last executing test programs: 4m43.01988132s ago: executing program 32 (id=137): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x11, 0x80003, 0x300) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(r0, 0x107, 0x14, 0x0, 0x4) sendto$auto(0x3, 0x0, 0x13, 0xfffffff5, &(0x7f0000000440)=@phonet={0x23, 0x7, 0xfd, 0x2c}, 0x22) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvfrom$auto(0xffffffffffffffff, 0x0, 0x400, 0x801, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) r2 = open(&(0x7f0000000040)='./file0\x00', 0x169443, 0x114) fcntl$auto(r2, 0x40a, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/block/loop14/queue/stable_writes\x00', 0x182b02, 0x0) sendfile$auto(r3, r3, 0x0, 0x2400000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x28, 0x801, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) getsockopt$auto_SO_PEERNAME(r6, 0xfffffffa, 0x1c, &(0x7f00000000c0)='\xaa+.$[\x00', &(0x7f0000000180)=0x8) socket(0x2, 0x4, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da29, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x5, 0x5]}, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) select$auto(0x10, 0x0, 0x0, &(0x7f00000001c0)={[0xd, 0x3, 0x5ac, 0x4, 0x800000000000948b, 0x3, 0x15f4da0a, 0x3, 0x5f8a0eb9, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7ffd, 0x8, 0x8000000006]}, 0x0) listen$auto(r4, 0xffffffff) 3m37.784957767s ago: executing program 0 (id=489): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000080)=ANY=[@ANYBLOB="b9003402000000530c698439652100000000", @ANYRES16=r0, @ANYBLOB="01032dbd7000fbdbdf2515000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090) mmap$auto(0x0, 0x400008, 0x4, 0xa910, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, 0x0) set_mempolicy$auto(0x6, 0x0, 0x21) unshare$auto(0x40000080) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0xfffffffd, 0x0, 0x0) ioctl$auto_FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyxf\x00', 0x109401, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) msgrcv$auto(0x9, 0x0, 0xfffffffffffffffd, 0x6, 0x80008) mremap$auto(0xfffffffffffffff9, 0x8, 0x3fd6, 0x0, 0x8) unshare$auto(0x20000080) 3m36.730220418s ago: executing program 0 (id=492): r0 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000640), 0x50441, 0x0) write$auto(r0, 0x0, 0xff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) r1 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/15u\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0x101, 0x103) read$auto_mon_fops_text_t_mon_text(r1, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000640), 0x50441, 0x0) (async) write$auto(r0, 0x0, 0xff) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) (async) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/15u\x00', 0x0, 0x0) (async) pread64$auto(r1, 0x0, 0x101, 0x103) (async) read$auto_mon_fops_text_t_mon_text(r1, 0x0, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) (async) 3m35.344856108s ago: executing program 0 (id=497): io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC2\x00', 0x80, 0x0) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket(0x2, 0x1, 0x0) mmap$auto(0x800000000000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x40440, 0x40) newfstatat$auto(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg1\x00', 0x0, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) ioctl$auto(r2, 0xc040563d, r1) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x100) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=@bpf_attr_11={0x4, 0xfffffffffffffe01, 0x3a9e244e, 0x7, 0x6, 0x4, 0x5, r0}, 0xffff) mmap$auto(0x0, 0x9, 0xffb, 0x12, 0x3, 0x0) syz_clone(0x2040000, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile$auto(r3, r3, 0x0, 0x200) 3m35.151246983s ago: executing program 0 (id=499): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/virtual/block/nbd5/queue/io_poll\x00', 0x182b02, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) truncate$auto(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x6) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r1) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000080)={0x2c, r2, 0x817, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0xfffffffffffffff7}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000800) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/bridge0/locktime\x00', 0x101202, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/bridge_slave_1/ra_defrtr_metric\x00', 0x101242, 0x0) sendfile$auto(r4, r3, 0x0, 0x48) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x141302, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000140)="629467a9", 0x4) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/sit0/base_reachable_time\x00', 0x101202, 0x0) sendfile$auto(r0, r6, 0x0, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x842, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r7 = ioctl$auto_TUNSETVNETHDRSZ2(0xffffffffffffffff, 0x400454d8, &(0x7f0000000040)=0x1) ioctl$auto_BCH_IOCTL_QUERY_COUNTERS(r7, 0x4008bc15, &(0x7f00000000c0)={0x9400, 0x2f0, 0x0, [0x3, 0x4, 0xb68, 0xe, 0x8]}) read$auto(0x3, 0x0, 0x8080) syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000100), r7) 3m34.693347401s ago: executing program 0 (id=501): sched_get_priority_min$auto_SCHED_EXT(0x7) sched_get_priority_min$auto_SCHED_EXT(0x7) sched_get_priority_min$auto_SCHED_EXT(0x7) sched_get_priority_min$auto_SCHED_EXT(0x7) sched_get_priority_min$auto_SCHED_EXT(0x7) sched_get_priority_min$auto_SCHED_EXT(0x7) openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0xa0080, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) sched_get_priority_min$auto_SCHED_EXT(0x7) sched_get_priority_min$auto_SCHED_EXT(0x7) sched_get_priority_min$auto_SCHED_EXT(0x7) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) sendmsg$auto_NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1bc, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_FILS_ERP_REALM={0x8d, 0xfa, "afc98c281b49a4885ee655a4a7661868f1050b1ba4c8f0c52f45fbfafb1df74339db43277b0c92bd19d78a29c5ff51b3c13c211bac1dbdbde83d4b90ef43872d7bb2c9a0bc2a1aefdc1bb4ef4851d26300b6dca8a4386aa89525c96b70e40e17d1ced7086b15fe151915a05b5f8816e1d37242505c0246de00bc830bcf2367bcf4537942126c89e290"}, @NL80211_ATTR_FRAME_MATCH={0xd1, 0x5b, "05f12c70e3e37e4b3425a16b0fbc323c7bf78d78bce44a68d75799f5276241f1e10a8e9a4dff63614ffcac4d729344ddc2879db9280d449e3b6a56a49e4f5a96613dfbb4eb87483d3e7e76fb3c5a415eabb9e51ac2080b74333c5bb12361b961eaca6eb200224d4e6c42fcd95b455b120abae2abff6e7b97fa2ca30c1ca42b02216160a57cbb07bf19f63e5bfa33e27559127ca2cc0fbb290f10aba6096d752f514d8cb7e11bdc0dab53645d8e039ac361627660a3794890ba9a05ff438f99af6de01675a98571468f3274555b"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, 0xfff}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x2c, 0x21, "611eab73be86e8f855399c45599dc930573500f6ceac80a22cceea1fd1af11078c46cc94b66a6815"}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x6}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x41}, 0x20008000) r5 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) setsockopt$auto(r5, 0x7be0, 0x86, &(0x7f00000003c0)='\x00', 0x8) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/platform/vhci_hcd.1/usb11/ep_00/power/control\x00', 0x105080, 0x0) r7 = fcntl$auto_F_UNLCK(r6, 0x69d1995d, 0x2) sched_get_priority_min$auto_SCHED_EXT(0x7) sched_get_priority_min$auto_SCHED_EXT(0x7) fsetxattr$auto(r2, &(0x7f0000000440)=']\x00', &(0x7f0000000480)="831393acd4e104002462a76fa2a868dec26ab5721a1b4d3685f59f2f53851c50404a9c2c8b9ad6bc952c66af511d5439073fd822fdff42cf257dc849e1b03ba19a18a485c778435e366d3e90f32afaa5758818fcc2d57adfeb0ca04cdc0f4a9299be0a7a929ee47644d513dbb2e7e57af5359d83863aab1676be6006bb87ed3f724c86beef08cfa780b3c08dd92cf768618184ffbb3a78be937a5a48c5ac0f65dcccff60b8e3c5a78a6e2dfee12e829f66c3efd55ef74df37ac87799b54d647c17fc200cdc846e", 0x32672bce, 0x0) r8 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000005c0), r7) sendmsg$auto_SMC_NETLINK_GET_STATS(r7, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r8, 0x10, 0x70bd29, 0x25dfdbfe, {}, "b2e3076a4342fbd94d2eb8dfe6e654bda70fb379c7061ba0b8a73bc8b958acf16dfde6ed85a02a47"}, 0x3c}, 0x1, 0x0, 0x0, 0x8c0}, 0x40000d1) sendmsg$auto_NET_DM_CMD_STATS_GET(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NET_DM_ATTR_TRUNC_LEN={0x8, 0x9, 0x8001}, @NET_DM_ATTR_HW_DROPS={0x4}, @NET_DM_ATTR_TRUNC_LEN={0x8, 0x9, 0x5}, @NET_DM_ATTR_QUEUE_LEN={0x8, 0xb, 0x88}, @NET_DM_ATTR_TRUNC_LEN={0x8, 0x9, 0x449}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x24004000) ioctl$auto_UDF_RELOCATE_BLOCKS(r7, 0xc0086c43, &(0x7f00000007c0)=0x200) r9 = openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) sendmmsg$auto(r9, &(0x7f0000000a00)={{&(0x7f0000000840)="91315b6b785dcf33b7bbcb459dd556bb41b8a5a921da36aa0e5d27b0a076cce7d4b61a566900a13b046b3dd0a5381f65f948ec1bf8f88c37f331e38195faa21c572fe0d6240e841adf0d7fb8d89797f97d402f7bd853092bb5cbbf07664b8ba20091065b99439d682c6eb482fbbe2d3524565fa5da6c5412c57d855e6aaa094c0cf99a79b774c0a06019c18c5520438b89ecdba0e9f7578f9cfdab1dfc85516ffac431b1f5b39e168b880b86e3896b8818bb99917fd6d344e56c912da7c5c5690dbd4263b0a7d01279caa8a89ada21c8b74cf4b1f9a598a97eb1d30c18a70cdd1208a3b7df86da83d7b7c0e6060ca63f", 0x2, &(0x7f0000000980)={&(0x7f0000000940)="45f27eac9a119ce55e07847a98665cc4675b9269b7a96282540d49588c853954a1ef034fe4b0e951250888588b6b158677077d7a00279296", 0xe}, 0x80000001, &(0x7f00000009c0)="edf90e621406a6409c510b03dcb0ff1079ffae6b8489a6804c", 0x80, 0x8}, 0x8000}, 0xf86, 0x4) capget$auto(&(0x7f0000000a40)={0xffffffff}, &(0x7f0000000a80)={0x7, 0x7, 0x7fff}) 3m31.274641587s ago: executing program 0 (id=513): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x80000001, 0x8) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) socket(0xa, 0x3, 0x3) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) timerfd_settime$auto(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000a00)=0x105) mmap$auto(0x0, 0xe981, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0xfffffffd, 0x0) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r1 = getsockopt$auto_SO_PEERPIDFD(r0, 0x3, 0x4d, &(0x7f0000000040)='*\x00', &(0x7f0000000080)=0x6) io_uring_setup$auto(0x6, &(0x7f00000000c0)={0x9, 0x7f, 0x579, 0x2, 0xd89, 0x6, r1, [0x3, 0x2, 0x6], {0x100, 0x8, 0x4, 0x5, 0x7, 0xeed, 0x9, 0x6, 0x3}, {0x1fe00, 0x9, 0x10, 0xe7a, 0x3, 0x4, 0xd, 0x0, 0xfffffffffffffee9}}) socketpair$auto(0x75, 0x1000005, 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x8000000000000001, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) 3m15.934821996s ago: executing program 33 (id=513): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x80000001, 0x8) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) socket(0xa, 0x3, 0x3) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) timerfd_settime$auto(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000a00)=0x105) mmap$auto(0x0, 0xe981, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0xfffffffd, 0x0) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r1 = getsockopt$auto_SO_PEERPIDFD(r0, 0x3, 0x4d, &(0x7f0000000040)='*\x00', &(0x7f0000000080)=0x6) io_uring_setup$auto(0x6, &(0x7f00000000c0)={0x9, 0x7f, 0x579, 0x2, 0xd89, 0x6, r1, [0x3, 0x2, 0x6], {0x100, 0x8, 0x4, 0x5, 0x7, 0xeed, 0x9, 0x6, 0x3}, {0x1fe00, 0x9, 0x10, 0xe7a, 0x3, 0x4, 0xd, 0x0, 0xfffffffffffffee9}}) socketpair$auto(0x75, 0x1000005, 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x8000000000000001, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) 2m33.314314626s ago: executing program 5 (id=785): r0 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x8000000000000001, 0x2000000000df, 0x16, 0xffffffffffffffff, 0x7) io_uring_setup$auto(0x6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x2100, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f0000000200)={[0x80000000008, 0xffffffffffffff4b, 0x100000001, 0x15, 0x80000001, 0x1, 0x5, 0x5, 0x8, 0x40000000000000, 0x2dde, 0x8, 0xfffffffffffffffa, 0xab, 0x8000000000000, 0x4]}, 0x0) close_range$auto(r1, 0x8, 0x0) close_range$auto(0x2, r0, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) connect$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x28, 0x3, 0x0) r2 = socket(0x2, 0x80000, 0x400) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22202, 0x155) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) r3 = socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x413}, 0x4, 0x20000000) sendmsg$auto_NETDEV_CMD_DEV_GET(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004091}, 0x800) syz_genetlink_get_family_id$auto_ovs_vport(0x0, r2) 2m32.936402108s ago: executing program 5 (id=790): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r1 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000040)={0x19980330}, 0x0) getsockopt$auto(r1, 0x29, 0x41, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendto$auto(r2, &(0x7f00000001c0)="1681abcdda01565297cbd5a9a5af5b85d4be83746eb1acc678668849f292045fe72bdf0701296645254925410effff09beedb32497afdcb48d7b89b229f3bf5d5bc3381e8f2d0c14a905a0e16cc2554feb0e00000000000098af485b0341576a31163e3fb969888928986cd1", 0x5, 0xc99, &(0x7f0000000040)=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}, 0x6000) msgget$auto(0x0, 0x5) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001500)='/sys/kernel/irq/5/actions\x00', 0x22040, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) 2m32.798329569s ago: executing program 5 (id=793): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x20eb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r0 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x0, 0x100], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x5, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) io_uring_register$auto(r0, 0x15, 0x0, 0x9) r1 = pidfd_open$auto(0x1, 0x0) open_by_handle_at$auto(r1, 0x0, 0x800) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) r2 = socket(0xa, 0x5, 0x84) io_uring_setup$auto(0xa, 0x0) unshare$auto(0x9) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xa, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x6, 0x6, 0x5, 0x9, 0x20003, 0x6, 0x4, 0xb4, 0x9, 0x3, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40084, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xb8a0, 0x0, 0x0, 0x0, 0x1000]}, 0x1fe, 0x200c) socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) setsockopt$auto(r2, 0x10000000084, 0x23, 0x0, 0x8) 2m32.270584562s ago: executing program 5 (id=796): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f00000013c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001380)={&(0x7f00000001c0)={0x11b8, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_UPCALL_PID={0x8c, 0x5, "3d21ff8f376c54dcc613466cac4b630d5a8cd484f813a5b22d1aab0d826431a71449fa9154e4d8909fa26c61d1ae2b4f9eac3845e6c9b6d9f66c908e2d6c45d5d6c0a63f3d8a09153b5821b8fb45498aad30e0b5944967b72239ccd6268d40523d310ff340bb6ac858b20c5756ed2fe1455ff9462d0b8112d9ec44026c5ac8b04575c5d7933ddf1a"}, @OVS_VPORT_ATTR_IFINDEX={0x8, 0x8, r2}, @OVS_VPORT_ATTR_UPCALL_PID={0xf1, 0x5, "1dca7ae9d008420e032b66d26889218d4ab237adc7d9b1c86578477d2c989459799b18ae5db9efab0ce17edbd966e4ac1597957735946f9c1ce10c13fc9e79f5c7464f1489d71993738d896c3f9fe235cf61208674077702a2e1e94b2421f34b68bbfac65aaa4a553cf3d86e95b429e697f754c31d324fc3c20021692c88bf48ee1879c2136aa9a7e79534a01189ab2bbc41c7f9e94bbb3e82f749bb743f032e2d0d95915551b73c1081f4e80c7d6f7df4d746a8b4650650316ab18fcb46d9710d42c8ec9905eac2220cd742f70bf0870425c451ed092c96046045c55149ec76c679c9699bd5a32046372362bc"}, @OVS_VPORT_ATTR_IFINDEX={0x8, 0x8, r3}, @OVS_VPORT_ATTR_UPCALL_PID={0x1004, 0x5, "1539dc130b3c6566cd726b5a19162e0fcfd3fa11f6c546ce0e3e001d834857873b1c7033c72345bd7adf614a30e26000c26e0a828693d15f94c6a4eee48113e1f9cfbbed8e35290af7ca9f41e916055c70c1d5cc4b2539c36b3c221965ed878ca570d6c46f0ea099bd7f7bca53ab2fd4d66c52e9d32a8a2f1c506405a1548c443e5ae80c8833a4560fd3798becc4dc5d75ad4f29fc408af0c2633d32bd79dc1e39404a4f2cb3ba5439fc7162c4072d710158ba7d252d7dffb4602c236fc8ac72fc7ccebfea571b5e6a20e87a19b3b0f844863e7f56400681dce8fd55f190758e67b28b9563fe81325d902fa2600765314db37df9397d47dd5322c01f4c44f63c5535f0f9c15c4734c7fcd958a43b91f205a2792e513c4c58a789dd34b3cc238565bc02db5656be8cfb1abf13f6708d5af495e521783ce81c50b7bf7cf53ed43aac40756f74e0e03c7ec19c47a7acbac6f5e09d7f58cd2246d472b370492b240888d7943d556db38476a3e9eaf217b6ed04ecee035d03681934d52ed88443573cb655472c4fb8d6a0c6b2c7999a11f1a9254a6de4aa01286b9d5fe80262065750ebfe198fc9df755951e2eab13a347c7e00228b6f7020ff220f34c3cc0c0f5d6a65dac750324e1414f609244956be8b6e731de5fb47aaa00977e3e3fce5c35b988e79264f09016cc3c3a4e1e6a1adcef886b16d00d4662dae3ff32185f4174476b3429b8a76a8fa3bb49acb7585529527a707c4bc409ace557790e9735e8ffeb3ffdde4703a41c4507d6bdacb3edf6227e5ab81542542cc8406c5845be89990d39217f8a2c2165380d45ac8ab517999c3e11b54a1d6f31393ae20439e0bc38bd000d1f4a9bcbd33f0b940cccd87773af4dc82e88a029c3bc1c277c06d334a9ef10a751fb526a2c1e2f9961f5fbbe4431aaac0d7cebf20176b676ba1ab1baef2ea78e138fc19d30c20363da0d1186863c812c1ca65b403a3e19574fb4f9fc2c121efd7e7fa7d10b9bca18bfe16783ce333d6b7c39b7abc7e31655b0fc69ee302c9c95b2a6e2fec01b0dcf06ecfc0c221d046dea3239093f22e2700d69f607dcc0838d1009ab38ebb66abb155e68c228946cf6ebfc1b8f3a8af9ce0be3a3d31c592a476c6af145bf938755f0a03260e8743393d5d3bb141c3a1387bc1cc5bb46ecad97140e453a6742a143568e4634ecbde871010321f09f3a7a3947914f048b6eff8d11515fe1e27da908879e7da9db59072790045e50816da7996757f9aaafda0b0de5e3ee0c12937dc828ab7ddc0a49287ef9698f20fbf1199b912159e8f1eef5a1f304caea05d962c03b24858d674e8cb156190c93c1ae092eaadeafc3d70eba0a6fe20d3678719847f5fee6756afc50ededa44fee52aee91d063825acf789a881ee31253515d44e32cf5a9d78f8c28143740d46f58589e0fc4f2d1d618120dce606d6c0306ec441111b211d3ddfccc2bc34070bab3b0cb9b6e7d62f5e98cee2096bef110cd089fb8c02a14f9c8a039af89710e5ab465701b585cf0c782a715bc608d663d1d0486451a6262792aacf57b4771144b8055b41d36ba5dfba7c57e20229b87db1a44a8416e0afe67856f5df6bd8e55b0cc739e6a7afbd777d850b56d57ea3a87aa5993465461b35ffdd2e24b32338380ad452ffd60dd73506e9437aa809258af458f936c6264648f3752000baec1063fc1330bb66fa2be0be3a674babfbf1d4efc2cd3215eb8356137314d6d893101bd0f294a9045ed93380547b93a2e9401e6bfc82484b12f1e679de9235b60eca3336abcc4b084d81157ca7904094c3359a87b788edcaf960b3939e125ce99c5226fa6e782b80c6151d395ffeca412bebe81746f52569985f59ed91d63a5e33139ae8eff6dfac786c8f7fc926994daf7a1fb5c6542608a281cb2e952edf45f841df92f4b2c871bb9c3e04532e5c67be125a207e70065731c477f85ed94ece0e4537b83c9e08900a9472f2d1714d4bd6da2b1a905e8fe757d22e6fe1b8af3cb939b7b4a4b920f0720bc68cdc7ac548b17872af5d85a65654540c21c4c1b47bbb2b261a2ec3327e57754ac45264bd221c3bf24679cc49330577c5bc17419eeba05a42664d7a66997dd52e05fd7e22cccc712c3e64606cc1bfccb53dd98cfa9d0c68610a6d162dd97c6cdad868d44428bac9a439001e8c763cc30e7ccb3451a6addfc96c25c0b7889999249aa2481cccdba9889f6c06b0118fbc8a7825a0dca7f56bda4ab620122ba1cdfc51773a58189f6858a0bd3e29af0715e578424a6a0d5ae67f953fa7407535bfe35c5f6214d61cc8724e5745d3e392c8da0dc125da907ec9cd853d2826ee3d512310c730d2babd2f421832282a1b314a210cf66c79d46ccc757161921415a6644a48d14d8ea8131d0b880d190ac726999e614c342f3c59f62077fa9f6911fc340e7879b6d3ee2428dcca64b2ea232e4dfda1ca31c096076738c9805063e8f07ce55ac76e270d8f58c4f7ff81dfaca4b3d4fb24122145f4f48c008164466a98e4d39e815424f3c2976cca0393dc441fb5504008699f20492ec5b779cb8586922d8148d406d05d9882bf9c2957e6930bffbc97bf7920afdcf77a7b34050b1efab34ceef3c953c5e813d7c6ccfe6b252d8847daf3acf066d2c2af046cf83677201c928d1882ef3d42e57e371e1d7249d5e953716ebc4bb13833b2e0b682d6a9f8aff22a0c8b66f67c56d1047a6291cf4d974eb4e6f19f15de4808220f11d4a287b0c9fa239fba195e7c723bc587aab6977182df77a08386f9f2a0004ac58ac663549de19fa8abed5ea4269ef800e69ad6743c6d51c884d2236bd119686d42e4b79140cf13077da7702271d9280047cbbb1edcd71366aad047470d69b1107251a87b30b175e95ae2ce6793e98637baaabea506985045cfd02ee8a18b8d461233c96a79a2a4c58bab6c4b754f73c2fe8b0e57d9a88a62f280a7eaf90d069ff1547839f5aa15d235ed20f925eeeb90d6cadbaff1266bfe66603e591e34eceac7e781f860a0af37d5ab20770baf12f97e734a3e896dc16a399d1d1c419407d5a61be2fa83f5c97b79175ac0d32ee776945656832827dae9336c6256a197249c8e339d39e8c5ff4f1a2e8e26e8c55038b0dbb86d290c349d9d050fde01a1e315fcd0767acde2319c86a04f7c3107561eb91d9f3d626f176a391ab71c2953c71eff23fc0984f39e347331f1657413318288743ee89e373b9cebda63e593e36b3c15ee200567ae24a21ebded52cf1a82cbe798fb46ec8ce5a525b4e8eeef9e78ef49b6decd2d805f2423f408fbb3064e67693071b70c33e4756b9312a514f59fe7abeef7f3b2a106b17071d96cd2f88ee63ca6184d3529cc47283ae1bcf9b753320b6fafaf3e727a90e238f79b1321c8b93ee79ce238791a4e582ed9f63e757a98800090db875d7491c7c22fdca87afbfe68b20baf92337eea2b461ed54c1733f2859f0993622bf13eaf2b703a1d7e859fb1abcbd504ec72efa5ecf12d2b55cd96afe0f85afa419f13caeffa7e152fcf556fd2c9c9fc2c9e8d4dbee3f25ce78a2cc8a1cd91676efa8e60b5718820a3b658ee3cbb4abe6bf53d5a518a098783251625002508d2c1d6e5a63a46e621696b05f2bd6fb2d4df5eb82908a09d5319e00d824afd99287c25818274590f8dd79f6f8a203b0b2a7f48d406576fea051b73815c20c1c2862f3b522cdbb5947e3cf5e7b3670dc4dac607a181b7b8e6d684190147e51148feab032729e6a285968fef1ddcca14b6479ec84a710111a926a077dafcf8521684ed4ea5e9c46a4f35a24879138e687a7401c067126fad18d9bf1aed42e0ec0159b815a4d74c4f34c427a80abd613f0ab9de1a679edd749e6efa595d8743a43c85b414489ad663fcdc4e4f3c09fa1f71b8bbbbc8b0e7fc4c121cf5656152dd4dcfb5a807a4a87fb721445e2e731f34f5c932482dead30c132f5530449c7b76a400bdbb0f6bd87862dee7bbe5f1ed7d5e15175f63fab6185898147f67e679282da5166be5587874d194a938992b118850084fe65eac3990826354f69e838629b00ec8a3cc1607bce3fd469dfc058b196ff9b1bc273c80c15977e9791bc5e36c6572ff68166f7f0a87f1694000aa332bfdd5e44038dc12d582140f6f38c4ab87323696c2ec4e7a0cd4bf6507d10b7ebf6e5a6962ba38fc698f34d599e4581b821b1b8ab330d8fbdc801168a547836b3e112b25ff4defb90938ec1759b37a6d007d8d246f0c90967887c037b398451425ecb5aff27c7774dc927246d6cf4caac5a6df3d5d739ad0b494c70e0b6e177cf26f713eafc35db38dbbce5546e3bd8ca2a711ba60e7496b0d1981b4f4f1f058508b8083ad50fc6d05a3b8ac7e6bc6ea38779fa43b2a43e5342d885779ef3aa043145a33a3b9943c7ad1b92ed5f14ae8b2efbef2ce57041dc1b12629add4cb4ec0e82bf405fe1d90014467226cc30c2a83ec21d0a762518376f2b2e2ff7bc925964144d1a7912f000c6d91d166d24b97dc5479fb75d2ad35126369b37ef9590fb6b1a18f7ac943ae6411e022f66401dd31358d95cb8f85fe80e7bc3acd5d5b65d05ce1233c44e891d2b3143a69ed3c94a43ccc3e5d1924823e9fb8db25367d8f13580c456ed00da23f9f283802a090973abac9f455ec30d1b41244babfea5da51539a8af947fd347f99e53d1fb5e4f037e5c1786e3771f9ce841e3765ff444ec876c753c120fc4cdf97c13eb127c459494d63f94dc48275069d1e207e88855e66bf1234b7cec023031464a7dbceb3207fe02d9f24b485213f39c26074d49007fde7c21f720a92a1030f116667e4a5041e2d1a5d6f371d69602e03c23085ea0898899038144921879dc0f07324ad5f4f1533b67b0b7000993d1a116da6a81f3d3e7d494505a120c4db785b85041f27f82bfb58a554b90c0f08251688e2efbef1b3d3af749bd0810574808c135568330c7cb535c59399bb3f319c41c643b142058928a110c67393c0a0452af2803f9d204b159fecf31ad5a1a76ff0430191e1f4ff585242cbe8ee8aa50f8e7deaf1805dfc030b46bd07d6bbfc80af6f9297eb97d24998216c4c33018d5c4694d29ca61555a0480e438a2963d55c9a3d78357906b714a86321143bd03e2ec28c8c725232b8d4b2e80cf07bcb6d4f85455dbd45834776f4179c5a8fbefdfc1e16cfb0ad5b316f02682ee7a142729c2a60b586e92a0cd63554337efdeec49cb8caa8edf38e8f1284d3eab88875ca75456811185863815ad7f0b6a5b4c74758adfecdba57aa6b3a6c752a76e3fde0eddaf66351d31407adba980536920d244f983c5413b2673076f0b9eac0e8b874a0aebb0b12fb8d719103503ea589bc050bb95834686abfcbd1c8586df146e5e6d6e061e216cf998b662d97998755bbe2c6711fa941afb5085831affac348d79821d33b52bfa8de62cb153f0b0c90f4e62ec4560e656136da9e0d7df3ff9457ea89eaf9e73974974ad6659ffb43654d5dc8df1b68813fecb264b4edc2e421571162796e8a314da386535eac2f0925fb64528da4fa42ae7d6909ef634f0d545d421b33841513ff76d1f9c2c4882b3381da34dbdb8779e0327870d08218b6f4038be3bc36532e4b594ea1463ca2aadc8b8a2e1d2136c539d744aefafca43cc7f30009b922d35dc255922d5ade80bd17e60df15441da0855f241210b2acf23a0f33c2712c9c13e1b4af1c0af04020c4886786413d3686a6111c1270c0fc03f3fc6d71779600153a5a93c1417cdfa8eb5225d425ce581090ffb94e40b8250a697"}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0xf1}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x7fffffff}]}, 0x11b8}, 0x1, 0x0, 0x0, 0x20040001}, 0x800) r4 = prctl$auto_PR_SET_MM_START_STACK(0x4, 0x5, 0x0, 0x9, 0x8) writev$auto(r4, &(0x7f0000001740)={&(0x7f0000001640)="d1bd90dad550ed32fdfb0e95d7b8ab9795abbdfa7bf649e7578cacb95c5219db9d68b46ebd8df9b18a3e9c14a4aa913de024a3359bd1f68aed86591fb4f9a3d9bf5f13d983a9f7acd199f98ef49dd09d474c2b45e9020f1a4ca3b2364499170b4119e003ea259812916695bdfe7c690890d9a6e9a4dcad903e3e870bff5cc49988647a13c78b475f37b47a4d3459d6f0e3bf42f6e0830bc124887c73c4d6eeada170d849ab9db1d464c2a6a80f8e285a6947aa817d151b4c4ad3f5ceaa7a59c8e96863f8689004b3ca325dd102766e6dbf22837b1e55bf87356343331e0cdbdf2c1e647fb9f02d7c8aa664a9"}, 0xec) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000017c0), r4) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000001980)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001940)={&(0x7f0000001800)={0x114, r5, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x5}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DISABLE_HE={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x9}, @NL80211_ATTR_MPATH_NEXT_HOP={0x5, 0x1a, "81"}, @NL80211_ATTR_FTM_RESPONDER={0xdc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xd1, 0x2, "a58b90e27ad002ebb695d4eb4a063d1bd6f6df54bbe4f21bb595bf7f33a6e64c56fdebf1f9405927b06178695dd07225d5c74d2dfee747d0da6d42d8fbed10d6adf2231a45be66e4d67af9acad2e6837b82239fe46e8ea6b6e95c40a79801d6d7d855b1e161547de7f8ec5da7c26fff5d41539ac361169012227994d86a7ad02474316b4b6321ce7f5c5eb3befb899ffa61bd19b534938e40c5fa01ecd2de3147275b30beec6d4d5546fb8e3302445a405e96ca60fc485f6864691c53b7f7cdbde4ab38561f596eba693c09a24"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4080}, 0x1) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001a40), r0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000001c80)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001a80)={0x1bc, r6, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_SSID={0x17, 0x34, "fd4a60e8bdf87ff47b46d1d8a6a6e4b4f1ebcf"}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xea, 0xbd, "c1ebe206b2101c64fbbbc87b0beaef67d3165129044c7180eaa38c1183023b84d7871ea521856832a2870c653d7ce0149670d099cd7b36ef2595e5de617c9477708ba615dc2aeba66f47b0dc227b19dfa78900eba8bd560b3dcfa292a6ba1b844133492f1c80d6eccdfe7c6e1999d494e6ffd7aeed597fae21c9ee49ae39b04d29f3cfb5b96e21b2155aacfe8aec1e65cadead7a88b2916224536b87fc11f30244a944a20a1dcb51fa17f07efa3ba077140bebbcde01054403af46933f5ed4cc02208e6ab0dc1d31d203fa6de3b5c081a9c9a149dabdc6b61b0c26aa4f70285075a50386e1e2"}, @NL80211_ATTR_FRAME_MATCH={0x9b, 0x5b, "e7c035035522d0fdb1a78fd7c1706d8db28428c5bf485227d759088ef52d0e746435601e6191edcdbd48e407ae01f8e35101c94422b7086ddf9a0bf1b3918ad96881ee2d7d17e0455683fdd19073fa323a04ca0e137db8a1733bbe0eea12a5bc8b54a0afbc2ff18beb572397539dafe89544b518258f746c593e826085beed0f0f2b15399b567b27afaa45b068f4fd71432ed380cbf769"}, @NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0x7}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4004044}, 0x44) r7 = ioctl$auto_TUNGETDEVNETNS(r4, 0x54e3, 0x0) pread64$auto(r7, &(0x7f0000001cc0)='/dev/snapshot\x00', 0x9, 0x4) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d40), r0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001d80)={'team0\x00'}) r8 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000002200), r7) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r0, &(0x7f0000002300)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002240)={0x5c, r8, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x6}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0xe1a0}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0xd766}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x80}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000800) sendmsg$auto_NL80211_CMD_GET_POWER_SAVE(r4, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008041) 2m32.103797287s ago: executing program 5 (id=797): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socket(0x2a, 0x2, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x800005411, 0x38) r1 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) io_uring_register$auto(r1, 0x15, 0x0, 0x9) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x13e, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) fcntl$auto(0xffffffffffffffff, 0x40a, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0) sendfile$auto(r2, r2, 0x0, 0x2400000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$auto_SO_PEERNAME(0xffffffffffffffff, 0xfffffffa, 0x1c, &(0x7f00000000c0)='\xaa+.