last executing test programs: 6m17.091369303s ago: executing program 2 (id=743): poll$auto(0x0, 0x5, 0x108) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/nvme/parameters/io_queue_depth\x00', 0x20001, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sendfile$auto(r0, r1, 0x0, 0x3) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/audit\x00', 0xb02, 0x0) read$auto(r3, &(0x7f00000003c0)=']%\'\x00', 0x5) 6m16.632705014s ago: executing program 2 (id=745): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video31\x00', 0x50101, 0x0) openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/trace_options\x00', 0x68aa02, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) poll$auto(&(0x7f0000000480)={r0, 0x5, 0x29}, 0x40000002, 0x7) 6m16.459904321s ago: executing program 2 (id=747): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/system/cpu/vulnerabilities/spectre_v2\x00', 0x40780, 0x0) read$auto(r0, 0x0, 0x400006) 6m16.268843332s ago: executing program 2 (id=748): syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x3, 0x7ffd, r0, 0x7) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x2a) r1 = socket(0x2, 0x3, 0x2) setsockopt$auto(r1, 0x0, 0xd1, 0xfffffffffffffffc, 0x3) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) poll$auto(&(0x7f0000000180)={r2, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$auto(r3, 0xaf01, 0xe) socket(0x2a, 0x2, 0x1) ioctl$auto(0x3, 0x10, 0xfffffffffffff4e0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x140, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) fchmod$auto(r4, 0xa) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) 6m15.689591042s ago: executing program 2 (id=752): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x80008000) process_vm_readv$auto(0x0, 0x0, 0x0, 0x0, 0x6, 0x4000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x57e) fcntl$auto_F_ADD_SEALS(r1, 0x410, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000007b7f40750dbce9efd16f22ebc577a69050", @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf250a000000100003800c0001000100000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r5 = syz_clone(0x20000000, &(0x7f00000001c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="2918758169251555183442853a27ba37074b62633f338d1a7b74c6ff4c91676d9a5e0078ab1db0f30dc404f23fd5820a80ed88704e31ac2c5f3169cb36f22141f45b35a2e04fe71bc918ec46671bf5d28d8d26ce4970c811a8b669c7011c3e9ff8b2109640c07450f5b7b624fde03bb975adc229120a3b8750efcf8a90044854f04b55f429540f9fc390d24df293299b9c4395aed65212fdd9a1597ffcfaf9b3008f77bcc5a593486eb61127560aa974af592514e14d7d") r6 = waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000003c0)={@_si_pad}, 0x1ecc, &(0x7f0000000440)={{0xffffffff, 0x2}, {0x7, 0x19}, 0x9, 0x80000000, 0x4, 0x5, 0x8000000000000001, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1000, 0x0, 0x4}) r7 = getpgid$auto(0x0) sendmsg$auto_IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000540)=ANY=[@ANYBLOB="3405", @ANYRES16=r4, @ANYBLOB="000226bd7000fbdbdf25020000000800050007000000080006000300000008000400050000001001028075ff83876574dcf7444c53b88992e69a471bfa58053dc94ad66d0953fb1b9cb401c147df5f31671dfc0f9284424129a2c5ce70c649ade9aae6d814619bf71bbd80efe680cd9bc3e7aa59478b4e3e4d0ce05691deebfebdb666888d6f5549d48d92470028f2ccb239e0e683f1107459a18b09a092829949129087a8c782cb94fd36de9315f583a56ceee0e6023fa204fdb92ada8640c18311479406aa31ba39687f786747f4eaef95", @ANYRES32=0x0, @ANYBLOB="19e833e93fdf0b102a18ee6b8436634483ed5729eb26e2267dcf5d3a2eaf51db79c25d370c37cf662d480e08f268f1743cd215589548d9cb71", @ANYRES32=r5, @ANYBLOB="1800fd80040086807290395bf5dd39680400b5800400098021011a800400", @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="490f786928777dc08e0861d26a194926ce9dc2c2fcb0dd40666bd041f1c1ee6c8800c408008000", @ANYBLOB="0800e300", @ANYRES32=r7, @ANYBLOB="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"], 0x534}, 0x1, 0x0, 0x0, 0x28014044}, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={"bb991caef2393c42b10bbbe98a58810755b4c2b3bdc7b659ba8784501e47ffc7", 0x3, 0x81, 0xca, 0x5, 0x5, r5}) ioctl$auto_TCSBRKP2(r0, 0x5425, 0x0) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r8, 0x5408, 0x0) 6m15.057631442s ago: executing program 2 (id=755): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/pages_to_scan\x00', 0x102, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) unlink$auto(0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) r3 = epoll_create$auto(0xa7a0) epoll_ctl$auto(r3, 0x1, 0x8000000000000000, 0x0) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/md_mod/parameters/new_array\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000000)='0\x81=\"\xab\xf0\xb3\xafr3w*$\xe8\x85\xd4i\xc9~\x81\x92\x88\xed\xd53\xe0\xdez\xa0\xc2\xff\x8d\xf9P\x18\xa4\xa72\xa2X`\a\x90i=\x00\x00\x02\x00', 0xd4d0) (async, rerun: 32) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYRES16=r4, @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x90) (rerun: 32) sendfile$auto(r0, r0, 0x0, 0x7) (async) recvmsg$auto(r4, &(0x7f0000000400)={&(0x7f0000000080)="a0605930e0c4dd67c3b71a36be0d16b9789f584ec42b160e92b99a071cbc655abfd5bac40569e195babbf65574e3aff7ee3fac398c6b7834b6aa8abc37cd94d8fdc7e63fb22678ec951b9702777d40b906bdee8e41d207f88248cc9bfa7633d69f2baf60a37d0ff7cfd081dcb4122f5b1d6df1f6159417b67645626a94ca2223011aaa7b50c5767d649339a3c3092c721349f9596c208c92422dcd598ecfd48391d581ade43889d01c517bfaeeaf7f706b9e2a51c384800530867cf551d5c94346628bd2d0ae2299d221d79c3d0d8f0ec4187a2692d4cdd8a58f11fc72717613913561b51e2d27308c23ad32fa", 0x62b97793, &(0x7f0000000240)={&(0x7f00000001c0)="f78026b3c0adb14a9598fe8daa4abbe220a8a905ffdcbaa4795b8c80894c98d6d48e2daace2da48d34c2944756a5f47ab7b027c9d5839b99e1042198daa1f67cc890ec80d5634f40a15a33", 0x1000}, 0x2, &(0x7f0000000280)="4e0734e4a0e81da86bfa4455edf1353ca5acd1b079aa8c2a847407fc5dfaa797e10ed7317cd6290a071dba269ddca04cbe2e17731588fb570712ace95c7d5f51e4608577dea4515996534b71f08d75b4f4588f5e1fffa6e9dc8b5c384afb8a600206a8ffc8a9611ce65b4fa86c3358571f643716ca09858ca007fdd174adb4fc6a68b0b4ae3036900dfea70e77d684d6ca3f9589d9dca7b6d35d4e6ee67104798f617fa0429a3d7132c3fce957ed5cb5ebb8cd171713477c208b9c852a325c0f4a0f89480abd62da86610611b37d4e757b10f01757fdca2357f11cfb0ebb737d6c5730766fc150", 0xb, 0xb78}, 0x5) 5m59.922593483s ago: executing program 32 (id=755): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/pages_to_scan\x00', 0x102, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) unlink$auto(0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) r3 = epoll_create$auto(0xa7a0) epoll_ctl$auto(r3, 0x1, 0x8000000000000000, 0x0) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/md_mod/parameters/new_array\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000000)='0\x81=\"\xab\xf0\xb3\xafr3w*$\xe8\x85\xd4i\xc9~\x81\x92\x88\xed\xd53\xe0\xdez\xa0\xc2\xff\x8d\xf9P\x18\xa4\xa72\xa2X`\a\x90i=\x00\x00\x02\x00', 0xd4d0) (async, rerun: 32) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYRES16=r4, @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x90) (rerun: 32) sendfile$auto(r0, r0, 0x0, 0x7) (async) recvmsg$auto(r4, &(0x7f0000000400)={&(0x7f0000000080)="a0605930e0c4dd67c3b71a36be0d16b9789f584ec42b160e92b99a071cbc655abfd5bac40569e195babbf65574e3aff7ee3fac398c6b7834b6aa8abc37cd94d8fdc7e63fb22678ec951b9702777d40b906bdee8e41d207f88248cc9bfa7633d69f2baf60a37d0ff7cfd081dcb4122f5b1d6df1f6159417b67645626a94ca2223011aaa7b50c5767d649339a3c3092c721349f9596c208c92422dcd598ecfd48391d581ade43889d01c517bfaeeaf7f706b9e2a51c384800530867cf551d5c94346628bd2d0ae2299d221d79c3d0d8f0ec4187a2692d4cdd8a58f11fc72717613913561b51e2d27308c23ad32fa", 0x62b97793, &(0x7f0000000240)={&(0x7f00000001c0)="f78026b3c0adb14a9598fe8daa4abbe220a8a905ffdcbaa4795b8c80894c98d6d48e2daace2da48d34c2944756a5f47ab7b027c9d5839b99e1042198daa1f67cc890ec80d5634f40a15a33", 0x1000}, 0x2, &(0x7f0000000280)="4e0734e4a0e81da86bfa4455edf1353ca5acd1b079aa8c2a847407fc5dfaa797e10ed7317cd6290a071dba269ddca04cbe2e17731588fb570712ace95c7d5f51e4608577dea4515996534b71f08d75b4f4588f5e1fffa6e9dc8b5c384afb8a600206a8ffc8a9611ce65b4fa86c3358571f643716ca09858ca007fdd174adb4fc6a68b0b4ae3036900dfea70e77d684d6ca3f9589d9dca7b6d35d4e6ee67104798f617fa0429a3d7132c3fce957ed5cb5ebb8cd171713477c208b9c852a325c0f4a0f89480abd62da86610611b37d4e757b10f01757fdca2357f11cfb0ebb737d6c5730766fc150", 0xb, 0xb78}, 0x5) 2m50.427637841s ago: executing program 3 (id=1578): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ram1\x00', 0x6281, 0x0) ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x410a01, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) lseek$auto(0x3, 0xffffffffff800002, 0x10) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x20201, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) unshare$auto(0x40000080) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900), 0x0) 2m49.547895477s ago: executing program 3 (id=1586): socketpair$auto(0x2, 0xfffffff5, 0x41, &(0x7f0000000100)=0x3) r0 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) ioctl$auto(r0, 0x80004508, 0xffffffffffffffff) rt_sigpending$auto(&(0x7f0000000000)={0x5}, 0x8) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpu0/topology/core_id\x00', 0x101000, 0x0) read$auto(r1, &(0x7f0000000000)='/\v5s/kernel/debuw/lru\b\x00en\x00', 0xfffffffffffffff8) 2m49.376062035s ago: executing program 3 (id=1587): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/domainname\x00', 0x1c9442, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) r2 = fcntl$auto_F_DUPFD_CLOEXEC(r1, 0x406, r0) ioctl$auto_BCH_IOCTL_DEV_USAGE(r2, 0xc118bc0b, &(0x7f0000000100)={0xffffffff, 0xd, 0x4, '\x00', 0xfffffffc, 0x9, 0x8, [{0x4, 0x3, 0x2}, {0x34}, {0x6, 0x8, 0x100000000}, {0x9d3c, 0x8e52, 0x401}, {0x7, 0x5, 0x6}, {0xc, 0x1000, 0x8}, {0x4000000, 0x5, 0x5}, {0x7, 0x4, 0x2}, {0x5, 0x10, 0x7}, {0xffff, 0x3, 0x9}]}) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0x1, 0xb8, @inferred=r0}}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, 0x0, 0x20008810) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x1, 0x6, 0x1, 0x89, 0x7181, 0x3ffde, 0x4, 0x10, 0x9, 0x6, 0x80803, 0x4, 0x11ffffffffffd, 0x85, 0xfffffffffffffffb, 0x9, 0x50007, 0x2, 0xffffffffffffffff, 0x0, 0x80000001, 0x1, 0x202, 0x9, 0x8000, 0x0, 0x0, 0x2, 0x0, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x3, 0x2, 0x5, 0x0, 0x2, 0x0, 0x0, 0x400000004, 0x9, 0x2000000800000000, 0x3, 0x0, 0x100, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000009, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x2000000]}, 0x1fe, 0xd) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) unlinkat$auto(r3, 0x0, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000003fc0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETFAMILY2(r6, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000004080)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7000fddbdf25030000000f00020076657468305f766c616e0000149bbe543e9ad4c47b3e173cf333cefc2286ff4fa4fba6bc4d7ea41e683dc39a65d5f237ae07bd33c2f5fe4385ec671fddd92b23719dcf1433"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000050) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0xc810}, 0x18800) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) 2m47.004188199s ago: executing program 1 (id=1598): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x120003b) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x40e00, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000300), 0x8281, 0x0) ioctl$auto_PPPIOCATTACH(r1, 0x4004743d, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xe983, 0x80003, 0xeb1, 0xffffffffffffffff, 0x9) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x88b02, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/damon_reclaim/parameters/enabled\x00', 0x1eb842, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x2000000000008000) r2 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r2, 0x0, 0x1) read$auto(0xffffffffffffffff, 0x0, 0x1) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/use-gss-proxy\x00', 0x48041, 0x0) write$auto(r3, 0x0, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/lockd/parameters/nlm_timeout\x00', 0x101042, 0x0) 2m46.330401362s ago: executing program 3 (id=1600): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mincore$auto(0x1000, 0x2, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x16, 0x0, 0x8) bind$auto(0x3, 0x0, 0x6a) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/oss\x00', 0x60c80, 0x0) pread64$auto(r1, &(0x7f0000000540)='veth1\x00\xe0,\x17\xa0\xf7\x89Pl\x84K?\x01\x84\xa1i\xe00\x81p\xa0U \f\xdbP`:\xe2\'\xa7\xbf\xbd\x04\x18\xad\x90I^\x99M\xe0W\x14\x11\xf4\xeb\x90:\v\xc5\x13*\xfe\x90\xb1\xa9O\xa5?\xaa\x8fTi\xd6\x88Q\xda\xca', 0x200000000042, 0x8) sendmsg$auto_NFSD_CMD_VERSION_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x844) socket(0x18, 0x4, 0x4) clock_nanosleep$auto(0x2, 0x6, &(0x7f0000000840)={0x0, 0xc025}, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0x112, 0x80006) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r2 = socket(0x2, 0x1, 0x84) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) getsockopt$auto(r2, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x17d) sendto$auto(0x3, 0x0, 0xfffffffffffffdef, 0x101, 0x0, 0x1c) ioctl$auto(0x3, 0x8902, 0x38) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) 2m45.363690553s ago: executing program 3 (id=1601): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) mbind$auto(0x8, 0x2, 0x7, &(0x7f0000000000), 0x40, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x73, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001380)='/dev/sequencer2\x00', 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) ioctl$auto_SNDCTL_MIDI_INFO(r0, 0xc074510c, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f00000000c0), 0x141401, 0x0) clock_adjtime$auto(0xfffffffffffffffb, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xc004ae02, 0x88) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000008008000) close_range$auto(0x2, 0xa, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r4, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000004100)={0x0, 0x300, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, r5, 0x1, 0x70bd26, 0x65dfdbfc, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x60042, 0x0) openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x202601, 0x0) madvise$auto(0x0, 0x4, 0x3) ioctl$auto_SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000080)={0xdf, 0x8, [0x8]}) 2m45.174482618s ago: executing program 1 (id=1602): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0x4068aea3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) timer_create$auto(0x803, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) memfd_secret$auto(0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x20100, 0x0) preadv2$auto(r2, &(0x7f0000000200)={0x0, 0x80000000009}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0) ioctl$auto(0x3, 0x402c542d, r3) write$auto(0x3, 0x0, 0xfffffdef) socket(0x18, 0x3, 0x3ff) 2m44.1890994s ago: executing program 3 (id=1604): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000004c0)='/Eev/audio1\x00FR\xb9Y\x9d\xc5\xdc\x1a{\xea\x98I\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xb3\xdd\xa7\xee$\x8d\xbc\xe9d\x03\rF\xec\xb8\xb1\xb7|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9aj\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xbf\x19\x90Ou|\x15J%\xd7lD\x97)}\xfaK\xdf>f\x98&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\"\x02\x00\x00\x00\x00\x00\x00\x8a\xf9\x8e5\xc5OG\xef\x8dy\x1dc]\x1f\xb6\xc6!