last executing test programs: 15m33.885539005s ago: executing program 32 (id=845): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x4c05, 0xfffffffffffffffd) statmount$auto(0x0, 0x0, 0x800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x902c2, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) select$auto(0xff, &(0x7f0000000080)={[0x9, 0xfffffffffffffffc, 0x4, 0xe, 0xc, 0x3, 0x3, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa654, 0x202, 0x9, 0x1]}, 0x0, 0x0, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mknod$auto(&(0x7f0000000100)=':,\x00', 0xc9, 0xfffefffa) execve$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000000c0)=&(0x7f0000000140)='$+[-+\x98%(,\x00\xdc\xec^&\x9e\x1c3\xeaf[|\xdeZ\xed2\xbc\xbd^\xc3\x0f\xc4\xd9\x94\x94B3\x97p\'\xf7\xea\xd5\xf9=\xe5\x1e\f\x8d\xe3\xb7\xadS\xbd\xb2uu\xc1I\xdew\x13.[\xee\xb6L\x983Z\xecS_\xff\xec\t\xd7\t\xa1&\x832Q&\x99\xbbI\xb5\xd2\xc7\xc8\x02S\x18ubI*\x8e\xd9\xd4\xaf\x8b\xfa\x8a\x90\xcd\x90\xaf\x95\x90\x1bU{O\x9cw\x8ez\xa1\xb23^\"\xbc\xd8\x0fT\xb7\x80\x00\bW\xd3\x9d=\x18\x91\x00\xedn\x9c\x93\x82@\x1a\xaex\xad*I\x1b\xa4Mx\x91f\xa6h\xb2c\x01Pf\x06\x18\xbd\x85\x1a\xea\xdc\x9bH\xcc\x1enhul8\xbdW^r\xe4\x04n\x8fK\x8f\xa1\xdc\xfc\xee\x97wO6\xe1+\xe7\xb0\v\xdfu\xb3\xa9L\x85\x1cW\x89~\x98\xfb&(\x9e\xa8\x8a\xed\xcaw,\x13\x13\x99a\x8d\xc6\xea\xff,\x11\x80\xe6H\xea\xe0\xcf\xab\xc2}I\xf5A\xd2\xf4\xc9_\x16\x97r\x94;\xb7\xd8\xf5)\xca)\xcf\x02\x0f\xa5V\xd17U*5C\x19\x8cL\xb5Ds.\x1b\xf9\x7f?b\xaf\x9d\xd4ww4\xa1\xc4\xfe\xf2\xda\x10\xdcV\x0e\x00'/311, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mq_notify$auto(0xffffffffffffffff, &(0x7f0000000280)={@sival_int=0x4, @raw=0x3, 0x2, @_sigev_thread={0x0, 0x0}}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/cache/index3/shared_cpu_map\x00', 0x200042, 0x0) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0xff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/1/msr\x00', 0xf00, 0x0) readv$auto(r0, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) open(0x0, 0x1e7d43, 0xa6) r1 = prctl$auto_PR_SVE_GET_VL(0x33, 0x4, 0xffffffffffffffff, 0xfffffffffffffff7, 0x9) ioctl$auto_USB_RAW_IOCTL_EP0_STALL(r1, 0x550c, 0x0) socket(0xa, 0x2, 0x88) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x7980, 0x6}, 0x2, 0x0, 0x0, 0x8) fcntl$auto(0x0, 0x407, 0x100000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 9m51.853912762s ago: executing program 2 (id=2215): r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)="58fcb282bcbc38bfaef257e019406e8ec445cd4f7f7662ac0f8834baa918d5b3cea133243c4f2b9a39e536b67f5a1a2bfdf589da2b1c980e9ce53883444996d1721d7f3ae627c6c68118e15b5a753fd37910fbc02d898cfc8254c80582") openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty44\x00', 0x440040, 0x0) prctl$auto_PR_SET_NAME(0xf, 0x5, 0x0, 0x8, 0xff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/nfs/parameters/nfs_mountpoint_expiry_timeout\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000040)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/reset\x00', 0xa001, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/version\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) write$auto(r1, &(0x7f00000000c0)='\xea\x9c\xaez\x88\xc8\x187\x00\\\xa0\xf9{\x1b\xcc\xf9\xfa\b\x1c\xc7{\xca\x9d\x15\x9c\xc4|wm7\xd1\xb1\xb9\x91\a\xba\x8b{\xfb\xb6\xce\xda\xf0\xf9\x12\xddS\x19$\xdc\xe3n\xbeF\x13\xcb\xc7wd\x879\x14>\x1d\xc2p\xde)=}\xe7\xc5GG\xb9\x01?\xf9\xe8\x18UyM\xdf\xb3', 0x81) open(&(0x7f0000000140)='./file0\x00', 0x5eb080, 0x1c1) r5 = socket(0x29, 0x5, 0x0) sendmsg$auto_MACSEC_CMD_DEL_RXSA(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)=ANY=[], 0x1190}, 0x1, 0x0, 0x0, 0x2c095}, 0x4080) sendmsg$auto_ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="94000000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf25170000001c00018008000100", @ANYRES32=r3, @ANYBLOB="08000300030000000800030080140002006d61637674617030000000000000000008000100", @ANYRES32=r3, @ANYBLOB="080003000600000014000200766c616e31000000000000000000000028000180080003007a00000008000100", @ANYRES32=r3, @ANYBLOB="1400020064766d72703100"/20], 0x94}, 0x1, 0x0, 0x0, 0x20040000}, 0x24040884) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00<\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t+\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89/s\x1cJ\x99\x00:\x00!\r?\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\x00'/97, 0xe, 0x3) r6 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/block/nbd0/hctx0/sched_tags\x00', 0x60100, 0x0) read$auto(r6, &(0x7f0000000040)='\x00', 0x3) clone$auto(0x0, 0x9, &(0x7f0000000000)=0x2, &(0x7f0000000040)=0x24, 0x1) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x2c, r2, 0xd0d58b333228212f, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_FREQUENCIES={0x10, 0x2c, 0x0, 0x1, [@typed={0x8, 0x34, 0x0, 0x0, @str='$.,\x00'}, @generic='\x00\x00\x00\x00']}]}, 0x2c}}, 0x4000000) r7 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) getdents64$auto(r7, 0x0, 0x400) ioctl$auto_TIOCSETD2(r7, 0x5423, &(0x7f0000000140)="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") 9m47.75692412s ago: executing program 2 (id=2217): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004000)='/dev/audio\x00', 0x102, 0x0) ioctl$auto_SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000004040)) setreuid$auto(0x81, 0xadaa) mmap$auto(0x0, 0x2020009, 0x3, 0x15, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x73, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0xf, 0x0) socket(0x2, 0x1, 0x0) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x237, 0x0) mmap$auto(0x0, 0x6, 0x4000000000df, 0xeb1, 0x400, 0x8000) msgctl$auto_IPC_SET(0x380, 0x1, 0x0) msgctl$auto_IPC_RMID(0x2, 0x0, 0x0) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x2, 0x0, 0x28) semget$auto(0x0, 0x13c, 0x1ff) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x8000, 0x36ec}, 0x1, 0x0) semctl$auto(0x0, 0x9, 0x0, 0x2) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0xc, 0x0, 0xf3, 0x0, 0x20, 0x3}, 0x5b3}, 0x200, 0x100) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 9m42.619951039s ago: executing program 2 (id=2226): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004000)='/dev/audio\x00', 0x102, 0x0) ioctl$auto_SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000004040)) setreuid$auto(0x81, 0xadaa) mmap$auto(0x0, 0x2020009, 0x3, 0x15, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x73, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0xf, 0x0) socket(0x2, 0x1, 0x0) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x237, 0x0) mmap$auto(0x0, 0x6, 0x4000000000df, 0xeb1, 0x400, 0x8000) msgctl$auto_IPC_SET(0x380, 0x1, 0x0) msgctl$auto_IPC_RMID(0x2, 0x0, 0x0) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x2, 0x0, 0x28) semget$auto(0x0, 0x13c, 0x1ff) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x8000, 0x36ec}, 0x1, 0x0) semctl$auto(0x0, 0x9, 0x0, 0x2) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0xc, 0x0, 0xf3, 0x0, 0x20, 0x3}, 0x5b3}, 0x200, 0x100) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="12"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 9m39.929548472s ago: executing program 33 (id=2209): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000002c0)={0x4, 0x7, 0x0, 0x400, 0x401, "077c13ff06c9cc9ff4956913870e035ebcd43e985b110210346f7f05f8bd5d8b4458e71254da2aab17208e518d2a9b3c20bd53a710ce119b1b61b000"}) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) socket(0x2, 0x1, 0x106) socket(0x10, 0x2, 0x6) setsockopt$auto(r1, 0x1, 0x1, &(0x7f0000000200)='\x00\x89e\xad\x97\xc5E\xea=\x0f\xf4\xba4\x05>y/21\xfd\'\xc7\x1c\xaeV`\xc7^\x05\"H\xb8\x12\x99\x1fF\xdc\xc4\x02FV\x04D&9?\xa8d\xc97B\x9f)\xc6\xbb\x15_\xfd\xa5\xaf\xf8\xb8\x8a\x186\xa9\x0eY;\x9a\xe32T\xddn\xa6zK\xef\xf7\x04\x81\xb4\xb7;\x12\x1ch$\xbd\xd1x\x15\xa8\x9c\xba\x83\xa7\xbdwf8\xc03z|\xcd\xbc\xa1+8\xcet\x960\a\x80\x88!\x9e\x96\xcd\xb5dB\xc1L\xb2\xb1\xe6\xf9\x92\xd4\xcd\v0|G\xb7\xc3+\xb5\xa9\xb4E>ry\x8d(\xcb\xadaH<-h\xef8\x0678]`\x1f\xe5\\\x9c\xb4\xbd 6\x9fP\x16\xb5\xa1.;d\xf5F7TgT\x908=l\x89\x05\x03\xcb\x04\x9c\x0e\x04\xb5a\xe6\xa6\x13\xf8\xb2\xe1\xab\vI;\x10\xa7\xcc\x84\x1d\xff(\x1c\x99\x90M\xba\xfe\xaa\x8e\x83\x98\xbb8\xc3\x02\x8d(\xb0\x9c@n\xb7\xd3TF\xc7\x7f\x11\x9e\x00\x00\x00\x00\x00', 0xbb) r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/nbd11/sched/write2_next_rq\x00', 0x300, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r2, &(0x7f0000000280)=""/205, 0xcd) mmap$auto(0x0, 0xdb33, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x109000, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454cc, 0x38) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1a, 0x6, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@phonet={0x23, 0x7, 0x3, 0x1}, 0x55) recvmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x7, &(0x7f0000000040)={0x0, 0x1}, 0x6, 0x0, 0x4, 0x6}, 0x1) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x7000000) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x400008, 0x8000000000000006, 0x9b72, 0x2, 0x800008000) symlink$auto(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000040), r1) 9m36.471606909s ago: executing program 2 (id=2241): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) personality$auto(0xfffffffc) ppoll$auto(0x0, 0xc, &(0x7f0000000100)={0x0, 0x9}, &(0x7f0000000140)={0x8}, 0x8) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) 9m35.324617171s ago: executing program 2 (id=2245): utimensat$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0xfffffff3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48891}, 0x20) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r1) r2 = syz_genetlink_get_family_id$auto_nl80211(0x0, r1) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="13002cbd7000dddbdf258200000008000300", @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, r2, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_MLO_TTLM_ULINK={0x72, 0x149, "ead5172289a4aa2e68434a5bed090c1d667865bd78271a64bd0097647c33ef0ba3c86766a992929e87a9f44e885758038d115a4581b00e200e50d40d8c2db578f8768d285f24c10d902ae4671e7ce79a3b63fef23d5225aafdb53489d6968cc9bcd6c6f18ab9bb06dc3a386f9439"}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000011) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000380)={0x28, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_COALESCE_TX_AGGR_MAX_FRAMES={0x8, 0x1b, 0x7d}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) 9m33.714963789s ago: executing program 2 (id=2249): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x200) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/irq/default_smp_affinity\x00', 0x2, 0x0) write$auto(r0, 0x0, 0x7) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/device_info\x00', 0x48041, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000140)="22edd92f26639ec0023a8686bd579dcf16f50e9bfa20abfa3ae55be8b5f870918621c10d9e916f6fe4fca6d7515871f05cc91f4246f6515662789a97d863c26cfd02b1cf15933b053fbdab9b", 0x4c) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x80002, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000240), 0x48000, 0x0) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) socket(0x2, 0x80002, 0x73) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) socket(0x11, 0x80003, 0x300) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) io_uring_enter$auto(r3, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) 9m18.601675274s ago: executing program 34 (id=2249): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x200) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/irq/default_smp_affinity\x00', 0x2, 0x0) write$auto(r0, 0x0, 0x7) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/device_info\x00', 0x48041, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000140)="22edd92f26639ec0023a8686bd579dcf16f50e9bfa20abfa3ae55be8b5f870918621c10d9e916f6fe4fca6d7515871f05cc91f4246f6515662789a97d863c26cfd02b1cf15933b053fbdab9b", 0x4c) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x80002, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000240), 0x48000, 0x0) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) socket(0x2, 0x80002, 0x73) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) socket(0x11, 0x80003, 0x300) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) io_uring_enter$auto(r3, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) 7m32.108474703s ago: executing program 5 (id=2629): socket(0x2b, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x20009, 0x6, 0xeb1, 0x401, 0x8000) delete_module$auto(&(0x7f0000000640)=')$)&\x00\xf2\xd0\xeam\xfd\xd2\n\x05.\x88$\x15D\xc8\xea\nB\xf6\x92\xbe\x97E\xb5R\xd8\x93\xe9\x82\xd4\xf5J\xc5\x98\xbb\xbcdwfy\xf5~\x8b\xf9i\x8c\xc2\xa6x\xee\x81e,\x8dHy\xab -\xf6\xe2I\xd9B\xa7\x919\x8d\x03\xed\x9a\xe9?\xba\x1f\x92\xf8|y\xe0\x14\x1c\x17\xc7\xd3q#%$\xca\x98\xcc\x1b%K\x0f\xb2e\xd1r\x7f\xd7\x1e\xcb\x80\xbfO/B\x0fl\xd2\xf5F\x10Z\xe0p\x9cp\x9d>\xf1\\\xf2%u\xf9\xfb\f\xf1j\x04\x94\xb2\xbc\x813\x8d\xdas\x04\xdbG\xf5NR\xae\x19\xeep(\x8f\xfe\xb2>\f\xe5\x8e@q\x9dJ\xf5\xeer\b!\xa4\xdbI\xc1%t\xb1\xbd\x9e\x95\xf4\x8ej\x87\x8c\x9a\r;G/\x87\x86\xf50\xed\xa9\xd3\x7f\x17\xd5\xde\xc4Jr,\xa5\xd05\xbd\x80&\xe2\xb4z\x99 \xad0>\b', 0x10000000) socket(0x28, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030026bd7020f8dbdf250934bcd7d9432c6b", @ANYRES32=0x4, @ANYBLOB="a47f20080002000000000000", @ANYRES32=0x9, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRESHEX=r3, @ANYBLOB="0268e9ce95f905de0cc5cb282b516a19e9926557af383abe1d1004c856ce9aa1fcfa4edf99f01c0abb4cbbf8729ed62cc62cd72af84e75184486c852541d4cd938b81ff4ceda080beff6d093bf0b4720c41587771c8885623a428122c973998c668d3a78292a0eebd76875c663", @ANYRES16=r1], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'gretap0\x00'}) socket(0x1, 0x23af690fef30229, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x81, 0x7, 0x80df, 0xeb1, 0x401, 0x7fff) close_range$auto(0x2, 0x8, 0x0) r6 = io_uring_setup$auto(0x17d, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) ioctl$auto(0x3, 0x5414, 0x38) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r7, 0x4b41, 0x1) sendmsg$auto_OVS_DP_CMD_GET(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x7}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x4}, @OVS_DP_ATTR_UPCALL_PID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0xc040) mmap$auto(0x0, 0xffff, 0xdf, 0x9b72, 0x2, 0x8000) 7m31.936900451s ago: executing program 5 (id=2632): r0 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x2000, 0x0) read$auto_proc_environ_operations_base(r0, &(0x7f0000000240)=""/80, 0x50) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa25c1, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x7, 0xfffffffffffffffd, 0x2040d4, 0x3, 0x8, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0xfffffffa, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800}) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), r1) clock_adjtime$auto(0x80000001, &(0x7f0000000100)={0x4, 0x0, 0x100, 0x9, 0x4, 0x9, 0x3, 0x0, 0x5, 0xfffffffffffffffe, 0x69d, {0x81, 0x3da2}, 0x4, 0x5, 0x1, 0x6, 0x0, 0x319, 0x3, 0x5, 0x8000000000000001, 0x100, 0x6}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) timerfd_create$auto(0x9, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES2(r2, 0x4008af25, &(0x7f0000000080)=0x2) r3 = socket(0x1d, 0x2, 0x6) socket(0x2, 0x1, 0x0) r4 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000440), 0x1e9001, 0x0) write$auto(r4, &(0x7f0000000480)='/dev/snd/pcmC0D0p\x00', 0x47f) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r5, 0xfd}, 0x6a) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r3, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x44080) sendmsg$auto_IPVS_CMD_GET_DAEMON(r3, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010026bd70002e6eefb2f4762877265d863e537346fedbdf250b0000"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x4090) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r6 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20301, 0x0) write$auto(r6, 0x0, 0x4) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, 0x0, 0x20000044) 7m30.616072247s ago: executing program 5 (id=2637): madvise$auto(0x7ff, 0xfffffffffffefffd, 0x15) sysfs$auto(0x1, 0x10000000000002a, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80002, 0x73) r1 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) madvise$auto(0x110c230000, 0x8031ca, 0x9) mmap$auto(0x4b, 0x4, 0xdf, 0xeb1, r0, 0x3) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000000680)=""/227, 0xe3) madvise$auto(0x0, 0x20499d, 0x9) futex_waitv$auto(&(0x7f0000000000)={0x8, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) madvise$auto(0x108000, 0x800034, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) fallocate$auto(r1, 0x8, 0x3, 0x2) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="98806b", @ANYRES16=r1, @ANYRES8, @ANYRESOCT=r2, @ANYRES8=r3, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES8=r3], 0x2c}, 0x1, 0x0, 0x0, 0x24000800}, 0x10) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRESHEX=r2, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYRES32, @ANYBLOB="7b12d2cbac14babbf5077ab4abc86963a05c75c25b1c77646d608d422bee09f1c6c76c329c81b29bbd38ee4e7e615dd054786e017e52c93b5cebfcf7c4116e1cfdf56c22615325a0d100a8fb8c0c4701d00b", @ANYBLOB="140002006970365f7674693000000000000000000800030068060000140002006772653000000000000000000000000008000300000000000800090009000000380001800800030008000000140002007767300000000000000000000000000008000300ff010000080003008b8900000800030003000000"], 0x3ac}, 0x1, 0x0, 0x0, 0x8010}, 0x814) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000180), 0xffffffffffffffff) pwrite64$auto(0xc8, 0x0, 0x84, 0xe83) ioperm$auto(0x7, 0x6, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000280)="2580fc8f7efe2cfeee71547b5e82cbbf1b726802dfabc82b0906a1278900bda99f31cfb7e173f0ea737ed91df9d03aec70ea10879cfbeb2c68609c7c237410fb3b9bfda396a9d92527de750126b3418e5229f572d4020d92f0e8ac37e3d5658babcded6106c3d9008f656673b28bb0106306e481d10af267d70f7fdb7cebd5f18b0bde657edb98452425f7ec5d02de5d224e8ec423d14101000000000000003a94bff854cd0cb00dcc699d873d66e72347e45861ec329953ba5e204a9a24e23174c0e57286906f7cd4847e09b215acf5cc9d3c4e3d7961704a54074f618c41e9f051351ab45fdfe1c84dac2b9ab1fea6cefaaa52b63232547d6abbd53fb96f38c14fea4465b95e1818c97b4c42d6a8623e9c9002", 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x80000b}, 0x3, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 7m29.42481028s ago: executing program 5 (id=2644): read$auto(0x3, 0x0, 0x7) fallocate$auto(0xffffffffffffffff, 0x40, 0x80000000000010, 0xdbd60) write$auto(0xffffffffffffffff, 0x0, 0x2) lsm_set_self_attr$auto(0x3, 0xfffffffffffffffc, 0x1f, 0x8000000000000000) write$auto(0xffffffffffffffff, &(0x7f0000000900)='j\xa2\xb1\n\xb4\xd3\x00\x00\x00\x00\x8e\xc4\x97\x8a\x10\xd5<\xa7J\xb1\x00$\xd6\xfd\xca}\xa3\v\xfc7\x93S8\x02\x88pmh\x14\x86p\x04\\8\xe1|\xa8s\xa7\xdbLq\x0e\xdb\xa7\xb3\x94R\xb3D0\xf1Uf\a\x9f4\xb0\x957\xa6\xcd\xeb\x87^I\xf4\x0f\x18\x80h\xaau\x94\x1c\xd1\xb1c\xafZ\xb1\xf3\v\xd5\x1f\x14\x8c\x1bi\x90\xc8[\xecE\xfdwm\xb6\xf1Wj\xab\xfcIU\xce9\b\xcc\xfc&G*\xe5\x96\x91x\x93}$\x813*\xd4\x16\'w\xad<\xf6\xb1\xd2\xe5\xc3\x19\xfb\x15\xd5U\x80BL\xd8\x19\'\x19\b8\x96\xfb\x9f\xf9y\xf0:\xa18\xd8s\xf6~\x86\x84\xd6\xc1\xdaGo\xcc\xe1\xedq\x06\xb8\xb5\xaf4\xa3\xf5\xf0\xd1\xc13F\xfa.\xf0\"\x12\xe4\x1a\xed\xb7\xaeC\xceDwn\xc5C3v&%\xe0\xe7\xc6\x89\xbb\nH\x0fF\xdc\x03\xba\x18Y\x9d\x7f\xc8B\xfai\x8f]\xcf\x11F\xcb4\x90\x84\n\xea\xd0\x1d0\xb5\xcc\x1f\xf8\xf7\xbb\xf6\xb0\xc3D\xffb\xdchM\xeaq`\xc3\x9bfw\x9d|m0:\xd3\xb3$\xabJ\x84b\x1d\x12\xd0\xf7{\x19\x1cu\x94\x85\xd7\xf7\x88\x8a\xb1\x1c\xc3\x8d\x85.\xb3\xebE\xc2\xa5\r\xf7l\xdd~\xfe\a\xd5K\xb0\v}_\x92s\x9a\x06\x06\xa9I\x86\xc4\xdc\x83\x03\r\x93HXz4\xed\xa5\xd2f3E\xc6\xb7)\x1d\xb2^\x8a\x0e\x1bv\x10\xeffv\x95|\xfb+|\b\xf5\xf4\"t\xd5\xf3%\xb0\x12Y\xa4\xbf\xf8\xb8\xeaF\x91\x96\x9dO`\xf0Pv\xb9\xeb\xf7\xc6\xd7\n\x90B\xe9\f\x8c)\x83iYy\xf3\n\xd7\xbb\x19\xe9~\xbc\x8f\xf4\xda\xcc\xfe6nu\xb8\x82l\x1djc\xe9\xce\"\x1a\x19:G\xa3\xb5\xd34\xe3\xf9>\x91*\xb4\xd7M\xa7\xd3\x19\xed\xf3\xbb\xd8\xb6_\xdb\xec\xacM\xb1\xfc\xcd^\xd1\x18\xf6\t\x12\xdd\n\x16VT\xedT\xa2J\xa4\xe4{\x12\x8df\xed\xd9Q.\xd7\x03+?\r\x98J\x9a\x13\x17\x9c1\xe6\xf7\xaf\x99k&\x96w\xa5\x0e \x01\xe5\xeb\x92\xe2\xd5\xc0\x88D\x06tE\xeb~q>T\x0f\xfa\x1e\xea\xb9H\x1a\xf9VHW;D\xc0\x98\ncs\xbf\xe48*\x8b\ry\x9di\xb2=\xeaI\xd6\xec\xd9\xf6\x15\xf9\x02R\xd0\xaeb\xe0\xab\x01\xb6R\xbc\x88\x13r:\x9a\x99\xc0\x81\x01\xd7\xe2\xcd\xe5\x1f9+\xd2hOp\x95\xf0\x18x\xda{\xbe\x82\xa7\xc1\xbdZ\xc1\xa2o\xae\x13w\xd6\xe3\xfe\x91\x81\x9c\xbb\x9d\x9a\x10\xf9\xd7\xcc\'\xdc\xbf\x1b\xd0\x14F\x19\x86\x9b\xeb\xce\xba\xe4*\x8a\x11\x1b=\xa6\x89Y\x1b\xa2\xde\xac\x0e[N\xb4\xd7x!\x95\xbb%\xb3o\x00\xc3\x9f\xaa(\xac\xf7\xcc\xe6\xeb\x97\xab\xabz\xd5\xe8\x15:\xd8Ck\xed.\x81\xa0I:Vs0\xe6\xf5jE\xff\xd1\xd8\x1bHQXd-ifA\xdcO\xfb\xe4\xca\xcb\xc0\xd8~\xf1\xb2u\xb1B-\x90\xfe\xd5\xe7\x85\xea /\xa0\r|\x04\x8fG\x8e\x8e\x8d{\xbd\x9bb\x02\x96d\'\xc7\"_\b\xae\xef\xdb\xa8dqY\xaa\x13]H\xe0\xf9\x8a\xa2\xec\xb0eI\x9f\xc9\x8bhw\xcfTG\xdf\x19\x83\x04\xe7\xa4\xa21\xbd\"\x89\xb9\xc2\xe8\xad\x1aR-\x95\x10\xde(\x01\xbf\xe0\x04b\x84S\au\r\x1d\x8c\x19\x81\xb8\xf2\xcd\a\xe3-\xc6\x82O0\x14\v}^\x00\x00\xca\x1f\x83\x85z\x81\xd9\xa3\xbc\xac\x1e\xf4\xfb\xef9t\')\xe1Q\x03\x80\xcc\x13\xd5\x16\x03\xe7\xab\xf2a\x9a}4]\xbd\xb6\x98\x02\xa2\"$\xb9\x9cb\xfc<\x99\xd1S\x9e=\xd7w66\xf4\x86\v\x00`\x95\x1bT\x0f\"\xe9P\x85UR\xbc\xda\x1fH\x9c\x00\x00\x00\x00\x00\x00\x00\b-LW\xc4\x91\x17\xc5\x86,N6\x9e\xa6\xeb@VA\xf6\xd0\x14\xcc{:', 0x8) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) ioctl$auto_TIOCSBRK(r0, 0x5427, &(0x7f0000000240)) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x403, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x8004}, 0x14) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x11, 0x80003, 0x300) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x40080003, 0x0, 0x1000000000000004, 0x0, 0x8, 0x880}, 0x1000}, 0xffffffff, 0x4, 0x0) recvmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000380)="e883e2ce3aba93df8712f1c2fdcb4acfe19832c205ddbd008dc4734c54a61973e54d2208a191c9ad4a0b5fc8c78a498d1756ac6494c5d568d8b0893d4a4df56d1eb9a575f1ba0a11dd9d", 0x6, &(0x7f0000000080)={&(0x7f0000000400)="9cbc56733518de3f815109c51b3900486044f43f4fd5fea5c39380779c7615f4edf7f52681ccf054ffa82c15982af173b087d18bda7b62d9e1e2d4ae2ea849e1a954da4ac3b0295ce248049674", 0x400000000000002}, 0x3, &(0x7f0000000740)="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", 0x7, 0x200}, 0x100}, 0xf, 0x9, &(0x7f0000000580)={0x8, 0x7}) r3 = socket(0xa, 0x5, 0x0) getsockopt$auto(r3, 0x3, 0x3, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x6, 0xffffffff, 0x20, 0x940, 0x1ffde, 0x6, 0x6, 0x8000006, 0x2, 0x5, 0xb, 0x4, 0x6, 0xffffffffffffff00, 0x2, 0x3, 0x4000209, 0x7, 0x6, 0x0, 0x0, 0x3, 0x100, 0x9, [0x0, 0x8, 0x0, 0x243efbe3, 0x0, 0x3, 0xa, 0x0, 0x3, 0x0, 0x800000008, 0x6, 0x413e, 0xfee, 0x4, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x54, 0x0, 0x9, 0x3, 0xfffffffffffffffa, 0x6, 0xfffffffffffffffe, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x9, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x6, 0xfffffffffffffffe, 0xe6e, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1000]}, 0x5, 0x80) open(&(0x7f0000000680)='./file0\x00', 0x12b4c0, 0x113) execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=0x0, &(0x7f0000000000)=&(0x7f0000000200)=' ') sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESOCT=r2, @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x0) socket(0x29, 0x80000, 0x81) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x8e37}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) clock_getres$auto(0x8, &(0x7f0000000000)={0x3, 0x6}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x68140, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:00.0/power/runtime_active_time\x00', 0x82000, 0x0) 7m29.186157064s ago: executing program 5 (id=2645): r0 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x2000, 0x0) read$auto_proc_environ_operations_base(r0, &(0x7f0000000240)=""/80, 0x50) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa25c1, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x7, 0xfffffffffffffffd, 0x2040d4, 0x3, 0x8, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0xfffffffa, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800}) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), r1) clock_adjtime$auto(0x80000001, &(0x7f0000000100)={0x4, 0x0, 0x100, 0x9, 0x4, 0x9, 0x3, 0x0, 0x5, 0xfffffffffffffffe, 0x69d, {0x81, 0x3da2}, 0x4, 0x5, 0x1, 0x6, 0x0, 0x319, 0x3, 0x5, 0x8000000000000001, 0x100, 0x6}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) timerfd_create$auto(0x9, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES2(r2, 0x4008af25, &(0x7f0000000080)=0x2) r3 = socket(0x1d, 0x2, 0x6) socket(0x2, 0x1, 0x0) r4 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000440), 0x1e9001, 0x0) write$auto(r4, &(0x7f0000000480)='/dev/snd/pcmC0D0p\x00', 0x47f) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r5, 0xfd}, 0x6a) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r3, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x44080) sendmsg$auto_IPVS_CMD_GET_DAEMON(r3, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010026bd70002e6eefb2f4762877265d863e537346fedbdf250b0000"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x4090) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r6 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20301, 0x0) write$auto(r6, 0x0, 0x4) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, 0x0, 0x20000044) 7m28.324128703s ago: executing program 5 (id=2649): r0 = socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x7, 0x2000000e983, 0xdb, 0x1000000004017, r1, 0x100000000) mmap$auto(0xfffffffffffffff7, 0x5, 0x8001, 0x8000019, r0, 0x8000) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4$auto(r2, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r3 = socket(0x15, 0x4, 0x2) connect$auto(r3, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) r4 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) mmap$auto(0x0, 0x9, 0x9, 0xeb1, 0x401, 0x203) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev0\x00', 0x0, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0xc0305602, 0x38) read$auto(r4, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x3db) statmount$auto(0x0, 0x0, 0x227, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xeffd) openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000200), 0x6800, 0x0) sysfs$auto(0x2, 0x10000000000002a, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop7/trace/act_mask\x00', 0x402, 0x0) write$auto(r5, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) socket(0xa, 0x1, 0x84) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/fs/lockd/nlm_end_grace\x00', 0x48041, 0x0) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) 7m13.317395708s ago: executing program 35 (id=2649): r0 = socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x7, 0x2000000e983, 0xdb, 0x1000000004017, r1, 0x100000000) mmap$auto(0xfffffffffffffff7, 0x5, 0x8001, 0x8000019, r0, 0x8000) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4$auto(r2, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r3 = socket(0x15, 0x4, 0x2) connect$auto(r3, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) r4 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) mmap$auto(0x0, 0x9, 0x9, 0xeb1, 0x401, 0x203) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev0\x00', 0x0, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0xc0305602, 0x38) read$auto(r4, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x3db) statmount$auto(0x0, 0x0, 0x227, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xeffd) openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000200), 0x6800, 0x0) sysfs$auto(0x2, 0x10000000000002a, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop7/trace/act_mask\x00', 0x402, 0x0) write$auto(r5, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) socket(0xa, 0x1, 0x84) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/fs/lockd/nlm_end_grace\x00', 0x48041, 0x0) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) 5m24.558914072s ago: executing program 4 (id=2997): r0 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = socket(0xa, 0x3, 0x3a) r2 = fanotify_init$auto(0x1f53, 0x2000000000002) fcntl$auto(r2, 0x403, 0x3) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x460342, 0x0) sendmsg$auto_NL80211_CMD_STOP_AP(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYRES64=r0], 0x40}}, 0x2000c000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x20000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x11000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) epoll_create$auto(0x2) r3 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, 0x0) ptrace$auto(0xe, 0x0, 0x2, 0x53) fcntl$auto_F_SETSIG(r3, 0xa, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x400, 0x202000b, 0x5, 0xeb0, r3, 0x6) mbind$auto(0x8001, 0x2091ce, 0x20000805, 0x0, 0x1000080000006, 0x1002) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto(0x108000, 0x800034, 0x200000b) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 5m20.965170427s ago: executing program 4 (id=3005): mmap$auto(0xfffffffffffffffc, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) io_setup$auto(0x1, 0x0) mincore$auto(0x1000, 0x8001, 0x0) 5m19.626982303s ago: executing program 4 (id=3008): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, r1, 0x301, 0x70bd29, 0x25dfdc02, {}, [@ETHTOOL_A_RSS_START_CONTEXT={0x8, 0x7, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/dirty_background_ratio\x00', 0x141241, 0x0) write$auto(r2, 0x0, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x100000000000001c, 0x280000000000, 0x63, 0x0, 0x0, 0x0, 0x1002, 0x4, 0x80000008040000a, 0x40000402, 0x7, 0x8, 0xffffffff80000000, 0x800000000000b, 0x6, 0x240000100103}) r3 = prctl$auto_PR_GET_TSC(0x19, 0x73, 0xffffffffffffffff, 0x6, 0x2be) mkdirat$auto(r3, &(0x7f0000000000)='./file0\x00', 0x9) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r4 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000300)='/dev/binderfs/binder1\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x222240, 0x155) socket(0x10, 0x2, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c00014c636aea8008001b"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x6732}, 0x3, 0x0) 5m17.446096962s ago: executing program 4 (id=3010): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) prctl$auto(0x23, 0xe, 0x0, 0x68, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x1) socket(0x2, 0x5, 0x0) socketpair$auto(0x1e, 0x1, 0x0, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) lseek$auto(r0, 