$[\x00', &(0x7f0000000180)=0x8) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x40002, 0x0) sendfile$auto(r3, r3, &(0x7f0000000040)=0x8010, 0x788b) 2m31.070892276s ago: executing program 5 (id=801): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000000)={0x0, 0x3e, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) 2m25.876124099s ago: executing program 1 (id=824): syz_open_procfs$namespace(0xffffffffffffffff, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) socketpair$auto(0x1, 0x8000, 0x725e, 0x0) socket(0x18, 0x2, 0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000040), r0) sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000100)={0x34, r1, 0x21, 0x70bd27, 0x25dfdc00, {}, [@WGDEVICE_A_PEERS={0x9, 0x8, 0x0, 0x1, [@generic="c9cf2b0fd3"]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x34}}, 0x80) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x8001, 0x0) r2 = openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x40c0, 0x0) writev$auto(r2, &(0x7f0000000040)={&(0x7f00000000c0)="e560cce5c091bd61d5f5445fefa98d9e059775ef8b5fc6c436a4bb899dcbe10b6a9ef706a5e0266e6100d7cae0e665e05aa9cebd5462adbadc1d90ac1859b044a1d5c41a08c3d7a0ca5cb7db364db70dc92e8b54ad5e6478523bcec31bce653a52bd0d52cfb53e2b47b1d69cb31bc51bd972419cced9c370293e711e4e8b2f8004a48be13e625e9813a214eb965e7bfe26e3314e2f735cf53b4d3473542c22f3a920498ccf2e901ffd874f3ff7e3e4f324e31762f35ccb48c20838f415939873227755635006bb23e3021e665b0263bae6ba37a11b", 0x2df8ab6f}, 0x0) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x4, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) read$auto(r3, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r4, r4, 0x0, 0x2) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r5, r5, 0x0, 0x2) 2m25.416565595s ago: executing program 1 (id=826): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) unshare$auto(0x40000080) setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0xfffffff8, 0xa, &(0x7f0000000000)='^:\\\x00', 0x2) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0x1e, 0x1, 0x0) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c890}, 0x800) sendmsg$auto_TASKSTATS_CMD_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x400c0}, 0x4040000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x9, &(0x7f0000000180)={0x0, 0xc4}, 0x3, 0x0, 0x0, 0x4004}, 0x7}, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001640), r0) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000180)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) msgctl$auto_IPC_SET(0x6, 0x1, &(0x7f0000000340)={{0x80000001, 0xffffffffffffffff, 0xee01, 0x5, 0x8, 0x200, 0x3ff}, &(0x7f0000000100), &(0x7f0000000140)=0x24, 0x87, 0xfffffffffffffff9, 0x4, 0x8, 0x2, 0x4, 0x4, 0x5fd, @inferred, @inferred=0xffffffffffffffff}) sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x2d0, r1, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x5}, @NL802154_ATTR_SEC_DEVKEY={0xb3, 0x2f, 0x0, 0x1, [@generic="aeab1587cbce08657989aa1b29f8938b421f2de81130fd676ab0ce5a20fe79f9eab0515071c1569dbeca2b440953bc300f2df89d3acacc98048702142de24708929ba058aad9d4ad13938ecde84c16c5a7e9ce99f3c9744f2dbfdddea70b6a36ec762616304ed6462b97d4af2132c80f85ee22fa608081465cefed3c7764c39c8a869a6a99aaea6bad95051eabd16fcc6317f820a656c4e6bb3dfaf7d5161c116459c9ece99032577e5c22a0d800c0"]}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x1f8, 0x2b, 0x0, 0x1, [@nested={0xc3, 0x143, 0x0, 0x1, [@typed={0x8, 0xc0, 0x0, 0x0, @u32=0x7}, @typed={0x8, 0x119, 0x0, 0x0, @uid=r2}, @nested={0x4, 0xcd}, @nested={0x4, 0x86}, @generic="7704cfd8cedad4c91c7196a5c99642f9f277a2a99f7938a773ca3be200670254e878077be78f8e4c0e38d029f983f9a930ff581db1931457796736ec7f3ee1259c112b1ce7a06d8c9d5a41326cd1bbbac6ef61bf242ff08f2e296554d3ad243cece3461acac310655bd0d39cbec95b06b94382317afb34a7f26924a6413e9cdf210b1598620d75862635382d86c35e2873b33da8d3ebbc36d2529c2d2c65c58606024f", @nested={0x4, 0x113}]}, @generic="e790524694d1411c601ce9aedd58b659b93c9012300eda641d05147bea80e1db402b8a89b367d3d6683ece7f3bb9a4f2c31378378f7f2fa82b1f0dc7b150f0a761c8", @generic="5a70265590f2e4a71b361a88e3f6dd4c24d8febd8875edc0b5a80137437fa92fe91aeb8f907ae7936ab3ce3f6869a47cb1c6876bf22e5fa08fb2459f7f6e92a279f180d8bb942351540ad406304521e13fc57efb94680d7b1966857b49a77e4b33a8c5771ee3f7d1ea15c5a7eabb039fb160f274d9c2d01e9c6d648d77bab04cdcc09470264463c6a0642eeede10015353c3d9f00a5836bc8577cffc54a0076d5b3c524a92df8c4b1104e69426300d5c0fd3127db801b50d426755b33f73126a900b28b709d61b7ef565ec0cc024103e1511ef9300bacf392dfcf3e8b477d1310c8093b7172b80b9480f18486ae7"]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x4815}, 0x8004) 2m25.071744947s ago: executing program 1 (id=828): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x5c, r1, 0x1, 0x70bd25, 0x25dfdbf7, {0x1, 0x0, 0x3f00}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x5c}, 0x1, 0x0, 0x700000000000000, 0x44000}, 0x0) 2m24.908703203s ago: executing program 1 (id=829): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0xffffffffffffffff, 0x300000000000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptycc\x00', 0x0, 0x0) ioctl$auto_TCSBRKP2(r1, 0x5425, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0xfffffffffffffffd, 0xb, 0xa, 0x40007fff, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x5e, 0x80000001, 0x7, 0x2, 0x9ac7, 0x400000001, 0x2]}, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) pwritev$auto(0xffffffffffffffff, 0x0, 0x7fffffffffffffff, 0xffffffff7fffffff, 0x5) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0xffffffffffffffff, 0x300000000000) (async) close_range$auto(0x2, 0xa, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x1e, 0x4, 0x0) (async) socket(0x1e, 0x4, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptycc\x00', 0x0, 0x0) (async) ioctl$auto_TCSBRKP2(r1, 0x5425, 0x0) (async) get_robust_list$auto(0x0, 0x0, 0x0) (async) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) (async) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) (async) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0xfffffffffffffffd, 0xb, 0xa, 0x40007fff, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x5e, 0x80000001, 0x7, 0x2, 0x9ac7, 0x400000001, 0x2]}, 0x0) (async) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) (async) pwritev$auto(0xffffffffffffffff, 0x0, 0x7fffffffffffffff, 0xffffffff7fffffff, 0x5) (async) 2m24.681050527s ago: executing program 1 (id=831): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000a00)=0x6) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r1 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000040)={0x19980330}, 0x0) getsockopt$auto(r1, 0x29, 0x41, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendto$auto(r2, 0x0, 0x5, 0xc99, &(0x7f0000000040)=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}, 0x6000) msgget$auto(0x0, 0x5) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001500)='/sys/kernel/irq/5/actions\x00', 0x22040, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) 2m24.535688556s ago: executing program 1 (id=832): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) r2 = socket(0x2, 0x1, 0x0) ppoll$auto(&(0x7f0000000000)={r2, 0x4, 0x5}, 0x7, 0x0, 0x0, 0x8) setsockopt$auto(r3, 0x6, 0x13, &(0x7f0000000040)=')[\x00', 0x9) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) 2m16.004546032s ago: executing program 34 (id=801): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000000)={0x0, 0x3e, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) 2m12.406933897s ago: executing program 4 (id=889): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f00000013c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001380)={&(0x7f00000001c0)={0x11b8, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_UPCALL_PID={0x8c, 0x5, "3d21ff8f376c54dcc613466cac4b630d5a8cd484f813a5b22d1aab0d826431a71449fa9154e4d8909fa26c61d1ae2b4f9eac3845e6c9b6d9f66c908e2d6c45d5d6c0a63f3d8a09153b5821b8fb45498aad30e0b5944967b72239ccd6268d40523d310ff340bb6ac858b20c5756ed2fe1455ff9462d0b8112d9ec44026c5ac8b04575c5d7933ddf1a"}, @OVS_VPORT_ATTR_IFINDEX={0x8, 0x8, r2}, @OVS_VPORT_ATTR_UPCALL_PID={0xf1, 0x5, "1dca7ae9d008420e032b66d26889218d4ab237adc7d9b1c86578477d2c989459799b18ae5db9efab0ce17edbd966e4ac1597957735946f9c1ce10c13fc9e79f5c7464f1489d71993738d896c3f9fe235cf61208674077702a2e1e94b2421f34b68bbfac65aaa4a553cf3d86e95b429e697f754c31d324fc3c20021692c88bf48ee1879c2136aa9a7e79534a01189ab2bbc41c7f9e94bbb3e82f749bb743f032e2d0d95915551b73c1081f4e80c7d6f7df4d746a8b4650650316ab18fcb46d9710d42c8ec9905eac2220cd742f70bf0870425c451ed092c96046045c55149ec76c679c9699bd5a32046372362bc"}, @OVS_VPORT_ATTR_IFINDEX={0x8, 0x8, r3}, @OVS_VPORT_ATTR_UPCALL_PID={0x1004, 0x5, "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"}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0xf1}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x7fffffff}]}, 0x11b8}, 0x1, 0x0, 0x0, 0x20040001}, 0x800) r4 = prctl$auto_PR_SET_MM_START_STACK(0x4, 0x5, 0x0, 0x9, 0x8) writev$auto(r4, &(0x7f0000001740)={&(0x7f0000001640)="d1bd90dad550ed32fdfb0e95d7b8ab9795abbdfa7bf649e7578cacb95c5219db9d68b46ebd8df9b18a3e9c14a4aa913de024a3359bd1f68aed86591fb4f9a3d9bf5f13d983a9f7acd199f98ef49dd09d474c2b45e9020f1a4ca3b2364499170b4119e003ea259812916695bdfe7c690890d9a6e9a4dcad903e3e870bff5cc49988647a13c78b475f37b47a4d3459d6f0e3bf42f6e0830bc124887c73c4d6eeada170d849ab9db1d464c2a6a80f8e285a6947aa817d151b4c4ad3f5ceaa7a59c8e96863f8689004b3ca325dd102766e6dbf22837b1e55bf87356343331e0cdbdf2c1e647fb9f02d7c8aa664a9"}, 0xec) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000017c0), r4) r6 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000002200), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r0, &(0x7f0000002300)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002240)={0x5c, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x6}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0xe1a0}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0xd766}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x80}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000800) sendmsg$auto_NL80211_CMD_GET_POWER_SAVE(r4, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008041) 2m12.332977955s ago: executing program 4 (id=890): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socket(0x2a, 0x2, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x800005411, 0x38) io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x13e, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2400000) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xffffffffffffffe7, 0x800000000000948b, 0x3, 0x15f4da0a, 0x3, 0x4000000000000003, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x8, 0x6]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 2m11.618484004s ago: executing program 4 (id=894): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x4, 0x9, 0x4000000000df, 0x13, 0xffffffffffffffff, 0x8002) socket(0x9, 0x5, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)=';') epoll_create$auto(0x8800001) socket(0x25, 0x1, 0x0) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/md_mod/parameters/new_array\x00', 0xa001, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f0000000200)={[0x1ff, 0x7, 0x3, 0x8fd6, 0xa, 0x3, 0x15f4da0a, 0x3, 0x3, 0x7f, 0x32, 0x7440, 0xd0, 0x6, 0x9, 0xdffffffffffffffe]}, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt$auto(r2, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) r3 = openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/saved_cmdlines_size\x00', 0x301001, 0x0) ioctl$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffffff, 0x3, &(0x7f00000000c0)="9879fce89db34bbda7d81829cf1ac20a5caf86f95cb9557ca46df0a6dbe2503d7446475fb8f4a969d14ca91e1931a4d839e406d3ee367d278c395e414ffd31122d0c09a8569b1153ebdab474b4e6d0089621e0e77cb068d4fc74f984b2ac6e71b7f909aa55360dd882b9984cdd670cc1fcf6a306a8c7009e5b38a889d4ab") close_range$auto(r3, 0x5, 0x2) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/pcmC1D0p\x00', 0x288801, 0x0) socket(0x2, 0x5, 0x2) socket(0x2c, 0x1, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x90080, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r5, 0x0, 0x1f) writev$auto(r4, &(0x7f0000000200)={0x0, 0x3}, 0x3) accept$auto(r5, 0x0, 0x0) connect$auto(0x3, 0x0, 0x54) r6 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/pcmC1D1p\x00', 0x20080, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_LINK(r6, 0x40044160, 0x0) set_tid_address$auto(0x0) 2m11.440291532s ago: executing program 4 (id=896): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(r0, 0x0, 0x6, 0x7000004) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(r2, 0x1, r0) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto(0x3, 0xae41, r3) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000) 2m10.517894741s ago: executing program 4 (id=898): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) pipe$auto(0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0xffffff4b) mprotect$auto(0x100000, 0x806121, 0x6) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/admmidi2\x00', 0x88042, 0x0) read$auto(r2, 0x0, 0x20) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x100, 0x0) socketpair$auto(0x8, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0x4048aecb, 0x0) 2m9.548169824s ago: executing program 4 (id=906): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) ioctl$auto_XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, &(0x7f0000000080)={r0, 0x0, 0x1ff, 0x2, 0x5, 0x22}) ioctl$auto_TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)=0xe) 2m9.421786558s ago: executing program 35 (id=832): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) r2 = socket(0x2, 0x1, 0x0) ppoll$auto(&(0x7f0000000000)={r2, 0x4, 0x5}, 0x7, 0x0, 0x0, 0x8) setsockopt$auto(r3, 0x6, 0x13, &(0x7f0000000040)=')[\x00', 0x9) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) 1m54.415631112s ago: executing program 36 (id=906): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) ioctl$auto_XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, &(0x7f0000000080)={r0, 0x0, 0x1ff, 0x2, 0x5, 0x22}) ioctl$auto_TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)=0xe) 1m51.320827933s ago: executing program 6 (id=972): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000a00)=0x6) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r1 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000040)={0x19980330}, 0x0) getsockopt$auto(r1, 0x29, 0x41, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendto$auto(r2, &(0x7f00000001c0)="1681abcdda01565297cbd5a9a5af5b85d4be83746eb1acc678668849f292045fe72bdf0701296645254925410effff09beedb32497afdcb48d7b89b229f3bf5d5bc3381e8f2d0c14a905a0e16cc2554feb0e00000000000098af485b0341576a31163e3fb969", 0x5, 0xc99, &(0x7f0000000040)=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}, 0x6000) msgget$auto(0x0, 0x5) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001500)='/sys/kernel/irq/5/actions\x00', 0x22040, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) 1m51.090433388s ago: executing program 6 (id=974): socket(0x1e, 0x4, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8003) close_range$auto(0x2, r0, 0x0) socket(0x80000000000000a, 0x2, 0x0) prctl$auto_PR_LOCK_SHADOW_STACK_STATUS(0x4c, 0x9, 0x2, 0x8, 0x4) r1 = socket(0xa, 0x801, 0x84) close_range$auto(0x2, 0x8, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) socket(0x29, 0x5, 0x0) setresuid$auto(0x8000000000000001, 0x1, 0x200) mlockall$auto(0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_bridges_fops_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/dri/0000:00:02.0/encoder-0/bridges\x00', 0x84941, 0x0) close_range$auto(r2, 0xffffffffffffffff, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) getsockopt$auto(r1, 0x84, 0x71, 0x0, 0x0) clone3$auto(0x0, 0x7) kill$auto_SIGCONT(0xffffffffffffffff, 0x12) 1m50.421871974s ago: executing program 6 (id=977): rseq$auto(0x0, 0xfffffff5, 0x0, 0x5) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/pcm1p/sub2/info\x00', 0xc0000, 0x0) readv$auto(0x3, 0x0, 0x1da) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x40401, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0x8, 0x38) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x60040, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8001, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_FLUSH(r1, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000026c0)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}}, 0x4000000) read$auto_drm_connector_fops_drm_debugfs(0xffffffffffffffff, &(0x7f0000000040)=""/99, 0x63) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_XFS_IOC_ALLOCSP64(r3, 0x40305824, &(0x7f00000000c0)={0x6, 0xd48f, 0x3db9bc0000000000, 0x9, 0xe}) 1m48.756234141s ago: executing program 6 (id=981): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/block/nbd3/queue/iosched/front_merges\x00', 0x2041, 0x0) socket(0x2, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={"ef65ce6c00cf81000000ffffffffffffff291d000000000000000000000000fe", 0x3ff, 0x408, 0xffc, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) madvise$auto(0x0, 0x5, 0x15) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x8658) 1m47.242437848s ago: executing program 6 (id=985): open(&(0x7f0000000000)='X))\x00', 0x145042, 0x1d0) r0 = socket(0x10, 0x2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x12d981, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2f212cbd7000fcdbdf253100000008000300", @ANYRES32=r3], 0x48}}, 0x4000000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) close_range$auto(0x0, 0x5, 0x2) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1p\x00', 0x0, 0x0) r4 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D1p\x00', 0x20080, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, 0x0) 1m46.704931565s ago: executing program 8 (id=959): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x3d00, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r2 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x8002, 0x0) read$auto(r2, 0x0, 0x80) r3 = ioctl$auto_TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$auto_TUNSETVNETHDRSZ2(r3, 0x400454d8, &(0x7f0000000680)=0xffc0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r4 = setfsuid$auto(0xee00) setreuid$auto(r4, 0x0) r5 = getegid() r6 = waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x3, &(0x7f0000000440)={{0x8, 0x6}, {0x8, 0xc5e}, 0x100000001, 0x3, 0x1, 0xf9, 0xfffffffffffffffc, 0x5, 0x6274, 0x9, 0x0, 0xb, 0x35d, 0x439c, 0x9, 0x7}) shmctl$auto_SHM_STAT_ANY(0x0, 0xf, &(0x7f00000006c0)={{0x7, r4, r5, 0x4, 0x6, 0x81, 0x48d}, 0x1, 0x5, 0x8, 0x2, @inferred=r6, @raw=0x5, 0x5, 0x0, 0x0, 0x0}) shmctl$auto_IPC_STAT(0x4, 0x2, &(0x7f0000000500)={{0x2, r4, r5, 0x8, 0x5b, 0x401, 0x2}, 0x4, 0x6, 0x6, 0xb0, @raw=0x9, @raw=0xb6f7, 0x17, 0x0, &(0x7f0000000040)="e14e98c93c29f1d68af7fb9108ab7244dd0f05cd198dcf41300ef34bfdeaf3233334a9e7fa9f982660ca4b917b65732d0627627cd4046ced6eca6f367a6c1451", &(0x7f0000002640)="b2e9b4abdace6a500e268d7f6ad74f47b20751b3ba921d9b5c4b6f84f10f1691565e1a82c7b1d084b080a8c3dbcd8e9b00c747b87f06b125efa7e2d2d09a7d9fd38a62592adc0024894feeb074a13c6827d4dfb1ee29b83eb13cf58eb7d45782f151e48f3c41587a1d9f8ceeae60fdb2f06ff0f018242ea50bcbfe130eda2ff8d3bcd40812"}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) semctl$auto(0x80001ff, 0x804, 0x13, 0x4) keyctl$auto(0x1, 0x7, 0x100, 0x8, 0x4) keyctl$auto(0x1, 0x7, 0x100, 0x8, 0x4) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f00000001c0)={0x8, 0x6, 0x1000, 0x6, 0x0, r7}) shmctl$auto_SHM_LOCK(0x4, 0xb, &(0x7f0000000340)={{0x7ff, r8, 0x0, 0x4, 0xff5b, 0x7fffffff, 0x4}, 0x8000, 0x7, 0x10000, 0x2, @raw=0x9, @raw=0x7fff, 0x2, 0x0, &(0x7f00000000c0)="6e582342984d8b4e4293b22289000000003957ca8892b819ace02085f545420da30f84480897892976a5b942c4fdc1b4be8a07ba168453c99537240a4213e6132f0be6ba6783974cb75b46843a29ddf9", &(0x7f0000000240)="ec2cd7ab8ad39f5b93d3f7687d4e0202a6a55545dd192df10012002c81a10086930a1cb765acc5cc192d3059cd08e7520033dadcee81ee37b87f9d58d0944c0f28cfc5b8d69dfa5485e3528c7142ffc3c10d2edf0d6519095fedef4cde0a8490d0cb7621d8dfa435c7156653a10e4d634386f14939af019156b6d5bb48408e7d35d306aef204f7fe85a3de50486eba98c755829a27a2004738e262401570a21e5a9191f1bbb68812a1df7182979103b254db80c4204dec0958806314087c4f07b3a318343cb95a7bff4e6ec3c2760f338550bd618c5ff6e73041759c00237a620fc14c2ea5a86aef5ccb7fdffff8b5daac361d7679bd41"}) sendmsg$auto_NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000100)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) r10 = setfsuid$auto(0xee00) setresuid$auto(r10, 0x0, r10) sendmsg$auto_NL80211_CMD_SET_TID_TO_LINK_MAPPING(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000025c0)={&(0x7f0000000780)={0x1df4, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_DATA={0x12, 0x7, "1b494a283a575d523b9b400ef6aa"}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0x9}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x2e9, 0x75, 0x0, 0x1, [@nested={0x6e, 0xe7, 0x0, 0x1, [@typed={0x8, 0xa3, 0x0, 0x0, @uid=r10}, @generic="f2649c63d40131357c862a59fe6563e31e786f90fe96b3db1080d30375f9ea9c14c52a30e3a6ee3cc83b7bba6f51bed7aabd36c4fda0b1b869a67cf024b4fc5a4285bdf79059440751f418f62b26d1015625562b5569", @nested={0x4, 0xf9}, @typed={0x8, 0xd8, 0x0, 0x0, @pid=r7}]}, @typed={0x8, 0xcd, 0x0, 0x0, @u32=0x3}, @generic="f715c345a0a614e5d8ac86a375f2cd6fa5f6ef7ebddb0c2d975a1012adc415145df4bf178f3649f94920263340be4e446e554afa78a0e3fb483dd1a68e2f55f59ce3bf0e2793edad6ad9ab051727a7b86cec25343ff8a65c1d15", @typed={0x4, 0xf8}, @generic="573b3c2b4dffaf6aba3a9696a21549331cdb28ea493ec6267dd2838a0c79f0e457af8025d27ed752b4d8590f8cce5fa3", @nested={0x6d, 0x22, 0x0, 0x1, [@nested={0x4, 0x9a}, @nested={0x4, 0x5d}, @generic="577848d533e07cf4d4dd5841dc53ceb23c84ab07f8d2279ed99859a87172b945febb94dff5e756fa33756971730a770e8536d54a8f4e16c3b5581c738f0b87e201eb84e98eac17993d9ba2f0e764b05fd0b16d38bbdd80a97416461460", @nested={0x4, 0x57}]}, @generic="41005284688893e873b568873b0e8bddec2e701670cca824506c6c4b9084ab2be766b3c7a3afce6159a17e97e2f9dacc65e5b26cc22efca0fad2f30b6a7b88d11edd2f4e4273e53e47da621d9fca35e1df8e11f8dd6ecb3918c69080a929683a7a1d4e1e0ffd5c96f83aaaea9d2f54ce4e3b74261a70fe6904b87c1eedd12ef52ff55150e9a56a00563b78e2c8e4854f457c8478c08c13289ed504a5b54940a6fac1f4dc1cd66515f87afe3756a74036ed2bab14aa9dabad371fac9ccea25c0ece0b29eb7886e3241f35af30d8c331e221ccbbfbd2", @typed={0x8, 0xd8, 0x0, 0x0, @uid=r9}, @generic="ce17b866078526ddc2a21486a90f9fff879714940a3d69fb66e6f9cf954019cb6dc554e197010020b37fcb56438e28d3baf6bd2b54f67462302d029f19dec4c742a647f1cc8d7a999f503572d64b6eed3dd9e9598a40f1df041c3e0e4ebee807695f3b9f6055262997639a197e0629a78bf414305a80710c401b4072c7471b851c8ce877620d0bfc88e9a862ae20e1625789"]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x4}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0x1ab4, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0xffffffff}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x3}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x12c82}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x25a, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x6d605613}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x458, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x6f5, 0x2, "cb2b1646151ce55716c1ea3dee10ab73da9b3684c625bb70c595c81d0a3e890e6097663dc36deccccae448675dba9c2293ae33459e8337b8cea15234a6c9682321278284d76503a76d7393c5afdd9d255a508dc8086e81217dff101fe1844e56f6240e656c60b5e10b3c43d631dae7a07bc236e83518f254c3d3cd0dff9d56c881684eb984d6bcca83550eb5af2737b1e1752f11408c5a9af8202c5b53166cc4b9c43e5e62f23c72bc2d492e918033b9d14c548a8c76eb4f203f59e4be37db24f9ba05ca015956f9c531c617bee370525d3f8a4696220df44890bf8f45d7a266a7698e1afa2fca17eecfb9c53d9c51cd821c96f0fdc5497fd9292b983e09fbfbf1fdc73a0c5008f4d2ab57ec347fc360aebbc7150f5df57b17a4cefdd71884209cdccaaf1cef3835be27ab7393146cd93a9a7b3854c7ca4d54c9bc781b41611c7f449e45ca85ef036fde930677068bd4ff14cce4fc0a0eefe3d3deeca6bf25e6af940ea8fb052c11aaf3d9cab7569b7fe7eddd70f887bc5e01075d525336a12f4691c021e2237e33b52b4bcf996702bb86d6c30f339920f8b8f6537d252a8685ec5c3486533b2bd16498b9eee07e1a13aecf85eb1ec56ae81c98033d3f209eef86905f0065051f7ceb128cad57640c6e9befb9aa187de0fba36f2f156a33d3600ae0199918d81525194ad65c759983f41994192b453aed8f5eb02e2b8d88148996a7c81f517d0371da577aadfc4496b82c52b7a08df5c07d92a982529431b83e3b90063fba159e3aac8a49adbac2cab09f2c0497334e57d6da034a8c4f35532f304857ba2be56d02d4edb23c438a1d4633f212c7a5f014309e83f0fcbba2345700155be101e16224b1cd11ccfc5132ff81e519d4ceb776f2a67311e3094165fb174e2aa1dde4538642496ebb0cf05835de7ad65fa41adc4dd5085ff199018b24e2095b9a7537408e6c4cbb025ac350e1d57a243df5d45ca8d075b89a732fd41137bc34f14cd4a77625606e341727c119b2bc789519585ae24fb9208c4bad2d8ed6eaa93e80d5476351b125df3da2e4b5d63af25a2572730e4645a62a73e15d3db958f37c1e81aca9bda7debfabc042e5d5ea3154953ccc23b1333c38e4d7699073311db8fae3ef85af58c140350483167ec5d69d62c709e7ca6c198f855c28721a2e46ffc7fe6646a694c98728a102d54bc63855807564472cff85f0463f850e43fa2d1f18aee4e6dcf56f247c7e03e212c82b6b3ff75d79c87fcbe9e58172cfdb4c9536c306ec341952e6a4f8761aa09593867f68a832a850fec28afc6d0dd77a7cc0a0e4941d4b2c680ed7f824d68a39aeed57a4842724614b3862c280aaff76e423204222e6079ca9406ff10eaebcfe152c2c780832a87d82b2c26bb85707ab72de5bb8978c0f0e9b88b9f34e69b46599faddd7a1cd0059a42e4b0ac427d1110ac145955143d7a6003386a88df50b0c3f4412428869c941c0e41ddf4ab0c87535eb975ab4b9b8363ee1949df145057f2ddb3536dadf92f5de6e2c7409658ef6975fee7577ed2331a1c98f2808514207345a8c39b48dc4f6d4c056103c2a997d13e689d283e63e9fa7ad8135dcf7b160fb9bba15d82c76905e48045634bd3f721908e580de310a04122d85abaf3212fbe0e4c8841bddc73864de35da4ba54ae8ed4eb165d6ab0695023b05141ab441ca8d436691f9c4bbce1c65c97a2c7bd7a09590ef3906a8d8f1731835b4f47f2be58fb8f1d7b8148c7aad8d49b05609c60a29b60910cc8e75f2ec3ebfb3c3ed358281d1837594e461186e8d21bb7e724cbdc0347014182f3a4c15a7890e5aa5fd4b3547b61af2fa144d5f9ba7b57d9f2dc8413190e6eaff8e2ab0f5fc44a0636284edca04efb497097157ca2c42ca801cf0286b5b0a7e3d30441bbdaccf59bf3bc8e8f28561e8853468d7cb3d7086460b9afab0780de65e4b6cd4936c1652220084ae687bc69fa69872dbe092589f6c6be27db4959e055edbcf519f7e08da4a3b0549b66aad8ac5fc761da1b2e2d4214c4042dfabc6eb61835b01ec06d6dd21f0112042ce27c91ed7051bf381459928f73cf7ac5b1475e0a1b13e41e1487d0e8e9fcb00cfe696807158bd5cfdb626c35b787ac57bf8c3ed2edf615185bfcbf69f5990a81fb24375df74b4763a2dc09b68b24222b61792e010c9264585459209acfbab17d8f43b3c918585776909b85a1be16e568ad901fa96be8dce8cb564399d42f46eaa9819937c11dc7360b59ba80ed56249839c7bc4a5a4fa10be7bab7ee5b6eb0543fcd87e97d47266c870f62ad146892e87d6a5c02c359c5d74cb6692524ade0df30177b0a00c51f272b6c71b97357046c2307f57ddd6536f7d849ea4ec98bdb3ea707d9854b93e7e14886e6841d364372ce29baef69d40acc9bb331629809ace196054af58571c58fd4201769e03f8a915510e08bd7fb39c285e3c4b89f3d7b2c23441ec70fffa42971505bd81a8a7b181ad18a18483864307ade838bf3b"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x811, 