\xa2\xeeNezrO\xbd\xb6\xd3\xe6\x0e\xd0\xa2\xa2(l\xd7\xafaG* \xee \xc8\x0esQ4\x06\xf4N\xf2O\xf5\x91\xe9\x16\x9c\xa9\xc9,+r\x99\x0f\xe3\x16lz,d||\xf8e\xa6s\xf9\x9bs\xa9Am@LNj\xef.c\x06\xc6\xc41\xcc\x04z\x7f\x86\btb\xc5\xc9]t\x10]\xa8k\x84\xe9\x16L\xd2\"O\xc73\xf2\xd0\xa8<\xc0\xcb\xc5\x14\x1e\xda\xd9C\xaa\xc1OTz\rk\x00\x00\x00\x00\x00\x83\x00\x00Tw\x1dZ\x8eic\vB\xd4x\xed\x93', 0x100000a3d8) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r1, 0x8000) keyctl$auto(0x1f, 0x1, 0x0, 0x0, 0x403) madvise$auto(0x2, 0x2003f2, 0x4009) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r5 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r5, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8103cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x200, 0xffffffffffff0005, 0x80000005) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x1a, 0x6, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mq_timedsend$auto(r2, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x7f, 0x3ff, &(0x7f00000002c0)={0x6, 0x81}) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/sunrpc/parameters/tcp_max_slot_table_entries\x00', 0x288b82, 0x0) 2m43.591438501s ago: executing program 1 (id=1607): mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) mmap$auto(0x0, 0x4020009, 0xdc, 0xeb1, 0x401, 0x7ffe) (async) mmap$auto(0x0, 0x4020009, 0xdc, 0xeb1, 0x401, 0x7ffe) r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r0, 0x0, 0x17) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) (async) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xb02, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xb02, 0x0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x1000000, 0x0) mmap$auto(0xff, 0x862, 0xffffffff, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) futex_wait$auto(0x0, 0x0, 0x83, 0xa, 0x0, 0x1) futex_wake$auto(0x0, 0x7, 0xfffffffb, 0x2) (async) futex_wake$auto(0x0, 0x7, 0xfffffffb, 0x2) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) capset$auto(0x0, 0x0) socket(0x200000000000011, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x11, 0x3, @empty}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x11, 0x3, @empty}, 0x6a) io_uring_setup$auto(0xf, &(0x7f00000003c0)={0x1000, 0x2, 0x6, 0x2e, 0x2f6e371f, 0x46, r1, [0x0, 0x100, 0xff], {0x0, 0xd467, 0x1, 0x2, 0x0, 0x9, 0x1, 0x5, 0xfffffffffffffffc}, {0xa, 0xfff, 0x63, 0xca1, 0x9, 0xe, 0x3, 0x3, 0x9}}) syz_clone3(&(0x7f00000002c0)={0x400, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x3}, &(0x7f0000000140)=""/54, 0x36, &(0x7f0000000180)=""/86, &(0x7f0000000200)=[0x0], 0x1}, 0x58) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) (async) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) ioctl$auto_BLKTRACESETUP2(r2, 0xc0481273, &(0x7f0000000340)={"c88e8e76992f088ae5aa6fa4e7be90d4bcd73b01f445abfbabed717cf0a38b0f", 0x1, 0x1ff, 0x7, 0xb626, 0x8, 0xffffffffffffffff}) r5 = getpgrp(r4) getpriority$auto_PRIO_PROCESS(0x0, r5) (async) getpriority$auto_PRIO_PROCESS(0x0, r5) epoll_create$auto(0x8800001) 2m42.305585856s ago: executing program 1 (id=1609): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) timer_create$auto(0x0, 0x0, 0x0) (async) timer_gettime$auto(0x0, 0x0) (async) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sg0\x00', 0x0, 0x0) ioctl$auto_SG_GET_VERSION_NUM2(r0, 0x2282, &(0x7f00000009c0)) 2m42.105528131s ago: executing program 1 (id=1610): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x120003b) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x40e00, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000300), 0x8281, 0x0) ioctl$auto_PPPIOCATTACH(r1, 0x4004743d, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xe983, 0x80003, 0xeb1, 0xffffffffffffffff, 0x9) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x88b02, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/damon_reclaim/parameters/enabled\x00', 0x1eb842, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x2000000000008000) r2 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r2, 0x0, 0x1) read$auto(0xffffffffffffffff, 0x0, 0x1) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/use-gss-proxy\x00', 0x48041, 0x0) write$auto(r3, 0x0, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/lockd/parameters/nlm_timeout\x00', 0x101042, 0x0) 2m40.480638996s ago: executing program 1 (id=1616): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x4100, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYBLOB='v\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x207, 0x4008) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x4}, @NFSD_A_SERVER_SOCK_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x4100, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYBLOB='v\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) socket(0x10, 0x2, 0x0) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x207, 0x4008) (async) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) (async) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x4}, @NFSD_A_SERVER_SOCK_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) (async) 2m28.411597272s ago: executing program 33 (id=1604): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000004c0)='/Eev/audio1\x00FR\xb9Y\x9d\xc5\xdc\x1a{\xea\x98I\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xb3\xdd\xa7\xee$\x8d\xbc\xe9d\x03\rF\xec\xb8\xb1\xb7|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9aj\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xbf\x19\x90Ou|\x15J%\xd7lD\x97)}\xfaK\xdf>f\x98&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\"\x02\x00\x00\x00\x00\x00\x00\x8a\xf9\x8e5\xc5OG\xef\x8dy\x1dc]\x1f\xb6\xc6!\xa2\xeeNezrO\xbd\xb6\xd3\xe6\x0e\xd0\xa2\xa2(l\xd7\xafaG* \xee \xc8\x0esQ4\x06\xf4N\xf2O\xf5\x91\xe9\x16\x9c\xa9\xc9,+r\x99\x0f\xe3\x16lz,d||\xf8e\xa6s\xf9\x9bs\xa9Am@LNj\xef.c\x06\xc6\xc41\xcc\x04z\x7f\x86\btb\xc5\xc9]t\x10]\xa8k\x84\xe9\x16L\xd2\"O\xc73\xf2\xd0\xa8<\xc0\xcb\xc5\x14\x1e\xda\xd9C\xaa\xc1OTz\rk\x00\x00\x00\x00\x00\x83\x00\x00Tw\x1dZ\x8eic\vB\xd4x\xed\x93', 0x100000a3d8) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r1, 0x8000) keyctl$auto(0x1f, 0x1, 0x0, 0x0, 0x403) madvise$auto(0x2, 0x2003f2, 0x4009) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r5 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r5, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8103cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x200, 0xffffffffffff0005, 0x80000005) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x1a, 0x6, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mq_timedsend$auto(r2, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x7f, 0x3ff, &(0x7f00000002c0)={0x6, 0x81}) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/sunrpc/parameters/tcp_max_slot_table_entries\x00', 0x288b82, 0x0) 2m25.293148343s ago: executing program 34 (id=1616): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x4100, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYBLOB='v\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x207, 0x4008) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x4}, @NFSD_A_SERVER_SOCK_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x4100, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYBLOB='v\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) socket(0x10, 0x2, 0x0) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x207, 0x4008) (async) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) (async) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x4}, @NFSD_A_SERVER_SOCK_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) (async) 1m56.662402655s ago: executing program 4 (id=1732): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/current_tracer\x00', 0x0, 0x0) eventfd$auto(0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) inotify_init1$auto(0x3000000000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/neigh/veth1_to_hsr/gc_stale_time\x00', 0x80001, 0x0) socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/arch_status\x00', 0x100382, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/platform/dummy_hcd.6/usb7/bNumConfigurations\x00', 0x80000, 0x0) socket(0xa, 0x2, 0x0) socket(0x2a, 0x2, 0x200) socketpair$auto(0xd, 0x4, 0x2, &(0x7f00000000c0)=0xa) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x40106f52, r0) 1m55.987557525s ago: executing program 4 (id=1735): openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/flags\x00', 0x40400, 0x0) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nbd3/queue/nr_requests\x00', 0x143262, 0x0) statmount$auto(0x0, &(0x7f00000013c0)={0x7, 0x2, 0x6, 0x7, 0x84, 0xfffffffffffffffa, 0x1ffde, 0x820c, 0x6, 0x2, 0x9, 0x2, 0x6, 0x4, 0xfffffffeffffffff, 0xffff, 0x2008000001, 0x10000, 0x80, 0x8, 0x2d7d01bf, 0x7, 0x0, 0x9, 0x4, 0x3, 0x3, 0xff, 0x0, 0x4, 0xffffffe0, [0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x8, 0x3, 0x0, 0x0, 0x80000001, 0xffffffffffffffff, 0x0, 0x80000001, 0xffffffffffffffff, 0x20000000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6, 0x5, 0x7, 0x0, 0x4, 0x8000000000, 0x400000003, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x35, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000]}, 0x1fe, 0x200a) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x8}) ioctl$auto_UI_DEV_CREATE(r1, 0x5501, 0x0) writev$auto(r1, &(0x7f0000000340)={&(0x7f0000000400)="f72fbd1d77630eadb26afd63f866b68f8ccdf27bc54014a6ad0adf484f97130006e26628a752e0fec1837da55c5b260010fbba9535b1467399a4a96e250adcbb9d3fae1abba6e65f9a876e3f5f076c9f1d9634dc00debd4719966762961b38a56541423b6723e1fc41ec7c5c248ac173281d92621c9d334f84505b42acd708d87d80b8f29868e1517ac3539d5720fedd1e4dea3d83369f111790bfbdb2aa610ca6219caae6be2f18ba7d5bd9e6dbef13b380071f3ef7eec740a0a85e15b9", 0x2000000000da7e}, 0x9) setitimer$auto_ITIMER_REAL(0x0, &(0x7f0000000180)={{0x7, 0x6}, {0x51, 0xd8bd}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40089, 0xdc, 0x9b72, 0x7, 0x20000000028000) sysfs$auto(0x2, 0x100000000000038, 0x0) r2 = signalfd$auto(r0, 0x0, 0x27) timer_create$auto(0x3, 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000a40)=""/4096, 0x1000) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) timer_settime$auto(0x0, 0x2, &(0x7f0000000040)={{0x0, 0x403}, {0x1, 0x1}}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) 1m55.378387676s ago: executing program 4 (id=1738): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x3, 0x0, 0xffd8) ioctl$auto_FS_IOC_GETFSUUID(r0, 0x80111500, 0x7) r1 = socket(0x11, 0xa, 0x9) unshare$auto(0x40000080) write$auto(0x3, 0x0, 0x8) openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/setgroups\x00', 0x7f835763b555bbe0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xa) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0xe187) write$auto(r1, &(0x7f0000000480)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\x0f\x97\xa1\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd3lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\xfa\v?\\#\xfc\x15-\xbc\xcd$\x83\xcf\xc5D\xcc', 0xc8) socket(0x1f, 0x1, 0x8) keyctl$auto(0x23, 0x1, 0x6, 0x3, 0x9) prctl$auto(0x1000000003b, 0x80001, 0x0, 0x200000005, 0x100000000000007) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000) 1m53.766108944s ago: executing program 4 (id=1742): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) (async) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) (async) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) (async) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) (async) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00ab29dc931f0e02b7745be74fb8e8255f614f85f94bc5ef8facda4b1cb3e135ef23203752a9a06f5adc02fe10fd6059eb5ec860fbb39453d7ba92bd5a73e0e45ce2d585cccf203901d41ed36536bffcadc5fa27dbe72d209b4c922ee03aba35fb65731b21d405c9def0a3765c9b0ff8fbbff63336633bec215ead541e5766cb7e6a546c58ddbc3cbd", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x91}, 0x10) (async) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, 0x0) (async) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x6) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async) readv$auto(0xffffffffffffffff, 0x0, 0x8) (async) close_range$auto(0x2, 0x8, 0x0) (async) mlockall$auto(0x7) mprotect$auto(0x0, 0x806121, 0x6) (async) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) 1m52.665596915s ago: executing program 4 (id=1748): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) write$auto(r0, 0x0, 0x2) getrlimit$auto(0x3, 0x0) fdatasync$auto(r0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, &(0x7f0000000140)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) socket(0x18, 0x3, 0x0) accept$auto(0x3, 0x0, 0x0) capget$auto(0x0, 0xfffffffffffffffe) 1m49.296491951s ago: executing program 4 (id=1760): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x9000) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x40000000000008, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x20000008000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x4, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2428c0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000180)=""/147, 0x93) close_range$auto(0x2, 0x8, 0x0) r3 = ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, 0x0) socket(0x10, 0x2, 0xc) bind$auto(r3, &(0x7f0000000000)=@generic={0xb, "a500acb75c9c00d1b5e9a0146293"}, 0xb) r4 = pidfd_open$auto(0x1, 0x0) setns(r4, 0x60020000) umount2$auto(&(0x7f0000000000)='.\x00', 0x3) close_range$auto(r1, r1, 0x2) 1m34.207762954s ago: executing program 35 (id=1760): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x9000) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x40000000000008, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x20000008000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x4, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2428c0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000180)=""/147, 0x93) close_range$auto(0x2, 0x8, 0x0) r3 = ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, 0x0) socket(0x10, 0x2, 0xc) bind$auto(r3, &(0x7f0000000000)=@generic={0xb, "a500acb75c9c00d1b5e9a0146293"}, 0xb) r4 = pidfd_open$auto(0x1, 0x0) setns(r4, 0x60020000) umount2$auto(&(0x7f0000000000)='.\x00', 0x3) close_range$auto(r1, r1, 0x2) 53.347475869s ago: executing program 6 (id=1932): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x7ff) ptrace$auto_PTRACE_SET_SYSCALL_USER_DISPATCH_CONFIG(0x4210, r0, 0x80000001, 0x9) 53.11393783s ago: executing program 6 (id=1933): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x5c, 0xdf, 0xeb1, 0x401, 0x100000000008000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = socket(0xa, 0x801, 0x84) r2 = getpid() readv$auto(r1, &(0x7f0000000080)={&(0x7f0000000180)="c386b1d4b0008597bfc01cc8e2ee2716e996b6429ac43bbad1a4bb8452302a591b85e4567bce5edf6a2cf95e2bdd6c9e88899d1a66c7dc99ce09333f35024067315f5e3c8b0c2b15934df2a4b85f1e538430e32a9d1a2adc94a999924ab3cffe4e0027ae3df6effbc4df4b9748550eb2437d2bae7e5a69dbdfb8a90a5a2e6d677ab6ab0b8490a6fcaf7c052ae8d61134936027cb64a629c2519413ef54cdacdec82d2ca9f70ee922859f037d44bbaf3f2d6a1af34296a514c6922eb04a476bf204398b67a858ed2fa803a621f218e8b7b7790cabb16775c330b50c121806c2356e", 0x100000000}, 0xf68) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) setsockopt$auto(r1, 0x10000000084, 0x9, 0x0, 0x9c) getsockopt$auto_SO_PASSCRED(r1, 0x800, 0x10, &(0x7f0000000e40)='\x00', &(0x7f0000000e80)=0x4) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r0, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), r1) sendmsg$auto_NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000e00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000340)={0xa58, r3, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_IE_ASSOC_RESP={0x80d, 0x80, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x233, 0x80, "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"}]}, 0xa58}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/zram0/io_stat\x00', 0xe80, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001280)=""/4124, 0x101c) 52.682161289s ago: executing program 6 (id=1934): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/net/snmp6\x00', 0x80, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000380)=""/80, 0x50) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0xffffffffffffffff, 0x0, 0xa) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000480)="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", 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x401, 0x800000000000001, 0x0, 0x5, 0xffffffffffffffff) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x4802, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/fail_futex/ignore-private\x00', 0x101202, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) write$auto(0x3, 0x0, 0xfdef) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) mmap$auto(0x0, 0x2020009, 0xffff, 0xeb1, r1, 0x7ff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x20100, 0x0) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@phonet={0x23, 0x8, 0x71, 0x3}, 0x50) 51.5520634s ago: executing program 6 (id=1941): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = prctl$auto(0x39, 0x1000002, 0x4, 0x1, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyd4\x00', 0x2800, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) bpf$auto(0x0, 0x0, 0x6f4) arch_prctl$auto_ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0xfffffffffffffff7) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x8, 0xe4) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x2, 0x1) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xffeb, 0xe, &(0x7f0000000100)=@in={0x2, 0x4e22, @multicast2}, 0x19) ioctl$auto_TIOCGDEV2(r2, 0x5429, 0x0) pwritev2$auto(r1, &(0x7f0000000000)={&(0x7f0000000080)="0d768ec62c25347193e4b6cf0d44df3db2daf9756e732b5a72ee84e3018ad9dd79696e9b92ab00c035b36e27be942a2b799cc1cf5545d6937b7bc94c1954d417fd695a7b59"}, 0xa, 0x6, 0x8, 0x1000) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), r0) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x6, 0x0) r6 = waitid$auto_P_ALL(0x0, 0xfffffff8, &(0x7f0000000200)={@_si_pad}, 0x0, &(0x7f0000000280)={{0xd, 0x1}, {0x101, 0x1}, 0xffffffff, 0xffffffffffffff42, 0x4c0, 0x6, 0x36, 0x100, 0x2, 0x26e6, 0xfffffffffffffffb, 0x10, 0x1, 0x81, 0x40, 