0x2, 0x9) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x401c5820, 0x0) mkdir$auto(0x0, 0x353) close_range$auto(0x2, 0x8, 0x0) 5m15.537038027s ago: executing program 4 (id=3017): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0xffff, 0x0) socket(0x2, 0x5, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime$auto(0x0, 0xb746, &(0x7f0000000000)={{0x4d4, 0x2}, {0x5}}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0xa, 0x5, 0x84) sendto$auto(r2, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "000000000000fe8000"}, 0x1f) syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x8001, 0xff, 0x80000001, 0x1010, 0xffffffffffffffff, 0x28000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8008000) socket(0xa, 0x801, 0x1) unshare$auto(0x40000080) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) write$auto(0xca, 0x0, 0x10) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000200), r0) sendmsg$auto_NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="040027bd7000fcdbdf251300000008000e000004000008001d0005000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000850}, 0x4) sendfile$auto(r3, r3, 0x0, 0x3) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x2140, 0x0) msgctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000000480)={{0x8, 0xffffffffffffffff, 0xee01, 0x2177, 0x7f, 0x101, 0xfffa}, &(0x7f0000000400)=0xa4, &(0x7f00000000c0)=0x8a, 0x8, 0x0, 0x10000, 0x5, 0x0, 0xc, 0x7, 0x1, @raw=0x6}) fstat$auto(r3, &(0x7f0000000500)={0x10001, 0x1, 0x100, 0x80000000, 0x0, r6, 0x0, 0x4, 0x2, 0x7, 0x9e26, 0x3, 0x9, 0x5, 0x3, 0x4, 0xfffffffffffffffe}) socket(0xa, 0x2, 0x3a) r7 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000001380), 0xa000, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(r7, 0xc0105702, &(0x7f00000013c0)) fcntl$auto_F_SET_RW_HINT(r5, 0x40c, r1) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/ram0/queue/nomerges\x00', 0xe3102, 0x0) sendfile$auto(r8, r8, 0x0, 0x3) 5m14.203973593s ago: executing program 4 (id=3019): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00@\x00', @ANYRES16, @ANYBLOB="010027bd7000fddbdf250a0005000700000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010072e0fa60fddbdf2500009c8814816b5e81"], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x2) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="00000002", @ANYBLOB="1c003b"], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x6}, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socket(0x23, 0x8000c, 0x2b0f) pipe2$auto(0x0, 0x80) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x18, 0x4, 0x0) openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000011500), 0x40002, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20c40, 0x0) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x121080, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x404803, 0x20) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x183042, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) 5m13.753587375s ago: executing program 36 (id=3019): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00@\x00', @ANYRES16, @ANYBLOB="010027bd7000fddbdf250a0005000700000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010072e0fa60fddbdf2500009c8814816b5e81"], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x2) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="00000002", @ANYBLOB="1c003b"], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x6}, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socket(0x23, 0x8000c, 0x2b0f) pipe2$auto(0x0, 0x80) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x18, 0x4, 0x0) openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000011500), 0x40002, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20c40, 0x0) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x121080, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x404803, 0x20) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x183042, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) 5m4.301396039s ago: executing program 8 (id=3020): r0 = socket(0x2, 0x5, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2dc08f24db163610, 0x0) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x40901, 0x0) socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) capset$auto(0x0, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_DATAGRAM_RECEIVE(r2, 0x7ac, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4a801, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x12000, 0x0) socket(0x3, 0x5, 0x5) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mtd0ro\x00', 0x2000, 0x0) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0ca0316dfbc86a7f010026bd7000080000000f000000"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd700001dcdf2503000000040006000c000180080010000400"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) ioctl$auto_MTDFILEMODE(r3, 0x4d13, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)="3098412d1d2a21f9821bbb6575682f4fa969d6d8f51ad133eb2fb3cd698bac435177fc1942f009b507130df5d599f4ff6031c5518c8e660d59059846f0326039e724f62ba81e019302f5") sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r6 = eventfd$auto(0x34b) readv$auto(r6, &(0x7f0000000380)={0x0, 0x8}, 0x4) 5m3.754786531s ago: executing program 8 (id=3044): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) prctl$auto(0x23, 0xe, 0x0, 0x68, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x1) socket(0x2, 0x5, 0x0) socketpair$auto(0x1e, 0x1, 0x0, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) lseek$auto(r0, 0x2, 0x9) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x401c5820, 0x0) mkdir$auto(0x0, 0x353) close_range$auto(0x2, 0x8, 0x0) 5m3.680128636s ago: executing program 6 (id=3045): open(&(0x7f0000000040)='./file0\x00', 0x161342, 0x126) socket(0x2, 0x1, 0x0) socket(0x28, 0x5, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0x18, 0x4, 0x0) openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000011500), 0x40002, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20c40, 0x0) socket(0x2, 0x801, 0x6) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x121080, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42dc0, 0x1a0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x183042, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x8102, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptye4\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x7, &(0x7f00000001c0)={0x5, 0xdf, 0xffffffff, 0xfffffffd, 0x53, 0x2, 0xffffffffffffffff, [0x40009574, 0x7, 0x1], {0x9, 0x2, 0x201, 0x7, 0x3d, 0x8000001, 0x5530, 0x400, 0x1}, {0x3, 0x23, 0x7fff, 0x6, 0x400, 0x58, 0x5, 0x27, 0x40}}) pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x80091, 0x0) 5m2.791448034s ago: executing program 8 (id=3048): r0 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x2000, 0x0) read$auto_proc_environ_operations_base(r0, &(0x7f0000000240)=""/80, 0x50) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0xe0802, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000440), 0x402002, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x7, 0xfffffffffffffffd, 0x2040d4, 0x3, 0x8, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0xfffffffa, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800}) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), r1) clock_adjtime$auto(0x80000001, &(0x7f0000000100)={0x4, 0x0, 0x100, 0x9, 0x4, 0x9, 0x3, 0x0, 0x5, 0xfffffffffffffffe, 0x69d, {0x81, 0x3da2}, 0x4000000000004, 0x5, 0x1, 0x6, 0x0, 0x319, 0x3, 0x5, 0x8000000000000001, 0x100, 0x6}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) timerfd_create$auto(0x9, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES2(r2, 0x4008af25, &(0x7f0000000080)=0x2) r3 = socket(0x1d, 0x2, 0x6) socket(0x2, 0x1, 0x0) r4 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000200), 0x131283, 0x0) write$auto(r4, &(0x7f0000000480)='/dev/snd/pcmC0D0p\x00', 0x47f) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6a) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r3, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x44080) sendmsg$auto_IPVS_CMD_GET_DAEMON(r3, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000287b5b3b25532b820d20359d14d2496779c3bafd9ab6e130f9abfbc2e19332465db79e4441a966273fc1c72438e58da1821bb6170170cc620f4cbb6a12d6334e8be99e3a06425a8b3ab89f460c4057b84e87c074cc42e983a84004f5f25cd800c3e75ae2298727fe953724398650cb25e9250bdd1732c44fd4c8329d925b6f79967509fdbb68", @ANYRES16=0x0, @ANYRESDEC], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4090) mmap$auto(0x2, 0x2020009, 0x1000001, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r5 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20301, 0x0) write$auto(r5, 0x0, 0x4) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, 0x0, 0x20000044) 5m2.236141794s ago: executing program 8 (id=3050): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, r1, 0x301, 0x70bd29, 0x25dfdc02, {}, [@ETHTOOL_A_RSS_START_CONTEXT={0x8, 0x7, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 5m1.675359755s ago: executing program 37 (id=3050): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, r1, 0x301, 0x70bd29, 0x25dfdc02, {}, [@ETHTOOL_A_RSS_START_CONTEXT={0x8, 0x7, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 5m1.66521976s ago: executing program 7 (id=3053): r0 = socket(0x2, 0x5, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2dc08f24db163610, 0x0) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x40901, 0x0) socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) capset$auto(0x0, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_DATAGRAM_RECEIVE(r2, 0x7ac, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4a801, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x12000, 0x0) socket(0x3, 0x5, 0x5) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mtd0ro\x00', 0x2000, 0x0) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0ca0316dfbc86a7f010026bd7000080000000f000000"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd700001dcdf2503000000040006000c000180080010000400"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) ioctl$auto_MTDFILEMODE(r3, 0x4d13, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)="3098412d1d2a21f9821bbb6575682f4fa969d6d8f51ad133eb2fb3cd698bac435177fc1942f009b507130df5d599f4ff6031c5518c8e660d59059846f0326039e724f62ba81e019302f5") sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r6 = eventfd$auto(0x34b) readv$auto(r6, &(0x7f0000000380)={0x0, 0x8}, 0x4) 5m1.649791494s ago: executing program 6 (id=3054): socket(0xa, 0x801, 0x84) (async, rerun: 32) ioctl$auto_EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f00000000c0)={0x8, 0xb2, 0x9, 0x2, "8dac3b7146adec82d28925ad701750033d89cd2d17f439d31116467df2e2be07"}) (rerun: 32) mmap$auto(0x0, 0x7, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x14, 0x2, 0x7ffe) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x10000000009b72, 0x2, 0x8000) (async, rerun: 64) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) (rerun: 64) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) (async) ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, 0x0) openat$auto_autofs_root_operations_autofs_i(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/virtual/bluetooth/hci4/hci4:201\x00', 0x10000, 0x0) fstatfs$auto(0x3, 0x0) ioctl$auto(r0, 0x4b67, 0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyz6\x00', 0x800, 0x0) (async) r2 = openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/tracing_on\x00', 0x90001, 0x0) read$auto_rb_simple_fops_trace(r2, &(0x7f00000005c0)=""/253, 0xfd) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x2100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x84, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x800}) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rB\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) remap_file_pages$auto(0x40, 0x2000fff, 0x0, 0xdc, 0x100000) (async) r3 = socket(0x1f, 0xa, 0x2) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3) sendmsg$auto_NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r4], 0x138}, 0x1, 0x0, 0x0, 0x4000880}, 0x4091) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) (async) unshare$auto(0x40000080) (async, rerun: 32) ioperm$auto(0x7, 0x6, 0x1) (async, rerun: 32) socket(0xa, 0x3, 0xff) 5m1.082209818s ago: executing program 7 (id=3055): r0 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = socket(0xa, 0x3, 0x3a) r2 = fanotify_init$auto(0x1f53, 0x2000000000002) fcntl$auto(r2, 0x403, 0x3) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x460342, 0x0) sendmsg$auto_NL80211_CMD_STOP_AP(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYRES64=r0], 0x40}}, 0x2000c000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x20000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x11000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) epoll_create$auto(0x2) r3 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, 0x0) ptrace$auto(0xe, 0x0, 0x2, 0x53) fcntl$auto_F_SETSIG(r3, 0xa, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x400, 0x202000b, 0x5, 0xeb0, r3, 0x6) mbind$auto(0x8001, 0x2091ce, 0x20000805, 0x0, 0x1000080000006, 0x1002) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto(0x108000, 0x800034, 0x200000b) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 5m0.116064551s ago: executing program 6 (id=3056): r0 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x2000, 0x0) read$auto_proc_environ_operations_base(r0, &(0x7f0000000240)=""/80, 0x50) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000200), 0x133083, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa25c1, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xfffffffe, 0x0, 0x7, 0xfffffffffffffffd, 0x2040d4, 0x3, 0x20008, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0xfffffffa, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0x2, 0xdeb1, 0x8fff}) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), r1) clock_adjtime$auto(0x80000001, &(0x7f0000000100)={0x4, 0x0, 0x100, 0x9, 0x4, 0x9, 0x3, 0x0, 0x5, 0xfffffffffffffffe, 0x69d, {0x81, 0x3da2}, 0x2, 0x7, 0x1, 0x2, 0x0, 0x319, 0x3, 0x5, 0x8000000000000001, 0x100, 0x6}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) r2 = timerfd_create$auto(0x9, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES2(r3, 0x4008af25, &(0x7f0000000080)=0x2) r4 = socket(0x1d, 0x2, 0x6) socket(0x2, 0x1, 0x0) r5 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000440), 0x1e9001, 0x0) write$auto(r5, &(0x7f0000000480)='/dev/snd/pcmC0D0p\x00', 0x47f) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r6, 0xfd}, 0x6a) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r4, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x44080) sendmsg$auto_IPVS_CMD_GET_DAEMON(r4, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRESOCT=0x0, @ANYRESDEC=r2], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r7 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/tracing/set_event\x00', 0x20301, 0x0) write$auto(r7, 0x0, 0x4) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, 0x0, 0x20000044) 4m58.721363391s ago: executing program 6 (id=3057): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) prctl$auto(0x23, 0xe, 0x0, 0x68, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x1) socket(0x2, 0x5, 0x0) socketpair$auto(0x1e, 0x1, 0x0, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) lseek$auto(r0, 0x2, 0x9) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x401c5820, 0x0) mkdir$auto(0x0, 0x353) close_range$auto(0x2, 0x8, 0x0) 4m57.795186032s ago: executing program 7 (id=3059): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x2fa6) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socketpair$auto(0x1, 0xd3, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x801, 0x100) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003540), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000035c0)={'macvlan0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_PLCA_SET_CFG(r3, &(0x7f00000036c0)={0x0, 0x0, &(0x7f0000003680)={&(0x7f0000003600)={0x20, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_PLCA_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x40880) r6 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x93) write$auto_proc_clear_refs_operations_internal(r6, 0x0, 0x0) setsockopt$auto(r0, 0xe26c, 0x480, 0x0, 0x28) readahead$auto(r1, 0x6, 0x8) 4m57.259108424s ago: executing program 6 (id=3060): r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) memfd_create$auto(&(0x7f00000002c0)='\xc4--:\xdd:,r/-${\x00', 0x6) (async) memfd_create$auto(&(0x7f00000002c0)='\xc4--:\xdd:,r/-${\x00', 0x6) nanosleep$auto(&(0x7f0000000500)={0xe, 0x3}, &(0x7f0000000540)={0xd, 0x2083}) (async) nanosleep$auto(&(0x7f0000000500)={0xe, 0x3}, &(0x7f0000000540)={0xd, 0x2083}) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) r1 = socket(0x1e, 0x6, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x403, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigpending$auto(0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) (async) r2 = socket(0xa, 0x2, 0x88) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f0000000080)={{0x28, 0xee00, 0xee00, 0x93ab, 0x7f, 0x0, 0x3}, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x9, 0x6, 0x7f, 0x0, 0x3, 0x5, 0x9, 0x1, 0x1, @raw=0x2}) (async) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f0000000080)={{0x28, 0xee00, 0xee00, 0x93ab, 0x7f, 0x0, 0x3}, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x9, 0x6, 0x7f, 0x0, 0x3, 0x5, 0x9, 0x1, 0x1, @raw=0x2, @inferred=0x0}) msgctl$auto_IPC_SET(0xfffffff5, 0x1, &(0x7f0000000180)={{0x40, r3, 0x0, 0x2, 0x80, 0x6, 0x8}, &(0x7f0000000100)=0x9, &(0x7f0000000140)=0x7, 0x6f, 0x4, 0x6, 0x8000, 0x2, 0x8, 0x7, 0x0, @raw=0x8, @inferred=0xffffffffffffffff}) (async) msgctl$auto_IPC_SET(0xfffffff5, 0x1, &(0x7f0000000180)={{0x40, r3, 0x0, 0x2, 0x80, 0x6, 0x8}, &(0x7f0000000100)=0x9, &(0x7f0000000140)=0x7, 0x6f, 0x4, 0x6, 0x8000, 0x2, 0x8, 0x7, 0x0, @raw=0x8, @inferred=0xffffffffffffffff}) r8 = getpid() msgctl$auto_IPC_SET(0xf, 0x1, &(0x7f0000000300)={{0x10, r6, r7, 0xffff, 0xb57, 0xffff, 0x1}, &(0x7f0000000280)=0x14, &(0x7f00000002c0)=0x40, 0x79, 0xcb, 0xc21, 0x100000000, 0x5, 0xfffc, 0x8f8, 0x4, @raw=0xc45, @inferred=r5}) rt_tgsigqueueinfo$auto(r9, r8, 0x9, &(0x7f0000000380)={@_si_pad}) msgctl$auto_IPC_STAT(0x8, 0x2, &(0x7f0000000480)={{0x0, r3, r4, 0x6, 0x8, 0x4}, &(0x7f0000000400)=0x8, &(0x7f0000000440)=0x2, 0xc00, 0x7, 0xfffffffffffffffa, 0x6, 0x0, 0x1000, 0x2, 0xfff9, @raw=0x1c000000, @raw=0x3}) (async) msgctl$auto_IPC_STAT(0x8, 0x2, &(0x7f0000000480)={{0x0, r3, r4, 0x6, 0x8, 0x4}, &(0x7f0000000400)=0x8, &(0x7f0000000440)=0x2, 0xc00, 0x7, 0xfffffffffffffffa, 0x6, 0x0, 0x1000, 0x2, 0xfff9, @raw=0x1c000000, @raw=0x3}) msgctl$auto(0x4, 0x800, &(0x7f0000000dc0)={{0x60000000, r6, r4, 0x6, 0x800, 0x0, 0xa7}, &(0x7f0000000d40), &(0x7f0000000d80)=0x5, 0x40, 0x1, 0x20000000000006, 0x1, 0xb, 0x11f, 0x0, 0x0, @inferred=r8, @inferred=r5}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@inferred=r8, 0x1, 0x1, 0x81, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d", @raw=0x7fffffff}, 0x2, 0x5, 0x2, @raw=0x3, @integer={0x7, 0x5, 0x4}, "7a9fc199a16a2311eacf2fc7ae1d8778dc61be0eda71bdd71c254592b6ffff0000000000006f7ce8cbce0bb32791702b8d7c2d00"}) rt_sigqueueinfo$auto(0x0, 0x4, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x14, 0x7e73, @_timer={0x0, 0x80000001, @sival_ptr=0x0, 0x5}}}) r10 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r10, &(0x7f0000000580)={{&(0x7f0000000800)="56f6f8026d8825c63a04c5cd6b05000000ce543e18cadb645a4145ce57efb3eb3fa8059798b83cc01da32f8b95b4ba2891ea27b13b8bdd9f7cae191945dc9011fed43401650a7a7de15dafcfdc18d0e2c1b64330fe4dcbd65f2b0b6ab92207c867812486ebd8d675d6281c3ca8cd329b99f5469fc82436074305c02bb82f9bc41f12af800c7b68bfbfb571960f2d16804e00d6d4901809d83f2f0b8e8e58a9020000008327c806a980bbd299589334a58aa9a54a580fe71b24498f5c18628b426cbc194d91055570e3830fbfd099e58e1cdfb53cfaa16b68974ff403e68811a08b3d22c146719156e4764067068f6d6ed8e2ae210cf5ecaaeb", 0x5ac, &(0x7f0000000100)={&(0x7f0000000740)="aaa2d2ef9835a5dc138e9f8bc796ebc4c9ee63f8bde2b96e54a1740f31253a3847eb16bdc30b338b073cc3517f1a38b7ab9717bb91356e422b22aeb83fa81e752db7fc2a4a0d71fc78768c3cc0ceb24b1a87efade1ff1abf1801f50af085f50acebab53a1236f3b02ff7cf3d1e61a699b50bf86b24a9167a8b046f3aa6bafade2537ca896c77eab7aad4b4ab874af0eace11a0a8b57328370589ea4580f210687525505fec65373401cbcd93ecc6e74e9074f5779c", 0xf}, 0x7, &(0x7f0000000180), 0x5, 0xe}, 0x1}, 0x1, 0x100) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=0x4, 0x4, @old_map_fd=r1}, 0xa3) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) 4m57.013455952s ago: executing program 7 (id=3061): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) process_vm_writev$auto(0x0, &(0x7f00000011c0)={&(0x7f00000001c0)="42777dd1330b458d0b5c44ca32e94fc00cfbce962ee7d8f31c0f90c327830f55adfdceafcc0f7b5a21ea23bdf5344d47d49d60218e57bb33118d04fdd37f5fd17f96a318132a5dd282784244bd58b9a0c8adc60d2f8535b3", 0x8}, 0x7, 0x0, 0x7, 0xb5) r0 = socket(0x11, 0x3, 0x9) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) open(&(0x7f0000000140)='./file0\x00', 0x4000, 0x1a0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) (async) sendfile$auto(0x6, 0x3, 0x0, 0xfdef) close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) socket(0x840000000002, 0x3, 0xff) (async) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) connect$auto(0x3, &(0x7f0000000040), 0x55) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc005}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x3c, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r1, @ANYBLOB="7ce4b08eb41d57329f0e82be1e4110dbe797a7828c979f9c35d83e940c0f86801abcc03fa1f2d96625a84c89c6d0d86198b6bee4823cd65c3f305368a3a943d9e4e808faa7e2df9d20a2e8595404ebd46f0114e9496dc8605e550871d5b16a3e5a83a687ed074ff73ad352164381754fa2cf7f2e551beda8a6e86733fcff9b6030988cb9e6297f0faa7ced4334675f451205bea8121abae0538a6ba1bee896e53940548dedfb2bcdedbbfea258f5e86f1f4a6567af8f1ffacdd9457b60af848d79ab126123b545afd15f064df0846f75d32a1ad14c16c13a4b890cb08e0320b3ed9053e467672886bdee8e68"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000090}, 0x40000) close_range$auto(0x0, 0x1c94, 0x2) (async) socket(0x2, 0x5, 0x0) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getcwd$auto(0x0, 0xffffffffffffffff) (async) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0x80000000) (async) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x63c1, 0x7ff) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x11, 0x9}, 0x7}, 0x3, 0x0) (async) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) (async) sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)="4c0300000000000000a3677337f9eca9075f6bba441b", 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100) 4m56.700076384s ago: executing program 6 (id=3062): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x3, 0x6) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x2dc08f24db163610, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204000, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = socket(0x15, 0x5, 0x0) r3 = getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) socket(0xa, 0x806, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x68182, 0x0) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000000)={0x0, 0xffff}, 0x1) close_range$auto(r3, 0xa, 0x0) close_range$auto(r1, r2, 0x3) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/mm/hugepages/hugepages-2048kB/nr_hugepages_mempolicy\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)=""/17, 0x11) userfaultfd$auto(0x1) ioctl$auto(0x3, 0xc018aa3f, 0xc) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYRES16=r5], 0x1ac}}, 0x40001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4m56.699489677s ago: executing program 7 (id=3063): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0) ioctl$auto(r0, 0x2285, 0x1cfc4b42) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x9, 0x20000000) (async) sendmsg$auto_NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, 0x0, 0x4008080) (async) r1 = openat$auto_fops_atomic_t_ro_(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) write$auto_fops_atomic_t_ro_(r1, 0x0, 0x0) (async) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) (async) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) (async) socket(0x2, 0xa, 0x106) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/nr13/ifalias\x00', 0xc0002, 0x0) (async) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) io_uring_setup$auto(0x10004, 0x0) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x2c082, 0x0) ioctl$auto(r2, 0x40104d13, r2) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) rseq$auto(&(0x7f0000000340)={0xe, 0x401, 0x0, 0x806, 0xffffffff, 0x2}, 0x8000, 0x0, 0x8000006) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x110c234000, 0x1, 0x9) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/i8042/serio0/id/proto\x00', 0x101600, 0x0) (async) unshare$auto(0x200) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x7) (async) r3 = epoll_create$auto(0x7) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000380), r3) msgsnd$auto(0x0, &(0x7f0000000600)={0x7fc, 0x7}, 0x400, 0x2) (async) msgrcv$auto(0x0, 0x0, 0x4bd, 0x1, 0xf1) (async) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async) write$auto(0x3, 0x0, 0xfffffdef) 4m56.175800457s ago: executing program 38 (id=3062): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x3, 0x6) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x2dc08f24db163610, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204000, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = socket(0x15, 0x5, 0x0) r3 = getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) socket(0xa, 0x806, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x68182, 0x0) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000000)={0x0, 0xffff}, 0x1) close_range$auto(r3, 0xa, 0x0) close_range$auto(r1, r2, 0x3) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/mm/hugepages/hugepages-2048kB/nr_hugepages_mempolicy\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)=""/17, 0x11) userfaultfd$auto(0x1) ioctl$auto(0x3, 0xc018aa3f, 0xc) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYRES16=r5], 0x1ac}}, 0x40001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4m55.808091846s ago: executing program 7 (id=3065): mmap$auto(0xfffffffffffffff8, 0x100004005, 0x7, 0x40eb2, 0x401, 0x300000000000) prctl$auto(0x1, 0x4, 0x4, 0x3, 0x4) mmap$auto(0x0, 0x400005, 0xffffffffffeffffe, 0x9b72, 0xc76, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4008081}, 0x10004000) socket(0x6, 0x80802, 0x0) r0 = socket(0x2, 0x1, 0xfffffffd) fcntl$auto(0x3, 0x4, 0xa553) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec\x00', 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10}, 0x3, 0x1) select$auto(0xa, &(0x7f0000000180)={[0x80000000, 0xbfd3, 0x44, 0x6, 0x3, 0x7fffffffffffffff, 0x8, 0x4, 0x1, 0x8, 0x4, 0x9, 0xfffffffffffffffc, 0x9000000000, 0x10000000009, 0x40]}, &(0x7f0000000240)={[0xd, 0xf, 0x7, 0x401, 0x9fed, 0x100000001, 0x800000000, 0x40005, 0x8, 0x0, 0x7, 0xb, 0x63, 0x1, 0x1, 0x6]}, 0x0, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, 0x0, 0x10500, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r1, &(0x7f0000000000)=""/156, 0x9c) msync$auto(0x1ffff000, 0x180000000000000, 0x6) mmap$auto(0x0, 0x2020009, 0xfff, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) r2 = socket(0x2, 0x1, 0x106) getsockopt$auto_SO_MEMINFO(r2, 0x1, 0x37, 0x0, &(0x7f0000000180)=0x7) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000001200), 0x8000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x8a) getdents64$auto(r3, 0x0, 0x400) 4m40.09420762s ago: executing program 39 (id=3065): mmap$auto(0xfffffffffffffff8, 0x100004005, 0x7, 0x40eb2, 0x401, 0x300000000000) prctl$auto(0x1, 0x4, 0x4, 0x3, 0x4) mmap$auto(0x0, 0x400005, 0xffffffffffeffffe, 0x9b72, 0xc76, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4008081}, 0x10004000) socket(0x6, 0x80802, 0x0) r0 = socket(0x2, 0x1, 0xfffffffd) fcntl$auto(0x3, 0x4, 0xa553) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec\x00', 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10}, 0x3, 0x1) select$auto(0xa, &(0x7f0000000180)={[0x80000000, 0xbfd3, 0x44, 0x6, 0x3, 0x7fffffffffffffff, 0x8, 0x4, 0x1, 0x8, 0x4, 0x9, 0xfffffffffffffffc, 0x9000000000, 0x10000000009, 0x40]}, &(0x7f0000000240)={[0xd, 0xf, 0x7, 0x401, 0x9fed, 0x100000001, 0x800000000, 0x40005, 0x8, 0x0, 0x7, 0xb, 0x63, 0x1, 0x1, 0x6]}, 0x0, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, 0x0, 0x10500, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r1, &(0x7f0000000000)=""/156, 0x9c) msync$auto(0x1ffff000, 0x180000000000000, 0x6) mmap$auto(0x0, 0x2020009, 0xfff, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) r2 = socket(0x2, 0x1, 0x106) getsockopt$auto_SO_MEMINFO(r2, 0x1, 0x37, 0x0, &(0x7f0000000180)=0x7) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000001200), 0x8000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x8a) getdents64$auto(r3, 0x0, 0x400) 8.123421327s ago: executing program 0 (id=3943): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop6\x00', 0x1c9002, 0x0) r0 = socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(0x3, 0x0, 0x8) epoll_create$auto(0x3e) socket(0x1e, 0x4, 0x0) socketpair$auto(0x8, 0x7, 0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) sendmsg$auto_NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="74177333d10fcd5bb4979675bc2c7c125c10fc80c42f635d40aae41bc1ebe534ebc7126d530be95b030000bbb9aa97ab4e027e59bfc87726e9c235c14d", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fcdbdf2526000000a700e8002a056321ecbcd33b9cae813e679e5bebe6e3f0075337d722cc9253bcfc39c24545cfc28fae02f5a359c109f1aeb3fb6a1bb2220299ce7b54e20333db5d179da370d757fa176ec3e982f67ab913955c262a255a6db9ab67a75a518ff4125fc4a912719c24983ab86ac1f5df3651f8354410df726730ff5793147f320d98acaebfc7fc647474b3fc297a4b7637543b459330363fc8c341a6ec9fdc1a180d875970278e5600"], 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x4004) ioctl$auto_TCFLSH2(r1, 0x8924, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/tunl0/napi_defer_hard_irqs\x00', 0x28b42, 0x0) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000680)=""/227, 0xfdef) fadvise64$auto_POSIX_FADV_WILLNEED(0xffffffffffffffff, 0x5, 0xffff, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x395100, 0x0) r2 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x10, 0x2, 0x8000) socket(0xa, 0x3, 0x6) ioctl$auto(0x3, 0x8936, 0x91) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001740)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_KEY={0x4}, @OVS_FLOW_ATTR_KEY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_JOIN_MESH(r2, 