last executing test programs: 14m34.747347435s ago: executing program 32 (id=207): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x0, 0x80000000fffffffd, 0xfbc, 0x0, 0x0, 0x0, 0x4, 0xa17, 0x0, 0x2000000000000005, 0x7fffffff, 0x9, 0xffffffff80000000, 0x5, 0x61, 0x9}) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) migrate_pages$auto(0x0, 0x99, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/lockd/parameters/nlm_tcpport\x00', 0xc2481, 0x0) r0 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000007940), 0x2, 0x0) read$auto_ptdump_fops_(r0, &(0x7f0000007980)=""/80, 0x50) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xff, 0x400, 0x1, 0xebe, 0x1272, 0x8001) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x100, 0x0) socketpair$auto(0x8, 0x2, 0x8000000000000000, 0x0) timer_create$auto(0x9, 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) write$auto(0xffffffffffffffff, &(0x7f0000000080)='\x00\x00s\xa6\xc2\x1d\a\r\x05`\xa6\xfef\xa3\x00\x00q,h\xa2\x99;\xd9S\xbb\x81\xaa2\xa4oJ\x15\xd0\xc8\'h\x8d\x9f&\xc7\xde\xb3\x03\x8eB\x9e%h\xf4\xa5\xfdt{\x82t\xc9\xf9\xf8\xe6\xee}`\xd9\xd8\n\xee\x7f\xbb\x04\x17\xca\x1f~\xaf<\xe7f[*\x02\t\x8f\'t\xbe\xd1\x94\x17\x82\x9c\xb2\xb7\xda\xb0\xc1s\xbeR\x82\x14\xe3Oi\xda3V\t\xe3\xa4d@\xe9\x823P\x9cS\xb3\xe5nz\x99?\xb8\xcb\xcd\x88)\xf9:\x16UB\x15\x1a9\xe05%{X\x1a\\-\xad\xce\x91;\f\xc6\xf43\xcd\x92N\xf9\x97\xcf\x8d\xd1l\xfb\x9d\xa8 \xf3\x99+\x0f\x9eX\xc4\x8a\xf3\x86\x8b \xe6j\xa1\x0e\xf7\xf7\x12\r\xcc\xf2m\xf5\x84\x9b\xf5\rp\x8c\xc9X\xd6u0\xd2\x97f|\b\x17\'F\x1b\xb9\xe9f\xfbo\x9d\xb2\xc0\x8b|j\x00;\xb6\xee\xeb<#`\xa34\"cD\xcd\xea\a\b\xb2o\x93\xbd\xdc\xd4\xe7\xfaca\xf3\x9eW\xf2\xc9\x8e\xeb^^T\x8d\xf3\tk\x03\xacs\xd0!\xbd\xc3G\x8f\xdf\xc9\xa0\xca\xeb\xc22;GH\xdf \x91\x88\x99\xf8m\xa2\x1e\x81\xfd\x82\x9a\x92\x97\x1f\xb8^\x9eF\x18\xcas\x9a\xeaED\x19\xfb\xd3\x94|4\xfc\xb0\x7fx$\xc7\xb2\x9cW\xc0\xdd\x16\x16\xaf\xb2@\x81:\x99\xf8\x8b\xe9!\xd2X\xf1~\xbb\x13', 0x100400a3db) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x28020400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range$auto(0x2, 0x8000, 0x0) r1 = socket(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), r1) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="95e949de049449e4d1027d72c35bcb9576e398449b9407aa128d40ac6835cda063e0176a5aeb1b0b17e538be4296c951d53d17890a71717c10d66f88feac3738bf70ef5bba4c17bcf6ba78f7bd8d891528b36487e5214f5e85d469c56acab1cf80c3fe6423c6", @ANYRES16=r3, @ANYBLOB="1b0026bd7000fddbdf250300000044000380400001803c000680380074802f00a800f2590793f5641c4a4c098b2227df3f92974991f9bef60ea66e7f9c8071652809cf796be6f543274e8d8c7d00040003000400038004000280"], 0x60}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) openat$auto_short_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy13/short_retry_limit\x00', 0x80001, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video46\x00', 0x600400, 0x0) 11m11.0273664s ago: executing program 1 (id=664): mmap$auto(0x0, 0xffffffffffffffff, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24040044) r0 = userfaultfd$auto(0x1) unshare$auto(0x40000080) r1 = openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/netdevsim/netdevsim2/fib/nexthop_bucket_activity\x00', 0x6c01, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/nfs/exports\x00', 0x400, 0x0) pread64$auto(r2, 0x0, 0x1ff, 0x8800000000) r3 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80a40, 0x9e) read$auto(r3, 0x0, 0x8004000000) write$auto(r1, 0x0, 0x6) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r0) socket(0x22, 0x1, 0xe) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/softnet_stat\x00', 0xa2000, 0x0) mmap$auto(0x0, 0x2020009, 0x403, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x140, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1e3281, 0x19a) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) fchmod$auto(r4, 0xa) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) read$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffffff, &(0x7f00000001c0)=""/185, 0xb9) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1000004, 0x1, 0x8000000000000000, 0x0) sendmsg$auto_L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b4c, 0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8654092f478cae21, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00'}) 11m9.773095214s ago: executing program 1 (id=668): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0x2, 0xa, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x20301, 0x0) ioctl$auto_UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000280)={0xb8e, 0x3, {0x5, 0xe3, 0x2, {0x5, 0x3}, {0x80, 0x6}, @ramp={0x9, 0xf18f, {0x9, 0x10, 0x1, 0xfffe}}}, {0xffff, 0x2, 0x5, {0xc8}, {0xfff, 0xb4b8}, @constant={0x0, {0x4, 0x400, 0x3, 0x9}}}}) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpgid$auto(0xffffffffffffffff) r3 = getpid() tgkill$auto(r2, r3, 0xf) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x800000000000000, 0x40000e, 0x5, 0x1c, 0x2, 0x8000) close_range$auto(0x2, r1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0xa0801, 0x0) socketcall$auto(0x8000, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x0, 0x21, 0x0, 0x28) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r6, 0x4008ae89, &(0x7f0000000380)={0xdd, 0x0, [{0x40000002, 0x9, 0x3b0}]}) madvise$auto(0x108000, 0x800032, 0x4) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r4) sendmsg$auto_NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x104, r8, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x80}, @NL80211_ATTR_PREV_BSSID={0xe7, 0x4f, "4c7cc0dc3227825f4fd0d9dc1135cc52788a2f4da5c31dbe4f35943192d9a841339768887988fdf751a20fa841bcc768af573f9030a24310a7317ad374b61e6649fd6ac2408817e42077548c262ebe77eb8ef6bbc6d2c73de37baf76ddf9f0244fed5a705ad248f75a64f83382882cf47c6e8db967e568c239a7c0f1aea64f39363ff4799294a5d65379715f0c5f4fcea3a58c295f9d2b1f6671b84789f0f4d33d7bb143db54079a4e2aae1a6fd3bb19c4f04391bd85ff29e4656464059cae8cfc58b2ac47cd27d619ec35eb660ec0aff478b8ce05434c34e4adb638b7e1a4f14b6396"}]}, 0x104}, 0x1, 0x0, 0x0, 0xc0}, 0x6) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 11m2.936244609s ago: executing program 1 (id=683): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x4) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x7}, 0x3) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0c\x00', 0x140, 0x0) 11m0.552455352s ago: executing program 1 (id=689): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup\x00', 0x2, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000040)="8c9700089d1b208365d5b5d112dbab029ed13881d2f2c7ba2eb01c3db79f77fdc2bb50c64a925009dff4cd1aca925c57100112d88f73348a54396800ed598a0e5500d7c0cbb6b1e91d", 0x40000000001243}, 0x4, 0x0) ioctl$auto(r0, 0x400454ca, 0x38) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd4\x00', 0x745100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) ioctl$auto_RTC_EPOCH_SET(r3, 0x4008700e, &(0x7f00000001c0)=0x9) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400b, r4, [], {0x6, 0x6, 0x8c4a, 0x29a, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x24, 0xfe000000, 0x1, 0x3}}) r5 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x10800, 0x0) writev$auto(r5, &(0x7f0000000bc0)={0x0, 0x81}, 0x3) r6 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$auto_vhci_fops_hci_vhci(r6, &(0x7f0000000d40)=""/16, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x64c1, 0x8000001f, 0x8, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x80000000, 0x9) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) 10m58.201518957s ago: executing program 1 (id=695): lseek$auto(0xffffffffffffffff, 0x7fd, 0x6) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001400)='ns/mnt\x00') ioctl$NS_GET_PARENT(r0, 0x8008b705, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3000000, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000280)={&(0x7f0000000340), 0x40000000001243}, 0xa, 0x0) select$auto(0xa, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x4, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x6, 0x7ffffffffffffffb, 0x7, 0x2, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) ioctl$auto(0x3, 0x40a04580, 0x10000000000402) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000040), 0xc0800, 0x0) 10m56.616837231s ago: executing program 1 (id=699): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0xf2) getpgid$auto(0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) unshare$auto(0x40000080) close_range$auto(r1, r0, 0x4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/geneve0/disable_policy\x00', 0x40180, 0x0) close_range$auto(0x2, 0x8, 0x0) semctl$auto(0xa, 0x2, 0x13, 0xde) r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) r3 = socket(0x11, 0xa, 0x9) bind$auto(r3, 0x0, 0x9) mmap$auto(0x0, 0x20014, 0x7, 0xeb1, 0x404, 0xf) sendmsg$auto_OVS_FLOW_CMD_SET(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf7, 0xb0, @raw=0xffeff026}}) 10m41.275213626s ago: executing program 33 (id=699): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0xf2) getpgid$auto(0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) unshare$auto(0x40000080) close_range$auto(r1, r0, 0x4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/geneve0/disable_policy\x00', 0x40180, 0x0) close_range$auto(0x2, 0x8, 0x0) semctl$auto(0xa, 0x2, 0x13, 0xde) r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) r3 = socket(0x11, 0xa, 0x9) bind$auto(r3, 0x0, 0x9) mmap$auto(0x0, 0x20014, 0x7, 0xeb1, 0x404, 0xf) sendmsg$auto_OVS_FLOW_CMD_SET(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf7, 0xb0, @raw=0xffeff026}}) 2m27.16660012s ago: executing program 4 (id=2212): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0xa0801, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socketcall$auto(0x8000, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x40000118, 0x400, 0x100000000002}]}) sysfs$auto(0x2, 0x1d, 0x0) r5 = fsopen$auto(0x0, 0x1) fsconfig$auto(r5, 0x8, 0x0, 0x0, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) listmount$auto(&(0x7f0000000080)={0x1f, @raw, 0x80000024, 0xfffffffffffffff7, 0x8}, 0x0, 0x0, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_LINK_RESET_STATS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003e00)={&(0x7f0000000800)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYRESHEX=r3], 0x20}, 0x1, 0x0, 0x0, 0xc025}, 0x2004810) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$auto(r0, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) read$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0xa, 0x5, 0x84) r9 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000180), r8) sendmsg$auto_NLBL_CIPSOV4_C_LISTALL(r8, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="b0030000", @ANYRES16=r9, @ANYBLOB="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", @ANYRES32, @ANYRES64=r6], 0x3b0}}, 0x20000081) sendmsg$auto_NLBL_CIPSOV4_C_LIST(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4b1c4e8953c95a83835459edc1178883bdf35ee206d41588b8b2ed4485809a2842ca46ff7379e3c01b9ddcfa1902d400116776495368ff887f5975c53c96e5f5a5a21d655a237873648c2d747a7039f080f9", @ANYRES16=r9, @ANYBLOB="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", @ANYRES8=r1], 0x330}, 0x1, 0x0, 0x0, 0x4000}, 0x20008080) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 2m26.693666231s ago: executing program 4 (id=2214): mmap$auto(0x0, 0x4, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x6ad00, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) exit$auto(0x80000001) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPATH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xa}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xfd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) io_uring_setup$auto(0x2, 0x0) socket(0x10, 0x2, 0x0) socket(0x2, 0x3, 0x2) socket(0x2, 0x3, 0x104) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) bind$auto(0x3, 0x0, 0x6b) connect$auto(0x3, 0x0, 0x54) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) 2m25.705552367s ago: executing program 4 (id=2217): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto_nsim_psample_enable_fops_psample(r0, 0x0, 0x0) unshare$auto(0x1) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x10000000001, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0xffffffffffffffff, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r2 = prctl$auto(0x1000000003b, 0x4, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14dfa7800000a2d4bb000900", @ANYRESHEX, @ANYBLOB="0100317500000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x801) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x25edc2, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) mq_timedsend$auto(r4, &(0x7f0000000280)='/dev/kvm\x00', 0xb4, 0x8, &(0x7f0000000200)={0x7, 0xffffffffffffffff}) pread64$auto(r4, &(0x7f0000000240)='\x03W\x96\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@', 0x100000002, 0x100000001) mmap$auto(0x2, 0x40009, 0x9, 0x8000000017, r2, 0x2) madvise$auto(0x41a9, 0xc, 0x9) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r5, 0x1261, 0x0) msgctl$auto_MSG_INFO(0x4b, 0xc, &(0x7f00000000c0)={{0x1, 0xee01, 0xee00, 0x80, 0xc, 0x7, 0x38}, 0x0, 0x0, 0x40, 0x56, 0x5, 0xf8, 0x8, 0x1, 0x0, 0x5, @raw=0x401}) prctl$auto(0x1, 0x8, 0x0, 0x3a, 0x1) 2m24.194833944s ago: executing program 4 (id=2223): r0 = socket(0x15, 0x5, 0x0) mmap$auto(0x105, 0x36, 0xdf, 0x9b72, 0x7, 0x800008002) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_CQM(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f00000017c0)={0x40, r2, 0x181, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_BEACON_HEAD={0x29, 0xe, "8bfa17e0acc74ae55238c615d33bc7e1444386f103d4609366980c7c4195f5f93304cab47a"}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c815}, 0x40000) r4 = getsockopt$auto(r1, 0x102, 0x11, &(0x7f0000000180)='\'\x8f\x93S\xb2\xa1\x01J\x0e\x81P\a\x97RM\xd0\x10\xe5\xea\x84\'\xee@\x9b1\xc2Ud\xfdh+\xe8\xe2d\x9b\xcc\xd9\x80\x11\x85fO\x8eU\x06\x92\xea6\x03uO<\xbb\xd5\x83\x1b\x85\xe5\x11\xe7\x94\xa7\xf1\xb1\x86\xf0h\xc6A\x98\x8f\xbe@\xb3s\xbdy\fOi$\xc1+\xf8\xb4\x84U\x134O&\xf1\xa1\x93\xf8', &(0x7f0000000040)=0x6) r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r0) statx$auto(r4, &(0x7f0000000200)='./file0\x00', 0x33, 0x0, &(0x7f0000000240)={0x3, 0xfe3f, 0x3, 0x5, 0xffffffffffffffff, 0xee00, 0x7, 0x7, 0x7fff, 0x7ff, 0x0, 0x7, {0x2, 0x7fff}, {0x36, 0x2}, {0x100000000, 0xfffffffc}, {0x94, 0x5}, 0x3, 0x101, 0xa33, 0x4, 0xcbc2, 0x7, 0xffffff80, 0x91, 0x8, 0x83, 0x5, 0x2, [0x6, 0x4a8352c5, 0x7, 0xb, 0x5, 0x1, 0xa, 0x240, 0xa4]}) r7 = getegid() setfsgid$auto(r7) shmctl$auto_IPC_SET(0x6cec, 0x1, &(0x7f0000000540)={{0xc28, r6, r7, 0x8, 0x7fffffff, 0xc87, 0x9}, 0x3, 0x9, 0x0, 0x7, @raw, @raw=0xb4, 0x8, 0x0, &(0x7f0000000340)="477fd5df7d2bc61988b1386c90102933534d6309b7cc20e37b3e64df23b0f8f43f687d87a3176571d3b0bc9a5f119cf0b286bc83815d94917dc0d87474a3df2345d110b82d22be89dfa1fc38aa68ae6a3302e3273822b7fceb69373704575ad80cbf5f07c621ff33185132cae46af5dc5087228e53856a6a6c4277e1e065dc67f0d1b7385bb68bafa13bd365886ad6e7f62f24ba26e5ead359af32f930468181d1a13c0a46319882cb1fcaf3c4a0ac83e7fae5aaaaa141157bf1d7e7609230bc3705c2", &(0x7f0000000440)="566d1ef27a294e8df2a6e54ffe26b8aef299d2c6c9d5ae5f2776b8bc5906af0648c0306d4468fcbb4271d4e5bd042148df20a0a2a2b979421fbfc6caeafb0b428d5aadfd72347bac7c013986c33962db82c2f2b47ca6af4cff30d44cb57eede9d3d7b6e4dd61d2e95b7540dedf5be904130166b2355866d9b480b0200b984d9d72b9f68050e135c6c237eb1cdd20205d6e357006c177f9708fd09786dc75a4283e1fe98e1876c98765a128f309cbe6d4dacfe2852437faefd9a8a74a40f15c80c08de07ce44ec0a6082072d734e5fff176308db3a19011a6f60761f6ca572a9ea20c71359b2ae1e3d2"}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000004", @ANYRES16=r5, @ANYBLOB="10002dbd7000fcdbdf250a0000000800010006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x80) brk$auto(0x1) 2m24.05789215s ago: executing program 4 (id=2224): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = memfd_create$auto(0x0, 0xe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000000)='//\xf2\x00', 0x80000000) r3 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x420000, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r3, 0xc0403d11, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x40000000, 0x5, 0x100000003, 0x14, r3, 0x8000) r4 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mem\x00', 0x402, 0x0) sendfile$auto(0xffffffffffffffff, r4, &(0x7f0000001300)=0xfffffffefffffffb, 0x9) madvise$auto(0x0, 0x2003f2, 0x15) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x101780, 0x0) ioctl$auto_VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$auto_VHOST_SET_VRING_CALL(r5, 0x4008af21, &(0x7f0000002600)) setresuid$auto(0xffffffffffffffff, 0xeffffffeffffffff, 0xd2) madvise$auto(0x0, 0x200007, 0x1d) pwrite64$auto(0xc8, 0x0, 0xfded, 0x6) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r6, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffG\a\xfb\\n\x89C:\x84D\x1d\xea\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4G\x0f\xed\xc0D\xd6\xaf%\xa5\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\x00\x10\x00\x00\x00\x00\x00\x00E\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xccT\fZq\xf6\xd5\xf8.\xee\xd5\x98\xbb\x0e\xe3\xee\xda\xc3hu6\xdf\x99\x13V|\xb7+\xfe\xfa+\xf0\x8f\xff\x86nIc\xab\x15\x93\xd6\x02\xad]\x9e\xe5\x84k\xaf~\x85\xc2s\x8b%\x97/\xa8\x9a?\x8f6\xa8\xcc]\xc0#k\x8evD\xfd\xb2\x87\xdb*\xf1\xb9C\x19@\x8b\xc8\xda\xdf\xecc\x9d\xc1\x992j\a\x19\xe1\xf3\xff\xf4E\xf3\xa95\x19\x95\xbcu\x96qC\xf1\xe4\xf0\xedM+\xc3\xdc\xc4K\xa0L\x9c\xe6\x11\xfe\xaa\x88\x00PV\x92\x88\xc5r\xf1\x99[\x1a`\xb0vzQ\xc8\xef0\xc8\xb9\x84\xe1\x9dFJ\x83\xc8\v', 0x3ff) ioctl$auto_SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, &(0x7f0000000080)=0xbc) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) ioctl$auto(r1, 0xffff, r5) socket(0x29, 0x5, 0x0) open(&(0x7f0000000040)='./cgroup\x00', 0x80, 0x110) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) setresuid$auto(0x0, 0x0, 0x0) 2m21.332244277s ago: executing program 4 (id=2233): r0 = socket(0x22, 0x1, 0xe) move_pages$auto(0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) (async) mmap$auto(0x7, 0x20004, 0x1ff, 0x2eb1, r0, 0x200000000008000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x25}}, 0x54) (async) unshare$auto(0x40000080) (async) mmap$auto(0xfffffffffffffffe, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) waitid$auto(0x8, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)={{0xfffffffffffffff9, 0x80}, {0x2, 0x6}, 0x4, 0x5, 0x1, 0x3, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0x2055}) mmap$auto(0x2, 0x400008, 0xdf, 0x9b72, 0x2, 0x10000000008000) (async) r1 = set_tid_address$auto(&(0x7f0000000040)=0xc8) prctl$auto(0x6c8f, 0x1, r1, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) socket(0xa, 0x5, 0x0) (async) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) recvmmsg$auto(0x3, 0x0, 0x7c559d78, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) pread64$auto(0xffffffffffffffff, 0x0, 0x200000000003, 0x2f4a3a23) (async) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) writev$auto(r2, &(0x7f0000000300)={&(0x7f0000000200), 0x200}, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x2c402, 0x0) (async) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0) sendfile$auto(r4, r3, 0x0, 0x10000) (async) close_range$auto(0x2, 0x8, 0x0) (async) semctl$auto_GETNCNT(0x0, 0x4, 0xe, 0x4) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/nfs/parameters/nfs_mountpoint_expiry_timeout\x00', 0xa001, 0x0) write$auto(r5, &(0x7f0000000080)='0\x00\\\xa0\xe2\xff\xaa8nr\xec\x13Dy\xe9\xd2-\xec\xb7F\x92\x05\x1e\xfa\x1c\x80\xc2);\x11\xfemdV\x9cc\x8e\x88A\xb7(\xcc\x04\xff;k\xa5\x1b=yYp4-\x89\x189\xba<\x83\xee\xc4&-\x81\xa8\x98\xaf\xaac\x06g\x84\x9e\x9f\x00\x00\x00\x00\xfed\xfdvT,', 0x81) 2m6.084612797s ago: executing program 34 (id=2233): r0 = socket(0x22, 0x1, 0xe) move_pages$auto(0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) (async) mmap$auto(0x7, 0x20004, 0x1ff, 0x2eb1, r0, 0x200000000008000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x25}}, 0x54) (async) unshare$auto(0x40000080) (async) mmap$auto(0xfffffffffffffffe, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) waitid$auto(0x8, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)={{0xfffffffffffffff9, 0x80}, {0x2, 0x6}, 0x4, 0x5, 0x1, 0x3, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0x2055}) mmap$auto(0x2, 0x400008, 0xdf, 0x9b72, 0x2, 0x10000000008000) (async) r1 = set_tid_address$auto(&(0x7f0000000040)=0xc8) prctl$auto(0x6c8f, 0x1, r1, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) socket(0xa, 0x5, 0x0) (async) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) recvmmsg$auto(0x3, 0x0, 0x7c559d78, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) pread64$auto(0xffffffffffffffff, 0x0, 0x200000000003, 0x2f4a3a23) (async) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) writev$auto(r2, &(0x7f0000000300)={&(0x7f0000000200), 0x200}, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x2c402, 0x0) (async) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0) sendfile$auto(r4, r3, 0x0, 0x10000) (async) close_range$auto(0x2, 0x8, 0x0) (async) semctl$auto_GETNCNT(0x0, 0x4, 0xe, 0x4) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/nfs/parameters/nfs_mountpoint_expiry_timeout\x00', 0xa001, 0x0) write$auto(r5, &(0x7f0000000080)='0\x00\\\xa0\xe2\xff\xaa8nr\xec\x13Dy\xe9\xd2-\xec\xb7F\x92\x05\x1e\xfa\x1c\x80\xc2);\x11\xfemdV\x9cc\x8e\x88A\xb7(\xcc\x04\xff;k\xa5\x1b=yYp4-\x89\x189\xba<\x83\xee\xc4&-\x81\xa8\x98\xaf\xaac\x06g\x84\x9e\x9f\x00\x00\x00\x00\xfed\xfdvT,', 0x81) 1m54.216678789s ago: executing program 2 (id=2350): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/rds/tcp/rds_tcp_rcvbuf\x00', 0x141241, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004881}, 0x800) (async) r1 = set_tid_address$auto(0x0) syz_open_procfs$namespace(r1, &(0x7f0000000080)) (async) shmctl$auto(0x0, 0xc, &(0x7f0000000180)={{0x7, 0x0, 0xee01, 0x4, 0xa, 0x140, 0xfff9}, 0x3, 0x80d, 0x3fc, 0x6, @inferred=r1, @inferred, 0x1, 0x0, 0x0, 0x0}) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027"], 0x1ac}}, 0x40000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x3498c2, 0x0) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$auto_KVM_GET_SUPPORTED_HV_CPUID(r3, 0xc008aec1, &(0x7f0000000040)={0x7ff}) ioctl$auto(0x3, 0xae41, r3) (async) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x40, 0x0, [{0x10, 0xe3, 0xb8}]}) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x7fff, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x40007}, 0x3, 0x0) 1m54.024124704s ago: executing program 2 (id=2352): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) read$auto_uinput_fops_uinput(r0, 0x0, 0x0) mmap$auto(0x0, 0x5, 0x3, 0x10, r0, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x7ffffffffffffff8, 0x1, 0x800000000000eb2, 0xfffffffffffffffa, 0x7ffe) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv6/neigh/veth0_to_bridge/unres_qlen_bytes\x00', 0x0, 0x0) socket(0x1, 0x6, 0x0) socket(0x10, 0x2, 0x0) sysfs$auto(0x2, 0x40, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socketpair$auto(0x5b, 0x2, 0x80, 0x0) sendmmsg$auto(r1, &(0x7f0000000100)={{&(0x7f0000000180)="67d25dd61aaff0d769648299f5e29b2f6ce2c5ce75f57c3db692d36e5f4bc00236754bbc54e98c7457bd81c18bfd975251c0e92132833433ba235bdc3c51ab1dae7b4c978ca480d3be9ea5146f442c6c311ed227b2ae0eb1687b4371d21c86adcb5b361161237419bc1c234f3992deaf97b0a731f80dc0aebdeb5f64155e574e0a25f847c9ee3056f10c5d17", 0x81, &(0x7f00000000c0)={&(0x7f0000000280)="7726db32124277616207896a374d56e74e068c818ccef59a8d9055f35fe0d4a5a82b99db89638a85feda76e8d194727629ce212495bd99250b16907978af65890f22fa129e17cf1e4ee003a34bda438d40d3c4e8feb51956619b3ab3b3963f87382a870f3a1dbce0d514118e31d0c406a66ec77b78f7d43282a2ea3019b89aba1e02c8fc3d99ab8c56efb00572c4cc66df3d07bbed615d61194d5b5c500f8e5c24467fe018c8734bec3cd5178a52cd5b8b9d91f01e47c6775f4b22f4e0f064dbde0a3730d92ee6ce9c79c04f1f391c3d0a", 0x800}, 0x8, &(0x7f0000000380)="aae75e7e3b2a17e6939fd0bb54cc32428972e7602d7d54ad45ea00f28d59b78135b5ee4007ea333daf80f39f980e1cc63a5e2b0dd9e5e906f441556903de7c0d6b8723e0fbf6f0a796ed296cd4e692", 0x4, 0x82f79f72}, 0x8000}, 0x8, 0x8) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(r3, 0x4020ae46, r3) sendmsg$auto_OVS_VPORT_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4100}, 0x20000000) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x1c12c2, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000d, 0x3, 0xeb1, 0x404, 0x100010008000) io_uring_setup$auto(0x1, 0x0) pipe$auto(0x0) select$auto(0x9, 0x0, 0x0, &(0x7f0000000440)={[0xfffffffffffffffd, 0x20b, 0xa, 0x4, 0x948b, 0x3, 0x15f4da0a, 0x100000002, 0xffffffffffffffff, 0x9, 0x80000001, 0x7, 0x2, 0x93, 0x6, 0x2]}, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYBLOB='j\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1m52.995905848s ago: executing program 2 (id=2357): socket(0x2, 0x1, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000100), 0x401, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) close_range$auto(0x2, 0xa, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0xfc, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x12c}, @NL802154_ATTR_SEC_LEVEL={0xe0, 0x2d, 0x0, 0x1, [@nested={0xc5, 0xc8, 0x0, 0x1, [@nested={0x4, 0x54}, @generic="9ad9b167f7a912e0f4b130f09b4a0d4e9329190f6bfabf21e00d9e0e6dac1c274649f9dc5067b857d80112dfd2f69754f98e662a16991b088ed19efb3f07c4037a186f68a581c982e25681e7589713a70f11606ed0d33960b2fff7cee645ab0cb08c1b36800f9d8b6a9f3c9c32a40b207fcdaf8572559aad68b5e45adfc413283c7269638259c4c5f4d0a8fad3b0627b96b6c41167ff22a3974fb4ab87ecec6bcba509815b79516126a9d715f73231e386c4385343b5c52873", @typed={0x4, 0x10a}]}, @typed={0x8, 0xaa, 0x0, 0x0, @ipv4=@broadcast}, @nested={0xc, 0x127, 0x0, 0x1, [@typed={0x8, 0x23, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x20}}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x2000c800}, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = fsmount$auto(r1, 0x1, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) r3 = socket(0x10, 0x2, 0x4) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02368008027a8087010c800800e800", @ANYRES32=r3, @ANYBLOB="0800fb"], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) read$auto(0x3, 