0x2, "afdc4eaf2d2ef0c0b1c169aa418b9a50df9d142e049dba2b5e89e43fab9a602d42ed8e74434bd67fe3bf2a43c6f9fe7f77278f85694f9b2624a3d12a90a6e6be1881dddc14321bcc3deef83ba5eb5b1a5b2b13cbad7cfc752215f475068e40497ad0b90d8cd04313f16a935a937c6ff4dd0006da50014e37131a29a085ff753577c788c934a080b14704bb95150319be68aeaddc6f77ea4d6d47aa312ac5e9991568cf16ce697d1d50013eb1243113dc00be9f1c2dea886f4f6401fb4d6c736fb4f8a67b995f45f5c8cba82e07a76d50c8931cbcc29f784b716041c2ca5e125f0c721417a2243825dbcf3478021a070a35f859e7277fc36d09f25527ffd07669d714354f26d532ff247dd93d5da251bd298f7d00ed6f0f383ec0500976425a80e7600e6deb609b705221e45db9711558f1301c6dd595d0964ada5e84d46f18b0c2ed07033adf8ac8e7c00b836db35dfd51f892a7035ab7615f469af3e6bdc44f5598bd985025e5052d7d30d6e45d18194a7467779a5a5df8772b07d64f0126070e707d18b7c46203d3bc29fe03ce8312b13b6d2dc4455efb5dc6ea72801b461697e746824fd53f5a449718f0bb594dc03ed59404b22cdd4884e254899031241454b05eab6e205d3e366bfc366b932ea4ef0cd57cce08dcca946db840ecba92decd60e7d6fb40b300badaa21426018af4faba69b2574feef458f2f8b413d134675fe551b1037f7c056e7f91581fa8e5c777e0d1b402c3fe913c7007cc150f6486fe16ff7dfa3007253efb41f8b127c3089888e492f32e6848598ae11fb9fdbbac2e7c55af2a6cc1a1fa60b9eb2c167c0e0e0bf8e9b4f46adfaae925007915670cd9a0a7c0d6f31a6923c8f1dc7e810ea3ec6ac6c1360b51438f12bcdc70448a5b07d8e9abc371da41b7a16fcecf4d809d2f9df6e66753eb87a6a4e7b9a5e98d9b938f188160df119be955028f5ddb36a242aab2f3fe4b4a6270380d1f7ffba2c790f7e320d5f63fcfb2173de805ff2602155b8bafadbc577158600b8236e0c9a56b78d60a1c4fba24ce4f02ce430579fb8c7b3c574ee58d2047640bccda109ba05ccad0381bd56d3ff697a31ce626ad3426ff027e9c8beecc6a6f7bdec5931899bf1d5b6b1348b8c65ce49e0e73835f2c191bd3c21d727c798680bd0b56c486cf7bada086b72c5344178d03e33ac107f1a588637d2eedd9ca944f88b8bba27f5422445a1fbee6f38f5d832783a2cbd3919c57a0952fe62c582973d2671ed901f603fbd7b222d17ba365736f764d859d7c8b2445be409307251b1626433de7fe428a36a130c6f21cd247b127546d03e6de9326361cdb174170e28448e84d212b8c3aff420318e35178dfa00ff17c9715ed3bf86f7e7b32efb6fabaed8ce92c0734739274427310bf2a2e815f0e51b9f27be1d9a59a4f7b4b17eab8c283e98a1c10e2d2fd8b2c8d40d2b85f54c72627d0d975f1cf8364f81df1214a20344e0a3b02e484aa709efaca243766a6e671f33707a5959a2a73f0124d3315248bc906612d8d01f1ce02d07236532894e40de1b8818ae55ff8d5a520ac36104217b46e2866d6f63a66fcabf3484a25a8a861a069f734f4f95ce3bd772f00654f3c920751d2a79cd59bc5370b6a536a6b838fe1e29a7ee88dcbe18a1ad52e469328730932cbf8e1d36f2b02350285d4025259baf60d4e831f552430d2c6bc6db1a16ad410c07f3be60c0ff6806439d360c7695bc518f601c1790e6a27e08b9c7d7f3607f31dc524a332ef5673a7586988bcd96aca36d16979dc965f9866ce153b04f7de54860afa5b05796116356cec48205e1f2d5eba95c6fcd777efb00ac67fd3c2c8ee60d15912a479a4c8d0085f322633740d515e7034582df66b238442e8ddc73b99a37f7c9fb77a2e14e19d36e368914201eda9c9583fb390f1ba9a5ff56ff4a881154c5a1d7bcd42e51643da2c283d62a24f65d974d6f2ea775db8c5036d3c793a2915905f0ca49c83d4139f73c3bff2346bed7a5ef20d41b092ea1175c24715b15d481f6e45f735cf31633129cde97bfad7545c5e025d05ccc9520e8dbdf4d90f1851a8a3de3c18c02f49e3f0546c3d65ac181fd016f23c4ea9d70c3a7ea16b52c913ceb4e34a8a0d8c54fa12ca05d3837f410be3e4c6f77b8fbd7eadc6a4d8ad556d73993fceb232df17f66aa907ddbde8ac4116371dbbd2f8b9b5d596418aab685dfd98dfe029f0cf5119b8fb6bd8b62a5940d78ed7695bc28af6eb1c523aa880e4d2b2a869ed2099a5e3503997bab77b7d2516ef32c545fe995fb9cdf3ad52e4c0a65585cdf463aa1aef261b96c481f7071bde8274eb330661640e7a33796587d4104913d0bd0fafc45eac75617380e0bfafbbd3fcb7e9b7e9382a3dc92020c16ddf4961c3807804bb7ff682a400973b43a71744eb18e20642a648de3b12e1d1cd8ec35bae504d17eefbb6ee5e5ed0430d4a05869bb447c0959820835bbe0f0d48edba964dfea6a214428fc9608306d0b1a199966e645f3bd3e72386d3379f7c60147b0ee6fcf90063bfd006819ae5fbd88dc8be70a078ee4dc997d47d189d3c24934e262d9e1f0ccc197c3ff107a2a26a1e76a749070a7b6bce99ee025ff57c4efc73c7e44b10b42c13b3c5861c717ae95dae49070153efafe1e84718eb40c275d82b905049fab2eae27f18ec200b0d7a86a22dfdbda46d7099c3e9e4852552501ac058263cbb3c66938b42ee40cbc3f7086977093ce194f1ad3b73b1fb17005c5e663501109886edcca0bb80cb0ec98bc51ffdf2b43a1263b1efea2b2516e3966023e587d02f25e06ecf8640de6247aa4265b64625ad05dcf269f2679987e5d46c57a9221f895b5f095cdf768f2afd88a7e0c8d8fd9091b48904d7df11e14eef20e691cb3d96c26dfdb40d01"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x4c6, 0x2, "e090b336a47c6b05d630d0c1d23e1d0411e3c4b55cf4aa40627c48f61806981daa44d0b6701f02c03156945e767e999ec286de368731e03abe5fdbcd32d9da579d3471deee839d7cfb3ae16ae6198af025d5d4ed038c0f494b2242b368c078c1a29889690a13658256ed8df58728952ec19baf7e9328a898c182ff463251afdd7d97c0af95aab1d26429d6867842e6d22e68769425724d98fa470f32e5a6999368d2b0ce70e14becf1555e54028acc85afac1d1eff75e397d0bbd7908aefe80200a5653657f455367355d571648967ca66e87946948f4054610cd672938a462500965097dcd109a34850014c11aa0ca8d8774d24f60764d1a9ad44d869b5dbf020e3a0dc829b1ac52861cab547c5dfdb23b0d4c081a90207b91ef1655af2c178c221f10da3168af73f091f5c39a7d0f8a1b11482580ab570259192674599056cd661023f4b0340c737b8603f8d03e05bf282304a6bb6410d1d74282e347ded0808c312f88151b23ce76a2e0ecde5ff6ac8443bf38780baaf8a6069f8c32117988eb617fd7b07ef8ce4d1362c59e51736faee12aa0c43f3b8d4b71985686189ffbe6e2aec6d51029ee1f5fafa1565be86b474df2a55130e48aa95c3cfeec573b10ad4ff6e38bfcd0ad38bf73d241532d743cb695c3fc06b5e7255eac61ea0fd18c57ee8d5a5fbc54165f992c43f3445c6f10e5fdb5dfbcefb58836365fd009537ceee5ae48519ececa1d9d32447383c1ccf822a4a1fe75160ebd666a7a7b0b84675ab96a82dd85325274379516eb6d23707ed1e79b583de62f5d09bd3e63e7faf0a820004a23e9b81aebc53ff64faa7073be555daff62db547afd046f300ac8c0eca6b9d4c6d7bc173eee36fb6c5182ffeccd796eed2b9214b92f6146146603aaae99fbac128a40eb051ebfdf775cc0d91e6ded9f2f5c41aeecbf9f6906333db46b6ccc002daac0eef3b522ff9ff352aed5935c2d787c9a4ec023a962ba8d27611f3dddea3dba966536378b4bf883f4354cba539296e0588f8cd3d12a8fd3f3af6f047afe06f093d08849db630805722b813c130e48f394c089742c786bd9c7ae99a1ddd0bca8e8c051b7d865efca8644e4ec0c5a5968b1bca7786a5e14303a3cc234b9823e741dc5b6c048ca300f7b1f2feef22b386d2cb432feb50ddbb5dcd2ce5884fa4bbe2727b3f71cac7ef2e7572758a7f60c0610442ff295bdb540ebc8eadbc2d7761a2804b544b24c350fe6ec71c0673a7ec9df76352f5490ed2eca4521ddda1c857723d21dd88b9aeee55ea45bc31b53b6c8fa667c988604797cc9963b20ad38a2702378664cff2c6ce68f30369bb638b76eb7de631ce3567d8cfb5b72e78cde7f2ab981b8ef327747b9f8efa65b31656af76920c59f2f4e6c0f1b82eb64b7cf9a866d3d61c2ff2b10a60aed9d82ae8742f9a96787a2cf44c49205319aab28805f4b9176b5836e41de29607b2279cb32e3cbf192551486c62b637c9119e35b451a277284489fb68e7446077d072b91f842aad3901aa187676a2d28409d17c49726fdaf91aec4c2f541207bcde12e34e2f61aba7faa165d19ad132ab645813c2c10f8f3b21e0317dcf5f15cba4a1426e2bec87b13db1cec59fced565b9707699412d1ef06b9af80c347bf66d1323f5790a064da19a2b8ac71d86d9569275cc8bd925149a923d097eaff2083057c90fbac9a7ec49d766bbb2f3635a77bd7ef"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0xffff8001}]}, @NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x10, 0x84, 0x0, 0x1, [@typed={0x8, 0x9d, 0x0, 0x0, @ipv4=@loopback}, @typed={0x4, 0x127}]}]}, 0x1df4}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/122, 0x7a) 1m46.5733822s ago: executing program 6 (id=987): r0 = socket(0xa, 0x2, 0x3a) bind$auto(r0, &(0x7f0000000040)=@generic={0xa, "2c551d000000ff00"}, 0x66) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec31\x00', 0x900, 0x0) ioctl$auto_CEC_DQEVENT(r2, 0xc0506107, 0x0) ioctl$auto_CEC_DQEVENT(r2, 0xc0506107, 0x0) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) 1m46.072503309s ago: executing program 8 (id=989): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', &(0x7f0000000000)=&(0x7f0000000200)=' ') 1m45.841026404s ago: executing program 8 (id=990): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x200480f0}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r4 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/cmdline\x00', 0xc481, 0x0) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) setresuid$auto(0x0, 0x0, 0x0) keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0x0, 0x7fffffffffffffff, 0xffffffffffffe6d6, 0x2) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="9c05", @ANYRES64=r1, @ANYBLOB="000126bd7000ffdbdf254b0000001c00e70020351644513a7bd458eecf3c840963a2350f2330419c3c40a4009d008182b2cd99554eee70979c47af537a163f65a1a5cb0dc88f31513db86fd3a37f30698be457c216b4fda8d1986eeb32c4a53d14b7071a97be6bf915335d252f3574037f42a59949294dcb3117f7ae7159f7b33e69dc43f14e7a478ad496538bad7d729784d9f4a723dcfa63ac419991a0ae50352ff4adbc282ab3f4c7f5829064548299d3bfddf89e353e057cb8c1475867107f833423a4cdf3e6f4029a9110bd0c002d8008", @ANYRES32=0x0, @ANYRES64=r4], 0x59c}, 0x1, 0x0, 0x0, 0x20040084}, 0x20000000) waitid$auto_P_ALL(0x0, 0x468e, 0x0, 0x20003, &(0x7f0000000340)={{0x8, 0x20000000000005}, {0xa, 0xffc}, 0xfffffffffffff801, 0x1af, 0xfffffffffffffffa, 0x2, 0x7, 0x5, 0xe, 0x2, 0xe6, 0x8, 0x7, 0x200006, 0x2, 0x8}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0xa, 0x4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x866d, 0x7fff, 0x9) madvise$auto(0x0, 0x20499d, 0x9) close_range$auto(0x2, r2, 0x0) ioctl$auto_FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x5) mq_open$auto(&(0x7f0000000140)='v\x00\x00\x00\x00\x00\x00\x966\xcc\xd9\xdc\xcdDR\a\xf6\xbd$\xb6s\"e\x8d3\xd3\x14?\xd1\xb8n_P\xfak\x1b\x95\xf3w\x98\xaf\x82\x85VReM\x92\xe4\xbd-V\xc8\xd5\xfe\xab\x1b-\x181\x05x\xb4\xd8\xef\x9d\xe9\x1e\xba!\xd4\x83\xc7\xb0\xe4\xee$u\acw({\xead\xa1\x95\x9c\x14\x88>u\xe3~o\xcc&\xe6\xf0,Fz\xca\xb3\x87\x00\x88\x8d^\x1a\x81\x99\x7f\xb9\xbd\x06)\xd5\x14\a\x8dv\xde\xd6\xaa0p\x89\x8d\x8c\xc3C\xb3\\\xd8C\xbc\x93u', 0x7f, 0x8, &(0x7f00000006c0)={0x68, 0x9, 0x400}) socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x2000048}) 1m43.601066067s ago: executing program 8 (id=992): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r0, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) r2 = socket(0xa, 0x3, 0xff) getsockname$auto(r2, 0x0, &(0x7f0000000080)=0xfffffff8) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{0x4d0, 0x10, 0x1}]}) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3000, 0x6, 0x7, 0xa, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x8, 0x7f, 0x101, 0x6, 0x3}, {0x100, 0x1, 0x52, 0x5, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff49, 0x5, 0x1823, 0x800000000004, 0x1, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x8, 0xfffffffffffffffa, 0xab, 0x0, 0x1]}, &(0x7f0000000040)={0x0, 0x7}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) 1m31.446084685s ago: executing program 37 (id=987): r0 = socket(0xa, 0x2, 0x3a) bind$auto(r0, &(0x7f0000000040)=@generic={0xa, "2c551d000000ff00"}, 0x66) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec31\x00', 0x900, 0x0) ioctl$auto_CEC_DQEVENT(r2, 0xc0506107, 0x0) ioctl$auto_CEC_DQEVENT(r2, 0xc0506107, 0x0) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) 1m28.386296664s ago: executing program 38 (id=992): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r0, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) r2 = socket(0xa, 0x3, 0xff) getsockname$auto(r2, 0x0, &(0x7f0000000080)=0xfffffff8) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{0x4d0, 0x10, 0x1}]}) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3000, 0x6, 0x7, 0xa, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x8, 0x7f, 0x101, 0x6, 0x3}, {0x100, 0x1, 0x52, 0x5, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff49, 0x5, 0x1823, 0x800000000004, 0x1, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x8, 0xfffffffffffffffa, 0xab, 0x0, 0x1]}, &(0x7f0000000040)={0x0, 0x7}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) 29.832938581s ago: executing program 9 (id=1256): rseq$auto(0x0, 0xfffffff5, 0x0, 0x5) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/pcm1p/sub2/info\x00', 0xc0000, 0x0) readv$auto(0x3, 0x0, 0x1da) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x40401, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0x8, 0x38) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) r1 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x0, 0x0) read$auto_drm_connector_fops_drm_debugfs(r1, &(0x7f0000000040)=""/99, 0x63) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_XFS_IOC_ALLOCSP64(r2, 0x40305824, &(0x7f00000000c0)={0x6, 0xd48f, 0x3db9bc0000000000, 0x9, 0xe}) 25.545361396s ago: executing program 9 (id=1272): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000440)="110000000200"/16, 0x10) unshare$auto(0x40000080) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) rt_tgsigqueueinfo$auto(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={0x0, 0x0, 0x401, 0x5, 0x3}}}) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', &(0x7f0000000000)=&(0x7f0000000200)=' ') 23.768976601s ago: executing program 9 (id=1279): memfd_secret$auto(0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x1a, 0x1, 0x0) epoll_create$auto(0x9) (async, rerun: 32) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (rerun: 32) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) mmap$auto(0x0, 0x600004, 0xdf, 0x9b72, 0x2, 0x8000) (async) mkdir$auto(&(0x7f0000000100)='./file0\x00', 0x1ff) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r2, 0x4, 0x7ff) ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, r2, 0x8, 0x6) (async) renameat$auto(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') (async, rerun: 64) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async, rerun: 64) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) (async) socket(0x2b, 0x1, 0x0) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async) mlock$auto(0x112, 0x80006) (async, rerun: 64) mlockall$auto(0x800000000000005) (async, rerun: 64) madvise$auto(0x0, 0x200007, 0x19) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000000000), 0x0) msgsnd$auto(0x0, 0x0, 0x8, 0x9) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (rerun: 32) socket(0x2, 0x80002, 0x73) 21.292600373s ago: executing program 9 (id=1286): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x5c, r1, 0x1, 0x70bd25, 0x25dfdbf7, {0x1, 0x0, 0x3f00}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0xfec0) 20.908075138s ago: executing program 9 (id=1288): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3db) fcntl$auto_F_GET_SEALS(r0, 0x40a, 0x80000001) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) socket(0x2, 0x2, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/lru_gen_full\x00', 0xc0040, 0x0) prctl$auto(0x5, 0x1, 0x0, 0x1, 0xfffffffffffffffd) select$auto(0x13, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x1000007, 0x7, 0x2c, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x7, 0x40, 0x3, 0x1, 0x5, 0x8d, 0xffffffe000000001]}, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x6, 0x4, 0x8) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x20000000001ff, 0x7, 0xd3e, 0x1, 0x4, 0xa7, 0x100000002, 0xfffffffffffffffd, 0x41c, 0xaa9, 0x1000007ffffffd, 0x3, 0x6d3f, 0x8, 0x2, 0xfffffffffffffffa]}, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x2400, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) 16.135487043s ago: executing program 9 (id=1301): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/ptp/ptp0/n_alarms\x00', 0x42080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000240)=""/217, 0x115) r1 = socket(0x2, 0x1, 0x106) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) umount2$auto(&(0x7f0000000000)='.\x00', 0x1) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x800005411, 0x38) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0) mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/memory.pressure\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_secret$auto(0x0) ftruncate$auto(0x3, 0x700) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x80000000d, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d39, 0x5, 0x2, 0x1]}, 0x0) io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x13e, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2400000) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xffffffffffffffe7, 0x800000000000948b, 0x3, 0x15f4da0a, 0x3, 0x4000000000000003, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x8, 0x6]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 7.06374444s ago: executing program 2 (id=1344): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x5, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8e40, 0x0) mmap$auto(0x0, 0x400005, 0x8df, 0x9b72, 0x2, 0x8000) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) clone$auto(0x0, 0x9, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x9) exit$auto(0xfff) r1 = socket(0x1d, 0x2, 0x7) getsockopt$auto(r1, 0x6b, 0x3, 0xfffffffffffffffe, 0x0) prctl$auto(0x3e, 0x4, 0x0, 0x1ff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010031bd7000fddbdf250c000000100003800c0003800800058004009f0018000180140002006e657464657673696d30000000000000482c46d3a069a31bff5e53778af1efb70f321c26b01a5d295f72b9f2e0eb1a50277c7be0"], 0x3c}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vivid.0/video4linux/vbi30/power/control\x00', 0x150102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) 5.514252034s ago: executing program 7 (id=1348): mmap$auto(0x0, 0x20000400008, 0x1, 0xff, 0x2, 0x8000) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x10bb41, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/bond0/bonding/packets_per_slave\x00', 0x2a081, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop13\x00', 0x60742, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x1, 0x9, 0x7, 0x18, 0xfffffffffffffffa, 0x8803) r1 = socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0xffffffffffff06e1, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) fstat$auto(r1, &(0x7f00000002c0)={0x0, 0x7ed, 0xc3, 0xfffffffd, 0xee01, 0xffffffffffffffff, 0x0, 0x80, 0xffffffffffffffff, 0x80, 0x1, 0x80000001, 0x5, 0x8, 0x32f, 0x80000001, 0x2}) rt_sigqueueinfo$auto(0x0, 0xb4, &(0x7f00000005c0)={@siginfo_0_0={0x9, 0x1, 0x10000, @_rt={0x0, r2, @sival_ptr=&(0x7f0000000100)="9ebdffab1e55bb7896109392f07ac4bae3fcf0b919206263eb20be2cf52b8b1feae8939056f0e847a4feae29d253e536328d1f5944bcb81b4c8d3f92a97be1cf18b6fabe95b8d70b53ab9abf4df93a5e2713e768284080a4f2c5cd0dd4de49e3d2679ef2dc25e6b64e38744bdf4fc777c2f4ac835e95cebc7c"}}}) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, 0x0, 0xa8000, 0x0) bpf$auto_BPF_MAP_FREEZE(0x16, 0x0, 0x7f24) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a801, 0x0) mmap$auto(0xffffffffffff5c13, 0x0, 0x5, 0x18, r3, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/LookupCacheEnabled\x00', 0x28102, 0x0) write$auto(r4, &(0x7f0000000180)='N\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) shmget$auto(0x8, 0x10565, 0x7ff) write$auto(r0, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) r6 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000001600)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/rc_rateidx_mask_2ghz\x00', 0x0, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r6, 0x0, 0x0) read$auto(r5, 0x0, 0x2) write$auto(0x3, 0x0, 0xfdef) 5.356500349s ago: executing program 2 (id=1349): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000001bc0)="9b42651f911c17e9dd66bf94ea32689283bb895dbc0a97721ed6e250c974356905898b7d48acecddf280cf6dd4ba18c1aa3928071c6585025ceab0e2f34f37ddec138ea587fc4def825608b0ab2a6ecac42062bd3c58ba606307b7471b20a40ffa168b91", 0x64) io_uring_setup$auto(0x2, &(0x7f0000000000)={0xff, 0x3, 0x8, 0x8, 0x41e, 0x0, r0, [0x77c, 0xa, 0x9], {0x300000, 0x7e8919be, 0x7fff, 0x7fffffff, 0x7, 0x3, 0x5, 0x4, 0xed}, {0x6, 0x2, 0x0, 0x6e6, 0x4, 0x7fff, 0x2df09cd7, 0x3, 0x884}}) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) (async) write$auto_console_fops_tty_io(r0, &(0x7f0000001bc0)="9b42651f911c17e9dd66bf94ea32689283bb895dbc0a97721ed6e250c974356905898b7d48acecddf280cf6dd4ba18c1aa3928071c6585025ceab0e2f34f37ddec138ea587fc4def825608b0ab2a6ecac42062bd3c58ba606307b7471b20a40ffa168b91", 0x64) (async) io_uring_setup$auto(0x2, &(0x7f0000000000)={0xff, 0x3, 0x8, 0x8, 0x41e, 0x0, r0, [0x77c, 0xa, 0x9], {0x300000, 0x7e8919be, 0x7fff, 0x7fffffff, 0x7, 0x3, 0x5, 0x4, 0xed}, {0x6, 0x2, 0x0, 0x6e6, 0x4, 0x7fff, 0x2df09cd7, 0x3, 0x884}}) (async) 5.150370921s ago: executing program 3 (id=1351): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3db) fcntl$auto_F_GET_SEALS(r0, 0x40a, 0x80000001) getpgid$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) socket(0x2, 0x2, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0040, 0x0) prctl$auto(0x5, 0x1, 0x0, 0x1, 0xfffffffffffffffd) select$auto(0x13, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x1000007, 0x7, 0x2c, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x7, 0x40, 0x3, 0x1, 0x5, 0x8d, 0xffffffe000000001]}, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x6, 0x4, 0x8) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x20000000001ff, 0x7, 0xd3e, 0x1, 0x4, 0xa7, 0x100000002, 0xfffffffffffffffd, 0x41c, 0xaa9, 0x1000007ffffffd, 0x3, 0x6d3f, 0x8, 0x2, 0xfffffffffffffffa]}, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x2400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x7) write$auto(0xffffffffffffffff, 0x0, 0x100) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) 5.08902923s ago: executing program 2 (id=1352): sendmsg$auto_ETHTOOL_MSG_RSS_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x50) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) writev$auto(r0, &(0x7f0000000340)={0x0, 0xda7e}, 0x9) 4.892418162s ago: executing program 3 (id=1353): openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, 0x0, 0x101000, 0x0) adjtimex$auto(0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) fanotify_init$auto(0x5, 0x0) syz_genetlink_get_family_id$auto_hsr(0x0, 0xffffffffffffffff) connect$auto(0xffffffffffffffff, 0x0, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7fff) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) syz_genetlink_get_family_id$auto_psample(0x0, 0xffffffffffffffff) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 4.890827907s ago: executing program 2 (id=1354): rseq$auto(0x0, 0xfffffff5, 0x0, 0x5) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/pcm1p/sub2/info\x00', 0xc0000, 0x0) readv$auto(0x3, 0x0, 0x1da) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) r0 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x0, 0x0) read$auto_drm_connector_fops_drm_debugfs(r0, &(0x7f0000000040)=""/99, 0x63) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_XFS_IOC_ALLOCSP64(r1, 0x40305824, &(0x7f00000000c0)={0x6, 0xd48f, 0x3db9bc0000000000, 0x9, 0xe}) 4.438520889s ago: executing program 3 (id=1355): socket(0x6, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x2, 0x77, 0x0, 0x8) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) clone$auto(0x1, 0x40000000003e, 0x0, 0x0, 0x40000009) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) removexattrat$auto(0xffffffffffffffff, &(0x7f0000000040)=':,\x00', 0x6, &(0x7f0000000100)='/proc/vmallocinfo\x00') capget$auto(0x0, 0xfffffffffffffffe) shmat$auto(0x0, &(0x7f0000000280)='\x00\x00x\x84\xe8\x8f\x7f4;\xa7\xed\xd5\xc3\xff\xce\x02?f1[O\x01{Q]lEB85\x83\tH\xe3\xba\x96!\xcb!\x16\a)\x00p\xb16\xb8x`,1/\n1\x04\xee\xb2\xffEU\xfd:\xd4\x80\xeeA\xef\x9b\x9c\xf4?\xd0\xf1X\xfb\x97\x8aZ\xbe\x83sN\xcf\xb2\xb3\xdaV\xd0\xefAW\x8cl\xcb\xd5n\xd0\x1a\xf4\x8e\xd87\x9b\xe1', 0xfffffffc) shmdt$auto(0x0) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x2}) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmallocinfo\x00', 0x101000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/250, 0xfa) mmap$auto(0x0, 0x400004, 0x3ff, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) pkey_free$auto(0xfffffffd) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/pagemap\x00', 0x80800, 0x0) read$auto(r1, 0x0, 0x39b8) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2) getdents64$auto(r2, &(0x7f0000000f40)={0x3, 0xa, 0xffff, 0x7}, 0x200c8) 4.184293348s ago: executing program 3 (id=1356): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) pipe$auto(0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0xffffff4b) mprotect$auto(0x100000, 0x806121, 0x6) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/admmidi2\x00', 0x88042, 0x0) read$auto(r2, 0x0, 0x20) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x100, 0x0) socketpair$auto(0x8, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0x4048aecb, 0x0) 4.167780595s ago: executing program 7 (id=1357): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_fastopen_key\x00', 0x181081, 0x0) r0 = openat$auto_memtype_fops_memtype(0xffffffffffffff9c, &(0x7f0000000000), 0xa8200, 0x0) r1 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) socket(0xa, 0x2, 0x0) setsockopt$auto(r2, 0x29, 0x36, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) read$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000000040)=""/1, 0x1) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x10, 0x0, [{0x481, 0x400, 0x9}]}) pread64$auto(r0, &(0x7f0000000080)='\x00', 0x40b6, 0x5) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x4000b, 0x3, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r4, 0xffffffffffffffff, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto_SO_DETACH_FILTER(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x5) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/mem_sleep\x00', 0x313402, 0x0) write$auto(r5, &(0x7f0000000040)='\x00)\xe8\xc7.