0x0, 0x20000800) r5 = openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) read$auto_dev_fops_plock(r5, &(0x7f00000001c0)=""/132, 0x84) r6 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x109402, 0x0) ioctl$auto_UBI_IOCDET(r6, 0x40046f41, 0x0) 6.488986733s ago: executing program 0 (id=3947): r0 = socket(0x2, 0x5, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2dc08f24db163610, 0x0) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x40901, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x4, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x8, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x808}) socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) capset$auto(0x0, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_DATAGRAM_RECEIVE(r2, 0x7ac, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4a801, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x12000, 0x0) socket(0x3, 0x5, 0x5) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mtd0ro\x00', 0x2000, 0x0) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0ca0316dfbc86a7f010026bd7000080000000f000000"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x800) ioctl$auto_MTDFILEMODE(r3, 0x4d13, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)="3098412d1d2a21f9821bbb6575682f4fa969d6d8f51ad133eb2fb3cd698bac435177fc1942f009b507130df5d599f4ff6031c5518c8e660d59059846f0326039e724f62ba81e019302f5") sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r5 = eventfd$auto(0x34b) readv$auto(r5, &(0x7f0000000380)={0x0, 0x8}, 0x4) 5.606285118s ago: executing program 0 (id=3950): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000004680)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x502, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x80100, 0x0) r1 = semctl$auto(0x0, 0x6, 0x3, 0x3) prctl$auto_PR_GET_TSC(0x19, 0x780e, r1, 0x9, 0x8) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x3ff) r2 = socket(0x23, 0x2, 0x0) ioctl$auto(r2, 0x89a0, 0x8) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000000) unshare$auto(0x40000080) mmap$auto(0x200000000, 0x6, 0x7, 0xeb2, 0x401, 0x7f) close_range$auto(0x2, 0x8, 0x0) socket(0x2c, 0x6, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0x0, &(0x7f0000000140)={0x4, 0x2, 0x6, 0x6, 0x5, 0xef, 0xffffffffffffffff, [0x3, 0x10000, 0x101], {0x7ff, 0x3, 0xc, 0x6, 0x0, 0x0, 0xfc2, 0x6}, {0x7, 0x5, 0x6, 0x8b83, 0xc, 0x8000, 0x9, 0xc4e, 0x7}}) prctl$auto_PR_SET_MM_START_CODE(0x6, 0x1, r1, 0x7, 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x8002, 0x0) socket(0x15, 0x5, 0x0) socket(0xa, 0x2, 0x88) madvise$auto(0x0, 0x2000040080000004, 0xe) mlockall$auto(0x8000000000000001) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) ioperm$auto(0x7, 0x6, 0x2) flock$auto(0x6, 0x1) 4.646708478s ago: executing program 9 (id=3956): r0 = socket(0x10, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x1fe, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c855}, 0x40805) sendmsg$auto_L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000028bd7000ffdbdf250000000008000b000a"], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x8c1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1700", @ANYBLOB="7f"], 0x1ac}}, 0x40000) sendmsg$auto_NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="06002abd700087"], 0x24}, 0x1, 0x0, 0x0, 0x9}, 0x1) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) shmctl$auto_IPC_SET(0x3, 0x1, &(0x7f0000000000)={{0xb2, 0xffffffffffffffff, 0xee00, 0x1, 0x378, 0xab, 0x4}, 0xe0434f77, 0x8, 0x2, 0x1, @raw=0x9, @inferred, 0xd, 0x0, &(0x7f00000003c0)="5844adc76dd9d0cb408c94f72d74724d166a4a4454777e0ca0e708ce5c32e34c2546d74aaffea8bcd24a7baccb1cdc52559a5ad9da46c40de68b805f2fe064ed9559d27c70f650a309bf4600f8bc07088446c93ba11289b2c29707919dce14b44b958c01ae4441f598a8ad20abc7723e2837843592d1edafdde792977553842ed56ec9f3d0b56ab69a33e062347f5385f9785e3920d08d15c62ff82db202a4852557b1a892ce4542465be615a2b0a087c2d3db7963a0d0aa1e71dce42d566d5ad66118326fee4e8bdb803bb07f2e684f1f28be904e3c8d49920fbfaa527dbf312fac6d1c3e3ce63e0ae51f601a43862d140024a616935ae9d0db16be3b", &(0x7f0000000100)="61c2bb49ce41c0c72c4919e63db8c95f019da0bd364764a12415957856dcaa6490084db593217ac72cd73bcb7d6d5bff830a80cab0d6336a30f88c6e0f9142cac297eef356a1fd2d39c8a992a5e377a9f80a59aa094b3041be24d69831534efc2c98bd6088a77fcc4773c750c6cfcd1476e39f22d12ebc0f1e2799fbe1f41af61fb57bb250b3f5096b1097807b164758fd692f1d1449191667c8100fc4a43a1249744b99"}) r2 = getgid() shmctl$auto(0x7, 0x5, &(0x7f00000005c0)={{0xa, r1, r2, 0x4, 0x3, 0x3, 0x200}, 0x2, 0x7, 0x7, 0x5000000, @raw=0xfffffffc, @raw=0x4, 0x0, 0x0, &(0x7f00000004c0)="21e07e0b081dc6dbea8f2e7a161b8c7060dae0de483c772d2f58921054a3fc31b77d62fc0f09ecf8b3a3d66306a58d9d91be956ba9c489394d24c432dbed567fd519bb36c3cffd55ec2430b81dadd92297d3b1", &(0x7f0000000540)="f1143eef5f66476827ee94d6610f6758aaea326645ee11bcafa43ed2ed567c75013db72017e31bfb824bb8cec5a5c59b1396e201b400258c6c2e7c95adf8b21939"}) epoll_create$auto(0x0) 4.309411446s ago: executing program 0 (id=3957): socket(0x15, 0x5, 0x0) sendto$auto(0x3, 0x0, 0x2000f, 0x0, &(0x7f0000000040), 0x1c) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/rose7/power/runtime_suspended_time\x00', 0x48000, 0x0) read$auto(r0, 0x0, 0x80000000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x16f802, 0x0) mmap$auto(0x0, 0x0, 0x8, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0xc) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r1, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0xa, 0x801, 0x100) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "0000000000fffffffa00"}, 0x55) ioctl$auto(r2, 0x541b, r2) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:0c/sun\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x412302, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) writev$auto(r0, &(0x7f0000000200)={0x0, 0x207}, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) socket(0x1e, 0x5, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) r4 = semctl$auto_SETVAL(0x6, 0x6, 0x10, 0x8) prctl$auto_PR_SET_MM_START_DATA(0x80000003, 0x3, r4, 0xb, 0x8) 4.176341422s ago: executing program 1 (id=3958): socket(0x2b, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x20009, 0x6, 0xeb1, 0x401, 0x8000) delete_module$auto(&(0x7f0000000640)=')$)&\x00\xf2\xd0\xeam\xfd\xd2\n\x05.\x88$\x15D\xc8\xea\nB\xf6\x92\xbe\x97E\xb5R\xd8\x93\xe9\x82\xd4\xf5J\xc5\x98\xbb\xbcdwfy\xf5~\x8b\xf9i\x8c\xc2\xa6x\xee\x81e,\x8dHy\xab -\xf6\xe2I\xd9B\xa7\x919\x8d\x03\xed\x9a\xe9?\xba\x1f\x92\xf8|y\xe0\x14\x1c\x17\xc7\xd3q#%$\xca\x98\xcc\x1b%K\x0f\xb2e\xd1r\x7f\xd7\x1e\xcb\x80\xbfO/B\x0fl\xd2\xf5F\x10Z\xe0p\x9cp\x9d>\xf1\\\xf2%u\xf9\xfb\f\xf1j\x04\x94\xb2\xbc\x813\x8d\xdas\x04\xdbG\xf5NR\xae\x19\xeep(\x8f\xfe\xb2>\f\xe5\x8e@q\x9dJ\xf5\xeer\b!\xa4\xdbI\xc1%t\xb1\xbd\x9e\x95\xf4\x8ej\x87\x8c\x9a\r;G/\x87\x86\xf50\xed\xa9\xd3\x7f\x17\xd5\xde\xc4Jr,\xa5\xd05\xbd\x80&\xe2\xb4z\x99 \xad0>\b', 0x10000000) r0 = socket(0x28, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="030026bd7020f8dbdf250934bcd7d9432c6b", @ANYRES32=0x4, @ANYBLOB="a47f20080002000000000000", @ANYRES32=0x9, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'gretap0\x00'}) socket(0x1, 0x23af690fef30229, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYRES64=r5, @ANYRES8=0x0, @ANYRES8=r4, @ANYRES32=0x4, @ANYBLOB="81b5424c09eb95aef006abd1df1193852a066fb6857fc814b41cb20177a690bdff51323ccbe07a9e341b21088ddec2857d4efb781b2a6df57edaff57defefab66c40d32971d9b8a1278ec009c2e04f30d3fea35ca439dc02c19cc5c5723e613a9391884ef9280e58aedf7a4ff809e644ffab5141dee1e13e23667a30ea0c1c", @ANYRES32=r0, @ANYBLOB="05f1a96f6ec5bed9c0744684b49263ac1dd0afc4285548ba00af5f0cd6a39be4eb0cf380eb861055d449e9b882fe9675fb2247d522aa923f3c50cdc5fa97bd685051203efac228657575b73263d557f9435b66a769fd091d0bdf448a4b240646a69a0aedaaf2368c645f92b9b3cc20475dd6915269acf6020000000ee431d3ea3d08cb4c4c67a5b733c37f32217840e4367329ed7b9dd91b027fd234f5587a02eb54009bab6f90693444990142c5657ae7bdbdf9ddc8497c8b1acb69efb003f5b0d3d48ad031"], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) mmap$auto(0x81, 0x7, 0x80df, 0xeb1, 0x401, 0x7fff) close_range$auto(0x2, 0x8, 0x0) r8 = io_uring_setup$auto(0x17d, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) ioctl$auto(0x3, 0x5414, 0x38) r9 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r9, 0x4b41, 0x1) sendmsg$auto_OVS_DP_CMD_GET(r8, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r1, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x7}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x4}, @OVS_DP_ATTR_UPCALL_PID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0xc040) mmap$auto(0x0, 0xffff, 0xdf, 0x9b72, 0x2, 0x8000) 3.822532661s ago: executing program 1 (id=3959): r0 = socket(0x2, 0x5, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2dc08f24db163610, 0x0) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x40901, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x4, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x8, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x808}) socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) capset$auto(0x0, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_DATAGRAM_RECEIVE(r2, 0x7ac, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4a801, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x12000, 0x0) socket(0x3, 0x5, 0x5) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mtd0ro\x00', 0x2000, 0x0) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0ca0316dfbc86a7f010026bd7000080000000f000000"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x800) ioctl$auto_MTDFILEMODE(r3, 0x4d13, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)="3098412d1d2a21f9821bbb6575682f4fa969d6d8f51ad133eb2fb3cd698bac435177fc1942f009b507130df5d599f4ff6031c5518c8e660d59059846f0326039e724f62ba81e019302f5") sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r5 = eventfd$auto(0x34b) readv$auto(r5, &(0x7f0000000380)={0x0, 0x8}, 0x4) 3.788777376s ago: executing program 3 (id=3960): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) set_mempolicy$auto(0x2, 0x0, 0x4) (async) futex_wake$auto(0x0, 0x7, 0xffefffff, 0x12) (async) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) (async) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000080)='/dev/usbmon25\x00', 0x2, 0x0) (async) r0 = socket(0x10, 0x2, 0x4) (async) syz_clone3(&(0x7f0000000240)={0x2010400, 0x0, 0x0, 0x0, {0x8000002d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) (async) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) (async) io_uring_setup$auto(0xd, 0x0) (async) madvise$auto_MADV_PAGEOUT(0x0, 0x4655, 0x15) (async) sendfile$auto(0x1, 0x3, 0x0, 0xc01) (async) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) write$auto(r2, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) 3.750561869s ago: executing program 9 (id=3961): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PSE_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="444b7d6a42b39e53dc17aaa0000000", @ANYRES16=r1, @ANYBLOB="0100073d7000fcdbdf2524000000200001800800040033020000140002006d616373656330000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x400d8) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r2 = set_tid_address$auto(0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000080), 0x101781, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48101, 0x0) ioctl$auto_KVM_GET_MSR_FEATURE_INDEX_LIST(r3, 0xc004ae0a, &(0x7f0000000080)={0x33c6}) r4 = syz_open_procfs$namespace(r2, &(0x7f0000000080)) getdents$auto(r4, 0x0, 0x3f1) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/bpf_stats_enabled\x00', 0x163041, 0x0) write$auto(r5, &(0x7f0000000180)='\x00', 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/sctp/eps\x00', 0x3a1100, 0x0) r6 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r6, &(0x7f0000000140)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20e9b63", 0x1e) mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/hugetlb.2MB.rsvd.failcnt\x00', 0x101142, 0x0) write$auto(r7, 0x0, 0x4) fcntl$auto(0x8000000000000001, 0x26, 0x8) io_uring_setup$auto(0x1, 0x0) fcntl$auto(0x8000000000000001, 0x24, 0x4) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/queues/rx-9/rps_cpus\x00', 0x2002, 0x0) openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x2440, 0x0) write$auto(r8, &(0x7f0000000040)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 3.612000839s ago: executing program 3 (id=3962): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth1_to_batadv/accept_ra_rt_info_min_plen\x00', 0x40100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) socket(0xf, 0x3, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = prctl$auto(0x40001000000001d, 0x0, 0x2, 0x9, 0x1) sendmsg$auto_L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x8c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x80000000}, @L2TP_ATTR_NONE={0x66, 0x0, "4b25bbb6a3ff8ca0a235f4b8f70bbf72d9c27bb754ed16821119cfcfcb07d457a529750de6a0e3e68c59b2733dd5275da790efe53d138fd8ac54fc405ab1ea57a4352489dad82bfb3611cf8fe2ecd90f9798c61836ec5517cad0197428cc988d0e4a"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) 3.010250346s ago: executing program 1 (id=3963): mmap$auto(0x0, 0x8, 0xdf, 0xbf5c, 0x2, 0x8000) mknod$auto(0x0, 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x2, 0x88) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, r0, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0x4040aea0, 0x0) socket(0x1d, 0x2, 0x7) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3}, 0x6a) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x3, 0xd7, 0x5, 0x2, 0x7, 0x1, 0x9, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3bc, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, 0x8000000000000000, 0x4, 0x0, 0x0, 0x371de66a, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x4, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x100]}, 0x1fe, 0x5) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0xffffff7f}, 0x40000) 2.991051038s ago: executing program 3 (id=3964): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24044010}, 0xc0) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) getsockname$auto(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x42}, 0x103}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001640), r0) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000180)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x9}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) unshare$auto(0x40000080) setregid$auto(0x5, 0x6) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8c00, 0x0) mmap$auto(0x1, 0x7ff, 0x100000000, 0x11, 0xfffffffffffffff1, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x2, 0x0) socket(0x2b, 0x1, 0x1) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x0, 0x81, 0x0, 0x338) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x8, 0x5, 0xfffffffe) socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x101d0, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = semctl$auto(0x9, 0x2, 0x5, 0x53d) ptrace$auto_ARCH_SET_FS(0xffffffff, r3, 0x8, 0x1002) 2.93216903s ago: executing program 9 (id=3965): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/03.0\x00', 0x8001, 0x0) write$auto(r0, &(0x7f0000000040)='*%+}$(/\'\x17:\x88&0\x00', 0x200) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x9, 0x8c}}]}, 0x1c}}, 0x8000) r2 = socket(0x18, 0x2, 0x5) r3 = semctl$auto_GETPID(0xa, 0x0, 0xb, 0x8000) r4 = prctl$auto(0x0, 0x1, r3, 0x8, 0xa5) mmap$auto(0x3, 0x0, 0x4, 0x8c3c, r2, 0x3) ioctl$auto_TIOCSWINSZ2(0xffffffffffffffff, 0x5414, &(0x7f00000001c0)="3407dec6e8df59a5f178d52f0844568ff7597c21bc25c025d47cff272ca05fc987c5b489437266c245455399af85bd671cefc61099d792f8455a9c7408b1d5e742df34338fd68ec384b71618428d5eb557eabc5e0fd994c72c30cc0cd3c769037fd37f7722c3e022935fabd218dc00097e70b7a4b641cde9196f7661a58ef151c255a39f281fd7e6dc8008383388c7cfb03db4991f27c58e72a38f0e3079b889377586426bb733402f") r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f00000002c0)={0x4fc, r1, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xfd, 0xe8, "43bbf90b18420e5cb8c16da6f1b2e9a2aeda265a20049f568bb93c4058e75f058f8539e21304cfd218758009513ccd69976f7b4ac7417128ad724dcccde48fdb945eb2a2e3388b8fe3efc152f905d3ad917e1edff67ed01f47689c4da14879c28961a12e435cae2f127fa176e720fd0ad48621dfe7bbf4a8b809bc6182fd9d6ebdee285432287aad32168369442ce57baa1326a0865cc24cd03a7a6e49d905728bbf032afc33243b55bce8c49e6afd611bd8a58dcc4d27b09686e5cf683b20518557a2df4a84ecc10ab13cb91fa18f12a23ac425266049708ce7648a7508634ceb8be6d9329efa6e245032d6fa0f698af19bab16743172a461"}, @NL80211_ATTR_FTM_RESPONDER={0x3e8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xbc, 0x2, "88e1bd8902f9df09d8f2e194c4c8721e25aa82b8fdda331c3c9c14c0b0406d666227999ab4294cbcfe467614beca2a46616d3390e8fc901dca20803f65dcb5e046416996f99461bb0d9708ba0e1073321931493d86611eab05db22ebb524a01697f03f911f1e40058189efa203709f1ce014baacd739851a13d8ac80d23c7a49f04ed891effc867ef29cba28ee1543edf66cabc120d32a53d2a82a6a01617ad13fc6ff50e38701597eedd40c1e4ac5256e89e86350130265"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x101, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_LCI={0xea, 0x2, "97926393a3db3de154a285df1f6fc813575b4710a12b99b8fc9a7dc590f3cb58b9ad0eed01d20543336277d4054e94e75077b0576a725300700a2781fce9a0f7fd7672270e8da5dfa14544b1a6e00d872f76894e2dd09943edf4dcf08fe43696944d44f1eb3349a14782a9a31ba675ffac7c7d5ac500fdfc34a0dbfdcae7f8ad1316a88356fcacffa11f769285f76aa25db20c01ce02701b79b0633eae08eee4f8b4936537ee935603742670f217c0eb7133cd5a5f2866b73e4dfbca61ee0a52aa083366d7c3bdee2e19d3d95746328501860f0c7925a4a47a579f4af238fd4d89dd1b597b6b"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x92, 0x3, "27d9172b986fafc8c7c9b86322b8a9778af1c863efaf31712796c239be6ec48c7b0d5ebdd0187da67c88bdb3911ccecf6d47590353e2c6023ee6c1a712dd6abcfd9e8d798dd762c0aafc6f4495dd4913cc4ee4cbd87809d657465f1fbad04cf085d103471179d77dcee53c8ffa43d492fe44c116355b5365e82fc602c45b7b8ac02336726bcbaeb20181306e0761"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x9c, 0x2, "f6989aa18dc134ca7e3c728acba090287a20c9d3bfff309625fa0c32d6cf1271139d682bbfb17a1e38620d8f38a6025d6bcba7c0917bccdce49443e252f9baa7af310a917006b1d6dd2c5917c7fa527325f4b3cfc8314130f96b1cc11a86703b007cc67b4d2eb801e53c170a3cabff2ee227e4f3c19b31b069bbfb01bf55d546c7207e1a2f7fd0af0ec72c774b98e56bccb447c3809497dd"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}]}, 0x4fc}, 0x1, 0x0, 0x0, 0x8085}, 0x94) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000840), r2) r6 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000880), 0x200, 0x0) r7 = fcntl$auto(r6, 0x401, r3) write$auto_zero_fops_mem(r7, &(0x7f00000008c0)="b592e6dc67a6458f85168f21d7f3b7eddb9fc07894834184bfab3da54b002faa42d56d2cc7aae0472ea71f7427dccc19bc064d042d4d625545c862294d41d8d9ee85060fe7", 0x45) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000940), r7) r8 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000009c0), r5) sendmsg$auto_CTRL_CMD_GETFAMILY(r5, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0xa25}, @CTRL_ATTR_FAMILY_NAME={0xa, 0x2, 'IOAM6\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40400d4}, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000b00), r4) r11 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b40)='/proc/slabinfo\x00', 0x210000, 0x0) sendmsg$auto_NL802154_CMD_GET_INTERFACE(r9, &(0x7f0000001dc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000000b80)={0x11d0, r10, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xe}, @NL802154_ATTR_WPAN_PHY_CAPS={0x11a0, 0x18, 0x0, 0x1, [@nested={0x4, 0xe3}, @typed={0x1004, 0x50, 0x0, 0x0, @binary="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"}, @nested={0x17f, 0xdb, 0x0, 0x1, [@typed={0x4, 0xd1}, @nested={0x4, 0x22}, @generic="e51cb5677538b68460c2082977614ffd15c4d6de64d8add21dfcc96b44f79104a1672cee3996becff3b01208a3a13569d80ed4bd7e63ba5d18005980dc0c77f9e1ef4ded270dc97db5fe8aadeda5d7e8a3de3eda256a921bbb75c8f7fd6ddd1807fdcdaa88da327802fcb3c0f06cb03286cc58689cd132229c3d8190b7f78b5022", @generic="8602de3bf69ba40cfc3494448cf7b4ed87d1d2e66be0e946495905bdd1c9b6be72960be6b36cb100c07ae493a5dbeaae20a4f71091fae1015b93484909c3706039d713c993019862a56a44a7e1a32c9a60cdf2f5", @typed={0x8, 0x24, 0x0, 0x0, @fd=r11}, @typed={0x4, 0x59}, @generic="5642d99339ccca89c2cca3a9a178fda5045f7e5c6732df143a091e9359afceae34cd56d174eb7b9fb9340d3995fb933b2a8e276a1aba3e7d11022105c90cd01731fc74f0dbaaeba0646fef8c73e2118797722cb5ad542bd95034df90da851e846c93b8f844d16fd4a958206b34b8dc85edc5647510f464977303da836ef64f6041f0d6fad5e4bfd2e43445879e6efbe6b292"]}, @typed={0x14, 0x90, 0x0, 0x0, @ipv6=@mcast2}]}, @NL802154_ATTR_WPAN_PHY_NAME={0xa, 0x2, 'IOAM6\x00'}, @NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0x4}]}, 0x11d0}, 0x1, 0x0, 0x0, 0x10000800}, 0x20020090) setsockopt$auto(r2, 0x8, 0x5, &(0x7f0000001e00)='#.^^:\x00', 0xfffffffc) getsockopt$auto_SO_RCVTIMEO_NEW(r4, 0x3, 0x42, &(0x7f0000001e40)='IOAM6\x00', &(0x7f0000001e80)=0x8) bind$auto(r6, &(0x7f0000001ec0)=@isdn={0x22, 0xae, 0xff, 0x1, 0x5c}, 0x5) r12 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000001f00)='/proc/self/pagemap\x00', 0x1, 0x0) ioctl$auto_PAGEMAP_SCAN(r12, 0xc0606610, &(0x7f0000001f40)={0xd, 0x9, 0x2, 0x7ff, 0x1, 0x2, 0x8, 0x1ff, 0x80, 0x5, 0x15ff3f8f, 0x3}) uname$auto(&(0x7f0000001fc0)={"501b24f9705f7fd5deac2712036fc839e6ce6b5a7b25d6e1fd4044b6e8a46d2200906adb5529c58c4e0603bc458a648e29c78a4627a50269a47ef1f14aac8d3c76", "c78247d6587b8889a153fa96f55dc033327723b2b94305c033fb717254210a0a99b9b42455d45a7386f332dcee65951a2498355250871b28b73f4087c901444e5f", "7a173cec81f8f2f26b59c6032225ff8984bef130d3c72531628667947269cf99733161fe02ed3fb22b3455a3076bf80e2f716d003fe9a8314fe6e61ca1182bd621", "d3f975869f409d47340e1d51c0e4c0a4f9cec2f2670d5bd7e8a5a84b9c05e82d0b0ed026b1bd3ed51bbf6083c0e9f8df758d374b4a0de33f4d2eb1a88e5d6f2b1e", "3662a3bb6b9d142d2909867847e200a3bf0452d7ed341e1ab36c15ed0e080fa1dadd1558a0b99ed681b29d76c01f0dd2847927cb36fea0d74d6350d5258f332caa", "3df7890b5a8c401e2c70a7ad47d910ee0ca6974bf0725effa57bc989db33c373dfb95688a045c17c3b42e9d7caf60baa6496b2632099287430f2d71194d824ba98"}) open(&(0x7f0000002180)='./file0\x00', 0x10000, 0x30) setsockopt$auto_SO_TXTIME(r7, 0x9413, 0x3d, &(0x7f00000021c0)='nl802154\x00', 0x4) 2.79833953s ago: executing program 0 (id=3966): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000640)='/sys/devices/platform/dummy_hcd.1/usb2/bmAttributes\x00', 0x0, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x2000, 0x9, 0x8, 0x8000000008011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs$namespace(0x0, 0x0) mmap$auto(0x0, 0x9a, 0x4, 0xeb1, 0x401, 0x2fb00e3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) kcmp$auto(0x0, 0x0, 0x40000000, 0x7ff, r2) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYBLOB="2f212abd7800fddbdf25"], 0x14}}, 0x4000000) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) ustat$auto(0x801, 0x0) mbind$auto(0x2000, 0x100000006, 0x100000000, 0x0, 0x5, 0x2) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000000)="1100000000000000", 0x8) write$auto(r1, &(0x7f00000000c0)='/dev?au\xea\xf7\xc8\xba\x00', 0xa3dc) r4 = socket(0x10, 0x3, 0xa) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r4, 0x0, 0x10) select$auto(0xfffffffe, 0x0, 0x0, &(0x7f0000000180)={[0xf1, 0x7, 0xd, 0xfffffffffffffffe, 0x948b, 0x2000000, 0x401, 0xff, 0x80, 0x300000000000000, 0x40000080000001, 0x7, 0x6d3c, 0x5, 0x3ff, 0x7ff]}, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioperm$auto(0x7, 0x6, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x42, 0x20) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) 2.664146042s ago: executing program 9 (id=3967): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) close_range$auto(r0, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x802, 0x1) socket(0x2, 0x5, 0x0) socketpair$auto(0x1e, 0x1, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x0, 0x0) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TCFLSH2(r2, 0x8924, 0x0) (async) ioctl$auto_TCFLSH2(r2, 0x8924, 0x0) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="18030000", @ANYRES16=r3, @ANYBLOB="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"], 0x318}, 0x1, 0x0, 0x0, 0x20000000}, 0x180) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) (async) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r4, 0x0, 0x1f40) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x40040000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x40040000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) (async) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) kill$auto(r6, 0x11) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 2.621092013s ago: executing program 1 (id=3968): socket(0x2b, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x20009, 0x6, 0xeb1, 0x401, 0x8000) delete_module$auto(&(0x7f0000000640)=')$)&\x00\xf2\xd0\xeam\xfd\xd2\n\x05.\x88$\x15D\xc8\xea\nB\xf6\x92\xbe\x97E\xb5R\xd8\x93\xe9\x82\xd4\xf5J\xc5\x98\xbb\xbcdwfy\xf5~\x8b\xf9i\x8c\xc2\xa6x\xee\x81e,\x8dHy\xab -\xf6\xe2I\xd9B\xa7\x919\x8d\x03\xed\x9a\xe9?\xba\x1f\x92\xf8|y\xe0\x14\x1c\x17\xc7\xd3q#%$\xca\x98\xcc\x1b%K\x0f\xb2e\xd1r\x7f\xd7\x1e\xcb\x80\xbfO/B\x0fl\xd2\xf5F\x10Z\xe0p\x9cp\x9d>\xf1\\\xf2%u\xf9\xfb\f\xf1j\x04\x94\xb2\xbc\x813\x8d\xdas\x04\xdbG\xf5NR\xae\x19\xeep(\x8f\xfe\xb2>\f\xe5\x8e@q\x9dJ\xf5\xeer\b!\xa4\xdbI\xc1%t\xb1\xbd\x9e\x95\xf4\x8ej\x87\x8c\x9a\r;G/\x87\x86\xf50\xed\xa9\xd3\x7f\x17\xd5\xde\xc4Jr,\xa5\xd05\xbd\x80&\xe2\xb4z\x99 \xad0>\b', 0x10000000) r0 = socket(0x28, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="030026bd7020f8dbdf250934bcd7d9432c6b", @ANYRES32=0x4, @ANYBLOB="a47f20080002000000000000", @ANYRES32=0x9, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'gretap0\x00'}) socket(0x1, 0x23af690fef30229, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYRES64=r5, @ANYRES8=0x0, @ANYRES8=r4, @ANYRES32=0x4, @ANYBLOB="81b5424c09eb95aef006abd1df1193852a066fb6857fc814b41cb20177a690bdff51323ccbe07a9e341b21088ddec2857d4efb781b2a6df57edaff57defefab66c40d32971d9b8a1278ec009c2e04f30d3fea35ca439dc02c19cc5c5723e613a9391884ef9280e58aedf7a4ff809e644ffab5141dee1e13e23667a30ea0c1c", @ANYRES32=r0, @ANYBLOB="05f1a96f6ec5bed9c0744684b49263ac1dd0afc4285548ba00af5f0cd6a39be4eb0cf380eb861055d449e9b882fe9675fb2247d522aa923f3c50cdc5fa97bd685051203efac228657575b73263d557f9435b66a769fd091d0bdf448a4b240646a69a0aedaaf2368c645f92b9b3cc20475dd6915269acf6020000000ee431d3ea3d08cb4c4c67a5b733c37f32217840e4367329ed7b9dd91b027fd234f5587a02eb54009bab6f90693444990142c5657ae7bdbdf9ddc8497c8b1acb69efb003f5b0d3d48ad031"], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) mmap$auto(0x81, 0x7, 0x80df, 0xeb1, 0x401, 0x7fff) close_range$auto(0x2, 0x8, 0x0) r8 = io_uring_setup$auto(0x17d, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) ioctl$auto(0x3, 0x5414, 0x38) r9 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r9, 0x4b41, 0x1) sendmsg$auto_OVS_DP_CMD_GET(r8, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r1, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x7}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x4}, @OVS_DP_ATTR_UPCALL_PID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0xc040) mmap$auto(0x0, 0xffff, 0xdf, 0x9b72, 0x2, 0x8000) 1.69120535s ago: executing program 1 (id=3969): syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mq_getsetattr$auto(0xd, &(0x7f0000000200)={0x0, 0x5, 0x7f, 0x10}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_deferred_devs_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x101080, 0x0) syslog$auto(0x3, 0x0, 0x5) r0 = mq_open$auto(0x0, 0x7e, 0x9, 0x0) read$auto_fake_panic_fops_(r0, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x20) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x1580, 0x0) read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000000)=""/194, 0x70800) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) socket(0x21, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) sysfs$auto(0x2, 0x20, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) 1.586995508s ago: executing program 3 (id=3970): close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20a04, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106) mmap$auto(0x0, 0x2020009, 0x10000000000000a, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) fchmod$auto(r0, 0x9) setreuid$auto(0x4, 0x8) symlink$auto(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x8000, 0x0) r1 = epoll_create$auto(0x3e) epoll_ctl$auto(r1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.453370135s ago: executing program 0 (id=3971): r0 = openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001480)='/proc/thread-self/gid_map\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000200)=""/114, 0x72) r1 = socket(0x9, 0x1, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mprotect$auto(0x5, 0x8000000000000004, 0x5) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async, rerun: 32) msync$auto(0x0, 0x2000000005, 0x6) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r3 = syz_clone(0x40040000, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r3, 0x1002, 0x0, 0x0, 0x0, 0x5) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) io_cancel$auto(0x8000000000, &(0x7f00000001c0)={0xfff, 0x8000, 0x83e7, 0x7, 0x800, r0, 0xffff, 0x7fffffff, 0x4, 0x0, 0x7, r1}, &(0x7f00000003c0)={0x5, 0xa01, 0x6, 0x612f}) ioctl$auto_KVM_GET_API_VERSION(r4, 0xae00, 0x0) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r1) (async) r7 = getpid() process_vm_readv$auto(r7, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x6, 0x0) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="04010000", @ANYRES16=r6, @ANYBLOB="000125bd7000fbdbdf250700000008001c00", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0500120006000000"], 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x40800) (async) ioctl$auto(r5, 0x5646, r5) 1.049674902s ago: executing program 9 (id=3972): r0 = socket(0x2, 0x5, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2dc08f24db163610, 0x0) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x40901, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x4, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x8, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x808}) socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) capset$auto(0x0, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_DATAGRAM_RECEIVE(r2, 0x7ac, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4a801, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x12000, 0x0) socket(0x3, 0x5, 0x5) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mtd0ro\x00', 0x2000, 