0x3}) sendmsg$auto_NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000001600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="70120000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="38ab66f72d7b0f7bb4acff578937245a488b92f0725ad4096908dab693d4d212c03dfac74273fc867a2b18baa82bf917833397800e5561512ca9a53c9fbe16f3d71678745d074c992a76134cc539f5114d53227ba85e2648e2bff0900741a33468d9edf453a48eb3825206b53d51d87b674d7f96c20b24276c9ab1ef7c3d848e1afd307da98e2fd724002d8826dcfbdd2fd573037391255294ef4267cc29240991dad658e22aa6605d8bd031a488bc8c0c9391c79de50a201bd74c3596995b8298b0a96fc6a27ad63a60421226605374399bc17d293252e314e65e4d347f14137b38373ba57ba11ab3d19cf7a9941adb85344acb1f72c012adb45d3a50a265e67e407dbcf42f027b69d1fcdb5197dc3d4721a4dbc72fe725da61feec738fafee9e925035eb7c145f06f4679f43fe16c6b77fdc66f6e214b5e30626e209dc601538c9d7db5d470d47045949198454bda697fc9714c6c5af291e48869275bf8992cfd3781159a3a2ab6d574f2a0a9ba71b7fdf1abbd1c24a3f92311633604c5783bb02c049624c9d293e6bfa40c7a1cd602ba6656e4b1fc80a76ec0a676f94517bf6414ad2e8fd9a7b9f0289b1665a9b3d6bed8767a930d38f0c3a6e8ded998b6e6b39d4f86cc32b9da03952ab090fbf11f2f8c171251e1fffd0d70113c780e3c8520ea99dd5e6b65c36f5f333cde441e936ff2020f8d2bfa4bb61b7719f82438dbaac337c4fce5cb39678f0f45187af87e97b046f021dfb99d2472d81bd368ce8fdf91ccb590890e0ac5836d928eacb05d9b5826644f074ae45e313badc45ea09158ab591eac3a0e4a7e0da1fd345b4b9186564e6761822c09f3071fc118b1cf552fef4c48fd64163d61ea010c99919d11d61c3ea6c2ead0bb3480de3feddad685979a65c2ecd48c56babebbf5f5a64dab65282ce9ec39ecad2e3a89affde94a576a31bc37697b9f3818938d0a065a69ecf18bdf2300f467c3a8f9291f3098f031759e1db0b38e355e212f0acdfc614f3bbeacf960490ea97375228cfe98e9dda0f23756b0055f544fffe6028efc35e129ec5121d2efb384a4b785dbf5cf2edd2c40c58034b9f331c2f8b925bf95b0e50214c73d06259ee778be3ae878eac09483792eacb117cf336f9145954e210aac584bf7645fdaceba5c60aa66b593dfe473e10f028e2e50b277fe1dbbc4ff6216f3d6056d403aad54d98051a2ac1392b33fa9522591578938b929c0bc294eec86417f6d9bbf476fc1cc4d40b14a07988b8646e97af67818db3ff1ae851e114a364e735df9d3f42822bcb918df49bbf709ca48e2edf15ac0ba2231cfd2deebc842ca20eb7e28925c1d83c071cad8f2af77572472a1796d2bab4d38ab99d2c9a250ee23114b39e56777687f94551f93749cff57b3432e3a2b929033292f070b6eec8807491c18bc85f6c300a65d0bc413e5453e998fb1bc876d74dd52ac31af73059bf4c7401341e2e3f579e197ff485c97a89f644df948df68fb1de8eb7964dbdfb41f90410e9317bc30efb2721d4c5d9fdd42d5c4c2cb408219bb93d734f9a2634465e31e9fba18ac68837537a3e9384db1c71dca6a2605e6cc589fa6bb171c014affe042577111166d2c01dc8f820d7c55d33c233c38557a874fbae33fe6b7f616ee7d5dba0db2fd39713d5c497cc1db8ef9cc6c961df262a0ba6b06139507988020974a4f8386dabd394190fb80bb2d62a96d346b8ca8897f6dc17e647a8fb15d63632964543de6efce16db77ad9037e88888e4380e61ce22272b8a4ac5d110021784ad2f6816c8c0cabcc92ce055c656c9b38085844bce1f568da063563df0d6d11dcc90b6144b167e0671dcda9fa47b2a128803917731152484bf84508798565588c49707f252ee1d9ad78463427cc1eb7640465df757ac16f2317e432d778c3e64a8a4765ff549af8799a663d6ceb419e627c882ebeb9521b924cd54ce3a5278f423fff91d8e94f73108817bbb9f7a69ac916a26a480b7a2c14ffd9a3e55b84d479bfdfaf2a1eb21b660770fcb3bd725e0fb7c1ab03afb572cf25bbb83c5b184670ca74372dbf2f26d0719a6584731d25638a1c8bc4ff47de57adfd806fcacc0352c8bdb4e64d6c01f0b75fd06160836ee59a18d3f7de89e4334fcb1e3eeab36826ce860212e873af6753641cfab68e4f57607e02248fa90ad8bb4f5231fe74237ec12d191df8e8121669302cd852559728729cc515183b217e93b8f3b8dd79c754c6d7b18efb0a979944308fd86e01998b70eb2aa8296074c91e2f35fda841b078efcdc54ba685273fe05823872b625be26553be3d4c2ac4bb939196962c37b6a0969ab76e16586b9b87d29fc66d9b6c6fd6cdf62089c8de2ba7d5d5b7fbf0aaaab3471e2d5607a24de9c5b3a0ba89e121a674e8d0c5d8f08fb6a19731f91ca3480b594b728be608ec0eb83f9458ccf5ec132ad2a3f348299182e25b793372224ada9b2ef196c065a750ced546cdfe8e36164d145c5b481a35ef23de31cf475849857648a68ef15ea9ca1ce9d72d877a3287aead2c1e8e2411a0a4dda5fcbf02f44f99ebadf724c31991c602295c95476a368bb5b113d500f85e122c42af88872e6db57a3412faa8d9f86dbb714166080ad5adf393b06dc23c45a2418ffae64c6b81f158b7b5d52d0798248b9b694479b8d13389a6410e5f2d75433831f43c3e24edc7986fa42d91e1893d8cde48ce5f36daad0ec8c05ea364e1904b252bc628b6e056f3240262765672dbfda1d6b255af1093bd99efc52bba321c9c2c64a0d46b680b733d6abe518af5f30e8273987e1fd03a1705c4a77955c15b9ce4bce80f34eba502bcf36758b1a93e9c5320cd3b38ec44e33a6cc3d56581f3b431cba1784e16c578320f76af21a6ecd69ca42e57100b3179f75b00c18364835844f074f745a6bedb6c5c445f95ac052850c321228d10db5debf5d57c70171235ccf65fe71027eb72031d15c6b7572e738cc51d6d224640ad58bdf62ef7a517aba525a98cd691d7bfdb0760d416a1629cf71d493eadea8315e760bfaee856ea56890f8cc23be6ea51828f5325c85ea21c8b878b64b0c1b2dcb1aac6ab249a7cf669581023260d8b3c09d258f8e8947068b926c55198a10afe1c85772c9486a8d8a5e2872b447cd6de631e17050c1356a3c88ebf823abf2748c0672f79e51c8c893bba293814b987a82e5e30420027612109802857e501e2c58b84d29200877ef59844ca78ef800b723a410f10bf2a34946ebaacc21ec3ff963e0aff0566c33d1ed0b84876636956a305de64eccf3ca317b110e5600b6f7862ceb485d6e178077f5bc2e56cfc283fccf4ac5a7dcc3eec5803ca8596fd5e3c47cd4b384bb6db366043d41e67f3988ee73b491ca0f8138eeed92da0dc14843e04de692b7175ba7e0799b7203d8d46d6310c0c23d93faf5914b21e56f7f8c79b9b65588f4b84da8be4cb130fbad2663be6eeab539fa39255ee38cf601bf8d4001fec7695953d8ad60062a07231d38afac1b3f1b37ec4b9114341ea5c3ffc78067d20727d457a4f4b879704cce46f015796ededf8110323a86ad2091a5f13c2c84f698c0294239172864dd0a8de383cf506c8eefa2905db8520cb4b997a88823ea461ff6dc942dbc761f80e8f182b29363c01fc5c8afb59d1c091683667479d815c68ac57b9ae2ad988d3991f1a4cb0723455350d377f20155b9f29fe1e59410c7939b781c0fec0f21e23a542d4acc3d66f5744fb5af1a2b1d204722c2e72241186423b0aa0047b6cd2de4d24e582d260aa6022c8c11e7ae3cfcabbd9ad4e69a3c227e28894f051e5250a1206671fe3399fb97a1e47a3b24e18a9e9813101121393a4e5d94a44bb3efb13e15c36acd094db274d4bab36a027ce1dacde201b569fe122739f9cd5af0f9a52ceac9725e6c9890c749845a31c6cd70f23697da522de0841b3981cab801912c2e32d406d9ffed122c184ea2994f92cac13214180423a118c3f1b8eafadb42b025376def65f61a1c2790479dc987f8fefb891cad75371f6a3307641a687e30d7abba14b21ce46afba98ef58e1104ce309fbf1051c2e76feb928c80dbffe15ad9f6aa1ee9f64b346bb48c741ea335560d9cf686097ab59157a574a611d2ec1818b4ce98f98c9c71765a628dadca8931ee3c4ae3055fb342f5ee6f8aa3a26fa3f92b027d6d68e36976f815f55d3dda9e8f08fa804c55b2b07eaf1c6d423d91292ecc85074c990f94fddc085d25ed2a91728b4be70bbead4724553bfc066b4a7c0853eea6c66f288acee464cdf4b2ec3c2b9a9c6a55ec1822ee19cbf1c202f0038ea1edd3ce3e109ccb494523caf016e51e222fe25146dbfeb47b756c27500945ccd1f44f4cb7a04ee033fbedf48c0f0f6155f927256fddc811440be7ec928201794bc9d01cb2ee95ee49b417a644ff2b617941ab40de91eaf3cbc2d12e954969ab3b2da294111353fedb351cde9441ee1f938e42970dd08154628120a1cb2944e6f68e7938acde85a11d6e145bbefef52eac1b4312c19252fc3bd60d705b53166b702defae1c7308a656c1e78ca5081996890ce8017e2086f4ef1425e15c5fbcd8d336355c79bcb824be64bb777d5ac170518f6c399db163c8ae8608a4ecba587654d9940421b9535940d14dd3b4983727b5fec39d509b5af8f77da3c303054ced4bf10e58897603ca900e463ce6f47aa216c4fdf4ff774adb28edf97f7edfd82333e59abf6a949e63893638d639cceb209ac40604b6b5c2661a3db948f575b42c5c1f6b8592086e8f5ac85629b35ff2f3bfe394224aa372a127cb8ecfa7e62b59944d587540cba4171c1a757a6e38043add5f35a6c7c23c17e0842007b9d7021346f16db88d17fcb8e4aa2eea39c4184060132bfe7fcc48b8b881788cc9efc690d8b0cd6ff72c9e0c8b21541e751993b62a908fb2957c6e9b22d79de76e0fe2003097e6de4ca29c3b716322c916a26d49df594fa0121b045da954869e638573764eea88e8c60f27be3b3c23d33e1e9884c137eee3b774af41c8db84f0435881522a335c2c70ba12431eeccad1ada19455e7dc3d541b49e4b2d6fd5073de101337272e1196f4946526e37603d69a1052636f1ae1496ca1b8f39f753c9410a5d54f1f318a652d3174a6dad8227c3521914ec8b66547adc4f6885b5c8a6919b6dea4e183a1d232d76ebbf64b967ee68cf44d8986aeaf513f702f8c8841c573b404e63f2c9bfd5706a26013de78ac16b948580c7e26dd86553930b4cc96b17c4b3d640a402feedd05ba826cc027cd8bf5513fe28401abf1e22059cf5c5ff957dec4ced3cd34a0d5e96b39c04fb622395c1f759e733ef4beddf6fecc9214fdf26b8963d85891ec8e97cc21bbcda0358d58b41f9181fd4a8b290b638448ac7f26447a18b2a0e5fb66c02af603a05829f85cef1a6f0234da5cf7bf015734de17315a8a779c1d38b710c37ea3279274cdceaf8064c69357af58586d13acec2af090e286a74cf32f1302b00af9d4ed58f13c57cd9b3dd2deeb00782a6c248e9b2581721eed4fc70efecdb18f96869199715d8458f569df78a1498db28799efbb055ebea0382314460933ff930965c55e7b925ed49faa352152a3297cbc9dcd177e21cae594677803b8d5f4d493f91ae64a117f4eed47ae626a825fb6d25dfb9fcfa3a74ef58d4b094267a5f94c6434d6ce216c19a21e1973fc6302015bcdf04770093b7f6666fc2bbc1cab86dba8fb8c4eb20aabf977044701b8c75074b3344a7a2553f98cc06ee1f47719259684e8571198c9fa94a930800fa00", @ANYRES32=r6, @ANYBLOB="2000fa8008005000", @ANYRES32=r0, @ANYBLOB="040047800c006900060000000000000004005c8020000b8004009b005dc4ba83fad0899ef6eb639a6f324176359cd44d04001e8005001a0003000000"], 0x1270}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000140), r0) 49.551037347s ago: executing program 6 (id=1948): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ustat$auto(0x801, 0x0) r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000440), 0x20201, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0x10}, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) ioctl$auto_I2C_RDWR(r0, 0x707, &(0x7f0000000180)) (fail_nth: 1) 48.20509053s ago: executing program 6 (id=1953): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x1c}}, 0x4000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xff, 0x2, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0x0) r3 = socket(0x2, 0x1, 0x0) connect$auto(r3, 0x0, 0x0) r4 = socket(0xa, 0x5, 0x0) r5 = getsockopt$auto(r4, 0x84, 0x2, 0x0, &(0x7f0000000080)=0x9c8) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f00000000c0), r4) ioctl$auto_XFS_IOC_SWAPEXT(r5, 0xc0c0586d, &(0x7f0000000100)={0xfc9, @raw=0xfe1d, @inferred=r5, 0x8, 0x5, '\x00', {0x0, 0x0, 0xcb1f, 0xee01, 0xee00, 0x100, 0x6, 0x2, {0x0, 0x9}, {0xfff, 0x9}, {0x101, 0x8}, 0x100, 0x7, 0x0, 0xf, 0xf69, 0x9e0a, 0x3c0d, 0x80, 0x4, 0x5, '\x00', 0x3, 0x0, 0x3, 0xe}}) r6 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x20100, 0x0) ioctl$auto(r6, 0x64c5, r6) openat$auto_fops_x16_ro_(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/x86/boot_params/version\x00', 0x800, 0x0) r7 = setfsuid$auto(0xee00) r8 = setfsuid$auto(0xee01) setresuid$auto(r7, r8, r7) semctl$auto(0xf, 0x0, 0x3, 0x4) fcntl$auto_F_WRLCK(r0, 0x0, 0x1) r9 = getpid() process_vm_readv$auto(r9, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, 0x0, 0x6, 0x0) rename$auto(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') 33.026901312s ago: executing program 36 (id=1953): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x1c}}, 0x4000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xff, 0x2, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0x0) r3 = socket(0x2, 0x1, 0x0) connect$auto(r3, 0x0, 0x0) r4 = socket(0xa, 0x5, 0x0) r5 = getsockopt$auto(r4, 0x84, 0x2, 0x0, &(0x7f0000000080)=0x9c8) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f00000000c0), r4) ioctl$auto_XFS_IOC_SWAPEXT(r5, 0xc0c0586d, &(0x7f0000000100)={0xfc9, @raw=0xfe1d, @inferred=r5, 0x8, 0x5, '\x00', {0x0, 0x0, 0xcb1f, 0xee01, 0xee00, 0x100, 0x6, 0x2, {0x0, 0x9}, {0xfff, 0x9}, {0x101, 0x8}, 0x100, 0x7, 0x0, 0xf, 0xf69, 0x9e0a, 0x3c0d, 0x80, 0x4, 0x5, '\x00', 0x3, 0x0, 0x3, 0xe}}) r6 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x20100, 0x0) ioctl$auto(r6, 0x64c5, r6) openat$auto_fops_x16_ro_(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/x86/boot_params/version\x00', 0x800, 0x0) r7 = setfsuid$auto(0xee00) r8 = setfsuid$auto(0xee01) setresuid$auto(r7, r8, r7) semctl$auto(0xf, 0x0, 0x3, 0x4) fcntl$auto_F_WRLCK(r0, 0x0, 0x1) r9 = getpid() process_vm_readv$auto(r9, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, 0x0, 0x6, 0x0) rename$auto(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') 18.49646959s ago: executing program 5 (id=2059): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000001340)='/dev/loop6\x00', 0x4000, 0x0) ioctl$auto_BLKRRPART(r0, 0x125f, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6a) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x1f4, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x14) sendmsg$auto_CGROUPSTATS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="250025bd7000fedbdf2504000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c9d0}, 0x4080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="7201000032b32c9c233859beae15823f7a61cf84e875facfbe27c7016e6d7588b0b3b4a11f8885ec85fd6ec5f8cac71da0c44783ef3b2146e29df008566532b179f897a8821e2ba2fbba9ee694d15d4fb0cda577e9de52117a411cd9db9d92c873505b52f45f883c9ed95e00f6c97ec52faa7dcb3a13ae8a4c79637aadbeb51a1494141dfd26beaa2e6262ec8cc0dd6ba689653ad6af4c3a878fe0035e627afbb54500934c728f3e80030aa65a9b4f738f4dd64f88af56db53acc3a298b29bd7c6e872d4a980d08004"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000ffdbdf2505000000050007000500000019000180"], 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x24000802) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0x2}, 0x6, 0x0, 0x5, 0x7}, 0x8}, 0x5, 0xb02) 18.005388293s ago: executing program 5 (id=2061): r0 = socket(0xa, 0x2, 0x73) sendto$auto(r0, 0x0, 0x402, 0x436, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r1, 0x1269, 0x0) 17.668981109s ago: executing program 5 (id=2062): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x7ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r3, 0x1, 0x70bd2d, 0x25dfdbf6, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3b}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x11e789c}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) r4 = openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x10203, 0x0) sendmsg$auto_L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'ipvlan0\x00'}, @L2TP_ATTR_FD={0x8, 0x17, r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20}, 0x4094) ptrace$auto_PTRACE_SET_SYSCALL_USER_DISPATCH_CONFIG(0x4210, r0, 0x80000001, 0x9) 16.5440116s ago: executing program 5 (id=2066): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0xffffffffffffffff, 0x10008000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) r0 = socket(0x2, 0xa, 0x1) r1 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r0, 0x10000}, 0x10) mmap$auto(0x0, 0x2009, 0xfffffffffffffff9, 0x8000200008011, r1, 0x8000) mmap$auto(0x0, 0x10, 0xdf, 0xeb2, 0xffffffffffffffff, 0x8000) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/fs/cifs/cifsFYI\x00', 0x88400, 0x0) (async) socket(0x2, 0x1, 0x0) (async) read$auto(0x3, 0x0, 0x8080) 16.276546848s ago: executing program 5 (id=2068): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0xe, r0, 0x1000000004, 0x7ff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/pcie_aspm/parameters/policy\x00', 0x80000, 0x0) socket(0x15, 0x5, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x18) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000004c0)=""/206, 0xce) mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103) open(&(0x7f0000000280)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00', 0x20102, 0x100) r2 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0x301000, 0x0) socket(0x22, 0x3, 0x0) ioctl$auto(r3, 0x40104d01, r3) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) pwrite64$auto(r2, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r4, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) pread64$auto(r4, 0x0, 0x7ff, 0xd) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/ram4/queue/nr_zones\x00', 0x17003, 0x0) 15.499709774s ago: executing program 5 (id=2073): mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) setfsuid$auto(0xee00) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r1, 0x1, 0x70bd21, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x20008050) mremap$auto(0x0, 0x7, 0x8000000000000000, 0x3, 0x200000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setfsuid$auto(0xee00) (async) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) (async) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r1, 0x1, 0x70bd21, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x20008050) (async) mremap$auto(0x0, 0x7, 0x8000000000000000, 0x3, 0x200000) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async) 10.478348725s ago: executing program 0 (id=2092): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x5c, 0xdf, 0xeb1, 0x401, 0x100000000008000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = socket(0xa, 0x801, 0x84) r2 = getpid() readv$auto(r1, &(0x7f0000000080)={&(0x7f0000000180)="c386b1d4b0008597bfc01cc8e2ee2716e996b6429ac43bbad1a4bb8452302a591b85e4567bce5edf6a2cf95e2bdd6c9e88899d1a66c7dc99ce09333f35024067315f5e3c8b0c2b15934df2a4b85f1e538430e32a9d1a2adc94a999924ab3cffe4e0027ae3df6effbc4df4b9748550eb2437d2bae7e5a69dbdfb8a90a5a2e6d677ab6ab0b8490a6fcaf7c052ae8d61134936027cb64a629c2519413ef54cdacdec82d2ca9f70ee922859f037d44bbaf3f2d6a1af34296a514c6922eb04a476bf204398b67a858ed2fa803a621f218e8b7b7790cabb16775c330b50c121806c2356e", 0x100000000}, 0xf68) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) getsockopt$auto_SO_PASSCRED(r1, 0x800, 0x10, &(0x7f0000000e40)='\x00', &(0x7f0000000e80)=0x4) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r0, 0x0) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x18000) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), r1) sendmsg$auto_NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000e00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000340)={0xa58, r3, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_IE_ASSOC_RESP={0x80d, 0x80, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x233, 0x80, "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"}]}, 0xa58}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/zram0/io_stat\x00', 0xe80, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001280)=""/4124, 0x101c) 9.992158987s ago: executing program 0 (id=2093): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ustat$auto(0x801, 0x0) r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000440), 0x20201, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0x10}, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bpf$auto_BPF_LINK_UPDATE(0x26, &(0x7f0000000180)=@iter_create={0xffffffffffffffff, 0x2}, 0x3fd) ioctl$auto_I2C_RDWR(r0, 0x707, &(0x7f0000000180)) 9.860809488s ago: executing program 0 (id=2094): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/timer_source\x00', 0x8002, 0x0) write$auto(r0, 0x0, 0x200c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mmap$auto(0x0, 0x20009, 0x4, 0xeb1, 0x405, 0x8000) sendmsg$auto_NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_FTM_RESPONDER={0xc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x8, 0x2, "141dbb9d"}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4040000) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snd/controlC0\x00', 0x80, 0x0) socket(0x2d, 0x2, 0x0) getsockopt$auto(0x3, 0x11d, 0xb, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0xa, 0x801, 0x106) r4 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000080), r3) sendmsg$auto_OVS_VPORT_CMD_SET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@OVS_VPORT_ATTR_NAME={0xb, 0x3, '+!