0x0, 0x80) 1m52.662628518s ago: executing program 2 (id=2358): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x7, 0x7fffffff, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) (async) write$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) write$auto(0x3, 0x0, 0x100082) (rerun: 32) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) (async) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) (async) lseek$auto(0x3, 0x2, 0x4) (async) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) (async, rerun: 32) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x142, 0x0) (rerun: 32) read$auto(r2, 0x0, 0x4) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/fail-nth\x00', 0x518001, 0x0) (async, rerun: 64) unshare$auto(0x2006c000000) (async, rerun: 64) ioctl$auto_NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) (async) setuid$auto(0xe) (async, rerun: 32) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) (async, rerun: 32) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000000)={0x7, 0xf2, 0xad, @raw=0x7}}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r4) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (rerun: 64) 1m51.207716625s ago: executing program 2 (id=2364): mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x63c1, 0x7fb) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) epoll_ctl$auto(r0, 0xce, r0, &(0x7f0000001080)={0x1, 0x4}) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) mmap$auto(0x0, 0x2, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) capset$auto(0x0, 0x0) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) mmap$auto(0x0, 0x2, 0x800000df, 0x9b72, 0xffffffffffffffff, 0x8000) adjtimex$auto(0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{0x4b564d04, 0x10, 0x1}]}) r4 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000001000), r4) ioctl$auto_XFS_IOC_FREESP(r4, 0x4030580b, &(0x7f0000001040)={0x6, 0x8001, 0x8000000000000001, 0x800, 0x8, 0x0}) statmount$auto(&(0x7f00000010c0)={0x9, @inferred=r4, 0xfffffffffffffff7, 0x3, 0x200}, &(0x7f0000001100)={0x1ff, 0x101, 0x5, 0x100, 0x1, 0x3, 0x0, 0x3, 0x9, 0x7, 0x0, 0x8, 0x5, 0x1, 0x7, 0x7ff, 0x1, 0x80000000, 0x1, 0x22, 0x9, 0x100, 0x5e9, 0xffffff00, 0x1, 0x8, 0x7, 0x7ff, 0x189, 0xe09, 0x5, [0x6214, 0x86, 0xffff, 0xc72, 0xfffffffffffffffc, 0x3, 0x4, 0x8000, 0x0, 0x2, 0x401, 0xf, 0xfff, 0x8, 0x1, 0x5, 0x3, 0x400, 0x2, 0x400, 0x0, 0x8, 0x2, 0xfff, 0x8000, 0x800, 0xfffffffffffffff9, 0x0, 0xfffffffffffffffd, 0xf, 0x9, 0x7, 0x4, 0x0, 0x9, 0x6, 0x2, 0x1, 0x3d, 0xa7e9, 0x1, 0xffffffffffffcffd, 0xd005], "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"}, 0x4, 0x5) r6 = prctl$auto(0x41, 0x40, r5, 0x0, 0x0) mprotect$auto(0x110c238000, 0x1, 0x3) madvise$auto(0x110c230000, 0x8031ca, 0x9) write$auto_snd_pcm_f_ops_pcm(r6, &(0x7f0000000000)="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", 0x1000) mknod$auto(&(0x7f0000000340)='\xe1\x9eHU\x00', 0x63c1, 0x7ff) r7 = openat$auto__dev_ioctl_fops_dev_ioctl(0xffffffffffffff9c, &(0x7f0000000880), 0x80c01, 0x0) ioctl$auto_FIONREAD(r7, 0x541b, 0x2) 1m49.865046208s ago: executing program 2 (id=2370): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) (async) mmap$auto(0x0, 0x400007, 0x6, 0x80000011, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40800, 0x0) (async) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) (async) timer_create$auto(0x9, 0x0, 0x0) (async) read$auto(0x3, 0x0, 0x8080) (async) socket(0xa, 0x1, 0x100) (async) write$auto(0x3, 0x0, 0xffd8) (async) unshare$auto(0x40000080) (async) arch_prctl$auto(0x1024, 0xfffffffffffffffb) (async) shmctl$auto_IPC_SET(0x4, 0x1, &(0x7f0000000280)={{0x80, 0xee00, 0xee00, 0xca6d, 0x8, 0x4bd6, 0x5}, 0xd21, 0x5, 0x8000000000000000, 0x1, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000140)="4f0d6995e943b6bc1919e836e1a6e889b4881e233d3b51e066bb0a054c9e474be535fd29", &(0x7f0000000200)="e3ac9b01ee8d985b677531eeeee5cb5bf774d2df4d9ae6dccbc98def20b72c7c2826a585ba3a8d67815abade214708a4ade77c6faa2f2889ca3e7989f32645dd597a3ae1b46e8d8c7e03ae6b8aaa49f6bf64cc5fa9"}) fsconfig$auto(r0, 0x800, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_abort_count\x00', 0x0, r1) (async) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11691c13403c82be", 0x7b) process_mrelease$auto(0xffffffffffffffff, 0xa) (async) mmap$auto(0x0, 0x40000b, 0xde, 0x9b72, 0xffffffffffffffff, 0x8000) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) (async) write$auto(r2, &(0x7f0000000440)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xcc\x80\x00\x00\x00\x00\x00\x00\x01\xca\xd36\xe8a=|\xc7\xc0\xa5\x8a\xe8\x84\xb9c\xc4Q\x9d\x8f\xb9\xedt\x9d\a\xd3\xb5:N\x8d\xb6\xfe^\xdd\xe0\x8f\x1bf_f\xb2\xf4\xf1\x9e\xe1a\xd0\xcb\xee{\xf8\x88U\xe3\x12t\b\x13\xc9\x8a\x9be,\x04\'\x14\xc420\x9a\xdf\xd7\xcax{`\xfc\xd0\xa4w\xdd\x9c\xa1\xb0\x01\x9c(\xe1h\xb6\x9dS\x8f\xedJ\x83\xd6m\x88\xe4\xf2\x9b(\x1fw\xb6\x02\xd9\xdc B\xf7d@\x9dUf\x9bo\xd7*I', 0x100000a3d6) mkdir$auto(&(0x7f0000000100)='./file0\x00', 0xff) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x20342, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) (async) socket(0x2, 0x1, 0x106) (async) mmap$auto(0x1, 0x100000400008, 0x9, 0x18, r3, 0xffffffffffffffff) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xd1d9, 0x7, 0x2fb2, 0x80000024, 0x9687, 0x8001, 0x3c2a19d5, 0x80000000, 0x3, 0x66, 0x8, 0x7, 0x6d3f, 0x6, 0x6, 0x6]}, 0x0) select$auto(0xb5, 0x0, 0x0, &(0x7f00000002c0)={[0x1fb, 0xffffffffffff0004, 0xffdffffffffffffb, 0x1, 0x4, 0x40, 0x4, 0x3, 0xffbffdffffffffff, 0x3, 0x8000000000400003, 0x2, 0x6d3c, 0x4, 0x2, 0x8000000000000006]}, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 1m39.464673036s ago: executing program 5 (id=2417): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtdblock0\x00', 0x14f602, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x1, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x7, 0x0) (async) socketpair$auto(0x1, 0x1e, 0x3, 0x0) (async) r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) r1 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x80044943, 0x0) (async) mmap$auto(0x0, 0x7, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = memfd_create$auto(0x0, 0x4) r3 = socket(0xa, 0x2, 0x3a) statx$auto(r2, 0x0, 0x1000, 0xbdfc, 0x0) setsockopt$auto(r3, 0x29, 0x14, 0x0, 0x56b) (async) fcntl$auto_F_GETOWNER_UIDS(r2, 0x11, 0x5) setsockopt$auto(r3, 0x29, 0x14, 0x0, 0x10052b) ioctl$auto_I2C_SMBUS(r0, 0x720, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x0, r4, 0x4000000000002) (async) socket(0xa, 0x5, 0x0) (async) open(0x0, 0x261c2, 0x84) (async) socket(0xa, 0x2, 0x88) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00'}) (async) bpf$auto(0x3, &(0x7f00000000c0)=@bpf_attr_11={0x8, 0x45, 0xfffffff9, 0xf, 0x2, 0x5, 0x7f, r4}, 0xf) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, r4, 0x0, 0x3}, 0xc) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 1m39.164354675s ago: executing program 5 (id=2419): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4082, 0x0) utimensat$auto(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x4000000006, 0x40}, 0x38) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/crash_hotplug\x00', 0x8a080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60204, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, 0x0, 0x0) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x7) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x9}, 0x3) mmap$auto(0x0, 0xa00006, 0x3, 0x40eb1, 0xffffffffffffffff, 0x0) 1m38.546206522s ago: executing program 5 (id=2421): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/net/netfilter/nf_log\x00', 0xc0000, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/neigh/lo/mcast_solicit\x00', 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) move_pages$auto(0x0, 0x1001, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC2\x00', 0x80, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) ioctl$auto(r1, 0xc040563d, r0) close_range$auto(0x2, 0x8, 0x0) recvfrom$auto(0xffffffffffffffff, &(0x7f0000000180)="2512683702c78aa366adde5483233ba62b5f1b0aa86d8137bc9e30cb56cbc69805ea2abbfb20dbed8e619f86d21290031ad3ff89dccea2abedcc8754725987450ef20d0111117f0b641631eecdaa6e7b0de194b5487fa6496ac851c8ba202961d0048e96c98298407192a22aab433167b74e190835b5c5f049a17f4e1b0e2c0bdb7c72dd3279a7eb42e48f26ecf8f7daee9d38c811405c0fe91bfeca6449723bebfc04628d49189a73f80d8a642a2306139006bea83b064b4d02f8ed5fb5e31b98", 0x100, 0xc0a, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) capset$auto(0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x805aa, 0x0, 0x2e, 0x0, 0x7, 0x80001083}, 0x5}, 0xaf2, 0x100) sendmsg$auto_MACSEC_CMD_DEL_TXSA(0xffffffffffffffff, &(0x7f00000056c0)={0x0, 0x0, &(0x7f0000005680)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="2bb22bbd7000fcdbfa2506"], 0x28}, 0x1, 0x0, 0x0, 0x20000050}, 0x40094) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0xa, 0x2, 0x0) r3 = socket(0x2, 0x3, 0x9) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0xa22c0, 0x155) r4 = socket(0x11, 0x80003, 0x3ff) setsockopt$auto(r4, 0x107, 0xf, 0x0, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x48080}, 0x4004) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x100, 0x0) ioctl$auto_SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000240)="081c55f6") sendmmsg$auto(r3, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x3) 1m37.535841235s ago: executing program 5 (id=2424): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/misc/hw_random/rng_available\x00', 0x22000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/firmware/acpi/interrupts/ff_slp_btn\x00', 0x8522, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xa0102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:04.0/remove\x00', 0x2801, 0x0) write$auto(r1, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92\x90|l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00'/507, 0x1098c7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x80}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_FD={0x8}]}, 0x3c}}, 0x4000000) sendmsg$auto_L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002900)={&(0x7f0000000400)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4c800) 1m37.341087877s ago: executing program 5 (id=2425): mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) capset$auto(0x0, &(0x7f0000000000)={0x4, 0x20006, 0x40}) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) prctl$auto(0x23, 0x2, 0x7fffffffefff, 0x0, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff024}}) write$auto(r0, 0x0, 0x6) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r2) sendmsg$auto_NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x168, r3, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_MAC_MASK={0xf6, 0xd7, "c72987b084f3e9ea600cb71c45f3a42f20037881c93f6466fb5d9c01b8394564e8a3b49e1e805f56ebc16ccb2930b72969d3a62b469af74380efc499f509fd8c88d8699c7fc4d1ffb47e3d35262927856e259a6cfbfb563cd542c47e0131d9f54e327c949a3e06f547218b5f72a6a93f57ffcd3c06be6db5ad515a0bbb88adf955d3c3f99793f39183bfc7f51f4d6e593f383b2576d0010127d75e009c3e81d8bd7c30b6ff34dc1567cb8a7ff62dd45185b001874d1760eb2f2301d9ed1566437ae3c29cda96456a0c247c26f062915ec03147bc73cc163965405afd02c530aaf1bff9329b52f431bb23757cabe9cc5fc0e2"}, @NL80211_ATTR_VENDOR_DATA={0x45, 0xc5, "3634c5c40a2e4c309b97ce5aaaf6a0fa0a589cd5ed0bf466e299262df07411b52250cb5e007207e2d3471dea50064309a5be7ae1826012465695ba64de12a581d4"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x10}, @NL80211_ATTR_FILS_DISCOVERY={0x4}]}, 0x168}, 0x1, 0x0, 0x0, 0x8}, 0x10) r4 = timerfd_create$auto(0x9, 0x0) write$auto(r4, &(0x7f0000000280)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k>\x85\x8b\x84\xae\xcf\xa9\xbb\x85\xad\x9c\xbf\xef\x92)J\xf6V\xaf\x7f\x9cD\x1f2\x99\xc4M\x9d\xef\x89m}EH|\xa0\x86^\xf5T\x8d\xd8\xf0\x7f\xdf\f\x19\x04\xac\xc5\xff}\xc9\xef<\xedq\xfdh\xe5;\xb7\x88\xe8\x02\xe9\'\xd4\xd9\xe9\xa7D\xdc\xca\xed\x9e\xe7\xbf\x9d\xc3\xcd\t\x9c\xfb\xa2\xaau\xcc+\xe1\xe0\x93\x87\xaf\x9a\v\x02\x13a\xc3Qc\x9f+\x96_M\x04s\x05\xb5\xd9j\x9fKo\x85\xe0\xeb\xf9\x00\x00\xa8\xdf\xdc\xd84\xe5\"\x02\xbf\xd1D\aC*b\x01/,\xc7\xed(\x012\x1c@\xf6\xdf\xb2\xb1\xff\x83\x0fY\x1d\xc0M\x0e\xb8\xccCBN\xb2O_\xc7-\xc6\xaf\x13\x8f\x02}\xa0\xf6\xe4\x98\xd11\x15\xf47\x9fI7\x00\x99e\x80\x97\v\x01\xce:7\xac\x11\xf5\x89\x8d\xae\xfcv\x85\xab$\xcd\xcd\x96\x1b\xa4$\x8c\x89\xf1\xa8>j\x12;K\r\xff\x97\xbd)\xf8\xa90x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x20, r4, 0x9, 0x70bd27, 0x25dfdbfb, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r5}, @NET_SHAPER_A_HANDLE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) msgsnd$auto(0x2, &(0x7f0000000300)={0x4, 0x9}, 0x65, 0xfffffffd) fsconfig$auto(r3, 0xfffffffe, &(0x7f0000000040)='\x84\xe9\x9b\x91\xdf\x81\x99\x12\x81\r', &(0x7f0000000580)="10ab6b39a25e5d9c4947936e05c1ebf9895356b0a5fc915241b26bebe1bf3648ecb6260c4d40bcaaf9620450e0f236d9cf2e9bfa15663032904f14a0bfebeb6f41d8f77bd0bca982dfe6b49e308e606721133b53711ed21bb9e1e32f4be7a7c60b1e11a84523b8f0f030b169292f0b65a26107a850d0b970a474f1e71b47e5ca3b8343ea7d7b90f3557fd5f312dc8058", 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(&(0x7f0000000140)=0x2, 0x800) read$auto(0x4, 0x0, 0x80) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r3) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x4) mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x3, &(0x7f0000000440)={{0x8, 0x6}, {0x8, 0xc5e}, 0x100000011, 0x3, 0x5, 0xf9, 0xfffffffffffffffc, 0x5, 0x6274, 0x9, 0x0, 0xb, 0x35d, 0x439c, 0x9, 0x7}) unshare$auto(0x40000080) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 1m34.73274669s ago: executing program 35 (id=2370): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) (async) mmap$auto(0x0, 0x400007, 0x6, 0x80000011, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40800, 0x0) (async) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) (async) timer_create$auto(0x9, 0x0, 0x0) (async) read$auto(0x3, 0x0, 0x8080) (async) socket(0xa, 0x1, 0x100) (async) write$auto(0x3, 0x0, 0xffd8) (async) unshare$auto(0x40000080) (async) arch_prctl$auto(0x1024, 0xfffffffffffffffb) (async) shmctl$auto_IPC_SET(0x4, 0x1, &(0x7f0000000280)={{0x80, 0xee00, 0xee00, 0xca6d, 0x8, 0x4bd6, 0x5}, 0xd21, 0x5, 0x8000000000000000, 0x1, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000140)="4f0d6995e943b6bc1919e836e1a6e889b4881e233d3b51e066bb0a054c9e474be535fd29", &(0x7f0000000200)="e3ac9b01ee8d985b677531eeeee5cb5bf774d2df4d9ae6dccbc98def20b72c7c2826a585ba3a8d67815abade214708a4ade77c6faa2f2889ca3e7989f32645dd597a3ae1b46e8d8c7e03ae6b8aaa49f6bf64cc5fa9"}) fsconfig$auto(r0, 0x800, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_abort_count\x00', 0x0, r1) (async) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11691c13403c82be", 0x7b) process_mrelease$auto(0xffffffffffffffff, 0xa) (async) mmap$auto(0x0, 0x40000b, 0xde, 0x9b72, 0xffffffffffffffff, 0x8000) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) (async) write$auto(r2, &(0x7f0000000440)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xcc\x80\x00\x00\x00\x00\x00\x00\x01\xca\xd36\xe8a=|\xc7\xc0\xa5\x8a\xe8\x84\xb9c\xc4Q\x9d\x8f\xb9\xedt\x9d\a\xd3\xb5:N\x8d\xb6\xfe^\xdd\xe0\x8f\x1bf_f\xb2\xf4\xf1\x9e\xe1a\xd0\xcb\xee{\xf8\x88U\xe3\x12t\b\x13\xc9\x8a\x9be,\x04\'\x14\xc420\x9a\xdf\xd7\xcax{`\xfc\xd0\xa4w\xdd\x9c\xa1\xb0\x01\x9c(\xe1h\xb6\x9dS\x8f\xedJ\x83\xd6m\x88\xe4\xf2\x9b(\x1fw\xb6\x02\xd9\xdc B\xf7d@\x9dUf\x9bo\xd7*I', 0x100000a3d6) mkdir$auto(&(0x7f0000000100)='./file0\x00', 0xff) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x20342, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) (async) socket(0x2, 0x1, 0x106) (async) mmap$auto(0x1, 0x100000400008, 0x9, 0x18, r3, 0xffffffffffffffff) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xd1d9, 0x7, 0x2fb2, 0x80000024, 0x9687, 0x8001, 0x3c2a19d5, 0x80000000, 0x3, 0x66, 0x8, 0x7, 0x6d3f, 0x6, 0x6, 0x6]}, 0x0) select$auto(0xb5, 0x0, 0x0, &(0x7f00000002c0)={[0x1fb, 0xffffffffffff0004, 0xffdffffffffffffb, 0x1, 0x4, 0x40, 0x4, 0x3, 0xffbffdffffffffff, 0x3, 0x8000000000400003, 0x2, 0x6d3c, 0x4, 0x2, 0x8000000000000006]}, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 1m21.86781285s ago: executing program 36 (id=2426): setresuid$auto(0x8, 0x8, 0x0) r0 = setfsuid$auto(0xee00) r1 = setfsuid$auto(0xee01) setresuid$auto(r0, r1, r0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) r2 = setfsuid$auto(0xee00) setreuid$auto(r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x20, r4, 0x9, 0x70bd27, 0x25dfdbfb, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r5}, @NET_SHAPER_A_HANDLE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) msgsnd$auto(0x2, &(0x7f0000000300)={0x4, 0x9}, 0x65, 0xfffffffd) fsconfig$auto(r3, 0xfffffffe, &(0x7f0000000040)='\x84\xe9\x9b\x91\xdf\x81\x99\x12\x81\r', &(0x7f0000000580)="10ab6b39a25e5d9c4947936e05c1ebf9895356b0a5fc915241b26bebe1bf3648ecb6260c4d40bcaaf9620450e0f236d9cf2e9bfa15663032904f14a0bfebeb6f41d8f77bd0bca982dfe6b49e308e606721133b53711ed21bb9e1e32f4be7a7c60b1e11a84523b8f0f030b169292f0b65a26107a850d0b970a474f1e71b47e5ca3b8343ea7d7b90f3557fd5f312dc8058", 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(&(0x7f0000000140)=0x2, 0x800) read$auto(0x4, 0x0, 0x80) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r3) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x4) mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x3, &(0x7f0000000440)={{0x8, 0x6}, {0x8, 0xc5e}, 0x100000011, 0x3, 0x5, 0xf9, 0xfffffffffffffffc, 0x5, 0x6274, 0x9, 0x0, 0xb, 0x35d, 0x439c, 0x9, 0x7}) unshare$auto(0x40000080) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 1m15.511352238s ago: executing program 7 (id=2488): mmap$auto(0x0, 0x4, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x6ad00, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) exit$auto(0x80000001) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPATH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xa}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xfd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) io_uring_setup$auto(0x2, 0x0) socket(0x10, 0x2, 0x0) socket(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) bind$auto(0x3, 0x0, 0x6b) connect$auto(0x3, 0x0, 0x54) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) 1m14.481900616s ago: executing program 7 (id=2494): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) settimeofday$auto(0x0, 0x0) write$auto(0x3, 0x0, 0xfdef) r0 = open(&(0x7f0000000000)='./file0\x00', 0x222c0, 0x0) ioctl$auto(0x3, 0x5457, r0) read$auto_evm_key_ops_evm_secfs(r0, &(0x7f0000000000)=""/117, 0x75) madvise$auto(0x0, 0xffffffffffff0001, 0x15) arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x3) 1m12.127158015s ago: executing program 7 (id=2501): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) socket(0x1d, 0x6, 0x3eb3) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x8, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x800, 0x84) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x6, @random="21c168781b47"}, 0x6a) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) (async) io_uring_setup$auto(0x6, 0x0) (async) r0 = socket(0x10, 0x80002, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) timerfd_create$auto(0x0, 0x0) (async) timerfd_settime$auto(r0, 0x3, 0x0, 0x0) (async) read$auto(0x3, 0x0, 0x80) (async) settimeofday$auto(&(0x7f0000000180)={0x10000001f, 0x1}, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x8, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) socket(0x21, 0x1, 0x84) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x8, 0x17c, 0x0, 0x8) (async) write$auto_console_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x200000000000df, 0x9b72, 0xffffffffffffffff, 0x8000) (async) connect$auto(0x3, &(0x7f0000000000)=@vsock={0x28, 0x0, 0xffffffff}, 0x5c) 1m11.847204943s ago: executing program 7 (id=2503): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/zswap/parameters/compressor\x00', 0xe0102, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r1, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x963, 0x0, 0x0, &(0x7f0000000180)=0xe430) mmap$auto(0x0, 0x9, 0x6, 0x9b72, 0x2, 0x1) close_range$auto(r0, 0xfffffffffffff000, 0x6) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x7, 0x0) r2 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) ioctl$auto_I2C_SMBUS(r2, 0x720, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r3 = setfsuid$auto(0xee00) r4 = setfsuid$auto(0xee01) setresuid$auto(r3, r4, r3) shmctl$auto_IPC_SET(0x4, 0x1, &(0x7f0000000340)={{0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x80, 0x2, 0x2, 0x8}, 0x101, 0xfff, 0x0, 0x0, @inferred=0xffffffffffffffff, @inferred, 0xc862, 0x0, &(0x7f0000000200)="d69d403dfee3a6f3b1200fe81f7747be064769a6fec5fb39f0701d8f8cd2d793e05d0f3a6eb899db78723733020a686b8ebecad7c6494a7fb04c93e7aa8ffcb5c85b6c3145d26c7879dcd1706ff49b031bcf61499157eb3075b49e44ab37a9a8dd30af7c9e7ed557b02c08542e8ed2b3fbf83cf7e564e5a69f1e6887a75b606dbaf0aa245e62a7df853ab5d9d64c5893fef4f27262a007d46a60f2d000f2f249ad95894b923d62d9b5472abbb5b0b8fbb5f8b4baa1a8593b4f652ebdaab96630c34c982f8741255e8dd162e8c4c6e5aa8816", &(0x7f0000000300)="ae79f61dafd98fd61f9b24eda4e1f9a902803830da"}) lstat$auto(&(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)={0x7, 0xffffffffffff7fff, 0x80000000, 0x2, r4, r5, 0x0, 0x51, 0xa, 0x8, 0xd, 0x80000000, 0xfffffffffffffff8, 0xb18, 0x7, 0x3, 0xa}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/tty/ptyre/power/autosuspend_delay_ms\x00', 0x8ea102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2000000008000) open(&(0x7f0000000080)='./file0\x00', 0x7874c0, 0x80) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r6, &(0x7f00000000c0)='N\xd5\f\xb9GC*(,\x80\xc4bAL\xa3`\xb1\xf2\xe7\xc0/\xff', 0x100000001) shmctl$auto_SHM_UNLOCK(0x9, 0xc, 0x0) write$auto(r6, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) 1m8.425390624s ago: executing program 7 (id=2515): socket(0x10, 0x2, 0x0) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100f9020000fbdbdf250100000008000b00ac141420080001"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x0) fanotify_init$auto(0x200, 0x1) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket(0x14, 0x3, 0x9) socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x5, 0x0) pipe$auto(0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback}, 0x55) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio14\x00', 0x80000, 0x0) ioctl$auto(r3, 0x80885659, r3) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x2, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) write$auto(0x3, 0x0, 0x800) 1m6.216736246s ago: executing program 7 (id=2522): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4082, 0x0) utimensat$auto(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x4000000006, 0x40}, 0x38) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x21, 0x5, 0x7, 0x0) r0 = open(0x0, 0x22240, 0x55) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) statx$auto(r0, 0x0, 0x2001003, 0x4005, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001480)='/proc/sys/net/ipv6/conf/geneve0/disable_ipv6\x00', 0x40001, 0x0) write$auto(r1, &(0x7f0000001680)='\v\x90\xd1\xda\xbc>1\x8ag\x14\x18\xbe\xdc\x00', 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.6/usb7/removable\x00', 0x8a0c0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60204, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, 0x0, 0x0) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) read$auto(r4, 0x0, 0x7) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x9}, 0x3) mmap$auto(0x0, 0xa00006, 0x3, 0x40eb1, 0xffffffffffffffff, 0x0) 50.95007028s ago: executing program 37 (id=2522): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4082, 0x0) utimensat$auto(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x4000000006, 0x40}, 0x38) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x21, 0x5, 0x7, 0x0) r0 = open(0x0, 0x22240, 0x55) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) statx$auto(r0, 0x0, 0x2001003, 0x4005, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001480)='/proc/sys/net/ipv6/conf/geneve0/disable_ipv6\x00', 0x40001, 0x0) write$auto(r1, &(0x7f0000001680)='\v\x90\xd1\xda\xbc>1\x8ag\x14\x18\xbe\xdc\x00', 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.6/usb7/removable\x00', 0x8a0c0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60204, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, 0x0, 0x0) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) read$auto(r4, 0x0, 0x7) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x9}, 0x3) mmap$auto(0x0, 0xa00006, 0x3, 0x40eb1, 0xffffffffffffffff, 0x0) 40.811543974s ago: executing program 9 (id=2569): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1, 0x1, 0x1) timerfd_create$auto(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0x22, 0x2, 0x4) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x2, 0x3a) r1 = io_uring_setup$auto(0x6, 0x0) r2 = socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_map_fd=r0, 0x4, @old_map_fd=r1}, 0xa3) bpf$auto(0x3, &(0x7f0000000040)=@query={@target_ifindex, 0x4, 0x7, 0x9, 0x7f, @prog_cnt=0x4, 0x0, 0x80000000, 0xc, 0xb, 0x5}, 0x7) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdb, 0x2000000000eb1, 0x401, 0x8000) r3 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000480), 0xa2200, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f00000004c0)={0x5, 0x2e9, [{0xffffffffffffffff, 0x0, 0x5, 0xd}, {0xffffffffffffffff, 0x0, 0xffff, 0x4}, {0xffffffffffffffff, 0x0, 0xc43, 0x3}]}) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x38, 0xffffff01, 0x9, 0x9, 0x80000009, 0x7, 0x8, 0x5, 0xd, 0x7e, 0x2, 0x8, 0x5, 0xf, 0xffffffffffffffff, 0x9, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x800, 0x0) 40.241970655s ago: executing program 9 (id=2592): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) r1 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r2, 0x4, 0x401, r1, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x8) bpf$auto(0x4, &(0x7f0000000500)=@bpf_attr_11={0x5, 0x200ffffffff, 0x9, 0x5, 0xf870e9f, 0x3ff, 0x8, 0xffffffffffffffff}, 0x2) mq_timedsend$auto(0xffffffffffffffff, &(0x7f0000000040)='@*!:}\xc1-.!