4, 0x4008af03, 0x0) io_uring_setup$auto(0x1, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(r4, 0x4008af30, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x40009, 0x9, 0x9b72, 0x7, 0x28000) r5 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r5, 0x0, 0xfffffdf1) 6.3945267s ago: executing program 2 (id=86): r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) process_madvise$auto_MADV_PAGEOUT(r0, &(0x7f0000000180)={&(0x7f00000000c0)="6bc435df379d38af2070e83ab820b0b15150be99d3063202de267667bb5fa15ce74ac0fb440ea2015d190f8ebd6e6427cb9a59d3cad3d2819c4e21caabd133d6cccdbae60f4ae89d62159cdb0cd02b6c24f2f4b16912ffec395de0e2a131d6047ed554bff8eed5782198b7615f59bd171d433765771e3ebe9ba010b66a31cb92dc09aab37592b5f66bbc92184733254768720007c7d6097032cea9fe5d18b38b4598956717fe92912375382c9e06", 0x3}, 0x1, 0x15, 0x5) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) select$auto(0xd, 0x0, &(0x7f00000001c0)={[0x8, 0x200000000006, 0x7, 0x8000, 0x0, 0x80000008, 0x5, 0x6, 0x8fc, 0xb80, 0xe34c, 0x4009, 0x3, 0xfffffffffffff954, 0xfffffffffffffef8, 0x4]}, 0x0, &(0x7f0000000080)={0x1, 0x401}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/ns_last_pid\x00', 0x88642, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) write$auto(0xffffffffffffffff, &(0x7f0000000180)='7\x00\xe6\xeaA\r\nW\xa6&\xff\xff\f\x00\x00\x00\xff\x00\x00\x00\x00\x00\x1f\xde\x00\x00\x00\x00\x00\x00\x00', 0x9) set_mempolicy$auto(0x6, 0x0, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xe01, 0x0) fadvise64$auto_POSIX_FADV_DONTNEED(0xffffffffffffffff, 0x10, 0x8, 0x4) setresgid$auto(0xffffffffffffffff, 0xee00, 0x0) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r2, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2T\xc0\x1d\xa4\x10r\xc4\xa2\xb1y\t\x05\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xed\rW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1', 0x100000001) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x2, 0x0) ioctl$auto_TUNSETCARRIER(r0, 0x400454e2, 0x0) socket(0x2, 0x805, 0x4) r3 = socket(0x2a, 0x2, 0x1) bind$auto(r3, &(0x7f0000000080)=@rc={0x1f, @none, 0x48}, 0x6c) connect$auto(r3, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x57) 6.130310111s ago: executing program 0 (id=87): r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) process_madvise$auto_MADV_PAGEOUT(r0, &(0x7f0000000180)={&(0x7f00000000c0)="6bc435df379d38af2070e83ab820b0b15150be99d3063202de267667bb5fa15ce74ac0fb440ea2015d190f8ebd6e6427cb9a59d3cad3d2819c4e21caabd133d6cccdbae60f4ae89d62159cdb0cd02b6c24f2f4b16912ffec395de0e2a131d6047ed554bff8eed5782198b7615f59bd171d433765771e3ebe9ba010b66a31cb92dc09aab37592b5f66bbc92184733254768720007c7d6097032cea9fe5d18b38b4598956717fe92912375382c9e06", 0x3}, 0x1, 0x15, 0x5) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) select$auto(0xd, 0x0, &(0x7f00000001c0)={[0x8, 0x200000000006, 0x7, 0x8000, 0x0, 0x80000008, 0x5, 0x6, 0x8fc, 0xb80, 0xe34c, 0x4009, 0x3, 0xfffffffffffff954, 0xfffffffffffffef8, 0x4]}, 0x0, &(0x7f0000000080)={0x1, 0x401}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/ns_last_pid\x00', 0x88642, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) write$auto(0xffffffffffffffff, &(0x7f0000000180)='7\x00\xe6\xeaA\r\nW\xa6&\xff\xff\f\x00\x00\x00\xff\x00\x00\x00\x00\x00\x1f\xde\x00\x00\x00\x00\x00\x00\x00', 0x9) set_mempolicy$auto(0x6, 0x0, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xe01, 0x0) fadvise64$auto_POSIX_FADV_DONTNEED(0xffffffffffffffff, 0x10, 0x8, 0x4) setresgid$auto(0xffffffffffffffff, 0xee00, 0x0) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r2, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2T\xc0\x1d\xa4\x10r\xc4\xa2\xb1y\t\x05\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xed\rW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1', 0x100000001) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x2, 0x0) ioctl$auto_TUNSETCARRIER(r0, 0x400454e2, 0x0) socket(0x2, 0x805, 0x4) r3 = socket(0x2a, 0x2, 0x1) bind$auto(r3, &(0x7f0000000080)=@rc={0x1f, @none, 0x48}, 0x6c) connect$auto(r3, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x57) 5.351671202s ago: executing program 2 (id=88): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, 0x0, 0x0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r1, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) socket(0x15, 0x5, 0x0) prctl$auto(0x0, 0x2, 0x4, 0x5, 0x7) unshare$auto(0x40000080) 5.292008295s ago: executing program 3 (id=89): close_range$auto(0x2, 0xa, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x440, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) getsockopt$auto_SO_PEERGROUPS(r0, 0x9, 0x3b, &(0x7f0000000000)='/sys/class/zram-control/hot_remove\x00', &(0x7f0000000040)=0x2) sendfile$auto(r0, 0xffffffffffffffff, 0x0, 0x800048) r1 = socket(0x2, 0x1, 0x6) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x1a, 0x8000) landlock_create_ruleset$auto(&(0x7f0000000140)={0xfffffffffffffff7, 0x806, 0x2}, 0x10000, 0x75b) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r1) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x5, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) r3 = setfsuid$auto(0xee00) setreuid$auto(r3, 0x0) geteuid() ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000240)=0x209b3c98) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000040), 0x40000000001243}, 0x4, 0x0) setsockopt$auto(0x3, 0x3, 0xffffffff, 0x0, 0x8) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x4611, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) sysfs$auto(0x2, 0x2000000000040, 0x0) r6 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="030329bd7000fbdbdf250300000004000500"], 0x18}, 0x1, 0x0, 0x0, 0x8804}, 0x4004010) r7 = fsopen$auto(0x0, 0x1) fsconfig$auto(r7, 0x8, 0x0, 0x0, 0x0) 5.104479557s ago: executing program 0 (id=90): keyctl$auto(0x11, 0xfffffffd, 0x0, 0x0, 0x1000000000008) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x8c81, 0xd1) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181d40, 0x0) read$auto(r1, 0x0, 0x1d) r2 = openat$auto_component_list_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$auto_SO_RCVTIMEO_NEW(r2, 0x8, 0x42, &(0x7f0000000080)='#^\'\x00', 0x2) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) r4 = socket(0x2, 0x1, 0x106) setsockopt$auto(r4, 0x1, 0x21, 0x0, 0x9) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={&(0x7f0000001940)={0x120c, r5, 0x35712d2af9a9dbe3, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@typed={0x10, 0x1d, 0x0, 0x0, @str='/dev/uinput\x00'}, @typed={0x4, 0xc2}, @typed={0x14, 0x14, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x4, 0x59}, @nested={0xc, 0xf2, 0x0, 0x1, [@typed={0x8, 0xe4, 0x0, 0x0, @ipv4=@empty}]}]}, @TIPC_NLA_NET={0x1a2, 0x7, 0x0, 0x1, [@typed={0x8, 0x119, 0x0, 0x0, @str='#^\'\x00'}, @nested={0x4, 0x50}, @nested={0x169, 0xa1, 0x0, 0x1, [@typed={0x8, 0x136, 0x0, 0x0, @u32=0x6244}, @generic="790e52f612844ce3b1cbe9ffe44c2be1e27c4c230b43dd914e0069f1012de9923c8d6d51c47e49add79486f1938d39bee68714e9a7616f5311e4dab526c30abb80f4e82e83db2d616a96dd8e1af2717a6499f4071e56ec9aa5ad1eaacd92da858a6744cf4e8155e6509ea53c3dda1c278527ea66cbdd201db983aa256b6bbbfb4ca0211f219890cfe2a89a45ede76c9624e3d88bf221c972c3149eab031919db73352130e03aebe3ed311cbcaf1733c605faba8374b9d7fad80e8572cabd417f5c4f2b", @generic="35eb63a68545cd726de8469d8b6428368810eafebae687635388065379153a48df851ac7c3188ace606ca8f85b571c33e804df6dae90b00c496f29afe025a6f40f658cb088565617f24ea18712fea0ec7ab00c6628286606859f1c0e6ab667f51273262f6224535ad67e75a857dc85ed7ae38749eec643bb3d5366fb498ae253dc32fef6af4c04a63f89d8e7d836f84f09befa5d89816e7d46ad"]}, @generic="993c32cd56407ea63e32891a346d341e86e45a283801dff09d6e5c5536b6", @nested={0x8, 0x76, 0x0, 0x1, [@nested={0x4, 0x10a}]}]}, @TIPC_NLA_MEDIA={0x1017, 0x5, 0x0, 0x1, [@generic="1a19165501041458ba402a108e922955a82c0cfc826a7f1685a578460d148db3a6a2256d5c9eff7b0a34a1a225448eb30a8ad58e77e77ec81b9ab70100ae05b10348d682d04bf4c234f5d959660c53372be12348c3d146a8a594d7f26bb08689a9588524e931c8ffea1d1e5e0eee735db8ba2de5a3f3c66f6fde6a009aaf10da23e37ba1a1741622a91d4f35087a496fd44d45832c6697a9c7be4761f4d56242fc8aa397487662ce792d888a8cd4bce29a2987901a0d1b1e3474ef0d0a66f90491b9a3757529b659d621909d68466c2045e8426387239f637a2457323054538cf782d3ca8afd7404ac3600217da9483923e7b2e7ff7a809191c5a0fc3c41f262ff335fc44a502f56da22a7220524a43e24dc39fa8230aada3b60466dd900ff2379285dcb308bc28d3c7eeeb9351843aea787e6f963967f11d144a5275f9e42a1f1aa815723ef8e78762679b4dfaffa0cee9c04a3008afd3b3f049178779174225665325842a2eeb04ab82d2045b8a33d6c5bf5d8e518e388d5303074c816203f7a52ef194949790b3de24b5346383b75025a6b8b8ba02ffdaa0d71d73b5cf35ea91d2dca9ef429af34961eb40aec30ba5f3073a876b524f27f8677f8b43cb5e1888e38ed1dcb9672744b673dae9179f8a57d345381db52dec0dca62fb976b123883bfab689b785c3b7d4fad5a8d9ab2f12e5fcb651d4ec3a476774548779f2d31c77c4e5e6f62acc96370429d52419295a4e3c1ebfa8d9b0c4586955ff5687e4e54376752d5086eb59e29f78f6f4346d5797af422558c3c46d2d1b5d168b4efa43d2d749462f224af64a0c2c43c7c5677b432b1445fa6d61f4d621accb4319142605f206a715e3b87c69151f0ba0e71d4f6362b4c3c1b87355c2ff3a35d26b4ae091c85177e593edbd77d255b956c92ac950e16600c81295a6f4e34c014ce93ebed9dc3cd7806263f38466d7e38f941f40cc66f19ce49ccf440c888a649076da12e4545dda3fb40e109ee485e627996d9cb574dbe1e33a0550df4c01edbf6c9ddb201fd5c897fefbfc1011afaa02e68670cdbe271d20614c82ff36efab0b1ca8bab67c442cb4a36668d0f20029445b8dfca308def201145e4185450f90ce29abe3fdc3b2477502b0d154f5d19c6c77cdcc28a7fe98ccb30010b014cfcd49812cef2b613a409a5c70fa6e4f99065ec572e1f5b9d7c4c7c0b3109646496d362ac49adb077564745047849cf827d170813ef16000743652ef1e18c2d7ee200ac36045ac2f923f864ff5f2447c3452788013d1c78b2ce8f6f76432629f32f4fcf8bbd54ba804568f4188bb1fa8c3fbfb59d7dac27cddc6d5bba16884fcdd6958b1eb857325a8938a94e687712dce4208cee23508bd3a75bdc78a3f4013ac9b066614bf8bcebe245bee77e79c32923928346ff746acab75f795a8086de74d0b9e618fa39e985d1b47d095e2a0b340dbdcc57bd82d5ef3fa50a723ece0c8a63cde26e31b349125a9887489a9a8c3f3a009c7ce291751458e9954c28c7884af474d8fff08c7de30b51e906bd50a86bca978799311ebe1b30e2dd4a4d76fc2d712f831e1eaa6db9fcdee9456eb15c01b6e87608512d7f9c71e3e25159fedf1f87d5855678168d62ec4bd3e4801b73bcde254771bf8f5ef55eb034bbc220ea193c0a173c4e6a811d15b0a41edae3f8fe2fab96374ff005fedffc3f1355fdccb7407151080dccdc824f2a98d370b7da4077e5076004fe727e96a4bfeeaa987ac62a0ae52af74fe5a342008ab85011196cc0365303064a0f2cf8637f0956ccbe933df2266f248d382842bd85a882c6f44cbdc9fbda25c0a8f3441b81614a26b2b18d151b7d8602c8a3932ae5fb7c1d165aecdd64bc29990107309e48ec568f6a9b0b30da7a2ef49ec19dc8c9550d29e272eb12ed300ccc7effc51166b126a0bf931c7c62133498e300e68b2933c74c96feb1b6e852e85f284cda1e24dd5db302451ea97334383d689413c20eef66a95bf8d64f426229028666ffa78bd4ef81587081664806647592f2fef4873452a72a7a8f2851354baa07fd6991bbe5184f589fd19247efe500776c361500a76d257039de5895401e0dd41ff77e2c8a6fae26bc41141b1bcad7e7a6670b941f02e25bcfedb21c22376002a422b176ddde7a1448ac8fb21057b0ca5485fc8bfabb4158ee42f38fa41b5c5b14959e77ac20c284dae248e8b421582b223bfd69e9e86cf396e209f34ece11e67fff6fa389ef7d47d01b433ea0b4e684e35cef85c76619b88e3d9e87c9ee99bf4621071359dbebaeb33cc13be779e64240b4322ac4eb31e4cd50d8d42f960a8812a5f0fd57f1c3d70acca4151a16216182d56166cf77d9e24c55bb1665c5ad51b18da91e37a6fef4407dbf4f32ee96f591b8d8be493597fd2318090f79252280d3e5cc3ed4bb5ed49baa12466fdfa95404dc52d72a9664511f78479aa91d54ace94028665aa64c35081f63af0d56ab60b06bcb52ac95e35b04e19895da9b19dd3666abb7664fed0b87c9f4ee6a8cb88d2864d6d041c1c77843e442c6f2106daf9a40c51fe1e88808996fa3fb8d70e7ee9a3f2e61f863fb030cbfe9a8fda2a3d6c1d6fbdc048253231da1c724ea9eb3b538708a27f3ab08ea18067e5644fac4138d56cbe8dc8414acf68063fdbc4726c1f203b6bf9610d0386c8