-)/(\x00'}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x49e9a23e}, @OVS_VPORT_ATTR_STATS={0x44, 0x6, {0x9, 0x1, 0x5, 0x1, 0x4e6, 0x4aed, 0x1, 0x4}}]}, 0x6c}, 0x1, 0x0, 0x0, 0xe240af5c317cc3cf}, 0x20040040) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000700)={{@raw=0xb, 0x7f, 0x2, 0x406, "26cb83211ffd7f6567850e138dd717bfeb7ab5c5a4909ab7e79491c86f8c5d7d57cdda7ca056a2a31e5dfe27"}, 0x0, @integer64=@value_ptr=&(0x7f0000000000)=0x6815, "1cd4f43065c34bdcb5fa6160f24c5f3eb5328361438ff4cd82ad2e9771421debdad4d39a52fc70b9012aff448a8b4a75e7c5126dc19ba1ad1e6542790700000044b0d756001b66abab0c0fd3b4287befd247e5410bef4c186120b5bed4ab64ffeb4b7c5a69166021a8814332515a65fe9300"}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fcdbdf25030000000800030000020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a000500c862a41184f600000a00010000000000000000000a00010070b28a70c5dc0000080004000300000006000700ff"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(r5, &(0x7f0000000080)={{0x0, 0x5, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x10000) close_range$auto(0x2, 0xa, 0x0) r6 = timerfd_create$auto(0x8, 0x800) r7 = bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x1007ff, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940800002000076cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x18, &(0x7f0000000380)=@bpf_attr_11={0x0, 0x9, 0x866b, 0x100005, 0x80000009, 0xfffffe01, 0xe6d9, r7}, 0x92) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r7) sendmsg$auto_NL80211_CMD_GET_WOWLAN(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xfffffffffffffe60, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYRES32=r6, @ANYRES16=r8, @ANYBLOB="00012bbd7000fedbdf2549000000040034013a00800076c7d42bb3e8a3b0f58df9651061b494963d6cee076bb24cfa37a7dec9743400a327d78658d8908846faa4ab4862025e3d6916e746840000"], 0x54}, 0x1, 0x0, 0x0, 0x51}, 0x4000040) r9 = gettid() rt_sigqueueinfo$auto(r9, 0xe, &(0x7f0000000000)={@siginfo_0_0={0x76bb, 0x3, 0x4, @_sigfault={0x0}}}) sendmsg$auto_NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x2e0, r8, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x7d, 0x0, 0x1, [@typed={0x8, 0x136, 0x0, 0x0, @uid=0xffffffffffffffff}]}, @NL80211_ATTR_EMA_RNR_ELEMS={0x10, 0x145, 0x0, 0x1, [@typed={0x4, 0xf}, @typed={0x8, 0x153, 0x0, 0x0, @pid=r9}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b171a2282b77c63bb2c3d9406a40766e9d6af93ddef1a201"}, @NL80211_ATTR_SPLIT_WIPHY_DUMP={0x4}, @NL80211_ATTR_MAC_ADDRS={0x282, 0xa6, 0x0, 0x1, [@typed={0x5, 0x2b, 0x0, 0x0, @str='\x00'}, @nested={0x175, 0x9, 0x0, 0x1, [@nested={0x4, 0x13c}, @nested={0x4, 0x125}, @generic="150dbf4040fe48887d96b892f0333c3a68047cc18d2b15f46e3ad15c565b880e48c68541b8cc644e3e07729caab93101e9376b497201218397112b2c58e2ed4c076f4dadf927aad94de53f71073df96667d584ea8d72a6aca7013290ff4346d58bd3abc8ed3043e3161e63286ed57c4623cdf024fda0c31e3f76c2bfddf47c3f33c285e05abcaba15e4d9b05df948d92800113128828164f30e601ba732ff648f9fe2474e56570fca99975a9750349de6eb82e87ab4ae40572df52d77edf9ca58669d3796cb74829de77d7c73983c34b26c93998b173ebf32f8815d3af6621624c58cf", @nested={0x4, 0xf0}, @nested={0x4, 0xe7}, @nested={0x4, 0x42}, @nested={0x4, 0x2f}, @typed={0x8, 0x77, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="aa1e1dcc13b9c444ca31084d2e25bf95cf0f98ad3ebdea11a4705106dde151ccfaff88c53c43ccf0eac02ca7721f16ea604c64023731e3b96422fbf88e6857e85ccae1d1023461ccf6c8e6435167ad44753fe6f73a43e946b43cb9638bd3681d59636f718f235c044f03", @nested={0x4, 0x42}]}, @generic="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"]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_ASSOC_MLD_EXT_CAPA_OPS={0x6, 0x151, 0x8}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x18}, 0x4014) 8.855524289s ago: executing program 0 (id=2106): socket(0xa, 0x2, 0x0) r0 = pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x0, 0x4, 0x0, 0x0, 0x0, 0x400000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) syz_genetlink_get_family_id$auto_smbd_genl(0x0, 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(0xffffffffffffffff, 0x0, 0x30004850) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$auto(r2, 0x4b47, 0x1) newfstatat$auto(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000180)={0xcf68, 0x7, 0x6, 0x0, 0xee00, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x1f, 0x7d, 0x0, 0x1, 0x1, 0xfffffffffffffff9, 0xffffffffffff7fff, 0x1000}, 0x8) msgctl$auto(0x4, 0x10000, &(0x7f00000002c0)={{0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x1, 0x4}, &(0x7f0000000240)=0x9, &(0x7f0000000280), 0x25, 0x553, 0x9, 0xf41, 0x2, 0xffff, 0x6, 0x3, @raw=0xe, @raw=0x59}) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x20000008000) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x40802, 0x0) read$auto(r3, 0x0, 0xb4d3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xe0301, 0x0) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r4, 0x4b72, r5) mmap$auto(0x0, 0x404008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_SMC_PNETID_DEL(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d80000", @ANYRES16, @ANYBLOB="000227bd7000fbdbdf2503000000a70001002f4565762f617564696f31005649a3aab13b9d4ac6c027db56d4eec2dda7ee248dc4e964030d46ecb8b15a7cff47509729cf07fb5c6e89433a84441d75b49a62cea774551477b4141d559d8ba45595332e4fab22348abb5938405a3560a46dff6217bb7fea342aa4f4b490c0bfd46dbfc715be0198d76c4497297dfa4bdf3e66b82695392d0acc5777e29c4b0c4507cad336e8cb3f28fa49e2ae2c956b3883cfc544cc000c000200253a5ec62d3a7c0005000400a40000000500040009000000"], 0xd8}}, 0x4) 7.800573185s ago: executing program 0 (id=2100): r0 = socket(0x15, 0x5, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) getsockname$auto(r0, &(0x7f00000001c0)=@generic={0x2c, "3abc673d7096599026c2ac4ac577"}, &(0x7f0000000200)=0x82) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) (async) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) (async) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) 7.573193061s ago: executing program 0 (id=2101): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x200000000008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) (async) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) (async) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20044010}, 0x44800) close_range$auto(0x2, 0x8, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x200, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x82942, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x0, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8a82b6a56f1ab70a, 0x0) (async) sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x341c03, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, r0) (async) sendmsg$auto_IEEE802154_ADD_IFACE(r0, &(0x7f0000000040)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040040}, 0x2c090) (async) write$auto(0xffffffffffffffff, 0x0, 0x9) read$auto(r2, 0x0, 0x20) (async) writev$auto(r1, 0x0, 0x3) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, 0x0, 0x861c2, 0x0) (async) write$auto(0x3, 0x0, 0x7) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101200, 0x0) (async) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/013/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000100)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000040), 0xc694, 0x3, 0x80005, @stream_id=0x80000001, 0x2004b, 0xc, 0x0}) (async) setsockopt$auto(0x3, 0x1, 0x5, 0x0, 0x9) 3.969676785s ago: executing program 8 (id=2116): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x3, 0x3, 0x9b72, 0x7, 0x28000) r1 = io_uring_setup$auto(0x6, 0x0) r2 = socket(0x2, 0x801, 0x106) setsockopt$auto(r1, 0x6, 0x19, 0x0, 0x7) select$auto(0x5, 0x0, &(0x7f0000000140)={[0x9, 0x8, 0x3, 0x10, 0x3, 0x9, 0x9, 0xff, 0x3, 0x2, 0x2, 0x7, 0x100000001, 0x8000000000000001, 0x4, 0x9]}, &(0x7f00000001c0)={[0x1aa57c94, 0x95, 0x5, 0x100000003, 0x8475, 0x6, 0x1, 0x9, 0xec, 0x2, 0x8, 0x8, 0x200, 0x7]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x80502, 0x0) mmap$auto(0x0, 0x84dd, 0xdf, 0xeb1, 0x401, 0x8000) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000100)="58e7a2329fbdfb4986a26faf4182257497e4856e4a66e5177fa5d4eb558a61b740471c000000007e973d778cb0026ab17c9fe9252ff86e659e", 0xffffffff}, 0x6, 0x0) r5 = bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) close_range$auto(r2, r5, 0xd9) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r3, 0xc0045006, 0x0) readlinkat$auto(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x80) read$auto(0xffffffffffffffff, 0x0, 0x20) inotify_add_watch$auto(0xffffffffffffffff, 0x0, 0xfffff378) io_submit$auto(0x4, 0xfffffffffffffffc, 0x0) socket(0x1d, 0x2, 0x7) r6 = socket(0x2b, 0x2, 0x300) sendfile$auto(0x1, r6, 0x0, 0x8fb5) dup2$auto(0x0, 0x3) ioctl$auto(0x3, 0x5760, 0x10000000000402) writev$auto(r0, &(0x7f0000000200)={0x0, 0x3}, 0x3) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/tty/ptyce/power/runtime_suspended_time\x00', 0x2400, 0x0) read$auto(r7, 0x0, 0x20) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) 3.761277436s ago: executing program 8 (id=2117): mmap$auto(0xffffffffffffffff, 0x20005, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020008, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) r0 = socket(0x2, 0x1, 0x106) connect$auto(0x3, 0x0, 0x54) ioprio_set$auto(0x3, 0x0, 0x4b34) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r2 = io_uring_setup$auto(0x59, 0x0) socket(0xf, 0x3, 0x2) r3 = clone$auto(0x5, 0x8, &(0x7f0000000000)=0x40, &(0x7f0000000040)=0x1000, 0x1) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={r3, r1, 0x5, 0x3, 0x2, 0x5, r0, 0x7}, 0xfbf) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, 0x0, 0xc0401, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r4, 0x0, 0x80, 0x0, 0x0) readv$auto(r2, &(0x7f00000000c0)={&(0x7f0000000080)="7559232fc2d8d00a6b1b8781eb1d5f6b4781a0b66bc52842af63cdd0dc33fcecfd78324af3", 0xa}, 0x3) 2.661358385s ago: executing program 7 (id=2119): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/net/bonding_masters\x00', 0x82081, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)="0c0da407", 0x4) r1 = clone$auto(0x4, 0x0, 0x0, 0x0, 0x8) r2 = set_tid_address$auto(0x0) kcmp$auto(r1, r2, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_PMK(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x40005) 2.634840474s ago: executing program 8 (id=2120): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x20, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0xc08c) setitimer$auto(0x9, &(0x7f0000000140)={{0x3, 0x1}, {0xfffffffffffffffc, 0x8}}, &(0x7f0000000180)={{0x7, 0x230d}, {0x5, 0x148}}) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000001380)={{&(0x7f00000001c0)="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", 0x6c8, &(0x7f00000012c0)={0x0, 0x3}, 0x9, &(0x7f0000001300)="482a874b65633079386472e0b428b04510966e62503eaec1779ed700559aa2368c170439f5b461a3b2fbfeb16f5835041dd6edeb8909f1a0151f8e14a4e723ac4616b7454b", 0xf55c, 0xffffffff}, 0xa00}, 0x7, 0x1) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x20, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0xc08c) (async) setitimer$auto(0x9, &(0x7f0000000140)={{0x3, 0x1}, {0xfffffffffffffffc, 0x8}}, &(0x7f0000000180)={{0x7, 0x230d}, {0x5, 0x148}}) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000001380)={{&(0x7f00000001c0)="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", 0x6c8, &(0x7f00000012c0)={0x0, 0x3}, 0x9, &(0x7f0000001300)="482a874b65633079386472e0b428b04510966e62503eaec1779ed700559aa2368c170439f5b461a3b2fbfeb16f5835041dd6edeb8909f1a0151f8e14a4e723ac4616b7454b", 0xf55c, 0xffffffff}, 0xa00}, 0x7, 0x1) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) 2.477165343s ago: executing program 7 (id=2121): socket(0xa, 0x2, 0x0) r0 = pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x0, 0x4, 0x0, 0x0, 0x0, 0x400000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) writev$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1000}, 0x3) syz_genetlink_get_family_id$auto_smbd_genl(0x0, 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(0xffffffffffffffff, 0x0, 0x30004850) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$auto(r2, 0x4b47, 0x1) newfstatat$auto(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000180)={0xcf68, 0x7, 0x6, 0x0, 0xee00, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x1f, 0x7d, 0x0, 0x1, 0x1, 0xfffffffffffffff9, 0xffffffffffff7fff, 0x1000}, 0x8) msgctl$auto(0x4, 0x10000, &(0x7f00000002c0)={{0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x1, 0x4}, &(0x7f0000000240)=0x9, &(0x7f0000000280), 0x25, 0x553, 0x9, 0xf41, 0x2, 0xffff, 0x6, 0x3, @raw=0xe, @raw=0x59}) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x20000008000) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x40802, 0x0) read$auto(r3, 0x0, 0xb4d3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xe0301, 0x0) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r4, 0x4b72, r5) mmap$auto(0x0, 0x404008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_SMC_PNETID_DEL(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d80000", @ANYRES16, @ANYBLOB="000227bd7000fbdbdf2503000000a70001002f4565762f617564696f31005649a3aab13b9d4ac6c027db56d4eec2dda7ee248dc4e964030d46ecb8b15a7cff47509729cf07fb5c6e89433a84441d75b49a62cea774551477b4141d559d8ba45595332e4fab22348abb5938405a3560a46dff6217bb7fea342aa4f4b490c0bfd46dbfc715be0198d76c4497297dfa4bdf3e66b82695392d0acc5777e29c4b0c4507cad336e8cb3f28fa49e2ae2c956b3883cfc544cc000c000200253a5ec62d3a7c0005000400a40000000500040009000000"], 0xd8}}, 0x4) 2.337660714s ago: executing program 8 (id=2122): mmap$auto(0x6, 0x4020009, 0xdf, 0x39, 0x401, 0x4) r0 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000040), 0x60a41, 0x0) openat$auto_uprobe_profile_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000014c0)='/sys/kernel/tracing/uprobe_profile\x00', 0x40001, 0x0) write$auto(r0, &(0x7f0000000680)='g\n\x1e\x9f\xd0\x92l\x98\x92!Fc\x9c?\xado^\x9b\xf4\x9c\xa8\xd2gn\x1a\xd7\x1c\xe8)\xefA\x7f\xc2x\xd0\x18gS\x1c\xca\xb9\x84\x1ec\xd4>\xc2\xfej\t\x89u\xcb(\x95_3\xdfo\xdc\xa5;t\x05q$zmM\xae\xdb\x1f\xeb\xffe\x91\xd5\xd2[\xa5_F\xc4X\xec\xdb\xdc\x01\xc2d\xa1\x8b\xed=\xb0\x88\xa8tl2\x0e\x13mjH,\xcda\xcab.\x03\xe7\xa4z\xcaA\xe2\x99\xd5n\xa0\x8a\x91K_\xf0~\b\v\xd1W\x97\xd9\x8c}\xff4\xff\tAK\xc4\x16\x13,9}-_\x00\x80\xd2\xfc\x98?\'\xaf\xccyRou\xa1\x12\x9fwZ\x1c\f\xcck\xdb-\xd7;\xbf\xbf\xbe\x04*L\x1e\x9c\x8fVb\xb8\xb4\xa2|\x88\x1e\bX\xba_O\x87f.