\\#[./\',-\x00', 0x7d, 0x9, 0x0) r5 = socket(0x10, 0x2, 0x0) recvmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x6, 0x0) ioctl$auto_TIOCVHANGUP2(r4, 0x5437, &(0x7f0000000340)="11315832c0dc83e0433b320f1cd3a1c6fe8422c6ad15b64c4321ba20f281b050c2acca406f33247b0942ed15dc0ccfe867012237b8f2bee4e8d4991a19785f5484f0a69f8611dc03c10802b9a662732057a65260b28ec2a0a7372f642304df0142d39a45c4aa6b8094794ed891fa637cf880272cbd9ba386eb02b464a8c9f19ad21181afa145448069e43cfeea31f629b2b664e4d8a177e3a35843d8303747f4ca8fccf07730767c87330841f536ce9f3cee6a3d7054530886e4544e2681ff9e6a46c57aa2263f1629915fddb48cbcbfe13634") sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) 39.946130782s ago: executing program 9 (id=2593): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0xf, 0x0, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400009, 0xfffffffffffffffa, 0x9b72, 0xffffffffffffffff, 0x0) r2 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) signalfd$auto(r2, 0x0, 0x8) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={0x0, 0x7}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x4, 0x100) 39.012008448s ago: executing program 9 (id=2598): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x1d, 0x6, 0x8) setsockopt$auto(0x400000000000003, 0x428, 0x470e003e, 0x0, 0x565) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0xfffffffffffffffa, 0x4, 0x5, 0x800000000007) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x800, 0x800000d) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) unshare$auto(0xfd) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r2, r2, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0x1) rmdir$auto(&(0x7f0000000300)='./cgroup\x00') socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x3000000, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) unshare$auto(0x40000080) 23.781306052s ago: executing program 38 (id=2598): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x1d, 0x6, 0x8) setsockopt$auto(0x400000000000003, 0x428, 0x470e003e, 0x0, 0x565) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0xfffffffffffffffa, 0x4, 0x5, 0x800000000007) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x800, 0x800000d) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) unshare$auto(0xfd) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r2, r2, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0x1) rmdir$auto(&(0x7f0000000300)='./cgroup\x00') socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x3000000, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) unshare$auto(0x40000080) 8.204334363s ago: executing program 6 (id=2668): r0 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000880)='/proc/thread-self/numa_maps\x00', 0x28100, 0x0) r1 = socket(0x23, 0x80805, 0x0) poll$auto(&(0x7f0000000000)={r1, 0x1, 0x8}, 0x5, 0x400) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)={0x28, r4, 0x82652360e804c8d3, 0x70bd29, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0x4}, @OVS_METER_ATTR_ID={0x8, 0x1, 0xfffffff8}, @OVS_METER_ATTR_MAX_BANDS={0x0, 0x8, 0x9}]}, 0xffffffffffffff00}}, 0x44890) shmctl$auto_SHM_STAT(0x1, 0xd, &(0x7f0000000180)={{0x4, 0xee00, 0xffffffffffffffff, 0x7fffffff, 0x10000, 0x7, 0x7}, 0x1, 0xfff, 0x8, 0x8, @raw=0x1, @inferred, 0x1, 0x0, &(0x7f0000000240)="5e66055fa1145eea86d844a57f1567d10443a2e04319b5cca27d66522530fbebe7a22c7d122d625b1b30fc6ffc7c96bf5a209692b3112d4f3fafe1b79a5c10089e43ec1e60f5babf39a4ac27315f9a15e72f709b82762ecd37ffedcf1d8c4f5cd33c7b17559854f377a293f38018a73f23a20061b045771310cf6bf637fcc5b6a939ae5f218c4a109fe3b85de4a872c57a88c8e1e20cf673e51ed1e1129897662a35f5bc30d3ac", &(0x7f0000000300)="9a02c5982fd75c950d5085f2e73883fa4bf87db723c07bbdfcda5dd20d095a2c6373660983e3a4421c16d57e50218984054ac97991c6338be670a84a2f8cc7ccda6142a5ff443b943f2ff5c6bc08e04db31b44e8f490a15e2eeb974f7ac4cbb3296a7ea2413248ddd28123cc78c3bd5742fdd14616867cce78c03e86f3f84b5a16e77f10"}) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000003c0)={0x3cc, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_DAEMON={0x114, 0x3, 0x0, 0x1, [@nested={0xc, 0x8b, 0x0, 0x1, [@nested={0x4, 0x97}, @nested={0x4, 0x29}]}, @nested={0xf2, 0x19, 0x0, 0x1, [@nested={0x4, 0x130}, @generic="6430e50ecfcba76ecc42de8fcfa15afe1e167e46fb046b4391a1b6a5217b53138cf678742b284454d9d7deb81cd83c6ff61d5f1e0c005fe27000dd4d66711f7c815614825524719b4642b170f6242c8f1610d93dd20c22040fd9d7d2a6f5b8b809fbdfd1c99f543dedc01329564985e69073a0fe35641d4cdb1f2402bb9448a26fb27b6fa0c56464269610805c661732c22f192d622e55a2fb1b89381ebe13743a591127011ac7936ba344fc4b121ccf245e7a65a01e2350360ab823252fa7ab5231522741bb37d3a90d8205e904e41edfd0e06420d359cec7543edc7946e010c17e2517cffc", @nested={0x4, 0x25}]}, @typed={0x4, 0x35}, @nested={0xc, 0xb1, 0x0, 0x1, [@typed={0x8, 0x6e, 0x0, 0x0, @u32=0x1ff}]}]}, @IPVS_CMD_ATTR_DEST={0xb4, 0x2, 0x0, 0x1, [@nested={0xad, 0x120, 0x0, 0x1, [@generic="4f7df23532c2e026ef1c3a5bb9fd492f0fcac2ca52d6f009942d2d5f34d043a8004191afece530bd12f3e17739f8a3468885a609e20ae7c8378f0d63f44def7deca3993db7889a99ab5ca59b366a58133360c6609e105399044af95ec0348c095a36d067ef4e2404b76355bf47432c30785b0355", @nested={0x4, 0xb0}, @generic="fc747c9ca5b0df958e746919bdaa53bc37beb77a39", @typed={0x8, 0x50, 0x0, 0x0, @str=']\\\\\x00'}, @typed={0x14, 0x29, 0x0, 0x0, @ipv6=@mcast2}]}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x1d8, 0x3, 0x0, 0x1, [@generic="b0987359edfebbafc9ffaa48bbc05eebb112138cca0d493060de00527a88b739d7efad41e7aedaaf7826870f61633f1e34f5aa471bbf7047c4531b6c4faf8364680e4a1bb4eb14be136df4c6a18d218ae2145f233faa4f1a14929019de1374a7af5ef2ca74ff5e6df2008eb83f9f4af4c837aa98af09448ba29a5a6dc21ba530f773149540b671e8cb9cb896896414924336607c5db90a23c67b", @typed={0x8, 0x100, 0x0, 0x0, @uid=r5}, @nested={0xe0, 0x11b, 0x0, 0x1, [@nested={0x4, 0x131}, @typed={0xc9, 0xdc, 0x0, 0x0, @binary="c64169d64039f1b822a7c76ff83a73cc2777337ff54db92484ffa7b73ce7cf2c2979d20561539dbf5d54516cc9b953af6c0daae1a55613624af4ad71d4b463eb205c3ad0047097af451b9d03dd6770c2a3875229d14a8f526d81657601a6b146eae1d0eee61a384b3b90e72211ebbcb84cfbd50cfbca1313290bf25ed31e6e8870dabc40000ae8e4a312b1fd4c1a4fdbcc1f1a09f2bbe4f2c7656eaa8939482126261a32fb297f6263c65737437a9b119ce9ffe9838495236bfd72b4c6a84bffee06bf326d"}, @typed={0xc, 0x53, 0x0, 0x0, @u64=0x3}]}, @generic="de179325b28a6855888886fdebc6b2947f67ccb5398abdce53c80db88077148fd50bf10e925a1c7ad366191146471dc289256855c8c1c711355da2bd2f41fd7e15ad6a91e94c97ca1f76aa30a2a3238afbaa"]}]}, 0x3cc}, 0x1, 0x0, 0x0, 0xbbc9b07d53018a90}, 0x20000009) pread64$auto(r0, &(0x7f00000008c0)='\x00', 0x10001, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r6, &(0x7f0000000c80)="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", 0x159) r7 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r7, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0x10001) preadv$auto(0x40000000000003, 0x0, 0x6, 0x8, 0x5) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) close_range$auto(0x2, 0xa, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x4303, 0x1, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, 0x0) preadv$auto(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0x2}, 0x8, 0x9, 0x8) madvise$auto(0x0, 0x200007, 0x8) mmap$auto(0x0, 0xe983, 0xa3, 0xeb1, 0xffffffffffffffff, 0x8000) msgctl$auto_MSG_INFO(0x909, 0xc, 0x0) sendmsg$auto_IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x40040) r9 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r9, 0x403c6f2b, 0x0) 7.484505609s ago: executing program 0 (id=2670): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) get_robust_list$auto(0x1, 0x0, 0x0) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x8006, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSFLAGS(r0, 0x40047459, 0x0) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/arp_tables_matches\x00', 0x20200, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) setfsuid$auto(0xee01) 7.029055651s ago: executing program 6 (id=2671): openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/setgroups\x00', 0x149002, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, r2) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010031bd7000fddbdf2508"], 0x14}}, 0x24048084) madvise$auto(0xfffffffffffffffe, 0x1ff, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) mq_notify$auto(r1, &(0x7f0000000180)={@sival_int=0x4, @raw=0x3, 0x0, @_sigev_thread={0x0, 0x0}}) ioctl$auto_VHOST_SET_VRING_ENDIAN2(r2, 0x4008af13, &(0x7f0000000200)={0x7, 0x9}) mq_open$auto(&(0x7f0000000040)='\\*)\x03x\x87y\xdf&j\x95C\xa3\a\a\x9f~,\x91A\x00\xbe\x80\x19\xad\xe7\xb7m\x06N\xe3\x0e\xd9\xb0\x1a\xa7\x9f\x1bdr\x14\x81\xbc\xd2\xbc\x06q\x8e`\x83', 0x10001, 0x9, 0x0) mq_timedsend$auto(r2, 0x0, 0x2, 0x9, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sda\x00', 0x84100, 0x0) ioctl$auto_IOC_PR_RELEASE(r4, 0x401070ca, &(0x7f00000000c0)={0x101, 0x21b}) mmap$auto(0x3, 0x2000a, 0x800, 0xeb1, 0x401, 0x8000) 6.595500503s ago: executing program 8 (id=2672): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0xbfffffffffd, 0xffffffff) mmap$auto(0x0, 0x2000c, 0x800000000de, 0xe31, 0x40000000000a5, 0x8000) r0 = getsid$auto(0xffffffffffffffff) migrate_pages$auto(r0, 0xb, &(0x7f0000000140)=0x8, &(0x7f0000000340)=0x9) r1 = socket(0x10, 0x2, 0x0) r2 = openat$auto_long_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/ieee80211/phy17/long_retry_limit\x00', 0x200000, 0x0) close_range$auto(r2, 0x8, 0xffff3eaf) r3 = socket(0x2, 0x80002, 0x73) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYRESOCT=r3, @ANYRESOCT, @ANYRES8, @ANYRES16, @ANYRESHEX=r4, @ANYBLOB="de2226424ecd338c2a7d7e9ab6b1692609176f3156f5b69843e3d8c9eb80b3a39ac2ac65fbbd662aed71f79092d0c7f0c813449df0a869e6744d994122cf1657ecabacc04e2758ba00a3afdfd032b5416c6b24fe4107aae14b9d588fa215e391889a0c2fa9cb2f296012d7dc7ee36bb8b868c82726ff9e52e834a9d553ec705b2cd00e7e3b6cdd40b54201aacd08c092b04e87ea9748a6905d3267f009ebe321fff308ebd08e96b7938e378f886985b5248a4b5f90c52ee9f02f33cad741954c4997b216ba", @ANYRES8], 0x50}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) write$auto_nsim_psample_enable_fops_psample(r4, &(0x7f00000003c0)="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", 0x1000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/midi2\x00', 0x88042, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2f212dbd7000fcdbdf252100000008000300", @ANYRES32=r8, @ANYBLOB="08009e"], 0x24}}, 0x4000000) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="200025bd70050002000000000000008a65afb4612a123a623df701b02b28bf05c6a17069072bce35d6009539"], 0x1c}, 0x1, 0x0, 0x0, 0x10048800}, 0x2c000884) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x85, 0xfeb, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x80000000081, 0x8, 0x2, 0xfffffffffffffff9, 0xfffffffffffffffe}) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x1, 0x0, 0x5, 0x9}, 0x10007}, 0x3, 0x0) 6.434660802s ago: executing program 0 (id=2673): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto(0x4000000000000c8, 0x400454cc, 0x6f) r1 = open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0xa0480, 0xb5d1af1605322df4) r2 = open_by_handle_at$auto(r1, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) read$auto(r2, &(0x7f0000000400)='\x00', 0x5) write$auto(0x3, 0x0, 0x1) write$auto(0x3, 0x0, 0xfffffdef) setresuid$auto(0x0, 0x0, 0x0) socket(0x10, 0x2, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100000000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x80002, 0x73) socket(0x2, 0x80805, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) timer_create$auto(0x0, 0x0, 0x0) timer_create$auto(0x3, 0x0, 0x0) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xe1, 0x9b72, 0x7, 0x28000) capset$auto(0x0, 0x0) move_pages$auto(0x1, 0x82000000000003, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x40, 0x400008, 0xdf, 0x18, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/radio31\x00', 0x169000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x23, 0x0, 0x8) 6.31308305s ago: executing program 8 (id=2674): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd10/queue/max_segments\x00', 0x80980, 0x0) socket(0x10, 0x2, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) (async) openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000000), 0x12000, 0x0) (async) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) (async) recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200005, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x200400, 0x0) (async) socket(0x2, 0x3, 0xa) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000000), r1) (async) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) (async) socket(0x10, 0x2, 0x4) (async) r2 = socket(0x10, 0x3, 0x6) (async) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x7ff, 0x0, 0x63, 0x0, 0x0, 0x0, 0x8, 0x200, 0x800000000100002, 0x40000406, 0x2, 0xc, 0x2, 0x11, 0x6, 0x7}) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=r0], 0x24}}, 0x4000085) (async) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xee46}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) keyctl$auto(0x2, 0x0, 0x0, 0x3, 0x3ff) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) (async) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) 5.637707784s ago: executing program 6 (id=2677): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = prctl$auto(0x3e, 0x100000001, 0x0, 0x4, 0x0) write$auto(r0, &(0x7f0000001100)='\x00'/13, 0x8000000000000002) write$auto(0xffffffffffffffff, 0x0, 0x8000000000000001) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x2100, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000001140), r0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x365e22a6e0ea4124, 0x0) ioctl$auto_MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mprotect$auto(0x0, 0x806121, 0x6) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip_vs_conn\x00', 0x8880, 0x0) setitimer$auto(0x0, &(0x7f0000001a00)={{0x80, 0x9}, {0x6, 0x100}}, 0x0) getitimer$auto_ITIMER_REAL(0x0, &(0x7f0000001bc0)={{0x2, 0x7fffffffffffffff}, {0x7, 0x1000}}) r2 = fcntl$auto_F_DUPFD_CLOEXEC(r1, 0x406, r1) ioctl$auto_BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000100)={@inferred=r1, 0x8, 0x100000002, @unused, @name="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"}) read$auto(r1, 0x0, 0x102) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x4}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f00000002c0)={0x1, 0x17b7, "e5d02ebff1a0f22827060519362f2f88e79b08745cfeeb517c6dc57b7e6cdc606f490e7822d765e620e59b384bb7a4767cef31f639bb12efa4922229c5b4918f", "957bb98f6817aa559f6d1846dba8340fd7ad51f4595586d2c600434e68629cea1e53bc48eae23140d90b519394bf8df11a3924c9253960b4e9ab012fc27ef6ab0965734454d6662aa9e4680705010b14", 0x4, 0x2, "8668cf815dcbb782114b268bb324a302a4842e0b7270da771be7a331349e3b3cb06f60eabb01da08aaee3bafb4fda1fa3d27f74dd006547ab43c2200128038c7"}) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r4, &(0x7f0000000200)="352c8efa610c0bcf83a4ebdb040000000000000021cb244b19a48bb5e0d12df9735b745b9554dfb0ad77a37be296", 0x2e) 4.924151101s ago: executing program 8 (id=2678): socket(0x10, 0x3, 0xc) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x40000073, 0x400, 0x2}]}) 4.917643315s ago: executing program 0 (id=2679): mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) r0 = socket(0xa, 0x3, 0x3a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/blkio.bfq.io_service_time\x00', 0x100, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) acct$auto(&(0x7f0000000000)='/sys/devices/platform/i8042/serio1/resync_time\x00') setsockopt$auto(r0, 0x8, 0xfffffffc, &(0x7f0000000040)=',%\x00', 0xfffffffc) add_key$auto(&(0x7f0000000740)='#)-\\&[}\x00', &(0x7f0000000780)='.\\@&\x00', 0x0, 0x5, 0x9) acct$auto(0x0) getsockopt$auto(r0, 0x29, 0xcf, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8=r2, @ANYRES16, @ANYBLOB="df250c000000000000"], 0x14}}, 0x24048004) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0xffffffffffffffff, 0x66, 0x3, 0x7f, 0x401, 0x7f) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 4.275673276s ago: executing program 8 (id=2680): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NFSD_A_SERVER_LEASETIME={0x8}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a00"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYRESDEC=r2], 0x1ac}}, 0x8040000) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0xfffffffe, &(0x7f00000002c0)={0x0, 0xc5}, 0x1, 0x0, 0x0, 0x9}, 0x107}, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x40c201, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x1, 0x8000000000000001, 0x7) socket(0x2, 0x3, 0xa) 4.055060464s ago: executing program 3 (id=2681): mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) capset$auto(0x0, &(0x7f0000000000)={0x4, 0x20006, 0x40}) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) prctl$auto(0x23, 0x2, 0x7fffffffefff, 0x0, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff024}}) write$auto(r0, 0x0, 0x6) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r2) sendmsg$auto_NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x178, r3, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_MAC_MASK={0xf6, 0xd7, "c72987b084f3e9ea600cb71c45f3a42f20037881c93f6466fb5d9c01b8394564e8a3b49e1e805f56ebc16ccb2930b72969d3a62b469af74380efc499f509fd8c88d8699c7fc4d1ffb47e3d35262927856e259a6cfbfb563cd542c47e0131d9f54e327c949a3e06f547218b5f72a6a93f57ffcd3c06be6db5ad515a0bbb88adf955d3c3f99793f39183bfc7f51f4d6e593f383b2576d0010127d75e009c3e81d8bd7c30b6ff34dc1567cb8a7ff62dd45185b001874d1760eb2f2301d9ed1566437ae3c29cda96456a0c247c26f062915ec03147bc73cc163965405afd02c530aaf1bff9329b52f431bb23757cabe9cc5fc0e2"}, @NL80211_ATTR_VENDOR_DATA={0x35, 0xc5, "3634c5c40a2e4c309b97ce5aaaf6a0fa0a589cd5ed0bf466e299262df07411b52250cb5e007207e2d3471dea50064309a5"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x10}, @NL80211_ATTR_FILS_DISCOVERY={0x24, 0x126, 0x0, 0x1, [@NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x7}, @NL80211_FILS_DISCOVERY_ATTR_INT_MIN={0x8, 0x1, 0x8}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x2}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0xffffffff}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x8}, 0x10) r4 = timerfd_create$auto(0x9, 0x0) write$auto(r4, &(0x7f0000000280)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k>\x85\x8b\x84\xae\xcf\xa9\xbb\x85\xad\x9c\xbf\xef\x92)J\xf6V\xaf\x7f\x9cD\x1f2\x99\xc4M\x9d\xef\x89m}EH|\xa0\x86^\xf5T\x8d\xd8\xf0\x7f\xdf\f\x19\x04\xac\xc5\xff}\xc9\xef<\xedq\xfdh\xe5;\xb7\x88\xe8\x02\xe9\'\xd4\xd9\xe9\xa7D\xdc\xca\xed\x9e\xe7\xbf\x9d\xc3\xcd\t\x9c\xfb\xa2\xaau\xcc+\xe1\xe0\x93\x87\xaf\x9a\v\x02\x13a\xc3Qc\x9f+\x96_M\x04s\x05\xb5\xd9j\x9fKo\x85\xe0\xeb\xf9\x00\x00\xa8\xdf\xdc\xd84\xe5\"\x02\xbf\xd1D\aC*b\x01/,\xc7\xed(\x012\x1c@\xf6\xdf\xb2\xb1\xff\x83\x0fY\x1d\xc0M\x0e\xb8\xccCBN\xb2O_\xc7-\xc6\xaf\x13\x8f\x02}\xa0\xf6\xe4\x98\xd11\x15\xf47\x9fI7\x00\x99e\x80\x97\v\x01\xce:7\xac\x11\xf5\x89\x8d\xae\xfcv\x85\xab$\xcd\xcd\x96\x1b\xa4$\x8c\x89\xf1\xa8>j\x12;K\r\xff\x97\xbd)\xf8\xa9f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) listen$auto(0x3, 0x81) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0x2003f2, 0x15) (async) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c0000000000000000"], 0x14}}, 0x24048004) (async) unshare$auto(0x40000080) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80f) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) writev$auto(r2, &(0x7f0000000240)={0x0, 0x5}, 0xa) (async) madvise$auto(0x200000, 0x2003f2, 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) (async) r5 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r5, 0x0, 0x0) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf250200000081000411073325fb79b1ac006e66736600d8efe42d132b72f30c54315aa74a5b8107cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a78599870000000800030085000000"], 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r6, 0x4b4a, 0xffffffffffffffff) (async) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) (async) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) 2.03496359s ago: executing program 3 (id=2689): syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000a80), 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0xe2e4c6) close_range$auto(0x2, 0xa, 0x0) fanotify_init$auto(0x26, 0x100001) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) fsopen$auto(0x0, 0x1) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:04.0/broken_parity_status\x00', 0xc3002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mmap$auto(0x0, 0x3, 0x6, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f00000000c0)=""/40, 0x8a) read$auto(r1, &(0x7f0000000000)='/dev/video37\x00', 0x81) close_range$auto(0x2, 0x8, 0x0) 1.572635715s ago: executing program 8 (id=2690): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000040)) sendfile$auto(r1, r0, 0x0, 0x7) socket(0xa, 0x5, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x40001, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) setsockopt$auto(0xffffffffffffffff, 0x111, 0x7f, 0x0, 0x400) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/dummy_udc.3/driver_override\x00', 0xe2685, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xd, 0x7d48, 0x948b, 0x4, 0x15f4da0c, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x4, 0x5, 0x2, 0x1]}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x26, 0x0, 0x0) socket(0xa, 0x802, 0x3a) setsockopt$auto(0x3, 0x29, 0x46, 0x0, 0x808) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "3d64dc8bff7fff7f610000000024"}, 0x55) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0xc0201, 0x0) write$auto_tomoyo_operations_securityfs_if(r3, &(0x7f00000000c0)="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", 0x119) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x59, 0x0) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x11, 0x3, 0x9) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy1/force_tx_status\x00', 0x81300, 0x0) socket(0x2, 0x801, 0x106) 1.539173651s ago: executing program 6 (id=2691): mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) r0 = socket(0xa, 0x3, 0x3a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/blkio.bfq.io_service_time\x00', 0x100, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) acct$auto(&(0x7f0000000000)='/sys/devices/platform/i8042/serio1/resync_time\x00') setsockopt$auto(r0, 0x8, 0xfffffffc, &(0x7f0000000040)=',%\x00', 0xfffffffc) add_key$auto(&(0x7f0000000740)='#)-\\&[}\x00', &(0x7f0000000780)='.\\@&\x00', 0x0, 0x5, 0x9) acct$auto(0x0) getsockopt$auto(r0, 0x29, 0xcf, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8=r2, @ANYRES16, @ANYBLOB], 0x14}}, 0x24048004) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0xffffffffffffffff, 0x66, 0x3, 0x7f, 0x401, 0x7f) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 1.44186719s ago: executing program 3 (id=2692): r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000f3dbdf2584000000080017000800000004000e00"], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) epoll_ctl$auto(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) copy_file_range$auto(0xffffffffffffffff, &(0x7f0000000000)=0x6, r0, &(0x7f00000002c0)=0x616, 0x2, 0x6) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0xe8) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) read$auto_mon_fops_text_t_mon_text(0xffffffffffffffff, 0x0, 0x0) r6 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r6) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) umount2$auto(&(0x7f0000000000)='.