\xf0\xb0f\xd2\x02\x00>\x00\x10\x1a\x13I]{\xe0\n\xd4n\x9f\xae\xed\xcd6\x9f\xf6\x01\x00s\xa6\x03y\x97\x0eR\xb8\xb7\xcc\x83\xb8O\xe5\b\x80\xd0\xd7\xc0+:\x17\x8d\xf4A\xdc\xd4A`\xdb\x80E|X\xc3\xa4H\xb9\xd8\x03*\x9c\x00\x00\x00\x00\x00\x00\x00', 0x100000001) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x5b) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a9, 0x7000000) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x40200, 0x0) unshare$auto(0x40000080) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 3.721594374s ago: executing program 7 (id=1358): unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x5, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8e40, 0x0) mmap$auto(0x0, 0x400005, 0x8df, 0x9b72, 0x2, 0x8000) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) clone$auto(0x0, 0x9, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x9) exit$auto(0xfff) r0 = socket(0x1d, 0x2, 0x7) getsockopt$auto(r0, 0x6b, 0x3, 0xfffffffffffffffe, 0x0) prctl$auto(0x3e, 0x4, 0x0, 0x1ff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010031bd7000fddbdf250c000000100003800c0003800800058004009f0018000180140002006e657464657673696d30000000000000482c46d3a069a31bff5e53778af1efb70f321c26b01a5d295f72b9f2e0eb1a50277c7be0"], 0x3c}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vivid.0/video4linux/vbi30/power/control\x00', 0x150102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) 2.984575469s ago: executing program 2 (id=1359): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000002200), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002240)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x6}]}, 0x20}, 0x1, 0x0, 0xffff0000, 0x11}, 0x4000800) sendmsg$auto_NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x4008041) 2.90346917s ago: executing program 2 (id=1360): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x5, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8e40, 0x0) mmap$auto(0x0, 0x400005, 0x8df, 0x9b72, 0x2, 0x8000) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) clone$auto(0x0, 0x9, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x9) exit$auto(0xfff) r1 = socket(0x1d, 0x2, 0x7) getsockopt$auto(r1, 0x6b, 0x3, 0xfffffffffffffffe, 0x0) prctl$auto(0x3e, 0x4, 0x0, 0x1ff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010031bd7000fddbdf250c000000100003800c0003800800058004009f0018000180140002006e657464657673696d30000000000000482c46d3a069a31bff5e53778af1efb70f321c26b01a5d295f72b9f2e0eb1a50277c7be0"], 0x3c}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vivid.0/video4linux/vbi30/power/control\x00', 0x150102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) 2.869511085s ago: executing program 3 (id=1361): r0 = pidfd_open$auto(0x1, 0x0) (async) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd"], 0x50}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) (async) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/options/blk_classic\x00', 0x4000, 0x0) (async) r2 = socket(0x18, 0x2, 0x6) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)="ed9a3ea4c22168d94ed4dc6ef4fb55fa95f7a3b92ef10c53fd82a40400af09", 0xfc2}, 0x4, &(0x7f0000000040), 0x7, 0x3}, 0x800}, 0x5, 0x400a) (async) setresuid$auto(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (rerun: 64) mmap$auto(0x0, 0xffffffff00000001, 0x3ff57696, 0x1c, r0, 0x8000000000008000) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000012c0), 0xffffffffffffffff) (rerun: 32) sendmsg$auto_ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001300)={0x2c, r4, 0x1, 0x1, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x18}, 0x4004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) socket(0xa, 0x5, 0x0) (async) socket(0xa, 0x3, 0xff) (async) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x5, 0xa, 0x1000009, 0x5f, 0x4, 0x3}, 0x6f3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) (async) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) (async) socket(0xa, 0x2, 0x73) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0xa, 0x3, 0x2f) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e0027b4839f3015398d3b61", @ANYRES32, @ANYRES32=r5, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r6 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (rerun: 64) 2.534325348s ago: executing program 7 (id=1362): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3db) fcntl$auto_F_GET_SEALS(r0, 0x40a, 0x80000001) getpgid$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) socket(0x2, 0x2, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0040, 0x0) prctl$auto(0x5, 0x1, 0x0, 0x1, 0xfffffffffffffffd) select$auto(0x13, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x1000007, 0x7, 0x2c, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x7, 0x40, 0x3, 0x1, 0x5, 0x8d, 0xffffffe000000001]}, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x6, 0x4, 0x8) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x20000000001ff, 0x7, 0xd3e, 0x1, 0x4, 0xa7, 0x100000002, 0xfffffffffffffffd, 0x41c, 0xaa9, 0x1000007ffffffd, 0x3, 0x6d3f, 0x8, 0x2, 0xfffffffffffffffa]}, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x2400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x7) write$auto(0xffffffffffffffff, 0x0, 0x100) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) 843.448175ms ago: executing program 39 (id=1301): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/ptp/ptp0/n_alarms\x00', 0x42080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000240)=""/217, 0x115) r1 = socket(0x2, 0x1, 0x106) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) umount2$auto(&(0x7f0000000000)='.\x00', 0x1) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x800005411, 0x38) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0) mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/memory.pressure\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_secret$auto(0x0) ftruncate$auto(0x3, 0x700) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x80000000d, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d39, 0x5, 0x2, 0x1]}, 0x0) io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x13e, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2400000) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xffffffffffffffe7, 0x800000000000948b, 0x3, 0x15f4da0a, 0x3, 0x4000000000000003, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x8, 0x6]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 792.955687ms ago: executing program 3 (id=1364): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0xffffff4b) mprotect$auto(0x100000, 0x806121, 0x6) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/admmidi2\x00', 0x88042, 0x0) read$auto(r2, 0x0, 0x20) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x100, 0x0) socketpair$auto(0x8, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0x4048aecb, 0x0) 727.32695ms ago: executing program 7 (id=1365): sendmsg$auto_ETHTOOL_MSG_RSS_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x50) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) writev$auto(r0, &(0x7f0000000340)={&(0x7f00000002c0), 0xda7e}, 0x9) (fail_nth: 1) 0s ago: executing program 7 (id=1366): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3db) fcntl$auto_F_GET_SEALS(r0, 0x40a, 0x80000001) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) socket(0x2, 0x2, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/lru_gen_full\x00', 0xc0040, 0x0) prctl$auto(0x5, 0x1, 0x0, 0x1, 0xfffffffffffffffd) select$auto(0x13, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x1000007, 0x7, 0x2c, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x7, 0x40, 0x3, 0x1, 0x5, 0x8d, 0xffffffe000000001]}, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x6, 0x4, 0x8) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x20000000001ff, 0x7, 0xd3e, 0x1, 0x4, 0xa7, 0x100000002, 0xfffffffffffffffd, 0x41c, 0xaa9, 0x1000007ffffffd, 0x3, 0x6d3f, 0x8, 0x2, 0xfffffffffffffffa]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x7) write$auto(0xffffffffffffffff, 0x0, 0x100) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) kernel console output (not intermixed with test programs): 6 R12: 0000000000000000 [ 207.714608][ T8620] R13: 00007f04f49e6038 R14: 00007f04f49e5fa0 R15: 00007ffc1aa1d598 [ 207.714640][ T8620] [ 208.694297][ T8639] ICMPv6: process `syz.1.593' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 209.554337][ T52] Bluetooth: hci4: command tx timeout [ 209.636344][ T8622] chnl_net:caif_netlink_parms(): no params data found [ 210.412535][ T8622] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.419694][ T8622] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.451339][ T8622] bridge_slave_0: entered allmulticast mode [ 210.469435][ T8622] bridge_slave_0: entered promiscuous mode [ 210.587789][ T8622] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.626432][ T8622] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.709458][ T8622] bridge_slave_1: entered allmulticast mode [ 210.764238][ T8622] bridge_slave_1: entered promiscuous mode [ 211.176039][ T8622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.302919][ T8622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.588830][ T8622] team0: Port device team_slave_0 added [ 211.632534][ T8622] team0: Port device team_slave_1 added [ 211.635747][ T52] Bluetooth: hci4: command tx timeout [ 211.821891][ T8622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.888086][ T8622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.986210][ T8622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.028910][ T8622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.057156][ T8622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.118187][ T8622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.043757][ T8622] hsr_slave_0: entered promiscuous mode [ 213.050488][ T8622] hsr_slave_1: entered promiscuous mode [ 213.152412][ T8622] debugfs: 'hsr0' already exists in 'hsr' [ 213.165549][ T8622] Cannot create hsr debugfs directory [ 213.494018][ T8692] netlink: 330 bytes leftover after parsing attributes in process `syz.3.605'. [ 213.531311][ T8693] netlink: 330 bytes leftover after parsing attributes in process `syz.3.605'. [ 213.711122][ T52] Bluetooth: hci4: command tx timeout [ 213.969943][ T8702] netlink: 93 bytes leftover after parsing attributes in process `syz.3.607'. [ 214.362332][ T8622] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 214.399543][ T8622] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 214.501453][ T8622] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 214.579076][ T8622] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 214.965516][ T8622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.020368][ T8622] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.055518][ T7944] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.062740][ T7944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.100860][ T7944] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.108005][ T7944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.192973][ T8719] netlink: 17 bytes leftover after parsing attributes in process `syz.3.611'. [ 215.368026][ T52] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11 [ 215.796743][ T52] Bluetooth: hci4: command tx timeout [ 215.806850][ T8622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.077721][ T8750] FAULT_INJECTION: forcing a failure. [ 217.077721][ T8750] name failslab, interval 1, probability 0, space 0, times 0 [ 217.107409][ T8750] CPU: 1 UID: 0 PID: 8750 Comm: syz.1.619 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 217.107443][ T8750] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 217.107450][ T8750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 217.107458][ T8750] Call Trace: [ 217.107464][ T8750] [ 217.107470][ T8750] dump_stack_lvl+0x16c/0x1f0 [ 217.107492][ T8750] should_fail_ex+0x512/0x640 [ 217.107513][ T8750] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 217.107530][ T8750] should_failslab+0xc2/0x120 [ 217.107565][ T8750] kmem_cache_alloc_noprof+0x75/0x6e0 [ 217.107579][ T8750] ? prepare_creds+0x2c/0x7d0 [ 217.107604][ T8750] ? prepare_creds+0x2c/0x7d0 [ 217.107623][ T8750] prepare_creds+0x2c/0x7d0 [ 217.107649][ T8750] __sys_setfsuid+0xda/0x350 [ 217.107664][ T8750] ? rcu_is_watching+0x12/0xc0 [ 217.107681][ T8750] do_syscall_64+0xcd/0xfa0 [ 217.107700][ T8750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.107714][ T8750] RIP: 0033:0x7f04f478f6c9 [ 217.107726][ T8750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.107738][ T8750] RSP: 002b:00007f04f5650038 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 217.107752][ T8750] RAX: ffffffffffffffda RBX: 00007f04f49e5fa0 RCX: 00007f04f478f6c9 [ 217.107761][ T8750] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 217.107769][ T8750] RBP: 00007f04f4811f91 R08: 0000000000000000 R09: 0000000000000000 [ 217.107777][ T8750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.107784][ T8750] R13: 00007f04f49e6038 R14: 00007f04f49e5fa0 R15: 00007ffc1aa1d598 [ 217.107803][ T8750] [ 217.391600][ T8622] veth0_vlan: entered promiscuous mode [ 217.558177][ T8622] veth1_vlan: entered promiscuous mode [ 217.905891][ T8622] veth0_macvtap: entered promiscuous mode [ 218.194147][ T8622] veth1_macvtap: entered promiscuous mode [ 218.394843][ T8622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.437129][ T8622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.507788][ T60] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.562585][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.595669][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.672187][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.987177][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.030787][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.160918][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.190677][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.071765][ T7411] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.557683][ T8783] netlink: 268 bytes leftover after parsing attributes in process `syz.3.626'. [ 220.644231][ T7411] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.963705][ T7411] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.185548][ T7411] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.528867][ T7411] bridge_slave_1: left allmulticast mode [ 221.551174][ T7411] bridge_slave_1: left promiscuous mode [ 221.566344][ T7411] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.649789][ T7411] bridge_slave_0: left allmulticast mode [ 221.679612][ T7411] bridge_slave_0: left promiscuous mode [ 221.723680][ T7411] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.582747][ T8830] svc: failed to register nfsdv3 RPC service (errno 111). [ 222.605475][ T8830] svc: failed to register nfsaclv3 RPC service (errno 111). [ 222.701779][ T7411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.716069][ T7411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.727618][ T7411] bond0 (unregistering): Released all slaves [ 222.891157][ T7411] 4fRd: left promiscuous mode [ 224.486219][ T8873] netlink: 28 bytes leftover after parsing attributes in process `syz.3.647'. [ 224.669340][ T8881] hub 1-0:1.0: USB hub found [ 224.687454][ T8881] hub 1-0:1.0: 1 port detected [ 224.783950][ T8877] hub 1-0:1.0: USB hub found [ 224.799622][ T8877] hub 1-0:1.0: 1 port detected [ 224.931233][ T7411] hsr_slave_0: left promiscuous mode [ 224.954758][ T7411] hsr_slave_1: left promiscuous mode [ 224.968760][ T7411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.997081][ T7411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.029521][ T7411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.081286][ T7411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.124779][ T7411] veth1_macvtap: left promiscuous mode [ 225.140853][ T7411] veth0_macvtap: left promiscuous mode [ 225.148149][ T7411] veth1_vlan: left promiscuous mode [ 225.155391][ T7411] veth0_vlan: left promiscuous mode [ 226.315795][ T7411] team0 (unregistering): Port device team_slave_1 removed [ 226.386881][ T7411] team0 (unregistering): Port device team_slave_0 removed [ 227.241792][ T8926] Unable to find swap-space signature [ 228.582850][ T8968] hub 1-0:1.0: USB hub found [ 228.629463][ T8968] hub 1-0:1.0: 1 port detected [ 228.739189][ T8967] hub 1-0:1.0: USB hub found [ 228.761584][ T8967] hub 1-0:1.0: 1 port detected [ 229.146260][ T8979] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 231.162791][ T9013] syz.5.673 (9013): /proc/9011/oom_adj is deprecated, please use /proc/9011/oom_score_adj instead. [ 233.756085][ T9070] svc: failed to register nfsdv3 RPC service (errno 111). [ 233.809136][ T9070] svc: failed to register nfsaclv3 RPC service (errno 111). [ 234.364859][ T9073] svc: failed to register nfsdv3 RPC service (errno 111). [ 234.395327][ T9073] svc: failed to register nfsaclv3 RPC service (errno 111). [ 235.094762][ T52] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 235.294611][ T9103] Unable to find swap-space signature [ 235.972096][ T9121] hub 1-0:1.0: USB hub found [ 235.983545][ T9121] hub 1-0:1.0: 1 port detected [ 236.009493][ T9121] hub 1-0:1.0: USB hub found [ 236.016987][ T9121] hub 1-0:1.0: 1 port detected [ 239.000520][ T9207] Unable to find swap-space signature [ 243.587540][ T9337] netlink: 268 bytes leftover after parsing attributes in process `syz.1.753'. [ 244.345065][ T9359] random: crng reseeded on system resumption [ 245.966304][ T9408] Unable to find swap-space signature [ 247.446014][ T9448] FAULT_INJECTION: forcing a failure. [ 247.446014][ T9448] name failslab, interval 1, probability 0, space 0, times 0 [ 247.464947][ T9448] CPU: 0 UID: 0 PID: 9448 Comm: syz.1.774 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 247.465023][ T9448] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 247.465038][ T9448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 247.465058][ T9448] Call Trace: [ 247.465067][ T9448] [ 247.465078][ T9448] dump_stack_lvl+0x16c/0x1f0 [ 247.465114][ T9448] should_fail_ex+0x512/0x640 [ 247.465148][ T9448] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 247.465178][ T9448] should_failslab+0xc2/0x120 [ 247.465210][ T9448] kmem_cache_alloc_noprof+0x75/0x6e0 [ 247.465236][ T9448] ? prepare_creds+0x2c/0x7d0 [ 247.465278][ T9448] ? prepare_creds+0x2c/0x7d0 [ 247.465312][ T9448] prepare_creds+0x2c/0x7d0 [ 247.465349][ T9448] __sys_setfsuid+0xda/0x350 [ 247.465376][ T9448] ? rcu_is_watching+0x12/0xc0 [ 247.465405][ T9448] do_syscall_64+0xcd/0xfa0 [ 247.465432][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.465453][ T9448] RIP: 0033:0x7f04f478f6c9 [ 247.465473][ T9448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.465495][ T9448] RSP: 002b:00007f04f5650038 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 247.465514][ T9448] RAX: ffffffffffffffda RBX: 00007f04f49e5fa0 RCX: 00007f04f478f6c9 [ 247.465530][ T9448] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 247.465545][ T9448] RBP: 00007f04f4811f91 R08: 0000000000000000 R09: 0000000000000000 [ 247.465560][ T9448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.465574][ T9448] R13: 00007f04f49e6038 R14: 00007f04f49e5fa0 R15: 00007ffc1aa1d598 [ 247.465603][ T9448] [ 247.682432][ T9454] FAULT_INJECTION: forcing a failure. [ 247.682432][ T9454] name failslab, interval 1, probability 0, space 0, times 0 [ 247.695198][ T9454] CPU: 0 UID: 0 PID: 9454 Comm: syz.1.777 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 247.695249][ T9454] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 247.695261][ T9454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 247.695274][ T9454] Call Trace: [ 247.695282][ T9454] [ 247.695291][ T9454] dump_stack_lvl+0x16c/0x1f0 [ 247.695322][ T9454] should_fail_ex+0x512/0x640 [ 247.695355][ T9454] ? __kmalloc_cache_noprof+0x5f/0x780 [ 247.695382][ T9454] should_failslab+0xc2/0x120 [ 247.695413][ T9454] __kmalloc_cache_noprof+0x72/0x780 [ 247.695435][ T9454] ? lockdep_hardirqs_on+0x7c/0x110 [ 247.695462][ T9454] ? snd_pcm_common_ioctl+0x25ad/0x3b80 [ 247.695492][ T9454] ? snd_pcm_common_ioctl+0x25ad/0x3b80 [ 247.695513][ T9454] ? put_device+0x1f/0x30 [ 247.695536][ T9454] snd_pcm_common_ioctl+0x25ad/0x3b80 [ 247.695562][ T9454] ? do_vfs_ioctl+0x128/0x14f0 [ 247.695600][ T9454] ? __pfx_snd_pcm_common_ioctl+0x10/0x10 [ 247.695631][ T9454] ? hook_file_ioctl_common+0x145/0x410 [ 247.695670][ T9454] snd_pcm_ioctl+0x7e/0xb0 [ 247.695691][ T9454] ? __pfx_snd_pcm_ioctl+0x10/0x10 [ 247.695715][ T9454] __x64_sys_ioctl+0x18e/0x210 [ 247.695751][ T9454] do_syscall_64+0xcd/0xfa0 [ 247.695781][ T9454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.695813][ T9454] RIP: 0033:0x7f04f478f6c9 [ 247.695832][ T9454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.695853][ T9454] RSP: 002b:00007f04f5650038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.695876][ T9454] RAX: ffffffffffffffda RBX: 00007f04f49e5fa0 RCX: 00007f04f478f6c9 [ 247.695892][ T9454] RDX: 0000000000000000 RSI: 0000000040044160 RDI: 0000000000000001 [ 247.695906][ T9454] RBP: 00007f04f5650090 R08: 0000000000000000 R09: 0000000000000000 [ 247.695920][ T9454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.695934][ T9454] R13: 00007f04f49e6038 R14: 00007f04f49e5fa0 R15: 00007ffc1aa1d598 [ 247.695969][ T9454] [ 248.790005][ T9477] svc: failed to register nfsdv3 RPC service (errno 111). [ 248.827524][ T9477] svc: failed to register nfsaclv3 RPC service (errno 111). [ 249.016645][ T9491] netlink: 93 bytes leftover after parsing attributes in process `syz.3.787'. [ 249.830910][ T9505] netlink: 302 bytes leftover after parsing attributes in process `syz.5.793'. [ 251.194720][ T9537] Unable to find swap-space signature [ 251.658839][ T9547] hub 1-0:1.0: USB hub found [ 251.697625][ T9547] hub 1-0:1.0: 1 port detected [ 251.736639][ T9544] hub 1-0:1.0: USB hub found [ 251.743015][ T9544] hub 1-0:1.0: 1 port detected [ 253.875573][ T9578] FAULT_INJECTION: forcing a failure. [ 253.875573][ T9578] name failslab, interval 1, probability 0, space 0, times 0 [ 253.891156][ T9578] CPU: 1 UID: 0 PID: 9578 Comm: syz.1.812 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 253.891213][ T9578] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 253.891228][ T9578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 253.891243][ T9578] Call Trace: [ 253.891251][ T9578] [ 253.891262][ T9578] dump_stack_lvl+0x16c/0x1f0 [ 253.891299][ T9578] should_fail_ex+0x512/0x640 [ 253.891334][ T9578] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 253.891366][ T9578] should_failslab+0xc2/0x120 [ 253.891399][ T9578] kmem_cache_alloc_noprof+0x75/0x6e0 [ 253.891425][ T9578] ? prepare_creds+0x2c/0x7d0 [ 253.891465][ T9578] ? prepare_creds+0x2c/0x7d0 [ 253.891495][ T9578] prepare_creds+0x2c/0x7d0 [ 253.891531][ T9578] __sys_setfsuid+0xda/0x350 [ 253.891563][ T9578] ? rcu_is_watching+0x12/0xc0 [ 253.891592][ T9578] do_syscall_64+0xcd/0xfa0 [ 253.891624][ T9578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.891646][ T9578] RIP: 0033:0x7f04f478f6c9 [ 253.891665][ T9578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.891687][ T9578] RSP: 002b:00007f04f5650038 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 253.891710][ T9578] RAX: ffffffffffffffda RBX: 00007f04f49e5fa0 RCX: 00007f04f478f6c9 [ 253.891725][ T9578] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 253.891739][ T9578] RBP: 00007f04f4811f91 R08: 0000000000000000 R09: 0000000000000000 [ 253.891753][ T9578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.891765][ T9578] R13: 00007f04f49e6038 R14: 00007f04f49e5fa0 R15: 00007ffc1aa1d598 [ 253.891798][ T9578] [ 254.769156][ T9590] Invalid ELF header magic: != ELF [ 254.909664][ T9605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.817'. [ 255.051552][ T9607] netlink: 334 bytes leftover after parsing attributes in process `syz.4.818'. [ 255.717967][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.725181][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.850684][ T9622] FAULT_INJECTION: forcing a failure. [ 255.850684][ T9622] name failslab, interval 1, probability 0, space 0, times 0 [ 255.911433][ T9622] CPU: 1 UID: 0 PID: 9622 Comm: syz.1.822 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 255.911490][ T9622] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 255.911504][ T9622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 255.911518][ T9622] Call Trace: [ 255.911527][ T9622] [ 255.911536][ T9622] dump_stack_lvl+0x16c/0x1f0 [ 255.911573][ T9622] should_fail_ex+0x512/0x640 [ 255.911609][ T9622] ? __kmalloc_noprof+0xca/0x880 [ 255.911649][ T9622] should_failslab+0xc2/0x120 [ 255.911683][ T9622] __kmalloc_noprof+0xdd/0x880 [ 255.911720][ T9622] ? lsm_blob_alloc+0x68/0x90 [ 255.911757][ T9622] ? lsm_blob_alloc+0x68/0x90 [ 255.911786][ T9622] lsm_blob_alloc+0x68/0x90 [ 255.911818][ T9622] security_prepare_creds+0x30/0x270 [ 255.911850][ T9622] prepare_creds+0x56f/0x7d0 [ 255.911890][ T9622] __sys_setfsuid+0xda/0x350 [ 255.911917][ T9622] ? rcu_is_watching+0x12/0xc0 [ 255.911947][ T9622] do_syscall_64+0xcd/0xfa0 [ 255.911988][ T9622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.912015][ T9622] RIP: 0033:0x7f04f478f6c9 [ 255.912036][ T9622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.912059][ T9622] RSP: 002b:00007f04f5650038 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 255.912084][ T9622] RAX: ffffffffffffffda RBX: 00007f04f49e5fa0 RCX: 00007f04f478f6c9 [ 255.912101][ T9622] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 255.912116][ T9622] RBP: 00007f04f4811f91 R08: 0000000000000000 R09: 0000000000000000 [ 255.912131][ T9622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.912146][ T9622] R13: 00007f04f49e6038 R14: 00007f04f49e5fa0 R15: 00007ffc1aa1d598 [ 255.912181][ T9622] [ 256.559356][ T9634] hub 1-0:1.0: USB hub found [ 256.575833][ T9634] hub 1-0:1.0: 1 port detected [ 256.606770][ T9632] hub 1-0:1.0: USB hub found [ 256.634424][ T9632] hub 1-0:1.0: 1 port detected [ 260.844931][ T9721] __vm_enough_memory: pid: 9721, comm: syz.3.848, bytes: 8589938688 not enough memory for the allocation [ 265.749489][ T9802] netlink: 93 bytes leftover after parsing attributes in process `syz.3.866'. [ 266.506461][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 266.517784][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 266.527733][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 266.539304][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 266.547321][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 266.842164][ T9823] chnl_net:caif_netlink_parms(): no params data found [ 267.014322][ T9823] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.050947][ T9823] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.058759][ T9823] bridge_slave_0: entered allmulticast mode [ 267.100118][ T9823] bridge_slave_0: entered promiscuous mode [ 267.177806][ T9823] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.188250][ T9823] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.198281][ T9823] bridge_slave_1: entered allmulticast mode [ 267.209571][ T9823] bridge_slave_1: entered promiscuous mode [ 267.360382][ T9823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.416618][ T9823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.488226][ T9823] team0: Port device team_slave_0 added [ 267.498196][ T9823] team0: Port device team_slave_1 added [ 267.556688][ T9823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.563870][ T9823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.591318][ T9823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.604906][ T9823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.612186][ T9823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.638347][ T9823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.698862][ T9823] hsr_slave_0: entered promiscuous mode [ 267.706891][ T9823] hsr_slave_1: entered promiscuous mode [ 267.717230][ T9823] debugfs: 'hsr0' already exists in 'hsr' [ 267.723695][ T9823] Cannot create hsr debugfs directory [ 267.986240][ T9823] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 267.998453][ T9823] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 268.008831][ T9823] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 268.018860][ T9823] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 268.114474][ T9823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.135176][ T9823] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.147368][ T7419] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.154595][ T7419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.195624][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.202830][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.591276][ T52] Bluetooth: hci2: command tx timeout [ 268.630347][ T9823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.066044][ T9823] veth0_vlan: entered promiscuous mode [ 269.087871][ T9823] veth1_vlan: entered promiscuous mode [ 269.134963][ T9823] veth0_macvtap: entered promiscuous mode [ 269.145548][ T9823] veth1_macvtap: entered promiscuous mode [ 269.170528][ T9823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.187396][ T9823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.205115][ T7419] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.216143][ T7419] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.229435][ T7419] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.238921][ T7419] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.330632][ T7944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.348820][ T7944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.389696][ T7419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.398433][ T7419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.010541][ T9915] FAULT_INJECTION: forcing a failure. [ 270.010541][ T9915] name failslab, interval 1, probability 0, space 0, times 0 [ 270.023650][ T9915] CPU: 0 UID: 0 PID: 9915 Comm: syz.6.891 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 270.023708][ T9915] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 270.023722][ T9915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 270.023736][ T9915] Call Trace: [ 270.023745][ T9915] [ 270.023755][ T9915] dump_stack_lvl+0x16c/0x1f0 [ 270.023792][ T9915] should_fail_ex+0x512/0x640 [ 270.023829][ T9915] ? __kmalloc_noprof+0xca/0x880 [ 270.023871][ T9915] should_failslab+0xc2/0x120 [ 270.023906][ T9915] __kmalloc_noprof+0xdd/0x880 [ 270.023944][ T9915] ? __pfx___mutex_trylock_common+0x10/0x10 [ 270.023978][ T9915] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 270.024020][ T9915] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 270.024054][ T9915] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 270.024096][ T9915] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 270.024130][ T9915] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 270.024162][ T9915] ? genl_get_cmd+0x194/0x580 [ 270.024202][ T9915] ? __radix_tree_lookup+0x21f/0x2c0 [ 270.024236][ T9915] genl_rcv_msg+0x55c/0x800 [ 270.024271][ T9915] ? __pfx_genl_rcv_msg+0x10/0x10 [ 270.024303][ T9915] ? __pfx_ctrl_getfamily+0x10/0x10 [ 270.024347][ T9915] netlink_rcv_skb+0x158/0x420 [ 270.024375][ T9915] ? __pfx_genl_rcv_msg+0x10/0x10 [ 270.024407][ T9915] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 270.024451][ T9915] ? netlink_deliver_tap+0x1ae/0xd30 [ 270.024500][ T9915] genl_rcv+0x28/0x40 [ 270.024527][ T9915] netlink_unicast+0x5aa/0x870 [ 270.024559][ T9915] ? __pfx_netlink_unicast+0x10/0x10 [ 270.024616][ T9915] netlink_sendmsg+0x8c8/0xdd0 [ 270.024656][ T9915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.024690][ T9915] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 270.024733][ T9915] __sys_sendto+0x4a3/0x520 [ 270.024771][ T9915] ? __pfx___sys_sendto+0x10/0x10 [ 270.024821][ T9915] ? fd_install+0x225/0x750 [ 270.024862][ T9915] ? __pfx___sys_socket+0x10/0x10 [ 270.024893][ T9915] ? xfd_validate_state+0x61/0x180 [ 270.024926][ T9915] ? __pfx_do_writev+0x10/0x10 [ 270.024958][ T9915] __x64_sys_sendto+0xe0/0x1c0 [ 270.024993][ T9915] ? do_syscall_64+0x91/0xfa0 [ 270.025022][ T9915] ? lockdep_hardirqs_on+0x7c/0x110 [ 270.025051][ T9915] do_syscall_64+0xcd/0xfa0 [ 270.025084][ T9915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.025110][ T9915] RIP: 0033:0x7f011af9155c [ 270.025131][ T9915] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 270.025155][ T9915] RSP: 002b:00007f011bdd3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 270.025180][ T9915] RAX: ffffffffffffffda RBX: 00007f011bdd3fc0 RCX: 00007f011af9155c [ 270.025197][ T9915] RDX: 000000000000001c RSI: 00007f011bdd4010 RDI: 0000000000000006 [ 270.025213][ T9915] RBP: 0000000000000000 R08: 00007f011bdd3f14 R09: 000000000000000c [ 270.025228][ T9915] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 270.025243][ T9915] R13: 00007f011bdd3f68 R14: 00007f011bdd4010 R15: 0000000000000000 [ 270.025281][ T9915] [ 270.671297][ T52] Bluetooth: hci2: command tx timeout [ 272.751118][ T52] Bluetooth: hci2: command tx timeout [ 273.203996][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 273.213885][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 273.221931][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 273.231835][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 273.239582][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 273.985854][ T9975] chnl_net:caif_netlink_parms(): no params data found [ 274.108862][ T9975] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.125127][ T9975] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.134090][ T9975] bridge_slave_0: entered allmulticast mode [ 274.142488][ T9975] bridge_slave_0: entered promiscuous mode [ 274.151519][ T9975] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.159168][ T9975] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.166679][ T9975] bridge_slave_1: entered allmulticast mode [ 274.174524][ T9975] bridge_slave_1: entered promiscuous mode [ 274.217097][ T9975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.229809][ T9975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.273981][ T9975] team0: Port device team_slave_0 added [ 274.282858][ T9975] team0: Port device team_slave_1 added [ 274.321458][ T9975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.328426][ T9975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.355717][ T9975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.369241][ T9975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.376324][ T9975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.403465][ T9975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.463516][ T9975] hsr_slave_0: entered promiscuous mode [ 274.470179][ T9975] hsr_slave_1: entered promiscuous mode [ 274.477141][ T9975] debugfs: 'hsr0' already exists in 'hsr' [ 274.482984][ T9975] Cannot create hsr debugfs directory [ 274.767416][ T9993] hub 1-0:1.0: USB hub found [ 274.783540][ T9993] hub 1-0:1.0: 1 port detected [ 274.842346][ T9993] hub 1-0:1.0: USB hub found [ 274.842414][ T5836] Bluetooth: hci2: command tx timeout [ 274.858550][ T9993] hub 1-0:1.0: 1 port detected [ 274.867307][ T9975] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 274.882785][ T9975] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 274.902522][ T9975] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 274.939796][ T9975] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 275.089753][ T9975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.136094][ T9975] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.184408][ T7944] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.191603][ T7944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.219087][ T7411] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.226339][ T7411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.316136][ T5836] Bluetooth: hci5: command tx timeout [ 275.576943][ T9975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.933048][ T9975] veth0_vlan: entered promiscuous mode [ 275.948557][ T9975] veth1_vlan: entered promiscuous mode [ 276.000830][ T9975] veth0_macvtap: entered promiscuous mode [ 276.013202][ T9975] veth1_macvtap: entered promiscuous mode [ 276.042223][ T9975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.060317][ T9975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.079057][ T7930] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.090178][ T7930] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.103123][ T60] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.122908][ T60] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.197978][ T7411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.216444][ T7411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.252204][ T7411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.260188][ T7411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.392360][ T5836] Bluetooth: hci5: command tx timeout [ 278.088560][T10057] vivid-007: ================= START STATUS ================= [ 278.097188][T10057] vivid-007: Generate PTS: true [ 278.103966][T10057] vivid-007: Generate SCR: true [ 278.109245][T10057] tpg source WxH: 320x240 (Y'CbCr) [ 278.119265][T10057] tpg field: 1 [ 278.131189][T10057] tpg crop: (0,0)/320x240 [ 278.136375][T10057] tpg compose: (0,0)/320x240 [ 278.141627][T10057] tpg colorspace: 8 [ 278.145448][T10057] tpg transfer function: 0/0 [ 278.156855][T10057] tpg Y'CbCr encoding: 0/0 [ 278.163267][T10057] tpg quantization: 0/0 [ 278.167504][T10057] tpg RGB range: 0/2 [ 278.172214][T10057] vivid-007: ================== END STATUS ================== [ 278.718123][T10069] hub 1-0:1.0: USB hub found [ 278.745861][T10069] hub 1-0:1.0: 1 port detected [ 278.774827][T10066] hub 1-0:1.0: USB hub found [ 278.841107][T10066] hub 1-0:1.0: 1 port detected [ 279.120394][T10077] FAULT_INJECTION: forcing a failure. [ 279.120394][T10077] name failslab, interval 1, probability 0, space 0, times 0 [ 279.134914][T10077] CPU: 0 UID: 0 PID: 10077 Comm: syz.6.929 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 279.134966][T10077] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 279.134979][T10077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 279.134992][T10077] Call Trace: [ 279.135000][T10077] [ 279.135009][T10077] dump_stack_lvl+0x16c/0x1f0 [ 279.135044][T10077] should_fail_ex+0x512/0x640 [ 279.135080][T10077] ? __kmalloc_cache_noprof+0x5f/0x780 [ 279.135109][T10077] should_failslab+0xc2/0x120 [ 279.135141][T10077] __kmalloc_cache_noprof+0x72/0x780 [ 279.135166][T10077] ? resv_map_alloc+0x7e/0x400 [ 279.135203][T10077] ? resv_map_alloc+0x7e/0x400 [ 279.135232][T10077] resv_map_alloc+0x7e/0x400 [ 279.135265][T10077] hugetlbfs_get_inode+0x33f/0x730 [ 279.135300][T10077] hugetlb_file_setup+0x15b/0x620 [ 279.135331][T10077] ksys_mmap_pgoff+0x189/0x5c0 [ 279.135368][T10077] __x64_sys_mmap+0x125/0x190 [ 279.135414][T10077] do_syscall_64+0xcd/0xfa0 [ 279.135447][T10077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.135473][T10077] RIP: 0033:0x7f011af8f6c9 [ 279.135494][T10077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.135517][T10077] RSP: 002b:00007f011bdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 279.135541][T10077] RAX: ffffffffffffffda RBX: 00007f011b1e5fa0 RCX: 00007f011af8f6c9 [ 279.135558][T10077] RDX: 0000000000000002 RSI: 0000000000000004 RDI: 0000000000000000 [ 279.135572][T10077] RBP: 00007f011b011f91 R08: 0000000000000401 R09: 0000300000000000 [ 279.135588][T10077] R10: 0000000000040eb6 R11: 0000000000000246 R12: 0000000000000000 [ 279.135603][T10077] R13: 00007f011b1e6038 R14: 00007f011b1e5fa0 R15: 00007ffe66dd62f8 [ 279.135637][T10077] [ 279.471168][ T5836] Bluetooth: hci5: command tx timeout [ 279.703191][T10089] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 279.720040][T10089] FAULT_INJECTION: forcing a failure. [ 279.720040][T10089] name failslab, interval 1, probability 0, space 0, times 0 [ 279.734090][T10089] CPU: 0 UID: 0 PID: 10089 Comm: syz.7.931 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 279.734147][T10089] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 279.734161][T10089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 279.734173][T10089] Call Trace: [ 279.734181][T10089] [ 279.734191][T10089] dump_stack_lvl+0x16c/0x1f0 [ 279.734230][T10089] should_fail_ex+0x512/0x640 [ 279.734265][T10089] ? __kmalloc_noprof+0xca/0x880 [ 279.734307][T10089] should_failslab+0xc2/0x120 [ 279.734339][T10089] __kmalloc_noprof+0xdd/0x880 [ 279.734384][T10089] ? lsm_blob_alloc+0x68/0x90 [ 279.734420][T10089] ? lsm_blob_alloc+0x68/0x90 [ 279.734446][T10089] lsm_blob_alloc+0x68/0x90 [ 279.734474][T10089] security_prepare_creds+0x30/0x270 [ 279.734505][T10089] prepare_creds+0x56f/0x7d0 [ 279.734543][T10089] __sys_setfsuid+0xda/0x350 [ 279.734569][T10089] ? rcu_is_watching+0x12/0xc0 [ 279.734598][T10089] do_syscall_64+0xcd/0xfa0 [ 279.734629][T10089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.734655][T10089] RIP: 0033:0x7fe43658f6c9 [ 279.734675][T10089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.734698][T10089] RSP: 002b:00007fe4347f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 279.734721][T10089] RAX: ffffffffffffffda RBX: 00007fe4367e5fa0 RCX: 00007fe43658f6c9 [ 279.734738][T10089] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 279.734752][T10089] RBP: 00007fe436611f91 R08: 0000000000000000 R09: 0000000000000000 [ 279.734767][T10089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.734781][T10089] R13: 00007fe4367e6038 R14: 00007fe4367e5fa0 R15: 00007fff94ad0988 [ 279.734817][T10089] [ 281.555337][ T5836] Bluetooth: hci5: command tx timeout [ 281.910548][T10134] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 281.962421][T10134] FAULT_INJECTION: forcing a failure. [ 281.962421][T10134] name failslab, interval 1, probability 0, space 0, times 0 [ 282.021954][T10134] CPU: 0 UID: 0 PID: 10134 Comm: syz.6.941 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 282.021988][T10134] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 282.021995][T10134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 282.022003][T10134] Call Trace: [ 282.022008][T10134] [ 282.022014][T10134] dump_stack_lvl+0x16c/0x1f0 [ 282.022035][T10134] should_fail_ex+0x512/0x640 [ 282.022057][T10134] ? __kmalloc_noprof+0xca/0x880 [ 282.022082][T10134] should_failslab+0xc2/0x120 [ 282.022100][T10134] __kmalloc_noprof+0xdd/0x880 [ 282.022130][T10134] ? lsm_blob_alloc+0x68/0x90 [ 282.022152][T10134] ? lsm_blob_alloc+0x68/0x90 [ 282.022168][T10134] lsm_blob_alloc+0x68/0x90 [ 282.022186][T10134] security_prepare_creds+0x30/0x270 [ 282.022203][T10134] prepare_creds+0x56f/0x7d0 [ 282.022226][T10134] __sys_setfsuid+0xda/0x350 [ 282.022241][T10134] ? rcu_is_watching+0x12/0xc0 [ 282.022257][T10134] do_syscall_64+0xcd/0xfa0 [ 282.022275][T10134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.022290][T10134] RIP: 0033:0x7f011af8f6c9 [ 282.022302][T10134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.022315][T10134] RSP: 002b:00007f011bdf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 282.022329][T10134] RAX: ffffffffffffffda RBX: 00007f011b1e5fa0 RCX: 00007f011af8f6c9 [ 282.022338][T10134] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 282.022346][T10134] RBP: 00007f011b011f91 R08: 0000000000000000 R09: 0000000000000000 [ 282.022354][T10134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.022365][T10134] R13: 00007f011b1e6038 R14: 00007f011b1e5fa0 R15: 00007ffe66dd62f8 [ 282.022384][T10134] [ 283.402306][T10158] netlink: 342 bytes leftover after parsing attributes in process `syz.3.946'. [ 283.761606][T10165] hub 1-0:1.0: USB hub found [ 283.778166][T10165] hub 1-0:1.0: 1 port detected [ 283.824626][T10163] hub 1-0:1.0: USB hub found [ 283.840269][T10163] hub 1-0:1.0: 1 port detected [ 284.225282][T10162] sctp: [Deprecated]: syz.3.946 (pid 10162) Use of struct sctp_assoc_value in delayed_ack socket option. [ 284.225282][T10162] Use struct sctp_sack_info instead [ 286.084179][T10197] netlink: 268 bytes leftover after parsing attributes in process `syz.3.955'. [ 287.691844][T10210] FAULT_INJECTION: forcing a failure. [ 287.691844][T10210] name failslab, interval 1, probability 0, space 0, times 0 [ 287.711106][T10210] CPU: 0 UID: 0 PID: 10210 Comm: syz.7.957 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 287.711161][T10210] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 287.711173][T10210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 287.711185][T10210] Call Trace: [ 287.711192][T10210] [ 287.711201][T10210] dump_stack_lvl+0x16c/0x1f0 [ 287.711236][T10210] should_fail_ex+0x512/0x640 [ 287.711274][T10210] ? __kmalloc_noprof+0xca/0x880 [ 287.711314][T10210] should_failslab+0xc2/0x120 [ 287.711346][T10210] __kmalloc_noprof+0xdd/0x880 [ 287.711384][T10210] ? lsm_blob_alloc+0x68/0x90 [ 287.711421][T10210] ? lsm_blob_alloc+0x68/0x90 [ 287.711449][T10210] lsm_blob_alloc+0x68/0x90 [ 287.711480][T10210] security_prepare_creds+0x30/0x270 [ 287.711510][T10210] prepare_creds+0x56f/0x7d0 [ 287.711558][T10210] __sys_setfsuid+0xda/0x350 [ 287.711609][T10210] ? rcu_is_watching+0x12/0xc0 [ 287.711641][T10210] do_syscall_64+0xcd/0xfa0 [ 287.711673][T10210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.711699][T10210] RIP: 0033:0x7fe43658f6c9 [ 287.711720][T10210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.711743][T10210] RSP: 002b:00007fe4347f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 287.711768][T10210] RAX: ffffffffffffffda RBX: 00007fe4367e5fa0 RCX: 00007fe43658f6c9 [ 287.711786][T10210] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 287.711801][T10210] RBP: 00007fe436611f91 R08: 0000000000000000 R09: 0000000000000000 [ 287.711815][T10210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.711829][T10210] R13: 00007fe4367e6038 R14: 00007fe4367e5fa0 R15: 00007fff94ad0988 [ 287.711858][T10210] [ 288.194031][T10222] FAULT_INJECTION: forcing a failure. [ 288.194031][T10222] name failslab, interval 1, probability 0, space 0, times 0 [ 288.221459][T10222] CPU: 1 UID: 0 PID: 10222 Comm: syz.7.961 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 288.221514][T10222] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 288.221526][T10222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 288.221540][T10222] Call Trace: [ 288.221548][T10222] [ 288.221558][T10222] dump_stack_lvl+0x16c/0x1f0 [ 288.221590][T10222] should_fail_ex+0x512/0x640 [ 288.221623][T10222] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 288.221653][T10222] should_failslab+0xc2/0x120 [ 288.221684][T10222] kmem_cache_alloc_node_noprof+0x78/0x770 [ 288.221709][T10222] ? __alloc_skb+0x2b2/0x380 [ 288.221750][T10222] ? __alloc_skb+0x2b2/0x380 [ 288.221786][T10222] ? __pfx_netlink_insert+0x10/0x10 [ 288.221809][T10222] __alloc_skb+0x2b2/0x380 [ 288.221842][T10222] ? __pfx___alloc_skb+0x10/0x10 [ 288.221875][T10222] ? netlink_autobind.isra.0+0x158/0x370 [ 288.221909][T10222] netlink_alloc_large_skb+0x69/0x140 [ 288.221936][T10222] netlink_sendmsg+0x698/0xdd0 [ 288.221967][T10222] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.221997][T10222] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 288.222033][T10222] ____sys_sendmsg+0xa98/0xc70 [ 288.222061][T10222] ? copy_msghdr_from_user+0x10a/0x160 [ 288.222085][T10222] ? __pfx_____sys_sendmsg+0x10/0x10 [ 288.222130][T10222] ___sys_sendmsg+0x134/0x1d0 [ 288.222154][T10222] ? __pfx____sys_sendmsg+0x10/0x10 [ 288.222171][T10222] ? __lock_acquire+0x622/0x1c90 [ 288.222228][T10222] __sys_sendmsg+0x16d/0x220 [ 288.222247][T10222] ? __pfx___sys_sendmsg+0x10/0x10 [ 288.222283][T10222] do_syscall_64+0xcd/0xfa0 [ 288.222307][T10222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.222327][T10222] RIP: 0033:0x7fe43658f6c9 [ 288.222342][T10222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.222360][T10222] RSP: 002b:00007fe4347f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.222378][T10222] RAX: ffffffffffffffda RBX: 00007fe4367e5fa0 RCX: 00007fe43658f6c9 [ 288.222391][T10222] RDX: 0000000000040010 RSI: 0000200000000000 RDI: 0000000000000003 [ 288.222403][T10222] RBP: 00007fe4347f6090 R08: 0000000000000000 R09: 0000000000000000 [ 288.222414][T10222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.222426][T10222] R13: 00007fe4367e6038 R14: 00007fe4367e5fa0 R15: 00007fff94ad0988 [ 288.222452][T10222] [ 288.676277][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 288.685617][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 288.694100][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 288.702517][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 288.710674][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 289.456248][T10227] chnl_net:caif_netlink_parms(): no params data found [ 289.656511][T10243] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input7 [ 289.840744][T10227] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.851275][T10227] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.858521][T10227] bridge_slave_0: entered allmulticast mode [ 289.873443][T10227] bridge_slave_0: entered promiscuous mode [ 289.892305][T10227] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.900457][T10227] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.908270][T10227] bridge_slave_1: entered allmulticast mode [ 289.916410][T10227] bridge_slave_1: entered promiscuous mode [ 290.057162][T10227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.080698][T10227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.325966][T10227] team0: Port device team_slave_0 added [ 290.354813][T10227] team0: Port device team_slave_1 added [ 290.364197][T10258] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 290.378266][T10257] hub 1-0:1.0: USB hub found [ 290.391795][T10257] hub 1-0:1.0: 1 port detected [ 290.433873][T10257] hub 1-0:1.0: USB hub found [ 290.448306][T10257] hub 1-0:1.0: 1 port detected [ 290.593939][T10227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.602764][T10227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.685075][T10227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.730482][T10227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.756511][T10227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.822151][T10227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.840724][ T52] Bluetooth: hci6: command tx timeout [ 291.030162][T10227] hsr_slave_0: entered promiscuous mode [ 291.041788][T10227] hsr_slave_1: entered promiscuous mode [ 291.048526][T10227] debugfs: 'hsr0' already exists in 'hsr' [ 291.054648][T10227] Cannot create hsr debugfs directory [ 291.855422][T10227] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 291.879368][T10227] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 291.936742][T10227] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 292.015676][T10227] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 292.317474][T10288] nvme_fcloop: unknown parameter or missing value '0' [ 292.390873][T10227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.784379][T10227] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.815788][ T7944] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.823004][ T7944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.859848][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.866968][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.923810][ T52] Bluetooth: hci6: command tx timeout [ 293.430585][T10227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.212941][T10227] veth0_vlan: entered promiscuous mode [ 294.225146][T10227] veth1_vlan: entered promiscuous mode [ 294.323077][T10227] veth0_macvtap: entered promiscuous mode [ 294.359430][T10227] veth1_macvtap: entered promiscuous mode [ 294.415542][T10227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.478566][T10227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.517073][ T36] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.549946][ T36] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.604950][ T36] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.627806][ T7411] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.844554][ T7411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.895017][ T7411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.939652][ T7419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.948368][T10337] FAULT_INJECTION: forcing a failure. [ 294.948368][T10337] name failslab, interval 1, probability 0, space 0, times 0 [ 294.978672][ T7419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.987955][T10337] CPU: 1 UID: 0 PID: 10337 Comm: syz.7.983 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 294.988013][T10337] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 294.988028][T10337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 294.988044][T10337] Call Trace: [ 294.988053][T10337] [ 294.988063][T10337] dump_stack_lvl+0x16c/0x1f0 [ 294.988101][T10337] should_fail_ex+0x512/0x640 [ 294.988136][T10337] ? __kmalloc_noprof+0xca/0x880 [ 294.988177][T10337] should_failslab+0xc2/0x120 [ 294.988212][T10337] __kmalloc_noprof+0xdd/0x880 [ 294.988251][T10337] ? __pfx___mutex_trylock_common+0x10/0x10 [ 294.988284][T10337] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 294.988329][T10337] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 294.988365][T10337] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 294.988407][T10337] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 294.988441][T10337] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 294.988473][T10337] ? genl_get_cmd+0x194/0x580 [ 294.988512][T10337] ? __radix_tree_lookup+0x21f/0x2c0 [ 294.988546][T10337] genl_rcv_msg+0x55c/0x800 [ 294.988581][T10337] ? __pfx_genl_rcv_msg+0x10/0x10 [ 294.988613][T10337] ? __pfx_ctrl_getfamily+0x10/0x10 [ 294.988658][T10337] netlink_rcv_skb+0x158/0x420 [ 294.988684][T10337] ? __pfx_genl_rcv_msg+0x10/0x10 [ 294.988717][T10337] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 294.988759][T10337] ? netlink_deliver_tap+0x1ae/0xd30 [ 294.988791][T10337] genl_rcv+0x28/0x40 [ 294.988817][T10337] netlink_unicast+0x5aa/0x870 [ 294.988850][T10337] ? __pfx_netlink_unicast+0x10/0x10 [ 294.988899][T10337] netlink_sendmsg+0x8c8/0xdd0 [ 294.988935][T10337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.988968][T10337] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 