d389b51a812e9965c359374eb9df371e27c466a326eae1b4d9bec6965082eb3d831504eb31728a2111e5dbd5ed274fd8d2025455a546eef8a470e2b619971df535aff4c0f5d96bab31f89e4e9f53b09af7a1c34120833775f0f000621524d964282752ebf07f63e13012024dda8b96fb8eb7bc2d685f8b0bb5f07dd03f2351b4761c5c81fed025067f7a0423dfe53dc7b29af0a402e0ccc2afdd01a1d6a678ab02b3a3a1494b5e6ba10bbe8911a5749d62c22abf287c9e5bf517c7d0768c1e6e1f4e4199b4507d6085bb8c1969ab75420caf573d58a4a4dcd6b0aeef6ee1310cfcdf96c5a9157e7e9e757f67dcf418697c89ebdf5c528a989d2c6a42ddd02fffa00181908923b57807b52d068a5ab1ab575ecccb9d3452583c62f8bd1ef24d57bd5cb147c18dead8ae125dbe6bce84a0716e21525480a758196d5b3c70760a28c04ea03ef19aa9ff6ada0da07105caea09f32693251ae4aecede47526deb29be283a9b24e9a2ad9684c66f1d9f85d1a3a67ac8b40208adbaf79c097fecff50f1adf51416028377669c996bedc0832a2ca86a4b45f058ebb391630d5da2b217be57aa2c43cd101f29869c29b68f1f6119cf68b09e368999239814b525ce229df8170d540009f611a1e25bc12c93c60e14a81024ab4fbf563a16b084ea4f19fa8ecb6a5908da2c0b0e974d14adbf275ed05be287614d7b9bcbeba3919cde60325d96ecaaf2ba56f796e99b4bf2c36766293e59d88f0f73c6a85e273c6db7bb25b045e638f6080951c116fcaa1ef04fcd6aca0c059c831414f27a2e4d0e4c0c4fec86d5bdcd938c551317a7369c8740de11689b1312ab10bae46b643c1ba3f7cd9d74be0ea8c2bf7fa708052c0031a40950838fddc10ecb5686554b5dc0a08ac255b9aa66fa278c2abf9fd272f6a73cd822f3024aba5df17c1cd67e4f8584de7960db9d2b401f5b041dac30b2acb1534d0f601aeb4cc60486101987fe3edb688389402154a01d9a6bca369a6290b0651e2cb0d43abc5f9502c791602b0150e57b85300591237b75c5d6b41ad464d08ce0ad28bc0e5ce9a6eebaec98eeea5338d26083fe83d1adace63dd7aa2da34252fe9520c0acd26e59b1ecadb16cc17ee1d6867880f28ddf8dd34c63eb41a5192cfd32609d23909bace52872c4eb19ff215cc94960d2afb20193b368fa9529026576cc7571b519201e24f34081e9146cb63f7f12e92c9c356189c29a996ac67555a224fb408aabdd1417bb0a00c34bf37ffcc7ac35d79e4ef9a40599b309c88f242b34c3dbfcba7acfe5442dfa0fe36cb264987194413b5407f1e6f6e41fc08a4ec882530231515b030ad2fbf3821f98da127549fb3ed5ee749b0ad689a49ec3ad0c290409d657a9ca5562673f1a4e900156cc21c4eb3d3fd7fb9e60fd4dec847a1224ef7b4a827b6728573ac2787716e74a375755ffdb6c08d07556154f7d0ab452a1c9349cba5a47d07e518cd0fcc6df4a15a274c0b5c980fa94476fddff888cf57f969c2c424d36c7e9fce8d590be13bbc99cb9a5fdbca6ba7d768671ab405ef2b8acd0c2202b4ecd7e56fa96738935c20cb81f636f6f17b40d8f8b73ac7bd3e07ed8eb783c0ffc09e8e9d60722829b05e80b333792b52fd62db8b51eb39ac0e9c6d4b2d25ab263ec1f33e6c156d5de10b10980a89046d0e3fceb639796234ac3cc3484a6ec4c0eec5c4b32ffc2b858ec3d4162abf310dbab12d728f3b3c4a22b950426bc4da145faf156334a44298602c5d46a03fde4d489f435d936c18a68234acf6c7e482ebcf4d21db082d1cafedbedc11bbc6add7f85d487ec6f29ca63f6aa5243a1c6e0f219eafc55532ae68e3e93c21ed5b955c5110619b31d8161e50bfbe9dd30204bcb488cf473702de50411268427bfa7b7130d7c04d04da51d9fc1e485ab158fa4ab60a7156471c5e312bf76b62fa170cc118ba429839dd8c687cbe2cc64f1d2c9210362bffb4df28e515958fecb7858c9e3486dd32b7c204f7fcd65852ec4d23e9b5748f2a3ce1ed5f78a3227a661845c45165519c80fc3bb4baa8523bf9ac8ae6bc3237dd577044d63cad5b56120dc4dd6d086f6b6f974185a7de77ecb0e88082796b5139b73e732c06ad7cbdcc40b47464a94a460fcd96954bac5a0d1247ecdc918b7ef45bca373ef0194de10a8d25020a3ebb63c710c2092802ff0f26c176de85280c70a0c0704ddd93fa69019903a7cfdef73a0f317d7f2b8429c98767f84aa2878453402ad82b8b12cbfd41a70f84769a88a415ff5a8f72801a2cfa93b0fdf6b473e7c48638d67d61939858782977421b7bc64e27b7936b388aa52eafcb79c90dd31fa7f63b7119d6e578d1aba53c3b64ad29dfbd67f84d1eff42a0dc68f91cd4556a9bc3a340b486a1e2b2c8178f918cdcf634f0e7dc7af3603eac78cd329c46c4faf3c99f97d5863a5862e0ae0637953aef182f3d72de1a2c02e9d30d957beba5dfdd87b0f1d43881bb55dc3b7de554f6b324e0ea81c873f8a9d36776f33657d7a65b6d1b87a05c44649616b4fb0c6041a86dce0ee37bb351885fcf4e13c7cee1eb5ff29650cd0c2919be67cf218fa2aa9babed0aa2f73de6662debbd5356d5422bde51c9ed9b88cada0965a530e9f5e517cf68d16a60281983e1d492ced1987590d1229f383e5e91d5f3987ba94b4f334ada612c78312295cdb4b6874b05e1d0d108fc809b8c975a7800c3fc1c9a3aa914e7be148c20c864b87ae65869b50aabe43cae0da91aa5517b3d2c5d99d0dd116a34fd9d9f5efce1534bad02dd9a02e32412833213c3d6666a55a949e5ecdeef0ec880220c46025c79659f72ce3c6384efbe310453185e06e3987671322c492e6d91d27fbdd82c8b7e0879c5e0f2748f339512306324eaee5ec2193bd85887e468a29711c63002883e01210d612d443d9928a2943b80c7197396149cbb2c372a4182a1784e2f44e8d9f24eea489ce0ec51ca2f19114073eba2a6e250120c912b41f964f71589e585dd11f63246cc58ea30e1f6a7c173ae09141106e69cfd8cfc3ca1a32bc74b2d5dc8977a66f0d157bfd40b5aaf0a1c3b8b9766c85e472a0d2be00", @generic="e9de93fcfe99faefcb5b66f7a6acf044dbeb1d3873d702934c24c1efe2"]}]}, 0x120c}, 0x1, 0x0, 0x0, 0x841}, 0x4) unshare$auto(0x40000080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r6) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000000c0), r0) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x18, r7, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4104}, 0x20044050) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) 5.103153789s ago: executing program 1 (id=98): r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) process_madvise$auto_MADV_PAGEOUT(r0, &(0x7f0000000180)={&(0x7f00000000c0)="6bc435df379d38af2070e83ab820b0b15150be99d3063202de267667bb5fa15ce74ac0fb440ea2015d190f8ebd6e6427cb9a59d3cad3d2819c4e21caabd133d6cccdbae60f4ae89d62159cdb0cd02b6c24f2f4b16912ffec395de0e2a131d6047ed554bff8eed5782198b7615f59bd171d433765771e3ebe9ba010b66a31cb92dc09aab37592b5f66bbc92184733254768720007c7d6097032cea9fe5d18b38b4598956717fe92912375382c9e06", 0x3}, 0x1, 0x15, 0x5) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) select$auto(0xd, 0x0, &(0x7f00000001c0)={[0x8, 0x200000000006, 0x7, 0x8000, 0x0, 0x80000008, 0x5, 0x6, 0x8fc, 0xb80, 0xe34c, 0x4009, 0x3, 0xfffffffffffff954, 0xfffffffffffffef8, 0x4]}, 0x0, &(0x7f0000000080)={0x1, 0x401}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/ns_last_pid\x00', 0x88642, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) write$auto(0xffffffffffffffff, &(0x7f0000000180)='7\x00\xe6\xeaA\r\nW\xa6&\xff\xff\f\x00\x00\x00\xff\x00\x00\x00\x00\x00\x1f\xde\x00\x00\x00\x00\x00\x00\x00', 0x9) set_mempolicy$auto(0x6, 0x0, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xe01, 0x0) fadvise64$auto_POSIX_FADV_DONTNEED(0xffffffffffffffff, 0x10, 0x8, 0x4) setresgid$auto(0xffffffffffffffff, 0xee00, 0x0) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r2, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2T\xc0\x1d\xa4\x10r\xc4\xa2\xb1y\t\x05\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xed\rW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1', 0x100000001) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x2, 0x0) ioctl$auto_TUNSETCARRIER(r0, 0x400454e2, 0x0) socket(0x2, 0x805, 0x4) r3 = socket(0x2a, 0x2, 0x1) bind$auto(r3, &(0x7f0000000080)=@rc={0x1f, @none, 0x48}, 0x6c) connect$auto(r3, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x57) 5.039810359s ago: executing program 3 (id=91): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x1, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(r1, 0x0, 0x9a6, 0x40) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') write$auto(0xffffffffffffffff, 0x0, 0x8000007f) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram8\x00', 0x16fa02, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/task_delayacct\x00', 0x80282, 0x0) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) listmount$auto(&(0x7f0000000080)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x8}, 0x0, 0xf4240, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001980)={0x160, r4, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x18, 0x3, 0x0, 0x1, [@nested={0x4, 0x14}, @typed={0xf, 0xd, 0x0, 0x0, @str='ovs_packet\x00'}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x11c, 0x2, 0x0, 0x1, [@nested={0x4, 0x44}, @nested={0x110, 0x4, 0x0, 0x1, [@typed={0x24, 0x89, 0x0, 0x0, @str='/proc/sys/kernel/task_delayacct\x00'}, @nested={0xe0, 0x138, 0x0, 0x1, [@typed={0xc, 0x36, 0x0, 0x0, @u64=0x89e}, @typed={0xcc, 0x127, 0x0, 0x0, @binary="e308d7cb8f8a7371f8fc553437865614d47d146e319db3d4b2b0137a3aafbdf2b2b6a7b83b8295d9894cb2e5567ac098720930d405c9648c69e7c644a3896f1f79606174855ee51582b622fe43a11186fc33b580b895f6ca45521d8f1ed835905293e71737f352e56bb2cf6ad38c1cafc1bb446452a42b09d71b6efb1d8c0788c12b5f19a85658bd4826c03988f9608e52bb7d2103930b09f70a2a0e7417a96699fab77e3cbfa0e3cdba3fce6aaf349e0360bf1557a7881656d7bfdf572a4c6118ce3b15a04f6cdd"}, @nested={0x4, 0x84}]}, @typed={0x8, 0x4f, 0x0, 0x0, @fd=r2}]}, @typed={0x4, 0xdb}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4004040}, 0x4814) 4.100647918s ago: executing program 1 (id=92): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0xf, r0, 0xfffffffffffff57e, 0x7) ptrace$auto(0xc, r0, 0x9, 0xfffffffffffff6de) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000040)="158f4a2b") r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) sendfile$auto(r2, 0xffffffffffffffff, 0x0, 0x7) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000780)="906f319d493614e6834bb14c5d8ba668ea3fe49b929347b1a2f5cd2d8bbea5a6e4a616ae542f1291fe274b9b559d6f3f0108fbb2b68f1c04d38107f490c44e278f81cb231be4de752bb862cc", 0x100000000}, 0x6, 0x0) io_uring_setup$auto(0x1, 0x0) statx$auto(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x3, 0x7fffffff, &(0x7f0000000140)={0x9, 0xf, 0xb476, 0x0, 0x0, 0x0, 0xffff, 0xb9, 0x3, 0x7, 0x3, 0x80, {0x7, 0x10000}, {0x2, 0x9}, {0x7378, 0x7}, {0x5, 0x1}, 0x8, 0xfffffffc, 0x1, 0x401, 0x400000000006, 0x7, 0x6, 0x2, 0x8001, 0x6, 0x0, 0x9, [0xff, 0xf, 0x7fffffffffffffff, 0x81, 0xd, 0x8001, 0x5, 0x3, 0x9]}) setresuid$auto(0x0, 0x0, 0x0) shmctl$auto_IPC_RMID(0x0, 0x0, &(0x7f0000000480)={{0xa, 0x0, 0x0, 0x6, 0x0, 0xfffffffd, 0x9}, 0x6ab, 0x6, 0x3, 0x8000000000000000, @inferred=0xffffffffffffffff, @raw=0xc1f, 0x3000, 0x0, &(0x7f0000000340)="de029906c9fdbd6e52a9b192e1eda36e11562662d39dee67e118a2ae1300895a41042fcbe1436712ed4619078cbcc52e729415a58d3bb3a460315665c395918e49917e3952f155b12c2e9a363f513d78f420ac395aa964d885d788a41099b7c17d9422cffce8a1ebf89ad42efddee1de0489e7e82fda0f", &(0x7f0000000400)}) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.0/usb1/power/wakeup_active_count\x00', 0x0, 0x0) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="c80d1b5d399b58", 0xfdef) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) ioctl$auto_EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000500)={0x6, 0x3, 0x4, 0x0, 0x1, 0x0, [{0xffffffffffff7a7e, 0x6, 0x80000000, '\x00', 0x8}, {0xf, 0x9, 0x5}, {0x7, 0x0, 0xf, '\x00', 0x7}, {0xc, 0xc66f, 0xa, '\x00', 0xa}, {0x2, 0x0, 0x3, '\x00', 0x4f}, {0x1, 0x3, 0x4, '\x00', 0x101}, {0x0, 0x6, 0x10, '\x00', 0x99eb}, {0x3, 0x5, 0x3, '\x00', 0x2}, {0xd14ef1, 0x7, 0x9, '\x00', 0x903}, {0xfffffffffffff01a, 0xba, 0x1}]}) kexec_load$auto(0x6, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) read$auto(r3, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) write$auto(r1, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) 4.052442253s ago: executing program 0 (id=93): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0xf, r0, 0xfffffffffffff57e, 0x7) ptrace$auto(0xc, r0, 0x9, 0xfffffffffffff6de) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000040)="158f4a2b") r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/orangefs/getattr_timeout_msecs\x00', 0x8a82b6a56f18970a, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000780)="906f319d493614e6834bb14c5d8ba668ea3fe49b929347b1a2f5cd2d8bbea5a6e4a616ae542f1291fe274b9b559d6f3f0108fbb2b68f1c04d38107f490c44e278f81cb231be4de752bb862cc", 0x100000000}, 0x6, 0x0) io_uring_setup$auto(0x1, 0x0) statx$auto(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x3, 0x7fffffff, &(0x7f0000000140)={0x9, 0xf, 0xb476, 0x0, 0x0, 0x0, 0xffff, 