\x00', 0x1) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="65e15e16e14d15cf0b1f2e", @ANYRES16=r5, @ANYBLOB="04002bbd7000fcdbdf25770000000800ef000800000005003d0002000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r4, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffdcb, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x8202, 0x0) 954.057607ms ago: executing program 8 (id=2693): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = prctl$auto(0x3e, 0x100000001, 0x0, 0x4, 0x0) write$auto(r0, &(0x7f0000001100)='\x00'/13, 0x8000000000000002) write$auto(0xffffffffffffffff, 0x0, 0x8000000000000001) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x2100, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000001140), r0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x365e22a6e0ea4124, 0x0) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mprotect$auto(0x0, 0x806121, 0x6) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip_vs_conn\x00', 0x8880, 0x0) setitimer$auto(0x0, &(0x7f0000001a00)={{0x80, 0x9}, {0x6, 0x100}}, 0x0) getitimer$auto_ITIMER_REAL(0x0, &(0x7f0000001bc0)={{0x2, 0x7fffffffffffffff}, {0x7, 0x1000}}) r3 = fcntl$auto_F_DUPFD_CLOEXEC(r2, 0x406, r2) ioctl$auto_BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000100)={@inferred=r2, 0x8, 0x100000002, @unused, @name="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"}) read$auto(r2, 0x0, 0x102) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x4}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f00000002c0)={0x1, 0x17b7, "e5d02ebff1a0f22827060519362f2f88e79b08745cfeeb517c6dc57b7e6cdc606f490e7822d765e620e59b384bb7a4767cef31f639bb12efa4922229c5b4918f", "957bb98f6817aa559f6d1846dba8340fd7ad51f4595586d2c600434e68629cea1e53bc48eae23140d90b519394bf8df11a3924c9253960b4e9ab012fc27ef6ab0965734454d6662aa9e4680705010b14", 0x4, 0x2, "8668cf815dcbb782114b268bb324a302a4842e0b7270da771be7a331349e3b3cb06f60eabb01da08aaee3bafb4fda1fa3d27f74dd006547ab43c2200128038c7"}) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r5, &(0x7f0000000200)="352c8efa610c0bcf83a4ebdb040000000000000021cb244b19a48bb5e0d12df9735b745b9554dfb0ad77a37be296", 0x2e) 0s ago: executing program 3 (id=2694): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) write$auto(r0, &(0x7f0000000040)='/dev/dsp\x00', 0x1) (async) openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, 0x0, 0xa000, 0x0) sendmsg$auto_IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01b4c50028bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4050}, 0x4000000) (async, rerun: 64) r1 = bpf$auto(0xf7fff011, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x71c, 0xfaae, 0x468, 0xd, 0x2, 0x8, 0x9, 0x4, 0x3, 0x5, 0xb5, 0x4, 0x802, 0xd9ee}, 0xa3) (rerun: 64) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x7e) (async) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r1, 0x0, 0x4000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) socket(0x11, 0x80003, 0x300) (async) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x18, 0x3, 0x5) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) epoll_create$auto(0x4) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) (async) setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x3, 0xa, 0x0, 0x2) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) (async) socket(0xa, 0x2, 0x0) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/hung_task_check_interval_secs\x00', 0x88542, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x201, 0x0) (async, rerun: 64) write$auto(0x3, 0x0, 0xfffffdef) (rerun: 64) clone$auto(0x1, 0x8, 0x0, 0x0, 0x9) sendmsg$auto_ETHTOOL_MSG_MODULE_SET(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0xb8, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_MODULE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @ETHTOOL_A_MODULE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @ETHTOOL_A_MODULE_POWER_MODE_POLICY={0x5, 0x2, 0x2}, @ETHTOOL_A_MODULE_POWER_MODE_POLICY={0x5, 0x2, 0x5d}, @ETHTOOL_A_MODULE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20048014}, 0x800) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) kernel console output (not intermixed with test programs): 7] RAX: fffffffffffffe00 RBX: 00007fb283e15fa0 RCX: 00007fb283b9af79 [ 956.956908][T16927] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 956.956924][T16927] RBP: 00007fb283c316e0 R08: 0000000000000000 R09: 0000000000000000 [ 956.956940][T16927] R10: 00000000000000a1 R11: 0000000000000246 R12: 0000000000000000 [ 956.956957][T16927] R13: 00007fb283e16038 R14: 00007fb283e15fa0 R15: 00007ffd25995a78 [ 956.956990][T16927] [ 958.811322][T16954] netlink: 334 bytes leftover after parsing attributes in process `syz.5.2231'. [ 959.987990][T16975] zswap: compressor not available [ 959.993871][T16976] zswap: compressor not available [ 960.287275][T16984] Console: switching to colour VGA+ 80x25 [ 960.761851][T16993] futex_wake_op: syz.5.2239 tries to shift op by -2048; fix this program [ 960.853517][T16993] futex_wake_op: syz.5.2239 tries to shift op by -2048; fix this program [ 961.719670][T17007] netlink: 'syz.2.2242': attribute type 11 has an invalid length. [ 961.742194][T17007] netlink: 'syz.2.2242': attribute type 11 has an invalid length. [ 961.768518][T17007] netlink: 'syz.2.2242': attribute type 11 has an invalid length. [ 961.778770][T17007] netlink: 'syz.2.2242': attribute type 11 has an invalid length. [ 962.239402][T17026] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 962.247758][T17026] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 962.268089][T17026] serio: Serial port ttyS2 [ 962.553518][T17031] FAULT_INJECTION: forcing a failure. [ 962.553518][T17031] name fail_futex, interval 1, probability 0, space 0, times 0 [ 962.566493][T17031] CPU: 0 UID: 0 PID: 17031 Comm: syz.3.2247 Tainted: G L syzkaller #0 PREEMPT(full) [ 962.566559][T17031] Tainted: [L]=SOFTLOCKUP [ 962.566572][T17031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 962.566594][T17031] Call Trace: [ 962.566606][T17031] [ 962.566619][T17031] dump_stack_lvl+0x100/0x190 [ 962.566668][T17031] should_fail_ex.cold+0x5/0xa [ 962.566725][T17031] get_futex_key+0x1d2/0x1620 [ 962.566776][T17031] ? __pfx_get_futex_key+0x10/0x10 [ 962.566827][T17031] ? __lock_acquire+0x4a5/0x2630 [ 962.566882][T17031] futex_wake+0xea/0x530 [ 962.566942][T17031] ? __pfx_futex_wake+0x10/0x10 [ 962.567003][T17031] ? __fget_files+0x215/0x3d0 [ 962.567052][T17031] do_futex+0x32b/0x350 [ 962.567100][T17031] ? __pfx_do_futex+0x10/0x10 [ 962.567148][T17031] ? fdget+0x18b/0x210 [ 962.567185][T17031] ? __sys_sendmsg+0x18f/0x220 [ 962.567242][T17031] __x64_sys_futex+0x34f/0x4d0 [ 962.567341][T17031] ? __pfx___x64_sys_futex+0x10/0x10 [ 962.567408][T17031] do_syscall_64+0xc9/0xf80 [ 962.567455][T17031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.567493][T17031] RIP: 0033:0x7f16e339af79 [ 962.567519][T17031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 962.567556][T17031] RSP: 002b:00007f16e41f00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 962.567590][T17031] RAX: ffffffffffffffda RBX: 00007f16e3616188 RCX: 00007f16e339af79 [ 962.567613][T17031] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f16e361618c [ 962.567636][T17031] RBP: 00007f16e3616180 R08: 0000000000000000 R09: 0000000000000000 [ 962.567658][T17031] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 962.567681][T17031] R13: 00007f16e3616218 R14: 00007ffe35dab5b0 R15: 00007ffe35dab698 [ 962.567727][T17031] [ 963.054478][T17034] Scaler: ================= START STATUS ================= [ 963.076599][T17034] Scaler: ================== END STATUS ================== [ 964.039718][T17052] FAULT_INJECTION: forcing a failure. [ 964.039718][T17052] name fail_futex, interval 1, probability 0, space 0, times 0 [ 964.128687][T17052] CPU: 0 UID: 0 PID: 17052 Comm: syz.3.2253 Tainted: G L syzkaller #0 PREEMPT(full) [ 964.128740][T17052] Tainted: [L]=SOFTLOCKUP [ 964.128753][T17052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 964.128773][T17052] Call Trace: [ 964.128785][T17052] [ 964.128799][T17052] dump_stack_lvl+0x100/0x190 [ 964.128847][T17052] should_fail_ex.cold+0x5/0xa [ 964.128896][T17052] get_futex_key+0x1d2/0x1620 [ 964.128948][T17052] ? __pfx_get_futex_key+0x10/0x10 [ 964.129005][T17052] futex_wake+0xea/0x530 [ 964.129061][T17052] ? __pfx_futex_wake+0x10/0x10 [ 964.129112][T17052] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 964.129167][T17052] ? kmem_cache_free+0x48f/0x720 [ 964.129203][T17052] do_futex+0x32b/0x350 [ 964.129243][T17052] ? __pfx_do_futex+0x10/0x10 [ 964.129283][T17052] ? __pfx___might_resched+0x10/0x10 [ 964.129325][T17052] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 964.129368][T17052] __x64_sys_futex+0x34f/0x4d0 [ 964.129411][T17052] ? __pfx_task_work_run+0x10/0x10 [ 964.129454][T17052] ? __pfx___x64_sys_futex+0x10/0x10 [ 964.129508][T17052] do_syscall_64+0xc9/0xf80 [ 964.129546][T17052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.129577][T17052] RIP: 0033:0x7f16e339af79 [ 964.129601][T17052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 964.129630][T17052] RSP: 002b:00007f16e42320e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 964.129659][T17052] RAX: ffffffffffffffda RBX: 00007f16e3615fa8 RCX: 00007f16e339af79 [ 964.129679][T17052] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f16e3615fac [ 964.129698][T17052] RBP: 00007f16e3615fa0 R08: 0000000000000001 R09: 0000000000000000 [ 964.129717][T17052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 964.129736][T17052] R13: 00007f16e3616038 R14: 00007ffe35dab5b0 R15: 00007ffe35dab698 [ 964.129772][T17052] [ 964.418724][T17045] ima: policy update failed [ 964.442135][ T30] audit: type=1802 audit(2147483942.581:18): pid=17045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.2251" res=0 errno=0 [ 968.458516][T17161] futex_wake_op: syz.2.2273 tries to shift op by -2048; fix this program [ 968.473794][T17165] futex_wake_op: syz.3.2272 tries to shift op by -2048; fix this program [ 968.565449][T17165] futex_wake_op: syz.3.2272 tries to shift op by -2048; fix this program [ 968.643230][T17165] 0x000000000001-0x000000020000 : "" [ 968.726437][T17165] ftl_cs: FTL header corrupt! [ 968.833301][T17173] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 968.870901][T17173] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 968.907448][T17173] serio: Serial port ttyS2 [ 969.239145][T17162] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 969.258854][T17162] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 969.276221][T17162] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 969.299280][T17162] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 970.641701][T16647] Bluetooth: hci1: command 0x0c1a tx timeout [ 971.279593][T16647] Bluetooth: hci4: command 0x0c1a tx timeout [ 971.286032][T16647] Bluetooth: hci2: command 0x0c1a tx timeout [ 971.359101][T17226] Bluetooth: hci0: command 0x0c1a tx timeout [ 972.830824][T17256] bridge_slave_1: left allmulticast mode [ 972.836585][T17256] bridge_slave_1: left promiscuous mode [ 972.847548][T17256] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.615808][T17295] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 974.636617][T17297] vhci_hcd vhci_hcd.2: invalid port number 16 [ 974.643481][T17297] vhci_hcd vhci_hcd.2: invalid port number 16 [ 974.650279][T17295] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 974.669938][T17295] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 974.910879][T17306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2299'. [ 974.941394][T17306] netlink: 'syz.2.2299': attribute type 1 has an invalid length. [ 974.949499][T17306] netlink: 13 bytes leftover after parsing attributes in process `syz.2.2299'. [ 975.081622][T16605] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 975.091807][T16605] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 975.102755][T16605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 975.139034][T16605] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 975.160403][T16605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 975.377333][T17318] FAULT_INJECTION: forcing a failure. [ 975.377333][T17318] name fail_futex, interval 1, probability 0, space 0, times 0 [ 975.472535][T17318] CPU: 0 UID: 0 PID: 17318 Comm: syz.5.2304 Tainted: G L syzkaller #0 PREEMPT(full) [ 975.472595][T17318] Tainted: [L]=SOFTLOCKUP [ 975.472605][T17318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 975.472621][T17318] Call Trace: [ 975.472630][T17318] [ 975.472640][T17318] dump_stack_lvl+0x100/0x190 [ 975.472676][T17318] should_fail_ex.cold+0x5/0xa [ 975.472720][T17318] get_futex_key+0x1d2/0x1620 [ 975.472757][T17318] ? __pfx_get_futex_key+0x10/0x10 [ 975.472793][T17318] ? __lock_acquire+0x4a5/0x2630 [ 975.472833][T17318] futex_wake+0xea/0x530 [ 975.472876][T17318] ? __pfx_futex_wake+0x10/0x10 [ 975.472922][T17318] ? __fget_files+0x215/0x3d0 [ 975.472956][T17318] do_futex+0x32b/0x350 [ 975.472993][T17318] ? __pfx_do_futex+0x10/0x10 [ 975.473029][T17318] ? fdget+0x18b/0x210 [ 975.473056][T17318] ? __sys_sendmsg+0x18f/0x220 [ 975.473097][T17318] __x64_sys_futex+0x34f/0x4d0 [ 975.473164][T17318] ? __pfx___x64_sys_futex+0x10/0x10 [ 975.473212][T17318] do_syscall_64+0xc9/0xf80 [ 975.473247][T17318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.473273][T17318] RIP: 0033:0x7eff3d59af79 [ 975.473293][T17318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 975.473319][T17318] RSP: 002b:00007eff3e5040e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 975.473344][T17318] RAX: ffffffffffffffda RBX: 00007eff3d815fa8 RCX: 00007eff3d59af79 [ 975.473361][T17318] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007eff3d815fac [ 975.473378][T17318] RBP: 00007eff3d815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 975.473394][T17318] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 975.473410][T17318] R13: 00007eff3d816038 R14: 00007fff91294ab0 R15: 00007fff91294b98 [ 975.473443][T17318] [ 976.116237][T17311] chnl_net:caif_netlink_parms(): no params data found [ 976.434523][T17311] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.449287][T17311] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.456702][T17311] bridge_slave_0: entered allmulticast mode [ 976.467822][T17311] bridge_slave_0: entered promiscuous mode [ 976.476090][T17343] tipc: Started in network mode [ 976.483954][T17343] tipc: Node identity ffffffff, cluster identity 4711 [ 976.490896][T17343] tipc: Node number set to 4294967295 [ 976.498222][T17311] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.510789][T17311] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.528357][T17311] bridge_slave_1: entered allmulticast mode [ 976.550409][T17311] bridge_slave_1: entered promiscuous mode [ 976.657308][T17311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 976.695918][T17311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 976.773658][T17311] team0: Port device team_slave_0 added [ 976.792575][T17311] team0: Port device team_slave_1 added [ 976.900802][T17311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 976.983077][T17311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 977.009286][T17311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 977.024484][T17349] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2312'. [ 977.068796][T17311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 977.123384][T17311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 977.123432][T17311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 977.149318][T17349] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2312'. [ 977.280846][T16605] Bluetooth: hci3: command tx timeout [ 977.425593][T17311] hsr_slave_0: entered promiscuous mode [ 977.431470][T17311] hsr_slave_1: entered promiscuous mode [ 977.462347][T17311] debugfs: 'hsr0' already exists in 'hsr' [ 977.462376][T17311] Cannot create hsr debugfs directory [ 978.076563][T17375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2316'. [ 978.292973][T17311] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 978.328704][T17311] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 978.380420][T17311] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 978.408130][T17381] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 978.427813][T17311] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 978.436174][T17381] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 978.716832][T17311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 978.762914][T17311] 8021q: adding VLAN 0 to HW filter on device team0 [ 978.778103][T16607] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.785404][T16607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 978.846904][T16607] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.854501][T16607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 979.311629][T17311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 979.361124][T16605] Bluetooth: hci3: command tx timeout [ 980.183866][T17428] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 980.198737][T17423] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 980.227106][T17311] veth0_vlan: entered promiscuous mode [ 980.413417][T17311] veth1_vlan: entered promiscuous mode [ 980.741672][T17311] veth0_macvtap: entered promiscuous mode [ 980.780982][T17311] veth1_macvtap: entered promiscuous mode [ 980.968764][T17311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 981.028741][T17435] netlink: 227 bytes leftover after parsing attributes in process `syz.3.2327'. [ 981.054359][T17311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 981.098446][T16695] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.142025][T16695] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.164325][T16695] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.212662][T16695] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.440676][T16605] Bluetooth: hci3: command tx timeout [ 981.487774][T16636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 981.508104][T16636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.633275][T16636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 981.659624][T16636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.887167][T17449] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2331'. [ 983.249807][T17226] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 983.270821][T17226] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 983.282518][T17226] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 983.291471][T17226] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 983.299964][T17226] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 983.519107][T17226] Bluetooth: hci3: command tx timeout [ 984.067173][T17474] chnl_net:caif_netlink_parms(): no params data found [ 984.348893][T17495] zswap: compressor not available [ 984.437924][T17495] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 984.502220][T17474] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.511300][T17474] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.519981][T17474] bridge_slave_0: entered allmulticast mode [ 984.528217][T17474] bridge_slave_0: entered promiscuous mode [ 984.538071][T17474] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.545556][T17474] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.553162][T17474] bridge_slave_1: entered allmulticast mode [ 984.565459][T17474] bridge_slave_1: entered promiscuous mode [ 984.642027][T17474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 984.684650][T17474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 984.825233][T17474] team0: Port device team_slave_0 added [ 984.850683][T17495] zswap: compressor 31 not available [ 984.879885][T17474] team0: Port device team_slave_1 added [ 985.044461][T17474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 985.044497][T17474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 985.044541][T17474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 985.047121][T17474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 985.047143][T17474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 985.047184][T17474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 985.339849][T17474] hsr_slave_0: entered promiscuous mode [ 985.346476][T17474] hsr_slave_1: entered promiscuous mode [ 985.356195][T17474] debugfs: 'hsr0' already exists in 'hsr' [ 985.362361][T17226] Bluetooth: hci5: command tx timeout [ 985.371888][T17474] Cannot create hsr debugfs directory [ 985.616443][T17524] syz.2.2344 (17524): attempted to duplicate a private mapping with mremap. This is not supported. [ 985.691985][T17474] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.823154][T17474] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.927608][T17474] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.011663][T17474] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.369229][T17538] random: crng reseeded on system resumption [ 986.373253][T17474] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 986.395999][T17474] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 986.418259][T17474] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 986.454849][T17474] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 986.651310][T17474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 986.713281][T17474] 8021q: adding VLAN 0 to HW filter on device team0 [ 986.737353][T16636] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.744679][T16636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 986.764821][T16636] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.772028][T16636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 987.219783][T17566] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2355'. [ 987.282086][T17474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 987.433917][T17474] veth0_vlan: entered promiscuous mode [ 987.442086][T17226] Bluetooth: hci5: command tx timeout [ 987.502450][T17474] veth1_vlan: entered promiscuous mode [ 987.562944][T17474] veth0_macvtap: entered promiscuous mode [ 987.585254][T17474] veth1_macvtap: entered promiscuous mode [ 987.618152][T17474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 987.649275][T17474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 987.666518][T16607] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.695732][T16607] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.706116][T16607] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.755907][T16607] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.793662][T17572] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2355'. [ 987.856432][T16695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 987.860610][T17579] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2357'. [ 987.873920][T16695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 987.939138][T16691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 987.980166][T16691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 988.605352][T17226] Bluetooth: hci0: unexpected event 0x32 length: 727 > 9 [ 988.709070][T17611] netlink: 436 bytes leftover after parsing attributes in process `syz.5.2361'. [ 988.868768][T17612] FAULT_INJECTION: forcing a failure. [ 988.868768][T17612] name failslab, interval 1, probability 0, space 0, times 0 [ 988.912003][T17612] CPU: 0 UID: 0 PID: 17612 Comm: syz.3.2360 Tainted: G L syzkaller #0 PREEMPT(full) [ 988.912058][T17612] Tainted: [L]=SOFTLOCKUP [ 988.912071][T17612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 988.912092][T17612] Call Trace: [ 988.912104][T17612] [ 988.912117][T17612] dump_stack_lvl+0x100/0x190 [ 988.912172][T17612] should_fail_ex.cold+0x5/0xa [ 988.912229][T17612] should_failslab+0xc2/0x120 [ 988.912280][T17612] kmem_cache_alloc_noprof+0x83/0x780 [ 988.912326][T17612] ? __pfx_map_id_range_down+0x10/0x10 [ 988.912362][T17612] ? security_inode_alloc+0x3b/0x2c0 [ 988.912420][T17612] ? security_inode_alloc+0x3b/0x2c0 [ 988.912466][T17612] security_inode_alloc+0x3b/0x2c0 [ 988.912516][T17612] inode_init_always_gfp+0xced/0x1040 [ 988.912563][T17612] alloc_inode+0x8e/0x250 [ 988.912616][T17612] new_inode+0x22/0x1c0 [ 988.912665][T17612] ? dput.part.0+0xdd/0x570 [ 988.912726][T17612] simple_fill_super+0x2d9/0x680 [ 988.912774][T17612] ? __pfx_nfsd_fill_super+0x10/0x10 [ 988.912833][T17612] nfsd_fill_super+0x98/0x560 [ 988.912889][T17612] ? __pfx_set_anon_super_fc+0x10/0x10 [ 988.912925][T17612] ? __pfx_nfsd_fill_super+0x10/0x10 [ 988.912982][T17612] get_tree_keyed+0x10e/0x1d0 [ 988.913023][T17612] vfs_get_tree+0x92/0x320 [ 988.913057][T17612] path_mount+0x7d0/0x23c0 [ 988.913111][T17612] ? __pfx_path_mount+0x10/0x10 [ 988.913168][T17612] ? kmem_cache_free+0x143/0x720 [ 988.913207][T17612] ? strncpy_from_user+0x19d/0x2d0 [ 988.913255][T17612] ? putname+0xf5/0x1a0 [ 988.913306][T17612] ? putname+0xf5/0x1a0 [ 988.913348][T17612] ? putname+0xfa/0x1a0 [ 988.913398][T17612] ? __x64_sys_mount+0x293/0x310 [ 988.913445][T17612] __x64_sys_mount+0x293/0x310 [ 988.913493][T17612] ? __pfx___x64_sys_mount+0x10/0x10 [ 988.913554][T17612] do_syscall_64+0xc9/0xf80 [ 988.913602][T17612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.913638][T17612] RIP: 0033:0x7f229ab9af79 [ 988.913666][T17612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 988.913700][T17612] RSP: 002b:00007f2298dd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 988.913735][T17612] RAX: ffffffffffffffda RBX: 00007f229ae16180 RCX: 00007f229ab9af79 [ 988.913758][T17612] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 988.913780][T17612] RBP: 00007f229ac316e0 R08: 0000000000000000 R09: 0000000000000000 [ 988.913801][T17612] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 988.913822][T17612] R13: 00007f229ae16218 R14: 00007f229ae16180 R15: 00007ffc561c2298 [ 988.913867][T17612] [ 989.205952][T17609] netlink: set zone limit has 8 unknown bytes [ 989.302718][T17617] FAULT_INJECTION: forcing a failure. [ 989.302718][T17617] name failslab, interval 1, probability 0, space 0, times 0 [ 989.446211][T17617] CPU: 1 UID: 0 PID: 17617 Comm: syz.6.2363 Tainted: G L syzkaller #0 PREEMPT(full) [ 989.446267][T17617] Tainted: [L]=SOFTLOCKUP [ 989.446281][T17617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 989.446302][T17617] Call Trace: [ 989.446315][T17617] [ 989.446333][T17617] dump_stack_lvl+0x100/0x190 [ 989.446368][T17617] should_fail_ex.cold+0x5/0xa [ 989.446408][T17617] should_failslab+0xc2/0x120 [ 989.446444][T17617] kmem_cache_alloc_noprof+0x83/0x780 [ 989.446478][T17617] ? __kernfs_new_node+0xd2/0x960 [ 989.446518][T17617] ? __kernfs_new_node+0xd2/0x960 [ 989.446550][T17617] __kernfs_new_node+0xd2/0x960 [ 989.446588][T17617] ? __pfx___kernfs_new_node+0x10/0x10 [ 989.446649][T17617] ? find_held_lock+0x2b/0x80 [ 989.446674][T17617] ? kernfs_root+0xee/0x2a0 [ 989.446708][T17617] ? kernfs_root+0xee/0x2a0 [ 989.446754][T17617] kernfs_new_node+0x11b/0x1a0 [ 989.446799][T17617] kernfs_create_dir_ns+0x4c/0x1a0 [ 989.446827][T17617] sysfs_create_dir_ns+0x13a/0x2b0 [ 989.446862][T17617] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 989.446896][T17617] ? find_held_lock+0x2b/0x80 [ 989.446920][T17617] ? kobject_add_internal+0x25f/0x930 [ 989.446956][T17617] ? kobject_add_internal+0x25f/0x930 [ 989.446997][T17617] ? do_raw_spin_unlock+0x145/0x1e0 [ 989.447039][T17617] kobject_add_internal+0x2c8/0x930 [ 989.447074][T17617] ? kmemdup_nul+0x81/0xd0 [ 989.447110][T17617] kobject_init_and_add+0x121/0x180 [ 989.447148][T17617] ? __pfx_kobject_init_and_add+0x10/0x10 [ 989.447201][T17617] nfs_netns_sysfs_setup+0x12a/0x200 [ 989.447242][T17617] nfs_net_init+0x10a/0x340 [ 989.447275][T17617] ? __pfx_nfs_net_init+0x10/0x10 [ 989.447306][T17617] ops_init+0x1e2/0x5f0 [ 989.447350][T17617] setup_net+0x118/0x3a0 [ 989.447373][T17617] ? __pfx_setup_net+0x10/0x10 [ 989.447394][T17617] ? lockdep_init_map_type+0x5c/0x250 [ 989.447430][T17617] ? mutex_init_lockep+0x110/0x150 [ 989.447471][T17617] copy_net_ns+0x46f/0x7c0 [ 989.447499][T17617] create_new_namespaces+0x3ea/0xab0 [ 989.447535][T17617] copy_namespaces+0x468/0x5e0 [ 989.447566][T17617] copy_process+0x32d5/0x7890 [ 989.447614][T17617] ? __pfx_copy_process+0x10/0x10 [ 989.447662][T17617] kernel_clone+0xfc/0x930 [ 989.447695][T17617] ? __pfx_futex_wait+0x10/0x10 [ 989.447721][T17617] ? __pfx_kernel_clone+0x10/0x10 [ 989.447777][T17617] __do_sys_clone+0xd9/0x120 [ 989.447813][T17617] ? __pfx___do_sys_clone+0x10/0x10 [ 989.447848][T17617] ? __fget_files+0x21f/0x3d0 [ 989.447887][T17617] ? xfd_validate_state+0x129/0x190 [ 989.447938][T17617] do_syscall_64+0xc9/0xf80 [ 989.447972][T17617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.448000][T17617] RIP: 0033:0x7fb71bf9af79 [ 989.448020][T17617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 989.448045][T17617] RSP: 002b:00007fb71cea2fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 