0x0) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0ca0316dfbc86a7f010026bd7000080000000f000000"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) ioctl$auto_MTDFILEMODE(r3, 0x4d13, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)="3098412d1d2a21f9821bbb6575682f4fa969d6d8f51ad133eb2fb3cd698bac435177fc1942f009b507130df5d599f4ff6031c5518c8e660d59059846f0326039e724f62ba81e019302f5") sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r5 = eventfd$auto(0x34b) readv$auto(r5, &(0x7f0000000380)={0x0, 0x8}, 0x4) 1.048310823s ago: executing program 3 (id=3973): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth1_to_batadv/accept_ra_rt_info_min_plen\x00', 0x40100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) socket(0xf, 0x3, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = prctl$auto(0x40001000000001d, 0x0, 0x2, 0x9, 0x1) sendmsg$auto_L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x8c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x80000000}, @L2TP_ATTR_NONE={0x66, 0x0, "4b25bbb6a3ff8ca0a235f4b8f70bbf72d9c27bb754ed16821119cfcfcb07d457a529750de6a0e3e68c59b2733dd5275da790efe53d138fd8ac54fc405ab1ea57a4352489dad82bfb3611cf8fe2ecd90f9798c61836ec5517cad0197428cc988d0e4a"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) 135.812488ms ago: executing program 9 (id=3974): openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/ports/2/ipsec\x00', 0x400000, 0x0) (async) r0 = openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/ports/2/ipsec\x00', 0x400000, 0x0) eventfd2$auto(0x9, 0x101) (async) eventfd2$auto(0x9, 0x101) mmap$auto(0x4, 0x8, 0xa5, 0x11, r0, 0xffffffffffffffff) (async) mmap$auto(0x4, 0x8, 0xa5, 0x11, r0, 0xffffffffffffffff) pread64$auto(0xffffffffffffffff, 0x0, 0xe, 0x100000000007) open(&(0x7f0000000300)='./file0/file0\x00', 0x220000, 0x174) (async) open(&(0x7f0000000300)='./file0/file0\x00', 0x220000, 0x174) rseq$auto(0x0, 0x8000, 0x0, 0x6) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (async) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8003) (async) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8003) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setns(0xffffffffffffffff, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="ea12e528ded30ff1309c8b1613007984"], 0x14}}, 0x4000080) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x148480, 0x0) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x148480, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) (async) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r2 = socket(0xa, 0x1, 0x84) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/rt6_stats\x00', 0x10800, 0x0) getsockopt$auto(r2, 0x84, 0x81, 0x0, 0x0) adjtimex$auto(&(0x7f0000000000)={0x4, 0x0, 0xcbe9, 0x10000, 0x1000, 0x80000000, 0xd37f, 0x0, 0xffff, 0xc, 0x6, {0x7, 0x6}, 0xfffffffffffffffc, 0x0, 0x2, 0x4, 0x0, 0xfffffffffffffffa, 0x1, 0x0, 0x9, 0x8, 0x5}) r3 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/etherd/err\x00', 0x2, 0x0) pwritev$auto(r3, &(0x7f0000000140)={0x0, 0x5}, 0x9, 0x1, 0xc000000000000) get_mempolicy$auto(0x0, 0x0, 0x2000000000a3, 0xfffffffd, 0x0) (async) get_mempolicy$auto(0x0, 0x0, 0x2000000000a3, 0xfffffffd, 0x0) adjtimex$auto(&(0x7f00000004c0)={0x800, 0x0, 0x0, 0x8, 0x3, 0x3, 0x40, 0x0, 0x4e, 0x7ffc, 0x37ab, {0x81, 0xffff}, 0xff, 0x9, 0x40, 0xe, 0x0, 0x4, 0x8000000000000000, 0x81, 0x4, 0x8, 0x1}) pidfd_open$auto(0x1, 0x0) (async) r4 = pidfd_open$auto(0x1, 0x0) r5 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x82002, 0x0) ioctl$auto_RTC_ALM_SET(r5, 0x40247007, &(0x7f00000000c0)={0x12, 0x7, 0x2, 0x0, 0x5, 0x2003, 0x74f, 0x1fb, 0xf}) setns(r4, 0x60020000) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000002440), 0x80c02, 0x0) write$auto(0x3, 0x0, 0x5c8) acct$auto(&(0x7f00000005c0)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\xd8<\xe2\x89b}\xc0\xfcnr\xf3\xb1zB\xc2\xca{\x9f\xd9w\xee\xd2\x06\xc2\xa5aE\xf7\x98Qc\xdf\vi\xe3\x14X\xda*\xa6\xb0\xfd\xf6Sda\xf7\x03\xcf\x88\x1d_^\xae\xba}\xb4\xe2dX\x85\xfe\xcc\xd22\xd2\xb3\"T\xf0\x91>\xbb\x18D\xd0\xe6\xbaQ\xb8\xfb\\\x84\xa7\x00'/376) open(&(0x7f0000000840)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x22240, 0x0) 132.036709ms ago: executing program 1 (id=3975): socket(0x15, 0x5, 0x0) sendto$auto(0x3, 0x0, 0x2000f, 0x0, &(0x7f0000000040), 0x1c) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/rose7/power/runtime_suspended_time\x00', 0x48000, 0x0) read$auto(r0, 0x0, 0x80000000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x16f802, 0x0) mmap$auto(0x0, 0x0, 0x8, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0xc) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0xa, 0x801, 0x100) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "0000000000fffffffa00"}, 0x55) ioctl$auto(r2, 0x541b, r2) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:0c/sun\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x412302, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) writev$auto(r0, &(0x7f0000000200)={0x0, 0x207}, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) socket(0x1e, 0x5, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) r4 = semctl$auto_SETVAL(0x6, 0x6, 0x10, 0x8) prctl$auto_PR_SET_MM_START_DATA(0x80000003, 0x3, r4, 0xb, 0x8) 0s ago: executing program 3 (id=3976): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop6\x00', 0x1c9002, 0x0) r0 = socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(0x3, 0x0, 0x8) epoll_create$auto(0x3e) socket(0x1e, 0x4, 0x0) socketpair$auto(0x8, 0x7, 0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) sendmsg$auto_NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="74177333d10fcd5bb4979675bc2c7c125c10fc80c42f635d40aae41bc1ebe534ebc7126d530be95b030000bbb9aa97ab4e027e59bfc87726e9c235c14d", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fcdbdf2526000000a700e8002a056321ecbcd33b9cae813e679e5bebe6e3f0075337d722cc9253bcfc39c24545cfc28fae02f5a359c109f1aeb3fb6a1bb2220299ce7b54e20333db5d179da370d757fa176ec3e982f67ab913955c262a255a6db9ab67a75a518ff4125fc4a912719c24983ab86ac1f5df3651f8354410df726730ff5793147f320d98acaebfc7fc647474b3fc297a4b7637543b459330363fc8c341a6ec9fdc1a180d875970278e5600"], 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x4004) ioctl$auto_TCFLSH2(r1, 0x8924, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000680)=""/227, 0xfdef) fadvise64$auto_POSIX_FADV_WILLNEED(0xffffffffffffffff, 0x5, 0xffff, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x395100, 0x0) r3 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x10, 0x2, 0x8000) socket(0xa, 0x3, 0x6) ioctl$auto(0x3, 0x8936, 0x91) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001740)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_KEY={0x4}, @OVS_FLOW_ATTR_KEY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_JOIN_MESH(r3, 0x0, 0x20000800) r6 = openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) read$auto_dev_fops_plock(r6, &(0x7f00000001c0)=""/132, 0x84) r7 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x109402, 0x0) ioctl$auto_UBI_IOCDET(r7, 0x40046f41, 0x0) kernel console output (not intermixed with test programs): 5] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.101867][T20145] bridge_slave_1: entered allmulticast mode [ 947.147722][T17872] Bluetooth: hci4: command tx timeout [ 947.163762][T20145] bridge_slave_1: entered promiscuous mode [ 947.416769][T20145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 947.505085][T20145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 947.818961][T20145] team0: Port device team_slave_0 added [ 947.882483][T20145] team0: Port device team_slave_1 added [ 948.157270][T20187] netlink: 544 bytes leftover after parsing attributes in process `syz.3.3074'. [ 948.354328][T20145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 948.381737][T20145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 948.509909][T20145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 948.573553][T20145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 948.622632][T20145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 948.781630][T20145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 948.822062][T20198] rnbd_client L202: map_device: Unknown parameter or missing value '(' [ 949.029193][T20145] hsr_slave_0: entered promiscuous mode [ 949.085233][T20145] hsr_slave_1: entered promiscuous mode [ 949.112880][T20145] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 949.181343][ T30] audit: type=1800 audit(4294967353.893:49): pid=20203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3077" name="members" dev="configfs" ino=71383 res=0 errno=0 [ 949.204395][T20145] Cannot create hsr debugfs directory [ 949.220619][T17872] Bluetooth: hci4: command tx timeout [ 951.290057][T17872] Bluetooth: hci4: command tx timeout [ 951.578920][T20228] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 953.096294][T20145] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 953.215279][T20145] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 953.350015][T17872] Bluetooth: hci4: command tx timeout [ 953.399169][T20145] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 953.465831][T20145] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 953.853827][T20145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 953.986577][T20145] 8021q: adding VLAN 0 to HW filter on device team0 [ 954.093871][ T3575] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.101212][ T3575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 954.186920][ T3575] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.194076][ T3575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 954.676213][T20238] random: crng reseeded on system resumption [ 955.188070][T20145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 955.392431][T20145] veth0_vlan: entered promiscuous mode [ 955.770765][T20145] veth1_vlan: entered promiscuous mode [ 955.959523][T20145] veth0_macvtap: entered promiscuous mode [ 956.027835][T20145] veth1_macvtap: entered promiscuous mode [ 956.130244][T20145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 956.228808][T20145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.281713][T20145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 956.357902][T20145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.421442][T20145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 956.478518][T20145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.552600][T20145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 956.618996][T20145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.664793][T20145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 956.768181][T20145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.852800][T20145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 956.949277][T20145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 957.025188][T20145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 957.209236][T20279] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 957.268885][T20145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 957.432400][T20145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 957.598920][T20145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 957.666686][T20145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 957.736388][T20145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 957.795988][T20145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 957.866334][T20145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 957.955968][T20145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.017273][T20145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 958.135891][T20145] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.154453][T20272] random: crng reseeded on system resumption [ 958.223897][T20145] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.232670][T20145] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.311321][T20145] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.209950][ T3575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 962.259349][ T3575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 962.314517][ T3575] bond0 (unregistering): Released all slaves [ 962.412049][ T3575] HfR: left promiscuous mode [ 962.552217][ T7519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.560079][ T7519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.692260][ T3575] nl80211: left promiscuous mode [ 962.942323][T12647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 963.029544][T12647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.337769][ T3575] hsr_slave_0: left promiscuous mode [ 964.455201][ T3575] hsr_slave_1: left promiscuous mode [ 964.511278][ T3575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 964.518800][ T3575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 964.831111][ T3575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 964.875189][ T3575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 965.408266][ T3575] veth1_macvtap: left promiscuous mode [ 965.486452][T20335] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 965.554825][ T3575] veth0_macvtap: left promiscuous mode [ 965.575926][ T3575] veth1_vlan: left promiscuous mode [ 965.581244][ T3575] veth0_vlan: left promiscuous mode [ 965.947621][T20319] random: crng reseeded on system resumption [ 969.784890][T20344] random: crng reseeded on system resumption [ 971.163830][ T3575] team0 (unregistering): Port device team_slave_1 removed [ 971.499431][ T3575] team0 (unregistering): Port device team_slave_0 removed [ 973.743447][T20373] rnbd_client L202: map_device: Unknown parameter or missing value '(' [ 974.159711][ T120] Process accounting resumed [ 977.670920][T20397] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 978.053088][T20395] netlink: 'syz.1.3112': attribute type 1 has an invalid length. [ 979.147336][T20410] zswap: compressor not available [ 982.213909][T20460] FAULT_INJECTION: forcing a failure. [ 982.213909][T20460] name failslab, interval 1, probability 0, space 0, times 0 [ 982.908804][T20460] CPU: 0 UID: 0 PID: 20460 Comm: syz.0.3120 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 982.908841][T20460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 982.908856][T20460] Call Trace: [ 982.908864][T20460] [ 982.908873][T20460] dump_stack_lvl+0x16c/0x1f0 [ 982.908909][T20460] should_fail_ex+0x512/0x640 [ 982.908934][T20460] ? __kmalloc_noprof+0xbf/0x510 [ 982.908970][T20460] ? snd_pcm_plugin_build+0x64/0x650 [ 982.908996][T20460] should_failslab+0xc2/0x120 [ 982.909034][T20460] __kmalloc_noprof+0xd2/0x510 [ 982.909068][T20460] ? __mutex_unlock_slowpath+0x121/0x6a0 [ 982.909104][T20460] snd_pcm_plugin_build+0x64/0x650 [ 982.909130][T20460] ? snd_pcm_plugin_build+0x4b7/0x650 [ 982.909159][T20460] snd_pcm_plugin_build_linear+0x29d/0x850 [ 982.909192][T20460] ? __pfx_snd_pcm_plugin_build_linear+0x10/0x10 [ 982.909226][T20460] ? snd_pcm_hw_params+0xcd/0x1b40 [ 982.909258][T20460] snd_pcm_plug_format_plugins+0x614/0x1430 [ 982.909289][T20460] ? __pfx_snd_pcm_plug_format_plugins+0x10/0x10 [ 982.909322][T20460] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 982.909354][T20460] snd_pcm_oss_change_params_locked+0x2eeb/0x3b40 [ 982.909389][T20460] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 982.909415][T20460] ? snd_pcm_oss_get_active_substream+0x146/0x1d0 [ 982.909465][T20460] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 982.909495][T20460] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 982.909523][T20460] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 982.909551][T20460] ? __fget_files+0x20e/0x3c0 [ 982.909588][T20460] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 982.909614][T20460] __x64_sys_ioctl+0x190/0x200 [ 982.909644][T20460] do_syscall_64+0xcd/0x260 [ 982.909677][T20460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.909701][T20460] RIP: 0033:0x7f11da18d169 [ 982.909720][T20460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 982.909745][T20460] RSP: 002b:00007f11db019038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 982.909767][T20460] RAX: ffffffffffffffda RBX: 00007f11da3a5fa0 RCX: 00007f11da18d169 [ 982.909784][T20460] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000007 [ 982.909799][T20460] RBP: 00007f11da20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 982.909814][T20460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 982.909828][T20460] R13: 0000000000000000 R14: 00007f11da3a5fa0 R15: 00007ffdeb6cd5d8 [ 982.909854][T20460] [ 983.163744][T20478] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 983.175139][T20478] netlink: 'syz.9.3123': attribute type 1 has an invalid length. [ 986.065869][T20494] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 986.074692][T20494] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 986.122188][T20494] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 986.128165][T20494] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 986.243855][T20494] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 986.414968][T20494] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 986.457192][T20494] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 986.593567][T20494] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 986.602374][T20494] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 986.690686][T20494] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 986.999147][T20494] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 987.026234][T20515] : Can't lookup blockdev [ 988.119298][T20532] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 988.128576][T17872] Bluetooth: hci1: command 0x0c1a tx timeout [ 988.134626][T17872] Bluetooth: hci2: command 0x0c1a tx timeout [ 988.141322][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 988.446744][T17872] Bluetooth: hci3: command 0x0c1a tx timeout [ 988.607036][T17872] Bluetooth: hci4: command 0x0c1a tx timeout [ 989.331172][T20523] netlink: 'syz.9.3129': attribute type 1 has an invalid length. [ 989.972419][T20558] Invalid ELF header magic: != ELF [ 990.205063][T17872] Bluetooth: hci1: command 0x0c1a tx timeout [ 990.516280][T17872] Bluetooth: hci3: command 0x0c1a tx timeout [ 990.675307][T17872] Bluetooth: hci4: command 0x0c1a tx timeout [ 991.962544][T20598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3136'. [ 992.270505][T17872] Bluetooth: hci1: command 0x0c1a tx timeout [ 992.586036][T17872] Bluetooth: hci3: command 0x0c1a tx timeout [ 992.674867][T20592] svc: failed to register nfsdv3 RPC service (errno 512). [ 992.745224][T17872] Bluetooth: hci4: command 0x0c1a tx timeout [ 992.918832][T20592] svc: failed to register nfsaclv3 RPC service (errno 512). [ 994.997997][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 995.012532][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.307129][T20633] tipc: Started in network mode [ 995.419553][T20633] tipc: Node identity ee00, cluster identity 4711 [ 995.575613][T20633] tipc: Node number set to 60928 [ 998.153528][T20706] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 998.825253][T20719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3154'. [ 999.006865][T20715] svc: failed to register nfsdv3 RPC service (errno 111). [ 999.107401][T20715] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1005.632094][T20822] sp0: Synchronizing with TNC [ 1005.958965][T20822] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1010.212068][T20869] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1010.306277][T20869] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1010.438106][T20869] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1010.511964][T20869] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1010.518011][T20869] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1010.571628][T15340] Bluetooth: hci0: command 0x0c1a tx timeout [ 1012.304702][T20925] netlink: 'syz.0.3179': attribute type 10 has an invalid length. [ 1012.332853][T15340] Bluetooth: hci2: command 0x0c1a tx timeout [ 1012.494711][T15340] Bluetooth: hci1: command 0x0c1a tx timeout [ 1012.561360][T15340] Bluetooth: hci4: command 0x0c1a tx timeout [ 1012.567464][T17872] Bluetooth: hci3: command 0x0c1a tx timeout [ 1012.930167][T20936] netlink: 'syz.3.3181': attribute type 10 has an invalid length. [ 1015.501671][T20977] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1020.210755][T21040] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1023.140512][T21081] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3197'. [ 1024.141999][T21085] rnbd_client L213: map_device: Parameters missing [ 1024.651950][T21094] sp0: Synchronizing with TNC [ 1025.080717][T21098] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1028.071615][T21151] rnbd_client L202: map_device: Unknown parameter or missing value '(' [ 1028.462023][T21157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3206'. [ 1029.095672][T21164] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3208'. [ 1029.132846][T21164] macsec0: entered allmulticast mode [ 1029.176804][T21164] veth1_macvtap: entered allmulticast mode [ 1029.736607][T21177] FAULT_INJECTION: forcing a failure. [ 1029.736607][T21177] name failslab, interval 1, probability 0, space 0, times 0 [ 1029.991345][T21177] CPU: 0 UID: 0 PID: 21177 Comm: syz.3.3209 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 1029.991378][T21177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1029.991393][T21177] Call Trace: [ 1029.991400][T21177] [ 1029.991409][T21177] dump_stack_lvl+0x16c/0x1f0 [ 1029.991445][T21177] should_fail_ex+0x512/0x640 [ 1029.991470][T21177] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 1029.991507][T21177] should_failslab+0xc2/0x120 [ 1029.991544][T21177] __kmalloc_cache_node_noprof+0x6d/0x420 [ 1029.991579][T21177] ? __alloc_disk_node+0x5a/0x610 [ 1029.991627][T21177] __alloc_disk_node+0x5a/0x610 [ 1029.991661][T21177] ? blk_alloc_queue+0x1a3/0x700 [ 1029.991692][T21177] __blk_alloc_disk+0xd7/0x170 [ 1029.991726][T21177] ? __pfx___blk_alloc_disk+0x10/0x10 [ 1029.991774][T21177] ? lockdep_init_map_type+0x5c/0x280 [ 1029.991810][T21177] ? __raw_spin_lock_init+0x3a/0x110 [ 1029.991850][T21177] ? __pfx_hot_add_show+0x10/0x10 [ 1029.991871][T21177] zram_add+0x16e/0x6c0 [ 1029.991891][T21177] ? __pfx_zram_add+0x10/0x10 [ 1029.991930][T21177] ? __pfx_hot_add_show+0x10/0x10 [ 1029.991950][T21177] hot_add_show+0x21/0x80 [ 1029.991970][T21177] class_attr_show+0x6f/0xa0 [ 1029.992006][T21177] ? __pfx_class_attr_show+0x10/0x10 [ 1029.992040][T21177] sysfs_kf_seq_show+0x23e/0x410 [ 1029.992076][T21177] seq_read_iter+0x506/0x12b0 [ 1029.992115][T21177] kernfs_fop_read_iter+0x422/0x5a0 [ 1029.992142][T21177] ? rw_verify_area+0xcf/0x680 [ 1029.992172][T21177] vfs_read+0x8c8/0xc70 [ 1029.992205][T21177] ? __pfx___mutex_lock+0x10/0x10 [ 1029.992237][T21177] ? __pfx_vfs_read+0x10/0x10 [ 1029.992281][T21177] ksys_read+0x12a/0x240 [ 1029.992312][T21177] ? __pfx_ksys_read+0x10/0x10 [ 1029.992342][T21177] ? rcu_is_watching+0x12/0xc0 [ 1029.992372][T21177] do_syscall_64+0xcd/0x260 [ 1029.992405][T21177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.992429][T21177] RIP: 0033:0x7f740318d169 [ 1029.992447][T21177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1029.992471][T21177] RSP: 002b:00007f7403fde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1029.992494][T21177] RAX: ffffffffffffffda RBX: 00007f74033a5fa0 RCX: 00007f740318d169 [ 1029.992510][T21177] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000008 [ 1029.992526][T21177] RBP: 00007f740320e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1029.992540][T21177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1029.992555][T21177] R13: 0000000000000000 R14: 00007f74033a5fa0 R15: 00007ffe2ad62808 [ 1029.992581][T21177] [ 1031.015308][T21177] zram: Error allocating disk structure for device 1 [ 1032.339116][T21193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3211'. [ 1032.547753][T21203] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3211'. [ 1034.433969][T21267] sp0: Synchronizing with TNC [ 1035.123702][T21276] FAULT_INJECTION: forcing a failure. [ 1035.123702][T21276] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.297044][T21276] CPU: 0 UID: 0 PID: 21276 Comm: syz.1.3222 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 1035.297076][T21276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1035.297091][T21276] Call Trace: [ 1035.297098][T21276] [ 1035.297108][T21276] dump_stack_lvl+0x16c/0x1f0 [ 1035.297155][T21276] should_fail_ex+0x512/0x640 [ 1035.297181][T21276] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 1035.297218][T21276] should_failslab+0xc2/0x120 [ 1035.297256][T21276] __kmalloc_cache_node_noprof+0x6d/0x420 [ 1035.297291][T21276] ? __alloc_disk_node+0x5a/0x610 [ 1035.297329][T21276] __alloc_disk_node+0x5a/0x610 [ 1035.297361][T21276] ? blk_alloc_queue+0x1a3/0x700 [ 1035.297391][T21276] __blk_alloc_disk+0xd7/0x170 [ 1035.297425][T21276] ? __pfx___blk_alloc_disk+0x10/0x10 [ 1035.297473][T21276] ? lockdep_init_map_type+0x5c/0x280 [ 1035.297508][T21276] ? __raw_spin_lock_init+0x3a/0x110 [ 1035.297548][T21276] ? __pfx_hot_add_show+0x10/0x10 [ 1035.297570][T21276] zram_add+0x16e/0x6c0 [ 1035.297590][T21276] ? __pfx_zram_add+0x10/0x10 [ 1035.297629][T21276] ? __pfx_hot_add_show+0x10/0x10 [ 1035.297650][T21276] hot_add_show+0x21/0x80 [ 1035.297670][T21276] class_attr_show+0x6f/0xa0 [ 1035.297705][T21276] ? __pfx_class_attr_show+0x10/0x10 [ 1035.297740][T21276] sysfs_kf_seq_show+0x23e/0x410 [ 1035.297776][T21276] seq_read_iter+0x506/0x12b0 [ 1035.297815][T21276] kernfs_fop_read_iter+0x422/0x5a0 [ 1035.297842][T21276] ? rw_verify_area+0xcf/0x680 [ 1035.297872][T21276] vfs_read+0x8c8/0xc70 [ 1035.297905][T21276] ? __pfx___mutex_lock+0x10/0x10 [ 1035.297936][T21276] ? __pfx_vfs_read+0x10/0x10 [ 1035.297981][T21276] ksys_read+0x12a/0x240 [ 1035.298011][T21276] ? __pfx_ksys_read+0x10/0x10 [ 1035.298041][T21276] ? rcu_is_watching+0x12/0xc0 [ 1035.298071][T21276] do_syscall_64+0xcd/0x260 [ 1035.298103][T21276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.298127][T21276] RIP: 0033:0x7f381cb8d169 [ 1035.298152][T21276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1035.298175][T21276] RSP: 002b:00007f381d9c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1035.298199][T21276] RAX: ffffffffffffffda RBX: 00007f381cda5fa0 RCX: 00007f381cb8d169 [ 1035.298216][T21276] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000008 [ 1035.298231][T21276] RBP: 00007f381cc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1035.298246][T21276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1035.298261][T21276] R13: 0000000000000000 R14: 00007f381cda5fa0 R15: 00007ffff7acd118 [ 1035.298287][T21276] [ 1037.122004][T21276] zram: Error allocating disk structure for device 1 [ 1037.599987][T21304] FAULT_INJECTION: forcing a failure. [ 1037.599987][T21304] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1037.817542][T21304] CPU: 0 UID: 0 PID: 21304 Comm: syz.3.3227 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 1037.817576][T21304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1037.817590][T21304] Call Trace: [ 1037.817597][T21304] [ 1037.817606][T21304] dump_stack_lvl+0x16c/0x1f0 [ 1037.817640][T21304] should_fail_ex+0x512/0x640 [ 1037.817668][T21304] should_fail_alloc_page+0xe7/0x130 [ 1037.817706][T21304] prepare_alloc_pages.constprop.0+0x172/0x570 [ 1037.817740][T21304] __alloc_frozen_pages_noprof+0x18f/0x24d0 [ 1037.817776][T21304] ? __pfx_stack_trace_save+0x10/0x10 [ 1037.817802][T21304] ? stack_depot_save_flags+0x29/0x9c0 [ 1037.817828][T21304] ? __lock_acquire+0xaa4/0x1ba0 [ 1037.817862][T21304] ? kasan_save_stack+0x42/0x60 [ 1037.817893][T21304] ? kasan_save_stack+0x33/0x60 [ 1037.817932][T21304] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1037.817966][T21304] ? create_new_namespaces+0x48a/0xad0 [ 1037.817995][T21304] ? ksys_unshare+0x45b/0xa40 [ 1037.818027][T21304] ? do_syscall_64+0xcd/0x260 [ 1037.818057][T21304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.818088][T21304] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1037.818122][T21304] ? policy_nodemask+0xea/0x4e0 [ 1037.818158][T21304] alloc_pages_mpol+0x1fb/0x540 [ 1037.818192][T21304] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1037.818231][T21304] alloc_pages_noprof+0x131/0x390 [ 1037.818266][T21304] copy_time_ns+0x159/0x580 [ 1037.818286][T21304] ? copy_cgroup_ns+0xa4/0x6f0 [ 1037.818311][T21304] create_new_namespaces+0x48a/0xad0 [ 1037.818342][T21304] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1037.818372][T21304] ksys_unshare+0x45b/0xa40 [ 1037.818401][T21304] ? __pfx_ksys_unshare+0x10/0x10 [ 1037.818430][T21304] ? xfd_validate_state+0x5d/0x180 [ 1037.818452][T21304] ? rcu_is_watching+0x12/0xc0 [ 1037.818479][T21304] __x64_sys_unshare+0x31/0x40 [ 1037.818514][T21304] do_syscall_64+0xcd/0x260 [ 1037.818545][T21304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.818568][T21304] RIP: 0033:0x7f740318d169 [ 1037.818586][T21304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1037.818609][T21304] RSP: 002b:00007f7403fde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1037.818632][T21304] RAX: ffffffffffffffda RBX: 00007f74033a5fa0 RCX: 00007f740318d169 [ 1037.818648][T21304] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1037.818662][T21304] RBP: 00007f740320e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1037.818677][T21304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1037.818691][T21304] R13: 0000000000000000 R14: 00007f74033a5fa0 R15: 00007ffe2ad62808 [ 1037.818715][T21304] [ 1040.073550][T21336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3231'. [ 1041.704342][ T7519] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.755245][ T7519] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.195049][ T7519] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.469299][ T7519] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.208454][ T7519] bridge_slave_1: left allmulticast mode [ 1044.214146][ T7519] bridge_slave_1: left promiscuous mode [ 1044.310355][ T7519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.406175][ T7519] bridge_slave_0: left allmulticast mode [ 1044.431641][ T7519] bridge_slave_0: left promiscuous mode [ 1044.483397][ T7519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.923603][T21399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3237'. [ 1045.851036][T21403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3239'. [ 1046.161707][T21407] FAULT_INJECTION: forcing a failure. [ 1046.161707][T21407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1046.255377][T21407] CPU: 0 UID: 0 PID: 21407 Comm: syz.1.3241 