0xb9, 0x3, 0x7, 0x3, 0x80, {0x7, 0x10000}, {0x2, 0x9}, {0x7378, 0x7}, {0x5, 0x1}, 0x8, 0xfffffffc, 0x1, 0x401, 0x400000000006, 0x7, 0x6, 0x2, 0x8001, 0x6, 0x0, 0x9, [0xff, 0xf, 0x7fffffffffffffff, 0x81, 0xd, 0x8001, 0x5, 0x3, 0x9]}) setresuid$auto(0x0, 0x0, 0x0) shmctl$auto_IPC_RMID(0x0, 0x0, &(0x7f0000000480)={{0xa, 0x0, 0x0, 0x6, 0x0, 0xfffffffd, 0x9}, 0x6ab, 0x6, 0x3, 0x8000000000000000, @inferred=0xffffffffffffffff, @raw=0xc1f, 0x3000, 0x0, &(0x7f0000000340)="de029906c9fdbd6e52a9b192e1eda36e11562662d39dee67e118a2ae1300895a41042fcbe1436712ed4619078cbcc52e729415a58d3bb3a460315665c395918e49917e3952f155b12c2e9a363f513d78f420ac395aa964d885d788a41099b7c17d9422cffce8a1ebf89ad42efddee1de0489e7e82fda0f", &(0x7f0000000400)}) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.0/usb1/power/wakeup_active_count\x00', 0x0, 0x0) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="c80d1b5d399b58", 0xfdef) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) ioctl$auto_EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000500)={0x6, 0x3, 0x4, 0x0, 0x1, 0x0, [{0xffffffffffff7a7e, 0x6, 0x80000000, '\x00', 0x8}, {0xf, 0x9, 0x5}, {0x7, 0x0, 0xf, '\x00', 0x7}, {0xc, 0xc66f, 0xa, '\x00', 0xa}, {0x2, 0x0, 0x3, '\x00', 0x4f}, {0x1, 0x3, 0x4, '\x00', 0x101}, {0x0, 0x6, 0x10, '\x00', 0x99eb}, {0x3, 0x5, 0x3, '\x00', 0x2}, {0xd14ef1, 0x7, 0x9, '\x00', 0x903}, {0xfffffffffffff01a, 0xba, 0x1}]}) kexec_load$auto(0x6, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) read$auto(r3, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) write$auto(r1, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) 2.207703915s ago: executing program 0 (id=94): mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC2\x00', 0x101802, 0x0) ioctl$auto(0x3, 0x80045530, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2, 0xe2, 0xeb1, 0x405, 0xfffffffffffffff9) r1 = socket(0xa, 0x5, 0x0) setsockopt$auto(r1, 0x10000000084, 0x79, 0x0, 0xd) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xeda47ee5ad433e65}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), r3) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) pread64$auto(0xffffffffffffffff, 0x0, 0x3ef, 0x9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mremap$auto(0x4000, 0x8000b8, 0x13fd4, 0x3, 0xfffff000) sendmsg$auto_HSR_C_GET_NODE_LIST(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x14, r4, 0x1, 0x70bda6, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000800) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0) pread64$auto(r5, 0x0, 0x840003, 0x40000000002e72) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_NEW(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000140)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 2.207446436s ago: executing program 3 (id=95): r0 = semctl$auto_GETPID(0x19, 0x8, 0xb, 0x5) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/options/printk-msg-only\x00', 0xd8100, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = getpgrp(r0) kcmp$auto(0x0, r1, 0x2c, 0xffffffffffffffff, 0xffffffffffffffff) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/uts\x00') socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="05083dbd7000fbdbdf257e000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) r4 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000100), 0x163881, 0x0) ioctl$auto(r4, 0xc0305302, 0x38) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004010) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) r6 = memfd_secret$auto(0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r4, 0x8000) sysfs$auto(0x2, 0x23, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_debug_messages\x00', 0xa001, 0x0) r7 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/set_event\x00', 0x22201, 0x0) write$auto(r7, 0x0, 0x4) mmap$auto(0x0, 0x4000002020009, 0x3, 0x10, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000280), r6) kcmp$auto_KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x9) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) 2.204545222s ago: executing program 2 (id=103): close_range$auto(0x0, 0x5, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video0\x00', 0xa200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(r0, 0x8, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/compaction_proactiveness\x00', 0xc0781, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pts/ptmx\x00', 0x804000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x800008000) socket(0xa, 0x3, 0x3a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/pci0000:00/pci_bus/0000:00/cpulistaffinity\x00', 0xc0200, 0x0) r2 = setfsuid$auto(0xee00) setreuid$auto(r2, 0x0) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fsconfig$auto(0xffffffffffffffff, 0x2, &(0x7f0000000180)='\x00', &(0x7f0000000580), 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(0x0, r3) sendmsg$auto_NL80211_CMD_SET_HW_TIMESTAMP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x5}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x945}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) clone3$auto(0x0, 0xfffffffffffffff8) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex=r5, 0x3, 0x81, @uprobe_multi={0x3, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x96) 2.179550652s ago: executing program 1 (id=96): r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) process_madvise$auto_MADV_PAGEOUT(r0, &(0x7f0000000180)={&(0x7f00000000c0)="6bc435df379d38af2070e83ab820b0b15150be99d3063202de267667bb5fa15ce74ac0fb440ea2015d190f8ebd6e6427cb9a59d3cad3d2819c4e21caabd133d6cccdbae60f4ae89d62159cdb0cd02b6c24f2f4b16912ffec395de0e2a131d6047ed554bff8eed5782198b7615f59bd171d433765771e3ebe9ba010b66a31cb92dc09aab37592b5f66bbc92184733254768720007c7d6097032cea9fe5d18b38b4598956717fe92912375382c9e061b42", 0x3}, 0x1, 0x15, 0x5) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) select$auto(0xd, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1, 0x401}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/ns_last_pid\x00', 0x88642, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) write$auto(0xffffffffffffffff, &(0x7f0000000180)='7\x00\xe6\xeaA\r\nW\xa6&\xff\xff\f\x00\x00\x00\xff\x00\x00\x00\x00\x00\x1f\xde\x00\x00\x00\x00\x00\x00\x00', 0x9) set_mempolicy$auto(0x6, 0x0, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xe01, 0x0) fadvise64$auto_POSIX_FADV_DONTNEED(0xffffffffffffffff, 0x10, 0x8, 0x4) setresgid$auto(0xffffffffffffffff, 0xee00, 0x0) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r2, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2T\xc0\x1d\xa4\x10r\xc4\xa2\xb1y\t\x05\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xed\rW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1', 0x100000001) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x2, 0x0) ioctl$auto_TUNSETCARRIER(r0, 0x400454e2, 0x0) socket(0x2, 0x805, 0x4) r3 = socket(0x2a, 0x2, 0x1) bind$auto(r3, &(0x7f0000000080)=@rc={0x1f, @none, 0x48}, 0x6c) connect$auto(r3, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x57) 1.41142202s ago: executing program 0 (id=97): r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) process_madvise$auto_MADV_PAGEOUT(r0, &(0x7f0000000180)={&(0x7f00000000c0)="6bc435df379d38af2070e83ab820b0b15150be99d3063202de267667bb5fa15ce74ac0fb440ea2015d190f8ebd6e6427cb9a59d3cad3d2819c4e21caabd133d6cccdbae60f4ae89d62159cdb0cd02b6c24f2f4b16912ffec395de0e2a131d6047ed554bff8eed5782198b7615f59bd171d433765771e3ebe9ba010b66a31cb92dc09aab37592b5f66bbc92184733254768720007c7d6097032cea9fe5d18b38b4598956717fe92912375382c9e061b", 0x3}, 0x1, 0x15, 0x5) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) select$auto(0xd, 0x0, &(0x7f00000001c0)={[0x8, 0x200000000006, 0x7, 0x8000, 0x0, 0x80000008, 0x5, 0x6, 0x8fc, 0xb80, 0xe34c, 0x4009, 0x3, 0xfffffffffffff954, 0xfffffffffffffef8, 0x4]}, 0x0, &(0x7f0000000080)={0x1, 0x401}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/ns_last_pid\x00', 0x88642, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) write$auto(0xffffffffffffffff, &(0x7f0000000180)='7\x00\xe6\xeaA\r\nW\xa6&\xff\xff\f\x00\x00\x00\xff\x00\x00\x00\x00\x00\x1f\xde\x00\x00\x00\x00\x00\x00\x00', 0x9) set_mempolicy$auto(0x6, 0x0, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xe01, 0x0) fadvise64$auto_POSIX_FADV_DONTNEED(0xffffffffffffffff, 0x10, 0x8, 0x4) setresgid$auto(0xffffffffffffffff, 0xee00, 0x0) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r2, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2T\xc0\x1d\xa4\x10r\xc4\xa2\xb1y\t\x05\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xed\rW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1', 0x100000001) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x2, 0x0) ioctl$auto_TUNSETCARRIER(r0, 0x400454e2, 0x0) socket(0x2, 0x805, 0x4) r3 = socket(0x2a, 0x2, 0x1) bind$auto(r3, &(0x7f0000000080)=@rc={0x1f, @none, 0x48}, 0x6c) connect$auto(r3, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x57) 1.282540951s ago: executing program 2 (id=99): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0xf, r0, 0xfffffffffffff57e, 0x7) ptrace$auto(0xc, r0, 0x9, 0xfffffffffffff6de) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000040)="158f4a2b") r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/orangefs/getattr_timeout_msecs\x00', 0x8a82b6a56f18970a, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000780)="906f319d493614e6834bb14c5d8ba668ea3fe49b929347b1a2f5cd2d8bbea5a6e4a616ae542f1291fe274b9b559d6f3f0108fbb2b68f1c04d38107f490c44e278f81cb231be4de752bb862cc", 0x100000000}, 0x6, 0x0) io_uring_setup$auto(0x1, 0x0) statx$auto(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x3, 0x7fffffff, &(0x7f0000000140)={0x9, 0xf, 0xb476, 0x0, 0x0, 0x0, 0xffff, 0xb9, 0x3, 0x7, 0x3, 0x80, {0x7, 0x10000}, {0x2, 0x9}, {0x7378, 0x7}, {0x5, 0x1}, 0x8, 0xfffffffc, 0x1, 0x401, 0x400000000006, 0x7, 0x6, 0x2, 0x8001, 0x6, 0x0, 0x9, [0xff, 0xf, 0x7fffffffffffffff, 0x81, 0xd, 0x8001, 0x5, 0x3, 0x9]}) setresuid$auto(0x0, 0x0, 0x0) shmctl$auto_IPC_RMID(0x0, 0x0, &(0x7f0000000480)={{0xa, 0x0, 0x0, 0x6, 0x0, 0xfffffffd, 0x9}, 0x6ab, 0x6, 0x3, 0x8000000000000000, @inferred=0xffffffffffffffff, @raw=0xc1f, 0x3000, 0x0, &(0x7f0000000340)="de029906c9fdbd6e52a9b192e1eda36e11562662d39dee67e118a2ae1300895a41042fcbe1436712ed4619078cbcc52e729415a58d3bb3a460315665c395918e49917e3952f155b12c2e9a363f513d78f420ac395aa964d885d788a41099b7c17d9422cffce8a1ebf89ad42efddee1de0489e7e82fda0f", &(0x7f0000000400)}) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.0/usb1/power/wakeup_active_count\x00', 0x0, 0x0) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="c80d1b5d399b58", 0xfdef) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) ioctl$auto_EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000500)={0x6, 0x3, 0x4, 0x0, 0x1, 0x0, [{0xffffffffffff7a7e, 0x6, 0x80000000, '\x00', 0x8}, {0xf, 0x9, 0x5}, {0x7, 0x0, 0xf, '\x00', 0x7}, {0xc, 0xc66f, 0xa, '\x00', 0xa}, {0x2, 0x0, 0x3, '\x00', 0x4f}, {0x1, 0x3, 0x4, '\x00', 0x101}, {0x0, 0x6, 0x10, '\x00', 0x99eb}, {0x3, 0x5, 0x3, '\x00', 0x2}, {0xd14ef1, 0x7, 0x9, '\x00', 0x903}, {0xfffffffffffff01a, 0xba, 0x1}]}) kexec_load$auto(0x6, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) read$auto(r3, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) write$auto(r1, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) 1.237592385s ago: executing program 3 (id=100): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0x4068aea3, 0x0) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000) fanotify_init$auto(0x5, 0x2000000000002) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) preadv2$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x80000000009}, 0x6, 0xffffffffffffffff, 0x3ffff, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0) ioctl$auto(0x3, 0x402c542d, r2) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0002, 0x19) renameat$auto(r3, 0x0, r3, 0x0) socket(0x2c, 0x3, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) 1.137436378s ago: executing program 1 (id=101): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b7e, r0, 0x8000) r1 = io_uring_setup$auto(0x406, 0x0) io_uring_register$auto_IORING_REGISTER_PBUF_RING(r1, 0x16, 0x0, 0x7) clock_adjtime$auto(0x10, &(0x7f0000000640)={0xb7, 0x0, 0xfffffffffffffffa, 0xfffffffffffffffe, 0xfffffffffffffffb, 0x6, 0x3, 0x0, 0x7, 0x6, 0x8, {0x0, 0x5}, 0xfffffffffffffff8, 0x3, 0x5, 0x7fffffff, 0x0, 0x16, 0x1, 0xaac, 0x5, 0x2, 0x4}) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0x7, 0x0, 0x5, 0x3cbb}, 0xfff}, 0x8, 0x311) r2 = pidfd_open$auto(0x1, 0x0) setns(r2, 0x60020000) umount2$auto(&(0x7f0000000000)='.