989.448069][T17617] RAX: ffffffffffffffda RBX: 00007fb71c216090 RCX: 00007fb71bf9af79 [ 989.448086][T17617] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040180211 [ 989.448103][T17617] RBP: 00007fb71c0316e0 R08: 0000000000000000 R09: 0000000000000000 [ 989.448119][T17617] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 989.448135][T17617] R13: 00007fb71c216128 R14: 00007fb71c216090 R15: 00007ffda8532d28 [ 989.448168][T17617] [ 989.519622][T17226] Bluetooth: hci5: command tx timeout [ 989.609456][T17617] kobject: kobject_add_internal failed for nfs_client (error: -12 parent: net) [ 989.994527][T17627] Invalid ELF header magic: != ELF [ 990.106802][T17627] can0: slcan on pty238. [ 990.224897][T17626] can0 (unregistered): slcan off pty238. [ 991.255221][T17226] Bluetooth: hci5: unexpected event 0x3e length: 508 > 260 [ 991.255272][T17226] Bluetooth: hci5: unexpected subevent 0x02 length: 507 > 260 [ 991.272142][T17226] Bluetooth: hci5: Dropping invalid advertising data [ 991.292828][T17226] Bluetooth: hci5: unknown advertising packet type: 0xe9 [ 991.292873][T17226] Bluetooth: hci5: Dropping invalid advertising data [ 991.306849][T17226] Bluetooth: hci5: Dropping invalid advertising data [ 991.313628][T17226] Bluetooth: hci5: Malformed LE Event: 0x02 [ 991.679158][T17226] Bluetooth: hci5: command tx timeout [ 992.759118][T17708] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 992.769802][T17708] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 993.355020][T17718] IPVS: length: 131 != 8 [ 993.643269][ T30] audit: type=1800 audit(2147483971.801:19): pid=17724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2384" name="lu_gp_id" dev="configfs" ino=131454 res=0 errno=0 [ 993.946842][T17731] FAULT_INJECTION: forcing a failure. [ 993.946842][T17731] name failslab, interval 1, probability 0, space 0, times 0 [ 993.960733][T17731] CPU: 1 UID: 0 PID: 17731 Comm: syz.6.2385 Tainted: G L syzkaller #0 PREEMPT(full) [ 993.960783][T17731] Tainted: [L]=SOFTLOCKUP [ 993.960795][T17731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 993.960817][T17731] Call Trace: [ 993.960829][T17731] [ 993.960845][T17731] dump_stack_lvl+0x100/0x190 [ 993.960893][T17731] should_fail_ex.cold+0x5/0xa [ 993.960948][T17731] should_failslab+0xc2/0x120 [ 993.960989][T17731] kmem_cache_alloc_noprof+0x83/0x780 [ 993.961026][T17731] ? __pfx_map_id_range_down+0x10/0x10 [ 993.961055][T17731] ? security_inode_alloc+0x3b/0x2c0 [ 993.961100][T17731] ? security_inode_alloc+0x3b/0x2c0 [ 993.961137][T17731] security_inode_alloc+0x3b/0x2c0 [ 993.961176][T17731] inode_init_always_gfp+0xced/0x1040 [ 993.961216][T17731] alloc_inode+0x8e/0x250 [ 993.961258][T17731] new_inode+0x22/0x1c0 [ 993.961297][T17731] ? dput.part.0+0xdd/0x570 [ 993.961341][T17731] simple_fill_super+0x2d9/0x680 [ 993.961378][T17731] ? __pfx_nfsd_fill_super+0x10/0x10 [ 993.961425][T17731] nfsd_fill_super+0x98/0x560 [ 993.961467][T17731] ? __pfx_set_anon_super_fc+0x10/0x10 [ 993.961496][T17731] ? __pfx_nfsd_fill_super+0x10/0x10 [ 993.961540][T17731] get_tree_keyed+0x10e/0x1d0 [ 993.961573][T17731] vfs_get_tree+0x92/0x320 [ 993.961605][T17731] path_mount+0x7d0/0x23c0 [ 993.961654][T17731] ? __pfx_path_mount+0x10/0x10 [ 993.961692][T17731] ? kmem_cache_free+0x143/0x720 [ 993.961723][T17731] ? strncpy_from_user+0x19d/0x2d0 [ 993.961761][T17731] ? putname+0xf5/0x1a0 [ 993.961802][T17731] ? putname+0xf5/0x1a0 [ 993.961836][T17731] ? putname+0xfa/0x1a0 [ 993.961876][T17731] ? __x64_sys_mount+0x293/0x310 [ 993.961912][T17731] __x64_sys_mount+0x293/0x310 [ 993.961950][T17731] ? __pfx___x64_sys_mount+0x10/0x10 [ 993.962005][T17731] do_syscall_64+0xc9/0xf80 [ 993.962043][T17731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.962072][T17731] RIP: 0033:0x7fb71bf9af79 [ 993.962094][T17731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 993.962122][T17731] RSP: 002b:00007fb71ce82028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 993.962149][T17731] RAX: ffffffffffffffda RBX: 00007fb71c216180 RCX: 00007fb71bf9af79 [ 993.962170][T17731] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 993.962188][T17731] RBP: 00007fb71c0316e0 R08: 0000000000000000 R09: 0000000000000000 [ 993.962206][T17731] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 993.962224][T17731] R13: 00007fb71c216218 R14: 00007fb71c216180 R15: 00007ffda8532d28 [ 993.962261][T17731] [ 994.745469][T17733] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2386'. [ 995.457387][T17226] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 995.790176][ T30] audit: type=1800 audit(2147483973.941:20): pid=17750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=130389 res=0 errno=0 [ 996.053468][T17750] could not allocate digest TFM handle [ 997.437417][T17780] netlink: 206 bytes leftover after parsing attributes in process `syz.5.2398'. [ 997.791475][T17789] netlink: 'syz.3.2397': attribute type 33 has an invalid length. [ 997.865244][T17789] netlink: 'syz.3.2397': attribute type 1 has an invalid length. [ 998.590597][T17810] NFSD: Failed to start, no listeners configured. [ 999.372643][T17819] netlink: 206 bytes leftover after parsing attributes in process `syz.3.2407'. [ 999.706601][T17830] zram0: detected capacity change from 8 to 0 [ 1000.425086][T17838] zswap: compressor not available [ 1002.135737][T17864] __vm_enough_memory: pid: 17864, comm: syz.6.2416, bytes: 4398046511104 not enough memory for the allocation [ 1003.445168][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1003.451777][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1005.925394][T17913] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1005.986201][ T30] audit: type=1804 audit(2147483984.141:21): pid=17913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2429" name="/newroot/sys/kernel/debug/tracing/options/irq-info" dev="tracefs" ino=1299 res=1 errno=0 [ 1006.344731][T16605] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1006.355570][T16605] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1006.368235][T16605] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1006.396706][T16605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1006.413124][T16605] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1006.680618][T17934] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1006.711955][T17934] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1006.918200][T17940] FAULT_INJECTION: forcing a failure. [ 1006.918200][T17940] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.947549][T17940] CPU: 1 UID: 0 PID: 17940 Comm: syz.6.2437 Tainted: G L syzkaller #0 PREEMPT(full) [ 1006.947587][T17940] Tainted: [L]=SOFTLOCKUP [ 1006.947596][T17940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1006.947611][T17940] Call Trace: [ 1006.947619][T17940] [ 1006.947629][T17940] dump_stack_lvl+0x100/0x190 [ 1006.947662][T17940] should_fail_ex.cold+0x5/0xa [ 1006.947701][T17940] should_failslab+0xc2/0x120 [ 1006.947736][T17940] kmem_cache_alloc_noprof+0x83/0x780 [ 1006.947768][T17940] ? d_instantiate+0x90/0xb0 [ 1006.947798][T17940] ? alloc_empty_file+0x55/0x1c0 [ 1006.947837][T17940] ? alloc_empty_file+0x55/0x1c0 [ 1006.947870][T17940] alloc_empty_file+0x55/0x1c0 [ 1006.947906][T17940] alloc_file_pseudo+0x13a/0x230 [ 1006.947943][T17940] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1006.947980][T17940] ? _raw_spin_unlock+0x28/0x50 [ 1006.948003][T17940] ? alloc_fd+0x476/0x790 [ 1006.948033][T17940] __anon_inode_getfile+0xe8/0x280 [ 1006.948068][T17940] do_epoll_create+0x329/0x4b0 [ 1006.948097][T17940] __x64_sys_epoll_create+0x45/0x70 [ 1006.948128][T17940] do_syscall_64+0xc9/0xf80 [ 1006.948160][T17940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.948184][T17940] RIP: 0033:0x7fb71bf9af79 [ 1006.948203][T17940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1006.948226][T17940] RSP: 002b:00007fb71cec4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5 [ 1006.948248][T17940] RAX: ffffffffffffffda RBX: 00007fb71c215fa0 RCX: 00007fb71bf9af79 [ 1006.948265][T17940] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 1006.948279][T17940] RBP: 00007fb71c0316e0 R08: 0000000000000000 R09: 0000000000000000 [ 1006.948293][T17940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1006.948308][T17940] R13: 00007fb71c216038 R14: 00007fb71c215fa0 R15: 00007ffda8532d28 [ 1006.948338][T17940] [ 1007.281165][T17929] chnl_net:caif_netlink_parms(): no params data found [ 1007.513661][T17929] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.549429][T17929] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.557467][T17929] bridge_slave_0: entered allmulticast mode [ 1007.592377][T17929] bridge_slave_0: entered promiscuous mode [ 1007.613476][T17929] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.622383][T17929] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.635664][T17929] bridge_slave_1: entered allmulticast mode [ 1007.649366][T17929] bridge_slave_1: entered promiscuous mode [ 1007.707407][T17929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1007.732256][T17929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1007.832082][T17929] team0: Port device team_slave_0 added [ 1007.860027][T17929] team0: Port device team_slave_1 added [ 1007.940578][T17929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1007.947610][T17929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1007.974384][T17929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1008.008001][T17929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1008.023471][T17929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1008.076758][T17929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1008.252549][T17929] hsr_slave_0: entered promiscuous mode [ 1008.261776][T17929] hsr_slave_1: entered promiscuous mode [ 1008.274429][T17929] debugfs: 'hsr0' already exists in 'hsr' [ 1008.280453][T17929] Cannot create hsr debugfs directory [ 1008.480749][T16605] Bluetooth: hci1: command tx timeout [ 1009.302662][T17929] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1009.318872][T17929] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1009.331657][T17929] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1009.344659][T17929] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1010.201502][T17929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1010.455972][T17929] 8021q: adding VLAN 0 to HW filter on device team0 [ 1010.505234][T16694] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.512429][T16694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1010.559485][T16605] Bluetooth: hci1: command tx timeout [ 1010.678544][T16694] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.685730][T16694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1011.401168][T17929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1012.103936][T17929] veth0_vlan: entered promiscuous mode [ 1012.460680][T17929] veth1_vlan: entered promiscuous mode [ 1012.564193][T17929] veth0_macvtap: entered promiscuous mode [ 1012.578201][T17929] veth1_macvtap: entered promiscuous mode [ 1012.628575][T17929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1012.652863][T16605] Bluetooth: hci1: command tx timeout [ 1012.660538][T17929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1012.696870][T17648] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.723439][T17648] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.766286][T17648] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.790521][T17648] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.075803][T18010] zswap: compressor not available [ 1013.184261][T17615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.215212][T17615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.411450][T16691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.430254][T16691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1014.729675][T16605] Bluetooth: hci1: command tx timeout [ 1016.856539][T18059] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2459'. [ 1016.945617][T18060] vhci_hcd vhci_hcd.2: invalid port number 135 [ 1016.969289][T18060] vhci_hcd vhci_hcd.2: invalid port number 135 [ 1017.383014][T18070] FAULT_INJECTION: forcing a failure. [ 1017.383014][T18070] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.400296][T18070] CPU: 0 UID: 0 PID: 18070 Comm: syz.7.2462 Tainted: G L syzkaller #0 PREEMPT(full) [ 1017.400348][T18070] Tainted: [L]=SOFTLOCKUP [ 1017.400361][T18070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1017.400382][T18070] Call Trace: [ 1017.400393][T18070] [ 1017.400406][T18070] dump_stack_lvl+0x100/0x190 [ 1017.400452][T18070] should_fail_ex.cold+0x5/0xa [ 1017.400514][T18070] should_failslab+0xc2/0x120 [ 1017.400564][T18070] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 1017.400615][T18070] ? __d_alloc+0x34/0xa80 [ 1017.400664][T18070] ? __d_alloc+0x34/0xa80 [ 1017.400705][T18070] __d_alloc+0x34/0xa80 [ 1017.400755][T18070] d_alloc+0x4a/0x1e0 [ 1017.400801][T18070] d_alloc_name+0x83/0xb0 [ 1017.400844][T18070] ? __pfx_d_alloc_name+0x10/0x10 [ 1017.400890][T18070] ? dput.part.0+0xdd/0x570 [ 1017.400944][T18070] simple_fill_super+0x4c3/0x680 [ 1017.400989][T18070] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1017.401044][T18070] nfsd_fill_super+0x98/0x560 [ 1017.401096][T18070] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1017.401132][T18070] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1017.401188][T18070] get_tree_keyed+0x10e/0x1d0 [ 1017.401227][T18070] vfs_get_tree+0x92/0x320 [ 1017.401260][T18070] path_mount+0x7d0/0x23c0 [ 1017.401316][T18070] ? __pfx_path_mount+0x10/0x10 [ 1017.401364][T18070] ? kmem_cache_free+0x143/0x720 [ 1017.401401][T18070] ? strncpy_from_user+0x19d/0x2d0 [ 1017.401447][T18070] ? putname+0xf5/0x1a0 [ 1017.401503][T18070] ? putname+0xf5/0x1a0 [ 1017.401544][T18070] ? putname+0xfa/0x1a0 [ 1017.401593][T18070] ? __x64_sys_mount+0x293/0x310 [ 1017.401639][T18070] __x64_sys_mount+0x293/0x310 [ 1017.401687][T18070] ? __pfx___x64_sys_mount+0x10/0x10 [ 1017.401748][T18070] do_syscall_64+0xc9/0xf80 [ 1017.401796][T18070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.401831][T18070] RIP: 0033:0x7fa2db99af79 [ 1017.401859][T18070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1017.401893][T18070] RSP: 002b:00007fa2d9bd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1017.401927][T18070] RAX: ffffffffffffffda RBX: 00007fa2dbc16180 RCX: 00007fa2db99af79 [ 1017.401952][T18070] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1017.401975][T18070] RBP: 00007fa2dba316e0 R08: 0000000000000000 R09: 0000000000000000 [ 1017.401997][T18070] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1017.402019][T18070] R13: 00007fa2dbc16218 R14: 00007fa2dbc16180 R15: 00007ffd349f2768 [ 1017.402066][T18070] [ 1018.499104][T18087] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2467'. [ 1019.376931][T17226] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1019.399294][T17226] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1019.410477][T17226] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1019.422429][T17226] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1019.433232][T17226] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1020.111013][T18106] netlink: 206 bytes leftover after parsing attributes in process `syz.6.2471'. [ 1020.168269][T18108] netlink: 206 bytes leftover after parsing attributes in process `syz.3.2472'. [ 1020.429020][T18110] netlink: 334 bytes leftover after parsing attributes in process `syz.7.2473'. [ 1020.468001][T18095] chnl_net:caif_netlink_parms(): no params data found [ 1020.968263][T18095] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.985233][T18095] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.010561][T18095] bridge_slave_0: entered allmulticast mode [ 1021.018254][T18095] bridge_slave_0: entered promiscuous mode [ 1021.065461][T18095] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.131255][T18095] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.157089][T18095] bridge_slave_1: entered allmulticast mode [ 1021.211131][T18095] bridge_slave_1: entered promiscuous mode [ 1021.516537][T18095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1021.546489][T18095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1021.679078][T16647] Bluetooth: hci6: command tx timeout [ 1021.870023][T18095] team0: Port device team_slave_0 added [ 1022.021274][T18095] team0: Port device team_slave_1 added [ 1022.102809][T18095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1022.110108][T18095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1022.137986][T18095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1022.217301][T18095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1022.239626][T18095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1022.297202][T18095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1022.566781][T18095] hsr_slave_0: entered promiscuous mode [ 1022.576468][T18095] hsr_slave_1: entered promiscuous mode [ 1022.583153][T18095] debugfs: 'hsr0' already exists in 'hsr' [ 1022.590673][T18095] Cannot create hsr debugfs directory [ 1022.684410][T18146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2479'. [ 1023.334553][T18154] netlink: 206 bytes leftover after parsing attributes in process `syz.7.2482'. [ 1023.696316][T18095] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1023.769838][T16647] Bluetooth: hci6: command tx timeout [ 1023.790156][T18095] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1023.843870][T18095] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1023.894018][T18095] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1024.772171][T18095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1024.889824][T18095] 8021q: adding VLAN 0 to HW filter on device team0 [ 1024.932965][T17648] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.940211][T17648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1024.971731][T17648] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.979014][T17648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1025.437314][T18194] netlink: 206 bytes leftover after parsing attributes in process `syz.6.2490'. [ 1025.495626][T18095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1025.670386][T18196] FAULT_INJECTION: forcing a failure. [ 1025.670386][T18196] name failslab, interval 1, probability 0, space 0, times 0 [ 1025.697497][T18196] CPU: 1 UID: 0 PID: 18196 Comm: syz.3.2491 Tainted: G L syzkaller #0 PREEMPT(full) [ 1025.697555][T18196] Tainted: [L]=SOFTLOCKUP [ 1025.697569][T18196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1025.697590][T18196] Call Trace: [ 1025.697602][T18196] [ 1025.697616][T18196] dump_stack_lvl+0x100/0x190 [ 1025.697666][T18196] should_fail_ex.cold+0x5/0xa [ 1025.697733][T18196] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1025.697782][T18196] should_failslab+0xc2/0x120 [ 1025.697832][T18196] kmem_cache_alloc_noprof+0x83/0x780 [ 1025.697879][T18196] ? skb_clone+0x190/0x400 [ 1025.697938][T18196] ? skb_clone+0x190/0x400 [ 1025.698003][T18196] skb_clone+0x190/0x400 [ 1025.698056][T18196] netlink_deliver_tap+0xaed/0xcc0 [ 1025.698128][T18196] netlink_unicast+0x650/0x870 [ 1025.698215][T18196] ? __pfx_netlink_unicast+0x10/0x10 [ 1025.698279][T18196] ? __asan_memset+0x23/0x50 [ 1025.698326][T18196] ? __build_skb_around+0x278/0x390 [ 1025.698371][T18196] ? is_vmalloc_addr+0x86/0xa0 [ 1025.698416][T18196] netlink_sendmsg+0x8b0/0xda0 [ 1025.698480][T18196] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1025.698540][T18196] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1025.698593][T18196] ____sys_sendmsg+0xa54/0xc30 [ 1025.698637][T18196] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1025.698694][T18196] ? __pfx___schedule+0x10/0x10 [ 1025.698740][T18196] ___sys_sendmsg+0x190/0x1e0 [ 1025.698785][T18196] ? __pfx____sys_sendmsg+0x10/0x10 [ 1025.698877][T18196] __sys_sendmmsg+0x205/0x430 [ 1025.698936][T18196] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1025.698987][T18196] ? file_init_path+0x48e/0x670 [ 1025.699047][T18196] ? __pfx_do_futex+0x10/0x10 [ 1025.699120][T18196] ? xfd_validate_state+0x129/0x190 [ 1025.699184][T18196] __x64_sys_sendmmsg+0x9c/0x100 [ 1025.699236][T18196] ? lockdep_hardirqs_on+0x78/0x100 [ 1025.699278][T18196] do_syscall_64+0xc9/0xf80 [ 1025.699325][T18196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.699361][T18196] RIP: 0033:0x7f229ab9af79 [ 1025.699388][T18196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1025.699422][T18196] RSP: 002b:00007f229b970028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1025.699466][T18196] RAX: ffffffffffffffda RBX: 00007f229ae15fa0 RCX: 00007f229ab9af79 [ 1025.699506][T18196] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000007 [ 1025.699528][T18196] RBP: 00007f229ac316e0 R08: 0000000000000000 R09: 0000000000000000 [ 1025.699551][T18196] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 1025.699572][T18196] R13: 00007f229ae16038 R14: 00007f229ae15fa0 R15: 00007ffc561c2298 [ 1025.699631][T18196] [ 1025.984230][T16647] Bluetooth: hci6: command tx timeout [ 1026.174616][T18196] Invalid ELF header magic: != ELF [ 1026.375337][T18095] veth0_vlan: entered promiscuous mode [ 1026.484047][T18095] veth1_vlan: entered promiscuous mode [ 1026.620178][T18095] veth0_macvtap: entered promiscuous mode [ 1026.645786][T18095] veth1_macvtap: entered promiscuous mode [ 1026.700745][T18095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1026.734164][T18095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1026.777547][T17648] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.797106][T17648] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.836493][T17648] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.855289][T17648] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.193268][T16691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.206218][T16691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.306626][T16691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.321264][T16691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.999194][T18097] Bluetooth: hci6: command tx timeout [ 1028.995012][T18254] zswap: compressor not available [ 1029.325226][T18266] vhci_hcd vhci_hcd.2: invalid port number 18 [ 1029.331734][T18266] vhci_hcd vhci_hcd.2: invalid port number 18 [ 1030.356249][T18287] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2510'. [ 1030.449488][T18292] netlink: 25 bytes leftover after parsing attributes in process `syz.6.2510'. [ 1030.677701][T18297] FAULT_INJECTION: forcing a failure. [ 1030.677701][T18297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1030.693315][T18297] CPU: 1 UID: 0 PID: 18297 Comm: syz.6.2512 Tainted: G L syzkaller #0 PREEMPT(full) [ 1030.693366][T18297] Tainted: [L]=SOFTLOCKUP [ 1030.693378][T18297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1030.693398][T18297] Call Trace: [ 1030.693409][T18297] [ 1030.693422][T18297] dump_stack_lvl+0x100/0x190 [ 1030.693467][T18297] should_fail_ex.cold+0x5/0xa [ 1030.693522][T18297] _copy_from_user+0x2e/0xd0 [ 1030.693575][T18297] copy_msghdr_from_user+0x9f/0x4f0 [ 1030.693615][T18297] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1030.693660][T18297] ? _kstrtoull+0x13c/0x1f0 [ 1030.693697][T18297] ? __pfx__kstrtoull+0x10/0x10 [ 1030.693742][T18297] ___sys_sendmsg+0x106/0x1e0 [ 1030.693785][T18297] ? __pfx____sys_sendmsg+0x10/0x10 [ 1030.693877][T18297] __sys_sendmmsg+0x205/0x430 [ 1030.693933][T18297] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1030.693994][T18297] ? __fget_files+0x215/0x3d0 [ 1030.694040][T18297] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1030.694100][T18297] ? fput+0x79/0x100 [ 1030.694145][T18297] ? ksys_write+0x1ac/0x250 [ 1030.694183][T18297] ? __pfx_ksys_write+0x10/0x10 [ 1030.694228][T18297] __x64_sys_sendmmsg+0x9c/0x100 [ 1030.694279][T18297] ? lockdep_hardirqs_on+0x78/0x100 [ 1030.694319][T18297] do_syscall_64+0xc9/0xf80 [ 1030.694363][T18297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.694396][T18297] RIP: 0033:0x7fb71bf9af79 [ 1030.694422][T18297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1030.694453][T18297] RSP: 002b:00007fb71cec4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1030.694485][T18297] RAX: ffffffffffffffda RBX: 00007fb71c215fa0 RCX: 00007fb71bf9af79 [ 1030.694507][T18297] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 1030.694528][T18297] RBP: 00007fb71cec4090 R08: 0000000000000000 R09: 0000000000000000 [ 1030.694548][T18297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1030.694568][T18297] R13: 00007fb71c216038 R14: 00007fb71c215fa0 R15: 00007ffda8532d28 [ 1030.694613][T18297] [ 1031.473592][T18302] netlink: 'syz.6.2513': attribute type 5 has an invalid length. [ 1031.500576][T18302] netlink: 4158 bytes leftover after parsing attributes in process `syz.6.2513'. [ 1031.569144][T18301] netlink: 'syz.6.2513': attribute type 11 has an invalid length. [ 1031.587410][T18301] netlink: 'syz.6.2513': attribute type 11 has an invalid length. [ 1031.649307][T18302] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2513'. [ 1031.674334][T18097] Bluetooth: hci6: Malformed LE Event: 0x0b [ 1031.700543][T18301] netlink: 'syz.6.2513': attribute type 11 has an invalid length. [ 1031.740749][T18301] netlink: 'syz.6.2513': attribute type 11 has an invalid length. [ 1031.794867][T18303] HfR: entered promiscuous mode [ 1031.830118][T18299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1033.251555][T18313] random: crng reseeded on system resumption [ 1034.143002][T18336] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1034.456743][T18343] FAULT_INJECTION: forcing a failure. [ 1034.456743][T18343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1034.529037][T18343] CPU: 1 UID: 0 PID: 18343 Comm: syz.6.2521 Tainted: G L syzkaller #0 PREEMPT(full) [ 1034.529087][T18343] Tainted: [L]=SOFTLOCKUP [ 1034.529100][T18343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1034.529119][T18343] Call Trace: [ 1034.529130][T18343] [ 1034.529142][T18343] dump_stack_lvl+0x100/0x190 [ 