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 1046.255413][T21407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1046.255428][T21407] Call Trace: [ 1046.255435][T21407] [ 1046.255444][T21407] dump_stack_lvl+0x16c/0x1f0 [ 1046.255480][T21407] should_fail_ex+0x512/0x640 [ 1046.255508][T21407] _copy_from_user+0x2e/0xd0 [ 1046.255538][T21407] core_sys_select+0x387/0xbb0 [ 1046.255575][T21407] ? __pfx_core_sys_select+0x10/0x10 [ 1046.255628][T21407] ? read_tsc+0x9/0x20 [ 1046.255659][T21407] ? ktime_get_ts64+0x256/0x400 [ 1046.255694][T21407] kern_select+0x15d/0x1e0 [ 1046.255726][T21407] ? __pfx_kern_select+0x10/0x10 [ 1046.255758][T21407] ? xfd_validate_state+0x5d/0x180 [ 1046.255782][T21407] ? rcu_is_watching+0x12/0xc0 [ 1046.255808][T21407] __x64_sys_select+0xbd/0x160 [ 1046.255840][T21407] ? do_syscall_64+0x91/0x260 [ 1046.255871][T21407] ? lockdep_hardirqs_on+0x7c/0x110 [ 1046.255904][T21407] do_syscall_64+0xcd/0x260 [ 1046.255936][T21407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.255960][T21407] RIP: 0033:0x7f381cb8d169 [ 1046.255978][T21407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1046.256003][T21407] RSP: 002b:00007f381d9c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1046.256026][T21407] RAX: ffffffffffffffda RBX: 00007f381cda5fa0 RCX: 00007f381cb8d169 [ 1046.256042][T21407] RDX: 0000200000000380 RSI: 00002000000000c0 RDI: 0000000000000100 [ 1046.256058][T21407] RBP: 00007f381cc0e2a0 R08: 0000200000000040 R09: 0000000000000000 [ 1046.256073][T21407] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000 [ 1046.256089][T21407] R13: 0000000000000000 R14: 00007f381cda5fa0 R15: 00007ffff7acd118 [ 1046.256113][T21407] [ 1046.887539][ T7519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1046.919240][ T7519] bond0 (unregistering): Released all slaves [ 1047.797955][ T7519] hsr_slave_0: left promiscuous mode [ 1047.846646][ T7519] hsr_slave_1: left promiscuous mode [ 1047.901155][ T7519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1048.009776][ T7519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1048.066270][ T7519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1048.110742][ T7519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1048.514741][T21448] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1048.644465][ T7519] veth1_macvtap: left promiscuous mode [ 1048.650059][ T7519] veth0_macvtap: left promiscuous mode [ 1048.685752][ T30] audit: type=1800 audit(4294967317.254:50): pid=21453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3249" name=22050820 dev="tmpfs" ino=1468 res=0 errno=0 [ 1048.730877][ T7519] veth1_vlan: left promiscuous mode [ 1048.770892][ T7519] veth0_vlan: left promiscuous mode [ 1050.748671][ T7519] team0 (unregistering): Port device team_slave_1 removed [ 1050.867259][ T7519] team0 (unregistering): Port device team_slave_0 removed [ 1051.729151][T21441] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1051.790176][T21441] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1053.200492][T21543] FAULT_INJECTION: forcing a failure. [ 1053.200492][T21543] name failslab, interval 1, probability 0, space 0, times 0 [ 1053.286716][T21543] CPU: 0 UID: 0 PID: 21543 Comm: syz.3.3262 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 1053.286751][T21543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1053.286766][T21543] Call Trace: [ 1053.286774][T21543] [ 1053.286783][T21543] dump_stack_lvl+0x16c/0x1f0 [ 1053.286819][T21543] should_fail_ex+0x512/0x640 [ 1053.286844][T21543] ? __kmalloc_noprof+0xbf/0x510 [ 1053.286880][T21543] ? xfrm_hash_alloc+0xd1/0x100 [ 1053.286915][T21543] should_failslab+0xc2/0x120 [ 1053.286952][T21543] __kmalloc_noprof+0xd2/0x510 [ 1053.286986][T21543] ? xfrm_state_init+0x2f1/0x630 [ 1053.287024][T21543] xfrm_hash_alloc+0xd1/0x100 [ 1053.287058][T21543] xfrm_net_init+0x35f/0xcc0 [ 1053.287098][T21543] ? __pfx_xfrm_net_init+0x10/0x10 [ 1053.287134][T21543] ops_init+0x1df/0x5f0 [ 1053.287172][T21543] setup_net+0x21e/0x850 [ 1053.287208][T21543] ? __pfx_setup_net+0x10/0x10 [ 1053.287242][T21543] ? lockdep_init_map_type+0x5c/0x280 [ 1053.287277][T21543] ? __pfx_down_read_killable+0x10/0x10 [ 1053.287315][T21543] ? debug_mutex_init+0x37/0x70 [ 1053.287340][T21543] copy_net_ns+0x2a6/0x5f0 [ 1053.287363][T21543] create_new_namespaces+0x3ea/0xad0 [ 1053.287398][T21543] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1053.287431][T21543] ksys_unshare+0x45b/0xa40 [ 1053.287465][T21543] ? __pfx_ksys_unshare+0x10/0x10 [ 1053.287498][T21543] ? xfd_validate_state+0x5d/0x180 [ 1053.287523][T21543] ? rcu_is_watching+0x12/0xc0 [ 1053.287551][T21543] __x64_sys_unshare+0x31/0x40 [ 1053.287583][T21543] do_syscall_64+0xcd/0x260 [ 1053.287616][T21543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.287640][T21543] RIP: 0033:0x7f740318d169 [ 1053.287659][T21543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1053.287684][T21543] RSP: 002b:00007f7403fde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1053.287717][T21543] RAX: ffffffffffffffda RBX: 00007f74033a5fa0 RCX: 00007f740318d169 [ 1053.287733][T21543] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1053.287748][T21543] RBP: 00007f740320e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1053.287763][T21543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1053.287778][T21543] R13: 0000000000000000 R14: 00007f74033a5fa0 R15: 00007ffe2ad62808 [ 1053.287803][T21543] [ 1056.102709][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1056.110141][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.365169][T21597] netlink: 'syz.9.3274': attribute type 1 has an invalid length. [ 1056.463501][T21599] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1056.499279][T21600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3275'. [ 1056.691932][T21591] FAULT_INJECTION: forcing a failure. [ 1056.691932][T21591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1056.757639][T21599] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1056.829943][T21591] CPU: 0 UID: 0 PID: 21591 Comm: syz.0.3273 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 1056.829979][T21591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1056.829997][T21591] Call Trace: [ 1056.830004][T21591] [ 1056.830013][T21591] dump_stack_lvl+0x16c/0x1f0 [ 1056.830049][T21591] should_fail_ex+0x512/0x640 [ 1056.830077][T21591] _copy_to_user+0x32/0xd0 [ 1056.830107][T21591] io_uring_setup+0x14f6/0x2180 [ 1056.830139][T21591] ? __pfx_io_uring_setup+0x10/0x10 [ 1056.830172][T21591] ? __pfx___might_resched+0x10/0x10 [ 1056.830211][T21591] ? rcu_is_watching+0x12/0xc0 [ 1056.830238][T21591] __x64_sys_io_uring_setup+0x98/0x140 [ 1056.830269][T21591] do_syscall_64+0xcd/0x260 [ 1056.830301][T21591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.830325][T21591] RIP: 0033:0x7f11da18d169 [ 1056.830343][T21591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1056.830366][T21591] RSP: 002b:00007f11daff8038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1056.830388][T21591] RAX: ffffffffffffffda RBX: 00007f11da3a6080 RCX: 00007f11da18d169 [ 1056.830405][T21591] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 1056.830419][T21591] RBP: 00007f11da20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1056.830434][T21591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1056.830449][T21591] R13: 0000000000000000 R14: 00007f11da3a6080 R15: 00007ffdeb6cd5d8 [ 1056.830473][T21591] [ 1058.143990][ T30] audit: type=1800 audit(4294967326.753:51): pid=21630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3281" name="members" dev="configfs" ino=76253 res=0 errno=0 [ 1058.420543][T21627] sp0: Synchronizing with TNC [ 1058.463685][T21634] FAULT_INJECTION: forcing a failure. [ 1058.463685][T21634] name failslab, interval 1, probability 0, space 0, times 0 [ 1058.559950][T21634] CPU: 0 UID: 0 PID: 21634 Comm: syz.9.3282 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 1058.559986][T21634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1058.560001][T21634] Call Trace: [ 1058.560008][T21634] [ 1058.560018][T21634] dump_stack_lvl+0x16c/0x1f0 [ 1058.560054][T21634] should_fail_ex+0x512/0x640 [ 1058.560079][T21634] ? fs_reclaim_acquire+0xae/0x150 [ 1058.560109][T21634] should_failslab+0xc2/0x120 [ 1058.560147][T21634] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1058.560183][T21634] ? jbd2__journal_start+0x193/0x6a0 [ 1058.560206][T21634] ? __pfx___might_resched+0x10/0x10 [ 1058.560238][T21634] jbd2__journal_start+0x193/0x6a0 [ 1058.560263][T21634] __ext4_journal_start_sb+0x195/0x690 [ 1058.560296][T21634] ? ext4_do_writepages+0xc18/0x3360 [ 1058.560339][T21634] ext4_do_writepages+0xc18/0x3360 [ 1058.560389][T21634] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1058.560436][T21634] ? ext4_writepages+0x302/0x730 [ 1058.560469][T21634] ext4_writepages+0x302/0x730 [ 1058.560502][T21634] ? stack_depot_save_flags+0x29/0x9c0 [ 1058.560527][T21634] ? __pfx_ext4_writepages+0x10/0x10 [ 1058.560570][T21634] ? do_writepages+0x6b6/0x820 [ 1058.560593][T21634] ? __pfx_ext4_writepages+0x10/0x10 [ 1058.560628][T21634] do_writepages+0x1b2/0x820 [ 1058.560653][T21634] ? __pfx_do_writepages+0x10/0x10 [ 1058.560677][T21634] ? do_raw_spin_lock+0x12c/0x2b0 [ 1058.560715][T21634] ? find_held_lock+0x2b/0x80 [ 1058.560739][T21634] ? wbc_attach_fdatawrite_inode+0x13a/0x190 [ 1058.560768][T21634] ? do_raw_spin_unlock+0x172/0x230 [ 1058.560793][T21634] filemap_fdatawrite_wbc+0x104/0x160 [ 1058.560818][T21634] __filemap_fdatawrite_range+0xb2/0xf0 [ 1058.560847][T21634] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1058.560908][T21634] filemap_write_and_wait_range+0xa3/0x130 [ 1058.560940][T21634] ext4_punch_hole+0x191/0x10c0 [ 1058.560973][T21634] ? ext4_fallocate+0x141/0x38b0 [ 1058.561001][T21634] ext4_fallocate+0x9a9/0x38b0 [ 1058.561031][T21634] ? __pfx_ext4_fallocate+0x10/0x10 [ 1058.561053][T21634] vfs_fallocate+0x608/0x10b0 [ 1058.561088][T21634] ? __pfx_vfs_fallocate+0x10/0x10 [ 1058.561121][T21634] ? madvise_vma_behavior+0x1b36/0x1de0 [ 1058.561145][T21634] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1058.561184][T21634] madvise_vma_behavior+0x1ad4/0x1de0 [ 1058.561212][T21634] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1058.561237][T21634] ? find_vma_prev+0xda/0x160 [ 1058.561266][T21634] ? __pfx_find_vma_prev+0x10/0x10 [ 1058.561302][T21634] ? __pfx___might_resched+0x10/0x10 [ 1058.561346][T21634] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1058.561370][T21634] madvise_walk_vmas+0x1ce/0x2c0 [ 1058.561410][T21634] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1058.561455][T21634] do_madvise+0x364/0x7c0 [ 1058.561480][T21634] ? __pfx_do_madvise+0x10/0x10 [ 1058.561504][T21634] ? native_tss_update_io_bitmap+0x3ca/0x720 [ 1058.561535][T21634] ? rcu_is_watching+0x12/0xc0 [ 1058.561562][T21634] __x64_sys_madvise+0xa9/0x110 [ 1058.561585][T21634] ? lockdep_hardirqs_on+0x7c/0x110 [ 1058.561614][T21634] do_syscall_64+0xcd/0x260 [ 1058.561647][T21634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.561672][T21634] RIP: 0033:0x7f364198d169 [ 1058.561690][T21634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1058.561714][T21634] RSP: 002b:00007f36428d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1058.561737][T21634] RAX: ffffffffffffffda RBX: 00007f3641ba5fa0 RCX: 00007f364198d169 [ 1058.561753][T21634] RDX: 0000000000000009 RSI: 00000000000031ca RDI: 000000110c230000 [ 1058.561769][T21634] RBP: 00007f3641a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1058.561784][T21634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1058.561801][T21634] R13: 0000000000000000 R14: 00007f3641ba5fa0 R15: 00007ffe59e9acf8 [ 1058.561827][T21634] [ 1059.005510][T21627] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1059.240254][T21650] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1060.352219][T21634] EXT4-fs (sda1): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 1924; err -12 [ 1064.382784][T21781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3308'. [ 1066.724117][T21832] FAULT_INJECTION: forcing a failure. [ 1066.724117][T21832] name failslab, interval 1, probability 0, space 0, times 0 [ 1066.823953][T21832] CPU: 0 UID: 0 PID: 21832 Comm: syz.1.3320 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 1066.823989][T21832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1066.824004][T21832] Call Trace: [ 1066.824012][T21832] [ 1066.824021][T21832] dump_stack_lvl+0x16c/0x1f0 [ 1066.824056][T21832] should_fail_ex+0x512/0x640 [ 1066.824082][T21832] ? fs_reclaim_acquire+0xae/0x150 [ 1066.824112][T21832] should_failslab+0xc2/0x120 [ 1066.824150][T21832] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1066.824187][T21832] ? jbd2__journal_start+0x193/0x6a0 [ 1066.824209][T21832] ? __pfx___might_resched+0x10/0x10 [ 1066.824241][T21832] jbd2__journal_start+0x193/0x6a0 [ 1066.824266][T21832] __ext4_journal_start_sb+0x195/0x690 [ 1066.824300][T21832] ? ext4_do_writepages+0xc18/0x3360 [ 1066.824337][T21832] ext4_do_writepages+0xc18/0x3360 [ 1066.824387][T21832] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1066.824432][T21832] ? ext4_writepages+0x302/0x730 [ 1066.824465][T21832] ext4_writepages+0x302/0x730 [ 1066.824497][T21832] ? stack_depot_save_flags+0x29/0x9c0 [ 1066.824523][T21832] ? __pfx_ext4_writepages+0x10/0x10 [ 1066.824557][T21832] ? look_up_lock_class+0x6b/0x150 [ 1066.824597][T21832] ? __pfx_ext4_writepages+0x10/0x10 [ 1066.824640][T21832] do_writepages+0x1b2/0x820 [ 1066.824666][T21832] ? __pfx_do_writepages+0x10/0x10 [ 1066.824690][T21832] ? do_raw_spin_lock+0x12c/0x2b0 [ 1066.824728][T21832] ? find_held_lock+0x2b/0x80 [ 1066.824753][T21832] ? wbc_attach_fdatawrite_inode+0x13a/0x190 [ 1066.824783][T21832] ? do_raw_spin_unlock+0x172/0x230 [ 1066.824808][T21832] filemap_fdatawrite_wbc+0x104/0x160 [ 1066.824832][T21832] __filemap_fdatawrite_range+0xb2/0xf0 [ 1066.824862][T21832] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1066.824924][T21832] filemap_write_and_wait_range+0xa3/0x130 [ 1066.824956][T21832] ext4_punch_hole+0x191/0x10c0 [ 1066.824989][T21832] ? ext4_fallocate+0x141/0x38b0 [ 1066.825017][T21832] ext4_fallocate+0x9a9/0x38b0 [ 1066.825046][T21832] ? __pfx_ext4_fallocate+0x10/0x10 [ 1066.825068][T21832] vfs_fallocate+0x608/0x10b0 [ 1066.825103][T21832] ? __pfx_vfs_fallocate+0x10/0x10 [ 1066.825136][T21832] ? madvise_vma_behavior+0x1b36/0x1de0 [ 1066.825160][T21832] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1066.825199][T21832] madvise_vma_behavior+0x1ad4/0x1de0 [ 1066.825226][T21832] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1066.825251][T21832] ? find_vma_prev+0xda/0x160 [ 1066.825281][T21832] ? __pfx_find_vma_prev+0x10/0x10 [ 1066.825317][T21832] ? __pfx___might_resched+0x10/0x10 [ 1066.825347][T21832] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1066.825371][T21832] madvise_walk_vmas+0x1ce/0x2c0 [ 1066.825410][T21832] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1066.825454][T21832] do_madvise+0x364/0x7c0 [ 1066.825480][T21832] ? __pfx_do_madvise+0x10/0x10 [ 1066.825503][T21832] ? native_tss_update_io_bitmap+0x3ca/0x720 [ 1066.825535][T21832] ? rcu_is_watching+0x12/0xc0 [ 1066.825578][T21832] __x64_sys_madvise+0xa9/0x110 [ 1066.825602][T21832] ? lockdep_hardirqs_on+0x7c/0x110 [ 1066.825646][T21832] do_syscall_64+0xcd/0x260 [ 1066.825680][T21832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.825704][T21832] RIP: 0033:0x7f381cb8d169 [ 1066.825723][T21832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1066.825747][T21832] RSP: 002b:00007f381d9c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1066.825770][T21832] RAX: ffffffffffffffda RBX: 00007f381cda5fa0 RCX: 00007f381cb8d169 [ 1066.825787][T21832] RDX: 0000000000000009 RSI: 00000000000031ca RDI: 000000110c230000 [ 1066.825803][T21832] RBP: 00007f381cc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1066.825818][T21832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1066.825833][T21832] R13: 0000000000000000 R14: 00007f381cda5fa0 R15: 00007ffff7acd118 [ 1066.825858][T21832] [ 1066.825872][T21832] EXT4-fs (sda1): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 1924; err -12 [ 1067.358959][T21839] sp0: Synchronizing with TNC [ 1067.528871][T21839] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1068.755931][T21867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3326'. [ 1068.765361][T21860] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 1073.061673][T21932] sp0: Synchronizing with TNC [ 1073.552063][T21932] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1082.449553][T22128] input: f¬ as /devices/virtual/input/input18 [ 1082.628783][T22136] FAULT_INJECTION: forcing a failure. [ 1082.628783][T22136] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.816000][T22136] CPU: 0 UID: 0 PID: 22136 Comm: syz.9.3358 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 1082.816035][T22136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1082.816050][T22136] Call Trace: [ 1082.816057][T22136] [ 1082.816066][T22136] dump_stack_lvl+0x16c/0x1f0 [ 1082.816100][T22136] should_fail_ex+0x512/0x640 [ 1082.816124][T22136] ? fs_reclaim_acquire+0xae/0x150 [ 1082.816153][T22136] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1082.816191][T22136] should_failslab+0xc2/0x120 [ 1082.816227][T22136] __kmalloc_noprof+0xd2/0x510 [ 1082.816265][T22136] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1082.816303][T22136] ? tomoyo_profile+0x47/0x60 [ 1082.816335][T22136] tomoyo_path_number_perm+0x245/0x580 [ 1082.816366][T22136] ? tomoyo_path_number_perm+0x237/0x580 [ 1082.816398][T22136] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1082.816431][T22136] ? find_held_lock+0x2b/0x80 [ 1082.816472][T22136] ? find_held_lock+0x2b/0x80 [ 1082.816495][T22136] ? __fget_files+0x204/0x3c0 [ 1082.816535][T22136] ? __fget_files+0x20e/0x3c0 [ 1082.816570][T22136] security_file_ioctl+0x9b/0x240 [ 1082.816605][T22136] __x64_sys_ioctl+0xb7/0x200 [ 1082.816633][T22136] do_syscall_64+0xcd/0x260 [ 1082.816666][T22136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.816688][T22136] RIP: 0033:0x7f364198d169 [ 1082.816705][T22136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1082.816727][T22136] RSP: 002b:00007f36428d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1082.816750][T22136] RAX: ffffffffffffffda RBX: 00007f3641ba5fa0 RCX: 00007f364198d169 [ 1082.816766][T22136] RDX: 0000000000000000 RSI: 00000000000007cb RDI: 0000000000000003 [ 1082.816780][T22136] RBP: 00007f36428d0090 R08: 0000000000000000 R09: 0000000000000000 [ 1082.816794][T22136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1082.816808][T22136] R13: 0000000000000000 R14: 00007f3641ba5fa0 R15: 00007ffe59e9acf8 [ 1082.816833][T22136] [ 1082.816844][T22136] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1083.635401][T22146] sp0: Synchronizing with TNC [ 1083.654820][T22160] FAULT_INJECTION: forcing a failure. [ 1083.654820][T22160] name failslab, interval 1, probability 0, space 0, times 0 [ 1083.764200][T22160] CPU: 0 UID: 0 PID: 22160 Comm: syz.1.3364 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 1083.764259][T22160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1083.764275][T22160] Call Trace: [ 1083.764282][T22160] [ 1083.764291][T22160] dump_stack_lvl+0x16c/0x1f0 [ 1083.764328][T22160] should_fail_ex+0x512/0x640 [ 1083.764352][T22160] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1083.764392][T22160] should_failslab+0xc2/0x120 [ 1083.764431][T22160] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1083.764467][T22160] ? __d_alloc+0x31/0xaa0 [ 1083.764490][T22160] __d_alloc+0x31/0xaa0 [ 1083.764513][T22160] d_alloc+0x4a/0x1e0 [ 1083.764534][T22160] d_alloc_parallel+0xe3/0x12d0 [ 1083.764561][T22160] ? kasan_save_stack+0x42/0x60 [ 1083.764594][T22160] ? kasan_save_track+0x14/0x30 [ 1083.764625][T22160] ? kasan_save_free_info+0x3b/0x60 [ 1083.764652][T22160] ? kfree+0x2b6/0x4d0 [ 1083.764678][T22160] ? walk_component+0x1a2/0x5b0 [ 1083.764707][T22160] ? link_path_walk.part.0.constprop.0+0x550/0xd60 [ 1083.764744][T22160] ? __lock_acquire+0xaa4/0x1ba0 [ 1083.764776][T22160] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1083.764807][T22160] ? lockdep_init_map_type+0x5c/0x280 [ 1083.764842][T22160] ? lockdep_init_map_type+0x5c/0x280 [ 1083.764879][T22160] __lookup_slow+0x193/0x460 [ 1083.764906][T22160] ? __pfx___lookup_slow+0x10/0x10 [ 1083.764944][T22160] ? lookup_fast+0x156/0x610 [ 1083.764976][T22160] walk_component+0x353/0x5b0 [ 1083.765008][T22160] link_path_walk.part.0.constprop.0+0x682/0xd60 [ 1083.765049][T22160] path_openat+0x227/0x2d40 [ 1083.765081][T22160] ? __x64_sys_openat+0x174/0x210 [ 1083.765113][T22160] ? __pfx_path_openat+0x10/0x10 [ 1083.765152][T22160] do_filp_open+0x20b/0x470 [ 1083.765186][T22160] ? __pfx_do_filp_open+0x10/0x10 [ 1083.765226][T22160] ? find_held_lock+0x2b/0x80 [ 1083.765256][T22160] ? __pfx_kfree_link+0x10/0x10 [ 1083.765289][T22160] ? alloc_fd+0x420/0x760 [ 1083.765327][T22160] do_sys_openat2+0x11b/0x1d0 [ 1083.765351][T22160] ? __pfx_do_sys_openat2+0x10/0x10 [ 1083.765383][T22160] __x64_sys_openat+0x174/0x210 [ 1083.765407][T22160] ? __pfx___x64_sys_openat+0x10/0x10 [ 1083.765433][T22160] ? rcu_is_watching+0x12/0xc0 [ 1083.765463][T22160] do_syscall_64+0xcd/0x260 [ 1083.765495][T22160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.765520][T22160] RIP: 0033:0x7f381cb8bad0 [ 1083.765538][T22160] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1083.765563][T22160] RSP: 002b:00007f381d9c8f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1083.765585][T22160] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f381cb8bad0 [ 1083.765601][T22160] RDX: 0000000000000002 RSI: 00007f381d9c8fa0 RDI: 00000000ffffff9c [ 1083.765617][T22160] RBP: 00007f381d9c8fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1083.765632][T22160] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1083.765647][T22160] R13: 0000000000000000 R14: 00007f381cda5fa0 R15: 00007ffff7acd118 [ 1083.765673][T22160] [ 1084.095856][T22148] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1086.138762][T22211] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1088.389280][ T30] audit: type=1806 audit(4294967357.161:52): xattr="" res=-22 [ 1091.621163][T22326] Invalid ELF header magic: != ELF [ 1093.005096][T22360] Invalid ELF header magic: != ELF [ 1094.471180][T22397] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1094.601242][T22397] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1094.707110][T22397] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1094.804366][T22397] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1095.664133][T22429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3398'. [ 1095.772249][T22435] FAULT_INJECTION: forcing a failure. [ 1095.772249][T22435] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1095.941088][T22435] CPU: 0 UID: 0 PID: 22435 Comm: syz.0.3399 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 1095.941124][T22435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1095.941140][T22435] Call Trace: [ 1095.941147][T22435] [ 1095.941156][T22435] dump_stack_lvl+0x16c/0x1f0 [ 1095.941199][T22435] should_fail_ex+0x512/0x640 [ 1095.941227][T22435] get_futex_key+0x49e/0x1000 [ 1095.941257][T22435] ? __pfx_get_futex_key+0x10/0x10 [ 1095.941290][T22435] futex_wake+0xe7/0x4e0 [ 1095.941325][T22435] ? __pfx_futex_wake+0x10/0x10 [ 1095.941357][T22435] ? rcu_is_watching+0x12/0xc0 [ 1095.941388][T22435] do_futex+0x1e3/0x350 [ 1095.941416][T22435] ? __pfx_do_futex+0x10/0x10 [ 1095.941445][T22435] ? __pfx___might_resched+0x10/0x10 [ 1095.941477][T22435] __x64_sys_futex+0x1e0/0x4c0 [ 1095.941506][T22435] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 1095.941537][T22435] ? __pfx___x64_sys_futex+0x10/0x10 [ 1095.941568][T22435] ? __pfx___do_sys_close_range+0x10/0x10 [ 1095.941605][T22435] ? rcu_is_watching+0x12/0xc0 [ 1095.941634][T22435] do_syscall_64+0xcd/0x260 [ 1095.941667][T22435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.941691][T22435] RIP: 0033:0x7f11da18d169 [ 1095.941710][T22435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1095.941734][T22435] RSP: 002b:00007f11db0190e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1095.941757][T22435] RAX: ffffffffffffffda RBX: 00007f11da3a5fa8 RCX: 00007f11da18d169 [ 1095.941773][T22435] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f11da3a5fac [ 1095.941788][T22435] RBP: 00007f11da3a5fa0 R08: 00007f11db01a000 R09: 0000000000000000 [ 1095.941804][T22435] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f11da3a5fac [ 1095.941819][T22435] R13: 0000000000000000 R14: 00007ffdeb6cd4f0 R15: 00007ffdeb6cd5d8 [ 1095.941843][T22435] [ 1096.605388][T15340] Bluetooth: hci0: command 0x0c1a tx timeout [ 1096.611467][T15340] Bluetooth: hci1: command 0x0c1a tx timeout [ 1096.851140][T17872] Bluetooth: hci3: command 0x0c1a tx timeout [ 1096.860020][T17872] Bluetooth: hci4: command 0x0c1a tx timeout [ 1097.182178][T22445] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3400'. [ 1097.979490][T22468] udc dummy_udc.0: soft-connect without a gadget driver [ 1099.161376][T22499] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3408'. [ 1099.472505][T22499] netlink: 274 bytes leftover after parsing attributes in process `syz.0.3408'. [ 1099.673913][T22499] netlink: 294 bytes leftover after parsing attributes in process `syz.0.3408'. [ 1099.858232][T22508] netlink: 294 bytes leftover after parsing attributes in process `syz.0.3408'. [ 1103.060256][T22608] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3424'. [ 1103.229228][T22613] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3424'. [ 1103.359903][T22608] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3424'. [ 1103.625934][T22626] netlink: 'syz.3.3426': attribute type 2 has an invalid length. [ 1104.261755][T22647] sp0: Synchronizing with TNC [ 1104.796311][T22647] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1105.949945][T22674] sp0: Synchronizing with TNC [ 1106.156667][T22684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3433'. [ 1106.178272][T22678] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1108.128079][T22738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3438'. [ 1109.312046][ T30] audit: type=1804 audit(4294967378.190:53): pid=22760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3444" name=2F6E6577726F6F742F39362F08 dev="tmpfs" ino=530 res=1 errno=0 [ 1109.341531][ C0] vkms_vblank_simulate: vblank timer overrun [ 1109.691846][ T30] audit: type=1804 audit(4294967378.571:54): pid=22760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3444" name=2F6E6577726F6F742F39362F08 dev="tmpfs" ino=530 res=1 errno=0 [ 1109.721773][ C0] vkms_vblank_simulate: vblank timer overrun [ 1110.387890][T22786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3447'. [ 1110.763316][T22788] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3448'. [ 1110.807073][T22788] ipvlan0: entered allmulticast mode [ 1110.823639][T22788] veth0_vlan: entered allmulticast mode syzkaller syzkaller login: [ 1117.220475][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1117.227047][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.771820][T22973] Format for linking two devices is "netnsfd_a:ifidx_a netnsfd_b:ifidx_b" (int uint int uint). [ 1119.294737][T22981] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3478'. [ 1119.664977][T22963] FAULT_INJECTION: forcing a failure. [ 1119.664977][T22963] name failslab, interval 1, probability 0, space 0, times 0 [ 1119.859253][T22963] CPU: 0 UID: 0 PID: 22963 Comm: syz.0.3477 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 1119.859296][T22963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1119.859311][T22963] Call Trace: [ 1119.859318][T22963] [ 1119.859328][T22963] dump_stack_lvl+0x16c/0x1f0 [ 1119.859364][T22963] should_fail_ex+0x512/0x640 [ 1119.859389][T22963] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1119.859422][T22963] should_failslab+0xc2/0x120 [ 1119.859461][T22963] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1119.859491][T22963] ? proc_create_net_data+0x147/0x1b0 [ 1119.859517][T22963] ? netdev_create_hash+0x3c/0xc0 [ 1119.859541][T22963] ? __pfx_netdev_init+0x10/0x10 [ 1119.859563][T22963] netdev_create_hash+0x3c/0xc0 [ 1119.859587][T22963] ? __pfx_netdev_init+0x10/0x10 [ 1119.859607][T22963] netdev_init+0x70/0x230 [ 1119.859629][T22963] ops_init+0x1df/0x5f0 [ 1119.859665][T22963] setup_net+0x21e/0x850 [ 1119.859702][T22963] ? __pfx_setup_net+0x10/0x10 [ 1119.859736][T22963] ? lockdep_init_map_type+0x5c/0x280 [ 1119.859771][T22963] ? __pfx_down_read_killable+0x10/0x10 [ 1119.859809][T22963] ? debug_mutex_init+0x37/0x70 [ 1119.859834][T22963] copy_net_ns+0x2a6/0x5f0 [ 1119.859857][T22963] create_new_namespaces+0x3ea/0xad0 [ 1119.859892][T22963] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1119.859926][T22963] ksys_unshare+0x45b/0xa40 [ 1119.859959][T22963] ? __pfx_ksys_unshare+0x10/0x10 [ 1119.859991][T22963] ? xfd_validate_state+0x5d/0x180 [ 1119.860015][T22963] ? rcu_is_watching+0x12/0xc0 [ 1119.860044][T22963] __x64_sys_unshare+0x31/0x40 [ 1119.860077][T22963] do_syscall_64+0xcd/0x260 [ 1119.860109][T22963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.860134][T22963] RIP: 0033:0x7f11da18d169 [ 1119.860152][T22963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1119.860176][T22963] RSP: 002b:00007f11db019038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1119.860198][T22963] RAX: ffffffffffffffda RBX: 00007f11da3a5fa0 RCX: 00007f11da18d169 [ 1119.860214][T22963] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1119.860234][T22963] RBP: 00007f11da20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1119.860250][T22963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1119.860264][T22963] R13: 0000000000000000 R14: 00007f11da3a5fa0 R15: 00007ffdeb6cd5d8 [ 1119.860295][T22963] [ 1120.814464][T23010] FAULT_INJECTION: forcing a failure. [ 1120.814464][T23010] name failslab, interval 1, probability 0, space 0, times 0 [ 1120.897926][T23010] CPU: 0 UID: 0 PID: 23010 Comm: syz.3.3483 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 1120.897961][T23010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1120.897976][T23010] Call Trace: [ 1120.897984][T23010] [ 1120.897993][T23010] dump_stack_lvl+0x16c/0x1f0 [ 1120.898029][T23010] should_fail_ex+0x512/0x640 [ 1120.898054][T23010] ? fs_reclaim_acquire+0xae/0x150 [ 1120.898087][T23010] ? ima_alloc_init_template+0x19d/0x720 [ 1120.898114][T23010] should_failslab+0xc2/0x120 [ 1120.898151][T23010] __kmalloc_noprof+0xd2/0x510 [ 1120.898187][T23010] ? __print_lock_name+0x51/0xe0 [ 1120.898232][T23010] ima_alloc_init_template+0x19d/0x720 [ 1120.898259][T23010] ? take_dentry_name_snapshot+0x319/0x7d0 [ 1120.898290][T23010] ima_store_measurement+0x1eb/0x5c0 [ 1120.898319][T23010] ? __pfx_ima_store_measurement+0x10/0x10 [ 1120.898347][T23010] ? vfs_getxattr_alloc+0xec/0x340 [ 1120.898387][T23010] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1120.898433][T23010] process_measurement+0x1bc6/0x2360 [ 1120.898463][T23010] ? __pfx_process_measurement+0x10/0x10 [ 1120.898484][T23010] ? __lock_acquire+0x5ca/0x1ba0 [ 1120.898518][T23010] ? init_file+0x93/0x4c0 [ 1120.898539][T23010] ? alloc_empty_file+0x73/0x1e0 [ 1120.898561][T23010] ? hugetlb_file_setup+0x4cd/0x620 [ 1120.898587][T23010] ? ksys_mmap_pgoff+0x189/0x5c0 [ 1120.898614][T23010] ? __x64_sys_mmap+0x125/0x190 [ 1120.898673][T23010] ima_file_mmap+0x1b1/0x1d0 [ 1120.898696][T23010] ? __pfx_ima_file_mmap+0x10/0x10 [ 1120.898723][T23010] security_mmap_file+0x88c/0x990 [ 1120.898759][T23010] vm_mmap_pgoff+0xec/0x450 [ 1120.898793][T23010] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1120.898823][T23010] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1120.898849][T23010] ? hugetlbfs_get_inode+0x31f/0x730 [ 1120.898879][T23010] ksys_mmap_pgoff+0x1c8/0x5c0 [ 1120.898907][T23010] ? rcu_is_watching+0x12/0xc0 [ 1120.898933][T23010] __x64_sys_mmap+0x125/0x190 [ 1120.898959][T23010] do_syscall_64+0xcd/0x260 [ 1120.898991][T23010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.899015][T23010] RIP: 0033:0x7f740318d169 [ 1120.899033][T23010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1120.899057][T23010] RSP: 002b:00007f7403fde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1120.899079][T23010] RAX: ffffffffffffffda RBX: 00007f74033a5fa0 RCX: 00007f740318d169 [ 1120.899095][T23010] RDX: 00004000000000df RSI: 0000000000000003 RDI: 0000000000000000 [ 1120.899110][T23010] RBP: 00007f740320e2a0 R08: 0000000000000401 R09: 0000300000000000 [ 1120.899126][T23010] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1120.899140][T23010] R13: 0000000000000000 R14: 00007f74033a5fa0 R15: 00007ffe2ad62808 [ 1120.899166][T23010] [ 1121.518006][ T30] audit: type=1804 audit(4294967389.840:55): pid=23010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.3.3483" name="anon_hugepage" dev="hugetlbfs" ino=81393 res=0 errno=0 [ 1122.102920][T23023] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1122.928283][T23032] FAULT_INJECTION: forcing a failure. [ 1122.928283][T23032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1123.018861][T23032] CPU: 0 UID: 0 PID: 23032 Comm: syz.9.3490 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 1123.018897][T23032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1123.018912][T23032] Call Trace: [ 1123.018919][T23032] [ 1123.018928][T23032] dump_stack_lvl+0x16c/0x1f0 [ 1123.018962][T23032] should_fail_ex+0x512/0x640 [ 1123.018997][T23032] strncpy_from_user+0x3b/0x2d0 [ 1123.019036][T23032] getname_flags.part.0+0x8b/0x540 [ 1123.019064][T23032] getname_flags+0x93/0xf0 [ 1123.019095][T23032] __x64_sys_rename+0x58/0xa0 [ 1123.019116][T23032] do_syscall_64+0xcd/0x260 [ 1123.019148][T23032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.019171][T23032] RIP: 0033:0x7f364198d169 [ 1123.019188][T23032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1123.019212][T23032] RSP: 002b:00007f36428d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 1123.019234][T23032] RAX: ffffffffffffffda RBX: 00007f3641ba5fa0 RCX: 00007f364198d169 [ 1123.019249][T23032] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000080 [ 1123.019265][T23032] RBP: 00007f36428d0090 R08: 0000000000000000 R09: 0000000000000000 [ 1123.019280][T23032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1123.019294][T23032] R13: 0000000000000000 R14: 00007f3641ba5fa0 R15: 00007ffe59e9acf8 [ 1123.019318][T23032] syzkaller syzkaller login: [ 1123.818203][T23043] sp0: Synchronizing with TNC [ 1125.604272][T23081] KVM: debugfs: duplicate directory 23081-4 syzkaller syzkaller login: [ 1126.465947][T23104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3503'. [ 1126.705851][T23112] FAULT_INJECTION: forcing a failure. [ 1126.705851][T23112] name failslab, interval 1, probability 0, space 0, times 0 [ 1126.824951][T23100] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1126.892974][T23112] CPU: 0 UID: 0 PID: 23112 Comm: syz.0.3504 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 1126.893014][T23112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1126.893031][T23112] Call Trace: [ 1126.893039][T23112] [ 1126.893050][T23112] dump_stack_lvl+0x16c/0x1f0 [ 1126.893089][T23112] should_fail_ex+0x512/0x640 [ 1126.893118][T23112] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1126.893161][T23112] should_failslab+0xc2/0x120 [ 1126.893205][T23112] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1126.893245][T23112] ? getname_flags.part.0+0x48/0x540 [ 1126.893280][T23112] getname_flags.part.0+0x48/0x540 [ 1126.893312][T23112] getname_flags+0x93/0xf0 [ 1126.893350][T23112] __x64_sys_rename+0x65/0xa0 [ 1126.893376][T23112] do_syscall_64+0xcd/0x260 [ 1126.893414][T23112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.893442][T23112] RIP: 0033:0x7f11da18d169 [ 1126.893463][T23112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1126.893490][T23112] RSP: 002b:00007f11db019038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 1126.893517][T23112] RAX: ffffffffffffffda RBX: 00007f11da3a5fa0 RCX: 00007f11da18d169 [ 1126.893536][T23112] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000080 [ 1126.893554][T23112] RBP: 00007f11db019090 R08: 0000000000000000 R09: 0000000000000000 [ 1126.893572][T23112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1126.893589][T23112] R13: 0000000000000000 R14: 00007f11da3a5fa0 R15: 00007ffdeb6cd5d8 [ 1126.893620][T23112] [ 1126.909516][T23119] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3502'. [ 1128.300925][T23146] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1129.488272][T23182] FAULT_INJECTION: forcing a failure. [ 1129.488272][T23182] name failslab, interval 1, probability 0, space 0, times 0 [ 1129.570646][T23182] CPU: 0 UID: 5 PID: 23182 Comm: syz.1.3519 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 1129.570691][T23182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1129.570711][T23182] Call Trace: [ 1129.570721][T23182] [ 1129.570732][T23182] dump_stack_lvl+0x16c/0x1f0 [ 1129.570785][T23182] should_fail_ex+0x512/0x640 [ 1129.570817][T23182] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1129.570865][T23182] should_failslab+0xc2/0x120 [ 1129.570913][T23182] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1129.570956][T23182] ? __proc_create+0xc3/0x8c0 [ 1129.570987][T23182] ? __proc_create+0x2ce/0x8c0 [ 1129.571019][T23182] __proc_create+0x2ce/0x8c0 [ 1129.571051][T23182] ? __pfx___proc_create+0x10/0x10 [ 1129.571080][T23182] ? _raw_write_unlock+0x28/0x50 [ 1129.571116][T23182] ? proc_register+0x314/0x5f0 [ 1129.571156][T23182] _proc_mkdir+0xb9/0x200 [ 1129.571187][T23182] ? __pfx__proc_mkdir+0x10/0x10 [ 1129.571224][T23182] ? __pfx_netfilter_net_init+0x10/0x10 [ 1129.571258][T23182] netfilter_net_init+0x37b/0x4b0 [ 1129.571286][T23182] ? sysctl_net_init+0x27/0x30 [ 1129.571320][T23182] ops_init+0x1df/0x5f0 [ 1129.571366][T23182] setup_net+0x21e/0x850 [ 1129.571412][T23182] ? __pfx_setup_net+0x10/0x10 [ 1129.571454][T23182] ? lockdep_init_map_type+0x5c/0x280 [ 1129.571498][T23182] ? __pfx_down_read_killable+0x10/0x10 [ 1129.571549][T23182] ? debug_mutex_init+0x37/0x70 [ 1129.571582][T23182] copy_net_ns+0x2a6/0x5f0 [ 1129.571613][T23182] create_new_namespaces+0x3ea/0xad0 [ 1129.571658][T23182] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1129.571715][T23182] ksys_unshare+0x45b/0xa40 [ 1129.571769][T23182] ? __pfx_ksys_unshare+0x10/0x10 [ 1129.571810][T23182] ? xfd_validate_state+0x5d/0x180 [ 1129.571842][T23182] ? rcu_is_watching+0x12/0xc0 [ 1129.571880][T23182] __x64_sys_unshare+0x31/0x40 [ 1129.571921][T23182] do_syscall_64+0xcd/0x260 [ 1129.571965][T23182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.571996][T23182] RIP: 0033:0x7f381cb8d169 [ 1129.572022][T23182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1129.572054][T23182] RSP: 002b:00007f381d9c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1129.572084][T23182] RAX: ffffffffffffffda RBX: 00007f381cda5fa0 RCX: 00007f381cb8d169 [ 1129.572105][T23182] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1129.572124][T23182] RBP: 00007f381cc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1129.572144][T23182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1129.572163][T23182] R13: 0000000000000000 R14: 00007f381cda5fa0 R15: 00007ffff7acd118 [ 1129.572196][T23182] [ 1129.572210][T23182] cannot create netfilter proc entry [ 1130.361336][T23217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3523'. [ 1130.415393][T23217] ipvlan0: entered allmulticast mode [ 1130.426698][T23217] veth0_vlan: entered allmulticast mode [ 1130.915494][T23235] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1132.449693][T23244] FAULT_INJECTION: forcing a failure. [ 1132.449693][T23244] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.522641][T23244] CPU: 0 UID: 0 PID: 23244 Comm: syz.3.3528 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 1132.522690][T23244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1132.522712][T23244] Call Trace: [ 1132.522723][T23244] [ 1132.522736][T23244] dump_stack_lvl+0x16c/0x1f0 [ 1132.522783][T23244] should_fail_ex+0x512/0x640 [ 1132.522817][T23244] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1132.522870][T23244] should_failslab+0xc2/0x120 [ 1132.522921][T23244] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1132.522969][T23244] ? __alloc_skb+0x2b2/0x380 [ 1132.523015][T23244] __alloc_skb+0x2b2/0x380 [ 1132.523056][T23244] ? __pfx___alloc_skb+0x10/0x10 [ 1132.523104][T23244] ? tcp_send_mss+0x159/0x2c0 [ 1132.523155][T23244] mptcp_sendmsg_frag+0x4d7/0x2df0 [ 1132.523217][T23244] ? __pfx_mptcp_sendmsg_frag+0x10/0x10 [ 1132.523273][T23244] ? mptcp_sched_get_send+0x2e1/0x6d0 [ 1132.523304][T23244] ? __pfx_mptcp_sched_get_send+0x10/0x10 [ 1132.523339][T23244] __subflow_push_pending+0x34e/0xad0 [ 1132.523383][T23244] __mptcp_push_pending+0x2ce/0x550 [ 1132.523423][T23244] ? __pfx___mptcp_push_pending+0x10/0x10 [ 1132.523459][T23244] ? __virt_addr_valid+0x5e/0x590 [ 1132.523504][T23244] ? __phys_addr+0xc6/0x150 [ 1132.523547][T23244] ? __phys_addr_symbol+0x30/0x80 [ 1132.523595][T23244] ? __check_object_size+0x4c7/0x710 [ 1132.523650][T23244] mptcp_sendmsg+0x1712/0x1df0 [ 1132.523699][T23244] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 1132.523735][T23244] ? __pfx_aa_sk_perm+0x10/0x10 [ 1132.523778][T23244] ? __pfx___futex_wait+0x10/0x10 [ 1132.523825][T23244] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 1132.523859][T23244] inet_sendmsg+0x119/0x140 [ 1132.523909][T23244] sock_write_iter+0x4aa/0x5b0 [ 1132.523944][T23244] ? __pfx_sock_write_iter+0x10/0x10 [ 1132.523988][T23244] ? bpf_lsm_file_permission+0x9/0x10 [ 1132.524038][T23244] ? security_file_permission+0x71/0x210 [ 1132.524088][T23244] ? rw_verify_area+0xcf/0x680 [ 1132.524127][T23244] vfs_write+0x5ba/0x1180 [ 1132.524169][T23244] ? __pfx_sock_write_iter+0x10/0x10 [ 1132.524206][T23244] ? __pfx_vfs_write+0x10/0x10 [ 1132.524255][T23244] ? find_held_lock+0x2b/0x80 [ 1132.524304][T23244] ksys_write+0x205/0x240 [ 1132.524348][T23244] ? __pfx_ksys_write+0x10/0x10 [ 1132.524390][T23244] ? rcu_is_watching+0x12/0xc0 [ 1132.524430][T23244] do_syscall_64+0xcd/0x260 [ 1132.524474][T23244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.524506][T23244] RIP: 0033:0x7f740318d169 [ 1132.524534][T23244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1132.524566][T23244] RSP: 002b:00007f7403fde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1132.524596][T23244] RAX: ffffffffffffffda RBX: 00007f74033a5fa0 RCX: 00007f740318d169 [ 1132.524617][T23244] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 1132.524635][T23244] RBP: 00007f740320e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1132.524653][T23244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1132.524672][T23244] R13: 0000000000000000 R14: 00007f74033a5fa0 R15: 00007ffe2ad62808 [ 1132.524707][T23244] [ 1133.555225][T23283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3532'. syzkaller syzkaller login: [ 1134.775017][T23311] sp0: Synchronizing with TNC [ 1135.262731][T23324] Invalid ELF header magic: != ELF [ 1136.591858][T23373] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3544'. [ 1137.446296][T23410] FAULT_INJECTION: forcing a failure. [ 1137.446296][T23410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1137.501493][T23410] CPU: 1 UID: 0 PID: 23410 Comm: syz.9.3552 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 1137.501537][T23410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1137.501557][T23410] Call Trace: [ 1137.501567][T23410] [ 1137.501580][T23410] dump_stack_lvl+0x16c/0x1f0 [ 1137.501626][T23410] should_fail_ex+0x512/0x640 [ 1137.501663][T23410] _copy_from_user+0x2e/0xd0 [ 1137.501701][T23410] kstrtouint_from_user+0xe8/0x1d0 [ 1137.501750][T23410] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1137.501799][T23410] ? __lock_acquire+0xaa4/0x1ba0 [ 1137.501853][T23410] proc_fail_nth_write+0x83/0x250 [ 1137.501896][T23410] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1137.501947][T23410] vfs_write+0x25c/0x1180 [ 1137.501987][T23410] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1137.502033][T23410] ? __pfx___mutex_lock+0x10/0x10 [ 1137.502081][T23410] ? __pfx_vfs_write+0x10/0x10 [ 1137.502130][T23410] ? __fget_files+0x20e/0x3c0 [ 1137.502182][T23410] ksys_write+0x12a/0x240 [ 1137.502223][T23410] ? __pfx_ksys_write+0x10/0x10 [ 1137.502264][T23410] ? getname_flags.part.0+0x1c2/0x540 [ 1137.502309][T23410] do_syscall_64+0xcd/0x260 [ 1137.502351][T23410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.502383][T23410] RIP: 0033:0x7f364198bc1f [ 1137.502408][T23410] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1137.502440][T23410] RSP: 002b:00007f36428d0030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1137.502470][T23410] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f364198bc1f [ 1137.502491][T23410] RDX: 0000000000000001 RSI: 00007f36428d00a0 RDI: 0000000000000003 [ 1137.502512][T23410] RBP: 00007f36428d0090 R08: 0000000000000000 R09: 0000000000000000 [ 1137.502532][T23410] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1137.502552][T23410] R13: 0000000000000000 R14: 00007f3641ba5fa0 R15: 00007ffe59e9acf8 [ 1137.502587][T23410] [ 1137.982011][T23413] openvswitch: netlink: ct_state flags 04001eac unsupported [ 1138.039658][T23413] program syz.3.3551 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1139.038179][T23451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3560'. [ 1139.221076][T23457] WARNING! power/level is deprecated; use power/control instead [ 1139.458309][ T30] audit: type=1800 audit(4294967408.486:56): pid=23467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3561" name="members" dev="configfs" ino=84279 res=0 errno=0 [ 1140.086744][T15340] Bluetooth: hci1: unexpected subevent 0x01 length: 4 < 18 [ 1140.142681][ T30] audit: type=1800 audit(4294967417.183:57): pid=23470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3562" name="dbroot" dev="configfs" ino=84293 res=0 errno=0 [ 1140.663073][T23488] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1140.744327][T23488] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1141.140345][T23503] sp0: Synchronizing with TNC [ 1141.382158][T23503] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1141.809538][T23524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3571'. [ 1145.352455][T23595] sp0: Synchronizing with TNC [ 1145.380741][ T30] audit: type=1800 audit(4294967422.440:58): pid=23593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3581" name="dbroot" dev="configfs" ino=84448 res=0 errno=0 [ 1145.505714][T23595] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1145.600426][T23604] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3584'. [ 1146.572089][T23624] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3590'. [ 1147.128532][T23630] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1147.357572][T23624] bond0: (slave bond_slave_1): Releasing backup interface [ 1147.893042][T23623] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1147.921463][T23623] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1147.965418][T23623] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1148.014905][T23623] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1148.575210][T15340] Bluetooth: hci0: command 0x0c1a tx timeout [ 1148.715946][T23626] kexec: Could not allocate control_code_buffer [ 1149.029224][T23678] sctp: [Deprecated]: syz.9.3600 (pid 23678) Use of int in max_burst socket option. [ 1149.029224][T23678] Use struct sctp_assoc_value instead [ 1149.112864][T23678] ubi0: attaching mtd0 [ 1149.120744][T23678] ubi0: scanning is finished [ 1149.130410][T23678] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1149.364348][T23678] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1149.927315][T15340] Bluetooth: hci1: command 0x0c1a tx timeout [ 1150.006678][T15340] Bluetooth: hci4: command 0x0c1a tx timeout [ 1150.006721][T17872] Bluetooth: hci3: command 0x0c1a tx timeout [ 1150.040082][T23697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3601'. [ 1150.432704][T23718] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1151.083018][T23726] netlink: 326 bytes leftover after parsing attributes in process `syz.1.3609'. [ 1151.097850][T23726] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1151.128500][T23727] bond0: no command found in slaves file - use +ifname or -ifname [ 1151.132870][T23726] CIFS mount error: No usable UNC path provided in device string! [ 1151.132870][T23726] [ 1151.175359][T23726] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1151.187243][T23729] netlink: 338 bytes leftover after parsing attributes in process `syz.3.3608'. [ 1151.229519][T23729] netlink: get zone limit has 8 unknown bytes [ 1151.828462][T23759] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1152.133108][T23762] random: crng reseeded on system resumption [ 1153.990403][T23811] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1154.822774][ T30] audit: type=1800 audit(4294967439.935:59): pid=23821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3631" name="dbroot" dev="configfs" ino=85028 res=0 errno=0 [ 1156.266618][T23825] kexec: Could not allocate control_code_buffer [ 1156.775183][T23875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3641'. [ 1157.491919][T23881] sp0: Synchronizing with TNC [ 1157.733846][T23881] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1158.395745][T23918] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3648'. [ 1158.663800][T23919] ubi0: attaching mtd0 [ 1158.669034][T23919] ubi0: scanning is finished [ 1158.701258][T23919] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1158.858773][T23919] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1159.743261][T23949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3655'. [ 1160.492263][T23970] FAULT_INJECTION: forcing a failure. [ 1160.492263][T23970] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.538240][T23970] CPU: 1 UID: 0 PID: 23970 Comm: syz.1.3658 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 1160.538285][T23970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1160.538304][T23970] Call Trace: [ 1160.538314][T23970] [ 1160.538327][T23970] dump_stack_lvl+0x16c/0x1f0 [ 1160.538372][T23970] should_fail_ex+0x512/0x640 [ 1160.538403][T23970] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1160.538451][T23970] should_failslab+0xc2/0x120 [ 1160.538499][T23970] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1160.538543][T23970] ? security_file_alloc+0x34/0x2b0 [ 1160.538594][T23970] security_file_alloc+0x34/0x2b0 [ 1160.538640][T23970] init_file+0x93/0x4c0 [ 1160.538670][T23970] alloc_empty_file+0x73/0x1e0 [ 1160.538703][T23970] alloc_file_pseudo+0x13a/0x230 [ 1160.538737][T23970] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1160.538770][T23970] ? do_raw_spin_unlock+0x172/0x230 [ 1160.538805][T23970] __anon_inode_getfile+0xf7/0x370 [ 1160.538857][T23970] do_epoll_create+0x31b/0x470 [ 1160.538897][T23970] __x64_sys_epoll_create+0x45/0x70 [ 1160.538938][T23970] do_syscall_64+0xcd/0x260 [ 1160.538980][T23970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.539010][T23970] RIP: 0033:0x7f381cb8d169 [ 1160.539034][T23970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1160.539065][T23970] RSP: 002b:00007f381d9a8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5 [ 1160.539095][T23970] RAX: ffffffffffffffda RBX: 00007f381cda6080 RCX: 00007f381cb8d169 [ 1160.539116][T23970] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 1160.539134][T23970] RBP: 00007f381cc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1160.539154][T23970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1160.539182][T23970] R13: 0000000000000000 R14: 00007f381cda6080 R15: 00007ffff7acd118 [ 1160.539216][T23970] [ 1163.289886][T24044] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1163.497022][T24046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3670'. [ 1164.291994][T24055] sp0: Synchronizing with TNC [ 1164.391964][T24064] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1164.482663][T24060] sp1: Synchronizing with TNC [ 1164.643849][T24067] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1165.764485][T24112] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1166.981458][ T10] Process accounting resumed [ 1167.101663][T24145] sp0: Synchronizing with TNC [ 1167.211337][T24150] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1167.227695][T24157] scsi_dev_info_list_add_str: bad dev info string ')–õÒzD éú÷5fk+*X€©#åR8¾ð4*œýVs÷nîdv»ø¼qQWˆ}ûÄ~YrÈ€-8VGDƘ¹‹åLáBÍ%v—†õv‘}–Ypq|ƒí?ñºO¼ö[ŒÐ,!ä Ù7xWDr¾Ÿµ% [Û}†Eµ$3?ñGË™Î9–Ff=ŠÃlør«GH;2L<õ»=ÒÚ|èž¿®ô8ƒ -c¡„ FÕ¸šë"™ž£É[v9¯qôÂ4‚ MmËvq®ékñ¹¹ò[ÕãËú(i¨ýˆNDСÄMîËX PS­êq•èqX4‰X`VððŸ!;r¶Ö ±È)y]×W¨šzfIðH0êáÓ,àëí¬é¢vß{q8ÊìÛשU·Ü¹ä‘‰mØ›ŽH•ŽT´¸wí™C€Ïzø-óŠÊnR%§2]ÌÎx0Òéª5oùÐëâòÕ•|3>ÕlñS*LŒõÝ/«CdgÓ‘àŠ[C=Cw‹e•Äm)«ÿòÕl#È' '‹ï'“Sž‰¡.ÍsHgi-à»ÛTY%ܹF§…*8úÒnFTÿH‡—ýæ¿?“ÿ–Þi{' '' [ 1168.318139][T24190] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1170.019591][T24240] sp0: Synchronizing with TNC [ 1170.073721][T24250] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3705'. [ 1170.278627][T24240] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1170.802315][T24253] zswap: compressor not available [ 1172.644884][T24322] FAULT_INJECTION: forcing a failure. [ 1172.644884][T24322] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.658427][T24322] CPU: 0 UID: 0 PID: 24322 Comm: syz.0.3714 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 1172.658474][T24322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1172.658500][T24322] Call Trace: [ 1172.658511][T24322] [ 1172.658524][T24322] dump_stack_lvl+0x16c/0x1f0 [ 1172.658572][T24322] should_fail_ex+0x512/0x640 [ 1172.658609][T24322] should_failslab+0xc2/0x120 [ 1172.658657][T24322] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1172.658699][T24322] ? trace_kmem_cache_alloc+0x28/0xc0 [ 1172.658730][T24322] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 1172.658775][T24322] ? inet_bind2_bucket_create+0x36/0x580 [ 1172.658813][T24322] inet_bind2_bucket_create+0x36/0x580 [ 1172.658846][T24322] inet_csk_get_port+0x19a7/0x2600 [ 1172.658900][T24322] inet_autobind+0xb7/0x1a0 [ 1172.658953][T24322] inet_send_prepare+0x317/0x530 [ 1172.659001][T24322] inet_sendmsg+0x43/0x140 [ 1172.659049][T24322] __sys_sendto+0x431/0x510 [ 1172.659089][T24322] ? __pfx___sys_sendto+0x10/0x10 [ 1172.659140][T24322] ? __fget_files+0x204/0x3c0 [ 1172.659194][T24322] ? xfd_validate_state+0x5d/0x180 [ 1172.659227][T24322] ? rcu_is_watching+0x12/0xc0 [ 1172.659263][T24322] __x64_sys_sendto+0xe0/0x1c0 [ 1172.659302][T24322] ? do_syscall_64+0x91/0x260 [ 1172.659343][T24322] ? lockdep_hardirqs_on+0x7c/0x110 [ 1172.659381][T24322] do_syscall_64+0xcd/0x260 [ 1172.659425][T24322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.659457][T24322] RIP: 0033:0x7f11da18effc [ 1172.659483][T24322] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 1172.659516][T24322] RSP: 002b:00007f11db017ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1172.659548][T24322] RAX: ffffffffffffffda RBX: 00007f11db017fc0 RCX: 00007f11da18effc [ 1172.659569][T24322] RDX: 000000000000001c RSI: 00007f11db018010 RDI: 0000000000000004 [ 1172.659587][T24322] RBP: 0000000000000000 R08: 00007f11db017f14 R09: 000000000000000c [ 1172.659607][T24322] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 1172.659627][T24322] R13: 00007f11db017f68 R14: 00007f11db018010 R15: 0000000000000000 [ 1172.659663][T24322] [ 1172.941289][T24326] sp0: Synchronizing with TNC [ 1173.020120][T24326] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1174.152442][T24366] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3725'. [ 1174.577958][T24374] sp0: Synchronizing with TNC [ 1174.753123][T24374] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1174.824363][T24370] netlink: del zone limit has 8 unknown bytes [ 1175.094299][T24397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3732'. [ 1175.245501][T24397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3732'. [ 1175.275152][T24378] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1175.281381][T24378] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1175.287733][T24378] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1175.293882][T24378] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1176.676824][T24433] random: crng reseeded on system resumption [ 1176.687625][T17872] Bluetooth: hci0: command 0x0c1a tx timeout [ 1176.880941][T24442] bond0: option packets_per_slave: invalid value ( Xµn‘pæ) [ 1176.946949][T24442] bond0: option packets_per_slave: allowed values 0 - 65535 [ 1177.053897][T24446] sp0: Synchronizing with TNC [ 1177.290262][T24446] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1177.304936][T17872] Bluetooth: hci4: command 0x0c1a tx timeout [ 1177.311196][T15340] Bluetooth: hci3: command 0x0c1a tx timeout [ 1177.314606][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 1178.037416][T24473] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1178.353334][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.438587][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.583170][T24479] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3752'. [ 1179.335554][T24507] sp0: Synchronizing with TNC [ 1179.623695][T24507] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1179.627427][T24515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3759'. [ 1179.810318][T24517] ubi0: attaching mtd0 [ 1179.815911][T24517] ubi0: scanning is finished [ 1179.820724][T24517] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1179.902098][T24517] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1181.338507][T24561] FAULT_INJECTION: forcing a failure. [ 1181.338507][T24561] name failslab, interval 1, probability 0, space 0, times 0 [ 1181.372224][T24561] CPU: 0 UID: 0 PID: 24561 Comm: syz.1.3773 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 1181.372277][T24561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1181.372296][T24561] Call Trace: [ 1181.372307][T24561] [ 1181.372320][T24561] dump_stack_lvl+0x16c/0x1f0 [ 1181.372369][T24561] should_fail_ex+0x512/0x640 [ 1181.372403][T24561] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1181.372456][T24561] should_failslab+0xc2/0x120 [ 1181.372507][T24561] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1181.372555][T24561] ? alloc_empty_file+0x55/0x1e0 [ 1181.372591][T24561] alloc_empty_file+0x55/0x1e0 [ 1181.372624][T24561] path_openat+0xe0/0x2d40 [ 1181.372668][T24561] ? __x64_sys_openat+0x174/0x210 [ 1181.372700][T24561] ? do_syscall_64+0xcd/0x260 [ 1181.372741][T24561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.372784][T24561] ? __pfx_path_openat+0x10/0x10 [ 1181.372838][T24561] do_filp_open+0x20b/0x470 [ 1181.372884][T24561] ? __pfx_do_filp_open+0x10/0x10 [ 1181.372929][T24561] ? find_held_lock+0x2b/0x80 [ 1181.372981][T24561] ? alloc_fd+0x420/0x760 [ 1181.373032][T24561] do_sys_openat2+0x11b/0x1d0 [ 1181.373065][T24561] ? __pfx_do_sys_openat2+0x10/0x10 [ 1181.373096][T24561] ? __task_pid_nr_ns+0x186/0x500 [ 1181.373147][T24561] ? __do_sys_capset+0xf9/0x460 [ 1181.373193][T24561] __x64_sys_openat+0x174/0x210 [ 1181.373227][T24561] ? __pfx___x64_sys_openat+0x10/0x10 [ 1181.373305][T24561] ? rcu_is_watching+0x12/0xc0 [ 1181.373347][T24561] do_syscall_64+0xcd/0x260 [ 1181.373391][T24561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.373424][T24561] RIP: 0033:0x7f381cb8d169 [ 1181.373450][T24561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1181.373483][T24561] RSP: 002b:00007f381d9c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1181.373519][T24561] RAX: ffffffffffffffda RBX: 00007f381cda5fa0 RCX: 00007f381cb8d169 [ 1181.373541][T24561] RDX: 0000000000000800 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1181.373562][T24561] RBP: 00007f381cc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1181.373583][T24561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1181.373602][T24561] R13: 0000000000000000 R14: 00007f381cda5fa0 R15: 00007ffff7acd118 [ 1181.373636][T24561] [ 1182.512786][T24580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3776'. [ 1182.533297][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880286f8800: rx timeout, send abort [ 1182.543716][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880286fb000: rx timeout, send abort [ 1182.554067][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880286f8800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1182.571041][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880286fb000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1183.147956][T24598] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input20 [ 1183.262044][ T55] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260 [ 1183.262101][ T55] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 1183.277389][ T55] Bluetooth: hci3: Dropping invalid advertising data [ 1183.286024][ T55] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 