294.989013][T10337] __sys_sendto+0x4a3/0x520 [ 294.989052][T10337] ? __pfx___sys_sendto+0x10/0x10 [ 294.989100][T10337] ? fd_install+0x225/0x750 [ 294.989139][T10337] ? __pfx___sys_socket+0x10/0x10 [ 294.989171][T10337] ? xfd_validate_state+0x61/0x180 [ 294.989200][T10337] ? __pfx_do_writev+0x10/0x10 [ 294.989227][T10337] __x64_sys_sendto+0xe0/0x1c0 [ 294.989259][T10337] ? do_syscall_64+0x91/0xfa0 [ 294.989286][T10337] ? lockdep_hardirqs_on+0x7c/0x110 [ 294.989314][T10337] do_syscall_64+0xcd/0xfa0 [ 294.989344][T10337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.989369][T10337] RIP: 0033:0x7fe43659155c [ 294.989390][T10337] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 294.989414][T10337] RSP: 002b:00007fe4347d3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 294.989439][T10337] RAX: ffffffffffffffda RBX: 00007fe4347d3fc0 RCX: 00007fe43659155c [ 294.989456][T10337] RDX: 000000000000001c RSI: 00007fe4347d4010 RDI: 0000000000000008 [ 294.989472][T10337] RBP: 0000000000000000 R08: 00007fe4347d3f14 R09: 000000000000000c [ 294.989486][T10337] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 294.989499][T10337] R13: 00007fe4347d3f68 R14: 00007fe4347d4010 R15: 0000000000000000 [ 294.989532][T10337] [ 294.992643][ T52] Bluetooth: hci6: command tx timeout [ 295.129647][T10343] netlink: 44 bytes leftover after parsing attributes in process `syz.6.985'. [ 295.349435][T10343] netlink: 44 bytes leftover after parsing attributes in process `syz.6.985'. [ 295.670952][T10346] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 295.732103][T10346] FAULT_INJECTION: forcing a failure. [ 295.732103][T10346] name failslab, interval 1, probability 0, space 0, times 0 [ 295.746643][T10346] CPU: 0 UID: 0 PID: 10346 Comm: syz.8.959 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 295.746702][T10346] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 295.746717][T10346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 295.746732][T10346] Call Trace: [ 295.746741][T10346] [ 295.746751][T10346] dump_stack_lvl+0x16c/0x1f0 [ 295.746786][T10346] should_fail_ex+0x512/0x640 [ 295.746824][T10346] ? __kmalloc_noprof+0xca/0x880 [ 295.746865][T10346] should_failslab+0xc2/0x120 [ 295.746900][T10346] __kmalloc_noprof+0xdd/0x880 [ 295.746937][T10346] ? lsm_blob_alloc+0x68/0x90 [ 295.746973][T10346] ? lsm_blob_alloc+0x68/0x90 [ 295.747002][T10346] lsm_blob_alloc+0x68/0x90 [ 295.747039][T10346] security_prepare_creds+0x30/0x270 [ 295.747074][T10346] prepare_creds+0x56f/0x7d0 [ 295.747115][T10346] __sys_setfsuid+0xda/0x350 [ 295.747142][T10346] ? rcu_is_watching+0x12/0xc0 [ 295.747172][T10346] do_syscall_64+0xcd/0xfa0 [ 295.747205][T10346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.747231][T10346] RIP: 0033:0x7fd92e98f6c9 [ 295.747251][T10346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.747275][T10346] RSP: 002b:00007fd92f77e038 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 295.747299][T10346] RAX: ffffffffffffffda RBX: 00007fd92ebe5fa0 RCX: 00007fd92e98f6c9 [ 295.747317][T10346] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 295.747333][T10346] RBP: 00007fd92ea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 295.747355][T10346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.747370][T10346] R13: 00007fd92ebe6038 R14: 00007fd92ebe5fa0 R15: 00007ffd1ebc02b8 [ 295.747408][T10346] [ 296.299276][T10349] FAULT_INJECTION: forcing a failure. [ 296.299276][T10349] name failslab, interval 1, probability 0, space 0, times 0 [ 296.339109][T10349] CPU: 1 UID: 0 PID: 10349 Comm: syz.7.986 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 296.339165][T10349] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 296.339180][T10349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 296.339195][T10349] Call Trace: [ 296.339204][T10349] [ 296.339214][T10349] dump_stack_lvl+0x16c/0x1f0 [ 296.339251][T10349] should_fail_ex+0x512/0x640 [ 296.339288][T10349] ? __kmalloc_noprof+0xca/0x880 [ 296.339330][T10349] should_failslab+0xc2/0x120 [ 296.339362][T10349] __kmalloc_noprof+0xdd/0x880 [ 296.339400][T10349] ? __pfx___mutex_trylock_common+0x10/0x10 [ 296.339434][T10349] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 296.339476][T10349] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 296.339510][T10349] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 296.339552][T10349] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 296.339587][T10349] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 296.339618][T10349] ? genl_get_cmd+0x194/0x580 [ 296.339658][T10349] ? __radix_tree_lookup+0x21f/0x2c0 [ 296.339711][T10349] genl_rcv_msg+0x55c/0x800 [ 296.339755][T10349] ? __pfx_genl_rcv_msg+0x10/0x10 [ 296.339788][T10349] ? __pfx_ctrl_getfamily+0x10/0x10 [ 296.339834][T10349] netlink_rcv_skb+0x158/0x420 [ 296.339862][T10349] ? __pfx_genl_rcv_msg+0x10/0x10 [ 296.339894][T10349] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 296.339941][T10349] ? netlink_deliver_tap+0x1ae/0xd30 [ 296.339977][T10349] genl_rcv+0x28/0x40 [ 296.340005][T10349] netlink_unicast+0x5aa/0x870 [ 296.340041][T10349] ? __pfx_netlink_unicast+0x10/0x10 [ 296.340082][T10349] netlink_sendmsg+0x8c8/0xdd0 [ 296.340116][T10349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.340148][T10349] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 296.340190][T10349] __sys_sendto+0x4a3/0x520 [ 296.340229][T10349] ? __pfx___sys_sendto+0x10/0x10 [ 296.340277][T10349] ? fd_install+0x225/0x750 [ 296.340318][T10349] ? __pfx___sys_socket+0x10/0x10 [ 296.340351][T10349] ? xfd_validate_state+0x61/0x180 [ 296.340383][T10349] ? __pfx_do_writev+0x10/0x10 [ 296.340414][T10349] __x64_sys_sendto+0xe0/0x1c0 [ 296.340449][T10349] ? do_syscall_64+0x91/0xfa0 [ 296.340477][T10349] ? lockdep_hardirqs_on+0x7c/0x110 [ 296.340505][T10349] do_syscall_64+0xcd/0xfa0 [ 296.340537][T10349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.340564][T10349] RIP: 0033:0x7fe43659155c [ 296.340585][T10349] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 296.340610][T10349] RSP: 002b:00007fe4347f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 296.340634][T10349] RAX: ffffffffffffffda RBX: 00007fe4347f4fc0 RCX: 00007fe43659155c [ 296.340652][T10349] RDX: 000000000000001c RSI: 00007fe4347f5010 RDI: 0000000000000008 [ 296.340667][T10349] RBP: 0000000000000000 R08: 00007fe4347f4f14 R09: 000000000000000c [ 296.340683][T10349] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 296.340698][T10349] R13: 00007fe4347f4f68 R14: 00007fe4347f5010 R15: 0000000000000000 [ 296.340741][T10349] [ 297.155588][ T52] Bluetooth: hci6: command tx timeout [ 299.788893][T10397] netlink: 504 bytes leftover after parsing attributes in process `syz.7.999'. [ 299.803636][T10397] netlink: 350 bytes leftover after parsing attributes in process `syz.7.999'. [ 302.735401][T10440] FAULT_INJECTION: forcing a failure. [ 302.735401][T10440] name failslab, interval 1, probability 0, space 0, times 0 [ 302.767179][T10440] CPU: 0 UID: 0 PID: 10440 Comm: syz.7.1010 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 302.767240][T10440] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 302.767255][T10440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 302.767270][T10440] Call Trace: [ 302.767279][T10440] [ 302.767289][T10440] dump_stack_lvl+0x16c/0x1f0 [ 302.767324][T10440] should_fail_ex+0x512/0x640 [ 302.767359][T10440] ? __kmalloc_noprof+0xca/0x880 [ 302.767401][T10440] should_failslab+0xc2/0x120 [ 302.767434][T10440] __kmalloc_noprof+0xdd/0x880 [ 302.767471][T10440] ? __pfx___mutex_trylock_common+0x10/0x10 [ 302.767505][T10440] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 302.767548][T10440] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 302.767582][T10440] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 302.767623][T10440] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 302.767657][T10440] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 302.767690][T10440] ? genl_get_cmd+0x194/0x580 [ 302.767730][T10440] ? __radix_tree_lookup+0x21f/0x2c0 [ 302.767763][T10440] genl_rcv_msg+0x55c/0x800 [ 302.767798][T10440] ? __pfx_genl_rcv_msg+0x10/0x10 [ 302.767827][T10440] ? __pfx_ctrl_getfamily+0x10/0x10 [ 302.767867][T10440] netlink_rcv_skb+0x158/0x420 [ 302.767894][T10440] ? __pfx_genl_rcv_msg+0x10/0x10 [ 302.767926][T10440] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 302.767968][T10440] ? netlink_deliver_tap+0x1ae/0xd30 [ 302.768000][T10440] genl_rcv+0x28/0x40 [ 302.768026][T10440] netlink_unicast+0x5aa/0x870 [ 302.768072][T10440] ? __pfx_netlink_unicast+0x10/0x10 [ 302.768115][T10440] netlink_sendmsg+0x8c8/0xdd0 [ 302.768149][T10440] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.768182][T10440] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 302.768225][T10440] __sys_sendto+0x4a3/0x520 [ 302.768263][T10440] ? __pfx___sys_sendto+0x10/0x10 [ 302.768316][T10440] ? fd_install+0x225/0x750 [ 302.768356][T10440] ? __pfx___sys_socket+0x10/0x10 [ 302.768389][T10440] ? xfd_validate_state+0x61/0x180 [ 302.768421][T10440] ? __pfx_do_writev+0x10/0x10 [ 302.768448][T10440] __x64_sys_sendto+0xe0/0x1c0 [ 302.768480][T10440] ? do_syscall_64+0x91/0xfa0 [ 302.768509][T10440] ? lockdep_hardirqs_on+0x7c/0x110 [ 302.768538][T10440] do_syscall_64+0xcd/0xfa0 [ 302.768571][T10440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.768598][T10440] RIP: 0033:0x7fe43659155c [ 302.768619][T10440] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 302.768644][T10440] RSP: 002b:00007fe4347d3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 302.768669][T10440] RAX: ffffffffffffffda RBX: 00007fe4347d3fc0 RCX: 00007fe43659155c [ 302.768687][T10440] RDX: 000000000000001c RSI: 00007fe4347d4010 RDI: 0000000000000008 [ 302.768703][T10440] RBP: 0000000000000000 R08: 00007fe4347d3f14 R09: 000000000000000c [ 302.768719][T10440] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 302.768734][T10440] R13: 00007fe4347d3f68 R14: 00007fe4347d4010 R15: 0000000000000000 [ 302.768771][T10440] [ 308.769463][T10510] hub 1-0:1.0: USB hub found [ 308.775972][T10510] hub 1-0:1.0: 1 port detected [ 308.797738][T10510] hub 1-0:1.0: USB hub found [ 308.802775][T10510] hub 1-0:1.0: 1 port detected [ 309.240652][T10523] netlink: 93 bytes leftover after parsing attributes in process `syz.7.1031'. [ 310.450440][T10545] netlink: 346 bytes leftover after parsing attributes in process `syz.3.1037'. [ 311.522212][ T5836] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 311.555381][ T5836] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 311.564592][ T5836] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 311.573856][ T5836] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 311.582097][ T5836] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 312.050220][T10566] chnl_net:caif_netlink_parms(): no params data found [ 312.208392][T10566] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.219118][T10566] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.229139][T10566] bridge_slave_0: entered allmulticast mode [ 312.237810][T10566] bridge_slave_0: entered promiscuous mode [ 312.247672][T10566] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.255902][T10566] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.265210][T10566] bridge_slave_1: entered allmulticast mode [ 312.276173][T10566] bridge_slave_1: entered promiscuous mode [ 312.338894][T10566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.353224][T10566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.404918][T10566] team0: Port device team_slave_0 added [ 312.413728][T10566] team0: Port device team_slave_1 added [ 312.444358][T10566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.452071][T10566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.480000][T10566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.494023][T10566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.502213][T10566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.528500][T10566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.590153][T10566] hsr_slave_0: entered promiscuous mode [ 312.598211][T10566] hsr_slave_1: entered promiscuous mode [ 312.605274][T10566] debugfs: 'hsr0' already exists in 'hsr' [ 312.611194][T10566] Cannot create hsr debugfs directory [ 312.949049][T10566] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 312.969308][T10566] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 313.017184][T10599] netlink: 504 bytes leftover after parsing attributes in process `syz.7.1049'. [ 313.027263][T10599] netlink: 350 bytes leftover after parsing attributes in process `syz.7.1049'. [ 313.104604][T10566] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 313.146827][T10566] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 313.319930][T10566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.405144][T10566] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.425034][ T7411] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.432252][ T7411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.632666][ T7417] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.639838][ T7417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.657208][ T5836] Bluetooth: hci7: command tx timeout [ 314.565942][ T52] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 314.567296][T10566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.593302][ T52] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 314.602156][ T52] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 314.611962][ T52] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 314.641999][ T52] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 315.711350][ T5836] Bluetooth: hci7: command tx timeout [ 316.033026][T10566] veth0_vlan: entered promiscuous mode [ 316.064840][T10629] chnl_net:caif_netlink_parms(): no params data found [ 316.437629][T10566] veth1_vlan: entered promiscuous mode [ 316.753170][ T5836] Bluetooth: hci8: command tx timeout [ 317.002261][T10629] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.009542][T10629] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.021590][T10629] bridge_slave_0: entered allmulticast mode [ 317.051245][T10629] bridge_slave_0: entered promiscuous mode [ 317.072688][T10566] veth0_macvtap: entered promiscuous mode [ 317.149913][T10629] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.187691][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.194262][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.260960][T10629] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.277477][T10629] bridge_slave_1: entered allmulticast mode [ 317.296401][T10629] bridge_slave_1: entered promiscuous mode [ 317.325511][T10566] veth1_macvtap: entered promiscuous mode [ 317.628525][T10629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.659359][T10629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.786471][T10566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.798122][ T5836] Bluetooth: hci7: command tx timeout [ 317.809226][T10566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.893512][ T7411] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.113795][T10629] team0: Port device team_slave_0 added [ 318.182697][ T7411] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.199795][T10629] team0: Port device team_slave_1 added [ 318.289726][ T7411] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.311116][ T7419] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.922153][ T5836] Bluetooth: hci8: command tx timeout [ 319.566024][T10629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.591045][T10629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.640490][T10629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.709702][T10629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.722174][T10629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.749506][T10629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.884153][ T5836] Bluetooth: hci7: command tx timeout [ 319.931055][T10670] sctp: [Deprecated]: syz.3.1060 (pid 10670) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.931055][T10670] Use struct sctp_sack_info instead [ 319.966569][T10629] hsr_slave_0: entered promiscuous mode [ 319.975573][T10629] hsr_slave_1: entered promiscuous mode [ 319.983340][T10629] debugfs: 'hsr0' already exists in 'hsr' [ 319.989088][T10629] Cannot create hsr debugfs directory [ 320.149640][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.163897][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.309997][ T7417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.323304][ T7417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.993101][ T5836] Bluetooth: hci8: command tx timeout [ 323.071616][ T5836] Bluetooth: hci8: command tx timeout [ 323.778127][T10629] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 323.818698][T10629] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 323.884987][T10629] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 324.039502][T10629] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 324.424581][T10629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.471792][T10629] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.503828][T10629] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 324.515408][T10629] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 324.549714][ T7408] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.556938][ T7408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.620181][ T7408] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.627309][ T7408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.484348][T10629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.608457][T10629] veth0_vlan: entered promiscuous mode [ 325.648480][T10629] veth1_vlan: entered promiscuous mode [ 325.760205][T10629] veth0_macvtap: entered promiscuous mode [ 325.805956][T10629] veth1_macvtap: entered promiscuous mode [ 325.844565][T10775] netlink: 504 bytes leftover after parsing attributes in process `syz.7.1070'. [ 325.868758][T10770] FAULT_INJECTION: forcing a failure. [ 325.868758][T10770] name failslab, interval 1, probability 0, space 0, times 0 [ 325.881841][T10770] CPU: 1 UID: 0 PID: 10770 Comm: syz.9.1067 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 325.881896][T10770] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 325.881911][T10770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 325.881926][T10770] Call Trace: [ 325.881935][T10770] [ 325.881945][T10770] dump_stack_lvl+0x16c/0x1f0 [ 325.881980][T10770] should_fail_ex+0x512/0x640 [ 325.882015][T10770] ? __kmalloc_cache_noprof+0x5f/0x780 [ 325.882043][T10770] should_failslab+0xc2/0x120 [ 325.882075][T10770] __kmalloc_cache_noprof+0x72/0x780 [ 325.882099][T10770] ? rcu_is_watching+0x12/0xc0 [ 325.882124][T10770] ? __request_module+0x2ad/0x690 [ 325.882159][T10770] ? lockdep_hardirqs_on+0x7c/0x110 [ 325.882190][T10770] ? __request_module+0x2ad/0x690 [ 325.882226][T10770] __request_module+0x2ad/0x690 [ 325.882263][T10770] ? __pfx___request_module+0x10/0x10 [ 325.882302][T10770] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 325.882340][T10770] ? __up_read+0x1f8/0x750 [ 325.882377][T10770] ? __pfx___up_read+0x10/0x10 [ 325.882410][T10770] ? ctrl_getfamily+0x1cb/0x540 [ 325.882448][T10770] ctrl_getfamily+0x1e9/0x540 [ 325.882480][T10770] ? __pfx_ctrl_getfamily+0x10/0x10 [ 325.882512][T10770] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 325.882545][T10770] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 325.882585][T10770] genl_family_rcv_msg_doit+0x209/0x2f0 [ 325.882618][T10770] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 325.882648][T10770] ? genl_get_cmd+0x194/0x580 [ 325.882687][T10770] ? __radix_tree_lookup+0x21f/0x2c0 [ 325.882719][T10770] genl_rcv_msg+0x55c/0x800 [ 325.882750][T10770] ? __pfx_genl_rcv_msg+0x10/0x10 [ 325.882785][T10770] ? __pfx_ctrl_getfamily+0x10/0x10 [ 325.882835][T10770] netlink_rcv_skb+0x158/0x420 [ 325.882859][T10770] ? __pfx_genl_rcv_msg+0x10/0x10 [ 325.882890][T10770] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 325.882930][T10770] ? netlink_deliver_tap+0x1ae/0xd30 [ 325.882961][T10770] genl_rcv+0x28/0x40 [ 325.882986][T10770] netlink_unicast+0x5aa/0x870 [ 325.883018][T10770] ? __pfx_netlink_unicast+0x10/0x10 [ 325.883057][T10770] netlink_sendmsg+0x8c8/0xdd0 [ 325.883090][T10770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.883121][T10770] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 325.883163][T10770] __sys_sendto+0x4a3/0x520 [ 325.883200][T10770] ? __pfx___sys_sendto+0x10/0x10 [ 325.883248][T10770] ? fd_install+0x225/0x750 [ 325.883287][T10770] ? __pfx___sys_socket+0x10/0x10 [ 325.883319][T10770] ? xfd_validate_state+0x61/0x180 [ 325.883352][T10770] ? __pfx_do_writev+0x10/0x10 [ 325.883381][T10770] __x64_sys_sendto+0xe0/0x1c0 [ 325.883417][T10770] ? do_syscall_64+0x91/0xfa0 [ 325.883443][T10770] ? lockdep_hardirqs_on+0x7c/0x110 [ 325.883471][T10770] do_syscall_64+0xcd/0xfa0 [ 325.883501][T10770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.883527][T10770] RIP: 0033:0x7f41f6b9155c [ 325.883547][T10770] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 325.883571][T10770] RSP: 002b:00007f41f794cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 325.883594][T10770] RAX: ffffffffffffffda RBX: 00007f41f794cfc0 RCX: 00007f41f6b9155c [ 325.883610][T10770] RDX: 000000000000001c RSI: 00007f41f794d010 RDI: 0000000000000007 [ 325.883626][T10770] RBP: 0000000000000000 R08: 00007f41f794cf14 R09: 000000000000000c [ 325.883642][T10770] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 325.883657][T10770] R13: 00007f41f794cf68 R14: 00007f41f794d010 R15: 0000000000000000 [ 325.883692][T10770] [ 325.921053][T10629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.984483][T10775] netlink: 504 bytes leftover after parsing attributes in process `syz.7.1070'. [ 326.204061][T10629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.571206][ T44] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.579974][ T44] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.633027][ T44] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.657070][ T7408] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.982415][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.990668][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.559213][ T7419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.607314][ T7419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.314564][T10818] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 328.333695][T10818] FAULT_INJECTION: forcing a failure. [ 328.333695][T10818] name failslab, interval 1, probability 0, space 0, times 0 [ 328.347021][T10818] CPU: 1 UID: 0 PID: 10818 Comm: syz.2.1077 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 328.347079][T10818] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 328.347093][T10818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 328.347109][T10818] Call Trace: [ 328.347118][T10818] [ 328.347127][T10818] dump_stack_lvl+0x16c/0x1f0 [ 328.347164][T10818] should_fail_ex+0x512/0x640 [ 328.347200][T10818] ? __kmalloc_noprof+0xca/0x880 [ 328.347244][T10818] should_failslab+0xc2/0x120 [ 328.347277][T10818] __kmalloc_noprof+0xdd/0x880 [ 328.347315][T10818] ? lsm_blob_alloc+0x68/0x90 [ 328.347352][T10818] ? lsm_blob_alloc+0x68/0x90 [ 328.347381][T10818] lsm_blob_alloc+0x68/0x90 [ 328.347413][T10818] security_prepare_creds+0x30/0x270 [ 328.347444][T10818] prepare_creds+0x56f/0x7d0 [ 328.347484][T10818] __sys_setfsuid+0xda/0x350 [ 328.347510][T10818] ? rcu_is_watching+0x12/0xc0 [ 328.347550][T10818] do_syscall_64+0xcd/0xfa0 [ 328.347584][T10818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.347611][T10818] RIP: 0033:0x7ff462d8f6c9 [ 328.347632][T10818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.347656][T10818] RSP: 002b:00007ff463cb3038 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 328.347681][T10818] RAX: ffffffffffffffda RBX: 00007ff462fe5fa0 RCX: 00007ff462d8f6c9 [ 328.347698][T10818] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 328.347714][T10818] RBP: 00007ff462e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 328.347730][T10818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.347746][T10818] R13: 00007ff462fe6038 R14: 00007ff462fe5fa0 R15: 00007ffd81ca88d8 [ 328.347782][T10818] [ 329.201734][T10841] hub 1-0:1.0: USB hub found [ 329.267400][T10841] hub 1-0:1.0: 1 port detected [ 329.366843][T10843] hub 1-0:1.0: USB hub found [ 329.397507][T10843] hub 1-0:1.0: 1 port detected [ 330.911501][T10878] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 331.838620][T10902] random: crng reseeded on system resumption [ 332.529459][T10924] hub 1-0:1.0: USB hub found [ 332.562374][T10924] hub 1-0:1.0: 1 port detected [ 332.668912][T10925] hub 1-0:1.0: USB hub found [ 332.737418][T10925] hub 1-0:1.0: 1 port detected [ 333.913962][T10952] bridge0: port 3(team0) entered blocking state [ 333.954115][T10952] bridge0: port 3(team0) entered disabled state [ 333.967287][T10952] team0: entered allmulticast mode [ 333.977731][T10952] team_slave_0: entered allmulticast mode [ 333.995590][T10952] team_slave_1: entered allmulticast mode [ 334.227925][T10952] team0: entered promiscuous mode [ 334.288187][T10952] team_slave_0: entered promiscuous mode [ 334.294874][T10952] team_slave_1: entered promiscuous mode [ 334.296408][T10952] bridge0: port 3(team0) entered blocking state [ 334.307380][T10952] bridge0: port 3(team0) entered forwarding state [ 334.591073][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 336.920887][T11017] random: crng reseeded on system resumption [ 336.949221][T11011] netlink: 93 bytes leftover after parsing attributes in process `syz.9.1110'. [ 340.090843][T11081] netlink: 350 bytes leftover after parsing attributes in process `syz.7.1121'. [ 340.584963][T11096] netlink: 93 bytes leftover after parsing attributes in process `syz.7.1123'. [ 342.651417][T11135] FAULT_INJECTION: forcing a failure. [ 342.651417][T11135] name failslab, interval 1, probability 0, space 0, times 0 [ 342.664675][T11135] CPU: 0 UID: 0 PID: 11135 Comm: syz.2.1130 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 342.664732][T11135] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 342.664745][T11135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 342.664757][T11135] Call Trace: [ 342.664764][T11135] [ 342.664772][T11135] dump_stack_lvl+0x16c/0x1f0 [ 342.664801][T11135] should_fail_ex+0x512/0x640 [ 342.664831][T11135] ? __kmalloc_noprof+0xca/0x880 [ 342.664866][T11135] should_failslab+0xc2/0x120 [ 342.664893][T11135] __kmalloc_noprof+0xdd/0x880 [ 342.664923][T11135] ? lsm_blob_alloc+0x68/0x90 [ 342.664951][T11135] ? lsm_blob_alloc+0x68/0x90 [ 342.664973][T11135] lsm_blob_alloc+0x68/0x90 [ 342.664998][T11135] security_prepare_creds+0x30/0x270 [ 342.665022][T11135] prepare_creds+0x56f/0x7d0 [ 342.665053][T11135] __sys_setfsuid+0xda/0x350 [ 342.665074][T11135] ? rcu_is_watching+0x12/0xc0 [ 342.665097][T11135] do_syscall_64+0xcd/0xfa0 [ 342.665123][T11135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.665143][T11135] RIP: 0033:0x7ff462d8f6c9 [ 342.665159][T11135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.665179][T11135] RSP: 002b:00007ff463cb3038 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 342.665198][T11135] RAX: ffffffffffffffda RBX: 00007ff462fe5fa0 RCX: 00007ff462d8f6c9 [ 342.665212][T11135] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 342.665225][T11135] RBP: 00007ff462e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 342.665237][T11135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.665249][T11135] R13: 00007ff462fe6038 R14: 00007ff462fe5fa0 R15: 00007ffd81ca88d8 [ 342.665276][T11135] [ 343.111537][T11145] ptrace attach of "./syz-executor exec"[10566] was attempted by ""[11145] [ 343.606523][T11151] random: crng reseeded on system resumption [ 343.754918][T11157] hub 1-0:1.0: USB hub found [ 343.798776][T11157] hub 1-0:1.0: 1 port detected [ 343.883796][T11151] Restarting kernel threads ... [ 343.891236][T11151] Done restarting kernel threads. [ 344.001659][T11159] hub 1-0:1.0: USB hub found [ 344.042961][T11159] hub 1-0:1.0: 1 port detected [ 344.120373][T11161] hub 1-0:1.0: USB hub found [ 344.175739][T11161] hub 1-0:1.0: 1 port detected [ 344.237198][T11168] netlink: 350 bytes leftover after parsing attributes in process `syz.3.1134'. [ 344.681254][T11174] netlink: 93 bytes leftover after parsing attributes in process `syz.2.1136'. [ 345.677349][T11203] FAULT_INJECTION: forcing a failure. [ 345.677349][T11203] name failslab, interval 1, probability 0, space 0, times 0 [ 345.781059][T11203] CPU: 0 UID: 0 PID: 11203 Comm: syz.2.1140 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 345.781120][T11203] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 345.781135][T11203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 345.781151][T11203] Call Trace: [ 345.781160][T11203] [ 345.781171][T11203] dump_stack_lvl+0x16c/0x1f0 [ 345.781207][T11203] should_fail_ex+0x512/0x640 [ 345.781245][T11203] ? __kmalloc_noprof+0xca/0x880 [ 345.781285][T11203] should_failslab+0xc2/0x120 [ 345.781316][T11203] __kmalloc_noprof+0xdd/0x880 [ 345.781350][T11203] ? __pfx___mutex_trylock_common+0x10/0x10 [ 345.781382][T11203] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 345.781421][T11203] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 345.781454][T11203] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 345.781493][T11203] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 345.781525][T11203] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 345.781560][T11203] ? genl_get_cmd+0x194/0x580 [ 345.781600][T11203] ? __radix_tree_lookup+0x21f/0x2c0 [ 345.781629][T11203] genl_rcv_msg+0x55c/0x800 [ 345.781660][T11203] ? __pfx_genl_rcv_msg+0x10/0x10 [ 345.781687][T11203] ? __pfx_ctrl_getfamily+0x10/0x10 [ 345.781728][T11203] netlink_rcv_skb+0x158/0x420 [ 345.781755][T11203] ? __pfx_genl_rcv_msg+0x10/0x10 [ 345.781786][T11203] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 345.781832][T11203] ? netlink_deliver_tap+0x1ae/0xd30 [ 345.781862][T11203] genl_rcv+0x28/0x40 [ 345.781888][T11203] netlink_unicast+0x5aa/0x870 [ 345.781919][T11203] ? __pfx_netlink_unicast+0x10/0x10 [ 345.781958][T11203] netlink_sendmsg+0x8c8/0xdd0 [ 345.781988][T11203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.782019][T11203] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 345.782059][T11203] __sys_sendto+0x4a3/0x520 [ 345.782097][T11203] ? __pfx___sys_sendto+0x10/0x10 [ 345.782145][T11203] ? fd_install+0x225/0x750 [ 345.782186][T11203] ? __pfx___sys_socket+0x10/0x10 [ 345.782218][T11203] ? xfd_validate_state+0x61/0x180 [ 345.782251][T11203] ? __pfx_do_writev+0x10/0x10 [ 345.782281][T11203] __x64_sys_sendto+0xe0/0x1c0 [ 345.782315][T11203] ? do_syscall_64+0x91/0xfa0 [ 345.782344][T11203] ? lockdep_hardirqs_on+0x7c/0x110 [ 345.782373][T11203] do_syscall_64+0xcd/0xfa0 [ 345.782405][T11203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.782430][T11203] RIP: 0033:0x7ff462d9155c [ 345.782452][T11203] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 345.782476][T11203] RSP: 002b:00007ff463c90ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 345.782501][T11203] RAX: ffffffffffffffda RBX: 00007ff463c90fc0 RCX: 00007ff462d9155c [ 345.782518][T11203] RDX: 000000000000001c RSI: 00007ff463c91010 RDI: 0000000000000008 [ 345.782534][T11203] RBP: 0000000000000000 R08: 00007ff463c90f14 R09: 000000000000000c [ 345.782550][T11203] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 345.782565][T11203] R13: 00007ff463c90f68 R14: 00007ff463c91010 R15: 0000000000000000 [ 345.782603][T11203] [ 347.109724][T11240] netlink: 350 bytes leftover after parsing attributes in process `syz.7.1146'. [ 348.147283][T11250] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1148'. [ 348.548792][T11260] FAULT_INJECTION: forcing a failure. [ 348.548792][T11260] name failslab, interval 1, probability 0, space 0, times 0 [ 348.584470][T11260] CPU: 1 UID: 0 PID: 11260 Comm: syz.9.1152 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 348.584525][T11260] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 348.584539][T11260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 348.584552][T11260] Call Trace: [ 348.584561][T11260] [ 348.584570][T11260] dump_stack_lvl+0x16c/0x1f0 [ 348.584603][T11260] should_fail_ex+0x512/0x640 [ 348.584637][T11260] ? __kmalloc_cache_noprof+0x5f/0x780 [ 348.584664][T11260] should_failslab+0xc2/0x120 [ 348.584696][T11260] __kmalloc_cache_noprof+0x72/0x780 [ 348.584719][T11260] ? trace_kmalloc+0x2b/0xd0 [ 348.584747][T11260] ? memtype_get_idx+0x3d/0xc0 [ 348.584788][T11260] ? memtype_get_idx+0x3d/0xc0 [ 348.584815][T11260] memtype_get_idx+0x3d/0xc0 [ 348.584844][T11260] traverse.part.0.constprop.0+0xaf/0x650 [ 348.584892][T11260] seq_read_iter+0x93c/0x12d0 [ 348.584943][T11260] seq_read+0x3a3/0x570 [ 348.584976][T11260] ? __pfx_seq_read+0x10/0x10 [ 348.585017][T11260] ? get_pid_task+0xfc/0x250 [ 348.585066][T11260] full_proxy_read+0x131/0x1a0 [ 348.585096][T11260] ? __pfx_full_proxy_read+0x10/0x10 [ 348.585129][T11260] vfs_read+0x1e4/0xcf0 [ 348.585163][T11260] ? __pfx_vfs_read+0x10/0x10 [ 348.585185][T11260] ? find_held_lock+0x2b/0x80 [ 348.585211][T11260] ? __fget_files+0x204/0x3c0 [ 348.585241][T11260] ? __fget_files+0x20e/0x3c0 [ 348.585262][T11260] ? __fget_files+0x130/0x3c0 [ 348.585296][T11260] __x64_sys_pread64+0x1eb/0x250 [ 348.585324][T11260] ? __pfx___x64_sys_pread64+0x10/0x10 [ 348.585363][T11260] do_syscall_64+0xcd/0xfa0 [ 348.585394][T11260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.585418][T11260] RIP: 0033:0x7f41f6b8f6c9 [ 348.585437][T11260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.585459][T11260] RSP: 002b:00007f41f796f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 348.585483][T11260] RAX: ffffffffffffffda RBX: 00007f41f6de5fa0 RCX: 00007f41f6b8f6c9 [ 348.585499][T11260] RDX: 00000000000040b6 RSI: 0000200000000080 RDI: 0000000000000004 [ 348.585514][T11260] RBP: 00007f41f796f090 R08: 0000000000000000 R09: 0000000000000000 [ 348.585528][T11260] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 348.585543][T11260] R13: 00007f41f6de6038 R14: 00007f41f6de5fa0 R15: 00007fff7ca1b478 [ 348.585579][T11260] [ 350.823526][T11315] FAULT_INJECTION: forcing a failure. [ 350.823526][T11315] name failslab, interval 1, probability 0, space 0, times 0 [ 350.863718][T11315] CPU: 1 UID: 0 PID: 11315 Comm: syz.7.1163 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 350.863772][T11315] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 350.863784][T11315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 350.863798][T11315] Call Trace: [ 350.863806][T11315] [ 350.863816][T11315] dump_stack_lvl+0x16c/0x1f0 [ 350.863849][T11315] should_fail_ex+0x512/0x640 [ 350.863881][T11315] ? __kmalloc_cache_noprof+0x5f/0x780 [ 350.863909][T11315] should_failslab+0xc2/0x120 [ 350.863940][T11315] __kmalloc_cache_noprof+0x72/0x780 [ 350.863964][T11315] ? memtype_get_idx+0x3d/0xc0 [ 350.863998][T11315] ? memtype_get_idx+0x3d/0xc0 [ 350.864025][T11315] memtype_get_idx+0x3d/0xc0 [ 350.864053][T11315] traverse.part.0.constprop.0+0x1da/0x650 [ 350.864101][T11315] seq_read_iter+0x93c/0x12d0 [ 350.864149][T11315] seq_read+0x3a3/0x570 [ 350.864183][T11315] ? __pfx_seq_read+0x10/0x10 [ 350.864221][T11315] ? get_pid_task+0xfc/0x250 [ 350.864269][T11315] full_proxy_read+0x131/0x1a0 [ 350.864299][T11315] ? __pfx_full_proxy_read+0x10/0x10 [ 350.864330][T11315] vfs_read+0x1e4/0xcf0 [ 350.864363][T11315] ? __pfx_vfs_read+0x10/0x10 [ 350.864391][T11315] ? find_held_lock+0x2b/0x80 [ 350.864416][T11315] ? __fget_files+0x204/0x3c0 [ 350.864445][T11315] ? __fget_files+0x20e/0x3c0 [ 350.864467][T11315] ? __fget_files+0x130/0x3c0 [ 350.864498][T11315] __x64_sys_pread64+0x1eb/0x250 [ 350.864527][T11315] ? __pfx___x64_sys_pread64+0x10/0x10 [ 350.864565][T11315] do_syscall_64+0xcd/0xfa0 [ 350.864594][T11315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.864618][T11315] RIP: 0033:0x7fe43658f6c9 [ 350.864636][T11315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.864659][T11315] RSP: 002b:00007fe4347f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 350.864682][T11315] RAX: ffffffffffffffda RBX: 00007fe4367e5fa0 RCX: 00007fe43658f6c9 [ 350.864698][T11315] RDX: 00000000000040b6 RSI: 0000200000000080 RDI: 0000000000000004 [ 350.864712][T11315] RBP: 00007fe4347f6090 R08: 0000000000000000 R09: 0000000000000000 [ 350.864726][T11315] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 350.864738][T11315] R13: 00007fe4367e6038 R14: 00007fe4367e5fa0 R15: 00007fff94ad0988 [ 350.864773][T11315] [ 351.260310][T11330] netlink: 350 bytes leftover after parsing attributes in process `syz.3.1164'. [ 351.331632][ T30] audit: type=1804 audit(4294967375.600:7): pid=11326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.1162" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1178 res=1 errno=0 [ 352.203900][T11347] FAULT_INJECTION: forcing a failure. [ 352.203900][T11347] name failslab, interval 1, probability 0, space 0, times 0 [ 352.231546][T11347] CPU: 0 UID: 0 PID: 11347 Comm: syz.7.1168 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 352.231611][T11347] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 352.231626][T11347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 352.231642][T11347] Call Trace: [ 352.231650][T11347] [ 352.231661][T11347] dump_stack_lvl+0x16c/0x1f0 [ 352.231699][T11347] should_fail_ex+0x512/0x640 [ 352.231736][T11347] ? __kmalloc_cache_noprof+0x5f/0x780 [ 352.231765][T11347] should_failslab+0xc2/0x120 [ 352.231798][T11347] __kmalloc_cache_noprof+0x72/0x780 [ 352.231823][T11347] ? rcu_is_watching+0x12/0xc0 [ 352.231849][T11347] ? __request_module+0x2ad/0x690 [ 352.231885][T11347] ? lockdep_hardirqs_on+0x7c/0x110 [ 352.231918][T11347] ? __request_module+0x2ad/0x690 [ 352.231953][T11347] __request_module+0x2ad/0x690 [ 352.231989][T11347] ? __pfx___request_module+0x10/0x10 [ 352.232028][T11347] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 352.232065][T11347] ? __up_read+0x1f8/0x750 [ 352.232101][T11347] ? __pfx___up_read+0x10/0x10 [ 352.232136][T11347] ? ctrl_getfamily+0x1cb/0x540 [ 352.232174][T11347] ctrl_getfamily+0x1e9/0x540 [ 352.232206][T11347] ? __pfx_ctrl_getfamily+0x10/0x10 [ 352.232239][T11347] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 352.232272][T11347] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 352.232312][T11347] genl_family_rcv_msg_doit+0x209/0x2f0 [ 352.232345][T11347] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 352.232376][T11347] ? genl_get_cmd+0x194/0x580 [ 352.232414][T11347] ? __radix_tree_lookup+0x21f/0x2c0 [ 352.232451][T11347] genl_rcv_msg+0x55c/0x800 [ 352.232487][T11347] ? __pfx_genl_rcv_msg+0x10/0x10 [ 352.232517][T11347] ? __pfx_ctrl_getfamily+0x10/0x10 [ 352.232560][T11347] netlink_rcv_skb+0x158/0x420 [ 352.232586][T11347] ? __pfx_genl_rcv_msg+0x10/0x10 [ 352.232618][T11347] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 352.232660][T11347] ? netlink_deliver_tap+0x1ae/0xd30 [ 352.232691][T11347] genl_rcv+0x28/0x40 [ 352.232717][T11347] netlink_unicast+0x5aa/0x870 [ 352.232748][T11347] ? __pfx_netlink_unicast+0x10/0x10 [ 352.232788][T11347] netlink_sendmsg+0x8c8/0xdd0 [ 352.232820][T11347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.232851][T11347] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 352.232893][T11347] __sys_sendto+0x4a3/0x520 [ 352.232930][T11347] ? __pfx___sys_sendto+0x10/0x10 [ 352.232977][T11347] ? fd_install+0x225/0x750 [ 352.233017][T11347] ? __pfx___sys_socket+0x10/0x10 [ 352.233048][T11347] ? xfd_validate_state+0x61/0x180 [ 352.233081][T11347] ? __pfx_do_writev+0x10/0x10 [ 352.233110][T11347] __x64_sys_sendto+0xe0/0x1c0 [ 352.233145][T11347] ? do_syscall_64+0x91/0xfa0 [ 352.233174][T11347] ? lockdep_hardirqs_on+0x7c/0x110 [ 352.233201][T11347] do_syscall_64+0xcd/0xfa0 [ 352.233233][T11347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.233259][T11347] RIP: 0033:0x7fe43659155c [ 352.233280][T11347] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 352.233304][T11347] RSP: 002b:00007fe4347f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 352.233330][T11347] RAX: ffffffffffffffda RBX: 00007fe4347f4fc0 RCX: 00007fe43659155c [ 352.233348][T11347] RDX: 000000000000001c RSI: 00007fe4347f5010 RDI: 0000000000000008 [ 352.233364][T11347] RBP: 0000000000000000 R08: 00007fe4347f4f14 R09: 000000000000000c [ 352.233381][T11347] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 352.233397][T11347] R13: 00007fe4347f4f68 R14: 00007fe4347f5010 R15: 0000000000000000 [ 352.233433][T11347] [ 353.517728][T11380] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input8 [ 353.783067][T11390] FAULT_INJECTION: forcing a failure. [ 353.783067][T11390] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 353.819014][T11388] FAULT_INJECTION: forcing a failure. [ 353.819014][T11388] name failslab, interval 1, probability 0, space 0, times 0 [ 353.831862][T11390] CPU: 1 UID: 0 PID: 11390 Comm: syz.2.1183 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 353.831910][T11390] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 353.831922][T11390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 353.831935][T11390] Call Trace: [ 353.831943][T11390] [ 353.831952][T11390] dump_stack_lvl+0x16c/0x1f0 [ 353.831985][T11390] should_fail_ex+0x512/0x640 [ 353.832031][T11390] _copy_from_user+0x2e/0xd0 [ 353.832066][T11390] copy_msghdr_from_user+0x98/0x160 [ 353.832092][T11390] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 353.832131][T11390] ___sys_sendmsg+0xfe/0x1d0 [ 353.832156][T11390] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.832177][T11390] ? __lock_acquire+0x622/0x1c90 [ 353.832249][T11390] __sys_sendmsg+0x16d/0x220 [ 353.832274][T11390] ? __pfx___sys_sendmsg+0x10/0x10 [ 353.832317][T11390] do_syscall_64+0xcd/0xfa0 [ 353.832348][T11390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.832369][T11390] RIP: 0033:0x7ff462d8f6c9 [ 353.832388][T11390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.832411][T11390] RSP: 002b:00007ff463cb3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.832433][T11390] RAX: ffffffffffffffda RBX: 00007ff462fe5fa0 RCX: 00007ff462d8f6c9 [ 353.832450][T11390] RDX: 0000000004000800 RSI: 0000200000002300 RDI: 0000000000000003 [ 353.832465][T11390] RBP: 00007ff463cb3090 R08: 0000000000000000 R09: 0000000000000000 [ 353.832479][T11390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.832492][T11390] R13: 00007ff462fe6038 R14: 00007ff462fe5fa0 R15: 00007ffd81ca88d8 [ 353.832527][T11390] [ 353.836649][T11388] CPU: 1 UID: 0 PID: 11388 Comm: syz.9.1181 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 353.836706][T11388] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 353.836720][T11388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 353.836734][T11388] Call Trace: [ 353.836742][T11388] [ 353.836752][T11388] dump_stack_lvl+0x16c/0x1f0 [ 353.836785][T11388] should_fail_ex+0x512/0x640 [ 353.836820][T11388] ? __kmalloc_noprof+0xca/0x880 [ 353.836859][T11388] should_failslab+0xc2/0x120 [ 353.836892][T11388] __kmalloc_noprof+0xdd/0x880 [ 353.836928][T11388] ? lsm_blob_alloc+0x68/0x90 [ 353.836961][T11388] ? lsm_blob_alloc+0x68/0x90 [ 353.836991][T11388] lsm_blob_alloc+0x68/0x90 [ 353.837028][T11388] security_prepare_creds+0x30/0x270 [ 353.837059][T11388] prepare_creds+0x56f/0x7d0 [ 353.837096][T11388] __sys_setfsuid+0xda/0x350 [ 353.837120][T11388] ? rcu_is_watching+0x12/0xc0 [ 353.837149][T11388] do_syscall_64+0xcd/0xfa0 [ 353.837178][T11388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.837201][T11388] RIP: 0033:0x7f41f6b8f6c9 [ 353.837219][T11388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.837240][T11388] RSP: 002b:00007f41f796f038 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 353.837263][T11388] RAX: ffffffffffffffda RBX: 00007f41f6de5fa0 RCX: 00007f41f6b8f6c9 [ 353.837280][T11388] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 353.837293][T11388] RBP: 00007f41f6c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 353.837309][T11388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.837322][T11388] R13: 00007f41f6de6038 R14: 00007f41f6de5fa0 R15: 00007fff7ca1b478 [ 353.837357][T11388] [ 356.122755][T11431] netlink: 350 bytes leftover after parsing attributes in process `syz.9.1189'. [ 358.327769][T11466] FAULT_INJECTION: forcing a failure. [ 358.327769][T11466] name failslab, interval 1, probability 0, space 0, times 0 [ 358.350758][T11466] CPU: 1 UID: 0 PID: 11466 Comm: syz.9.1200 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 358.350825][T11466] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 358.350840][T11466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 358.350856][T11466] Call Trace: [ 358.350865][T11466] [ 358.350876][T11466] dump_stack_lvl+0x16c/0x1f0 [ 358.350913][T11466] should_fail_ex+0x512/0x640 [ 358.350953][T11466] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 358.350982][T11466] should_failslab+0xc2/0x120 [ 358.351014][T11466] kmem_cache_alloc_noprof+0x75/0x6e0 [ 358.351039][T11466] ? prepare_creds+0x2c/0x7d0 [ 358.351080][T11466] ? prepare_creds+0x2c/0x7d0 [ 358.351113][T11466] prepare_creds+0x2c/0x7d0 [ 358.351153][T11466] __sys_setfsuid+0xda/0x350 [ 358.351177][T11466] ? rcu_is_watching+0x12/0xc0 [ 358.351205][T11466] do_syscall_64+0xcd/0xfa0 [ 358.351234][T11466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.351258][T11466] RIP: 0033:0x7f41f6b8f6c9 [ 358.351278][T11466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.351303][T11466] RSP: 002b:00007f41f796f038 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 358.351328][T11466] RAX: ffffffffffffffda RBX: 00007f41f6de5fa0 RCX: 00007f41f6b8f6c9 [ 358.351345][T11466] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 358.351360][T11466] RBP: 00007f41f6c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 358.351374][T11466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.351388][T11466] R13: 00007f41f6de6038 R14: 00007f41f6de5fa0 R15: 00007fff7ca1b478 [ 358.351420][T11466] [ 359.677093][T11495] netlink: 350 bytes leftover after parsing attributes in process `syz.3.1208'. [ 360.098097][T11505] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input9 [ 360.822742][T11519] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1217'. [ 361.154498][T11530] netlink: 350 bytes leftover after parsing attributes in process `syz.7.1219'. [ 363.052078][T11564] FAULT_INJECTION: forcing a failure. [ 363.052078][T11564] name failslab, interval 1, probability 0, space 0, times 0 [ 363.184692][T11564] CPU: 0 UID: 0 PID: 11564 Comm: syz.2.1227 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 363.184744][T11564] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 363.184758][T11564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 363.184773][T11564] Call Trace: [ 363.184781][T11564] [ 363.184790][T11564] dump_stack_lvl+0x16c/0x1f0 [ 363.184822][T11564] should_fail_ex+0x512/0x640 [ 363.184855][T11564] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 363.184880][T11564] should_failslab+0xc2/0x120 [ 363.184911][T11564] kmem_cache_alloc_noprof+0x75/0x6e0 [ 363.184936][T11564] ? skb_clone+0x190/0x3f0 [ 363.184966][T11564] ? skb_clone+0x190/0x3f0 [ 363.184985][T11564] skb_clone+0x190/0x3f0 [ 363.185008][T11564] netlink_deliver_tap+0xabd/0xd30 [ 363.185038][T11564] netlink_unicast+0x64c/0x870 [ 363.185067][T11564] ? __pfx_netlink_unicast+0x10/0x10 [ 363.185100][T11564] netlink_sendmsg+0x8c8/0xdd0 [ 363.185130][T11564] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.185157][T11564] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 363.185193][T11564] ____sys_sendmsg+0xa98/0xc70 [ 363.185221][T11564] ? copy_msghdr_from_user+0x10a/0x160 [ 363.185242][T11564] ? __pfx_____sys_sendmsg+0x10/0x10 [ 363.185283][T11564] ___sys_sendmsg+0x134/0x1d0 [ 363.185315][T11564] ? __pfx____sys_sendmsg+0x10/0x10 [ 363.185334][T11564] ? __lock_acquire+0x622/0x1c90 [ 363.185407][T11564] __sys_sendmsg+0x16d/0x220 [ 363.185431][T11564] ? __pfx___sys_sendmsg+0x10/0x10 [ 363.185476][T11564] do_syscall_64+0xcd/0xfa0 [ 363.185507][T11564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.185532][T11564] RIP: 0033:0x7ff462d8f6c9 [ 363.185552][T11564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.185575][T11564] RSP: 002b:00007ff463cb3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.185598][T11564] RAX: ffffffffffffffda RBX: 00007ff462fe5fa0 RCX: 00007ff462d8f6c9 [ 363.185614][T11564] RDX: 0000000004000800 RSI: 0000200000002300 RDI: 0000000000000003 [ 363.185629][T11564] RBP: 00007ff463cb3090 R08: 0000000000000000 R09: 0000000000000000 [ 363.185643][T11564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.185658][T11564] R13: 00007ff462fe6038 R14: 00007ff462fe5fa0 R15: 00007ffd81ca88d8 [ 363.185694][T11564] [ 366.061787][T11591] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input10 [ 366.190004][T11596] netlink: 93 bytes leftover after parsing attributes in process `syz.3.1234'. [ 367.055120][T11613] hub 1-0:1.0: USB hub found [ 367.142942][T11613] hub 1-0:1.0: 1 port detected [ 367.665183][T11619] FAULT_INJECTION: forcing a failure. [ 367.665183][T11619] name failslab, interval 1, probability 0, space 0, times 0 [ 367.690618][T11619] CPU: 0 UID: 0 PID: 11619 Comm: syz.7.1239 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 367.690678][T11619] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 367.690691][T11619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 367.690705][T11619] Call Trace: [ 367.690713][T11619] [ 367.690722][T11619] dump_stack_lvl+0x16c/0x1f0 [ 367.690755][T11619] should_fail_ex+0x512/0x640 [ 367.690788][T11619] ? __kmalloc_noprof+0xca/0x880 [ 367.690826][T11619] should_failslab+0xc2/0x120 [ 367.690858][T11619] __kmalloc_noprof+0xdd/0x880 [ 367.690893][T11619] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 367.690937][T11619] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 367.690962][T11619] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 367.690992][T11619] ? kfree_skbmem+0x1a4/0x1f0 [ 367.691022][T11619] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 367.691052][T11619] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 367.691079][T11619] ? __dev_queue_xmit+0xaf1/0x4490 [ 367.691110][T11619] ? genl_get_cmd+0x194/0x580 [ 367.691144][T11619] ? __radix_tree_lookup+0x21f/0x2c0 [ 367.691171][T11619] genl_rcv_msg+0x55c/0x800 [ 367.691203][T11619] ? __pfx_genl_rcv_msg+0x10/0x10 [ 367.691230][T11619] ? __pfx_netdev_nl_page_pool_get_doit+0x10/0x10 [ 367.691276][T11619] netlink_rcv_skb+0x158/0x420 [ 367.691296][T11619] ? __pfx_genl_rcv_msg+0x10/0x10 [ 367.691320][T11619] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 367.691351][T11619] ? netlink_deliver_tap+0x1ae/0xd30 [ 367.691374][T11619] genl_rcv+0x28/0x40 [ 367.691393][T11619] netlink_unicast+0x5aa/0x870 [ 367.691417][T11619] ? __pfx_netlink_unicast+0x10/0x10 [ 367.691447][T11619] netlink_sendmsg+0x8c8/0xdd0 [ 367.691471][T11619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.691495][T11619] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 367.691527][T11619] ____sys_sendmsg+0xa98/0xc70 [ 367.691556][T11619] ? copy_msghdr_from_user+0x10a/0x160 [ 367.691574][T11619] ? __pfx_____sys_sendmsg+0x10/0x10 [ 367.691610][T11619] ___sys_sendmsg+0x134/0x1d0 [ 367.691630][T11619] ? __pfx____sys_sendmsg+0x10/0x10 [ 367.691651][T11619] ? __lock_acquire+0x622/0x1c90 [ 367.691710][T11619] __sys_sendmsg+0x16d/0x220 [ 367.691729][T11619] ? __pfx___sys_sendmsg+0x10/0x10 [ 367.691765][T11619] do_syscall_64+0xcd/0xfa0 [ 367.691789][T11619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.691809][T11619] RIP: 0033:0x7fe43658f6c9 [ 367.691824][T11619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.691842][T11619] RSP: 002b:00007fe4347f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.691861][T11619] RAX: ffffffffffffffda RBX: 00007fe4367e5fa0 RCX: 00007fe43658f6c9 [ 367.691874][T11619] RDX: 0000000004000800 RSI: 0000200000002300 RDI: 0000000000000003 [ 367.691886][T11619] RBP: 00007fe4347f6090 R08: 0000000000000000 R09: 0000000000000000 [ 367.691898][T11619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.691909][T11619] R13: 00007fe4367e6038 R14: 00007fe4367e5fa0 R15: 00007fff94ad0988 [ 367.691936][T11619] [ 370.697460][T11647] netlink: 93 bytes leftover after parsing attributes in process `syz.7.1246'. [ 370.712043][T11654] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1247'. [ 371.265443][T11664] netlink: 504 bytes leftover after parsing attributes in process `syz.7.1250'. [ 371.333623][T11668] netlink: 504 bytes leftover after parsing attributes in process `syz.7.1250'. [ 371.580096][T11672] hub 1-0:1.0: USB hub found [ 371.610750][T11672] hub 1-0:1.0: 1 port detected [ 371.782093][T11669] hub 1-0:1.0: USB hub found [ 371.881147][T11669] hub 1-0:1.0: 1 port detected [ 374.827502][T11726] FAULT_INJECTION: forcing a failure. [ 374.827502][T11726] name failslab, interval 1, probability 0, space 0, times 0 [ 374.844899][T11726] CPU: 0 UID: 0 PID: 11726 Comm: syz.2.1263 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 374.844934][T11726] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 374.844941][T11726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 374.844950][T11726] Call Trace: [ 374.844956][T11726] [ 374.844962][T11726] dump_stack_lvl+0x16c/0x1f0 [ 374.844984][T11726] should_fail_ex+0x512/0x640 [ 374.845005][T11726] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 374.845023][T11726] should_failslab+0xc2/0x120 [ 374.845042][T11726] kmem_cache_alloc_noprof+0x75/0x6e0 [ 