1034.529186][T18343] should_fail_ex.cold+0x5/0xa [ 1034.529238][T18343] _copy_from_user+0x2e/0xd0 [ 1034.529288][T18343] ____sys_sendmsg+0x1d1/0xc30 [ 1034.529328][T18343] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1034.529369][T18343] ? _kstrtoull+0x13c/0x1f0 [ 1034.529404][T18343] ? __pfx__kstrtoull+0x10/0x10 [ 1034.529448][T18343] ___sys_sendmsg+0x190/0x1e0 [ 1034.529507][T18343] ? __pfx____sys_sendmsg+0x10/0x10 [ 1034.529595][T18343] __sys_sendmmsg+0x205/0x430 [ 1034.529650][T18343] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1034.529710][T18343] ? __fget_files+0x215/0x3d0 [ 1034.529748][T18343] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1034.529819][T18343] ? fput+0x79/0x100 [ 1034.529865][T18343] ? ksys_write+0x1ac/0x250 [ 1034.529914][T18343] ? __pfx_ksys_write+0x10/0x10 [ 1034.529958][T18343] __x64_sys_sendmmsg+0x9c/0x100 [ 1034.530005][T18343] ? lockdep_hardirqs_on+0x78/0x100 [ 1034.530042][T18343] do_syscall_64+0xc9/0xf80 [ 1034.530085][T18343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.530117][T18343] RIP: 0033:0x7fb71bf9af79 [ 1034.530142][T18343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1034.530174][T18343] RSP: 002b:00007fb71cec4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1034.530204][T18343] RAX: ffffffffffffffda RBX: 00007fb71c215fa0 RCX: 00007fb71bf9af79 [ 1034.530225][T18343] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 1034.530245][T18343] RBP: 00007fb71cec4090 R08: 0000000000000000 R09: 0000000000000000 [ 1034.530266][T18343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1034.530286][T18343] R13: 00007fb71c216038 R14: 00007fb71c215fa0 R15: 00007ffda8532d28 [ 1034.530329][T18343] [ 1035.112116][T18349] Invalid ELF header magic: != ELF [ 1036.267688][T18357] overlayfs: missing 'lowerdir' [ 1037.104901][T18379] vivid-007: ================= START STATUS ================= [ 1037.121968][T18379] vivid-007: Generate PTS: true [ 1037.133893][T18379] vivid-007: Generate SCR: true [ 1037.308297][T18379] tpg source WxH: 320x240 (Y'CbCr) [ 1037.392904][T18379] tpg field: 1 [ 1037.396382][T18379] tpg crop: (0,0)/320x240 [ 1037.411702][T18379] tpg compose: (0,0)/320x240 [ 1037.416380][T18379] tpg colorspace: 8 [ 1037.431972][T18379] tpg transfer function: 0/0 [ 1037.436637][T18379] tpg Y'CbCr encoding: 0/0 [ 1037.582976][T18379] tpg quantization: 0/0 [ 1037.641099][T18379] tpg RGB range: 0/2 [ 1037.679178][T18379] vivid-007: ================== END STATUS ================== [ 1038.653906][T18404] FAULT_INJECTION: forcing a failure. [ 1038.653906][T18404] name failslab, interval 1, probability 0, space 0, times 0 [ 1038.667395][T18404] CPU: 1 UID: 0 PID: 18404 Comm: syz.3.2535 Tainted: G L syzkaller #0 PREEMPT(full) [ 1038.667447][T18404] Tainted: [L]=SOFTLOCKUP [ 1038.667461][T18404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1038.667481][T18404] Call Trace: [ 1038.667491][T18404] [ 1038.667505][T18404] dump_stack_lvl+0x100/0x190 [ 1038.667552][T18404] should_fail_ex.cold+0x5/0xa [ 1038.667608][T18404] should_failslab+0xc2/0x120 [ 1038.667657][T18404] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 1038.667709][T18404] ? __d_alloc+0x34/0xa80 [ 1038.667759][T18404] ? __d_alloc+0x34/0xa80 [ 1038.667799][T18404] __d_alloc+0x34/0xa80 [ 1038.667849][T18404] d_alloc+0x4a/0x1e0 [ 1038.667897][T18404] d_alloc_name+0x83/0xb0 [ 1038.667943][T18404] ? __pfx_d_alloc_name+0x10/0x10 [ 1038.667991][T18404] ? dput.part.0+0xdd/0x570 [ 1038.668046][T18404] simple_fill_super+0x4c3/0x680 [ 1038.668094][T18404] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1038.668153][T18404] nfsd_fill_super+0x98/0x560 [ 1038.668218][T18404] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1038.668256][T18404] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1038.668312][T18404] get_tree_keyed+0x10e/0x1d0 [ 1038.668354][T18404] vfs_get_tree+0x92/0x320 [ 1038.668387][T18404] path_mount+0x7d0/0x23c0 [ 1038.668442][T18404] ? __pfx_path_mount+0x10/0x10 [ 1038.668490][T18404] ? kmem_cache_free+0x143/0x720 [ 1038.668527][T18404] ? strncpy_from_user+0x19d/0x2d0 [ 1038.668576][T18404] ? putname+0xf5/0x1a0 [ 1038.668627][T18404] ? putname+0xf5/0x1a0 [ 1038.668669][T18404] ? putname+0xfa/0x1a0 [ 1038.668719][T18404] ? __x64_sys_mount+0x293/0x310 [ 1038.668766][T18404] __x64_sys_mount+0x293/0x310 [ 1038.668816][T18404] ? __pfx___x64_sys_mount+0x10/0x10 [ 1038.668881][T18404] do_syscall_64+0xc9/0xf80 [ 1038.668929][T18404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.668963][T18404] RIP: 0033:0x7f229ab9af79 [ 1038.668992][T18404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1038.669028][T18404] RSP: 002b:00007f2298dd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1038.669062][T18404] RAX: ffffffffffffffda RBX: 00007f229ae16180 RCX: 00007f229ab9af79 [ 1038.669086][T18404] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1038.669108][T18404] RBP: 00007f229ac316e0 R08: 0000000000000000 R09: 0000000000000000 [ 1038.669129][T18404] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1038.669150][T18404] R13: 00007f229ae16218 R14: 00007f229ae16180 R15: 00007ffc561c2298 [ 1038.669206][T18404] [ 1039.622296][T18400] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2536'. [ 1039.631442][T18412] FAULT_INJECTION: forcing a failure. [ 1039.631442][T18412] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1039.647234][T18412] CPU: 0 UID: 0 PID: 18412 Comm: syz.3.2538 Tainted: G L syzkaller #0 PREEMPT(full) [ 1039.647281][T18412] Tainted: [L]=SOFTLOCKUP [ 1039.647292][T18412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1039.647311][T18412] Call Trace: [ 1039.647321][T18412] [ 1039.647333][T18412] dump_stack_lvl+0x100/0x190 [ 1039.647377][T18412] should_fail_ex.cold+0x5/0xa [ 1039.647432][T18412] get_futex_key+0x295/0x1620 [ 1039.647480][T18412] ? __pfx_get_futex_key+0x10/0x10 [ 1039.647536][T18412] futex_wake+0xea/0x530 [ 1039.647592][T18412] ? __pfx_futex_wake+0x10/0x10 [ 1039.647644][T18412] ? exit_mm_release+0x19/0x30 [ 1039.647703][T18412] do_futex+0x32b/0x350 [ 1039.647749][T18412] ? __pfx_do_futex+0x10/0x10 [ 1039.647793][T18412] ? __might_fault+0xc5/0x140 [ 1039.647854][T18412] mm_release+0x24a/0x2f0 [ 1039.647893][T18412] do_exit+0x675/0x2a30 [ 1039.647947][T18412] ? __pfx_do_exit+0x10/0x10 [ 1039.647993][T18412] ? do_raw_spin_lock+0x128/0x260 [ 1039.648041][T18412] ? find_held_lock+0x2b/0x80 [ 1039.648069][T18412] ? get_signal+0x7e0/0x21e0 [ 1039.648138][T18412] do_group_exit+0xd5/0x2a0 [ 1039.648192][T18412] get_signal+0x1ec7/0x21e0 [ 1039.648246][T18412] ? __pfx_get_signal+0x10/0x10 [ 1039.648288][T18412] ? do_futex+0x192/0x350 [ 1039.648338][T18412] arch_do_signal_or_restart+0x91/0x770 [ 1039.648384][T18412] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 1039.648427][T18412] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1039.648484][T18412] ? __pfx___x64_sys_futex+0x10/0x10 [ 1039.648530][T18412] ? ksys_mmap_pgoff+0x85/0x5b0 [ 1039.648597][T18412] exit_to_user_mode_loop+0x86/0x4b0 [ 1039.648641][T18412] ? rcu_is_watching+0x12/0xc0 [ 1039.648675][T18412] do_syscall_64+0x4ea/0xf80 [ 1039.648720][T18412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.648753][T18412] RIP: 0033:0x7f229ab9af79 [ 1039.648778][T18412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1039.648809][T18412] RSP: 002b:00007f229b9700e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1039.648859][T18412] RAX: fffffffffffffe00 RBX: 00007f229ae15fa8 RCX: 00007f229ab9af79 [ 1039.648882][T18412] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f229ae15fa8 [ 1039.648902][T18412] RBP: 00007f229ae15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1039.648926][T18412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1039.648946][T18412] R13: 00007f229ae16038 R14: 00007ffc561c21b0 R15: 00007ffc561c2298 [ 1039.648988][T18412] [ 1040.101163][T18416] binder: 18415:18416 ioctl c0306201 0 returned -14 [ 1040.978748][T18429] netlink: 186 bytes leftover after parsing attributes in process `syz.3.2542'. [ 1041.144920][T18431] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 1041.724097][T18443] FAULT_INJECTION: forcing a failure. [ 1041.724097][T18443] name failslab, interval 1, probability 0, space 0, times 0 [ 1041.768426][T18443] CPU: 0 UID: 0 PID: 18443 Comm: syz.8.2547 Tainted: G L syzkaller #0 PREEMPT(full) [ 1041.768475][T18443] Tainted: [L]=SOFTLOCKUP [ 1041.768486][T18443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1041.768506][T18443] Call Trace: [ 1041.768516][T18443] [ 1041.768529][T18443] dump_stack_lvl+0x100/0x190 [ 1041.768574][T18443] should_fail_ex.cold+0x5/0xa [ 1041.768628][T18443] should_failslab+0xc2/0x120 [ 1041.768675][T18443] kmem_cache_alloc_noprof+0x83/0x780 [ 1041.768718][T18443] ? __pfx_acct_collect+0x10/0x10 [ 1041.768747][T18443] ? taskstats_exit+0x650/0xbd0 [ 1041.768787][T18443] ? taskstats_exit+0x650/0xbd0 [ 1041.768817][T18443] taskstats_exit+0x650/0xbd0 [ 1041.768849][T18443] ? __pfx_acct_update_integrals+0x10/0x10 [ 1041.768942][T18443] ? __pfx_taskstats_exit+0x10/0x10 [ 1041.768979][T18443] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1041.769015][T18443] ? exit_signals+0x395/0xaf0 [ 1041.769060][T18443] do_exit+0x5ca/0x2a30 [ 1041.769117][T18443] ? __pfx_do_exit+0x10/0x10 [ 1041.769166][T18443] ? do_raw_spin_lock+0x128/0x260 [ 1041.769216][T18443] ? find_held_lock+0x2b/0x80 [ 1041.769247][T18443] ? get_signal+0x7e0/0x21e0 [ 1041.769289][T18443] do_group_exit+0xd5/0x2a0 [ 1041.769343][T18443] get_signal+0x1ec7/0x21e0 [ 1041.769409][T18443] ? __pfx_get_signal+0x10/0x10 [ 1041.769449][T18443] ? do_futex+0x192/0x350 [ 1041.769497][T18443] arch_do_signal_or_restart+0x91/0x770 [ 1041.769542][T18443] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 1041.769581][T18443] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1041.769638][T18443] ? __pfx___x64_sys_futex+0x10/0x10 [ 1041.769682][T18443] ? ksys_mmap_pgoff+0x85/0x5b0 [ 1041.769737][T18443] exit_to_user_mode_loop+0x86/0x4b0 [ 1041.769782][T18443] ? rcu_is_watching+0x12/0xc0 [ 1041.769816][T18443] do_syscall_64+0x4ea/0xf80 [ 1041.769860][T18443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.769904][T18443] RIP: 0033:0x7f6cd959af79 [ 1041.769929][T18443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1041.769967][T18443] RSP: 002b:00007f6cda4810e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1041.769999][T18443] RAX: fffffffffffffe00 RBX: 00007f6cd9815fa8 RCX: 00007f6cd959af79 [ 1041.770021][T18443] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6cd9815fa8 [ 1041.770041][T18443] RBP: 00007f6cd9815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1041.770062][T18443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1041.770082][T18443] R13: 00007f6cd9816038 R14: 00007ffeb7e5b350 R15: 00007ffeb7e5b438 [ 1041.770125][T18443] [ 1042.387657][T18097] Bluetooth: hci5: unexpected event 0x3e length: 508 > 260 [ 1042.387705][T18097] Bluetooth: hci5: unexpected subevent 0x02 length: 507 > 260 [ 1042.408365][T18097] Bluetooth: hci5: Dropping invalid advertising data [ 1042.408410][T18097] Bluetooth: hci5: unknown advertising packet type: 0xe9 [ 1042.408468][T18097] Bluetooth: hci5: Dropping invalid advertising data [ 1042.408509][T18097] Bluetooth: hci5: Malformed LE Event: 0x02 [ 1044.650935][T18474] FAULT_INJECTION: forcing a failure. [ 1044.650935][T18474] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1044.665955][T18470] FAULT_INJECTION: forcing a failure. [ 1044.665955][T18470] name failslab, interval 1, probability 0, space 0, times 0 [ 1044.904178][T18474] CPU: 0 UID: 0 PID: 18474 Comm: syz.8.2556 Tainted: G L syzkaller #0 PREEMPT(full) [ 1044.904228][T18474] Tainted: [L]=SOFTLOCKUP [ 1044.904239][T18474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1044.904258][T18474] Call Trace: [ 1044.904270][T18474] [ 1044.904283][T18474] dump_stack_lvl+0x100/0x190 [ 1044.904329][T18474] should_fail_ex.cold+0x5/0xa [ 1044.904381][T18474] get_futex_key+0x295/0x1620 [ 1044.904427][T18474] ? __pfx_get_futex_key+0x10/0x10 [ 1044.904482][T18474] futex_wake+0xea/0x530 [ 1044.904537][T18474] ? __pfx_futex_wake+0x10/0x10 [ 1044.904588][T18474] ? exit_mm_release+0x19/0x30 [ 1044.904644][T18474] do_futex+0x32b/0x350 [ 1044.904691][T18474] ? __pfx_do_futex+0x10/0x10 [ 1044.904734][T18474] ? __might_fault+0xc5/0x140 [ 1044.904783][T18474] mm_release+0x24a/0x2f0 [ 1044.904831][T18474] do_exit+0x675/0x2a30 [ 1044.904887][T18474] ? __pfx_do_exit+0x10/0x10 [ 1044.904936][T18474] ? do_raw_spin_lock+0x128/0x260 [ 1044.904986][T18474] ? find_held_lock+0x2b/0x80 [ 1044.905018][T18474] ? get_signal+0x7e0/0x21e0 [ 1044.905062][T18474] do_group_exit+0xd5/0x2a0 [ 1044.905116][T18474] get_signal+0x1ec7/0x21e0 [ 1044.905170][T18474] ? __pfx_get_signal+0x10/0x10 [ 1044.905212][T18474] ? do_futex+0x192/0x350 [ 1044.905264][T18474] arch_do_signal_or_restart+0x91/0x770 [ 1044.905310][T18474] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 1044.905355][T18474] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1044.905414][T18474] ? __pfx___x64_sys_futex+0x10/0x10 [ 1044.905458][T18474] ? ksys_mmap_pgoff+0x85/0x5b0 [ 1044.905515][T18474] exit_to_user_mode_loop+0x86/0x4b0 [ 1044.905562][T18474] ? rcu_is_watching+0x12/0xc0 [ 1044.905599][T18474] do_syscall_64+0x4ea/0xf80 [ 1044.905644][T18474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.905678][T18474] RIP: 0033:0x7f6cd959af79 [ 1044.905705][T18474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1044.905737][T18474] RSP: 002b:00007f6cda4810e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1044.905769][T18474] RAX: fffffffffffffe00 RBX: 00007f6cd9815fa8 RCX: 00007f6cd959af79 [ 1044.905792][T18474] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6cd9815fa8 [ 1044.905813][T18474] RBP: 00007f6cd9815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1044.905840][T18474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1044.905860][T18474] R13: 00007f6cd9816038 R14: 00007ffeb7e5b350 R15: 00007ffeb7e5b438 [ 1044.905904][T18474] [ 1045.282568][T18470] CPU: 0 UID: 0 PID: 18470 Comm: syz.3.2553 Tainted: G L syzkaller #0 PREEMPT(full) [ 1045.282623][T18470] Tainted: [L]=SOFTLOCKUP [ 1045.282636][T18470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1045.282657][T18470] Call Trace: [ 1045.282669][T18470] [ 1045.282683][T18470] dump_stack_lvl+0x100/0x190 [ 1045.282730][T18470] should_fail_ex.cold+0x5/0xa [ 1045.282788][T18470] should_failslab+0xc2/0x120 [ 1045.282838][T18470] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 1045.282888][T18470] ? shmem_alloc_inode+0x25/0x50 [ 1045.282954][T18470] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1045.283003][T18470] ? shmem_alloc_inode+0x25/0x50 [ 1045.283054][T18470] ? shmem_get_inode+0x885/0xf30 [ 1045.283082][T18470] shmem_alloc_inode+0x25/0x50 [ 1045.283133][T18470] alloc_inode+0x68/0x250 [ 1045.283186][T18470] new_inode+0x22/0x1c0 [ 1045.283240][T18470] shmem_get_inode+0x197/0xf30 [ 1045.283281][T18470] shmem_mknod+0x1a2/0x3b0 [ 1045.283316][T18470] ? __pfx_shmem_create+0x10/0x10 [ 1045.283350][T18470] lookup_open.isra.0+0x139b/0x1890 [ 1045.283395][T18470] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1045.283457][T18470] ? __pfx___might_resched+0x10/0x10 [ 1045.283509][T18470] ? mnt_get_write_access+0x52/0x2f0 [ 1045.283570][T18470] ? __pfx_down_write+0x10/0x10 [ 1045.283616][T18470] ? mnt_get_write_access+0x1e9/0x2f0 [ 1045.283678][T18470] path_openat+0x117d/0x3120 [ 1045.283736][T18470] ? __pfx_path_openat+0x10/0x10 [ 1045.283795][T18470] do_filp_open+0x1f7/0x420 [ 1045.283842][T18470] ? __pfx_do_filp_open+0x10/0x10 [ 1045.283925][T18470] ? alloc_fd+0x476/0x790 [ 1045.283978][T18470] do_sys_openat2+0x12e/0x220 [ 1045.284035][T18470] ? __pfx_do_sys_openat2+0x10/0x10 [ 1045.284093][T18470] ? __fget_files+0x21f/0x3d0 [ 1045.284142][T18470] __x64_sys_open+0xfe/0x1d0 [ 1045.284196][T18470] ? __pfx___x64_sys_open+0x10/0x10 [ 1045.284250][T18470] ? xfd_validate_state+0x129/0x190 [ 1045.284320][T18470] do_syscall_64+0xc9/0xf80 [ 1045.284367][T18470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.284404][T18470] RIP: 0033:0x7f229ab9af79 [ 1045.284432][T18470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1045.284467][T18470] RSP: 002b:00007f2298dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1045.284502][T18470] RAX: ffffffffffffffda RBX: 00007f229ae16180 RCX: 00007f229ab9af79 [ 1045.284526][T18470] RDX: 0000000000000110 RSI: 0000000000022240 RDI: 0000000000000000 [ 1045.284549][T18470] RBP: 00007f229ac316e0 R08: 0000000000000000 R09: 0000000000000000 [ 1045.284570][T18470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1045.284592][T18470] R13: 00007f229ae16218 R14: 00007f229ae16180 R15: 00007ffc561c2298 [ 1045.284638][T18470] [ 1045.862802][T18475] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input87 [ 1046.845546][T18501] FAULT_INJECTION: forcing a failure. [ 1046.845546][T18501] name failslab, interval 1, probability 0, space 0, times 0 [ 1046.873356][T18501] CPU: 0 UID: 0 PID: 18501 Comm: syz.8.2559 Tainted: G L syzkaller #0 PREEMPT(full) [ 1046.873410][T18501] Tainted: [L]=SOFTLOCKUP [ 1046.873422][T18501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1046.873449][T18501] Call Trace: [ 1046.873461][T18501] [ 1046.873475][T18501] dump_stack_lvl+0x100/0x190 [ 1046.873522][T18501] should_fail_ex.cold+0x5/0xa [ 1046.873575][T18501] should_failslab+0xc2/0x120 [ 1046.873625][T18501] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 1046.873674][T18501] ? _raw_spin_unlock+0x28/0x50 [ 1046.873710][T18501] ? alloc_inode+0x183/0x250 [ 1046.873767][T18501] ? alloc_inode+0x183/0x250 [ 1046.873815][T18501] alloc_inode+0x183/0x250 [ 1046.873866][T18501] new_inode+0x22/0x1c0 [ 1046.873913][T18501] ? dput.part.0+0xdd/0x570 [ 1046.873965][T18501] simple_fill_super+0x2d9/0x680 [ 1046.874011][T18501] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1046.874066][T18501] nfsd_fill_super+0x98/0x560 [ 1046.874119][T18501] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1046.874154][T18501] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1046.874208][T18501] get_tree_keyed+0x10e/0x1d0 [ 1046.874247][T18501] vfs_get_tree+0x92/0x320 [ 1046.874279][T18501] path_mount+0x7d0/0x23c0 [ 1046.874331][T18501] ? __pfx_path_mount+0x10/0x10 [ 1046.874375][T18501] ? kmem_cache_free+0x143/0x720 [ 1046.874413][T18501] ? strncpy_from_user+0x19d/0x2d0 [ 1046.874467][T18501] ? putname+0xf5/0x1a0 [ 1046.874519][T18501] ? putname+0xf5/0x1a0 [ 1046.874558][T18501] ? putname+0xfa/0x1a0 [ 1046.874606][T18501] ? __x64_sys_mount+0x293/0x310 [ 1046.874649][T18501] __x64_sys_mount+0x293/0x310 [ 1046.874694][T18501] ? __pfx___x64_sys_mount+0x10/0x10 [ 1046.874754][T18501] do_syscall_64+0xc9/0xf80 [ 1046.874799][T18501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.874854][T18501] RIP: 0033:0x7f6cd959af79 [ 1046.874883][T18501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1046.874920][T18501] RSP: 002b:00007f6cda43f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1046.874955][T18501] RAX: ffffffffffffffda RBX: 00007f6cd9816180 RCX: 00007f6cd959af79 [ 1046.874979][T18501] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1046.875002][T18501] RBP: 00007f6cd96316e0 R08: 0000000000000000 R09: 0000000000000000 [ 1046.875024][T18501] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1046.875045][T18501] R13: 00007f6cd9816218 R14: 00007f6cd9816180 R15: 00007ffeb7e5b438 [ 1046.875092][T18501] [ 1049.271902][T18539] FAULT_INJECTION: forcing a failure. [ 1049.271902][T18539] name failslab, interval 1, probability 0, space 0, times 0 [ 1049.284708][T18539] CPU: 0 UID: 0 PID: 18539 Comm: syz.6.2567 Tainted: G L syzkaller #0 PREEMPT(full) [ 1049.284760][T18539] Tainted: [L]=SOFTLOCKUP [ 1049.284773][T18539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1049.284795][T18539] Call Trace: [ 1049.284806][T18539] [ 1049.284820][T18539] dump_stack_lvl+0x100/0x190 [ 1049.284868][T18539] should_fail_ex.cold+0x5/0xa [ 1049.284925][T18539] should_failslab+0xc2/0x120 [ 1049.284977][T18539] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 1049.285029][T18539] ? __d_alloc+0x34/0xa80 [ 1049.285081][T18539] ? __d_alloc+0x34/0xa80 [ 1049.285122][T18539] __d_alloc+0x34/0xa80 [ 1049.285172][T18539] d_alloc+0x4a/0x1e0 [ 1049.285220][T18539] d_alloc_name+0x83/0xb0 [ 1049.285265][T18539] ? __pfx_d_alloc_name+0x10/0x10 [ 1049.285313][T18539] ? dput.part.0+0xdd/0x570 [ 1049.285368][T18539] simple_fill_super+0x4c3/0x680 [ 1049.285416][T18539] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1049.285482][T18539] nfsd_fill_super+0x98/0x560 [ 1049.285541][T18539] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1049.285578][T18539] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1049.285634][T18539] get_tree_keyed+0x10e/0x1d0 [ 1049.285675][T18539] vfs_get_tree+0x92/0x320 [ 1049.285709][T18539] path_mount+0x7d0/0x23c0 [ 1049.285764][T18539] ? __pfx_path_mount+0x10/0x10 [ 1049.285813][T18539] ? kmem_cache_free+0x143/0x720 [ 1049.285852][T18539] ? strncpy_from_user+0x19d/0x2d0 [ 1049.285899][T18539] ? putname+0xf5/0x1a0 [ 1049.285949][T18539] ? putname+0xf5/0x1a0 [ 1049.285991][T18539] ? putname+0xfa/0x1a0 [ 1049.286042][T18539] ? __x64_sys_mount+0x293/0x310 [ 1049.286089][T18539] __x64_sys_mount+0x293/0x310 [ 1049.286138][T18539] ? __pfx___x64_sys_mount+0x10/0x10 [ 1049.286198][T18539] do_syscall_64+0xc9/0xf80 [ 1049.286252][T18539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.286289][T18539] RIP: 0033:0x7fb71bf9af79 [ 1049.286318][T18539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1049.286354][T18539] RSP: 002b:00007fb71ce82028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1049.286387][T18539] RAX: ffffffffffffffda RBX: 00007fb71c216180 RCX: 00007fb71bf9af79 [ 1049.286411][T18539] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1049.286434][T18539] RBP: 00007fb71c0316e0 R08: 0000000000000000 R09: 0000000000000000 [ 1049.286464][T18539] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1049.286486][T18539] R13: 00007fb71c216218 R14: 00007fb71c216180 R15: 00007ffda8532d28 [ 1049.286533][T18539] [ 1050.073117][T18548] FAULT_INJECTION: forcing a failure. [ 1050.073117][T18548] name failslab, interval 1, probability 0, space 0, times 0 [ 1050.089979][T18548] CPU: 1 UID: 0 PID: 18548 Comm: syz.8.2568 Tainted: G L syzkaller #0 PREEMPT(full) [ 1050.090033][T18548] Tainted: [L]=SOFTLOCKUP [ 1050.090046][T18548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1050.090067][T18548] Call Trace: [ 1050.090079][T18548] [ 1050.090092][T18548] dump_stack_lvl+0x100/0x190 [ 1050.090139][T18548] should_fail_ex.cold+0x5/0xa [ 1050.090203][T18548] should_failslab+0xc2/0x120 [ 1050.090256][T18548] kmem_cache_alloc_noprof+0x83/0x780 [ 1050.090302][T18548] ? __pfx_map_id_range_down+0x10/0x10 [ 1050.090338][T18548] ? security_inode_alloc+0x3b/0x2c0 [ 1050.090407][T18548] ? security_inode_alloc+0x3b/0x2c0 [ 1050.090451][T18548] security_inode_alloc+0x3b/0x2c0 [ 1050.090499][T18548] inode_init_always_gfp+0xced/0x1040 [ 1050.090546][T18548] alloc_inode+0x8e/0x250 [ 1050.090598][T18548] new_inode+0x22/0x1c0 [ 1050.090642][T18548] ? dput.part.0+0xdd/0x570 [ 1050.090695][T18548] simple_fill_super+0x2d9/0x680 [ 1050.090741][T18548] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1050.090796][T18548] nfsd_fill_super+0x98/0x560 [ 1050.090848][T18548] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1050.090883][T18548] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1050.090936][T18548] get_tree_keyed+0x10e/0x1d0 [ 1050.090975][T18548] vfs_get_tree+0x92/0x320 [ 1050.091008][T18548] path_mount+0x7d0/0x23c0 [ 1050.091060][T18548] ? __pfx_path_mount+0x10/0x10 [ 1050.091106][T18548] ? kmem_cache_free+0x143/0x720 [ 1050.091143][T18548] ? strncpy_from_user+0x19d/0x2d0 [ 1050.091194][T18548] ? putname+0xf5/0x1a0 [ 1050.091245][T18548] ? putname+0xf5/0x1a0 [ 1050.091285][T18548] ? putname+0xfa/0x1a0 [ 1050.091332][T18548] ? __x64_sys_mount+0x293/0x310 [ 1050.091377][T18548] __x64_sys_mount+0x293/0x310 [ 1050.091424][T18548] ? __pfx___x64_sys_mount+0x10/0x10 [ 1050.091481][T18548] do_syscall_64+0xc9/0xf80 [ 1050.091527][T18548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.091562][T18548] RIP: 0033:0x7f6cd959af79 [ 1050.091589][T18548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1050.091622][T18548] RSP: 002b:00007f6cda43f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1050.091654][T18548] RAX: ffffffffffffffda RBX: 00007f6cd9816180 RCX: 00007f6cd959af79 [ 1050.091678][T18548] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1050.091700][T18548] RBP: 00007f6cd96316e0 R08: 0000000000000000 R09: 0000000000000000 [ 1050.091721][T18548] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1050.091742][T18548] R13: 00007f6cd9816218 R14: 00007f6cd9816180 R15: 00007ffeb7e5b438 [ 1050.091787][T18548] [ 1050.527065][T16647] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1050.541647][T16647] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1050.550985][T16647] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1050.561938][T16647] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1050.571106][T16647] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1050.807030][T18556] FAULT_INJECTION: forcing a failure. [ 1050.807030][T18556] name failslab, interval 1, probability 0, space 0, times 0 [ 1050.820309][T18556] CPU: 0 UID: 0 PID: 18556 Comm: syz.6.2571 Tainted: G L syzkaller #0 PREEMPT(full) [ 1050.820374][T18556] Tainted: [L]=SOFTLOCKUP [ 1050.820387][T18556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1050.820408][T18556] Call Trace: [ 1050.820421][T18556] [ 1050.820433][T18556] dump_stack_lvl+0x100/0x190 [ 1050.820482][T18556] should_fail_ex.cold+0x5/0xa [ 1050.820541][T18556] should_failslab+0xc2/0x120 [ 1050.820592][T18556] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 1050.820643][T18556] ? __d_alloc+0x34/0xa80 [ 1050.820692][T18556] ? __d_alloc+0x34/0xa80 [ 1050.820732][T18556] __d_alloc+0x34/0xa80 [ 1050.820781][T18556] d_alloc+0x4a/0x1e0 [ 1050.820827][T18556] d_alloc_name+0x83/0xb0 [ 1050.820871][T18556] ? __pfx_d_alloc_name+0x10/0x10 [ 