\xc2\xfa\x01R\xefB\xe9\xf4Xc\x98\xe7', 0x98) r1 = openat$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim5/ports/0/udp_ports_reset\x00', 0x20000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'pimreg\x00', 0x0}) bind$auto(r1, &(0x7f0000000100)=@can={0x1d, r2}, 0x2) sysfs$auto(0x2, 0xd, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x20000a, 0x4) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_stats_fops_2(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) fcntl$auto_F_SET_RW_HINT(r3, 0x40c, 0x81ca) close_range$auto(0x2, 0x8, 0x0) 2.070492875s ago: executing program 7 (id=2123): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x1d, 0x2, 0x7) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x8002, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) close_range$auto(0x2, 0x8, 0x0) ustat$auto(0x801, 0x0) r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000440), 0x20201, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0x10}, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) ioctl$auto_I2C_RDWR(r1, 0x707, &(0x7f0000000180)) 1.965342234s ago: executing program 8 (id=2124): unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)={0x14, r1, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8020) read$auto(0xffffffffffffffff, 0x0, 0x7f) mprotect$auto(0x8000, 0x8, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x121000, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) r3 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r3) write$auto(0x3, 0x0, 0x6) mbind$auto(0x0, 0x22091d2, 0x4, 0x0, 0x6, 0x2) syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, 0x0, 0x4800) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sigaltstack$auto(&(0x7f00000000c0)={&(0x7f00000001c0)="d5d03e15fe947470356f4ef5096f86937ad80b360ee48fd2d7e1", 0x2}, 0x0) keyctl$auto(0x1d, 0xfffffffffffffffd, 0x2, 0x628, 0xfffffffffffffffd) msync$auto(0xffffffffffffffe4, 0x1, 0x744bee86) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/memory_hotplug/parameters/online_policy\x00', 0x2, 0x0) read$auto(r5, 0x0, 0x800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x400008, 0x9beb, 0x9b72, 0x2, 0x8000) 1.872039139s ago: executing program 7 (id=2125): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdd, 0x9b72, 0x2, 0x20000000008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x3a, 0x1, 0x4, 0x5, 0x9) mmap$auto(0x0, 0x20009, 0x81004000000008dd, 0x1000000eb1, r0, 0x0) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x200000001000000, 0xfffff7fffffffff7, 0x3ee) bpf$auto(0x6, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xe4, 0x9b72, 0x2, 0x400) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x9000, 0x8003, 0x80000001) mprotect$auto(0x0, 0x806121, 0x6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x181881, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sg0\x00', 0x100, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) r1 = epoll_create$auto(0x3e) epoll_ctl$auto(r1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xa, 0x0) 955.269002ms ago: executing program 7 (id=2126): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) listmount$auto(&(0x7f0000000100)={0x20, @raw, 0xffffffffffffffff, 0xfffffffffffffffb}, 0x0, 0x0, 0x1) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0x4068aea3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x1) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x1) timer_create$auto(0x803, 0x0, 0x0) (async) timer_create$auto(0x803, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0) (async) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) memfd_secret$auto(0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x20100, 0x0) preadv2$auto(r2, &(0x7f0000000200)={0x0, 0x80000000009}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) (async) preadv2$auto(r2, &(0x7f0000000200)={0x0, 0x80000000009}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0) (async) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0) ioctl$auto(0x3, 0x402c542d, r3) write$auto(0x3, 0x0, 0xfffffdef) (async) write$auto(0x3, 0x0, 0xfffffdef) 690.430469ms ago: executing program 8 (id=2127): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/domainname\x00', 0x1c9442, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) r2 = fcntl$auto_F_DUPFD_CLOEXEC(r1, 0x406, r0) ioctl$auto_BCH_IOCTL_DEV_USAGE(r2, 0xc118bc0b, &(0x7f0000000100)={0xffffffff, 0xd, 0x4, '\x00', 0xfffffffc, 0x9, 0x8, [{0x4, 0x3, 0x2}, {0x34}, {0x6, 0x8, 0x100000000}, {0x9d3c, 0x8e52, 0x401}, {0x7, 0x5, 0x6}, {0xc, 0x1000, 0x8}, {0x4000000, 0x5, 0x5}, {0x7, 0x4, 0x2}, {0x5, 0x10, 0x7}, {0xffff, 0x3, 0x9}]}) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0x1, 0xb8, @inferred=r0}}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, 0x0, 0x20008810) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x1, 0x6, 0x1, 0x89, 0x7181, 0x3ffde, 0x4, 0x10, 0x9, 0x6, 0x80803, 0x4, 0x11ffffffffffd, 0x85, 0xfffffffffffffffb, 0x9, 0x50007, 0x2, 0xffffffffffffffff, 0x0, 0x80000001, 0x1, 0x202, 0x9, 0x8000, 0x0, 0x0, 0x2, 0x0, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x3, 0x2, 0x5, 0x0, 0x2, 0x0, 0x0, 0x400000004, 0x9, 0x2000000800000000, 0x3, 0x0, 0x100, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000009, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x2000000]}, 0x1fe, 0xd) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) unlinkat$auto(r3, 0x0, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000003fc0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETFAMILY2(r6, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000004080)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7000fddbdf25030000000f00020076657468305f766c616e0000149bbe543e9ad4c47b3e173cf333cefc2286ff4fa4fba6bc4d7ea41e683dc39a65d5f237ae07bd33c2f5fe4385ec671fddd92b23719dcf1433"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000050) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0xc810}, 0x18800) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) 1.085298ms ago: executing program 7 (id=2128): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x5c, 0xdf, 0xeb1, 0x401, 0x100000000008000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = socket(0xa, 0x801, 0x84) readv$auto(r1, &(0x7f0000000080)={&(0x7f0000000180)="c386b1d4b0008597bfc01cc8e2ee2716e996b6429ac43bbad1a4bb8452302a591b85e4567bce5edf6a2cf95e2bdd6c9e88899d1a66c7dc99ce09333f35024067315f5e3c8b0c2b15934df2a4b85f1e538430e32a9d1a2adc94a999924ab3cffe4e0027ae3df6effbc4df4b9748550eb2437d2bae7e5a69dbdfb8a90a5a2e6d677ab6ab0b8490a6fcaf7c052ae8d61134936027cb64a629c2519413ef54cdacdec82d2ca9f70ee922859f037d44bbaf3f2d6a1af34296a514c6922eb04a476bf204398b67a858ed2fa803a621f218e8b7b7790cabb16775c330b50c121806c2356e", 0x100000000}, 0xf68) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) setsockopt$auto(r1, 0x10000000084, 0x9, 0x0, 0x9c) getsockopt$auto_SO_PASSCRED(r1, 0x800, 0x10, &(0x7f0000000e40)='\x00', &(0x7f0000000e80)=0x4) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r0, 0x0) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x18000) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), r1) sendmsg$auto_NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000e00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000340)={0xa58, r2, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_IE_ASSOC_RESP={0x80d, 0x80, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x233, 0x80, "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"}]}, 0xa58}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/zram0/io_stat\x00', 0xe80, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001280)=""/4124, 0x101c) 0s ago: executing program 37 (id=2073): mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) setfsuid$auto(0xee00) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r1, 0x1, 0x70bd21, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x20008050) mremap$auto(0x0, 0x7, 0x8000000000000000, 0x3, 0x200000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setfsuid$auto(0xee00) (async) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) (async) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r1, 0x1, 0x70bd21, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x20008050) (async) mremap$auto(0x0, 0x7, 0x8000000000000000, 0x3, 0x200000) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async) kernel console output (not intermixed with test programs): idge_slave_0) entered blocking state [ 495.756863][T13826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.808639][T13826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.823730][T12411] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.831181][T12411] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.847982][T13826] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.864650][T12411] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.871745][T12411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.900978][T12411] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.908070][T12411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.939506][T13826] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 495.974240][T13826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 495.997835][T13842] Process accounting paused [ 496.307476][T13826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.760335][T13826] veth0_vlan: entered promiscuous mode [ 496.792832][T13826] veth1_vlan: entered promiscuous mode [ 496.873428][T13826] veth0_macvtap: entered promiscuous mode [ 496.923866][T13826] veth1_macvtap: entered promiscuous mode [ 496.930867][T13862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1628'. [ 496.987816][T13826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.030138][T13826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.083621][T12408] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.112076][T12408] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.132421][ T8559] Bluetooth: hci2: command tx timeout [ 497.147873][T12408] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.179602][T12408] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.365568][T12408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.413331][T12408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.460392][T12411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.481687][T12411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.214227][T10749] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 498.224049][T10749] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 498.231609][T10749] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 498.239533][T10749] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 498.247587][T10749] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 498.525887][T13870] chnl_net:caif_netlink_parms(): no params data found [ 498.667820][T13870] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.685673][T13870] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.738602][T13870] bridge_slave_0: entered allmulticast mode [ 498.761273][T13870] bridge_slave_0: entered promiscuous mode [ 498.796088][T13870] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.829013][T13870] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.852509][T13870] bridge_slave_1: entered allmulticast mode [ 498.885880][T13870] bridge_slave_1: entered promiscuous mode [ 499.141639][T13870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.177799][T13870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.213627][ T8559] Bluetooth: hci2: command tx timeout [ 499.294554][T13870] team0: Port device team_slave_0 added [ 499.351038][T13870] team0: Port device team_slave_1 added [ 499.442495][T13870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.459375][T13870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.527809][T13870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.573483][T13870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.599364][T13870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.720577][T13870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.925364][T13870] hsr_slave_0: entered promiscuous mode [ 499.952468][T13870] hsr_slave_1: entered promiscuous mode [ 499.988652][T13870] debugfs: 'hsr0' already exists in 'hsr' [ 500.032605][T13870] Cannot create hsr debugfs directory [ 500.334238][ T8559] Bluetooth: hci5: command tx timeout [ 500.578989][T13912] FAULT_INJECTION: forcing a failure. [ 500.578989][T13912] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 500.646470][T13912] CPU: 0 UID: 0 PID: 13912 Comm: syz.0.1640 Tainted: G L syzkaller #0 PREEMPT(full) [ 500.646495][T13912] Tainted: [L]=SOFTLOCKUP [ 500.646500][T13912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 500.646508][T13912] Call Trace: [ 500.646514][T13912] [ 500.646520][T13912] dump_stack_lvl+0x100/0x190 [ 500.646545][T13912] should_fail_ex.cold+0x5/0xa [ 500.646559][T13912] ? prepare_alloc_pages+0x16d/0x5f0 [ 500.646577][T13912] should_fail_alloc_page+0xeb/0x140 [ 500.646594][T13912] prepare_alloc_pages+0x1f0/0x5f0 [ 500.646609][T13912] ? is_bpf_text_address+0x8a/0x1a0 [ 500.646632][T13912] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 500.646652][T13912] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 500.646668][T13912] ? is_bpf_text_address+0x94/0x1a0 [ 500.646688][T13912] ? kernel_text_address+0x8d/0x100 [ 500.646707][T13912] ? __kernel_text_address+0xd/0x30 [ 500.646726][T13912] ? unwind_get_return_address+0x59/0xa0 [ 500.646745][T13912] ? __lock_acquire+0x4a5/0x2630 [ 500.646763][T13912] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 500.646784][T13912] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 500.646802][T13912] ? stack_trace_save+0x8e/0xc0 [ 500.646816][T13912] ? look_up_lock_class+0x55/0x120 [ 500.646846][T13912] ? find_held_lock+0x2b/0x80 [ 500.646858][T13912] ? ima_match_policy+0x8c4/0x2350 [ 500.646939][T13912] ? ima_match_policy+0x8c4/0x2350 [ 500.646957][T13912] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 500.646980][T13912] ? policy_nodemask+0xed/0x4f0 [ 500.646996][T13912] alloc_pages_mpol+0x1fb/0x550 [ 500.647012][T13912] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 500.647033][T13912] folio_alloc_mpol_noprof+0x36/0x340 [ 500.647054][T13912] vma_alloc_folio_noprof+0xed/0x1d0 [ 500.647071][T13912] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 500.647094][T13912] do_anonymous_page+0xb3a/0x1fb0 [ 500.647119][T13912] __handle_mm_fault+0x1d42/0x2b60 [ 500.647140][T13912] ? mt_find+0x45e/0x8e0 [ 500.647161][T13912] ? __pfx___handle_mm_fault+0x10/0x10 [ 500.647178][T13912] ? __pfx_mt_find+0x10/0x10 [ 500.647208][T13912] ? find_vma+0xbf/0x140 [ 500.647221][T13912] ? __pfx_find_vma+0x10/0x10 [ 500.647236][T13912] handle_mm_fault+0x36d/0xa20 [ 500.647259][T13912] do_user_addr_fault+0x74c/0x12f0 [ 500.647285][T13912] exc_page_fault+0x6f/0xd0 [ 500.647304][T13912] asm_exc_page_fault+0x26/0x30 [ 500.647318][T13912] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 500.647334][T13912] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 500.647348][T13912] RSP: 0018:ffffc90003727ae8 EFLAGS: 00050202 [ 500.647360][T13912] RAX: 3020202020202020 RBX: 0000200000001280 RCX: 000000000000001d [ 500.647369][T13912] RDX: 0000000000000001 RSI: ffff888058af0000 RDI: 0000200000001280 [ 500.647377][T13912] RBP: ffffc90003727d80 R08: 0000000000000000 R09: ffffed100b15e003 [ 500.647386][T13912] R10: ffff888058af001c R11: 0000000000000000 R12: 000020000000129d [ 500.647394][T13912] R13: 00007ffffffff000 R14: ffff888058af0000 R15: 000000000000001d [ 500.647414][T13912] _copy_to_iter+0x391/0x1720 [ 500.647434][T13912] ? __pfx__copy_to_iter+0x10/0x10 [ 500.647450][T13912] ? kernfs_seq_stop+0xcd/0x120 [ 500.647468][T13912] ? kernfs_put_active+0x93/0xe0 [ 500.647491][T13912] seq_read_iter+0xdab/0x1270 [ 500.647522][T13912] kernfs_fop_read_iter+0x46c/0x610 [ 500.647538][T13912] ? rw_verify_area+0xce/0x6d0 [ 500.647557][T13912] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 500.647573][T13912] vfs_read+0x825/0xb30 [ 500.647597][T13912] ? __pfx_vfs_read+0x10/0x10 [ 500.647629][T13912] ksys_read+0x12a/0x250 [ 500.647642][T13912] ? __pfx_ksys_read+0x10/0x10 [ 500.647660][T13912] do_syscall_64+0x106/0xf80 [ 500.647678][T13912] ? clear_bhb_loop+0x40/0x90 [ 500.647695][T13912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.647709][T13912] RIP: 0033:0x7fed5e39c799 [ 500.647722][T13912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.647734][T13912] RSP: 002b:00007fed5f1f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 500.647747][T13912] RAX: ffffffffffffffda RBX: 00007fed5e615fa0 RCX: 00007fed5e39c799 [ 500.647756][T13912] RDX: 000000000000101c RSI: 0000200000001280 RDI: 0000000000000003 [ 500.647764][T13912] RBP: 00007fed5f1f0090 R08: 0000000000000000 R09: 0000000000000000 [ 500.647772][T13912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.647780][T13912] R13: 00007fed5e616038 R14: 00007fed5e615fa0 R15: 00007ffc6ac5c578 [ 500.647799][T13912] [ 501.410203][T13915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1638'. [ 501.574164][ T8559] Bluetooth: hci2: command tx timeout [ 501.586751][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.593244][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.257971][T13870] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 502.281739][T13870] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 502.306917][T13870] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 502.327592][T13870] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 502.415597][ T8559] Bluetooth: hci5: command tx timeout [ 502.466755][T13870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.503708][T13870] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.525621][T12411] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.532733][T12411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.571157][T12411] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.578287][T12411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.012415][T13958] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1649'. [ 503.088247][T13958] netlink: 350 bytes leftover after parsing attributes in process `syz.4.1649'. [ 503.303625][T13870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.616882][ T8559] Bluetooth: hci2: command tx timeout [ 503.976730][T13981] FAULT_INJECTION: forcing a failure. [ 503.976730][T13981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.029089][T13981] CPU: 0 UID: 0 PID: 13981 Comm: syz.4.1650 Tainted: G L syzkaller #0 PREEMPT(full) [ 504.029114][T13981] Tainted: [L]=SOFTLOCKUP [ 504.029119][T13981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 504.029127][T13981] Call Trace: [ 504.029133][T13981] [ 504.029138][T13981] dump_stack_lvl+0x100/0x190 [ 504.029165][T13981] should_fail_ex.cold+0x5/0xa [ 504.029182][T13981] _copy_from_user+0x2e/0xd0 [ 504.029200][T13981] kstrtouint_from_user+0xd6/0x1d0 [ 504.029220][T13981] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 504.029239][T13981] ? __lock_acquire+0x4a5/0x2630 [ 504.029258][T13981] ? lock_acquire+0x1cf/0x380 [ 504.029279][T13981] proc_fail_nth_write+0x83/0x220 [ 504.029297][T13981] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 504.029319][T13981] vfs_write+0x2aa/0x1070 [ 