\x00', 0x3) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xb, 0x800, 0x84) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/query\x00', 0x101042, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x181000, 0x0) r3 = io_uring_setup$auto(0x3, 0x0) close_range$auto(0x2, r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x2, 0x5, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) socket(0x848000000015, 0x5, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfffffdf1) ioctl$auto(0x3, 0x89ed, 0xfffffffffffff4e0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 451.611185ms ago: executing program 1 (id=102): r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) process_madvise$auto_MADV_PAGEOUT(r0, &(0x7f0000000180)={&(0x7f00000000c0)="6bc435df379d38af2070e83ab820b0b15150be99d3063202de267667bb5fa15ce74ac0fb440ea2015d190f8ebd6e6427cb9a59d3cad3d2819c4e21caabd133d6cccdbae60f4ae89d62159cdb0cd02b6c24f2f4b16912ffec395de0e2a131d6047ed554bff8eed5782198b7615f59bd171d433765771e3ebe9ba010b66a31cb92dc09aab37592b5f66bbc92184733254768720007c7d6097032cea9fe5d18b38b4598956717fe92912375382c9e061b42", 0x3}, 0x1, 0x15, 0x5) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) select$auto(0xd, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1, 0x401}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/ns_last_pid\x00', 0x88642, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) write$auto(0xffffffffffffffff, &(0x7f0000000180)='7\x00\xe6\xeaA\r\nW\xa6&\xff\xff\f\x00\x00\x00\xff\x00\x00\x00\x00\x00\x1f\xde\x00\x00\x00\x00\x00\x00\x00', 0x9) set_mempolicy$auto(0x6, 0x0, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xe01, 0x0) fadvise64$auto_POSIX_FADV_DONTNEED(0xffffffffffffffff, 0x10, 0x8, 0x4) setresgid$auto(0xffffffffffffffff, 0xee00, 0x0) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r2, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2T\xc0\x1d\xa4\x10r\xc4\xa2\xb1y\t\x05\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xed\rW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1', 0x100000001) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x2, 0x0) ioctl$auto_TUNSETCARRIER(r0, 0x400454e2, 0x0) socket(0x2, 0x805, 0x4) r3 = socket(0x2a, 0x2, 0x1) bind$auto(r3, &(0x7f0000000080)=@rc={0x1f, @none, 0x48}, 0x6c) connect$auto(r3, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x57) 331.26012ms ago: executing program 0 (id=104): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0xf, r0, 0xfffffffffffff57e, 0x7) ptrace$auto(0xc, r0, 0x9, 0xfffffffffffff6de) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000040)="158f4a2b") r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/orangefs/getattr_timeout_msecs\x00', 0x8a82b6a56f18970a, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000780)="906f319d493614e6834bb14c5d8ba668ea3fe49b929347b1a2f5cd2d8bbea5a6e4a616ae542f1291fe274b9b559d6f3f0108fbb2b68f1c04d38107f490c44e278f81cb231be4de752bb862cc", 0x100000000}, 0x6, 0x0) io_uring_setup$auto(0x1, 0x0) statx$auto(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x3, 0x7fffffff, &(0x7f0000000140)={0x9, 0xf, 0xb476, 0x0, 0x0, 0x0, 0xffff, 0xb9, 0x3, 0x7, 0x3, 0x80, {0x7, 0x10000}, {0x2, 0x9}, {0x7378, 0x7}, {0x5, 0x1}, 0x8, 0xfffffffc, 0x1, 0x401, 0x400000000006, 0x7, 0x6, 0x2, 0x8001, 0x6, 0x0, 0x9, [0xff, 0xf, 0x7fffffffffffffff, 0x81, 0xd, 0x8001, 0x5, 0x3, 0x9]}) setresuid$auto(0x0, 0x0, 0x0) shmctl$auto_IPC_RMID(0x0, 0x0, &(0x7f0000000480)={{0xa, 0x0, 0x0, 0x6, 0x0, 0xfffffffd, 0x9}, 0x6ab, 0x6, 0x3, 0x8000000000000000, @inferred=0xffffffffffffffff, @raw=0xc1f, 0x3000, 0x0, &(0x7f0000000340)="de029906c9fdbd6e52a9b192e1eda36e11562662d39dee67e118a2ae1300895a41042fcbe1436712ed4619078cbcc52e729415a58d3bb3a460315665c395918e49917e3952f155b12c2e9a363f513d78f420ac395aa964d885d788a41099b7c17d9422cffce8a1ebf89ad42efddee1de0489e7e82fda0f", &(0x7f0000000400)}) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.0/usb1/power/wakeup_active_count\x00', 0x0, 0x0) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="c80d1b5d399b58", 0xfdef) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) ioctl$auto_EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000500)={0x6, 0x3, 0x4, 0x0, 0x1, 0x0, [{0xffffffffffff7a7e, 0x6, 0x80000000, '\x00', 0x8}, {0xf, 0x9, 0x5}, {0x7, 0x0, 0xf, '\x00', 0x7}, {0xc, 0xc66f, 0xa, '\x00', 0xa}, {0x2, 0x0, 0x3, '\x00', 0x4f}, {0x1, 0x3, 0x4, '\x00', 0x101}, {0x0, 0x6, 0x10, '\x00', 0x99eb}, {0x3, 0x5, 0x3, '\x00', 0x2}, {0xd14ef1, 0x7, 0x9, '\x00', 0x903}, {0xfffffffffffff01a, 0xba, 0x1}]}) kexec_load$auto(0x6, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) read$auto(r3, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) write$auto(r1, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) 0s ago: executing program 2 (id=105): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x1, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(r1, 0x0, 0x9a6, 0x40) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') write$auto(0xffffffffffffffff, 0x0, 0x8000007f) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram8\x00', 0x16fa02, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/task_delayacct\x00', 0x80282, 0x0) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) listmount$auto(&(0x7f0000000080)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x8}, 0x0, 0xf4240, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001980)={0x160, r4, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x18, 0x3, 0x0, 0x1, [@nested={0x4, 0x14}, @typed={0xf, 0xd, 0x0, 0x0, @str='ovs_packet\x00'}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x11c, 0x2, 0x0, 0x1, [@nested={0x4, 0x44}, @nested={0x110, 0x4, 0x0, 0x1, [@typed={0x24, 0x89, 0x0, 0x0, @str='/proc/sys/kernel/task_delayacct\x00'}, @nested={0xe0, 0x138, 0x0, 0x1, [@typed={0xc, 0x36, 0x0, 0x0, @u64=0x89e}, @typed={0xcc, 0x127, 0x0, 0x0, @binary="e308d7cb8f8a7371f8fc553437865614d47d146e319db3d4b2b0137a3aafbdf2b2b6a7b83b8295d9894cb2e5567ac098720930d405c9648c69e7c644a3896f1f79606174855ee51582b622fe43a11186fc33b580b895f6ca45521d8f1ed835905293e71737f352e56bb2cf6ad38c1cafc1bb446452a42b09d71b6efb1d8c0788c12b5f19a85658bd4826c03988f9608e52bb7d2103930b09f70a2a0e7417a96699fab77e3cbfa0e3cdba3fce6aaf349e0360bf1557a7881656d7bfdf572a4c6118ce3b15a04f6cdd"}, @nested={0x4, 0x84}]}, @typed={0x8, 0x4f, 0x0, 0x0, @fd=r2}]}, @typed={0x4, 0xdb}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4004040}, 0x4814) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.54' (ED25519) to the list of known hosts. syzkaller login: [ 71.194027][ T5621] cgroup: Unknown subsys name 'net' [ 71.302028][ T5621] cgroup: Unknown subsys name 'cpuset' [ 71.310536][ T5621] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 72.794531][ T5621] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.643528][ T5645] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.654516][ T5645] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.657247][ T5648] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.663693][ T5645] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.679414][ T5647] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.680174][ T5645] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.687915][ T5647] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.697955][ T5645] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.701298][ T5647] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.709594][ T5645] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.717436][ T5647] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.730597][ T5649] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.732087][ T5647] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.740739][ T5649] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.745770][ T5647] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.752732][ T5649] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.760762][ T5647] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.767462][ T5649] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.780011][ T4952] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.805911][ T5639] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.302955][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.310298][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.317690][ T5634] bridge_slave_0: entered allmulticast mode [ 76.325121][ T5634] bridge_slave_0: entered promiscuous mode [ 76.366105][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.373390][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.381132][ T5634] bridge_slave_1: entered allmulticast mode [ 76.388115][ T5634] bridge_slave_1: entered promiscuous mode [ 76.411725][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.418962][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.426397][ T5632] bridge_slave_0: entered allmulticast mode [ 76.433698][ T5632] bridge_slave_0: entered promiscuous mode [ 76.471714][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.479163][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.486319][ T5632] bridge_slave_1: entered allmulticast mode [ 76.493561][ T5632] bridge_slave_1: entered promiscuous mode [ 76.544725][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.552828][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.560073][ T5636] bridge_slave_0: entered allmulticast mode [ 76.567125][ T5636] bridge_slave_0: entered promiscuous mode [ 76.577307][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.589657][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.598861][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.606143][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.613618][ T5633] bridge_slave_0: entered allmulticast mode [ 76.620779][ T5633] bridge_slave_0: entered promiscuous mode [ 76.637057][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.644285][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.651793][ T5636] bridge_slave_1: entered allmulticast mode [ 76.659078][ T5636] bridge_slave_1: entered promiscuous mode [ 76.674326][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.681684][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.688925][ T5633] bridge_slave_1: entered allmulticast mode [ 76.696128][ T5633] bridge_slave_1: entered promiscuous mode [ 76.705388][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.745967][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.767685][ T5634] team0: Port device team_slave_0 added [ 76.789323][ T50] Bluetooth: hci1: command tx timeout [ 76.797231][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.808868][ T5634] team0: Port device team_slave_1 added [ 76.816957][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.837447][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.857914][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.869119][ T50] Bluetooth: hci2: command tx timeout [ 76.870443][ T5632] team0: Port device team_slave_0 added [ 76.875279][ T5639] Bluetooth: hci3: command tx timeout [ 76.886094][ T5649] Bluetooth: hci0: command tx timeout [ 76.920970][ T5632] team0: Port device team_slave_1 added [ 76.936832][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.943915][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.970087][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.004106][ T5636] team0: Port device team_slave_0 added [ 77.010449][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.017432][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.043633][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.056825][ T5633] team0: Port device team_slave_0 added [ 77.075631][ T5636] team0: Port device team_slave_1 added [ 77.092914][ T5633] team0: Port device team_slave_1 added [ 77.099258][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.106209][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.132390][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.178903][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.185972][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.216631][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.229539][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.236481][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.262490][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.301656][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.308743][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.334919][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.346665][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.353978][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.379902][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.392667][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.399645][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.425609][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.465982][ T5634] hsr_slave_0: entered promiscuous mode [ 77.472436][ T5634] hsr_slave_1: entered promiscuous mode [ 77.507764][ T5632] hsr_slave_0: entered promiscuous mode [ 77.514053][ T5632] hsr_slave_1: entered promiscuous mode [ 77.520879][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 77.527093][ T5632] Cannot create hsr debugfs directory [ 77.582898][ T5636] hsr_slave_0: entered promiscuous mode [ 77.589374][ T5636] hsr_slave_1: entered promiscuous mode [ 77.595458][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 77.601271][ T5636] Cannot create hsr debugfs directory [ 77.649099][ T5633] hsr_slave_0: entered promiscuous mode [ 77.655486][ T5633] hsr_slave_1: entered promiscuous mode [ 77.662080][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 77.667841][ T5633] Cannot create hsr debugfs directory [ 78.089824][ T5634] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.103668][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.112720][ T5634] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.124851][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.133074][ T5634] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.143194][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.152394][ T5634] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.162398][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.241821][ T5636] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.252046][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.263142][ T5636] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.273716][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.286171][ T5636] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.296218][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.316498][ T5636] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.326115][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.397328][ T5633] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.409762][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.417946][ T5633] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.427464][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.436353][ T5633] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.446172][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.454664][ T5633] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.466561][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.588190][ T5632] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.597996][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.608727][ T5632] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.617660][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.625843][ T5632] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.635423][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.650930][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.663076][ T5632] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.673851][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.733270][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.770763][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.778064][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.806865][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.814002][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.836973][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.869489][ T5639] Bluetooth: hci1: command tx timeout [ 78.896445][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.923712][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.941216][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.948699][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.956184][ T5639] Bluetooth: hci3: command tx timeout [ 78.956856][ T5649] Bluetooth: hci0: command tx timeout [ 78.962418][ T5639] Bluetooth: hci2: command tx timeout [ 78.990753][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.997920][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.030523][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.076100][ T3282] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.083323][ T3282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.137614][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.144821][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.157678][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.248069][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.286116][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.293343][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.327500][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.334689][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.915656][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.085596][ T5634] veth0_vlan: entered promiscuous mode [ 80.117917][ T5634] veth1_vlan: entered promiscuous mode [ 80.225424][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.247055][ T5634] veth0_macvtap: entered promiscuous mode [ 80.282148][ T5634] veth1_macvtap: entered promiscuous mode [ 80.360768][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.396293][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.455541][ T151] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.475441][ T151] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.493813][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.506413][ T151] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.515389][ T151] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.537331][ T5636] veth0_vlan: entered promiscuous mode [ 80.546215][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.601588][ T5636] veth1_vlan: entered promiscuous mode [ 80.677361][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.700183][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.741151][ T5632] veth0_vlan: entered promiscuous mode [ 80.781746][ T5633] veth0_vlan: entered promiscuous mode [ 80.798698][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.798741][ T5636] veth0_macvtap: entered promiscuous mode [ 80.812978][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.844484][ T5632] veth1_vlan: entered promiscuous mode [ 80.875520][ T5633] veth1_vlan: entered promiscuous mode [ 80.884107][ T5636] veth1_macvtap: entered promiscuous mode [ 80.916072][ T5634] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.955397][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.959637][ T5639] Bluetooth: hci1: command tx timeout [ 81.002834][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.030008][ T5639] Bluetooth: hci0: command tx timeout [ 81.030026][ T5649] Bluetooth: hci3: command tx timeout [ 81.030057][ T5649] Bluetooth: hci2: command tx timeout [ 81.039837][ T5632] veth0_macvtap: entered promiscuous mode [ 81.093721][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.105012][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.132985][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.145262][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.160539][ T5633] veth0_macvtap: entered promiscuous mode [ 81.179589][ T5632] veth1_macvtap: entered promiscuous mode [ 81.214872][ T5633] veth1_macvtap: entered promiscuous mode [ 81.307775][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.356577][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.382866][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.421666][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.431184][ T3282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.446207][ T3282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.457298][ T83] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.466177][ T83] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.488687][ T83] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.520355][ T83] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.530487][ T83] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.569466][ T83] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.586989][ T5788] FAULT_INJECTION: forcing a failure. [ 81.586989][ T5788] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 81.602429][ T5788] CPU: 1 UID: 0 PID: 5788 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(full) [ 81.602469][ T5788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 81.602490][ T5788] Call Trace: [ 81.602499][ T5788] [ 81.602510][ T5788] dump_stack_lvl+0x100/0x190 [ 81.602550][ T5788] should_fail_ex.cold+0x5/0xa [ 81.602588][ T5788] _copy_from_user+0x2e/0xd0 [ 81.602630][ T5788] copy_msghdr_from_user+0x9f/0x4f0 [ 81.602678][ T5788] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 81.602719][ T5788] ? preempt_schedule_thunk+0x16/0x30 [ 81.602768][ T5788] ? try_to_wake_up+0x5f6/0x1900 [ 81.602808][ T5788] ___sys_sendmsg+0x106/0x1e0 [ 81.602847][ T5788] ? __pfx____sys_sendmsg+0x10/0x10 [ 81.602888][ T5788] ? futex_private_hash_put+0x107/0x1c0 [ 81.602971][ T5788] __sys_sendmsg+0x170/0x220 [ 81.602999][ T5788] ? __pfx___sys_sendmsg+0x10/0x10 [ 81.603036][ T5788] ? __x64_sys_futex+0x34f/0x4d0 [ 81.603079][ T5788] ? rcu_is_watching+0x12/0xc0 [ 81.603115][ T5788] do_syscall_64+0x115/0x840 [ 81.603155][ T5788] ? clear_bhb_loop+0x40/0x90 [ 81.603189][ T5788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.603217][ T5788] RIP: 0033:0x7f0705b9ce59 [ 81.603241][ T5788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.603281][ T5788] RSP: 002b:00007f0706a17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.603314][ T5788] RAX: ffffffffffffffda RBX: 00007f0705e15fa0 RCX: 00007f0705b9ce59 [ 81.603333][ T5788] RDX: 0000000000000040 RSI: 0000200000000440 RDI: 000000000000000a [ 81.603350][ T5788] RBP: 00007f0705c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 81.603366][ T5788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.603381][ T5788] R13: 00007f0705e16038 R14: 00007f0705e15fa0 R15: 00007fff6cbbeac8 [ 81.603417][ T5788] [ 81.614962][ T83] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.617688][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.637328][ T83] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.641036][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.037074][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.055581][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.124129][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.141731][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.249473][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.278400][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.454790][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.477528][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.936699][ T5813] process 'syz.0.1' launched './file0' with NULL argv: empty string added [ 83.028631][ T5649] Bluetooth: hci1: command tx timeout [ 83.109114][ T50] Bluetooth: hci3: command tx timeout [ 83.109172][ T5639] Bluetooth: hci2: command tx timeout [ 83.115270][ T5649] Bluetooth: hci0: command tx timeout [ 83.352521][ T5816] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 83.444012][ T5816] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.653997][ T5825] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 84.874235][ T5843] Zero length message leads to an empty skb [ 86.123178][ T5849] futex_wake_op: syz.2.13 tries to shift op by -2048; fix this program [ 86.203881][ T5849] futex_wake_op: syz.2.13 tries to shift op by -2048; fix this program [ 86.283368][ T5849] 0x000000000001-0x000000020000 : "" [ 86.625714][ T5849] ftl_cs: FTL header corrupt! [ 86.817749][ T29] cfg80211: failed to load regulatory.db [ 86.819635][ T5878] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17'. [ 88.280194][ T5899] smpboot: CPU 1 is now offline [ 88.352116][ T5899] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 90.464560][ T5920] syz.1.23 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 91.307446][ T5930] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 91.716367][ T5938] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5636] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[5938] [ 93.714849][ T5957] netlink: 342 bytes leftover after parsing attributes in process `syz.3.29'. [ 95.131019][ T5974] loop6: detected capacity change from 0 to 8 [ 95.366625][ T5981] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input5 [ 96.769739][ T5991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.36'. [ 97.422149][ T6007] kafs: addr_prefs: Invalid Command [ 97.849461][ T6010] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 98.584679][ T6014] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 98.682319][ T6025] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 98.745973][ T6025] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 98.897093][ T6026] smpboot: CPU 1 is now offline [ 98.938110][ T6026] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 99.339819][ T6034] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 101.064752][ T6069] zram: Removed device: zram0 [ 101.726337][ T6076] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5633] was attempted by ""[6076] [ 103.780403][ T6090] mmap: syz.0.51 (6090) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 106.459574][ T6138] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 106.856334][ T6174] syz.1.62 uses obsolete (PF_INET,SOCK_PACKET) [ 107.128880][ T6147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.60'. [ 109.296025][ T6208] NFSD: Failed to start, no listeners configured. [ 109.807725][ T6209] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.689720][ T6235] zswap: compressor not available [ 112.121179][ T6256] bridge0: port 3(gretap0) entered blocking state [ 112.187953][ T6256] bridge0: port 3(gretap0) entered disabled state [ 112.245521][ T6256] gretap0: entered allmulticast mode [ 112.299383][ T6256] gretap0: entered promiscuous mode [ 112.371922][ T6256] bridge0: port 3(gretap0) entered blocking state [ 112.379331][ T6256] bridge0: port 3(gretap0) entered forwarding state [ 114.043593][ T6297] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 114.100927][ T6297] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 114.121783][ T6302] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 11!phy1!netdev:wlan1!rc_rateid [ 114.218684][ T6303] smpboot: CPU 1 is now offline [ 114.242599][ T6303] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 114.716584][ T6304] debugfs: '11!phy1!netdev:wlan1!rc_rateidx_mcs_mask' already exists in 'ieee80211' [ 114.838676][ T6305] sysfs: cannot create duplicate filename '/class/ieee80211/11!phy1!netdev:wlan1!rc_rateidx_mcs_mask' [ 114.893121][ T6305] CPU: 0 UID: 0 PID: 6305 Comm: syz.1.82 Not tainted syzkaller #0 PREEMPT(full) [ 114.893145][ T6305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 114.893154][ T6305] Call Trace: [ 114.893159][ T6305] [ 114.893166][ T6305] dump_stack_lvl+0x100/0x190 [ 114.893186][ T6305] sysfs_warn_dup.cold+0x1c/0x28 [ 114.893209][ T6305] sysfs_do_create_link_sd+0x113/0x140 [ 114.893228][ T6305] sysfs_create_link+0x61/0xc0 [ 114.893244][ T6305] device_add+0x675/0x1950 [ 114.893263][ T6305] ? __pfx_device_add+0x10/0x10 [ 114.893279][ T6305] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 114.893301][ T6305] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 114.893329][ T6305] wiphy_register+0x1edd/0x2d90 [ 114.893346][ T6305] ? __rtnl_unlock+0xb9/0xf0 [ 114.893369][ T6305] ? __pfx_wiphy_register+0x10/0x10 [ 114.893387][ T6305] ? __asan_memset+0x23/0x50 [ 114.893409][ T6305] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 114.893439][ T6305] ieee80211_register_hw+0x3055/0x4570 [ 114.893474][ T6305] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 114.893496][ T6305] ? __pfx___debug_object_init+0x10/0x10 [ 114.893518][ T6305] ? find_held_lock+0x2b/0x80 [ 114.893537][ T6305] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 114.893557][ T6305] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 114.893579][ T6305] ? __hrtimer_setup+0x208/0x330 [ 114.893597][ T6305] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 114.893638][ T6305] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 114.893660][ T6305] ? __asan_memcpy+0x3c/0x60 [ 114.893684][ T6305] hwsim_new_radio_nl+0xc5f/0x1370 [ 114.893703][ T6305] ? rcu_is_watching+0x12/0xc0 [ 114.893722][ T6305] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 114.893745][ T6305] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 114.893768][ T6305] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 114.893795][ T6305] genl_family_rcv_msg_doit+0x214/0x300 [ 114.893818][ T6305] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 114.893839][ T6305] ? genl_get_cmd+0x3e7/0x760 [ 114.893863][ T6305] ? bpf_lsm_capable+0x9/0x10 [ 114.893878][ T6305] ? security_capable+0x80/0x260 [ 114.893897][ T6305] ? ns_capable+0xd2/0xf0 [ 114.893915][ T6305] genl_rcv_msg+0x560/0x800 [ 114.893939][ T6305] ? __pfx_genl_rcv_msg+0x10/0x10 [ 114.893960][ T6305] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 114.893986][ T6305] netlink_rcv_skb+0x159/0x420 [ 114.894005][ T6305] ? __pfx_genl_rcv_msg+0x10/0x10 [ 114.894027][ T6305] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 114.894054][ T6305] ? netlink_deliver_tap+0x1ae/0xcc0 [ 114.894075][ T6305] genl_rcv+0x28/0x40 [ 114.894093][ T6305] netlink_unicast+0x585/0x850 [ 114.894115][ T6305] ? __pfx_netlink_unicast+0x10/0x10 [ 114.894140][ T6305] netlink_sendmsg+0x8b0/0xda0 [ 114.894162][ T6305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.894180][ T6305] ? __import_iovec+0x1d2/0x640 [ 114.894202][ T6305] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 114.894221][ T6305] ____sys_sendmsg+0x9e1/0xb70 [ 114.894239][ T6305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.894259][ T6305] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.894281][ T6305] ? rcu_is_watching+0x12/0xc0 [ 114.894296][ T6305] ? ___sys_sendmsg+0x19d/0x1e0 [ 114.894314][ T6305] ? kfree+0x1dd/0x6c0 [ 114.894345][ T6305] ___sys_sendmsg+0x190/0x1e0 [ 114.894367][ T6305] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.894406][ T6305] ? __pfx___might_resched+0x10/0x10 [ 114.894427][ T6305] __sys_sendmmsg+0x205/0x430 [ 114.894446][ T6305] ? __pfx___sys_sendmmsg+0x10/0x10 [ 114.894477][ T6305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 114.894499][ T6305] ? kcov_ioctl+0x16a/0x720 [ 114.894521][ T6305] __x64_sys_sendmmsg+0x9c/0x100 [ 114.894536][ T6305] ? lockdep_hardirqs_on+0x78/0x100 [ 114.894556][ T6305] do_syscall_64+0x115/0x840 [ 114.894575][ T6305] ? clear_bhb_loop+0x40/0x90 [ 114.894593][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.894608][ T6305] RIP: 0033:0x7fbc1b79ce59 [ 114.894627][ T6305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.894642][ T6305] RSP: 002b:00007fbc1c6ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 114.894656][ T6305] RAX: ffffffffffffffda RBX: 00007fbc1ba16180 RCX: 00007fbc1b79ce59 [ 114.894666][ T6305] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 114.894675][ T6305] RBP: 00007fbc1b832d6f R08: 0000000000000000 R09: 0000000000000000 [ 114.894684][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.894692][ T6305] R13: 00007fbc1ba16218 R14: 00007fbc1ba16180 R15: 00007ffe133324b8 [ 114.894713][ T6305] syzkaller syzkaller login: [ 117.757817][ T6370] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 118.217486][ T6365] openvswitch: netlink: Key type 68 is out of range max 32 [ 118.619694][ T6385] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 118.717222][ T6385] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 118.817650][ T6387] smpboot: CPU 1 is now offline [ 118.860729][ T6387] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 118.981700][ T6386] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 119.055641][ T6386] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 119.374174][ T6363] Process accounting resumed [ 120.989698][ T6393] syz.3.95 (6393) used greatest stack depth: 19720 bytes left [ 121.707099][ T6429] smpboot: CPU 1 is now offline [ 121.762369][ T6429] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 122.542554][ T6451] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 122.686175][ T6451] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 122.753336][ T6423] ------------[ cut here ]------------ [ 122.754341][ T6423] [ 122.754350][ T6423] ====================================================== [ 122.754359][ T6423] WARNING: possible circular locking dependency detected [ 122.754369][ T6423] syzkaller #0 Not tainted [ 122.754382][ T6423] ------------------------------------------------------ [ 122.754391][ T6423] syz.3.100/6423 is trying to acquire lock: [ 122.754405][ T6423] ffffffff8e6f14a0 (console_owner){-...