1050.820918][T18556] ? dput.part.0+0xdd/0x570 [ 1050.820972][T18556] simple_fill_super+0x4c3/0x680 [ 1050.821019][T18556] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1050.821078][T18556] nfsd_fill_super+0x98/0x560 [ 1050.821132][T18556] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1050.821168][T18556] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1050.821224][T18556] get_tree_keyed+0x10e/0x1d0 [ 1050.821264][T18556] vfs_get_tree+0x92/0x320 [ 1050.821305][T18556] path_mount+0x7d0/0x23c0 [ 1050.821368][T18556] ? __pfx_path_mount+0x10/0x10 [ 1050.821429][T18556] ? kmem_cache_free+0x143/0x720 [ 1050.821466][T18556] ? strncpy_from_user+0x19d/0x2d0 [ 1050.821532][T18556] ? putname+0xf5/0x1a0 [ 1050.821584][T18556] ? putname+0xf5/0x1a0 [ 1050.821626][T18556] ? putname+0xfa/0x1a0 [ 1050.821676][T18556] ? __x64_sys_mount+0x293/0x310 [ 1050.821722][T18556] __x64_sys_mount+0x293/0x310 [ 1050.821772][T18556] ? __pfx___x64_sys_mount+0x10/0x10 [ 1050.821831][T18556] do_syscall_64+0xc9/0xf80 [ 1050.821879][T18556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.821916][T18556] RIP: 0033:0x7fb71bf9af79 [ 1050.821944][T18556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1050.821981][T18556] RSP: 002b:00007fb71ce82028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1050.822016][T18556] RAX: ffffffffffffffda RBX: 00007fb71c216180 RCX: 00007fb71bf9af79 [ 1050.822040][T18556] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1050.822061][T18556] RBP: 00007fb71c0316e0 R08: 0000000000000000 R09: 0000000000000000 [ 1050.822082][T18556] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1050.822104][T18556] R13: 00007fb71c216218 R14: 00007fb71c216180 R15: 00007ffda8532d28 [ 1050.822150][T18556] [ 1051.726712][T18551] chnl_net:caif_netlink_parms(): no params data found [ 1051.863260][T18559] netlink: 'syz.3.2572': attribute type 4 has an invalid length. [ 1052.397404][T18551] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.429337][T18551] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.436825][T18551] bridge_slave_0: entered allmulticast mode [ 1052.476803][T18551] bridge_slave_0: entered promiscuous mode [ 1052.534817][T18572] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2574'. [ 1052.643576][T16647] Bluetooth: hci0: command tx timeout [ 1052.763521][T18572] team0: Port device team_slave_0 removed [ 1052.974560][T18551] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.219388][T18551] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.316441][T18551] bridge_slave_1: entered allmulticast mode [ 1053.410171][T18551] bridge_slave_1: entered promiscuous mode [ 1053.511664][T18551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.573738][T18551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1053.705366][T18580] vivid-007: ================= START STATUS ================= [ 1053.810128][T18580] vivid-007: Generate PTS: true [ 1053.815130][T18580] vivid-007: Generate SCR: true [ 1053.828995][T18580] tpg source WxH: 320x240 (Y'CbCr) [ 1053.830991][T18551] team0: Port device team_slave_0 added [ 1053.942540][T18551] team0: Port device team_slave_1 added [ 1053.979093][T18580] tpg field: 1 [ 1054.043966][T18580] tpg crop: (0,0)/320x240 [ 1054.057075][T18580] tpg compose: (0,0)/320x240 [ 1054.073867][T18580] tpg colorspace: 8 [ 1054.106864][T18551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1054.129466][T18551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.187571][T18551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1054.211016][T18585] FAULT_INJECTION: forcing a failure. [ 1054.211016][T18585] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1054.224249][T18585] CPU: 0 UID: 0 PID: 18585 Comm: syz.6.2577 Tainted: G L syzkaller #0 PREEMPT(full) [ 1054.224300][T18585] Tainted: [L]=SOFTLOCKUP [ 1054.224313][T18585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1054.224337][T18585] Call Trace: [ 1054.224345][T18585] [ 1054.224354][T18585] dump_stack_lvl+0x100/0x190 [ 1054.224388][T18585] should_fail_ex.cold+0x5/0xa [ 1054.224428][T18585] get_futex_key+0x295/0x1620 [ 1054.224463][T18585] ? __pfx_get_futex_key+0x10/0x10 [ 1054.224504][T18585] futex_wake+0xea/0x530 [ 1054.224546][T18585] ? __pfx_futex_wake+0x10/0x10 [ 1054.224585][T18585] ? exit_mm_release+0x19/0x30 [ 1054.224627][T18585] do_futex+0x32b/0x350 [ 1054.224662][T18585] ? __pfx_do_futex+0x10/0x10 [ 1054.224694][T18585] ? __might_fault+0xc5/0x140 [ 1054.224729][T18585] mm_release+0x24a/0x2f0 [ 1054.224759][T18585] do_exit+0x675/0x2a30 [ 1054.224800][T18585] ? __pfx_do_exit+0x10/0x10 [ 1054.224841][T18585] ? do_raw_spin_lock+0x128/0x260 [ 1054.224876][T18585] ? find_held_lock+0x2b/0x80 [ 1054.224899][T18585] ? get_signal+0x7e0/0x21e0 [ 1054.224930][T18585] do_group_exit+0xd5/0x2a0 [ 1054.224969][T18585] get_signal+0x1ec7/0x21e0 [ 1054.225007][T18585] ? __pfx_get_signal+0x10/0x10 [ 1054.225037][T18585] ? do_futex+0x192/0x350 [ 1054.225074][T18585] arch_do_signal_or_restart+0x91/0x770 [ 1054.225108][T18585] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 1054.225140][T18585] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1054.225182][T18585] ? __pfx___x64_sys_futex+0x10/0x10 [ 1054.225216][T18585] ? ksys_mmap_pgoff+0x85/0x5b0 [ 1054.225257][T18585] exit_to_user_mode_loop+0x86/0x4b0 [ 1054.225292][T18585] ? rcu_is_watching+0x12/0xc0 [ 1054.225318][T18585] do_syscall_64+0x4ea/0xf80 [ 1054.225351][T18585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.225376][T18585] RIP: 0033:0x7fb71bf9af79 [ 1054.225395][T18585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1054.225420][T18585] RSP: 002b:00007fb71cec40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1054.225443][T18585] RAX: fffffffffffffe00 RBX: 00007fb71c215fa8 RCX: 00007fb71bf9af79 [ 1054.225460][T18585] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb71c215fa8 [ 1054.225475][T18585] RBP: 00007fb71c215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1054.225491][T18585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1054.225505][T18585] R13: 00007fb71c216038 R14: 00007ffda8532c40 R15: 00007ffda8532d28 [ 1054.225536][T18585] [ 1054.494078][T18551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1054.501105][T18551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.527054][T18551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1054.577078][T18551] hsr_slave_0: entered promiscuous mode [ 1054.584036][T18551] hsr_slave_1: entered promiscuous mode [ 1054.590731][T18551] debugfs: 'hsr0' already exists in 'hsr' [ 1054.596481][T18551] Cannot create hsr debugfs directory [ 1054.719486][T16647] Bluetooth: hci0: command tx timeout [ 1054.772730][T18580] tpg transfer function: 0/0 [ 1054.878676][T18580] tpg Y'CbCr encoding: 0/0 [ 1054.900071][T18580] tpg quantization: 0/0 [ 1054.904307][T18580] tpg RGB range: 0/2 [ 1054.908253][T18580] vivid-007: ================== END STATUS ================== [ 1055.072399][T18551] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1055.112332][T18551] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1055.176889][T18551] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1055.230765][T18551] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1055.797203][T18551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1055.887441][T18551] 8021q: adding VLAN 0 to HW filter on device team0 [ 1056.100599][T16636] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.107745][T16636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1056.170865][T16636] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.178041][T16636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1056.240652][T18610] FAULT_INJECTION: forcing a failure. [ 1056.240652][T18610] name failslab, interval 1, probability 0, space 0, times 0 [ 1056.253934][T18610] CPU: 1 UID: 0 PID: 18610 Comm: syz.3.2581 Tainted: G L syzkaller #0 PREEMPT(full) [ 1056.253999][T18610] Tainted: [L]=SOFTLOCKUP [ 1056.254020][T18610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1056.254041][T18610] Call Trace: [ 1056.254057][T18610] [ 1056.254070][T18610] dump_stack_lvl+0x100/0x190 [ 1056.254142][T18610] should_fail_ex.cold+0x5/0xa [ 1056.254202][T18610] should_failslab+0xc2/0x120 [ 1056.254254][T18610] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 1056.254305][T18610] ? _raw_spin_unlock+0x28/0x50 [ 1056.254341][T18610] ? alloc_inode+0x183/0x250 [ 1056.254408][T18610] ? alloc_inode+0x183/0x250 [ 1056.254456][T18610] alloc_inode+0x183/0x250 [ 1056.254508][T18610] new_inode+0x22/0x1c0 [ 1056.254557][T18610] ? dput.part.0+0xdd/0x570 [ 1056.254612][T18610] simple_fill_super+0x2d9/0x680 [ 1056.254659][T18610] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1056.254717][T18610] nfsd_fill_super+0x98/0x560 [ 1056.254772][T18610] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1056.254816][T18610] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1056.254871][T18610] get_tree_keyed+0x10e/0x1d0 [ 1056.254912][T18610] vfs_get_tree+0x92/0x320 [ 1056.254945][T18610] path_mount+0x7d0/0x23c0 [ 1056.254997][T18610] ? __pfx_path_mount+0x10/0x10 [ 1056.255044][T18610] ? kmem_cache_free+0x143/0x720 [ 1056.255083][T18610] ? strncpy_from_user+0x19d/0x2d0 [ 1056.255131][T18610] ? putname+0xf5/0x1a0 [ 1056.255182][T18610] ? putname+0xf5/0x1a0 [ 1056.255223][T18610] ? putname+0xfa/0x1a0 [ 1056.255273][T18610] ? __x64_sys_mount+0x293/0x310 [ 1056.255320][T18610] __x64_sys_mount+0x293/0x310 [ 1056.255368][T18610] ? __pfx___x64_sys_mount+0x10/0x10 [ 1056.255430][T18610] do_syscall_64+0xc9/0xf80 [ 1056.255477][T18610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.255512][T18610] RIP: 0033:0x7f229ab9af79 [ 1056.255539][T18610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1056.255576][T18610] RSP: 002b:00007f2298dd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1056.255610][T18610] RAX: ffffffffffffffda RBX: 00007f229ae16180 RCX: 00007f229ab9af79 [ 1056.255634][T18610] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1056.255656][T18610] RBP: 00007f229ac316e0 R08: 0000000000000000 R09: 0000000000000000 [ 1056.255677][T18610] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1056.255699][T18610] R13: 00007f229ae16218 R14: 00007f229ae16180 R15: 00007ffc561c2298 [ 1056.255745][T18610] [ 1056.960779][T18097] Bluetooth: hci0: command tx timeout [ 1057.366100][T18551] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1057.413775][T18551] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1057.993089][T18626] tipc: Started in network mode [ 1057.998261][T18626] tipc: Node identity ffffffff, cluster identity 4711 [ 1058.008418][T18626] tipc: Node number set to 4294967295 [ 1058.147088][T18551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1058.814145][T18551] veth0_vlan: entered promiscuous mode [ 1058.840716][T18551] veth1_vlan: entered promiscuous mode [ 1058.901696][T18551] veth0_macvtap: entered promiscuous mode [ 1058.922658][T18551] veth1_macvtap: entered promiscuous mode [ 1058.993562][T18551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1059.041840][T16647] Bluetooth: hci0: command tx timeout [ 1059.087387][T18551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1059.152623][T16636] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.175965][T16636] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.194921][T16636] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.211909][T16636] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.476748][T16691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.485323][T16691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.591183][T16696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.601791][T16696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.951692][T18661] FAULT_INJECTION: forcing a failure. [ 1059.951692][T18661] name failslab, interval 1, probability 0, space 0, times 0 [ 1059.987890][T18661] CPU: 0 UID: 0 PID: 18661 Comm: syz.8.2590 Tainted: G L syzkaller #0 PREEMPT(full) [ 1059.987944][T18661] Tainted: [L]=SOFTLOCKUP [ 1059.987957][T18661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1059.987977][T18661] Call Trace: [ 1059.987989][T18661] [ 1059.988003][T18661] dump_stack_lvl+0x100/0x190 [ 1059.988050][T18661] should_fail_ex.cold+0x5/0xa [ 1059.988109][T18661] should_failslab+0xc2/0x120 [ 1059.988160][T18661] kmem_cache_alloc_noprof+0x83/0x780 [ 1059.988205][T18661] ? __pfx_map_id_range_down+0x10/0x10 [ 1059.988239][T18661] ? security_inode_alloc+0x3b/0x2c0 [ 1059.988293][T18661] ? security_inode_alloc+0x3b/0x2c0 [ 1059.988338][T18661] security_inode_alloc+0x3b/0x2c0 [ 1059.988386][T18661] inode_init_always_gfp+0xced/0x1040 [ 1059.988441][T18661] alloc_inode+0x8e/0x250 [ 1059.988504][T18661] new_inode+0x22/0x1c0 [ 1059.988551][T18661] ? dput.part.0+0xdd/0x570 [ 1059.988604][T18661] simple_fill_super+0x2d9/0x680 [ 1059.988650][T18661] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1059.988705][T18661] nfsd_fill_super+0x98/0x560 [ 1059.988755][T18661] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1059.988791][T18661] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1059.988846][T18661] get_tree_keyed+0x10e/0x1d0 [ 1059.988890][T18661] vfs_get_tree+0x92/0x320 [ 1059.988922][T18661] path_mount+0x7d0/0x23c0 [ 1059.988973][T18661] ? __pfx_path_mount+0x10/0x10 [ 1059.989020][T18661] ? kmem_cache_free+0x143/0x720 [ 1059.989056][T18661] ? strncpy_from_user+0x19d/0x2d0 [ 1059.989102][T18661] ? putname+0xf5/0x1a0 [ 1059.989153][T18661] ? putname+0xf5/0x1a0 [ 1059.989194][T18661] ? putname+0xfa/0x1a0 [ 1059.989242][T18661] ? __x64_sys_mount+0x293/0x310 [ 1059.989285][T18661] __x64_sys_mount+0x293/0x310 [ 1059.989331][T18661] ? __pfx___x64_sys_mount+0x10/0x10 [ 1059.989388][T18661] do_syscall_64+0xc9/0xf80 [ 1059.989441][T18661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.989476][T18661] RIP: 0033:0x7f6cd959af79 [ 1059.989503][T18661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1059.989538][T18661] RSP: 002b:00007f6cda43f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1059.989570][T18661] RAX: ffffffffffffffda RBX: 00007f6cd9816180 RCX: 00007f6cd959af79 [ 1059.989594][T18661] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1059.989615][T18661] RBP: 00007f6cd96316e0 R08: 0000000000000000 R09: 0000000000000000 [ 1059.989636][T18661] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1059.989656][T18661] R13: 00007f6cd9816218 R14: 00007f6cd9816180 R15: 00007ffeb7e5b438 [ 1059.989700][T18661] [ 1060.607651][T18673] netlink: 342 bytes leftover after parsing attributes in process `syz.9.2592'. [ 1062.096584][T18695] zswap: compressor not available [ 1062.830910][T18711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2601'. [ 1063.125351][T18717] ptp ptp0: new virtual clock ptp1 [ 1063.190307][T18717] ptp ptp0: guarantee physical clock free running [ 1063.196879][T18720] ptp ptp0: delete virtual clock ptp1 [ 1063.685606][T18720] ptp ptp0: only physical clock in use now [ 1064.717295][T18733] FAULT_INJECTION: forcing a failure. [ 1064.717295][T18733] name failslab, interval 1, probability 0, space 0, times 0 [ 1064.778062][T18733] CPU: 1 UID: 0 PID: 18733 Comm: syz.6.2604 Tainted: G L syzkaller #0 PREEMPT(full) [ 1064.778117][T18733] Tainted: [L]=SOFTLOCKUP [ 1064.778130][T18733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1064.778151][T18733] Call Trace: [ 1064.778163][T18733] [ 1064.778176][T18733] dump_stack_lvl+0x100/0x190 [ 1064.778224][T18733] should_fail_ex.cold+0x5/0xa [ 1064.778283][T18733] should_failslab+0xc2/0x120 [ 1064.778334][T18733] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 1064.778386][T18733] ? __d_alloc+0x34/0xa80 [ 1064.778437][T18733] ? __d_alloc+0x34/0xa80 [ 1064.778479][T18733] __d_alloc+0x34/0xa80 [ 1064.778528][T18733] d_alloc+0x4a/0x1e0 [ 1064.778585][T18733] d_alloc_name+0x83/0xb0 [ 1064.778628][T18733] ? __pfx_d_alloc_name+0x10/0x10 [ 1064.778675][T18733] ? dput.part.0+0xdd/0x570 [ 1064.778727][T18733] simple_fill_super+0x4c3/0x680 [ 1064.778783][T18733] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1064.778841][T18733] nfsd_fill_super+0x98/0x560 [ 1064.778898][T18733] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1064.778933][T18733] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1064.778987][T18733] get_tree_keyed+0x10e/0x1d0 [ 1064.779027][T18733] vfs_get_tree+0x92/0x320 [ 1064.779059][T18733] path_mount+0x7d0/0x23c0 [ 1064.779112][T18733] ? __pfx_path_mount+0x10/0x10 [ 1064.779158][T18733] ? kmem_cache_free+0x143/0x720 [ 1064.779196][T18733] ? strncpy_from_user+0x19d/0x2d0 [ 1064.779241][T18733] ? putname+0xf5/0x1a0 [ 1064.779291][T18733] ? putname+0xf5/0x1a0 [ 1064.779333][T18733] ? putname+0xfa/0x1a0 [ 1064.779381][T18733] ? __x64_sys_mount+0x293/0x310 [ 1064.779425][T18733] __x64_sys_mount+0x293/0x310 [ 1064.779471][T18733] ? __pfx___x64_sys_mount+0x10/0x10 [ 1064.779530][T18733] do_syscall_64+0xc9/0xf80 [ 1064.779575][T18733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.779611][T18733] RIP: 0033:0x7fb71bf9af79 [ 1064.779638][T18733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1064.779673][T18733] RSP: 002b:00007fb71ce82028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1064.779705][T18733] RAX: ffffffffffffffda RBX: 00007fb71c216180 RCX: 00007fb71bf9af79 [ 1064.779729][T18733] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1064.779752][T18733] RBP: 00007fb71c0316e0 R08: 0000000000000000 R09: 0000000000000000 [ 1064.779781][T18733] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1064.779803][T18733] R13: 00007fb71c216218 R14: 00007fb71c216180 R15: 00007ffda8532d28 [ 1064.779848][T18733] [ 1065.093079][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1065.099526][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1065.233787][T18738] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1068.588393][T18758] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1068.640024][T18758] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1068.646235][T18758] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1068.679091][T18758] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1068.692737][T18758] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1068.704772][T18758] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1068.710962][T18758] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1068.780599][T18758] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1068.829170][T18758] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1068.839292][T18758] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1068.871873][T18758] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1068.895375][T18758] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1068.901779][T18758] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1068.913399][T18758] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1068.985691][T18758] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1068.999166][T18758] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1069.045427][T18758] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1070.159403][T16647] Bluetooth: hci2: command 0x0c1a tx timeout [ 1070.479804][T18778] kexec: Could not allocate control_code_buffer [ 1070.737407][T16647] Bluetooth: hci5: command 0x0c1a tx timeout [ 1070.744827][T18097] Bluetooth: hci3: command 0x0c1a tx timeout [ 1070.751905][T16605] Bluetooth: hci4: command 0x0c1a tx timeout [ 1070.879528][T18097] Bluetooth: hci1: command 0x0c1a tx timeout [ 1070.964250][T18097] Bluetooth: hci6: command 0x0c1a tx timeout [ 1071.040305][T18097] Bluetooth: hci0: command 0x0c1a tx timeout [ 1072.356127][T18804] FAULT_INJECTION: forcing a failure. [ 1072.356127][T18804] name failslab, interval 1, probability 0, space 0, times 0 [ 1072.370795][T18804] CPU: 0 UID: 0 PID: 18804 Comm: syz.6.2620 Tainted: G L syzkaller #0 PREEMPT(full) [ 1072.370866][T18804] Tainted: [L]=SOFTLOCKUP [ 1072.370879][T18804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1072.370901][T18804] Call Trace: [ 1072.370914][T18804] [ 1072.370927][T18804] dump_stack_lvl+0x100/0x190 [ 1072.370976][T18804] should_fail_ex.cold+0x5/0xa [ 1072.371041][T18804] should_failslab+0xc2/0x120 [ 1072.371093][T18804] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 1072.371145][T18804] ? __d_alloc+0x34/0xa80 [ 1072.371197][T18804] ? __d_alloc+0x34/0xa80 [ 1072.371238][T18804] __d_alloc+0x34/0xa80 [ 1072.371288][T18804] d_alloc+0x4a/0x1e0 [ 1072.371343][T18804] d_alloc_name+0x83/0xb0 [ 1072.371389][T18804] ? __pfx_d_alloc_name+0x10/0x10 [ 1072.371438][T18804] ? dput.part.0+0xdd/0x570 [ 1072.371493][T18804] simple_fill_super+0x4c3/0x680 [ 1072.371541][T18804] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1072.371599][T18804] nfsd_fill_super+0x98/0x560 [ 1072.371653][T18804] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1072.371691][T18804] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1072.371745][T18804] get_tree_keyed+0x10e/0x1d0 [ 1072.371786][T18804] vfs_get_tree+0x92/0x320 [ 1072.371820][T18804] path_mount+0x7d0/0x23c0 [ 1072.371874][T18804] ? __pfx_path_mount+0x10/0x10 [ 1072.371921][T18804] ? kmem_cache_free+0x143/0x720 [ 1072.371960][T18804] ? strncpy_from_user+0x19d/0x2d0 [ 1072.372008][T18804] ? putname+0xf5/0x1a0 [ 1072.372058][T18804] ? putname+0xf5/0x1a0 [ 1072.372101][T18804] ? putname+0xfa/0x1a0 [ 1072.372150][T18804] ? __x64_sys_mount+0x293/0x310 [ 1072.372197][T18804] __x64_sys_mount+0x293/0x310 [ 1072.372265][T18804] ? __pfx___x64_sys_mount+0x10/0x10 [ 1072.372344][T18804] do_syscall_64+0xc9/0xf80 [ 1072.372391][T18804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.372426][T18804] RIP: 0033:0x7fb71bf9af79 [ 1072.372453][T18804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1072.372486][T18804] RSP: 002b:00007fb71ce82028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1072.372519][T18804] RAX: ffffffffffffffda RBX: 00007fb71c216180 RCX: 00007fb71bf9af79 [ 1072.372542][T18804] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1072.372564][T18804] RBP: 00007fb71c0316e0 R08: 0000000000000000 R09: 0000000000000000 [ 1072.372603][T18804] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1072.372626][T18804] R13: 00007fb71c216218 R14: 00007fb71c216180 R15: 00007ffda8532d28 [ 1072.372672][T18804] [ 1072.912871][T18097] Bluetooth: hci3: command 0x0c1a tx timeout [ 1072.919010][T18097] Bluetooth: hci5: command 0x0c1a tx timeout [ 1072.960551][T16647] Bluetooth: hci1: command 0x0c1a tx timeout [ 1073.039170][T16647] Bluetooth: hci6: command 0x0c1a tx timeout [ 1073.119397][T16647] Bluetooth: hci0: command 0x0c1a tx timeout [ 1074.961059][T16647] Bluetooth: hci5: command 0x0c1a tx timeout [ 1074.967195][T18097] Bluetooth: hci3: command 0x0c1a tx timeout [ 1075.039863][T16647] Bluetooth: hci1: command 0x0c1a tx timeout [ 1075.131823][T16647] Bluetooth: hci6: command 0x0c1a tx timeout [ 1075.199054][T16647] Bluetooth: hci0: command 0x0c1a tx timeout [ 1077.162518][T18097] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1077.174807][T18097] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1077.208396][T18097] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1077.216961][T18097] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1077.227482][T18097] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1077.472558][T18854] zram0: detected capacity change from 0 to 8 [ 1078.270484][T18850] chnl_net:caif_netlink_parms(): no params data found [ 1078.417843][ T30] audit: type=1326 audit(2147483699.021:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18841 comm="syz.6.2632" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb71bf9af79 code=0x0 [ 1078.702975][T18850] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.710429][T18850] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.717971][T18850] bridge_slave_0: entered allmulticast mode [ 1078.727301][T18850] bridge_slave_0: entered promiscuous mode [ 1078.738983][T18850] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.773054][T18850] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.914465][T18850] bridge_slave_1: entered allmulticast mode [ 1078.927983][T18850] bridge_slave_1: entered promiscuous mode [ 1079.279427][T18097] Bluetooth: hci7: command tx timeout [ 1079.521103][T18850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1079.572850][T18850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1079.762014][T18850] team0: Port device team_slave_0 added [ 1079.801451][T18850] team0: Port device team_slave_1 added [ 1079.861688][T18850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1079.883128][T18850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1079.921973][T18850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1079.943451][T18850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1079.955310][T18850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1080.047453][T18850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1080.505394][T18850] hsr_slave_0: entered promiscuous mode [ 1080.526432][T18850] hsr_slave_1: entered promiscuous mode [ 1080.546774][T18850] debugfs: 'hsr0' already exists in 'hsr' [ 1080.579073][T18850] Cannot create hsr debugfs directory [ 1081.360160][T18097] Bluetooth: hci7: command tx timeout [ 1081.602799][T18892] FAULT_INJECTION: forcing a failure. [ 1081.602799][T18892] name failslab, interval 1, probability 0, space 0, times 0 [ 1081.626597][T18892] CPU: 1 UID: 0 PID: 18892 Comm: syz.6.2639 Tainted: G L syzkaller #0 PREEMPT(full) [ 1081.626651][T18892] Tainted: [L]=SOFTLOCKUP [ 1081.626663][T18892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1081.626684][T18892] Call Trace: [ 1081.626696][T18892] [ 1081.626709][T18892] dump_stack_lvl+0x100/0x190 [ 1081.626756][T18892] should_fail_ex.cold+0x5/0xa [ 1081.626811][T18892] should_failslab+0xc2/0x120 [ 1081.626859][T18892] kmem_cache_alloc_noprof+0x83/0x780 [ 1081.626904][T18892] ? security_file_alloc+0x34/0x2c0 [ 1081.626965][T18892] ? security_file_alloc+0x34/0x2c0 [ 1081.627016][T18892] security_file_alloc+0x34/0x2c0 [ 1081.627070][T18892] init_file+0x93/0x4c0 [ 1081.627117][T18892] alloc_empty_file+0x73/0x1c0 [ 1081.627167][T18892] alloc_file_pseudo+0x13a/0x230 [ 