504.029333][T13981] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 504.029351][T13981] ? __pfx_vfs_write+0x10/0x10 [ 504.029363][T13981] ? __fget_files+0x215/0x3d0 [ 504.029381][T13981] ? __fget_files+0x21f/0x3d0 [ 504.029399][T13981] ksys_write+0x12a/0x250 [ 504.029412][T13981] ? __pfx_ksys_write+0x10/0x10 [ 504.029431][T13981] do_syscall_64+0x106/0xf80 [ 504.029490][T13981] ? clear_bhb_loop+0x40/0x90 [ 504.029508][T13981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.029522][T13981] RIP: 0033:0x7f02b835cfce [ 504.029534][T13981] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 504.029548][T13981] RSP: 002b:00007f02b91c2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 504.029562][T13981] RAX: ffffffffffffffda RBX: 00007f02b91c36c0 RCX: 00007f02b835cfce [ 504.029571][T13981] RDX: 0000000000000001 RSI: 00007f02b91c30a0 RDI: 0000000000000004 [ 504.029580][T13981] RBP: 00007f02b91c3090 R08: 0000000000000000 R09: 0000000000000000 [ 504.029588][T13981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.029596][T13981] R13: 00007f02b8616038 R14: 00007f02b8615fa0 R15: 00007ffc27ecdc38 [ 504.029615][T13981] [ 504.519057][ T8559] Bluetooth: hci5: command tx timeout [ 504.684725][T13870] veth0_vlan: entered promiscuous mode [ 504.708779][T13870] veth1_vlan: entered promiscuous mode [ 504.763299][T13870] veth0_macvtap: entered promiscuous mode [ 504.784147][T13870] veth1_macvtap: entered promiscuous mode [ 504.848559][T13870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.869448][T13870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.106492][T12408] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.161451][T12408] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.267637][T12408] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.345014][T12408] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.684891][T12413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.727634][T12413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.787192][T12411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.803772][T12411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.581835][ T8559] Bluetooth: hci5: command tx timeout [ 506.978404][T14011] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1630'. [ 508.180835][T14020] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1659'. [ 508.196426][T14020] netlink: 350 bytes leftover after parsing attributes in process `syz.0.1659'. [ 510.557702][T14066] zswap: compressor not available [ 513.330252][T14111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1671'. [ 515.317922][T14134] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1682'. [ 516.647663][T14166] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.16.0), cmd(12) [ 517.595250][T14177] zswap: compressor û not available [ 519.181881][T14198] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1691'. [ 520.294347][T14213] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.16.0), cmd(12) [ 524.204114][T14295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1712'. [ 524.220527][T14288] zswap: compressor û not available [ 525.218527][T14309] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input20 [ 526.216238][T14330] netlink: 'syz.4.1728': attribute type 2 has an invalid length. [ 526.278448][T14324] Process accounting resumed [ 526.641300][T14335] zswap: compressor û not available [ 526.873847][T14355] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 527.493748][T14368] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input21 [ 528.020339][T14386] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 530.079659][T14432] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 530.079659][T14432] [ 530.525424][T14444] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input23 [ 531.564828][T14449] Invalid ELF header magic: != ELF [ 531.906453][T14473] FAULT_INJECTION: forcing a failure. [ 531.906453][T14473] name failslab, interval 1, probability 0, space 0, times 0 [ 531.963565][T14473] CPU: 0 UID: 0 PID: 14473 Comm: syz.5.1752 Tainted: G L syzkaller #0 PREEMPT(full) [ 531.963590][T14473] Tainted: [L]=SOFTLOCKUP [ 531.963595][T14473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 531.963603][T14473] Call Trace: [ 531.963608][T14473] [ 531.963615][T14473] dump_stack_lvl+0x100/0x190 [ 531.963641][T14473] should_fail_ex.cold+0x5/0xa [ 531.963658][T14473] should_failslab+0xc2/0x120 [ 531.963673][T14473] __kvmalloc_node_noprof+0xfa/0xa00 [ 531.963694][T14473] ? seq_read_iter+0x819/0x1270 [ 531.963719][T14473] seq_read_iter+0x819/0x1270 [ 531.963753][T14473] kernfs_fop_read_iter+0x46c/0x610 [ 531.963770][T14473] ? rw_verify_area+0xce/0x6d0 [ 531.963789][T14473] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 531.963806][T14473] vfs_read+0x825/0xb30 [ 531.963829][T14473] ? __pfx_vfs_read+0x10/0x10 [ 531.963861][T14473] ksys_read+0x12a/0x250 [ 531.963874][T14473] ? __pfx_ksys_read+0x10/0x10 [ 531.963891][T14473] do_syscall_64+0x106/0xf80 [ 531.963911][T14473] ? clear_bhb_loop+0x40/0x90 [ 531.963928][T14473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.963942][T14473] RIP: 0033:0x7f14d8d9c799 [ 531.963955][T14473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.963968][T14473] RSP: 002b:00007f14d9c41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 531.963983][T14473] RAX: ffffffffffffffda RBX: 00007f14d9016090 RCX: 00007f14d8d9c799 [ 531.963992][T14473] RDX: 0000000000000029 RSI: 0000200000000840 RDI: 0000000000000004 [ 531.964000][T14473] RBP: 00007f14d9c41090 R08: 0000000000000000 R09: 0000000000000000 [ 531.964009][T14473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.964017][T14473] R13: 00007f14d9016128 R14: 00007f14d9016090 R15: 00007ffd7b111528 [ 531.964036][T14473] [ 532.231519][T14468] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 532.237557][T14468] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 532.249558][T14468] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 532.256602][T14468] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 532.262621][T14468] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 532.270079][T14468] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 532.307023][T14468] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 532.314040][T14468] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 532.320444][T14468] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 532.327410][T14468] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 532.467912][T14471] zswap: compressor û not available [ 533.635540][T14492] zswap: compressor û not available [ 533.871220][T10749] Bluetooth: hci1: command 0x0c1a tx timeout [ 534.431834][T10749] Bluetooth: hci5: command 0x0c1a tx timeout [ 534.437875][ T8559] Bluetooth: hci2: command 0x0c1a tx timeout [ 534.443904][ T8791] Bluetooth: hci4: command 0x0c1a tx timeout [ 534.449890][ T8791] Bluetooth: hci0: command 0x0c1a tx timeout [ 534.456601][ T8559] Bluetooth: hci3: command 0x0c1a tx timeout [ 536.098392][T14524] futex_wake_op: syz.5.1762 tries to shift op by -2048; fix this program [ 536.512025][T14512] Bluetooth: hci5: command 0x0c1a tx timeout [ 536.518122][ T8585] Bluetooth: hci2: command 0x0c1a tx timeout [ 537.056098][T14540] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1763'. [ 537.418114][T14526] syz.6.1763 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 537.527478][T14526] CPU: 0 UID: 0 PID: 14526 Comm: syz.6.1763 Tainted: G L syzkaller #0 PREEMPT(full) [ 537.527504][T14526] Tainted: [L]=SOFTLOCKUP [ 537.527509][T14526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 537.527518][T14526] Call Trace: [ 537.527523][T14526] [ 537.527529][T14526] dump_stack_lvl+0x100/0x190 [ 537.527555][T14526] dump_header+0xfb/0x606 [ 537.527573][T14526] oom_kill_process.cold+0xd/0x330 [ 537.527591][T14526] out_of_memory+0x340/0x14f0 [ 537.527616][T14526] ? __pfx_out_of_memory+0x10/0x10 [ 537.527642][T14526] mem_cgroup_out_of_memory+0xc6/0x130 [ 537.527663][T14526] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 537.527681][T14526] ? find_held_lock+0x2b/0x80 [ 537.527699][T14526] ? do_raw_spin_unlock+0x145/0x1e0 [ 537.527720][T14526] ? _raw_spin_unlock+0x28/0x50 [ 537.527740][T14526] try_charge_memcg+0x652/0xc90 [ 537.527759][T14526] ? __pfx_try_charge_memcg+0x10/0x10 [ 537.527779][T14526] ? find_held_lock+0x2b/0x80 [ 537.527792][T14526] ? rcu_read_unlock+0x17/0x60 [ 537.527807][T14526] ? rcu_read_unlock+0x17/0x60 [ 537.527825][T14526] charge_memcg+0xa6/0x280 [ 537.527840][T14526] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 537.527861][T14526] __swap_cache_prepare_and_add+0x528/0x9e0 [ 537.527890][T14526] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 537.527909][T14526] ? __pfx_swap_entry_swapped+0x10/0x10 [ 537.527929][T14526] swap_cache_alloc_folio+0x1cb/0x300 [ 537.527952][T14526] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 537.527978][T14526] swap_cluster_readahead+0x411/0x770 [ 537.528003][T14526] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 537.528038][T14526] shmem_swapin_folio+0x22a4/0x2c10 [ 537.528062][T14526] ? find_held_lock+0x2b/0x80 [ 537.528075][T14526] ? filemap_get_entry+0x1a7/0x3b0 [ 537.528102][T14526] ? __pfx_shmem_swapin_folio+0x10/0x10 [ 537.528122][T14526] ? __pfx_filemap_get_entry+0x10/0x10 [ 537.528143][T14526] ? mod_memcg_lruvec_state+0x1a6/0x630 [ 537.528171][T14526] shmem_get_folio_gfp+0x56c/0x1900 [ 537.528203][T14526] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 537.528226][T14526] ? find_held_lock+0x2b/0x80 [ 537.528242][T14526] shmem_get_folio+0x84/0xb0 [ 537.528265][T14526] collapse_file+0x1263/0x3cc0 [ 537.528287][T14526] ? __lock_acquire+0x4a5/0x2630 [ 537.528306][T14526] ? __pfx_collapse_file+0x10/0x10 [ 537.528330][T14526] ? find_held_lock+0x2b/0x80 [ 537.528342][T14526] ? hpage_collapse_scan_file+0x583/0x1fc0 [ 537.528360][T14526] ? hpage_collapse_scan_file+0x583/0x1fc0 [ 537.528380][T14526] hpage_collapse_scan_file+0x603/0x1fc0 [ 537.528402][T14526] ? __pfx_hpage_collapse_scan_file+0x10/0x10 [ 537.528422][T14526] ? madvise_collapse+0x3cb/0xbe0 [ 537.528439][T14526] ? madvise_collapse+0x3cb/0xbe0 [ 537.528460][T14526] madvise_collapse+0x412/0xbe0 [ 537.528482][T14526] ? finish_task_switch.isra.0+0x200/0xb80 [ 537.528498][T14526] ? __pfx_madvise_collapse+0x10/0x10 [ 537.528516][T14526] ? rcu_is_cpu_rrupt_from_idle+0x1f0/0x270 [ 537.528545][T14526] madvise_vma_behavior+0x1987/0x3050 [ 537.528566][T14526] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 537.528583][T14526] ? mas_prev_setup.constprop.0+0xb6/0x9c0 [ 537.528606][T14526] ? mas_prev+0x9b/0xf0 [ 537.528626][T14526] ? __pfx_mas_prev+0x10/0x10 [ 537.528652][T14526] ? find_vma_prev+0xd8/0x150 [ 537.528666][T14526] ? futex_unqueue+0x133/0x2c0 [ 537.528683][T14526] ? __pfx_find_vma_prev+0x10/0x10 [ 537.528704][T14526] ? __futex_wait+0x256/0x300 [ 537.528729][T14526] madvise_walk_vmas+0x2fe/0xa90 [ 537.528750][T14526] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 537.528772][T14526] madvise_do_behavior+0x1ea/0x510 [ 537.528791][T14526] ? __pfx_madvise_do_behavior+0x10/0x10 [ 537.528808][T14526] ? down_read+0x13b/0x460 [ 537.528830][T14526] do_madvise+0x195/0x240 [ 537.528847][T14526] ? __pfx_do_madvise+0x10/0x10 [ 537.528863][T14526] ? do_futex+0x192/0x350 [ 537.528899][T14526] __x64_sys_madvise+0xa9/0x110 [ 537.528916][T14526] ? lockdep_hardirqs_on+0x78/0x100 [ 537.528935][T14526] do_syscall_64+0x106/0xf80 [ 537.528955][T14526] ? clear_bhb_loop+0x40/0x90 [ 537.528973][T14526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.528988][T14526] RIP: 0033:0x7fcf81d9c799 [ 537.529001][T14526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.529015][T14526] RSP: 002b:00007fcf82ccc028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 537.529030][T14526] RAX: ffffffffffffffda RBX: 00007fcf82016090 RCX: 00007fcf81d9c799 [ 537.529039][T14526] RDX: 0000000000000019 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 537.529049][T14526] RBP: 00007fcf81e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 537.529057][T14526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.529065][T14526] R13: 00007fcf82016128 R14: 00007fcf82016090 R15: 00007fffc36e13b8 [ 537.529085][T14526] [ 537.529091][T14526] memory: usage 3072kB, limit 3072kB, failcnt 89564 [ 538.226958][T14526] memory+swap: usage 7212kB, limit 9007199254740988kB, failcnt 0 [ 538.234932][T14526] kmem: usage 2560kB, limit 9007199254740988kB, failcnt 0 [ 538.242084][T14526] Memory cgroup stats for /syz0: [ 538.242255][T14526] cache 0 [ 538.253391][T14526] rss 0 [ 538.256154][T14526] rss_huge 0 [ 538.259348][T14526] shmem 0 [ 538.262258][T14526] mapped_file 0 [ 538.270436][T14526] dirty 0 [ 538.273613][T14526] writeback 0 [ 538.276884][T14526] workingset_refault_anon 19987 [ 538.281769][T14526] workingset_refault_file 10180 [ 538.288474][T14526] swap 4239360 [ 538.291885][T14526] swapcached 748572672 [ 538.296178][T14526] pgpgin 347966 [ 538.299620][T14526] pgpgout 402135 [ 538.303429][T14526] pgfault 259328 [ 538.307098][T14526] pgmajfault 8221 [ 538.310710][T14526] inactive_anon 274432 [ 538.316886][T14526] active_anon 0 [ 538.320334][T14526] inactive_file 0 [ 538.324181][T14526] active_file 0 [ 538.327667][T14526] unevictable 0 [ 538.331102][T14526] hierarchical_memory_limit 3145728 [ 538.336631][T14526] hierarchical_memsw_limit 9223372036854771712 [ 538.342967][T14526] total_cache 0 [ 538.346405][T14526] total_rss 0 [ 538.349662][T14526] total_rss_huge 0 [ 538.354025][T14526] total_shmem 0 [ 538.357481][T14526] total_mapped_file 0 [ 538.361438][T14526] total_dirty 0 [ 538.365226][T14526] total_writeback 0 [ 538.369015][T14526] total_workingset_refault_anon 19987 [ 538.379287][T14526] total_workingset_refault_file 10180 [ 538.384840][T14526] total_swap 4239360 [ 538.388716][T14526] total_swapcached 748572672 [ 538.394886][T14526] total_pgpgin 347966 [ 538.398850][T14526] total_pgpgout 402135 [ 538.403149][T14526] total_pgfault 259328 [ 538.407244][T14526] total_pgmajfault 8221 [ 538.411376][T14526] total_inactive_anon 274432 [ 538.418118][T14526] total_active_anon 0 [ 538.422088][T14526] total_inactive_file 0 [ 538.426466][T14526] total_active_file 0 [ 538.430471][T14526] total_unevictable 0 [ 538.434961][T14526] anon_cost 0 [ 538.438236][T14526] file_cost 0 [ 538.441563][T14526] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1338,pid=12531,uid=0 [ 538.458705][T14526] Memory cgroup out of memory: Killed process 12531 (syz.0.1338) total-vm:106592kB, anon-rss:1236kB, file-rss:20672kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 538.596674][T14512] Bluetooth: hci5: command 0x0c1a tx timeout [ 538.602719][ T8585] Bluetooth: hci2: command 0x0c1a tx timeout [ 539.646853][T14570] zswap: compressor û not available [ 539.652176][T14572] FAULT_INJECTION: forcing a failure. [ 539.652176][T14572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 539.690744][T14572] CPU: 0 UID: 0 PID: 14572 Comm: syz.6.1772 Tainted: G L syzkaller #0 PREEMPT(full) [ 539.690769][T14572] Tainted: [L]=SOFTLOCKUP [ 539.690774][T14572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 539.690782][T14572] Call Trace: [ 539.690788][T14572] [ 539.690793][T14572] dump_stack_lvl+0x100/0x190 [ 539.690819][T14572] should_fail_ex.cold+0x5/0xa [ 539.690836][T14572] _copy_to_iter+0x1f3/0x1720 [ 539.690857][T14572] ? __pfx__copy_to_iter+0x10/0x10 [ 539.690872][T14572] ? kernfs_seq_stop+0xcd/0x120 [ 539.690890][T14572] ? kernfs_put_active+0x93/0xe0 [ 539.690913][T14572] seq_read_iter+0xdab/0x1270 [ 539.690942][T14572] kernfs_fop_read_iter+0x46c/0x610 [ 539.690958][T14572] ? rw_verify_area+0xce/0x6d0 [ 539.690977][T14572] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 539.691000][T14572] vfs_read+0x825/0xb30 [ 539.691023][T14572] ? __pfx_vfs_read+0x10/0x10 [ 539.691056][T14572] ksys_read+0x12a/0x250 [ 539.691068][T14572] ? __pfx_ksys_read+0x10/0x10 [ 539.691086][T14572] do_syscall_64+0x106/0xf80 [ 539.691104][T14572] ? clear_bhb_loop+0x40/0x90 [ 539.691122][T14572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.691137][T14572] RIP: 0033:0x7fcf81d9c799 [ 539.691149][T14572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.691163][T14572] RSP: 002b:00007fcf82ccc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 539.691177][T14572] RAX: ffffffffffffffda RBX: 00007fcf82016090 RCX: 00007fcf81d9c799 [ 539.691186][T14572] RDX: 0000000000000029 RSI: 0000200000000840 RDI: 0000000000000004 [ 539.691194][T14572] RBP: 00007fcf82ccc090 R08: 0000000000000000 R09: 0000000000000000 [ 539.691202][T14572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.691211][T14572] R13: 00007fcf82016128 R14: 00007fcf82016090 R15: 00007fffc36e13b8 [ 539.691230][T14572] [ 540.096867][T14567] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1774'. [ 540.960152][T14583] zswap: compressor û not available [ 541.521097][T14598] zswap: compressor û not available [ 542.319065][T14611] FAULT_INJECTION: forcing a failure. [ 542.319065][T14611] name failslab, interval 1, probability 0, space 0, times 0 [ 542.357627][T14611] CPU: 0 UID: 0 PID: 14611 Comm: syz.6.1781 Tainted: G L syzkaller #0 PREEMPT(full) [ 542.357652][T14611] Tainted: [L]=SOFTLOCKUP [ 542.357657][T14611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 