1183.286060][ T55] Bluetooth: hci3: unknown advertising packet type: 0x07 [ 1183.293379][ T55] Bluetooth: hci3: Dropping invalid advertising data [ 1183.313295][ T55] Bluetooth: hci3: Malformed LE Event: 0x02 [ 1183.319572][ T55] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260 [ 1183.319612][ T55] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 1183.336532][ T55] Bluetooth: hci3: Dropping invalid advertising data [ 1183.344492][ T55] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 1183.344524][ T55] Bluetooth: hci3: unknown advertising packet type: 0x07 [ 1183.351816][ T55] Bluetooth: hci3: Dropping invalid advertising data [ 1183.367151][ T55] Bluetooth: hci3: Malformed LE Event: 0x02 [ 1184.680533][T24633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3789'. [ 1184.953640][T24644] FAULT_INJECTION: forcing a failure. [ 1184.953640][T24644] name failslab, interval 1, probability 0, space 0, times 0 [ 1184.968443][T24644] CPU: 0 UID: 0 PID: 24644 Comm: syz.1.3792 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 1184.968486][T24644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1184.968506][T24644] Call Trace: [ 1184.968516][T24644] [ 1184.968529][T24644] dump_stack_lvl+0x16c/0x1f0 [ 1184.968574][T24644] should_fail_ex+0x512/0x640 [ 1184.968606][T24644] ? fs_reclaim_acquire+0xae/0x150 [ 1184.968644][T24644] ? tomoyo_encode2+0x100/0x3e0 [ 1184.968688][T24644] should_failslab+0xc2/0x120 [ 1184.968731][T24644] __kmalloc_noprof+0xd2/0x510 [ 1184.968774][T24644] ? d_absolute_path+0x136/0x1a0 [ 1184.968812][T24644] tomoyo_encode2+0x100/0x3e0 [ 1184.968861][T24644] tomoyo_encode+0x29/0x50 [ 1184.968906][T24644] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1184.968964][T24644] tomoyo_path_number_perm+0x245/0x580 [ 1184.969015][T24644] ? tomoyo_path_number_perm+0x237/0x580 [ 1184.969061][T24644] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1184.969105][T24644] ? find_held_lock+0x2b/0x80 [ 1184.969162][T24644] ? find_held_lock+0x2b/0x80 [ 1184.969193][T24644] ? __fget_files+0x204/0x3c0 [ 1184.969240][T24644] ? __fget_files+0x20e/0x3c0 [ 1184.969288][T24644] security_file_ioctl+0x9b/0x240 [ 1184.969334][T24644] __x64_sys_ioctl+0xb7/0x200 [ 1184.969373][T24644] do_syscall_64+0xcd/0x260 [ 1184.969417][T24644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.969448][T24644] RIP: 0033:0x7f381cb8d169 [ 1184.969472][T24644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1184.969503][T24644] RSP: 002b:00007f381d9c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1184.969533][T24644] RAX: ffffffffffffffda RBX: 00007f381cda5fa0 RCX: 00007f381cb8d169 [ 1184.969554][T24644] RDX: 0000000000000000 RSI: 00000000000007a4 RDI: 0000000000000003 [ 1184.969574][T24644] RBP: 00007f381d9c9090 R08: 0000000000000000 R09: 0000000000000000 [ 1184.969594][T24644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1184.969613][T24644] R13: 0000000000000000 R14: 00007f381cda5fa0 R15: 00007ffff7acd118 [ 1184.969649][T24644] [ 1184.969669][T24644] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1185.341883][T24646] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3794'. [ 1186.527389][T24673] FAULT_INJECTION: forcing a failure. [ 1186.527389][T24673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1186.547280][T24673] CPU: 0 UID: 0 PID: 24673 Comm: syz.0.3803 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 1186.547321][T24673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1186.547341][T24673] Call Trace: [ 1186.547350][T24673] [ 1186.547362][T24673] dump_stack_lvl+0x16c/0x1f0 [ 1186.547406][T24673] should_fail_ex+0x512/0x640 [ 1186.547444][T24673] _copy_from_user+0x2e/0xd0 [ 1186.547482][T24673] vmci_host_unlocked_ioctl+0xd33/0x2010 [ 1186.547519][T24673] ? do_vfs_ioctl+0x512/0x1990 [ 1186.547557][T24673] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 1186.547613][T24673] ? find_held_lock+0x2b/0x80 [ 1186.547652][T24673] ? __fget_files+0x20e/0x3c0 [ 1186.547699][T24673] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 1186.547738][T24673] __x64_sys_ioctl+0x190/0x200 [ 1186.547776][T24673] do_syscall_64+0xcd/0x260 [ 1186.547832][T24673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.547865][T24673] RIP: 0033:0x7f11da18d169 [ 1186.547888][T24673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1186.547921][T24673] RSP: 002b:00007f11db019038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1186.547951][T24673] RAX: ffffffffffffffda RBX: 00007f11da3a5fa0 RCX: 00007f11da18d169 [ 1186.547972][T24673] RDX: 0000000000000000 RSI: 00000000000007a4 RDI: 0000000000000003 [ 1186.547992][T24673] RBP: 00007f11db019090 R08: 0000000000000000 R09: 0000000000000000 [ 1186.548012][T24673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1186.548032][T24673] R13: 0000000000000000 R14: 00007f11da3a5fa0 R15: 00007ffdeb6cd5d8 [ 1186.548066][T24673] [ 1187.293589][T24694] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3807'. [ 1188.040552][T24715] FAULT_INJECTION: forcing a failure. [ 1188.040552][T24715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1188.087597][T24715] CPU: 1 UID: 0 PID: 24715 Comm: syz.0.3813 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 1188.087643][T24715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1188.087673][T24715] Call Trace: [ 1188.087683][T24715] [ 1188.087694][T24715] dump_stack_lvl+0x16c/0x1f0 [ 1188.087756][T24715] should_fail_ex+0x512/0x640 [ 1188.087793][T24715] _copy_to_user+0x32/0xd0 [ 1188.087832][T24715] simple_read_from_buffer+0xe0/0x170 [ 1188.087876][T24715] proc_fail_nth_read+0x197/0x270 [ 1188.087917][T24715] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1188.087966][T24715] ? rw_verify_area+0xcf/0x680 [ 1188.088001][T24715] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1188.088041][T24715] vfs_read+0x1de/0xc70 [ 1188.088081][T24715] ? fdget_pos+0x2a2/0x370 [ 1188.088127][T24715] ? __pfx___mutex_lock+0x10/0x10 [ 1188.088167][T24715] ? __pfx_vfs_read+0x10/0x10 [ 1188.088214][T24715] ? __fget_files+0x20e/0x3c0 [ 1188.088269][T24715] ksys_read+0x12a/0x240 [ 1188.088307][T24715] ? __pfx_ksys_read+0x10/0x10 [ 1188.088365][T24715] do_syscall_64+0xcd/0x260 [ 1188.088408][T24715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1188.088438][T24715] RIP: 0033:0x7f11da18bb7c [ 1188.088461][T24715] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1188.088491][T24715] RSP: 002b:00007f11db019030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1188.088519][T24715] RAX: ffffffffffffffda RBX: 00007f11da3a5fa0 RCX: 00007f11da18bb7c [ 1188.088540][T24715] RDX: 000000000000000f RSI: 00007f11db0190a0 RDI: 0000000000000004 [ 1188.088559][T24715] RBP: 00007f11db019090 R08: 0000000000000000 R09: 0000000000000000 [ 1188.088578][T24715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1188.088597][T24715] R13: 0000000000000000 R14: 00007f11da3a5fa0 R15: 00007ffdeb6cd5d8 [ 1188.088630][T24715] [ 1188.643819][T24726] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1190.028115][T24747] Invalid ELF header magic: != ELF [ 1190.784051][T24768] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1191.916422][T24777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3829'. [ 1192.891466][T24800] netlink: 342 bytes leftover after parsing attributes in process `syz.9.3834'. [ 1193.157295][T24806] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1193.809465][T24802] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1194.661653][T24825] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3840'. [ 1194.883424][T24831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3842'. [ 1195.250602][T24839] HfR: entered promiscuous mode [ 1195.257954][T24842] openvswitch: HfR: Dropping previously announced user features [ 1195.929032][T24859] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1196.106406][T24862] netlink: 544 bytes leftover after parsing attributes in process `syz.0.3848'. [ 1196.553543][T24865] sp0: Synchronizing with TNC [ 1196.820530][T24880] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3853'. [ 1196.997463][T24865] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1197.441708][T24896] FAULT_INJECTION: forcing a failure. [ 1197.441708][T24896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1197.489095][T24896] CPU: 0 UID: 0 PID: 24896 Comm: syz.1.3855 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 1197.489133][T24896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1197.489148][T24896] Call Trace: [ 1197.489156][T24896] [ 1197.489166][T24896] dump_stack_lvl+0x16c/0x1f0 [ 1197.489213][T24896] should_fail_ex+0x512/0x640 [ 1197.489245][T24896] _copy_to_iter+0x477/0x15a0 [ 1197.489285][T24896] ? __pfx__copy_to_iter+0x10/0x10 [ 1197.489336][T24896] ? const_folio_flags+0x5b/0x100 [ 1197.489366][T24896] ? folio_mark_accessed+0xc1/0xc00 [ 1197.489402][T24896] ? __pfx_folio_mark_accessed+0x10/0x10 [ 1197.489450][T24896] copy_page_to_iter+0xf1/0x180 [ 1197.489482][T24896] filemap_read+0x6b1/0xe90 [ 1197.489522][T24896] ? __pfx_filemap_read+0x10/0x10 [ 1197.489572][T24896] ? _kstrtoull+0x145/0x200 [ 1197.489610][T24896] ? __pfx__kstrtoull+0x10/0x10 [ 1197.489649][T24896] ? __pfx_aa_file_perm+0x10/0x10 [ 1197.489696][T24896] blkdev_read_iter+0x190/0x4d0 [ 1197.489742][T24896] do_iter_readv_writev+0x735/0x950 [ 1197.489776][T24896] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1197.489813][T24896] ? bpf_lsm_file_permission+0x9/0x10 [ 1197.489856][T24896] ? security_file_permission+0x71/0x210 [ 1197.489902][T24896] ? rw_verify_area+0xcf/0x680 [ 1197.489938][T24896] vfs_readv+0x4c5/0x8a0 [ 1197.489980][T24896] ? __pfx_vfs_readv+0x10/0x10 [ 1197.490044][T24896] ? __fget_files+0x20e/0x3c0 [ 1197.490090][T24896] ? do_readv+0x132/0x330 [ 1197.490122][T24896] do_readv+0x132/0x330 [ 1197.490156][T24896] ? __pfx_do_readv+0x10/0x10 [ 1197.490200][T24896] ? ksys_write+0x1b9/0x240 [ 1197.490237][T24896] ? __pfx_ksys_write+0x10/0x10 [ 1197.490273][T24896] ? rcu_is_watching+0x12/0xc0 [ 1197.490304][T24896] __x64_sys_preadv2+0x11f/0x160 [ 1197.490348][T24896] do_syscall_64+0xcd/0x260 [ 1197.490387][T24896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.490414][T24896] RIP: 0033:0x7f381cb8d169 [ 1197.490437][T24896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1197.490464][T24896] RSP: 002b:00007f381d9a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 1197.490490][T24896] RAX: ffffffffffffffda RBX: 00007f381cda6080 RCX: 00007f381cb8d169 [ 1197.490509][T24896] RDX: 0000000000000005 RSI: 0000200000001000 RDI: 0000000000000003 [ 1197.490526][T24896] RBP: 00007f381d9a8090 R08: 0000000000000007 R09: 000000000000002e [ 1197.490543][T24896] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1197.490561][T24896] R13: 0000000000000000 R14: 00007f381cda6080 R15: 00007ffff7acd118 [ 1197.490591][T24896] [ 1199.237828][T24927] bridge0: port 3(gretap0) entered blocking state [ 1199.245101][T24923] sp0: Synchronizing with TNC [ 1199.306539][T24927] bridge0: port 3(gretap0) entered disabled state [ 1199.313354][T24927] gretap0: entered allmulticast mode [ 1199.324877][T24927] gretap0: entered promiscuous mode [ 1199.334669][T24927] bridge0: port 3(gretap0) entered blocking state [ 1199.341307][T24927] bridge0: port 3(gretap0) entered forwarding state [ 1199.529914][T24923] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1200.193831][T24948] FAULT_INJECTION: forcing a failure. [ 1200.193831][T24948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1200.193895][T24948] CPU: 0 UID: 0 PID: 24948 Comm: syz.0.3869 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 1200.193941][T24948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1200.193960][T24948] Call Trace: [ 1200.193970][T24948] [ 1200.193982][T24948] dump_stack_lvl+0x16c/0x1f0 [ 1200.194026][T24948] should_fail_ex+0x512/0x640 [ 1200.194062][T24948] _copy_to_user+0x32/0xd0 [ 1200.194101][T24948] simple_read_from_buffer+0xe0/0x170 [ 1200.194144][T24948] proc_fail_nth_read+0x197/0x270 [ 1200.194185][T24948] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1200.194228][T24948] ? rw_verify_area+0xcf/0x680 [ 1200.194264][T24948] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1200.194305][T24948] vfs_read+0x1de/0xc70 [ 1200.194345][T24948] ? fdget_pos+0x2a2/0x370 [ 1200.194390][T24948] ? __pfx___mutex_lock+0x10/0x10 [ 1200.194430][T24948] ? __pfx_vfs_read+0x10/0x10 [ 1200.194476][T24948] ? __fget_files+0x20e/0x3c0 [ 1200.194527][T24948] ksys_read+0x12a/0x240 [ 1200.194566][T24948] ? __pfx_ksys_read+0x10/0x10 [ 1200.194604][T24948] ? rcu_is_watching+0x12/0xc0 [ 1200.194643][T24948] do_syscall_64+0xcd/0x260 [ 1200.194709][T24948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.194759][T24948] RIP: 0033:0x7f11da18bb7c [ 1200.194789][T24948] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1200.194821][T24948] RSP: 002b:00007f11daff8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1200.194850][T24948] RAX: ffffffffffffffda RBX: 00007f11da3a6080 RCX: 00007f11da18bb7c [ 1200.194871][T24948] RDX: 000000000000000f RSI: 00007f11daff80a0 RDI: 0000000000000004 [ 1200.194891][T24948] RBP: 00007f11daff8090 R08: 0000000000000000 R09: 000000000000002e [ 1200.194911][T24948] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1200.194931][T24948] R13: 0000000000000000 R14: 00007f11da3a6080 R15: 00007ffdeb6cd5d8 [ 1200.194972][T24948] [ 1200.915435][T24959] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3873'. [ 1201.092008][T24964] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 1201.766622][T24976] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3877'. [ 1202.271950][T24976] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3877'. [ 1202.313563][T24976] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3877'. [ 1202.340671][T24976] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3877'. [ 1202.367983][T24976] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3877'. [ 1202.397752][T24976] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3877'. [ 1202.423681][T24976] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3877'. [ 1202.443361][T24976] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3877'. [ 1202.479782][T24976] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3877'. [ 1203.215414][T24985] futex_wake_op: syz.9.3876 tries to shift op by 64; fix this program [ 1203.229464][T24935] kexec: Could not allocate control_code_buffer [ 1203.807627][T24996] FAULT_INJECTION: forcing a failure. [ 1203.807627][T24996] name failslab, interval 1, probability 0, space 0, times 0 [ 1203.876610][T24996] CPU: 1 UID: 0 PID: 24996 Comm: syz.9.3882 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 1203.876659][T24996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1203.876680][T24996] Call Trace: [ 1203.876691][T24996] [ 1203.876704][T24996] dump_stack_lvl+0x16c/0x1f0 [ 1203.876752][T24996] should_fail_ex+0x512/0x640 [ 1203.876785][T24996] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1203.876838][T24996] should_failslab+0xc2/0x120 [ 1203.876887][T24996] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1203.876931][T24996] ? __proc_create+0xc3/0x8c0 [ 1203.876964][T24996] ? __proc_create+0x2ce/0x8c0 [ 1203.876999][T24996] __proc_create+0x2ce/0x8c0 [ 1203.877033][T24996] ? __pfx___proc_create+0x10/0x10 [ 1203.877070][T24996] ? _raw_write_unlock+0x28/0x50 [ 1203.877106][T24996] ? proc_register+0x314/0x5f0 [ 1203.877141][T24996] proc_create_reg+0x7d/0x180 [ 1203.877179][T24996] proc_create_net_data+0x8e/0x1b0 [ 1203.877216][T24996] ? __pfx_proc_create_net_data+0x10/0x10 [ 1203.877251][T24996] ? __pfx_uevent_net_rcv+0x10/0x10 [ 1203.877306][T24996] ? __pfx_dev_proc_net_init+0x10/0x10 [ 1203.877338][T24996] dev_proc_net_init+0xf9/0x220 [ 1203.877380][T24996] ops_init+0x1df/0x5f0 [ 1203.877430][T24996] setup_net+0x21e/0x850 [ 1203.877479][T24996] ? __pfx_setup_net+0x10/0x10 [ 1203.877524][T24996] ? lockdep_init_map_type+0x5c/0x280 [ 1203.877570][T24996] ? __pfx_down_read_killable+0x10/0x10 [ 1203.877622][T24996] ? debug_mutex_init+0x37/0x70 [ 1203.877658][T24996] copy_net_ns+0x2a6/0x5f0 [ 1203.877689][T24996] create_new_namespaces+0x3ea/0xad0 [ 1203.877736][T24996] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1203.877780][T24996] ksys_unshare+0x45b/0xa40 [ 1203.877824][T24996] ? __pfx_ksys_unshare+0x10/0x10 [ 1203.877867][T24996] ? xfd_validate_state+0x5d/0x180 [ 1203.877900][T24996] ? rcu_is_watching+0x12/0xc0 [ 1203.877938][T24996] __x64_sys_unshare+0x31/0x40 [ 1203.877981][T24996] do_syscall_64+0xcd/0x260 [ 1203.878026][T24996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.878058][T24996] RIP: 0033:0x7f364198d169 [ 1203.878083][T24996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1203.878114][T24996] RSP: 002b:00007f36428d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1203.878146][T24996] RAX: ffffffffffffffda RBX: 00007f3641ba5fa0 RCX: 00007f364198d169 [ 1203.878168][T24996] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1203.878188][T24996] RBP: 00007f3641a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1203.878208][T24996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1203.878227][T24996] R13: 0000000000000000 R14: 00007f3641ba5fa0 R15: 00007ffe59e9acf8 [ 1203.878261][T24996] [ 1205.697184][T25046] [U]  [ 1205.700071][T25046] [U] [ 1205.702826][T25046] [U] [ 1205.705573][T25046] [U] [ 1205.766766][T25046] [U] [ 1205.769556][T25046] [U] [ 1205.772297][T25046] [U] [ 1205.775023][T25046] [U] [ 1205.789349][T25046] [U] [ 1205.792124][T25046] [U] [ 1205.794871][T25046] [U] [ 1205.797620][T25046] [U] [ 1205.842324][T25046] [U] [ 1205.845199][T25046] [U] [ 1205.847958][T25046] [U] [ 1205.850722][T25046] [U] [ 1205.854051][T25046] [U] [ 1205.856817][T25046] [U] [ 1205.859568][T25046] [U] [ 1205.862333][T25046] [U] [ 1205.875588][T25049] [U] [ 1207.164723][T25078] tipc: Started in network mode [ 1207.172928][T25078] tipc: Node identity ee00, cluster identity 4711 [ 1207.189027][T25078] tipc: Node number set to 60928 [ 1208.397970][T25103] sp0: Synchronizing with TNC [ 1208.573521][T25103] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1210.276756][T25128] Invalid ELF header magic: != ELF [ 1210.930940][T25143] Invalid ELF header magic: != ELF [ 1211.013006][T25143] Invalid ELF header magic: != ELF [ 1211.056217][T25143] Invalid ELF header magic: != ELF [ 1211.149909][T25143] Invalid ELF header magic: != ELF [ 1211.187456][T25143] Invalid ELF header magic: != ELF [ 1211.200356][T25143] Invalid ELF header magic: != ELF [ 1211.211313][T25143] Invalid ELF header magic: != ELF [ 1211.247367][T25143] Invalid ELF header magic: != ELF [ 1211.296603][T25143] Invalid ELF header magic: != ELF [ 1211.349081][T25143] Invalid ELF header magic: != ELF [ 1211.385762][T25153] Invalid ELF header magic: != ELF [ 1212.288664][T25174] sp0: Synchronizing with TNC [ 1212.400423][T25179] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1213.070468][T25194] FAULT_INJECTION: forcing a failure. [ 1213.070468][T25194] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.101517][T25194] CPU: 1 UID: 0 PID: 25194 Comm: syz.1.3932 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 1213.101563][T25194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1213.101582][T25194] Call Trace: [ 1213.101591][T25194] [ 1213.101602][T25194] dump_stack_lvl+0x16c/0x1f0 [ 1213.101636][T25194] should_fail_ex+0x512/0x640 [ 1213.101661][T25194] ? __kmalloc_noprof+0xbf/0x510 [ 1213.101696][T25194] ? __netlink_kernel_create+0x17f/0x750 [ 1213.101725][T25194] should_failslab+0xc2/0x120 [ 1213.101762][T25194] __kmalloc_noprof+0xd2/0x510 [ 1213.101798][T25194] __netlink_kernel_create+0x17f/0x750 [ 1213.101829][T25194] ? __pfx___netlink_kernel_create+0x10/0x10 [ 1213.101865][T25194] rtnetlink_net_init+0xb9/0x140 [ 1213.101900][T25194] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 1213.101926][T25194] ? lockdep_init_map_type+0x5c/0x280 [ 1213.101960][T25194] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 1213.101984][T25194] ? __pfx_rtnetlink_bind+0x10/0x10 [ 1213.102009][T25194] ? lockdep_init_map_type+0x5c/0x280 [ 1213.102043][T25194] ? debug_mutex_init+0x37/0x70 [ 1213.102067][T25194] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 1213.102092][T25194] ops_init+0x1df/0x5f0 [ 1213.102127][T25194] setup_net+0x21e/0x850 [ 1213.102162][T25194] ? __pfx_setup_net+0x10/0x10 [ 1213.102209][T25194] ? lockdep_init_map_type+0x5c/0x280 [ 1213.102242][T25194] ? __pfx_down_read_killable+0x10/0x10 [ 1213.102279][T25194] ? debug_mutex_init+0x37/0x70 [ 1213.102303][T25194] copy_net_ns+0x2a6/0x5f0 [ 1213.102326][T25194] create_new_namespaces+0x3ea/0xad0 [ 1213.102360][T25194] copy_namespaces+0x468/0x560 [ 1213.102389][T25194] copy_process+0x2b75/0x9130 [ 1213.102432][T25194] ? __pfx_copy_process+0x10/0x10 [ 1213.102460][T25194] ? __pfx___futex_wait+0x10/0x10 [ 1213.102509][T25194] kernel_clone+0xfc/0x960 [ 1213.102539][T25194] ? __pfx_kernel_clone+0x10/0x10 [ 1213.102579][T25194] __do_sys_clone+0xce/0x120 [ 1213.102609][T25194] ? __pfx___do_sys_clone+0x10/0x10 [ 1213.102648][T25194] ? rcu_is_watching+0x12/0xc0 [ 1213.102677][T25194] do_syscall_64+0xcd/0x260 [ 1213.102708][T25194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.102731][T25194] RIP: 0033:0x7f381cb8d169 [ 1213.102748][T25194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1213.102771][T25194] RSP: 002b:00007f381d9c8fe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1213.102793][T25194] RAX: ffffffffffffffda RBX: 00007f381cda5fa0 RCX: 00007f381cb8d169 [ 1213.102809][T25194] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000001432a0091 [ 1213.102823][T25194] RBP: 00007f381cc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1213.102837][T25194] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1213.102851][T25194] R13: 0000000000000000 R14: 00007f381cda5fa0 R15: 00007ffff7acd118 [ 1213.102875][T25194] [ 1213.486370][ T55] Bluetooth: hci3: unexpected subevent 0x01 length: 4 < 18 [ 1216.605638][T25238] sp0: Synchronizing with TNC [ 1216.755651][T25247] __nla_validate_parse: 1 callbacks suppressed [ 1216.755676][T25247] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3945'. [ 1217.102536][T25238] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1218.708087][T25264] FAULT_INJECTION: forcing a failure. [ 1218.708087][T25264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1218.748652][T25264] CPU: 1 UID: 0 PID: 25264 Comm: syz.3.3949 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 1218.748694][T25264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1218.748711][T25264] Call Trace: [ 1218.748720][T25264] [ 1218.748732][T25264] dump_stack_lvl+0x16c/0x1f0 [ 1218.748774][T25264] should_fail_ex+0x512/0x640 [ 1218.748812][T25264] _copy_to_user+0x32/0xd0 [ 1218.748849][T25264] simple_read_from_buffer+0xe0/0x170 [ 1218.748893][T25264] proc_fail_nth_read+0x197/0x270 [ 1218.748933][T25264] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1218.748974][T25264] ? rw_verify_area+0xcf/0x680 [ 1218.749008][T25264] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1218.749049][T25264] vfs_read+0x1de/0xc70 [ 1218.749089][T25264] ? fdget_pos+0x2a2/0x370 [ 1218.749134][T25264] ? __pfx___mutex_lock+0x10/0x10 [ 1218.749187][T25264] ? __pfx_vfs_read+0x10/0x10 [ 1218.749234][T25264] ? __fget_files+0x20e/0x3c0 [ 1218.749283][T25264] ksys_read+0x12a/0x240 [ 1218.749321][T25264] ? __pfx_ksys_read+0x10/0x10 [ 1218.749359][T25264] ? rcu_is_watching+0x12/0xc0 [ 1218.749395][T25264] do_syscall_64+0xcd/0x260 [ 1218.749438][T25264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.749469][T25264] RIP: 0033:0x7f740318bb7c [ 1218.749492][T25264] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1218.749523][T25264] RSP: 002b:00007f7403fbd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1218.749552][T25264] RAX: ffffffffffffffda RBX: 00007f74033a6080 RCX: 00007f740318bb7c [ 1218.749573][T25264] RDX: 000000000000000f RSI: 00007f7403fbd0a0 RDI: 0000000000000005 [ 1218.749592][T25264] RBP: 00007f7403fbd090 R08: 0000000000000000 R09: 0000000000000000 [ 1218.749610][T25264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1218.749630][T25264] R13: 0000000000000000 R14: 00007f74033a6080 R15: 00007ffe2ad62808 [ 1218.749665][T25264] [ 1219.745178][T25289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3955'. [ 1220.104503][T25290] netlink: 74 bytes leftover after parsing attributes in process `syz.9.3956'. [ 1220.115796][T25294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3957'. [ 1221.120348][T25306] ima: policy update failed [ 1221.125870][ T30] audit: type=1802 audit(4294967351.100:60): pid=25306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.9.3961" res=0 errno=0 [ 1221.329979][T25316] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3963'. [ 1221.792784][T25334] syz.9.3967: vmalloc error: size 4096, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1221.986996][T25334] CPU: 1 UID: 0 PID: 25334 Comm: syz.9.3967 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 1221.987040][T25334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1221.987059][T25334] Call Trace: [ 1221.987069][T25334] [ 1221.987081][T25334] dump_stack_lvl+0x16c/0x1f0 [ 1221.987128][T25334] warn_alloc+0x248/0x3a0 [ 1221.987174][T25334] ? __pfx_warn_alloc+0x10/0x10 [ 1221.987221][T25334] ? alloc_pages_mpol+0x25a/0x540 [ 1221.987273][T25334] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1221.987322][T25334] ? trace_kmalloc+0x2b/0xd0 [ 1221.987361][T25334] __vmalloc_node_range_noprof+0x12d2/0x1540 [ 1221.987412][T25334] ? kernel_clone+0xfc/0x960 [ 1221.987456][T25334] ? __memcg_slab_post_alloc_hook+0x4d0/0x940 [ 1221.987509][T25334] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1221.987556][T25334] ? trace_kmem_cache_alloc+0x28/0xc0 [ 1221.987588][T25334] ? kmem_cache_alloc_node_noprof+0x225/0x3b0 [ 1221.987638][T25334] ? kernel_clone+0xfc/0x960 [ 1221.987678][T25334] copy_process+0x3063/0x9130 [ 1221.987716][T25334] ? kernel_clone+0xfc/0x960 [ 1221.987755][T25334] ? find_held_lock+0x2b/0x80 [ 1221.987789][T25334] ? schedule+0x2d7/0x3a0 [ 1221.987825][T25334] ? futex_wait_queue+0x24/0x1f0 [ 1221.987870][T25334] ? schedule+0xf1/0x3a0 [ 1221.987909][T25334] ? futex_unqueue+0xba/0x140 [ 1221.987949][T25334] ? __pfx_copy_process+0x10/0x10 [ 1221.987995][T25334] ? __pfx___futex_wait+0x10/0x10 [ 1221.988040][T25334] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1221.988080][T25334] ? __pfx_futex_wake_mark+0x10/0x10 [ 1221.988140][T25334] kernel_clone+0xfc/0x960 [ 1221.988183][T25334] ? __pfx_kernel_clone+0x10/0x10 [ 1221.988239][T25334] __do_sys_clone+0xce/0x120 [ 1221.988281][T25334] ? __pfx___do_sys_clone+0x10/0x10 [ 1221.988337][T25334] ? rcu_is_watching+0x12/0xc0 [ 1221.988375][T25334] do_syscall_64+0xcd/0x260 [ 1221.988419][T25334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.988450][T25334] RIP: 0033:0x7f364198d169 [ 1221.988475][T25334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1221.988506][T25334] RSP: 002b:00007f364288dfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1221.988536][T25334] RAX: ffffffffffffffda RBX: 00007f3641ba6160 RCX: 00007f364198d169 [ 1221.988557][T25334] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040040000 [ 1221.988577][T25334] RBP: 00007f3641a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1221.988597][T25334] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1221.988616][T25334] R13: 0000000000000000 R14: 00007f3641ba6160 R15: 00007ffe59e9acf8 [ 1221.988650][T25334] [ 1222.286986][T25334] Mem-Info: [ 1222.290254][T25334] active_anon:38231 inactive_anon:1 isolated_anon:0 [ 1222.290254][T25334] active_file:8074 inactive_file:51748 isolated_file:0 [ 1222.290254][T25334] unevictable:768 dirty:117 writeback:155 [ 1222.290254][T25334] slab_reclaimable:12473 slab_unreclaimable:102255 [ 1222.290254][T25334] mapped:27471 shmem:19585 pagetables:1421 [ 1222.290254][T25334] sec_pagetables:0 bounce:0 [ 1222.290254][T25334] kernel_misc_reclaimable:0 [ 1222.290254][T25334] free:1278067 free_pcp:8074 free_cma:0 [ 1222.336155][T25334] Node 0 active_anon:155824kB inactive_anon:4kB active_file:31584kB inactive_file:206988kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:112848kB dirty:468kB writeback:620kB shmem:80688kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13248kB pagetables:5684kB sec_pagetables:0kB all_unreclaimable? no [ 1222.369087][T25334] Node 1 active_anon:0kB inactive_anon:0kB active_file:712kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136kB dirty:0kB writeback:0kB shmem:752kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1222.400106][T25334] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1222.427452][T25334] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1222.433537][T25334] Node 0 DMA32 free:1217704kB boost:0kB min:34392kB low:42988kB high:51584kB reserved_highatomic:0KB active_anon:158616kB inactive_anon:4kB active_file:31584kB inactive_file:206892kB unevictable:1536kB writepending:1088kB present:3129332kB managed:2547164kB mlocked:0kB bounce:0kB free_pcp:1276kB local_pcp:636kB free_cma:0kB [ 1222.526008][T25334] lowmem_reserve[]: 0 0 0 0 0 [ 1222.531097][T25334] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:96kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1222.557881][T25334] lowmem_reserve[]: 0 0 0 0 0 [ 1222.562796][T25334] Node 1 Normal free:3873852kB boost:0kB min:55508kB low:69384kB high:83260kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:712kB inactive_file:4kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:30376kB local_pcp:0kB free_cma:0kB [ 1222.598380][T25334] lowmem_reserve[]: 0 0 0 0 0 [ 1222.617901][T25334] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1222.718352][T25334] Node 0 DMA32: 815*4kB (UE) 652*8kB (UME) 527*16kB (UME) 1708*32kB (UME) 1835*64kB (UME) 1015*128kB (UME) 357*256kB (UME) 256*512kB (UME) 156*1024kB (UME) 11*2048kB (UME) 119*4096kB (UM) = 1211084kB [ 1222.807999][T25334] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1222.845064][T25334] Node 1 Normal: 114*4kB (UME) 182*8kB (UME) 213*16kB (UM) 348*32kB (UME) 345*64kB (UM) 57*128kB (UM) 27*256kB (UME) 21*512kB (UME) 13*1024kB (ME) 18*2048kB (UME) 918*4096kB (UM) = 3873800kB [ 1222.877535][T25334] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1222.908779][T25334] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1222.937201][T25334] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1222.948864][T25334] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1222.986947][T25334] 82861 total pagecache pages [ 1222.991697][T25334] 1 pages in swap cache [ 1222.995891][T25334] Free swap = 123804kB [ 