374.845055][T11726] ? prepare_creds+0x2c/0x7d0 [ 374.845079][T11726] ? prepare_creds+0x2c/0x7d0 [ 374.845097][T11726] prepare_creds+0x2c/0x7d0 [ 374.845118][T11726] __sys_setfsuid+0xda/0x350 [ 374.845133][T11726] ? rcu_is_watching+0x12/0xc0 [ 374.845149][T11726] do_syscall_64+0xcd/0xfa0 [ 374.845167][T11726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.845189][T11726] RIP: 0033:0x7ff462d8f6c9 [ 374.845201][T11726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.845215][T11726] RSP: 002b:00007ff463cb3038 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 374.845229][T11726] RAX: ffffffffffffffda RBX: 00007ff462fe5fa0 RCX: 00007ff462d8f6c9 [ 374.845238][T11726] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 374.845246][T11726] RBP: 00007ff462e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 374.845254][T11726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.845263][T11726] R13: 00007ff462fe6038 R14: 00007ff462fe5fa0 R15: 00007ffd81ca88d8 [ 374.845282][T11726] [ 376.594650][T11751] program syz.7.1269 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 378.491400][T11782] FAULT_INJECTION: forcing a failure. [ 378.491400][T11782] name failslab, interval 1, probability 0, space 0, times 0 [ 378.574223][T11782] CPU: 0 UID: 0 PID: 11782 Comm: syz.7.1276 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 378.574260][T11782] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 378.574267][T11782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 378.574275][T11782] Call Trace: [ 378.574281][T11782] [ 378.574287][T11782] dump_stack_lvl+0x16c/0x1f0 [ 378.574309][T11782] should_fail_ex+0x512/0x640 [ 378.574334][T11782] should_failslab+0xc2/0x120 [ 378.574354][T11782] kmem_cache_alloc_noprof+0x75/0x6e0 [ 378.574369][T11782] ? skb_clone+0x190/0x3f0 [ 378.574387][T11782] ? skb_clone+0x190/0x3f0 [ 378.574398][T11782] skb_clone+0x190/0x3f0 [ 378.574412][T11782] netlink_deliver_tap+0xabd/0xd30 [ 378.574431][T11782] netlink_unicast+0x64c/0x870 [ 378.574448][T11782] ? __pfx_netlink_unicast+0x10/0x10 [ 378.574469][T11782] netlink_sendmsg+0x8c8/0xdd0 [ 378.574487][T11782] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.574504][T11782] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 378.574527][T11782] __sys_sendto+0x4a3/0x520 [ 378.574548][T11782] ? __pfx___sys_sendto+0x10/0x10 [ 378.574575][T11782] ? fd_install+0x225/0x750 [ 378.574596][T11782] ? __pfx___sys_socket+0x10/0x10 [ 378.574617][T11782] __x64_sys_sendto+0xe0/0x1c0 [ 378.574637][T11782] ? do_syscall_64+0x91/0xfa0 [ 378.574653][T11782] ? lockdep_hardirqs_on+0x7c/0x110 [ 378.574670][T11782] do_syscall_64+0xcd/0xfa0 [ 378.574687][T11782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.574701][T11782] RIP: 0033:0x7fe43659155c [ 378.574713][T11782] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 378.574726][T11782] RSP: 002b:00007fe4347f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 378.574739][T11782] RAX: ffffffffffffffda RBX: 00007fe4347f4fc0 RCX: 00007fe43659155c [ 378.574749][T11782] RDX: 000000000000001c RSI: 00007fe4347f5010 RDI: 0000000000000007 [ 378.574757][T11782] RBP: 0000000000000000 R08: 00007fe4347f4f14 R09: 000000000000000c [ 378.574765][T11782] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 378.574773][T11782] R13: 00007fe4347f4f68 R14: 00007fe4347f5010 R15: 0000000000000000 [ 378.574792][T11782] [ 378.742130][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.824978][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.438181][T11832] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1284'. [ 380.451724][T11801] delete_channel: no stack [ 380.963644][T11840] hub 3-0:1.0: USB hub found [ 380.973913][T11840] hub 3-0:1.0: 1 port detected [ 380.997255][T11840] usb usb3: authorized to connect [ 381.105751][T11844] block nbd9: NBD_DISCONNECT [ 381.994319][T11847] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.890920][T11847] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.493636][T11847] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.734961][T11847] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.899547][T11868] FAULT_INJECTION: forcing a failure. [ 383.899547][T11868] name failslab, interval 1, probability 0, space 0, times 0 [ 383.978066][T11868] CPU: 0 UID: 0 PID: 11868 Comm: syz.7.1292 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 383.978123][T11868] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 383.978138][T11868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 383.978153][T11868] Call Trace: [ 383.978160][T11868] [ 383.978169][T11868] dump_stack_lvl+0x16c/0x1f0 [ 383.978203][T11868] should_fail_ex+0x512/0x640 [ 383.978238][T11868] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 383.978267][T11868] should_failslab+0xc2/0x120 [ 383.978299][T11868] kmem_cache_alloc_noprof+0x75/0x6e0 [ 383.978325][T11868] ? prepare_creds+0x2c/0x7d0 [ 383.978365][T11868] ? prepare_creds+0x2c/0x7d0 [ 383.978398][T11868] prepare_creds+0x2c/0x7d0 [ 383.978436][T11868] __sys_setfsuid+0xda/0x350 [ 383.978463][T11868] ? rcu_is_watching+0x12/0xc0 [ 383.978494][T11868] do_syscall_64+0xcd/0xfa0 [ 383.978525][T11868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.978550][T11868] RIP: 0033:0x7fe43658f6c9 [ 383.978569][T11868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.978594][T11868] RSP: 002b:00007fe4347f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 383.978618][T11868] RAX: ffffffffffffffda RBX: 00007fe4367e5fa0 RCX: 00007fe43658f6c9 [ 383.978635][T11868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 383.978650][T11868] RBP: 00007fe436611f91 R08: 0000000000000000 R09: 0000000000000000 [ 383.978666][T11868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.978681][T11868] R13: 00007fe4367e6038 R14: 00007fe4367e5fa0 R15: 00007fff94ad0988 [ 383.978717][T11868] [ 384.715663][T11886] KVM: debugfs: duplicate directory 11886-3 [ 388.287400][T11932] random: crng reseeded on system resumption [ 388.365672][T11932] Restarting kernel threads ... [ 388.402922][T11932] Done restarting kernel threads. [ 388.412676][T11931] FAULT_INJECTION: forcing a failure. [ 388.412676][T11931] name failslab, interval 1, probability 0, space 0, times 0 [ 388.425621][T11931] CPU: 0 UID: 0 PID: 11931 Comm: syz.7.1308 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 388.425673][T11931] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 388.425687][T11931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 388.425701][T11931] Call Trace: [ 388.425709][T11931] [ 388.425718][T11931] dump_stack_lvl+0x16c/0x1f0 [ 388.425751][T11931] should_fail_ex+0x512/0x640 [ 388.425783][T11931] ? __kmalloc_cache_noprof+0x5f/0x780 [ 388.425817][T11931] should_failslab+0xc2/0x120 [ 388.425848][T11931] __kmalloc_cache_noprof+0x72/0x780 [ 388.425871][T11931] ? do_raw_spin_lock+0x12c/0x2b0 [ 388.425904][T11931] ? alloc_fdtable+0xbd/0x2d0 [ 388.425933][T11931] ? alloc_fdtable+0xbd/0x2d0 [ 388.425953][T11931] alloc_fdtable+0xbd/0x2d0 [ 388.425977][T11931] dup_fd+0x83b/0xb90 [ 388.426013][T11931] __do_sys_close_range+0x4ca/0x730 [ 388.426044][T11931] ? __pfx___do_sys_close_range+0x10/0x10 [ 388.426081][T11931] do_syscall_64+0xcd/0xfa0 [ 388.426112][T11931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.426137][T11931] RIP: 0033:0x7fe43658f6c9 [ 388.426156][T11931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.426178][T11931] RSP: 002b:00007fe4347f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 388.426201][T11931] RAX: ffffffffffffffda RBX: 00007fe4367e5fa0 RCX: 00007fe43658f6c9 [ 388.426218][T11931] RDX: 0000000000000006 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 388.426233][T11931] RBP: 00007fe436611f91 R08: 0000000000000000 R09: 0000000000000000 [ 388.426248][T11931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.426262][T11931] R13: 00007fe4367e6038 R14: 00007fe4367e5fa0 R15: 00007fff94ad0988 [ 388.426295][T11931] [ 390.443008][ T30] audit: type=1806 audit(4294968441.718:8): xattr="." res=0 [ 390.911286][T11944] Bluetooth: hci2: command 0x0406 tx timeout [ 391.435975][T11985] netlink: 93 bytes leftover after parsing attributes in process `syz.2.1321'. [ 391.756573][T11975] hub 1-0:1.0: USB hub found [ 391.801758][T11975] hub 1-0:1.0: 1 port detected [ 391.833959][T11997] netlink: 178 bytes leftover after parsing attributes in process `syz.3.1325'. [ 393.171069][ T9] Process accounting resumed [ 393.563797][T12025] netlink: 93 bytes leftover after parsing attributes in process `syz.2.1334'. [ 395.111864][T12057] FAULT_INJECTION: forcing a failure. [ 395.111864][T12057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.171294][T12057] CPU: 0 UID: 0 PID: 12057 Comm: syz.7.1341 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 395.171348][T12057] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 395.171361][T12057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 395.171374][T12057] Call Trace: [ 395.171381][T12057] [ 395.171391][T12057] dump_stack_lvl+0x16c/0x1f0 [ 395.171428][T12057] should_fail_ex+0x512/0x640 [ 395.171471][T12057] _copy_to_user+0x32/0xd0 [ 395.171513][T12057] cpuid_read+0x1d7/0x360 [ 395.171550][T12057] ? __pfx_cpuid_read+0x10/0x10 [ 395.171580][T12057] ? __pfx_cpuid_smp_cpuid+0x10/0x10 [ 395.171613][T12057] ? iovec_from_user+0xbb/0x140 [ 395.171649][T12057] ? bpf_lsm_file_permission+0x9/0x10 [ 395.171678][T12057] ? security_file_permission+0x71/0x210 [ 395.171711][T12057] ? __pfx_cpuid_read+0x10/0x10 [ 395.171740][T12057] vfs_readv+0x5c1/0x8b0 [ 395.171773][T12057] ? __pfx_vfs_readv+0x10/0x10 [ 395.171799][T12057] ? kmem_cache_free+0x2d4/0x6c0 [ 395.171826][T12057] ? putname+0x154/0x1a0 [ 395.171875][T12057] ? __fget_files+0x20e/0x3c0 [ 395.171921][T12057] ? do_readv+0x132/0x340 [ 395.171944][T12057] do_readv+0x132/0x340 [ 395.171970][T12057] ? __pfx_do_readv+0x10/0x10 [ 395.172006][T12057] do_syscall_64+0xcd/0xfa0 [ 395.172039][T12057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.172065][T12057] RIP: 0033:0x7fe43658f6c9 [ 395.172085][T12057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.172110][T12057] RSP: 002b:00007fe4347d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 395.172134][T12057] RAX: ffffffffffffffda RBX: 00007fe4367e6090 RCX: 00007fe43658f6c9 [ 395.172151][T12057] RDX: 0000000000000006 RSI: 00002000000000c0 RDI: 000000000000000a [ 395.172166][T12057] RBP: 00007fe436611f91 R08: 0000000000000000 R09: 0000000000000000 [ 395.172181][T12057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.172196][T12057] R13: 00007fe4367e6128 R14: 00007fe4367e6090 R15: 00007fff94ad0988 [ 395.172232][T12057] [ 396.031160][T11944] Bluetooth: hci5: command 0x0406 tx timeout [ 397.073631][T12102] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input11 [ 401.502529][T12160] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input12 [ 401.561418][T12160] FAULT_INJECTION: forcing a failure. [ 401.561418][T12160] name failslab, interval 1, probability 0, space 0, times 0 [ 401.681036][T12160] CPU: 1 UID: 0 PID: 12160 Comm: syz.7.1365 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 401.681088][T12160] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 401.681102][T12160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 401.681116][T12160] Call Trace: [ 401.681124][T12160] [ 401.681133][T12160] dump_stack_lvl+0x16c/0x1f0 [ 401.681166][T12160] should_fail_ex+0x512/0x640 [ 401.681200][T12160] ? __kmalloc_noprof+0xca/0x880 [ 401.681239][T12160] should_failslab+0xc2/0x120 [ 401.681270][T12160] __kmalloc_noprof+0xdd/0x880 [ 401.681309][T12160] ? iovec_from_user+0x108/0x140 [ 401.681338][T12160] ? iovec_from_user+0x108/0x140 [ 401.681358][T12160] iovec_from_user+0x108/0x140 [ 401.681384][T12160] __import_iovec+0x88/0x650 [ 401.681410][T12160] ? find_held_lock+0x2b/0x80 [ 401.681439][T12160] import_iovec+0x86/0xb0 [ 401.681466][T12160] vfs_writev+0x19b/0xde0 [ 401.681501][T12160] ? __pfx_vfs_writev+0x10/0x10 [ 401.681559][T12160] ? __fget_files+0x20e/0x3c0 [ 401.681582][T12160] ? __fget_files+0x130/0x3c0 [ 401.681614][T12160] ? do_writev+0x28c/0x340 [ 401.681635][T12160] do_writev+0x28c/0x340 [ 401.681659][T12160] ? __pfx_do_writev+0x10/0x10 [ 401.681692][T12160] do_syscall_64+0xcd/0xfa0 [ 401.681724][T12160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.681749][T12160] RIP: 0033:0x7fe43658f6c9 [ 401.681768][T12160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.681791][T12160] RSP: 002b:00007fe4347f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 401.681814][T12160] RAX: ffffffffffffffda RBX: 00007fe4367e5fa0 RCX: 00007fe43658f6c9 [ 401.681850][T12160] RDX: 0000000000000009 RSI: 0000200000000340 RDI: 0000000000000003 [ 401.681864][T12160] RBP: 00007fe4347f6090 R08: 0000000000000000 R09: 0000000000000000 [ 401.681879][T12160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.681893][T12160] R13: 00007fe4367e6038 R14: 00007fe4367e5fa0 R15: 00007fff94ad0988 [ 401.681928][T12160] [ 402.271272][ T31] INFO: task syz.1.832:9668 blocked for more than 143 seconds. [ 402.280802][ T31] Tainted: G U W L XTNJ syzkaller #0 [ 402.289818][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 402.321082][ T31] task:syz.1.832 state:D stack:27672 pid:9668 tgid:9665 ppid:5824 task_flags:0x400140 flags:0x00080002 [ 402.340998][ T31] Call Trace: [ 402.348807][ T31] [ 402.360234][ T31] __schedule+0x1190/0x5de0 [ 402.365121][ T31] ? check_path.constprop.0+0x24/0x50 [ 402.370548][ T31] ? __lock_acquire+0x622/0x1c90 [ 402.382177][ T31] ? __pfx___schedule+0x10/0x10 [ 402.387080][ T31] ? find_held_lock+0x2b/0x80 [ 402.401060][ T31] ? schedule+0x2d7/0x3a0 [ 402.421104][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 402.426878][ T31] schedule+0xe7/0x3a0 [ 402.448021][T11944] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 402.464903][T11944] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 402.478902][T11944] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 402.487895][T11944] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 402.496900][ T31] schedule_preempt_disabled+0x13/0x30 [ 402.502959][T11944] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 402.512372][ T31] __mutex_lock+0x818/0x1060 [ 402.516996][ T31] ? __lock_acquire+0x622/0x1c90 [ 402.522664][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 402.528420][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 402.533903][ T31] ? net_generic+0xea/0x2a0 [ 402.539345][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 402.564618][ T31] nfsd_nl_threads_set_doit+0x687/0xbc0 [ 402.591000][ T31] genl_family_rcv_msg_doit+0x209/0x2f0 [ 402.604376][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 402.632483][ T31] ? rcu_is_watching+0x12/0xc0 [ 402.656251][ T31] ? bpf_lsm_capable+0x9/0x10 [ 402.855626][ T31] ? security_capable+0x7e/0x260 [ 402.860642][ T31] genl_rcv_msg+0x55c/0x800 [ 402.947822][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 402.953937][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 402.960047][ T31] netlink_rcv_skb+0x158/0x420 [ 402.965584][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 402.970653][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 402.980985][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 402.986303][ T31] genl_rcv+0x28/0x40 [ 403.040983][ T31] netlink_unicast+0x5aa/0x870 [ 403.045815][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 403.071913][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 403.077762][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.083508][ T31] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 403.090230][ T31] ____sys_sendmsg+0xa98/0xc70 [ 403.118920][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 403.143540][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 403.148896][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 403.183152][ T31] ___sys_sendmsg+0x134/0x1d0 [ 403.187884][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 403.234983][ T31] ? __lock_acquire+0x622/0x1c90 [ 403.240044][ T31] __sys_sendmsg+0x16d/0x220 [ 403.264147][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 403.269312][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 403.291120][ T31] do_syscall_64+0xcd/0xfa0 [ 403.295683][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.311563][ T31] RIP: 0033:0x7f04f478f6c9 [ 403.316027][ T31] RSP: 002b:00007f04f5650038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.351013][ T31] RAX: ffffffffffffffda RBX: 00007f04f49e5fa0 RCX: 00007f04f478f6c9 [ 403.381158][ T31] RDX: 0000000000040010 RSI: 0000200000000000 RDI: 0000000000000003 [ 403.389184][ T31] RBP: 00007f04f4811f91 R08: 0000000000000000 R09: 0000000000000000 [ 403.451133][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.459156][ T31] R13: 00007f04f49e6038 R14: 00007f04f49e5fa0 R15: 00007ffc1aa1d598 [ 403.491010][ T31] [ 403.494152][ T31] [ 403.494152][ T31] Showing all locks held in the system: [ 403.511037][ T31] 1 lock held by khungtaskd/31: [ 403.527357][ T31] #0: ffffffff8e3c45e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 403.551080][ T31] 2 locks held by getty/5587: [ 403.555789][ T31] #0: ffff88814da5a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 403.601021][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 403.630759][ T31] 3 locks held by kworker/0:3/5826: [ 403.650993][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 403.661870][ T31] #1: ffffc900040afd00 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 403.682016][ T31] #2: ffffffff8e3cfb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 403.692442][ T31] 2 locks held by kworker/u8:24/7930: [ 403.697828][ T31] #0: ffff8881466ae948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 403.716320][ T31] #1: ffffc9000d3bfd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 403.728222][ T31] 4 locks held by kworker/u8:35/7944: [ 403.734675][ T31] #0: ffff88801ba9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 403.747440][ T31] #1: ffffc9000deffd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 403.757702][ T31] #2: ffffffff900d48d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x8b0 [ 403.769897][ T31] #3: ffffffff900ead08 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7e9/0xab0 [ 403.779355][ T31] 2 locks held by syz.5.801/9535: [ 403.784661][ T31] #0: ffffffff9018ead0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 403.796728][ T31] #1: ffffffff8e7ed248 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 403.807088][ T31] 2 locks held by syz.1.832/9668: [ 403.817732][ T31] #0: ffffffff9018ead0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 403.827443][ T31] #1: ffffffff8e7ed248 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 403.838570][ T31] 2 locks held by syz.4.906/9965: [ 403.844719][ T31] #0: ffffffff9018ead0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 403.855171][ T31] #1: ffffffff8e7ed248 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 403.865299][ T31] 2 locks held by syz.6.987/10351: [ 403.871388][ T31] #0: ffffffff9018ead0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 403.879613][ T31] #1: ffffffff8e7ed248 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 403.889673][ T31] 2 locks held by syz.8.992/10376: [ 403.894819][ T31] #0: ffffffff9018ead0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 403.903127][ T31] #1: ffffffff8e7ed248 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 403.913755][ T31] 2 locks held by syz.9.1301/11903: [ 403.918954][ T31] #0: ffff8880425b00e0 (&type->s_umount_key#50){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 403.929370][ T31] #1: ffffffff8e7ed248 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 403.939469][ T31] 2 locks held by syz.3.1355/12117: [ 403.944751][ T31] #0: ffff88805180e0e0 (&type->s_umount_key#50){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 403.955619][ T31] #1: ffffffff8e7ed248 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 403.965614][ T31] 3 locks held by syz-executor/12166: [ 403.971131][ T31] #0: ffffffff900d48d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690 [ 403.981227][ T31] #1: ffffffff900ead08 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7e9/0xab0 [ 403.990320][ T31] #2: ffffffff8e3cfb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 404.000445][ T31] [ 404.002877][ T31] ============================================= [ 404.002877][ T31] [ 404.047896][ T31] NMI backtrace for cpu 1 [ 404.047918][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 404.047967][ T31] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 404.047980][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 404.047994][ T31] Call Trace: [ 404.048003][ T31] [ 404.048011][ T31] dump_stack_lvl+0x116/0x1f0 [ 404.048045][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 404.048077][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 404.048106][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 404.048140][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 404.048178][ T31] watchdog+0xf3f/0x1170 [ 404.048207][ T31] ? rcu_is_watching+0x12/0xc0 [ 404.048232][ T31] ? __pfx_watchdog+0x10/0x10 [ 404.048253][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 404.048288][ T31] ? __kthread_parkme+0x19e/0x250 [ 404.048319][ T31] ? __pfx_watchdog+0x10/0x10 [ 404.048341][ T31] kthread+0x3c5/0x780 [ 404.048374][ T31] ? __pfx_kthread+0x10/0x10 [ 404.048409][ T31] ? rcu_is_watching+0x12/0xc0 [ 404.048433][ T31] ? __pfx_kthread+0x10/0x10 [ 404.048467][ T31] ret_from_fork+0x675/0x7d0 [ 404.048497][ T31] ? __pfx_kthread+0x10/0x10 [ 404.048530][ T31] ret_from_fork_asm+0x1a/0x30 [ 404.048577][ T31] [ 404.048585][ T31] Sending NMI from CPU 1 to CPUs 0: [ 404.188349][ C0] NMI backtrace for cpu 0 [ 404.188372][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 404.188421][ C0] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 404.188435][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 404.188449][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 404.188481][ C0] Code: 87 6f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 a3 2c 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 404.188505][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 404.188524][ C0] RAX: 00000000002c6de5 RBX: 0000000000000000 RCX: ffffffff8b5d82a9 [ 404.188539][ C0] RDX: 0000000000000000 RSI: ffffffff8da28b0b RDI: ffffffff8bf075c0 [ 404.188555][ C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655 [ 404.188571][ C0] R10: ffff8880b84332ab R11: 0000000000000001 R12: 0000000000000000 [ 404.188585][ C0] R13: ffffffff8e097a00 R14: ffffffff908246d0 R15: 0000000000000000 [ 404.188601][ C0] FS: 0000000000000000(0000) GS:ffff888124a0d000(0000) knlGS:0000000000000000 [ 404.188637][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 404.188652][ C0] CR2: 000020000058b000 CR3: 000000000e182000 CR4: 00000000003526f0 [ 404.188667][ C0] Call Trace: [ 404.188676][ C0] [ 404.188684][ C0] default_idle+0x13/0x20 [ 404.188715][ C0] default_idle_call+0x6c/0xb0 [ 404.188747][ C0] do_idle+0x38d/0x500 [ 404.188772][ C0] ? __pfx_do_idle+0x10/0x10 [ 404.188796][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 404.188835][ C0] cpu_startup_entry+0x4f/0x60 [ 404.188859][ C0] rest_init+0x16b/0x2b0 [ 404.188891][ C0] ? acpi_subsystem_init+0x133/0x180 [ 404.188926][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 404.188950][ C0] start_kernel+0x3f6/0x4e0 [ 404.188998][ C0] x86_64_start_reservations+0x18/0x30 [ 404.189035][ C0] x86_64_start_kernel+0x130/0x190 [ 404.189071][ C0] common_startup_64+0x13e/0x148 [ 404.189104][ C0] [ 404.591513][ T5836] Bluetooth: hci9: command tx timeout [ 405.035274][ T7944] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.159455][ T7944] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.270039][ T7944] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.354809][ T7944] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.562005][ T7944] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.684266][ T7944] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.803693][ T7944] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.900266][ T7944] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.087409][ T7944] bridge_slave_1: left allmulticast mode [ 406.095240][ T7944] bridge_slave_1: left promiscuous mode [ 406.101762][ T7944] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.114581][ T7944] bridge_slave_0: left allmulticast mode [ 406.120253][ T7944] bridge_slave_0: left promiscuous mode [ 406.127297][ T7944] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.139520][ T7944] bridge_slave_1: left allmulticast mode [ 406.145459][ T7944] bridge_slave_1: left promiscuous mode [ 406.152047][ T7944] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.160882][ T7944] bridge_slave_0: left allmulticast mode [ 406.167890][ T7944] bridge_slave_0: left promiscuous mode [ 406.173867][ T7944] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.509294][ T7944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.525109][ T7944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.537855][ T7944] bond0 (unregistering): Released all slaves [ 406.787126][ T7944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.797629][ T7944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.808302][ T7944] bond0 (unregistering): Released all slaves [ 407.435186][ T7944] hsr_slave_0: left promiscuous mode [ 407.444039][ T7944] hsr_slave_1: left promiscuous mode [ 407.450091][ T7944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.458848][ T7944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.468935][ T7944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.476664][ T7944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.490316][ T7944] hsr_slave_0: left promiscuous mode [ 407.497291][ T7944] hsr_slave_1: left promiscuous mode [ 407.503778][ T7944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.511691][ T7944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.519757][ T7944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.528779][ T7944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.582223][ T7944] veth1_macvtap: left promiscuous mode [ 407.587848][ T7944] veth0_macvtap: left promiscuous mode [ 407.593840][ T7944] veth1_vlan: left promiscuous mode [ 407.600701][ T7944] veth0_vlan: left promiscuous mode [ 407.608673][ T7944] veth1_macvtap: left promiscuous mode [ 407.614807][ T7944] veth0_macvtap: left promiscuous mode [ 407.620477][ T7944] veth1_vlan: left promiscuous mode [ 407.627044][ T7944] veth0_vlan: left promiscuous mode [ 408.217481][ T7944] team0 (unregistering): Port device team_slave_1 removed [ 408.252896][ T7944] team0 (unregistering): Port device team_slave_0 removed [ 408.873072][ T7944] team0 (unregistering): Port device team_slave_1 removed [ 408.909286][ T7944] team0 (unregistering): Port device team_slave_0 removed [ 411.391171][T11944] Bluetooth: hci6: command 0x0406 tx timeout