542.357665][T14611] Call Trace: [ 542.357670][T14611] [ 542.357676][T14611] dump_stack_lvl+0x100/0x190 [ 542.357700][T14611] should_fail_ex.cold+0x5/0xa [ 542.357717][T14611] ? tomoyo_realpath_from_path+0xb6/0x690 [ 542.357736][T14611] should_failslab+0xc2/0x120 [ 542.357751][T14611] __kmalloc_noprof+0xe0/0x850 [ 542.357782][T14611] tomoyo_realpath_from_path+0xb6/0x690 [ 542.357804][T14611] tomoyo_path_number_perm+0x23c/0x580 [ 542.357819][T14611] ? tomoyo_path_number_perm+0x22e/0x580 [ 542.357836][T14611] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 542.357850][T14611] ? rcu_is_watching+0x12/0xc0 [ 542.357871][T14611] ? trace_contention_end+0x15f/0x1b0 [ 542.357908][T14611] ? __pfx___might_resched+0x10/0x10 [ 542.357927][T14611] ? find_held_lock+0x2b/0x80 [ 542.357940][T14611] ? mnt_get_write_access+0x52/0x2f0 [ 542.357961][T14611] ? down_write_killable+0x152/0x250 [ 542.357983][T14611] ? __pfx_down_write_killable+0x10/0x10 [ 542.358007][T14611] security_path_chmod+0x121/0x2c0 [ 542.358023][T14611] chmod_common+0x19a/0x4d0 [ 542.358042][T14611] ? __pfx_chmod_common+0x10/0x10 [ 542.358056][T14611] ? find_held_lock+0x2b/0x80 [ 542.358069][T14611] ? __fget_files+0x215/0x3d0 [ 542.358081][T14611] ? __fget_files+0x215/0x3d0 [ 542.358104][T14611] __x64_sys_fchmod+0x10e/0x1b0 [ 542.358121][T14611] do_syscall_64+0x106/0xf80 [ 542.358139][T14611] ? clear_bhb_loop+0x40/0x90 [ 542.358156][T14611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.358171][T14611] RIP: 0033:0x7fcf81d9c799 [ 542.358184][T14611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.358197][T14611] RSP: 002b:00007fcf82ccc028 EFLAGS: 00000246 ORIG_RAX: 000000000000005b [ 542.358211][T14611] RAX: ffffffffffffffda RBX: 00007fcf82016090 RCX: 00007fcf81d9c799 [ 542.358221][T14611] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000003 [ 542.358229][T14611] RBP: 00007fcf82ccc090 R08: 0000000000000000 R09: 0000000000000000 [ 542.358237][T14611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.358245][T14611] R13: 00007fcf82016128 R14: 00007fcf82016090 R15: 00007fffc36e13b8 [ 542.358265][T14611] [ 542.358271][T14611] ERROR: Out of memory at tomoyo_realpath_from_path. [ 544.682129][T14624] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1785'. [ 547.150583][T14654] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1791'. [ 547.469331][T14657] zswap: compressor û not available [ 547.474683][T14659] FAULT_INJECTION: forcing a failure. [ 547.474683][T14659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.522012][T14659] CPU: 0 UID: 0 PID: 14659 Comm: syz.6.1792 Tainted: G L syzkaller #0 PREEMPT(full) [ 547.522037][T14659] Tainted: [L]=SOFTLOCKUP [ 547.522042][T14659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 547.522051][T14659] Call Trace: [ 547.522056][T14659] [ 547.522062][T14659] dump_stack_lvl+0x100/0x190 [ 547.522087][T14659] should_fail_ex.cold+0x5/0xa [ 547.522104][T14659] _copy_to_user+0x32/0xd0 [ 547.522124][T14659] simple_read_from_buffer+0xcb/0x170 [ 547.522146][T14659] proc_fail_nth_read+0x1af/0x230 [ 547.522165][T14659] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 547.522183][T14659] ? rw_verify_area+0xce/0x6d0 [ 547.522202][T14659] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 547.522219][T14659] vfs_read+0x1e4/0xb30 [ 547.522242][T14659] ? __pfx_vfs_read+0x10/0x10 [ 547.522262][T14659] ? __fget_files+0x215/0x3d0 [ 547.522279][T14659] ? __fget_files+0x21f/0x3d0 [ 547.522297][T14659] ksys_read+0x12a/0x250 [ 547.522309][T14659] ? __pfx_ksys_read+0x10/0x10 [ 547.522327][T14659] do_syscall_64+0x106/0xf80 [ 547.522346][T14659] ? clear_bhb_loop+0x40/0x90 [ 547.522363][T14659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.522378][T14659] RIP: 0033:0x7fcf81d5cfce [ 547.522390][T14659] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 547.522404][T14659] RSP: 002b:00007fcf82ccbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 547.522417][T14659] RAX: ffffffffffffffda RBX: 00007fcf82ccc6c0 RCX: 00007fcf81d5cfce [ 547.522427][T14659] RDX: 000000000000000f RSI: 00007fcf82ccc0a0 RDI: 0000000000000005 [ 547.522435][T14659] RBP: 00007fcf82ccc090 R08: 0000000000000000 R09: 0000000000000000 [ 547.522443][T14659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.522451][T14659] R13: 00007fcf82016128 R14: 00007fcf82016090 R15: 00007fffc36e13b8 [ 547.522471][T14659] [ 548.258104][T14662] zswap: compressor û not available [ 548.678588][T14671] FAULT_INJECTION: forcing a failure. [ 548.678588][T14671] name failslab, interval 1, probability 0, space 0, times 0 [ 548.738132][T14671] CPU: 0 UID: 0 PID: 14671 Comm: syz.6.1794 Tainted: G L syzkaller #0 PREEMPT(full) [ 548.738157][T14671] Tainted: [L]=SOFTLOCKUP [ 548.738162][T14671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 548.738170][T14671] Call Trace: [ 548.738175][T14671] [ 548.738181][T14671] dump_stack_lvl+0x100/0x190 [ 548.738206][T14671] should_fail_ex.cold+0x5/0xa [ 548.738223][T14671] ? tomoyo_encode2+0xfb/0x3c0 [ 548.738240][T14671] should_failslab+0xc2/0x120 [ 548.738256][T14671] __kmalloc_noprof+0xe0/0x850 [ 548.738275][T14671] ? d_absolute_path+0x136/0x1b0 [ 548.738297][T14671] tomoyo_encode2+0xfb/0x3c0 [ 548.738317][T14671] tomoyo_encode+0x29/0x50 [ 548.738333][T14671] tomoyo_realpath_from_path+0x18c/0x690 [ 548.738356][T14671] tomoyo_path_number_perm+0x23c/0x580 [ 548.738371][T14671] ? tomoyo_path_number_perm+0x22e/0x580 [ 548.738387][T14671] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 548.738402][T14671] ? rcu_is_watching+0x12/0xc0 [ 548.738422][T14671] ? trace_contention_end+0x15f/0x1b0 [ 548.738459][T14671] ? __pfx___might_resched+0x10/0x10 [ 548.738478][T14671] ? find_held_lock+0x2b/0x80 [ 548.738491][T14671] ? mnt_get_write_access+0x52/0x2f0 [ 548.738512][T14671] ? down_write_killable+0x152/0x250 [ 548.738534][T14671] ? __pfx_down_write_killable+0x10/0x10 [ 548.738559][T14671] security_path_chmod+0x121/0x2c0 [ 548.738574][T14671] chmod_common+0x19a/0x4d0 [ 548.738593][T14671] ? __pfx_chmod_common+0x10/0x10 [ 548.738607][T14671] ? find_held_lock+0x2b/0x80 [ 548.738619][T14671] ? __fget_files+0x215/0x3d0 [ 548.738632][T14671] ? __fget_files+0x215/0x3d0 [ 548.738656][T14671] __x64_sys_fchmod+0x10e/0x1b0 [ 548.738672][T14671] do_syscall_64+0x106/0xf80 [ 548.738691][T14671] ? clear_bhb_loop+0x40/0x90 [ 548.738708][T14671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.738723][T14671] RIP: 0033:0x7fcf81d9c799 [ 548.738736][T14671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.738750][T14671] RSP: 002b:00007fcf82ccc028 EFLAGS: 00000246 ORIG_RAX: 000000000000005b [ 548.738764][T14671] RAX: ffffffffffffffda RBX: 00007fcf82016090 RCX: 00007fcf81d9c799 [ 548.738773][T14671] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000003 [ 548.738781][T14671] RBP: 00007fcf82ccc090 R08: 0000000000000000 R09: 0000000000000000 [ 548.738789][T14671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.738798][T14671] R13: 00007fcf82016128 R14: 00007fcf82016090 R15: 00007fffc36e13b8 [ 548.738817][T14671] [ 548.738830][T14671] ERROR: Out of memory at tomoyo_realpath_from_path. [ 549.541098][T10749] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 549.628272][ T8585] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 549.688521][ T8585] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 549.778299][ T8585] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 549.815853][ T8585] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 550.581564][T14674] chnl_net:caif_netlink_parms(): no params data found [ 550.711480][T14690] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 550.818186][T14674] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.883289][T14674] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.912549][T14674] bridge_slave_0: entered allmulticast mode [ 550.944706][T14674] bridge_slave_0: entered promiscuous mode [ 550.975948][T14674] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.017865][T14674] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.046131][T14674] bridge_slave_1: entered allmulticast mode [ 551.081427][T14674] bridge_slave_1: entered promiscuous mode [ 551.183804][T14674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.394767][T14674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.578510][T14674] team0: Port device team_slave_0 added [ 551.615383][T14674] team0: Port device team_slave_1 added [ 551.749643][T14674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.756601][T14674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.874475][T14674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.885892][ T8585] Bluetooth: hci6: command tx timeout [ 551.952965][T14674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.970887][T14674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.045794][T14674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.386654][T14674] hsr_slave_0: entered promiscuous mode [ 552.433247][T14674] hsr_slave_1: entered promiscuous mode [ 552.439248][T14674] debugfs: 'hsr0' already exists in 'hsr' [ 552.490142][T14674] Cannot create hsr debugfs directory [ 553.093550][ T30] audit: type=1800 audit(2147483815.025:14): pid=14727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1808" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 553.125319][T14674] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 553.224239][T14674] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 553.268931][T14674] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 553.318537][T14674] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 553.546201][T14674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.621699][T14674] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.669990][ T9096] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.677112][ T9096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.748831][ T9096] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.755947][ T9096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.962956][ T8585] Bluetooth: hci6: command tx timeout [ 554.279402][T14674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.290826][T14742] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1807'. [ 554.968839][T14674] veth0_vlan: entered promiscuous mode [ 555.024117][T14674] veth1_vlan: entered promiscuous mode [ 555.101664][T14674] veth0_macvtap: entered promiscuous mode [ 555.134741][T14674] veth1_macvtap: entered promiscuous mode [ 555.203728][T14674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.259192][T14674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.314496][ T9097] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.337750][ T9097] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.386956][ T9097] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.433792][ T9097] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.630832][ T9097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.679176][ T9097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.836630][T12406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.861196][T12406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.041498][ T8585] Bluetooth: hci6: command tx timeout [ 556.143216][T14771] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 556.813532][T14789] mmap: syz.6.1817 (14789): VmData 37597184 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 558.095620][T14801] zswap: compressor û not available [ 558.124511][ T8585] Bluetooth: hci6: command tx timeout [ 558.433432][T14811] FAULT_INJECTION: forcing a failure. [ 558.433432][T14811] name failslab, interval 1, probability 0, space 0, times 0 [ 558.564466][T14811] CPU: 0 UID: 0 PID: 14811 Comm: syz.5.1823 Tainted: G L syzkaller #0 PREEMPT(full) [ 558.564493][T14811] Tainted: [L]=SOFTLOCKUP [ 558.564499][T14811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 558.564509][T14811] Call Trace: [ 558.564514][T14811] [ 558.564520][T14811] dump_stack_lvl+0x100/0x190 [ 558.564546][T14811] should_fail_ex.cold+0x5/0xa [ 558.564565][T14811] ? __netlink_kernel_create+0x181/0x750 [ 558.564586][T14811] should_failslab+0xc2/0x120 [ 558.564603][T14811] __kmalloc_noprof+0xe0/0x850 [ 558.564629][T14811] __netlink_kernel_create+0x181/0x750 [ 558.564652][T14811] ? __pfx___netlink_kernel_create+0x10/0x10 [ 558.564673][T14811] ? find_held_lock+0x2b/0x80 [ 558.564686][T14811] ? audit_net_init+0x190/0x440 [ 558.564705][T14811] ? audit_net_init+0x190/0x440 [ 558.564726][T14811] audit_net_init+0x1ae/0x440 [ 558.564745][T14811] ? __pfx_audit_net_init+0x10/0x10 [ 558.564763][T14811] ? rcu_is_watching+0x12/0xc0 [ 558.564784][T14811] ? __pfx_audit_receive+0x10/0x10 [ 558.564805][T14811] ? __pfx_audit_multicast_bind+0x10/0x10 [ 558.564825][T14811] ? __pfx_audit_multicast_unbind+0x10/0x10 [ 558.564848][T14811] ? __kmalloc_noprof+0x320/0x850 [ 558.564871][T14811] ? __pfx_audit_net_init+0x10/0x10 [ 558.564889][T14811] ops_init+0x1e2/0x5f0 [ 558.564913][T14811] setup_net+0x118/0x3a0 [ 558.564934][T14811] ? __pfx_setup_net+0x10/0x10 [ 558.564954][T14811] ? lockdep_init_map_type+0x5c/0x250 [ 558.564973][T14811] ? mutex_init_lockep+0x110/0x150 [ 558.564995][T14811] copy_net_ns+0x46f/0x7c0 [ 558.565011][T14811] create_new_namespaces+0x3ea/0xac0 [ 558.565031][T14811] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 558.565049][T14811] ksys_unshare+0x473/0xad0 [ 558.565068][T14811] ? __pfx_ksys_unshare+0x10/0x10 [ 558.565093][T14811] __x64_sys_unshare+0x31/0x40 [ 558.565111][T14811] do_syscall_64+0x106/0xf80 [ 558.565130][T14811] ? clear_bhb_loop+0x40/0x90 [ 558.565157][T14811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.565173][T14811] RIP: 0033:0x7f14d8d9c799 [ 558.565186][T14811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.565202][T14811] RSP: 002b:00007f14d9c62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 558.565216][T14811] RAX: ffffffffffffffda RBX: 00007f14d9015fa0 RCX: 00007f14d8d9c799 [ 558.565226][T14811] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 558.565235][T14811] RBP: 00007f14d8e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 558.565244][T14811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.565253][T14811] R13: 00007f14d9016038 R14: 00007f14d9015fa0 R15: 00007ffd7b111528 [ 558.565273][T14811] [ 558.565362][T14811] audit: cannot initialize netlink socket in namespace [ 559.078001][T14795] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1819'. [ 559.748050][T14796] Process accounting paused [ 559.969987][T14824] Invalid ELF header magic: != ELF [ 560.511465][T14839] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 560.536490][T14839] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 560.573526][T14839] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 560.602671][T14839] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 560.629865][T14839] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 560.664256][T14839] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 560.690717][T14839] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 560.765898][T14839] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 562.147879][T14869] FAULT_INJECTION: forcing a failure. [ 562.147879][T14869] name failslab, interval 1, probability 0, space 0, times 0 [ 562.239644][T14869] CPU: 0 UID: 0 PID: 14869 Comm: syz.6.1836 Tainted: G L syzkaller #0 PREEMPT(full) [ 562.239669][T14869] Tainted: [L]=SOFTLOCKUP [ 562.239674][T14869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 562.239682][T14869] Call Trace: [ 562.239687][T14869] [ 562.239693][T14869] dump_stack_lvl+0x100/0x190 [ 562.239719][T14869] should_fail_ex.cold+0x5/0xa [ 562.239736][T14869] should_failslab+0xc2/0x120 [ 562.239752][T14869] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 562.239773][T14869] ? copy_process+0x48b/0x7a40 [ 562.239787][T14869] ? rcu_is_watching+0x12/0xc0 [ 562.239811][T14869] copy_process+0x48b/0x7a40 [ 562.239827][T14869] ? __pfx___futex_wait+0x10/0x10 [ 562.239854][T14869] ? __pfx_copy_process+0x10/0x10 [ 562.239878][T14869] kernel_clone+0xfc/0x9a0 [ 562.239893][T14869] ? __pfx_futex_wait+0x10/0x10 [ 562.239913][T14869] ? __pfx_kernel_clone+0x10/0x10 [ 562.239939][T14869] __do_sys_clone+0xd9/0x120 [ 562.239955][T14869] ? __pfx___do_sys_clone+0x10/0x10 [ 562.239993][T14869] do_syscall_64+0x106/0xf80 [ 562.240012][T14869] ? clear_bhb_loop+0x40/0x90 [ 562.240029][T14869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.240043][T14869] RIP: 0033:0x7fcf81d9c799 [ 562.240055][T14869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.240069][T14869] RSP: 002b:00007fcf82cecfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 562.240083][T14869] RAX: ffffffffffffffda RBX: 00007fcf82015fa0 RCX: 00007fcf81d9c799 [ 562.240092][T14869] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 562.240101][T14869] RBP: 00007fcf81e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 562.240109][T14869] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 562.240117][T14869] R13: 00007fcf82016038 R14: 00007fcf82015fa0 R15: 00007fffc36e13b8 [ 562.240135][T14869] [ 562.641982][T14829] sd 0:0:1:0: PR command failed: 1026 [ 562.647871][T14829] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 562.654556][T14829] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 