1081.627220][T18892] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1081.627270][T18892] ? security_inode_init_security_anon+0x7b/0x230 [ 1081.627327][T18892] __do_sys_memfd_secret+0x11d/0x3d0 [ 1081.627374][T18892] do_syscall_64+0xc9/0xf80 [ 1081.627426][T18892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.627461][T18892] RIP: 0033:0x7fb71bf9af79 [ 1081.627487][T18892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1081.627522][T18892] RSP: 002b:00007fb71ce61028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 1081.627553][T18892] RAX: ffffffffffffffda RBX: 00007fb71c216270 RCX: 00007fb71bf9af79 [ 1081.627576][T18892] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1081.627597][T18892] RBP: 00007fb71c0316e0 R08: 0000000000000000 R09: 0000000000000000 [ 1081.627617][T18892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1081.627638][T18892] R13: 00007fb71c216308 R14: 00007fb71c216270 R15: 00007ffda8532d28 [ 1081.627681][T18892] [ 1082.290237][T18900] sock: sock_set_timeout: `syz.3.2642' (pid 18900) tries to set negative timeout [ 1082.640254][T18903] FAULT_INJECTION: forcing a failure. [ 1082.640254][T18903] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.689089][T18903] CPU: 1 UID: 0 PID: 18903 Comm: syz.8.2643 Tainted: G L syzkaller #0 PREEMPT(full) [ 1082.689141][T18903] Tainted: [L]=SOFTLOCKUP [ 1082.689154][T18903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1082.689184][T18903] Call Trace: [ 1082.689196][T18903] [ 1082.689210][T18903] dump_stack_lvl+0x100/0x190 [ 1082.689258][T18903] should_fail_ex.cold+0x5/0xa [ 1082.689315][T18903] should_failslab+0xc2/0x120 [ 1082.689364][T18903] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 1082.689415][T18903] ? __d_alloc+0x34/0xa80 [ 1082.689466][T18903] ? __d_alloc+0x34/0xa80 [ 1082.689507][T18903] __d_alloc+0x34/0xa80 [ 1082.689557][T18903] d_alloc_pseudo+0x1c/0xc0 [ 1082.689587][T18903] alloc_file_pseudo+0xcf/0x230 [ 1082.689642][T18903] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1082.689692][T18903] ? alloc_fd+0x476/0x790 [ 1082.689733][T18903] ? do_raw_spin_unlock+0x145/0x1e0 [ 1082.689794][T18903] __anon_inode_getfile+0xe8/0x280 [ 1082.689843][T18903] anon_inode_getfile_fmode+0x37/0xa0 [ 1082.689892][T18903] __do_sys_fanotify_init+0xa79/0xe50 [ 1082.689935][T18903] do_syscall_64+0xc9/0xf80 [ 1082.689978][T18903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.690011][T18903] RIP: 0033:0x7f6cd959af79 [ 1082.690037][T18903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1082.690070][T18903] RSP: 002b:00007f6cda481028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 1082.690102][T18903] RAX: ffffffffffffffda RBX: 00007f6cd9815fa0 RCX: 00007f6cd959af79 [ 1082.690124][T18903] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1082.690146][T18903] RBP: 00007f6cd96316e0 R08: 0000000000000000 R09: 0000000000000000 [ 1082.690176][T18903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1082.690197][T18903] R13: 00007f6cd9816038 R14: 00007f6cd9815fa0 R15: 00007ffeb7e5b438 [ 1082.690242][T18903] [ 1083.137959][T18911] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2644'. [ 1083.440321][T18097] Bluetooth: hci7: command tx timeout [ 1084.217103][T18927] Invalid ELF header magic: != ELF [ 1084.466724][T18850] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1084.535716][T18850] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1084.647907][T18850] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1084.716253][T18850] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1085.107015][T18962] FAULT_INJECTION: forcing a failure. [ 1085.107015][T18962] name failslab, interval 1, probability 0, space 0, times 0 [ 1085.139976][T18962] CPU: 1 UID: 0 PID: 18962 Comm: syz.8.2651 Tainted: G L syzkaller #0 PREEMPT(full) [ 1085.140031][T18962] Tainted: [L]=SOFTLOCKUP [ 1085.140044][T18962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1085.140064][T18962] Call Trace: [ 1085.140075][T18962] [ 1085.140087][T18962] dump_stack_lvl+0x100/0x190 [ 1085.140142][T18962] should_fail_ex.cold+0x5/0xa [ 1085.140199][T18962] should_failslab+0xc2/0x120 [ 1085.140250][T18962] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 1085.140302][T18962] ? __d_alloc+0x34/0xa80 [ 1085.140354][T18962] ? __d_alloc+0x34/0xa80 [ 1085.140395][T18962] __d_alloc+0x34/0xa80 [ 1085.140444][T18962] d_alloc+0x4a/0x1e0 [ 1085.140490][T18962] d_alloc_name+0x83/0xb0 [ 1085.140536][T18962] ? __pfx_d_alloc_name+0x10/0x10 [ 1085.140586][T18962] ? dput.part.0+0xdd/0x570 [ 1085.140647][T18962] simple_fill_super+0x4c3/0x680 [ 1085.140695][T18962] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1085.140752][T18962] nfsd_fill_super+0x98/0x560 [ 1085.140805][T18962] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1085.140842][T18962] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1085.140896][T18962] get_tree_keyed+0x10e/0x1d0 [ 1085.140938][T18962] vfs_get_tree+0x92/0x320 [ 1085.140971][T18962] path_mount+0x7d0/0x23c0 [ 1085.141025][T18962] ? __pfx_path_mount+0x10/0x10 [ 1085.141072][T18962] ? kmem_cache_free+0x143/0x720 [ 1085.141111][T18962] ? strncpy_from_user+0x19d/0x2d0 [ 1085.141164][T18962] ? putname+0xf5/0x1a0 [ 1085.141216][T18962] ? putname+0xf5/0x1a0 [ 1085.141259][T18962] ? putname+0xfa/0x1a0 [ 1085.141309][T18962] ? __x64_sys_mount+0x293/0x310 [ 1085.141355][T18962] __x64_sys_mount+0x293/0x310 [ 1085.141403][T18962] ? __pfx___x64_sys_mount+0x10/0x10 [ 1085.141463][T18962] do_syscall_64+0xc9/0xf80 [ 1085.141511][T18962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.141548][T18962] RIP: 0033:0x7f6cd959af79 [ 1085.141575][T18962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1085.141611][T18962] RSP: 002b:00007f6cda43f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1085.141645][T18962] RAX: ffffffffffffffda RBX: 00007f6cd9816180 RCX: 00007f6cd959af79 [ 1085.141671][T18962] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1085.141694][T18962] RBP: 00007f6cd96316e0 R08: 0000000000000000 R09: 0000000000000000 [ 1085.141717][T18962] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1085.141739][T18962] R13: 00007f6cd9816218 R14: 00007f6cd9816180 R15: 00007ffeb7e5b438 [ 1085.141786][T18962] [ 1085.519583][T18097] Bluetooth: hci7: command tx timeout [ 1085.928057][T18850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1086.020681][T18850] 8021q: adding VLAN 0 to HW filter on device team0 [ 1086.175220][T17615] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.182651][T17615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1086.238643][T17615] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.245888][T17615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1087.775439][T18850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1088.852518][T18850] veth0_vlan: entered promiscuous mode [ 1088.994881][T18850] veth1_vlan: entered promiscuous mode [ 1089.273793][T18850] veth0_macvtap: entered promiscuous mode [ 1089.327612][T18850] veth1_macvtap: entered promiscuous mode [ 1089.447850][T18850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1089.535833][T18850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1089.626519][T16604] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.657421][T16604] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.693886][T16604] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.717340][T16604] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.026190][T17648] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.088746][T17648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.235560][T16694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.313953][T16694] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1091.329931][T19060] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1092.564664][T19092] QAT: Device 250 not found [ 1094.517470][T19124] sd 0:0:1:0: PR command failed: 1026 [ 1094.567203][T19124] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1094.595567][T19124] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1095.228717][T19159] FAULT_INJECTION: forcing a failure. [ 1095.228717][T19159] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.250447][T19159] CPU: 1 UID: 0 PID: 19159 Comm: syz.3.2676 Tainted: G L syzkaller #0 PREEMPT(full) [ 1095.250502][T19159] Tainted: [L]=SOFTLOCKUP [ 1095.250515][T19159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1095.250537][T19159] Call Trace: [ 1095.250549][T19159] [ 1095.250562][T19159] dump_stack_lvl+0x100/0x190 [ 1095.250612][T19159] should_fail_ex.cold+0x5/0xa [ 1095.250669][T19159] should_failslab+0xc2/0x120 [ 1095.250721][T19159] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 1095.250774][T19159] ? __d_alloc+0x34/0xa80 [ 1095.250826][T19159] ? __d_alloc+0x34/0xa80 [ 1095.250875][T19159] __d_alloc+0x34/0xa80 [ 1095.250926][T19159] d_alloc+0x4a/0x1e0 [ 1095.250983][T19159] d_alloc_name+0x83/0xb0 [ 1095.251030][T19159] ? __pfx_d_alloc_name+0x10/0x10 [ 1095.251080][T19159] ? dput.part.0+0xdd/0x570 [ 1095.251136][T19159] simple_fill_super+0x4c3/0x680 [ 1095.251182][T19159] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1095.251242][T19159] nfsd_fill_super+0x98/0x560 [ 1095.251297][T19159] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1095.251333][T19159] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1095.251390][T19159] get_tree_keyed+0x10e/0x1d0 [ 1095.251431][T19159] vfs_get_tree+0x92/0x320 [ 1095.251463][T19159] path_mount+0x7d0/0x23c0 [ 1095.251517][T19159] ? __pfx_path_mount+0x10/0x10 [ 1095.251566][T19159] ? kmem_cache_free+0x143/0x720 [ 1095.251604][T19159] ? strncpy_from_user+0x19d/0x2d0 [ 1095.251652][T19159] ? putname+0xf5/0x1a0 [ 1095.251704][T19159] ? putname+0xf5/0x1a0 [ 1095.251746][T19159] ? putname+0xfa/0x1a0 [ 1095.251797][T19159] ? __x64_sys_mount+0x293/0x310 [ 1095.251840][T19159] __x64_sys_mount+0x293/0x310 [ 1095.251887][T19159] ? __pfx___x64_sys_mount+0x10/0x10 [ 1095.251958][T19159] do_syscall_64+0xc9/0xf80 [ 1095.252007][T19159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.252043][T19159] RIP: 0033:0x7f229ab9af79 [ 1095.252070][T19159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1095.252104][T19159] RSP: 002b:00007f2298dd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1095.252137][T19159] RAX: ffffffffffffffda RBX: 00007f229ae16180 RCX: 00007f229ab9af79 [ 1095.252160][T19159] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1095.252181][T19159] RBP: 00007f229ac316e0 R08: 0000000000000000 R09: 0000000000000000 [ 1095.252203][T19159] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1095.252226][T19159] R13: 00007f229ae16218 R14: 00007f229ae16180 R15: 00007ffc561c2298 [ 1095.252272][T19159] [ 1097.154005][T19193] NFSD: Failed to start, no listeners configured. [ 1098.313572][T19223] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 1099.689190][T19262] FAULT_INJECTION: forcing a failure. [ 1099.689190][T19262] name failslab, interval 1, probability 0, space 0, times 0 [ 1099.706503][T19262] CPU: 0 UID: 0 PID: 19262 Comm: syz.3.2692 Tainted: G L syzkaller #0 PREEMPT(full) [ 1099.706559][T19262] Tainted: [L]=SOFTLOCKUP [ 1099.706571][T19262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1099.706591][T19262] Call Trace: [ 1099.706603][T19262] [ 1099.706620][T19262] dump_stack_lvl+0x100/0x190 [ 1099.706668][T19262] should_fail_ex.cold+0x5/0xa [ 1099.706726][T19262] should_failslab+0xc2/0x120 [ 1099.706777][T19262] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 1099.706828][T19262] ? __d_alloc+0x34/0xa80 [ 1099.706879][T19262] ? __d_alloc+0x34/0xa80 [ 1099.706920][T19262] __d_alloc+0x34/0xa80 [ 1099.706969][T19262] d_alloc+0x4a/0x1e0 [ 1099.707017][T19262] d_alloc_name+0x83/0xb0 [ 1099.707062][T19262] ? __pfx_d_alloc_name+0x10/0x10 [ 1099.707111][T19262] ? dput.part.0+0xdd/0x570 [ 1099.707166][T19262] simple_fill_super+0x4c3/0x680 [ 1099.707213][T19262] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1099.707271][T19262] nfsd_fill_super+0x98/0x560 [ 1099.707326][T19262] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1099.707362][T19262] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1099.707417][T19262] get_tree_keyed+0x10e/0x1d0 [ 1099.707457][T19262] vfs_get_tree+0x92/0x320 [ 1099.707490][T19262] path_mount+0x7d0/0x23c0 [ 1099.707552][T19262] ? __pfx_path_mount+0x10/0x10 [ 1099.707602][T19262] ? kmem_cache_free+0x143/0x720 [ 1099.707642][T19262] ? strncpy_from_user+0x19d/0x2d0 [ 1099.707689][T19262] ? putname+0xf5/0x1a0 [ 1099.707741][T19262] ? putname+0xf5/0x1a0 [ 1099.707796][T19262] ? putname+0xfa/0x1a0 [ 1099.707843][T19262] ? __x64_sys_mount+0x293/0x310 [ 1099.707888][T19262] __x64_sys_mount+0x293/0x310 [ 1099.707936][T19262] ? __pfx___x64_sys_mount+0x10/0x10 [ 1099.708013][T19262] do_syscall_64+0xc9/0xf80 [ 1099.708060][T19262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.708097][T19262] RIP: 0033:0x7f229ab9af79 [ 1099.708125][T19262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1099.708159][T19262] RSP: 002b:00007f2298dd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1099.708194][T19262] RAX: ffffffffffffffda RBX: 00007f229ae16180 RCX: 00007f229ab9af79 [ 1099.708218][T19262] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1099.708241][T19262] RBP: 00007f229ac316e0 R08: 0000000000000000 R09: 0000000000000000 [ 1099.708263][T19262] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1099.708284][T19262] R13: 00007f229ae16218 R14: 00007f229ae16180 R15: 00007ffc561c2298 [ 1099.708330][T19262] [ 1100.726200][ T31] INFO: task kworker/u10:2:16610 blocked for more than 143 seconds. [ 1100.742830][ T31] Tainted: G L syzkaller #0 [ 1100.749950][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1100.758661][ T31] task:kworker/u10:2 state:D stack:26776 pid:16610 tgid:16610 ppid:2 task_flags:0x4208060 flags:0x00080000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1100.782738][ T31] Workqueue: netns cleanup_net [ 1100.787959][ T31] Call Trace: [ 1100.792554][ T31] [ 1100.795869][ T31] ? __schedule+0xf67/0x5fa0 [ 1100.809296][ T31] __schedule+0xfe6/0x5fa0 [ 1100.815207][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1100.824274][ T31] ? __pfx___schedule+0x10/0x10 [ 1100.841436][ T31] ? find_held_lock+0x2b/0x80 [ 1100.868743][ T31] ? schedule+0x2bf/0x390 [ 1100.882683][ T31] schedule+0xdd/0x390 [ 1100.917211][ T31] schedule_timeout+0x1b2/0x280 [ 1100.940435][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1100.971933][ T31] ? mark_held_locks+0x40/0x70 [ 1101.011520][ T31] __wait_for_common+0x2e7/0x4c0 [ 1101.021714][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1101.027227][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1101.058994][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1101.064298][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 1101.081076][ T31] __flush_workqueue+0x3f7/0x1200 [ 1101.086215][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1101.091580][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1101.132885][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 1101.138472][ T31] ? reacquire_held_locks+0xce/0x1e0 [ 1101.166418][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 1101.176526][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 1101.186653][ T31] rds_tcp_listen_stop+0x104/0x160 [ 1101.207077][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 1101.230729][ T31] rds_tcp_exit_net+0xcb/0x810 [ 1101.235612][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 1101.259130][ T31] ? __pfx___might_resched+0x10/0x10 [ 1101.264536][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 1101.279755][ T31] ops_undo_list+0x2ee/0xab0 [ 1101.284444][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 1101.301085][ T31] ? cleanup_net+0x345/0x830 [ 1101.305764][ T31] ? idr_destroy+0x62/0x2e0 [ 1101.329119][ T31] cleanup_net+0x419/0x830 [ 1101.346040][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 1101.363793][ T31] ? rcu_is_watching+0x12/0xc0 [ 1101.368744][ T31] process_one_work+0x9c2/0x1840 [ 1101.374314][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1101.380117][ T31] ? assign_work+0x19c/0x250 [ 1101.384797][ T31] worker_thread+0x5da/0xe40 [ 1101.389812][ T31] ? kthread+0x17d/0x730 [ 1101.394126][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1101.401966][ T31] kthread+0x3b3/0x730 [ 1101.406122][ T31] ? __pfx_kthread+0x10/0x10 [ 1101.413462][ T31] ? ret_from_fork+0x79/0xaf0 [ 1101.420580][ T31] ? ret_from_fork+0x79/0xaf0 [ 1101.425324][ T31] ? rcu_is_watching+0x12/0xc0 [ 1101.470110][ T31] ? __pfx_kthread+0x10/0x10 [ 1101.474817][ T31] ret_from_fork+0x754/0xaf0 [ 1101.500175][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1101.505539][ T31] ? rcu_is_watching+0x12/0xc0 [ 1101.542227][ T31] ? __switch_to+0x7b9/0x10c0 [ 1101.547102][ T31] ? __pfx_kthread+0x10/0x10 [ 1101.589048][ T31] ret_from_fork_asm+0x1a/0x30 [ 1101.593943][ T31] [ 1101.619113][ T31] [ 1101.619113][ T31] Showing all locks held in the system: [ 1101.725651][ T31] 1 lock held by pool_workqueue_/3: [ 1101.739022][ T31] #0: ffffffff8e5ef8f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1101.778940][ T31] 1 lock held by khungtaskd/31: [ 1101.783870][ T31] #0: ffffffff8e5e3120 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1101.804449][ T31] 2 locks held by getty/15457: [ 1101.810146][ T31] #0: ffff8881436930a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1101.845068][ T31] #1: ffffc9000398b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1101.872600][ T31] 3 locks held by kworker/u10:2/16610: [ 1101.878141][ T31] #0: ffff88801c29f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1101.909058][ T31] #1: ffffc9000539fc98 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1101.938774][ T31] #2: ffffffff903dd430 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xab/0x830 [ 1101.948397][ T31] 1 lock held by syz.4.2233/16965: [ 1101.978924][ T31] #0: ffffffff903dd430 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1101.988508][ T31] 1 lock held by syz-executor/17301: [ 1102.019122][ T31] 1 lock held by syz-executor/17311: [ 1102.024571][ T31] #0: ffffffff903f5d68 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 1102.061428][ T31] 1 lock held by syz-executor/17474: [ 1102.084875][ T31] 1 lock held by syz.2.2370/17655: [ 1102.093187][ T31] #0: ffffffff903dd430 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1102.122371][ T31] 1 lock held by syz.5.2426/17908: [ 1102.127575][ T31] #0: ffffffff903dd430 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1102.145764][ T31] 1 lock held by syz.7.2522/18345: [ 1102.158117][ T31] #0: ffffffff903dd430 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1102.174796][ T31] 1 lock held by syz.8.2584/18642: [ 1102.180353][ T31] #0: ffffffff8e5ef8f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1102.190828][ T31] 1 lock held by syz.9.2598/18695: [ 1102.195988][ T31] #0: ffffffff903dd430 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1102.208381][ T31] 1 lock held by syz.9.2598/18718: [ 1102.213945][ T31] #0: ffffffff903dd430 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1102.223803][ T31] 1 lock held by syz.0.2688/19233: [ 1102.229391][ T31] #0: ffffffff903dd430 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1102.248996][ T31] 2 locks held by syz.0.2688/19234: [ 1102.254348][ T31] #0: ffffffff903dd430 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1102.298949][ T31] #1: ffffffff8e5ef7c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 1102.323267][ T31] 1 lock held by dhcpcd/19290: [ 1102.328196][ T31] #0: ffff888034f84260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 1102.349748][ T31] 1 lock held by dhcpcd/19291: [ 1102.354593][ T31] #0: ffff88809b2be260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 1102.399015][ T31] [ 1102.421697][ T31] ============================================= [ 1102.421697][ T31] [ 1102.502830][ T31] NMI backtrace for cpu 1 [ 1102.502857][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1102.502894][ T31] Tainted: [L]=SOFTLOCKUP [ 1102.502903][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1102.502918][ T31] Call Trace: [ 1102.502926][ T31] [ 1102.502937][ T31] dump_stack_lvl+0x100/0x190 [ 1102.502973][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1102.503008][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1102.503052][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1102.503097][ T31] sys_info+0x141/0x190 [ 1102.503132][ T31] watchdog+0xcc3/0xfe0 [ 1102.503167][ T31] ? __pfx_watchdog+0x10/0x10 [ 1102.503195][ T31] ? __kthread_parkme+0x18c/0x230 [ 1102.503226][ T31] ? __pfx_watchdog+0x10/0x10 [ 1102.503254][ T31] ? __pfx_watchdog+0x10/0x10 [ 1102.503279][ T31] kthread+0x3b3/0x730 [ 1102.503326][ T31] ? __pfx_kthread+0x10/0x10 [ 1102.503363][ T31] ? ret_from_fork+0x79/0xaf0 [ 1102.503387][ T31] ? ret_from_fork+0x79/0xaf0 [ 1102.503412][ T31] ? rcu_is_watching+0x12/0xc0 [ 1102.503439][ T31] ? __pfx_kthread+0x10/0x10 [ 1102.503479][ T31] ret_from_fork+0x754/0xaf0 [ 1102.503506][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1102.503535][ T31] ? __switch_to+0x7b9/0x10c0 [ 1102.503573][ T31] ? __pfx_kthread+0x10/0x10 [ 1102.503613][ T31] ret_from_fork_asm+0x1a/0x30 [ 1102.503673][ T31] [ 1102.503683][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1102.651376][ C0] NMI backtrace for cpu 0 [ 1102.651400][ C0] CPU: 0 UID: 0 PID: 16691 Comm: kworker/u10:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 1102.651439][ C0] Tainted: [L]=SOFTLOCKUP [ 1102.651449][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1102.651468][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1102.651508][ C0] RIP: 0010:mark_lock+0x1/0xa20 [ 1102.651550][ C0] Code: 48 c7 c7 60 f9 4d 8e e8 cd c1 54 ff e9 5c fd ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <48> 89 e5 41 57 41 56 41 55 49 89 fd 41 54 49 89 f4 53 48 83 e4 f0 [ 1102.651577][ C0] RSP: 0018:ffffc900055678b8 EFLAGS: 00000002 [ 1102.651597][ C0] RAX: 0000000000000004 RBX: ffff88805dadc830 RCX: 0000000000000000 [ 1102.651615][ C0] RDX: 0000000000000002 RSI: ffff88805dadc830 RDI: ffff88805dadbd00 [ 1102.651633][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1102.651650][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000002 [ 1102.651666][ C0] R13: ffff88805dadbd00 R14: 0000000000000007 R15: ffff88803df48640 [ 1102.651684][ C0] FS: 0000000000000000(0000) GS:ffff8881245e2000(0000) knlGS:0000000000000000 [ 1102.651709][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1102.651727][ C0] CR2: 000056549ca88660 CR3: 000000000e392000 CR4: 00000000003526f0 [ 1102.651744][ C0] Call Trace: [ 1102.651752][ C0] [ 1102.651762][ C0] mark_held_locks+0x40/0x70 [ 1102.651798][ C0] lockdep_hardirqs_on_prepare+0xb4/0x1b0 [ 1102.651835][ C0] trace_hardirqs_on+0x36/0x40 [ 1102.651865][ C0] _raw_spin_unlock_irqrestore+0x52/0x80 [ 1102.651896][ C0] debug_check_no_obj_freed+0x31f/0x630 [ 1102.651936][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1102.651972][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1102.652005][ C0] ? kfree+0x1c7/0x690 [ 1102.652029][ C0] ? __pfx__get_random_bytes+0x10/0x10 [ 1102.652057][ C0] ? skb_free_head+0x119/0x220 [ 1102.652092][ C0] ? devlink_trap_report+0x1d3/0x6d0 [ 1102.652122][ C0] kmem_cache_free+0x3f0/0x720 [ 1102.652150][ C0] ? skb_free_head+0x11e/0x220 [ 1102.652183][ C0] ? kfree_skbmem+0x19a/0x210 [ 1102.652214][ C0] ? kfree_skbmem+0x19a/0x210 [ 1102.652242][ C0] kfree_skbmem+0x19a/0x210 [ 1102.652271][ C0] consume_skb+0xd1/0x110 [ 1102.652298][ C0] nsim_dev_trap_report_work+0x8cf/0xd10 [ 1102.652340][ C0] process_one_work+0x9c2/0x1840 [ 1102.652388][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1102.652434][ C0] ? assign_work+0x19c/0x250 [ 1102.652473][ C0] worker_thread+0x5da/0xe40 [ 1102.652517][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1102.652564][ C0] ? kthread+0x17d/0x730 [ 1102.652600][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1102.652639][ C0] kthread+0x3b3/0x730 [ 1102.652677][ C0] ? __pfx_kthread+0x10/0x10 [ 1102.652713][ C0] ? ret_from_fork+0x79/0xaf0 [ 1102.652737][ C0] ? ret_from_fork+0x79/0xaf0 [ 1102.652762][ C0] ? rcu_is_watching+0x12/0xc0 [ 1102.652788][ C0] ? __pfx_kthread+0x10/0x10 [ 1102.652826][ C0] ret_from_fork+0x754/0xaf0 [ 1102.652851][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1102.652878][ C0] ? __switch_to+0x7b9/0x10c0 [ 1102.652919][ C0] ? __pfx_kthread+0x10/0x10 [ 1102.652957][ C0] ret_from_fork_asm+0x1a/0x30 [ 1102.653005][ C0] [ 1102.984340][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1102.991276][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1103.002022][ T31] Tainted: [L]=SOFTLOCKUP [ 1103.006392][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1103.016505][ T31] Call Trace: [ 1103.019868][ T31] [ 1103.022872][ T31] dump_stack_lvl+0x100/0x190 [ 1103.027633][ T31] vpanic+0x20d/0x630 [ 1103.031703][ T31] panic+0xd1/0xd1 [ 1103.035492][ T31] ? __pfx_panic+0x10/0x10 [ 1103.039978][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1103.046216][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1103.052457][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1103.058719][ T31] ? watchdog.cold+0x198/0x1ca [ 1103.063553][ T31] ? watchdog+0xcd3/0xfe0 [ 1103.067949][ T31] watchdog.cold+0x1a9/0x1ca [ 1103.072626][ T31] ? __pfx_watchdog+0x10/0x10 [ 1103.077365][ T31] ? __kthread_parkme+0x18c/0x230 [ 1103.082460][ T31] ? __pfx_watchdog+0x10/0x10 [ 1103.087290][ T31] ? __pfx_watchdog+0x10/0x10 [ 1103.092118][ T31] kthread+0x3b3/0x730 [ 1103.096297][ T31] ? __pfx_kthread+0x10/0x10 [ 1103.100960][ T31] ? ret_from_fork+0x79/0xaf0 [ 1103.105676][ T31] ? ret_from_fork+0x79/0xaf0 [ 1103.110390][ T31] ? rcu_is_watching+0x12/0xc0 [ 1103.115193][ T31] ? __pfx_kthread+0x10/0x10 [ 1103.119843][ T31] ret_from_fork+0x754/0xaf0 [ 1103.124489][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1103.129644][ T31] ? __switch_to+0x7b9/0x10c0 [ 1103.134367][ T31] ? __pfx_kthread+0x10/0x10 [ 1103.139008][ T31] ret_from_fork_asm+0x1a/0x30 [ 1103.143837][ T31] [ 1103.147486][ T31] Kernel Offset: disabled [ 1103.151831][ T31] Rebooting in 86400 seconds..