}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 122.754494][ T6423] [ 122.754494][ T6423] but task is already holding lock: [ 122.754502][ T6423] ffff8880b843b420 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 122.754568][ T6423] [ 122.754568][ T6423] which lock already depends on the new lock. [ 122.754568][ T6423] [ 122.754576][ T6423] [ 122.754576][ T6423] the existing dependency chain (in reverse order) is: [ 122.754585][ T6423] [ 122.754585][ T6423] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 122.754624][ T6423] _raw_spin_lock_nested+0x31/0x40 [ 122.754657][ T6423] raw_spin_rq_lock_nested+0x2c/0x140 [ 122.754691][ T6423] _task_rq_lock+0xcf/0x510 [ 122.754724][ T6423] cgroup_move_task+0x81/0x320 [ 122.754761][ T6423] css_set_move_task+0x285/0x600 [ 122.754803][ T6423] cgroup_post_fork+0x202/0x9b0 [ 122.754840][ T6423] copy_process+0x5b9a/0x7ed0 [ 122.754875][ T6423] kernel_clone+0x176/0x9e0 [ 122.754909][ T6423] user_mode_thread+0xcc/0x110 [ 122.754944][ T6423] rest_init+0x21/0x260 [ 122.754969][ T6423] start_kernel+0x484/0x490 [ 122.755010][ T6423] x86_64_start_reservations+0x24/0x30 [ 122.755037][ T6423] x86_64_start_kernel+0x12b/0x130 [ 122.755063][ T6423] common_startup_64+0x13e/0x148 [ 122.755098][ T6423] [ 122.755098][ T6423] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 122.755137][ T6423] _raw_spin_lock_irqsave+0x3a/0x60 [ 122.755169][ T6423] try_to_wake_up+0xb5/0x1900 [ 122.755201][ T6423] __wake_up_common+0x135/0x1f0 [ 122.755242][ T6423] __wake_up+0x31/0x60 [ 122.755277][ T6423] pty_close+0x281/0x500 [ 122.755302][ T6423] tty_release+0x40e/0x1300 [ 122.755334][ T6423] __fput+0x3ff/0xb50 [ 122.755370][ T6423] task_work_run+0x150/0x240 [ 122.755394][ T6423] exit_to_user_mode_loop+0x157/0x670 [ 122.755437][ T6423] do_syscall_64+0x652/0x840 [ 122.755474][ T6423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.755506][ T6423] [ 122.755506][ T6423] -> #2 (&tty->write_wait){-...}-{3:3}: [ 122.755542][ T6423] _raw_spin_lock_irqsave+0x3a/0x60 [ 122.755575][ T6423] __wake_up+0x1c/0x60 [ 122.755609][ T6423] tty_port_default_wakeup+0x52/0x70 [ 122.755647][ T6423] serial8250_tx_chars+0x68f/0x860 [ 122.755684][ T6423] serial8250_handle_irq_locked+0x5e6/0x7e0 [ 122.755724][ T6423] serial8250_handle_irq.part.0+0xb4/0x530 [ 122.755763][ T6423] serial8250_default_handle_irq+0xc2/0x290 [ 122.755803][ T6423] serial8250_interrupt+0xf8/0x1c0 [ 122.755846][ T6423] __handle_irq_event_percpu+0x235/0x8c0 [ 122.755880][ T6423] handle_irq_event+0xab/0x1e0 [ 122.755910][ T6423] handle_edge_irq+0x35e/0x960 [ 122.755939][ T6423] __common_interrupt+0xd8/0x2f0 [ 122.755980][ T6423] common_interrupt+0xb9/0xe0 [ 122.756007][ T6423] asm_common_interrupt+0x26/0x40 [ 122.756034][ T6423] _raw_spin_unlock_irqrestore+0x31/0x80 [ 122.756069][ T6423] uart_write+0x29d/0xb20 [ 122.756102][ T6423] n_tty_write+0x431/0x11c0 [ 122.756145][ T6423] file_tty_write.isra.0+0x4d2/0x890 [ 122.756179][ T6423] redirected_tty_write+0xd4/0x120 [ 122.756213][ T6423] vfs_write+0x6ac/0x1070 [ 122.756241][ T6423] ksys_write+0x12a/0x250 [ 122.756270][ T6423] do_syscall_64+0x115/0x840 [ 122.756307][ T6423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.756335][ T6423] [ 122.756335][ T6423] -> #1 (&port_lock_key){-...}-{3:3}: [ 122.756369][ T6423] _raw_spin_lock_irqsave+0x3a/0x60 [ 122.756402][ T6423] serial8250_console_write+0x17e/0x1900 [ 122.756444][ T6423] console_flush_one_record+0x790/0xe50 [ 122.756477][ T6423] console_unlock+0x103/0x260 [ 122.756507][ T6423] vprintk_emit+0x407/0x6b0 [ 122.756538][ T6423] _printk+0xcf/0x110 [ 122.756562][ T6423] register_console.cold+0xc0/0x248 [ 122.756590][ T6423] univ8250_console_init+0x6f/0x80 [ 122.756627][ T6423] console_init+0x3f7/0x5e0 [ 122.756658][ T6423] start_kernel+0x30a/0x490 [ 122.756698][ T6423] x86_64_start_reservations+0x24/0x30 [ 122.756725][ T6423] x86_64_start_kernel+0x12b/0x130 [ 122.756751][ T6423] common_startup_64+0x13e/0x148 [ 122.756784][ T6423] [ 122.756784][ T6423] -> #0 (console_owner){-...}-{0:0}: [ 122.756819][ T6423] __lock_acquire+0x14b8/0x2630 [ 122.756860][ T6423] lock_acquire+0x1b1/0x370 [ 122.756899][ T6423] console_lock_spinning_enable+0x72/0x80 [ 122.756931][ T6423] console_flush_one_record+0x739/0xe50 [ 122.756963][ T6423] console_unlock+0x103/0x260 [ 122.756993][ T6423] vprintk_emit+0x407/0x6b0 [ 122.757024][ T6423] _printk+0xcf/0x110 [ 122.757065][ T6423] __report_bug.cold+0x15/0x137 [ 122.757107][ T6423] report_bug+0xb2/0x220 [ 122.757144][ T6423] handle_bug+0x16a/0x2a0 [ 122.757167][ T6423] exc_invalid_op+0x17/0x50 [ 122.757190][ T6423] asm_exc_invalid_op+0x1a/0x20 [ 122.757216][ T6423] update_rq_clock+0x40a/0xd20 [ 122.757249][ T6423] __schedule+0x1e84/0x67a0 [ 122.757282][ T6423] preempt_schedule_irq+0x50/0x90 [ 122.757317][ T6423] irqentry_exit+0x205/0x970 [ 122.757353][ T6423] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 122.757381][ T6423] __sanitizer_cov_trace_const_cmp4+0x4/0x20 [ 122.757419][ T6423] raw_sendmsg+0xcc1/0x3590 [ 122.757443][ T6423] inet_sendmsg+0x11c/0x140 [ 122.757483][ T6423] ____sys_sendmsg+0x98d/0xb70 [ 122.757517][ T6423] ___sys_sendmsg+0x190/0x1e0 [ 122.757552][ T6423] __sys_sendmmsg+0x205/0x430 [ 122.757578][ T6423] __x64_sys_sendmmsg+0x9c/0x100 [ 122.757605][ T6423] do_syscall_64+0x115/0x840 [ 122.757642][ T6423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.757669][ T6423] [ 122.757669][ T6423] other info that might help us debug this: [ 122.757669][ T6423] [ 122.757677][ T6423] Chain exists of: [ 122.757677][ T6423] console_owner --> &p->pi_lock --> &rq->__lock [ 122.757677][ T6423] [ 122.757717][ T6423] Possible unsafe locking scenario: [ 122.757717][ T6423] [ 122.757724][ T6423] CPU0 CPU1 [ 122.757732][ T6423] ---- ---- [ 122.757739][ T6423] lock(&rq->__lock); [ 122.757755][ T6423] lock(&p->pi_lock); [ 122.757773][ T6423] lock(&rq->__lock); [ 122.757792][ T6423] lock(console_owner); [ 122.757808][ T6423] [ 122.757808][ T6423] *** DEADLOCK *** [ 122.757808][ T6423] [ 122.757815][ T6423] 4 locks held by syz.3.100/6423: [ 122.757830][ T6423] #0: ffff88801cb17a60 (sk_lock-AF_INET){+.+.}-{0:0}, at: raw_sendmsg+0xc4d/0x3590 [ 122.757892][ T6423] #1: ffff8880b843b420 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 122.757964][ T6423] #2: ffffffff8e7d18e0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 [ 122.758026][ T6423] #3: ffffffff8e7d1958 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xe50 [ 122.758096][ T6423] [ 122.758096][ T6423] stack backtrace: [ 122.758112][ T6423] CPU: 0 UID: 0 PID: 6423 Comm: syz.3.100 Not tainted syzkaller #0 PREEMPT(full) [ 122.758145][ T6423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 122.758162][ T6423] Call Trace: [ 122.758171][ T6423] [ 122.758181][ T6423] dump_stack_lvl+0x100/0x190 [ 122.758208][ T6423] print_circular_bug.cold+0x178/0x1c7 [ 122.758254][ T6423] check_noncircular+0x146/0x160 [ 122.758299][ T6423] __lock_acquire+0x14b8/0x2630 [ 122.758348][ T6423] lock_acquire+0x1b1/0x370 [ 122.758388][ T6423] ? console_lock_spinning_enable+0x61/0x80 [ 122.758422][ T6423] ? console_lock_spinning_enable+0x4a/0x80 [ 122.758459][ T6423] console_lock_spinning_enable+0x72/0x80 [ 122.758492][ T6423] ? console_lock_spinning_enable+0x61/0x80 [ 122.758525][ T6423] console_flush_one_record+0x739/0xe50 [ 122.758562][ T6423] ? __pfx_console_flush_one_record+0x10/0x10 [ 122.758602][ T6423] ? is_printk_cpu_sync_owner+0x32/0x40 [ 122.758642][ T6423] console_unlock+0x103/0x260 [ 122.758675][ T6423] ? __pfx_console_unlock+0x10/0x10 [ 122.758709][ T6423] ? do_raw_spin_unlock+0x145/0x1e0 [ 122.758741][ T6423] ? _printk+0xcf/0x110 [ 122.758770][ T6423] vprintk_emit+0x407/0x6b0 [ 122.758818][ T6423] ? __pfx_vprintk_emit+0x10/0x10 [ 122.758853][ T6423] ? stack_trace_save+0x8e/0xc0 [ 122.758891][ T6423] _printk+0xcf/0x110 [ 122.758917][ T6423] ? __pfx__printk+0x10/0x10 [ 122.758945][ T6423] ? kasan_save_stack+0x3f/0x50 [ 122.758973][ T6423] ? kasan_save_stack+0x30/0x50 [ 122.759000][ T6423] ? kasan_save_track+0x14/0x30 [ 122.759033][ T6423] ? __kasan_slab_alloc+0x89/0x90 [ 122.759063][ T6423] ? kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 122.759114][ T6423] ? kmalloc_reserve+0x148/0x350 [ 122.759153][ T6423] ? __alloc_skb+0x185/0x710 [ 122.759177][ T6423] ? __ip_append_data+0x2c8b/0x44c0 [ 122.759218][ T6423] ? raw_sendmsg+0xcb5/0x3590 [ 122.759243][ T6423] ? __report_bug.cold+0x5/0x137 [ 122.759292][ T6423] __report_bug.cold+0x15/0x137 [ 122.759334][ T6423] ? update_rq_clock+0x40a/0xd20 [ 122.759370][ T6423] ? __pfx___report_bug+0x10/0x10 [ 122.759413][ T6423] ? update_rq_clock+0x40a/0xd20 [ 122.759450][ T6423] report_bug+0xb2/0x220 [ 122.759484][ T6423] ? update_rq_clock+0x40a/0xd20 [ 122.759520][ T6423] handle_bug+0x16a/0x2a0 [ 122.759545][ T6423] exc_invalid_op+0x17/0x50 [ 122.759570][ T6423] asm_exc_invalid_op+0x1a/0x20 [ 122.759596][ T6423] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 122.759634][ T6423] Code: ab 88 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 18 e5 b4 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 80 0b 00 00 48 b8 00 00 00 00 00 [ 122.759665][ T6423] RSP: 0018:ffffc9000201f3d8 EFLAGS: 00010046 [ 122.759687][ T6423] RAX: 0000000000000000 RBX: ffff8880b853b3c0 RCX: 0000000000000001 [ 122.759705][ T6423] RDX: 0000000000000046 RSI: ffffffff8def5229 RDI: ffffffff8c1c4380 [ 122.759724][ T6423] RBP: ffffc9000201f588 R08: 0000000000000001 R09: 0000000000000001 [ 122.759742][ T6423] R10: ffffffff90d73c57 R11: 0000000000000000 R12: ffffffff90d76fc4 [ 122.759761][ T6423] R13: ffff8880b853c260 R14: ffff88801e2f9f00 R15: ffff8880b853b3c0 [ 122.759789][ T6423] ? update_rq_clock+0x9c/0xd20 [ 122.759828][ T6423] __schedule+0x1e84/0x67a0 [ 122.759861][ T6423] ? __pfx___alloc_skb+0x10/0x10 [ 122.759897][ T6423] ? __pfx___schedule+0x10/0x10 [ 122.759933][ T6423] ? mark_held_locks+0x40/0x70 [ 122.759976][ T6423] preempt_schedule_irq+0x50/0x90 [ 122.760013][ T6423] irqentry_exit+0x205/0x970 [ 122.760051][ T6423] ? trace_reschedule_exit.constprop.0+0x6b/0x220 [ 122.760097][ T6423] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 122.760133][ T6423] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x4/0x20 [ 122.760173][ T6423] Code: d6 0f b7 f7 bf 03 00 00 00 e9 58 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <48> 8b 0c 24 89 f2 89 fe bf 05 00 00 00 e9 2a fe ff ff 66 2e 0f 1f [ 122.760200][ T6423] RSP: 0018:ffffc9000201f6a8 EFLAGS: 00000246 [ 122.760221][ T6423] RAX: 0000000000000000 RBX: ffff88801cb17800 RCX: ffffc9000f48a000 [ 122.760240][ T6423] RDX: 0000000000080000 RSI: 0000000000000000 RDI: 0000000000000000 [ 122.760257][ T6423] RBP: ffffc9000201fd28 R08: 0000000000000005 R09: 0000000000000000 [ 122.760275][ T6423] R10: 00000000000003c1 R11: 0000000000000000 R12: 0000000000000000 [ 122.760292][ T6423] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc9000201f8b0 [ 122.760318][ T6423] raw_sendmsg+0xcc1/0x3590 [ 122.760346][ T6423] ? print_kernel_ident+0x10/0x40 [ 122.760385][ T6423] ? __pfx_raw_sendmsg+0x10/0x10 [ 122.760411][ T6423] ? __schedule+0x12a7/0x67a0 [ 122.760466][ T6423] ? __import_iovec+0x1d2/0x640 [ 122.760507][ T6423] ? __pfx_raw_sendmsg+0x10/0x10 [ 122.760535][ T6423] inet_sendmsg+0x11c/0x140 [ 122.760577][ T6423] ____sys_sendmsg+0x98d/0xb70 [ 122.760612][ T6423] ? __pfx_inet_sendmsg+0x10/0x10 [ 122.760655][ T6423] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.760694][ T6423] ? rcu_is_watching+0x12/0xc0 [ 122.760726][ T6423] ? ___sys_sendmsg+0x19d/0x1e0 [ 122.760762][ T6423] ? kfree+0x1dd/0x6c0 [ 122.760798][ T6423] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 122.760835][ T6423] ___sys_sendmsg+0x190/0x1e0 [ 122.760873][ T6423] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.760910][ T6423] ? do_user_addr_fault+0x7de/0x12f0 [ 122.760950][ T6423] ? lockdep_hardirqs_on+0x78/0x100 [ 122.760996][ T6423] ? __pfx___might_resched+0x10/0x10 [ 122.761029][ T6423] __sys_sendmmsg+0x205/0x430 [ 122.761060][ T6423] ? __pfx___sys_sendmmsg+0x10/0x10 [ 122.761102][ T6423] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 122.761146][ T6423] ? kcov_ioctl+0x16a/0x720 [ 122.761184][ T6423] __x64_sys_sendmmsg+0x9c/0x100 [ 122.761213][ T6423] ? lockdep_hardirqs_on+0x78/0x100 [ 122.761251][ T6423] do_syscall_64+0x115/0x840 [ 122.761289][ T6423] ? clear_bhb_loop+0x40/0x90 [ 122.761321][ T6423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.761351][ T6423] RIP: 0033:0x7f0705b9ce59 [ 122.761382][ T6423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.761408][ T6423] RSP: 002b:00007f07069f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 122.761434][ T6423] RAX: ffffffffffffffda RBX: 00007f0705e16090 RCX: 00007f0705b9ce59 [ 122.761454][ T6423] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 122.761471][ T6423] RBP: 00007f0705c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 122.761488][ T6423] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.761506][ T6423] R13: 00007f0705e16128 R14: 00007f0705e16090 R15: 00007fff6cbbeac8 [ 122.761534][ T6423] [ 124.099660][ T6423] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 124.099680][ T6423] WARNING: kernel/sched/sched.h:1612 at update_rq_clock+0x40a/0xd20, CPU#0: syz.3.100/6423 [ 124.117473][ T6423] Modules linked in: [ 124.121386][ T6423] CPU: 0 UID: 0 PID: 6423 Comm: syz.3.100 Not tainted syzkaller #0 PREEMPT(full) [ 124.130678][ T6423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 124.140741][ T6423] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 124.146312][ T6423] Code: ab 88 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 18 e5 b4 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 80 0b 00 00 48 b8 00 00 00 00 00 [ 124.165936][ T6423] RSP: 0018:ffffc9000201f3d8 EFLAGS: 00010046 [ 124.172017][ T6423] RAX: 0000000000000000 RBX: ffff8880b853b3c0 RCX: 0000000000000001 [ 124.180001][ T6423] RDX: 0000000000000046 RSI: ffffffff8def5229 RDI: ffffffff8c1c4380 [ 124.187988][ T6423] RBP: ffffc9000201f588 R08: 0000000000000001 R09: 0000000000000001 [ 124.195970][ T6423] R10: ffffffff90d73c57 R11: 0000000000000000 R12: ffffffff90d76fc4 [ 124.203945][ T6423] R13: ffff8880b853c260 R14: ffff88801e2f9f00 R15: ffff8880b853b3c0 [ 124.211923][ T6423] FS: 00007f07069f66c0(0000) GS:ffff88812438a000(0000) knlGS:0000000000000000 [ 124.220866][ T6423] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.227458][ T6423] CR2: 0000000000538000 CR3: 0000000074442000 CR4: 00000000003526f0 [ 124.235437][ T6423] Call Trace: [ 124.238720][ T6423] [ 124.241659][ T6423] __schedule+0x1e84/0x67a0 [ 124.246199][ T6423] ? __pfx___alloc_skb+0x10/0x10 [ 124.251187][ T6423] ? __pfx___schedule+0x10/0x10 [ 124.256073][ T6423] ? mark_held_locks+0x40/0x70 [ 124.260880][ T6423] preempt_schedule_irq+0x50/0x90 [ 124.265931][ T6423] irqentry_exit+0x205/0x970 [ 124.270542][ T6423] ? trace_reschedule_exit.constprop.0+0x6b/0x220 [ 124.277002][ T6423] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 124.282477][ T6423] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x4/0x20 [ 124.289264][ T6423] Code: d6 0f b7 f7 bf 03 00 00 00 e9 58 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <48> 8b 0c 24 89 f2 89 fe bf 05 00 00 00 e9 2a fe ff ff 66 2e 0f 1f [ 124.308884][ T6423] RSP: 0018:ffffc9000201f6a8 EFLAGS: 00000246 [ 124.314963][ T6423] RAX: 0000000000000000 RBX: ffff88801cb17800 RCX: ffffc9000f48a000 [ 124.322959][ T6423] RDX: 0000000000080000 RSI: 0000000000000000 RDI: 0000000000000000 [ 124.330956][ T6423] RBP: ffffc9000201fd28 R08: 0000000000000005 R09: 0000000000000000 [ 124.338947][ T6423] R10: 00000000000003c1 R11: 0000000000000000 R12: 0000000000000000 [ 124.346937][ T6423] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc9000201f8b0 [ 124.354943][ T6423] raw_sendmsg+0xcc1/0x3590 [ 124.359469][ T6423] ? print_kernel_ident+0x10/0x40 [ 124.364518][ T6423] ? __pfx_raw_sendmsg+0x10/0x10 [ 124.369482][ T6423] ? __schedule+0x12a7/0x67a0 [ 124.374222][ T6423] ? __import_iovec+0x1d2/0x640 [ 124.379117][ T6423] ? __pfx_raw_sendmsg+0x10/0x10 [ 124.384070][ T6423] inet_sendmsg+0x11c/0x140 [ 124.388607][ T6423] ____sys_sendmsg+0x98d/0xb70 [ 124.393388][ T6423] ? __pfx_inet_sendmsg+0x10/0x10 [ 124.398438][ T6423] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.403744][ T6423] ? rcu_is_watching+0x12/0xc0 [ 124.408531][ T6423] ? ___sys_sendmsg+0x19d/0x1e0 [ 124.413485][ T6423] ? kfree+0x1dd/0x6c0 [ 124.417572][ T6423] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 124.424006][ T6423] ___sys_sendmsg+0x190/0x1e0 [ 124.428704][ T6423] ? __pfx____sys_sendmsg+0x10/0x10 [ 124.433920][ T6423] ? do_user_addr_fault+0x7de/0x12f0 [ 124.439234][ T6423] ? lockdep_hardirqs_on+0x78/0x100 [ 124.444465][ T6423] ? __pfx___might_resched+0x10/0x10 [ 124.449765][ T6423] __sys_sendmmsg+0x205/0x430 [ 124.454453][ T6423] ? __pfx___sys_sendmmsg+0x10/0x10 [ 124.459674][ T6423] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 124.465503][ T6423] ? kcov_ioctl+0x16a/0x720 [ 124.470038][ T6423] __x64_sys_sendmmsg+0x9c/0x100 [ 124.474989][ T6423] ? lockdep_hardirqs_on+0x78/0x100 [ 124.480206][ T6423] do_syscall_64+0x115/0x840 [ 124.484830][ T6423] ? clear_bhb_loop+0x40/0x90 [ 124.489526][ T6423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.495428][ T6423] RIP: 0033:0x7f0705b9ce59 [ 124.499850][ T6423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.519474][ T6423] RSP: 002b:00007f07069f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 124.527917][ T6423] RAX: ffffffffffffffda RBX: 00007f0705e16090 RCX: 00007f0705b9ce59 [ 124.535935][ T6423] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 124.543916][ T6423] RBP: 00007f0705c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 124.551891][ T6423] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.559871][ T6423] R13: 00007f0705e16128 R14: 00007f0705e16090 R15: 00007fff6cbbeac8 [ 124.567859][ T6423] [ 124.570884][ T6423] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 124.578170][ T6423] CPU: 0 UID: 0 PID: 6423 Comm: syz.3.100 Not tainted syzkaller #0 PREEMPT(full) [ 124.587388][ T6423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 124.597449][ T6423] Call Trace: [ 124.600735][ T6423] [ 124.603668][ T6423] dump_stack_lvl+0x100/0x190 [ 124.608361][ T6423] vpanic+0x552/0x970 [ 124.612358][ T6423] ? __pfx_vpanic+0x10/0x10 [ 124.616872][ T6423] ? lock_release+0x245/0x310 [ 124.621596][ T6423] panic+0xd1/0xe0 [ 124.625331][ T6423] ? __pfx_panic+0x10/0x10 [ 124.629770][ T6423] check_panic_on_warn.cold+0x19/0x34 [ 124.635161][ T6423] ? update_rq_clock+0x40a/0xd20 [ 124.640126][ T6423] __warn.cold+0x191/0x328 [ 124.644557][ T6423] __report_bug+0x296/0x3d0 [ 124.649080][ T6423] ? update_rq_clock+0x40a/0xd20 [ 124.654041][ T6423] ? __pfx___report_bug+0x10/0x10 [ 124.659099][ T6423] ? update_rq_clock+0x40a/0xd20 [ 124.664057][ T6423] report_bug+0xb2/0x220 [ 124.668322][ T6423] ? update_rq_clock+0x40a/0xd20 [ 124.673280][ T6423] handle_bug+0x16a/0x2a0 [ 124.677619][ T6423] exc_invalid_op+0x17/0x50 [ 124.682136][ T6423] asm_exc_invalid_op+0x1a/0x20 [ 124.687001][ T6423] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 124.692570][ T6423] Code: ab 88 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 18 e5 b4 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 80 0b 00 00 48 b8 00 00 00 00 00 [ 124.712202][ T6423] RSP: 0018:ffffc9000201f3d8 EFLAGS: 00010046 [ 124.718295][ T6423] RAX: 0000000000000000 RBX: ffff8880b853b3c0 RCX: 0000000000000001 [ 124.726288][ T6423] RDX: 0000000000000046 RSI: ffffffff8def5229 RDI: ffffffff8c1c4380 [ 124.734269][ T6423] RBP: ffffc9000201f588 R08: 0000000000000001 R09: 0000000000000001 [ 124.742248][ T6423] R10: ffffffff90d73c57 R11: 0000000000000000 R12: ffffffff90d76fc4 [ 124.750227][ T6423] R13: ffff8880b853c260 R14: ffff88801e2f9f00 R15: ffff8880b853b3c0 [ 124.758221][ T6423] ? update_rq_clock+0x9c/0xd20 [ 124.763106][ T6423] __schedule+0x1e84/0x67a0 [ 124.767629][ T6423] ? __pfx___alloc_skb+0x10/0x10 [ 124.772588][ T6423] ? __pfx___schedule+0x10/0x10 [ 124.777462][ T6423] ? mark_held_locks+0x40/0x70 [ 124.782343][ T6423] preempt_schedule_irq+0x50/0x90 [ 124.787389][ T6423] irqentry_exit+0x205/0x970 [ 124.792016][ T6423] ? trace_reschedule_exit.constprop.0+0x6b/0x220 [ 124.798490][ T6423] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 124.803980][ T6423] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x4/0x20 [ 124.810768][ T6423] Code: d6 0f b7 f7 bf 03 00 00 00 e9 58 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <48> 8b 0c 24 89 f2 89 fe bf 05 00 00 00 e9 2a fe ff ff 66 2e 0f 1f [ 124.830407][ T6423] RSP: 0018:ffffc9000201f6a8 EFLAGS: 00000246 [ 124.836499][ T6423] RAX: 0000000000000000 RBX: ffff88801cb17800 RCX: ffffc9000f48a000 [ 124.844563][ T6423] RDX: 0000000000080000 RSI: 0000000000000000 RDI: 0000000000000000 [ 124.852540][ T6423] RBP: ffffc9000201fd28 R08: 0000000000000005 R09: 0000000000000000 [ 124.860519][ T6423] R10: 00000000000003c1 R11: 0000000000000000 R12: 0000000000000000 [ 124.868498][ T6423] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc9000201f8b0 [ 124.876503][ T6423] raw_sendmsg+0xcc1/0x3590 [ 124.881045][ T6423] ? print_kernel_ident+0x10/0x40 [ 124.886098][ T6423] ? __pfx_raw_sendmsg+0x10/0x10 [ 124.891056][ T6423] ? __schedule+0x12a7/0x67a0 [ 124.895778][ T6423] ? __import_iovec+0x1d2/0x640 [ 124.900656][ T6423] ? __pfx_raw_sendmsg+0x10/0x10 [ 124.905609][ T6423] inet_sendmsg+0x11c/0x140 [ 124.910143][ T6423] ____sys_sendmsg+0x98d/0xb70 [ 124.914934][ T6423] ? __pfx_inet_sendmsg+0x10/0x10 [ 124.919991][ T6423] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.925388][ T6423] ? rcu_is_watching+0x12/0xc0 [ 124.930174][ T6423] ? ___sys_sendmsg+0x19d/0x1e0 [ 124.935046][ T6423] ? kfree+0x1dd/0x6c0 [ 124.939146][ T6423] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 124.945587][ T6423] ___sys_sendmsg+0x190/0x1e0 [ 124.950294][ T6423] ? __pfx____sys_sendmsg+0x10/0x10 [ 124.955524][ T6423] ? do_user_addr_fault+0x7de/0x12f0 [ 124.960865][ T6423] ? lockdep_hardirqs_on+0x78/0x100 [ 124.966107][ T6423] ? __pfx___might_resched+0x10/0x10 [ 124.971415][ T6423] __sys_sendmmsg+0x205/0x430 [ 124.976108][ T6423] ? __pfx___sys_sendmmsg+0x10/0x10 [ 124.981348][ T6423] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 124.987204][ T6423] ? kcov_ioctl+0x16a/0x720 [ 124.991744][ T6423] __x64_sys_sendmmsg+0x9c/0x100 [ 124.996704][ T6423] ? lockdep_hardirqs_on+0x78/0x100 [ 125.001942][ T6423] do_syscall_64+0x115/0x840 [ 125.006573][ T6423] ? clear_bhb_loop+0x40/0x90 [ 125.011274][ T6423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.017185][ T6423] RIP: 0033:0x7f0705b9ce59 [ 125.021611][ T6423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.041245][ T6423] RSP: 002b:00007f07069f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 125.049701][ T6423] RAX: ffffffffffffffda RBX: 00007f0705e16090 RCX: 00007f0705b9ce59 [ 125.057694][ T6423] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 125.065674][ T6423] RBP: 00007f0705c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 125.073655][ T6423] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.081636][ T6423] R13: 00007f0705e16128 R14: 00007f0705e16090 R15: 00007fff6cbbeac8 [ 125.089629][ T6423] [ 125.092934][ T6423] Kernel Offset: disabled [ 125.097273][ T6423] Rebooting in 86400 seconds..