1223.018438][T25334] Total swap = 124996kB [ 1223.022731][T25334] 2097051 pages RAM [ 1223.036694][T25334] 0 pages HighMem/MovableOnly [ 1223.041479][T25334] 428602 pages reserved [ 1223.045667][T25334] 0 pages cma reserved [ 1224.200188][T25361] vivid-003: ================= START STATUS ================= [ 1224.291964][T25361] vivid-003: Radio HW Seek Mode: Bounded [ 1224.325189][T25361] vivid-003: Radio Programmable HW Seek: false [ 1224.348475][T25361] vivid-003: RDS Rx I/O Mode: Block I/O [ 1224.381957][T25361] vivid-003: Generate RBDS Instead of RDS: false [ 1224.388516][T25361] vivid-003: RDS Reception: true [ 1224.425388][T25361] vivid-003: RDS Program Type: 0 inactive [ 1224.433312][T25361] vivid-003: RDS PS Name: inactive [ 1224.438693][T25361] vivid-003: RDS Radio Text: inactive [ 1224.461497][T25361] vivid-003: RDS Traffic Announcement: false inactive [ 1224.508624][T25361] vivid-003: RDS Traffic Program: false inactive [ 1224.537894][T25361] vivid-003: RDS Music: false inactive [ 1224.548982][T25361] vivid-003: ================== END STATUS ================== [ 1239.464358][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.470902][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.586130][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.592593][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.708415][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.714777][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1380.180504][ T31] INFO: task kworker/u8:6:2912 blocked for more than 143 seconds. [ 1380.188380][ T31] Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 [ 1380.195799][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1380.204580][ T31] task:kworker/u8:6 state:D stack:24552 pid:2912 tgid:2912 ppid:2 task_flags:0x4248060 flags:0x00004000 [ 1380.216953][ T31] Workqueue: writeback wb_workfn (flush-8:0) [ 1380.223750][ T31] Call Trace: [ 1380.227083][ T31] [ 1380.230099][ T31] __schedule+0x1129/0x5c00 [ 1380.234839][ T31] ? blk_mq_flush_plug_list+0x75a/0x1c70 [ 1380.243822][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 1380.248857][ T31] ? __pfx___schedule+0x10/0x10 [ 1380.254765][ T31] ? __blk_flush_plug+0x2f3/0x4b0 [ 1380.263414][ T31] ? find_held_lock+0x2b/0x80 [ 1380.268185][ T31] ? schedule+0x2d7/0x3a0 [ 1380.273791][ T31] schedule+0xe7/0x3a0 [ 1380.277955][ T31] io_schedule+0xbf/0x130 [ 1380.286874][ T31] folio_wait_bit_common+0x3d8/0x9c0 [ 1380.292947][ T31] ? folio_wait_bit_common+0x138/0x9c0 [ 1380.298487][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1380.304485][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 1380.310128][ T31] ? __pfx___might_resched+0x10/0x10 [ 1380.315530][ T31] ? kasan_save_track+0x14/0x30 [ 1380.320491][ T31] ? __kasan_slab_alloc+0x89/0x90 [ 1380.325567][ T31] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 1380.331342][ T31] mpage_prepare_extent_to_map+0xa0f/0x1460 [ 1380.337331][ T31] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 1380.343775][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 1380.349244][ T31] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 1380.354937][ T31] ? ext4_init_io_end+0x24/0x170 [ 1380.359992][ T31] ext4_do_writepages+0x966/0x3360 [ 1380.365196][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 1380.370250][ T31] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1380.375871][ T31] ? ext4_writepages+0x302/0x730 [ 1380.380972][ T31] ext4_writepages+0x302/0x730 [ 1380.385801][ T31] ? __pfx_ext4_writepages+0x10/0x10 [ 1380.391224][ T31] ? wb_update_bandwidth+0xa7/0xe0 [ 1380.396430][ T31] ? ieee802_11_parse_elems_full+0x1d7/0x3780 [ 1380.402598][ T31] ? __pfx_ext4_writepages+0x10/0x10 [ 1380.407960][ T31] do_writepages+0x1b2/0x820 [ 1380.412742][ T31] ? __pfx_do_writepages+0x10/0x10 [ 1380.417895][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 1380.422957][ T31] ? reacquire_held_locks+0xcd/0x1f0 [ 1380.428331][ T31] __writeback_single_inode+0x160/0xfb0 [ 1380.433904][ T31] ? __pfx___writeback_single_inode+0x10/0x10 [ 1380.440059][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 1380.445315][ T31] writeback_sb_inodes+0x601/0xf90 [ 1380.450509][ T31] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1380.456209][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1380.461177][ T31] ? move_expired_inodes+0x5a0/0x850 [ 1380.466523][ T31] __writeback_inodes_wb+0xf8/0x2d0 [ 1380.471804][ T31] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 1380.477657][ T31] ? queue_io+0x3f6/0x520 [ 1380.482133][ T31] wb_writeback+0x7f3/0xb70 [ 1380.486715][ T31] ? __pfx_wb_writeback+0x10/0x10 [ 1380.491826][ T31] ? get_nr_dirty_inodes+0x170/0x1e0 [ 1380.497162][ T31] wb_workfn+0x748/0xbe0 [ 1380.501516][ T31] ? try_to_wake_up+0x157/0x1680 [ 1380.506527][ T31] ? __pfx_wb_workfn+0x10/0x10 [ 1380.511452][ T31] ? rcu_is_watching+0x12/0xc0 [ 1380.516263][ T31] process_one_work+0x9cc/0x1b70 [ 1380.521316][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1380.526845][ T31] ? assign_work+0x1a0/0x250 [ 1380.531553][ T31] worker_thread+0x6c1/0xef0 [ 1380.536210][ T31] ? __kthread_parkme+0x148/0x220 [ 1380.541363][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1380.546535][ T31] kthread+0x3a4/0x760 [ 1380.550714][ T31] ? __pfx_kthread+0x10/0x10 [ 1380.555363][ T31] ? __pfx_kthread+0x10/0x10 [ 1380.560052][ T31] ? __pfx_kthread+0x10/0x10 [ 1380.564704][ T31] ? __pfx_kthread+0x10/0x10 [ 1380.569570][ T31] ? rcu_is_watching+0x12/0xc0 [ 1380.574504][ T31] ? __pfx_kthread+0x10/0x10 [ 1380.579201][ T31] ret_from_fork+0x45/0x80 [ 1380.583652][ T31] ? __pfx_kthread+0x10/0x10 [ 1380.588321][ T31] ret_from_fork_asm+0x1a/0x30 [ 1380.593155][ T31] [ 1380.596225][ T31] INFO: task jbd2/sda1-8:5172 blocked for more than 143 seconds. [ 1380.604066][ T31] Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 [ 1380.611423][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1380.620185][ T31] task:jbd2/sda1-8 state:D stack:26968 pid:5172 tgid:5172 ppid:2 task_flags:0x240040 flags:0x00004000 [ 1380.632271][ T31] Call Trace: [ 1380.635577][ T31] [ 1380.638611][ T31] __schedule+0x1129/0x5c00 [ 1380.643181][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 1380.648255][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 1380.653241][ T31] ? __pfx___schedule+0x10/0x10 [ 1380.658347][ T31] ? find_held_lock+0x2b/0x80 [ 1380.663187][ T31] ? schedule+0x2d7/0x3a0 [ 1380.667666][ T31] schedule+0xe7/0x3a0 [ 1380.671818][ T31] io_schedule+0xbf/0x130 [ 1380.676184][ T31] bit_wait_io+0x15/0xe0 [ 1380.680538][ T31] __wait_on_bit+0x62/0x180 [ 1380.685125][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 1380.690171][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 1380.695600][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 1380.701672][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 1380.707221][ T31] ? __pfx___might_resched+0x10/0x10 [ 1380.712553][ T31] __wait_on_buffer+0x64/0x70 [ 1380.717346][ T31] jbd2_journal_commit_transaction+0x382c/0x6890 [ 1380.723768][ T31] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 1380.730644][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1380.736552][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 1380.742266][ T31] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1380.748339][ T31] ? find_held_lock+0x2b/0x80 [ 1380.753076][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1380.758976][ T31] ? rcu_is_watching+0x12/0xc0 [ 1380.763809][ T31] kjournald2+0x1f4/0x760 [ 1380.768283][ T31] ? __pfx_kjournald2+0x10/0x10 [ 1380.773208][ T31] ? find_held_lock+0x2b/0x80 [ 1380.778037][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1380.784167][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1380.789479][ T31] ? __kthread_parkme+0x148/0x220 [ 1380.794588][ T31] ? __pfx_kjournald2+0x10/0x10 [ 1380.799551][ T31] kthread+0x3a4/0x760 [ 1380.803679][ T31] ? __pfx_kthread+0x10/0x10 [ 1380.808434][ T31] ? __pfx_kthread+0x10/0x10 [ 1380.813086][ T31] ? __pfx_kthread+0x10/0x10 [ 1380.817790][ T31] ? __pfx_kthread+0x10/0x10 [ 1380.822439][ T31] ? rcu_is_watching+0x12/0xc0 [ 1380.827316][ T31] ? __pfx_kthread+0x10/0x10 [ 1380.831970][ T31] ret_from_fork+0x45/0x80 [ 1380.836482][ T31] ? __pfx_kthread+0x10/0x10 [ 1380.841135][ T31] ret_from_fork_asm+0x1a/0x30 [ 1380.846008][ T31] [ 1380.849081][ T31] INFO: task syz-executor:5822 blocked for more than 144 seconds. [ 1380.856965][ T31] Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 [ 1380.864294][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1380.873059][ T31] task:syz-executor state:D stack:23312 pid:5822 tgid:5822 ppid:5820 task_flags:0x440100 flags:0x00000002 [ 1380.885106][ T31] Call Trace: [ 1380.888502][ T31] [ 1380.891465][ T31] __schedule+0x1129/0x5c00 [ 1380.896073][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 1380.901125][ T31] ? __pfx___schedule+0x10/0x10 [ 1380.906077][ T31] ? find_held_lock+0x2b/0x80 [ 1380.910816][ T31] ? schedule+0x2d7/0x3a0 [ 1380.915230][ T31] schedule+0xe7/0x3a0 [ 1380.919509][ T31] io_schedule+0xbf/0x130 [ 1380.923899][ T31] bit_wait_io+0x15/0xe0 [ 1380.928291][ T31] __wait_on_bit+0x62/0x180 [ 1380.932849][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 1380.937937][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 1380.943364][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 1380.949425][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 1380.954938][ T31] do_get_write_access+0x93d/0x12a0 [ 1380.960240][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 1380.966345][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 1380.972475][ T31] ext4_reserve_inode_write+0x13b/0x270 [ 1380.978266][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 1380.983792][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 1380.989266][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 1380.995350][ T31] ? rcu_is_watching+0x12/0xc0 [ 1381.000174][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 1381.005896][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 1381.011141][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 1381.016869][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 1381.022559][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 1381.027608][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1381.033082][ T31] ext4_dirty_inode+0xd9/0x130 [ 1381.037979][ T31] ? rcu_is_watching+0x12/0xc0 [ 1381.042801][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 1381.048133][ T31] generic_update_time+0xcf/0xf0 [ 1381.053119][ T31] file_update_time+0x17d/0x1c0 [ 1381.058178][ T31] ext4_page_mkwrite+0x367/0x1760 [ 1381.063274][ T31] ? __pfx_tcp_recvmsg+0x10/0x10 [ 1381.068323][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 1381.073849][ T31] ? vm_normal_page+0x13b/0x2b0 [ 1381.078787][ T31] ? find_held_lock+0x2b/0x80 [ 1381.083532][ T31] ? find_held_lock+0x2b/0x80 [ 1381.088289][ T31] do_page_mkwrite+0x177/0x380 [ 1381.093124][ T31] do_wp_page+0xc47/0x4820 [ 1381.097631][ T31] ? __pfx_do_wp_page+0x10/0x10 [ 1381.102552][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 1381.107692][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1381.113153][ T31] ? ___pte_offset_map+0x1bc/0x540 [ 1381.118379][ T31] __handle_mm_fault+0x1ae0/0x2a50 [ 1381.123552][ T31] ? lock_vma_under_rcu+0x13d/0x980 [ 1381.128865][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 1381.134453][ T31] ? lock_vma_under_rcu+0x6b7/0x980 [ 1381.139807][ T31] handle_mm_fault+0x3fa/0xaa0 [ 1381.144683][ T31] do_user_addr_fault+0x609/0x1430 [ 1381.149868][ T31] exc_page_fault+0x5c/0xc0 [ 1381.154463][ T31] asm_exc_page_fault+0x26/0x30 [ 1381.159371][ T31] RIP: 0033:0x7fe4f9e765ef [ 1381.163826][ T31] RSP: 002b:00007ffd87e760d0 EFLAGS: 00010202 [ 1381.170012][ T31] RAX: 00007fe4f8ef0000 RBX: 000055556deb4d70 RCX: 0000000000000004 [ 1381.178070][ T31] RDX: 1ffffffff0430274 RSI: 000055556deb4d58 RDI: 0000000000000010 [ 1381.186144][ T31] RBP: 00007ffd87e763c0 R08: 000055556deb4d60 R09: 000000000000204e [ 1381.194216][ T31] R10: 0000000000000001 R11: 00007ffd87e765d0 R12: 00007ffd87e76420 [ 1381.202225][ T31] R13: 0000000000000004 R14: 00007ffd87e76140 R15: 00007ffd87e76210 [ 1381.210383][ T31] [ 1381.213504][ T31] INFO: task syz.0.3971:25349 blocked for more than 144 seconds. [ 1381.221328][ T31] Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 [ 1381.228681][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1381.237435][ T31] task:syz.0.3971 state:D stack:29192 pid:25349 tgid:25347 ppid:15339 task_flags:0x400040 flags:0x00000004 [ 1381.249482][ T31] Call Trace: [ 1381.252771][ T31] [ 1381.255790][ T31] __schedule+0x1129/0x5c00 [ 1381.260343][ T31] ? rcu_is_watching+0x12/0xc0 [ 1381.265203][ T31] ? finish_task_switch.isra.0+0x221/0xc10 [ 1381.271053][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1381.276360][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 1381.281357][ T31] ? __pfx___schedule+0x10/0x10 [ 1381.286369][ T31] ? find_held_lock+0x2b/0x80 [ 1381.291107][ T31] ? schedule+0x2d7/0x3a0 [ 1381.295564][ T31] schedule+0xe7/0x3a0 [ 1381.299687][ T31] io_schedule+0xbf/0x130 [ 1381.304095][ T31] folio_wait_bit_common+0x3d8/0x9c0 [ 1381.309405][ T31] ? folio_wait_bit_common+0x138/0x9c0 [ 1381.314966][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1381.320821][ T31] ? filemap_get_folios_tag+0x46a/0xae0 [ 1381.326471][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 1381.332083][ T31] folio_wait_writeback+0x3c/0x90 [ 1381.337247][ T31] __filemap_fdatawait_range+0x11f/0x200 [ 1381.342944][ T31] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 1381.349243][ T31] file_write_and_wait_range+0x101/0x140 [ 1381.354970][ T31] ext4_sync_file+0x282/0xed0 [ 1381.359675][ T31] ? __pfx___up_read+0x10/0x10 [ 1381.364548][ T31] ? __pfx_ext4_sync_file+0x10/0x10 [ 1381.369799][ T31] vfs_fsync_range+0x136/0x220 [ 1381.374656][ T31] __do_sys_msync+0x3d1/0x5c0 [ 1381.379399][ T31] do_syscall_64+0xcd/0x260 [ 1381.384001][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.389947][ T31] RIP: 0033:0x7f11da18d169 [ 1381.394468][ T31] RSP: 002b:00007f11daff8038 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 1381.402936][ T31] RAX: ffffffffffffffda RBX: 00007f11da3a6080 RCX: 00007f11da18d169 [ 1381.411045][ T31] RDX: 0000000000000006 RSI: 0000002000000005 RDI: 0000000000000000 [ 1381.419123][ T31] RBP: 00007f11da20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1381.427180][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1381.435240][ T31] R13: 0000000000000000 R14: 00007f11da3a6080 R15: 00007ffdeb6cd5d8 [ 1381.443374][ T31] [ 1381.446443][ T31] INFO: task syz.1.3975:25368 blocked for more than 144 seconds. [ 1381.454414][ T31] Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 [ 1381.461732][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1381.470476][ T31] task:syz.1.3975 state:D stack:26584 pid:25368 tgid:25368 ppid:20145 task_flags:0x440040 flags:0x00004004 [ 1381.482535][ T31] Call Trace: [ 1381.485858][ T31] [ 1381.488820][ T31] __schedule+0x1129/0x5c00 [ 1381.493398][ T31] ? find_held_lock+0x2b/0x80 [ 1381.498125][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 1381.503184][ T31] ? __pfx___schedule+0x10/0x10 [ 1381.508100][ T31] ? find_held_lock+0x2b/0x80 [ 1381.512869][ T31] ? schedule+0x2d7/0x3a0 [ 1381.517270][ T31] schedule+0xe7/0x3a0 [ 1381.521381][ T31] io_schedule+0xbf/0x130 [ 1381.525801][ T31] bit_wait_io+0x15/0xe0 [ 1381.530093][ T31] __wait_on_bit+0x62/0x180 [ 1381.534670][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 1381.539657][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 1381.545137][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 1381.551166][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 1381.556743][ T31] do_get_write_access+0x93d/0x12a0 [ 1381.562010][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 1381.568115][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 1381.574288][ T31] ext4_reserve_inode_write+0x13b/0x270 [ 1381.579892][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 1381.585460][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 1381.590872][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 1381.596952][ T31] ? rcu_is_watching+0x12/0xc0 [ 1381.601759][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 1381.607487][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 1381.612875][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 1381.618577][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 1381.624305][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 1381.629298][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1381.634764][ T31] ext4_dirty_inode+0xd9/0x130 [ 1381.639585][ T31] ? rcu_is_watching+0x12/0xc0 [ 1381.644463][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 1381.649536][ T31] generic_update_time+0xcf/0xf0 [ 1381.654567][ T31] file_update_time+0x17d/0x1c0 [ 1381.659493][ T31] ext4_page_mkwrite+0x367/0x1760 [ 1381.664644][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 1381.670178][ T31] do_page_mkwrite+0x177/0x380 [ 1381.675058][ T31] do_pte_missing+0x29c/0x3ea0 [ 1381.679884][ T31] ? __handle_mm_fault+0x1016/0x2a50 [ 1381.685350][ T31] __handle_mm_fault+0x1043/0x2a50 [ 1381.690529][ T31] ? lock_vma_under_rcu+0x13d/0x980 [ 1381.695843][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 1381.701467][ T31] ? lock_vma_under_rcu+0x6b7/0x980 [ 1381.706771][ T31] handle_mm_fault+0x3fa/0xaa0 [ 1381.711643][ T31] do_user_addr_fault+0x609/0x1430 [ 1381.716817][ T31] exc_page_fault+0x5c/0xc0 [ 1381.721426][ T31] asm_exc_page_fault+0x26/0x30 [ 1381.726347][ T31] RIP: 0033:0x7f381ca6d2fa [ 1381.730797][ T31] RSP: 002b:00007ffff7acd1a0 EFLAGS: 00010202 [ 1381.736953][ T31] RAX: 0000001b2e6f5000 RBX: 00007f381d8d5720 RCX: 0000001b2e6f4ff8 [ 1381.745008][ T31] RDX: 0000001b2e320220 RSI: 0000000000000008 RDI: 00007f381d8d5720 [ 1381.753083][ T31] RBP: ffffffff82056220 R08: 00007f381cda6038 R09: 00007f381cd92000 [ 1381.761236][ T31] R10: 00007f381c1ff008 R11: 0000000000000016 R12: 0000000000000016 [ 1381.769232][ T31] R13: 000000000000047e R14: ffffffff82056922 R15: 0000000000031609 [ 1381.777294][ T31] ? finish_fault+0xc22/0x1120 [ 1381.782172][ T31] ? finish_fault+0x520/0x1120 [ 1381.786994][ T31] [ 1381.790029][ T31] INFO: task syz.9.3974:25371 blocked for more than 144 seconds. [ 1381.797826][ T31] Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 [ 1381.805186][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1381.813920][ T31] task:syz.9.3974 state:D stack:28344 pid:25371 tgid:25370 ppid:19940 task_flags:0x440040 flags:0x00000004 [ 1381.826016][ T31] Call Trace: [ 1381.829328][ T31] [ 1381.832365][ T31] __schedule+0x1129/0x5c00 [ 1381.836933][ T31] ? check_path.constprop.0+0x24/0x50 [ 1381.842418][ T31] ? blk_mq_flush_plug_list+0x75a/0x1c70 [ 1381.848113][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 1381.853181][ T31] ? __pfx___schedule+0x10/0x10 [ 1381.858078][ T31] ? __blk_flush_plug+0x2f3/0x4b0 [ 1381.863189][ T31] ? find_held_lock+0x2b/0x80 [ 1381.867912][ T31] ? schedule+0x2d7/0x3a0 [ 1381.872354][ T31] schedule+0xe7/0x3a0 [ 1381.876478][ T31] io_schedule+0xbf/0x130 [ 1381.880922][ T31] folio_wait_bit_common+0x3d8/0x9c0 [ 1381.886257][ T31] ? folio_wait_bit_common+0x138/0x9c0 [ 1381.891809][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1381.897728][ T31] ? filemap_get_folios_tag+0x46a/0xae0 [ 1381.903371][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 1381.908973][ T31] folio_wait_writeback+0x3c/0x90 [ 1381.914334][ T31] mpage_prepare_extent_to_map+0x535/0x1460 [ 1381.920354][ T31] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 1381.926775][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 1381.932228][ T31] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 1381.937935][ T31] ? ext4_init_io_end+0x24/0x170 [ 1381.943025][ T31] ext4_do_writepages+0x966/0x3360 [ 1381.948205][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 1381.953243][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.959370][ T31] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1381.965071][ T31] ? ext4_writepages+0x302/0x730 [ 1381.970119][ T31] ext4_writepages+0x302/0x730 [ 1381.974949][ T31] ? __pfx_ext4_writepages+0x10/0x10 [ 1381.980362][ T31] ? __pfx_ext4_writepages+0x10/0x10 [ 1381.985702][ T31] do_writepages+0x1b2/0x820 [ 1381.990413][ T31] ? __pfx_do_writepages+0x10/0x10 [ 1381.995573][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 1382.000751][ T31] ? find_held_lock+0x2b/0x80 [ 1382.005481][ T31] ? wbc_attach_fdatawrite_inode+0x13a/0x190 [ 1382.011557][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 1382.016808][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1382.021780][ T31] filemap_fdatawrite_wbc+0x104/0x160 [ 1382.027204][ T31] __filemap_fdatawrite_range+0xb2/0xf0 [ 1382.032848][ T31] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1382.039173][ T31] ? __pfx___might_resched+0x10/0x10 [ 1382.044550][ T31] file_write_and_wait_range+0xca/0x140 [ 1382.050211][ T31] ext4_sync_file+0x282/0xed0 [ 1382.054972][ T31] ? __pfx___up_read+0x10/0x10 [ 1382.059865][ T31] ? __pfx_ext4_sync_file+0x10/0x10 [ 1382.065130][ T31] vfs_fsync_range+0x136/0x220 [ 1382.070006][ T31] __do_sys_msync+0x3d1/0x5c0 [ 1382.074749][ T31] do_syscall_64+0xcd/0x260 [ 1382.079282][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1382.085534][ T31] RIP: 0033:0x7f364198d169 [ 1382.090135][ T31] RSP: 002b:00007f36428d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 1382.098645][ T31] RAX: ffffffffffffffda RBX: 00007f3641ba5fa0 RCX: 00007f364198d169 [ 1382.106731][ T31] RDX: 0000000400000004 RSI: 0180000000000000 RDI: 000000001ffff000 [ 1382.114804][ T31] RBP: 00007f3641a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1382.123596][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1382.131693][ T31] R13: 0000000000000000 R14: 00007f3641ba5fa0 R15: 00007ffe59e9acf8 [ 1382.139863][ T31] [ 1382.142957][ T31] INFO: task syz.9.3974:25372 blocked for more than 145 seconds. [ 1382.150795][ T31] Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 [ 1382.158109][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1382.166863][ T31] task:syz.9.3974 state:D stack:28264 pid:25372 tgid:25370 ppid:19940 task_flags:0x440040 flags:0x00000004 [ 1382.179074][ T31] Call Trace: [ 1382.182403][ T31] [ 1382.185367][ T31] __schedule+0x1129/0x5c00 [ 1382.189966][ T31] ? blk_mq_flush_plug_list+0x75a/0x1c70 [ 1382.195663][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 1382.200705][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 1382.205700][ T31] ? __pfx___schedule+0x10/0x10 [ 1382.210693][ T31] ? __blk_flush_plug+0x2f3/0x4b0 [ 1382.215772][ T31] ? find_held_lock+0x2b/0x80 [ 1382.220530][ T31] ? schedule+0x2d7/0x3a0 [ 1382.224910][ T31] schedule+0xe7/0x3a0 [ 1382.229124][ T31] io_schedule+0xbf/0x130 [ 1382.233503][ T31] folio_wait_bit_common+0x3d8/0x9c0 [ 1382.238899][ T31] ? folio_wait_bit_common+0x138/0x9c0 [ 1382.244419][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1382.250344][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 1382.255957][ T31] ? __pfx___might_resched+0x10/0x10 [ 1382.261350][ T31] ? kasan_save_track+0x14/0x30 [ 1382.266272][ T31] ? __kasan_slab_alloc+0x89/0x90 [ 1382.271407][ T31] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 1382.277100][ T31] mpage_prepare_extent_to_map+0xa0f/0x1460 [ 1382.283123][ T31] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 1382.289585][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 1382.295013][ T31] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 1382.300849][ T31] ? ext4_init_io_end+0x24/0x170 [ 1382.305876][ T31] ext4_do_writepages+0x966/0x3360 [ 1382.311100][ T31] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1382.316718][ T31] ? ext4_writepages+0x302/0x730 [ 1382.321846][ T31] ext4_writepages+0x302/0x730 [ 1382.326672][ T31] ? __pfx_ext4_writepages+0x10/0x10 [ 1382.332086][ T31] ? __pfx_ext4_writepages+0x10/0x10 [ 1382.337432][ T31] do_writepages+0x1b2/0x820 [ 1382.342152][ T31] ? __pfx_do_writepages+0x10/0x10 [ 1382.347313][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 1382.352448][ T31] ? find_held_lock+0x2b/0x80 [ 1382.357202][ T31] ? wbc_attach_fdatawrite_inode+0x13a/0x190 [ 1382.363299][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 1382.368596][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1382.373492][ T31] filemap_fdatawrite_wbc+0x104/0x160 [ 1382.378969][ T31] __filemap_fdatawrite_range+0xb2/0xf0 [ 1382.384589][ T31] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1382.391617][ T31] ? __pfx___might_resched+0x10/0x10 [ 1382.397127][ T31] file_write_and_wait_range+0xca/0x140 [ 1382.403124][ T31] ext4_sync_file+0x282/0xed0 [ 1382.409763][ T31] ? __pfx___up_read+0x10/0x10 [ 1382.414634][ T31] ? __pfx_ext4_sync_file+0x10/0x10 [ 1382.419997][ T31] vfs_fsync_range+0x136/0x220 [ 1382.424822][ T31] __do_sys_msync+0x3d1/0x5c0 [ 1382.429653][ T31] do_syscall_64+0xcd/0x260 [ 1382.434210][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1382.440188][ T31] RIP: 0033:0x7f364198d169 [ 1382.444633][ T31] RSP: 002b:00007f36428af038 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 1382.453213][ T31] RAX: ffffffffffffffda RBX: 00007f3641ba6080 RCX: 00007f364198d169 [ 1382.461253][ T31] RDX: 0000000400000004 RSI: 0180000000000000 RDI: 000000001ffff000 [ 1382.469287][ T31] RBP: 00007f3641a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1382.477298][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1382.485380][ T31] R13: 0000000000000001 R14: 00007f3641ba6080 R15: 00007ffe59e9acf8 [ 1382.493429][ T31] [ 1382.496489][ T31] [ 1382.496489][ T31] Showing all locks held in the system: [ 1382.504349][ T31] 1 lock held by khungtaskd/31: [ 1382.509278][ T31] #0: ffffffff8e1be0c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1382.519316][ T31] 4 locks held by kworker/u8:6/2912: [ 1382.524633][ T31] #0: ffff8881412ec948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1382.535514][ T31] #1: ffffc9000bf0fd18 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1382.547572][ T31] #2: ffff88814ed760e0 (&type->s_umount_key#31){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 [ 1382.558310][ T31] #3: ffff88814ed78b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x1b2/0x820 [ 1382.568786][ T31] 3 locks held by syz-executor/5822: [ 1382.574108][ T31] #0: ffff88802f0f0220 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x13d/0x980 [ 1382.584484][ T31] #1: ffff88814ed76518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x177/0x380 [ 1382.594125][ T31] #2: ffff88814ed7a950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1480 [ 1382.603853][ T31] 2 locks held by getty/23308: [ 1382.608714][ T31] #0: ffff88803511a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1382.618606][ T31] #1: ffffc900045fb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfa1/0x1450 [ 1382.629825][ T31] 3 locks held by syz.1.3975/25368: [ 1382.635067][ T31] #0: ffff88808228b658 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x13d/0x980 [ 1382.645665][ T31] #1: ffff88814ed76518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x177/0x380 [ 1382.655646][ T31] #2: ffff88814ed7a950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1480 [ 1382.665992][ T31] 1 lock held by syz.9.3974/25371: [ 1382.671436][ T31] #0: ffff88814ed78b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x1b2/0x820 [ 1382.681906][ T31] 1 lock held by syz.9.3974/25372: [ 1382.687121][ T31] #0: ffff88814ed78b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x1b2/0x820 [ 1382.698560][ T31] [ 1382.700954][ T31] ============================================= [ 1382.700954][ T31] [ 1382.709961][ T31] NMI backtrace for cpu 0 [ 1382.709982][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 1382.710018][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1382.710037][ T31] Call Trace: [ 1382.710044][ T31] [ 1382.710056][ T31] dump_stack_lvl+0x116/0x1f0 [ 1382.710107][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1382.710136][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1382.710166][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1382.710198][ T31] watchdog+0xf70/0x12c0 [ 1382.710244][ T31] ? __pfx_watchdog+0x10/0x10 [ 1382.710284][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1382.710318][ T31] ? __kthread_parkme+0x148/0x220 [ 1382.710359][ T31] ? __pfx_watchdog+0x10/0x10 [ 1382.710402][ T31] kthread+0x3a4/0x760 [ 1382.710448][ T31] ? __pfx_kthread+0x10/0x10 [ 1382.710490][ T31] ? __pfx_kthread+0x10/0x10 [ 1382.710535][ T31] ? __pfx_kthread+0x10/0x10 [ 1382.710578][ T31] ? __pfx_kthread+0x10/0x10 [ 1382.710623][ T31] ? rcu_is_watching+0x12/0xc0 [ 1382.710654][ T31] ? __pfx_kthread+0x10/0x10 [ 1382.710696][ T31] ret_from_fork+0x45/0x80 [ 1382.710723][ T31] ? __pfx_kthread+0x10/0x10 [ 1382.710770][ T31] ret_from_fork_asm+0x1a/0x30 [ 1382.710825][ T31] [ 1382.710838][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1382.844749][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x1a/0x20 [ 1382.848194][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1382.848223][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 1382.848266][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1382.848288][ T31] Call Trace: [ 1382.848300][ T31] [ 1382.848314][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1382.848363][ T31] panic+0x71c/0x800 [ 1382.848415][ T31] ? __pfx_panic+0x10/0x10 [ 1382.848463][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1382.848521][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1382.848553][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1382.848607][ T31] ? watchdog+0xdda/0x12c0 [ 1382.848653][ T31] ? watchdog+0xdcd/0x12c0 [ 1382.848703][ T31] watchdog+0xdeb/0x12c0 [ 1382.848754][ T31] ? __pfx_watchdog+0x10/0x10 [ 1382.848808][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1382.848850][ T31] ? __kthread_parkme+0x148/0x220 [ 1382.848896][ T31] ? __pfx_watchdog+0x10/0x10 [ 1382.848943][ T31] kthread+0x3a4/0x760 [ 1382.848993][ T31] ? __pfx_kthread+0x10/0x10 [ 1382.849041][ T31] ? __pfx_kthread+0x10/0x10 [ 1382.849090][ T31] ? __pfx_kthread+0x10/0x10 [ 1382.849139][ T31] ? __pfx_kthread+0x10/0x10 [ 1382.849188][ T31] ? rcu_is_watching+0x12/0xc0 [ 1382.849223][ T31] ? __pfx_kthread+0x10/0x10 [ 1382.849292][ T31] ret_from_fork+0x45/0x80 [ 1382.849323][ T31] ? __pfx_kthread+0x10/0x10 [ 1382.849375][ T31] ret_from_fork_asm+0x1a/0x30 [ 1382.849434][ T31] [ 1382.999066][ T31] Kernel Offset: disabled [ 1383.003403][ T31] Rebooting in 86400 seconds..