562.687918][ T8585] Bluetooth: hci1: command 0x0c1a tx timeout [ 562.693930][ T8585] Bluetooth: hci2: command 0x0c1a tx timeout [ 562.702225][ T8585] Bluetooth: hci0: command 0x0c1a tx timeout [ 562.708279][ T8585] Bluetooth: hci3: command 0x0c1a tx timeout [ 562.714247][ T8585] Bluetooth: hci6: command 0x0c1a tx timeout [ 562.720254][ T8585] Bluetooth: hci5: command 0x0c1a tx timeout [ 562.956165][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.963245][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.080490][T14878] FAULT_INJECTION: forcing a failure. [ 563.080490][T14878] name failslab, interval 1, probability 0, space 0, times 0 [ 563.169516][T14878] CPU: 0 UID: 0 PID: 14878 Comm: syz.6.1838 Tainted: G L syzkaller #0 PREEMPT(full) [ 563.169544][T14878] Tainted: [L]=SOFTLOCKUP [ 563.169549][T14878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 563.169559][T14878] Call Trace: [ 563.169564][T14878] [ 563.169571][T14878] dump_stack_lvl+0x100/0x190 [ 563.169598][T14878] should_fail_ex.cold+0x5/0xa [ 563.169615][T14878] ? alloc_pipe_info+0x1ec/0x590 [ 563.169630][T14878] should_failslab+0xc2/0x120 [ 563.169646][T14878] __kmalloc_noprof+0xe0/0x850 [ 563.169668][T14878] ? bpf_lsm_capable+0x9/0x10 [ 563.169683][T14878] ? security_capable+0x80/0x260 [ 563.169707][T14878] alloc_pipe_info+0x1ec/0x590 [ 563.169733][T14878] splice_direct_to_actor+0x78f/0xa30 [ 563.169750][T14878] ? __lock_acquire+0x4a5/0x2630 [ 563.169767][T14878] ? __pfx_direct_splice_actor+0x10/0x10 [ 563.169783][T14878] ? __pfx_aa_file_perm+0x10/0x10 [ 563.169805][T14878] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 563.169825][T14878] do_splice_direct+0x174/0x240 [ 563.169841][T14878] ? __pfx_do_splice_direct+0x10/0x10 [ 563.169856][T14878] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 563.169881][T14878] ? rw_verify_area+0xce/0x6d0 [ 563.169903][T14878] do_sendfile+0xadc/0xe20 [ 563.169928][T14878] ? __pfx_do_sendfile+0x10/0x10 [ 563.169947][T14878] ? apparmor_capable+0x1d7/0x4d0 [ 563.169964][T14878] ? __x64_sys_futex+0x34f/0x4d0 [ 563.169982][T14878] ? __x64_sys_futex+0x358/0x4d0 [ 563.170002][T14878] __x64_sys_sendfile64+0x1d8/0x220 [ 563.170019][T14878] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 563.170040][T14878] do_syscall_64+0x106/0xf80 [ 563.170060][T14878] ? clear_bhb_loop+0x40/0x90 [ 563.170077][T14878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.170093][T14878] RIP: 0033:0x7fcf81d9c799 [ 563.170106][T14878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.170120][T14878] RSP: 002b:00007fcf82ced028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 563.170135][T14878] RAX: ffffffffffffffda RBX: 00007fcf82015fa0 RCX: 00007fcf81d9c799 [ 563.170144][T14878] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 563.170153][T14878] RBP: 00007fcf81e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 563.170163][T14878] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 563.170172][T14878] R13: 00007fcf82016038 R14: 00007fcf82015fa0 R15: 00007fffc36e13b8 [ 563.170191][T14878] [ 564.242686][T14886] futex_wake_op: syz.6.1840 tries to shift op by -2048; fix this program [ 564.292736][T14886] futex_wake_op: syz.6.1840 tries to shift op by -2048; fix this program [ 564.766007][T14512] Bluetooth: hci6: command 0x0c1a tx timeout [ 565.186136][T14899] FAULT_INJECTION: forcing a failure. [ 565.186136][T14899] name failslab, interval 1, probability 0, space 0, times 0 [ 565.276142][T14899] CPU: 0 UID: 0 PID: 14899 Comm: syz.6.1843 Tainted: G L syzkaller #0 PREEMPT(full) [ 565.276169][T14899] Tainted: [L]=SOFTLOCKUP [ 565.276174][T14899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 565.276183][T14899] Call Trace: [ 565.276188][T14899] [ 565.276195][T14899] dump_stack_lvl+0x100/0x190 [ 565.276222][T14899] should_fail_ex.cold+0x5/0xa [ 565.276241][T14899] should_failslab+0xc2/0x120 [ 565.276257][T14899] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 565.276279][T14899] ? zswap_store+0xc42/0x29d0 [ 565.276301][T14899] zswap_store+0xc42/0x29d0 [ 565.276322][T14899] ? __pfx___up_read+0x10/0x10 [ 565.276341][T14899] ? rmap_walk_anon+0x561/0x870 [ 565.276362][T14899] ? __pfx_zswap_store+0x10/0x10 [ 565.276378][T14899] ? do_raw_spin_lock+0x128/0x260 [ 565.276398][T14899] ? find_held_lock+0x2b/0x80 [ 565.276411][T14899] ? folio_free_swap+0x3d9/0xb50 [ 565.276425][T14899] ? folio_free_swap+0x3d9/0xb50 [ 565.276441][T14899] ? do_raw_spin_unlock+0x145/0x1e0 [ 565.276462][T14899] ? _raw_spin_unlock+0x28/0x50 [ 565.276479][T14899] ? folio_free_swap+0x39/0xb50 [ 565.276494][T14899] ? __pfx_try_to_unmap+0x10/0x10 [ 565.276515][T14899] swap_writeout+0x49d/0x12b0 [ 565.276538][T14899] shrink_folio_list+0x5c4a/0x6000 [ 565.276566][T14899] ? __pfx_shrink_folio_list+0x10/0x10 [ 565.276630][T14899] reclaim_folio_list+0xdc/0x600 [ 565.276654][T14899] ? __pfx_reclaim_folio_list+0x10/0x10 [ 565.276681][T14899] ? lru_gen_update_size+0x431/0xe40 [ 565.276706][T14899] ? lru_gen_del_folio+0x382/0x5f0 [ 565.276727][T14899] reclaim_pages+0x428/0x5e0 [ 565.276750][T14899] ? __pfx_reclaim_pages+0x10/0x10 [ 565.276768][T14899] ? madvise_cold_or_pageout_pte_range+0x2247/0x2720 [ 565.276787][T14899] ? folio_isolate_lru+0xd5/0xaa0 [ 565.276810][T14899] madvise_cold_or_pageout_pte_range+0x14e2/0x2720 [ 565.276836][T14899] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 565.276858][T14899] ? css_rstat_updated+0x1ce/0x5a0 [ 565.276874][T14899] ? stack_trace_save+0x8e/0xc0 [ 565.276889][T14899] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 565.276908][T14899] walk_pgd_range+0xc04/0x1eb0 [ 565.276942][T14899] ? __pfx_walk_pgd_range+0x10/0x10 [ 565.276965][T14899] ? folios_put_refs+0x66d/0x840 [ 565.276989][T14899] __walk_page_range+0x163/0x820 [ 565.277019][T14899] walk_page_range_vma_unsafe+0x209/0x8f0 [ 565.277048][T14899] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 565.277075][T14899] ? find_held_lock+0x2b/0x80 [ 565.277087][T14899] ? mlock_drain_local+0x254/0x4e0 [ 565.277108][T14899] ? mlock_drain_local+0x254/0x4e0 [ 565.277131][T14899] walk_page_range_vma+0x63/0x90 [ 565.277158][T14899] madvise_pageout+0x259/0x540 [ 565.277174][T14899] ? __pfx_madvise_pageout+0x10/0x10 [ 565.277201][T14899] ? mtree_range_walk+0x6ce/0xcd0 [ 565.277221][T14899] madvise_vma_behavior+0x3e6/0x3050 [ 565.277238][T14899] ? mt_find+0x687/0x8e0 [ 565.277258][T14899] ? mt_find+0x687/0x8e0 [ 565.277278][T14899] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 565.277298][T14899] ? mt_find+0x45e/0x8e0 [ 565.277319][T14899] ? __pfx_mt_find+0x10/0x10 [ 565.277344][T14899] ? find_vma_prev+0xd8/0x150 [ 565.277358][T14899] ? futex_unqueue+0x133/0x2c0 [ 565.277380][T14899] ? find_vma+0xbf/0x140 [ 565.277393][T14899] ? __pfx_find_vma+0x10/0x10 [ 565.277406][T14899] ? __futex_wait+0x256/0x300 [ 565.277431][T14899] madvise_walk_vmas+0x2fe/0xa90 [ 565.277452][T14899] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 565.277474][T14899] madvise_do_behavior+0x1ea/0x510 [ 565.277493][T14899] ? __pfx_madvise_do_behavior+0x10/0x10 [ 565.277511][T14899] ? down_read+0x13b/0x460 [ 565.277533][T14899] do_madvise+0x195/0x240 [ 565.277550][T14899] ? __pfx_do_madvise+0x10/0x10 [ 565.277566][T14899] ? do_futex+0x192/0x350 [ 565.277607][T14899] __x64_sys_madvise+0xa9/0x110 [ 565.277624][T14899] ? lockdep_hardirqs_on+0x78/0x100 [ 565.277646][T14899] do_syscall_64+0x106/0xf80 [ 565.277665][T14899] ? clear_bhb_loop+0x40/0x90 [ 565.277683][T14899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.277698][T14899] RIP: 0033:0x7fcf81d9c799 [ 565.277712][T14899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.277726][T14899] RSP: 002b:00007fcf82ced028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 565.277741][T14899] RAX: ffffffffffffffda RBX: 00007fcf82015fa0 RCX: 00007fcf81d9c799 [ 565.277751][T14899] RDX: 0000000000000015 RSI: ff7fffffffff0001 RDI: 0000000000000000 [ 565.277760][T14899] RBP: 00007fcf81e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 565.277769][T14899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.277778][T14899] R13: 00007fcf82016038 R14: 00007fcf82015fa0 R15: 00007fffc36e13b8 [ 565.277798][T14899] [ 566.327353][ T30] audit: type=1800 audit(2147483827.729:15): pid=14904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1845" name="dbroot" dev="configfs" ino=56958 res=0 errno=0 [ 566.912358][T14512] Bluetooth: hci6: command 0x0c1a tx timeout [ 569.049832][T14927] syz.6.1849 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 569.128095][T14927] CPU: 0 UID: 0 PID: 14927 Comm: syz.6.1849 Tainted: G L syzkaller #0 PREEMPT(full) [ 569.128121][T14927] Tainted: [L]=SOFTLOCKUP [ 569.128132][T14927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 569.128141][T14927] Call Trace: [ 569.128146][T14927] [ 569.128152][T14927] dump_stack_lvl+0x100/0x190 [ 569.128177][T14927] dump_header+0xfb/0x606 [ 569.128195][T14927] oom_kill_process.cold+0xd/0x330 [ 569.128212][T14927] out_of_memory+0x340/0x14f0 [ 569.128238][T14927] ? __pfx_out_of_memory+0x10/0x10 [ 569.128264][T14927] mem_cgroup_out_of_memory+0xc6/0x130 [ 569.128284][T14927] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 569.128303][T14927] ? find_held_lock+0x2b/0x80 [ 569.128320][T14927] ? do_raw_spin_unlock+0x145/0x1e0 [ 569.128341][T14927] ? _raw_spin_unlock+0x28/0x50 [ 569.128361][T14927] try_charge_memcg+0x652/0xc90 [ 569.128381][T14927] ? __pfx_try_charge_memcg+0x10/0x10 [ 569.128400][T14927] ? find_held_lock+0x2b/0x80 [ 569.128413][T14927] ? rcu_read_unlock+0x17/0x60 [ 569.128428][T14927] ? rcu_read_unlock+0x17/0x60 [ 569.128446][T14927] charge_memcg+0xa6/0x280 [ 569.128461][T14927] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 569.128481][T14927] __swap_cache_prepare_and_add+0x528/0x9e0 [ 569.128510][T14927] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 569.128529][T14927] ? __pfx_swap_entry_swapped+0x10/0x10 [ 569.128549][T14927] swap_cache_alloc_folio+0x1cb/0x300 [ 569.128570][T14927] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 569.128597][T14927] swap_cluster_readahead+0x411/0x770 [ 569.128622][T14927] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 569.128658][T14927] shmem_swapin_folio+0x22a4/0x2c10 [ 569.128681][T14927] ? find_held_lock+0x2b/0x80 [ 569.128694][T14927] ? filemap_get_entry+0x1a7/0x3b0 [ 569.128721][T14927] ? __pfx_shmem_swapin_folio+0x10/0x10 [ 569.128741][T14927] ? __pfx_filemap_get_entry+0x10/0x10 [ 569.128762][T14927] ? mod_memcg_lruvec_state+0x1a6/0x630 [ 569.128790][T14927] shmem_get_folio_gfp+0x56c/0x1900 [ 569.128816][T14927] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 569.128839][T14927] ? find_held_lock+0x2b/0x80 [ 569.128855][T14927] shmem_get_folio+0x84/0xb0 [ 569.128878][T14927] collapse_file+0x1263/0x3cc0 [ 569.128900][T14927] ? __lock_acquire+0x4a5/0x2630 [ 569.128919][T14927] ? __pfx_collapse_file+0x10/0x10 [ 569.128943][T14927] ? find_held_lock+0x2b/0x80 [ 569.128956][T14927] ? hpage_collapse_scan_file+0x583/0x1fc0 [ 569.128972][T14927] ? hpage_collapse_scan_file+0x583/0x1fc0 [ 569.128993][T14927] hpage_collapse_scan_file+0x603/0x1fc0 [ 569.129015][T14927] ? __pfx_hpage_collapse_scan_file+0x10/0x10 [ 569.129035][T14927] ? madvise_collapse+0x3cb/0xbe0 [ 569.129052][T14927] ? madvise_collapse+0x3cb/0xbe0 [ 569.129073][T14927] madvise_collapse+0x412/0xbe0 [ 569.129095][T14927] ? finish_task_switch.isra.0+0x200/0xb80 [ 569.129111][T14927] ? __pfx_madvise_collapse+0x10/0x10 [ 569.129133][T14927] ? rcu_is_cpu_rrupt_from_idle+0x1f0/0x270 [ 569.129162][T14927] madvise_vma_behavior+0x1987/0x3050 [ 569.129183][T14927] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 569.129200][T14927] ? mas_prev_setup.constprop.0+0xb6/0x9c0 [ 569.129223][T14927] ? mas_prev+0x9b/0xf0 [ 569.129243][T14927] ? __pfx_mas_prev+0x10/0x10 [ 569.129269][T14927] ? find_vma_prev+0xd8/0x150 [ 569.129283][T14927] ? futex_unqueue+0x133/0x2c0 [ 569.129301][T14927] ? __pfx_find_vma_prev+0x10/0x10 [ 569.129322][T14927] ? __futex_wait+0x256/0x300 [ 569.129346][T14927] madvise_walk_vmas+0x2fe/0xa90 [ 569.129367][T14927] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 569.129389][T14927] madvise_do_behavior+0x1ea/0x510 [ 569.129408][T14927] ? __pfx_madvise_do_behavior+0x10/0x10 [ 569.129425][T14927] ? down_read+0x13b/0x460 [ 569.129448][T14927] do_madvise+0x195/0x240 [ 569.129464][T14927] ? __pfx_do_madvise+0x10/0x10 [ 569.129480][T14927] ? do_futex+0x192/0x350 [ 569.129516][T14927] __x64_sys_madvise+0xa9/0x110 [ 569.129532][T14927] ? lockdep_hardirqs_on+0x78/0x100 [ 569.129552][T14927] do_syscall_64+0x106/0xf80 [ 569.129571][T14927] ? clear_bhb_loop+0x40/0x90 [ 569.129590][T14927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.129605][T14927] RIP: 0033:0x7fcf81d9c799 [ 569.129618][T14927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.129632][T14927] RSP: 002b:00007fcf82ccc028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 569.129646][T14927] RAX: ffffffffffffffda RBX: 00007fcf82016090 RCX: 00007fcf81d9c799 [ 569.129656][T14927] RDX: 0000000000000019 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 569.129664][T14927] RBP: 00007fcf81e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 569.129673][T14927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.129681][T14927] R13: 00007fcf82016128 R14: 00007fcf82016090 R15: 00007fffc36e13b8 [ 569.129700][T14927] [ 569.129706][T14927] memory: usage 3072kB, limit 3072kB, failcnt 102692 [ 569.989737][T14927] memory+swap: usage 66764kB, limit 9007199254740988kB, failcnt 0 [ 570.019897][T14927] kmem: usage 1904kB, limit 9007199254740988kB, failcnt 0 [ 570.027016][T14927] Memory cgroup stats for /syz0: [ 570.027116][T14927] cache 0 [ 570.071858][T14927] rss 0 [ 570.090391][T14927] rss_huge 0 [ 570.101080][T14927] shmem 0 [ 570.110524][T14927] mapped_file 0 [ 570.122314][T14927] dirty 0 [ 570.132474][T14927] writeback 0 [ 570.143744][T14927] workingset_refault_anon 21407 [ 570.155576][T14927] workingset_refault_file 10366 [ 570.173615][T14927] swap 65220608 [ 570.187105][T14927] swapcached 849108992 [ 570.192360][T14927] pgpgin 373118 [ 570.197424][T14927] pgpgout 429629 [ 570.201290][T14927] pgfault 269731 [ 570.204908][T14927] pgmajfault 8861 [ 570.208924][T14927] inactive_anon 1196032 [ 570.213104][T14927] active_anon 0 [ 570.216631][T14927] inactive_file 0 [ 570.220821][T14927] active_file 0 [ 570.224306][T14927] unevictable 0 [ 570.227821][T14927] hierarchical_memory_limit 3145728 [ 570.233375][T14927] hierarchical_memsw_limit 9223372036854771712 [ 570.239753][T14927] total_cache 0 [ 570.243231][T14927] total_rss 0 [ 570.246559][T14927] total_rss_huge 0 [ 570.250664][T14927] total_shmem 0 [ 570.254150][T14927] total_mapped_file 0 [ 570.258166][T14927] total_dirty 0 [ 570.261971][T14927] total_writeback 0 [ 570.265800][T14927] total_workingset_refault_anon 21407 [ 570.276512][T14927] total_workingset_refault_file 10366 [ 570.284356][T14927] total_swap 65220608 [ 570.288848][T14927] total_swapcached 849108992 [ 570.293470][T14927] total_pgpgin 373118 [ 570.297487][T14927] total_pgpgout 429629 [ 570.301917][T14927] total_pgfault 269731 [ 570.306146][T14927] total_pgmajfault 8861 [ 570.310571][T14927] total_inactive_anon 1196032 [ 570.315314][T14927] total_active_anon 0 [ 570.319514][T14927] total_inactive_file 0 [ 570.323710][T14927] total_active_file 0 [ 570.327743][T14927] total_unevictable 0 [ 570.332300][T14927] anon_cost 0 [ 570.335636][T14927] file_cost 0 [ 570.339235][T14927] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1766,pid=14556,uid=0 [ 570.354374][T14927] Memory cgroup out of memory: Killed process 14556 (syz.0.1766) total-vm:104468kB, anon-rss:1236kB, file-rss:63996kB, shmem-rss:0kB, UID:0 pgtables:216kB oom_score_adj:1000 [ 574.773791][T15008] ubi: mtd0 is already attached to ubi31 [ 574.825763][T15008] FAULT_INJECTION: forcing a failure. [ 574.825763][T15008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 574.910872][T15008] CPU: 0 UID: 0 PID: 15008 Comm: syz.0.1869 Tainted: G L syzkaller #0 PREEMPT(full) [ 574.910898][T15008] Tainted: [L]=SOFTLOCKUP [ 574.910904][T15008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 574.910913][T15008] Call Trace: [ 574.910918][T15008] [ 574.910925][T15008] dump_stack_lvl+0x100/0x190 [ 574.910952][T15008] should_fail_ex.cold+0x5/0xa [ 574.910971][T15008] _copy_from_iter+0x1f4/0x1690 [ 574.910993][T15008] ? __pfx__copy_from_iter+0x10/0x10 [ 574.911015][T15008] ? __pfx___might_resched+0x10/0x10 [ 574.911041][T15008] file_tty_write.isra.0+0x45b/0x890 [ 574.911137][T15008] redirected_tty_write+0xd4/0x120 [ 574.911159][T15008] vfs_write+0x6ac/0x1070 [ 574.911174][T15008] ? __pfx_redirected_tty_write+0x10/0x10 [ 574.911197][T15008] ? __pfx_vfs_write+0x10/0x10 [ 574.911209][T15008] ? find_held_lock+0x2b/0x80 [ 574.911235][T15008] ksys_write+0x12a/0x250 [ 574.911249][T15008] ? __pfx_ksys_write+0x10/0x10 [ 574.911269][T15008] do_syscall_64+0x106/0xf80 [ 574.911289][T15008] ? clear_bhb_loop+0x40/0x90 [ 574.911307][T15008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.911322][T15008] RIP: 0033:0x7fed5e39c799 [ 574.911335][T15008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.911350][T15008] RSP: 002b:00007fed5f1f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 574.911365][T15008] RAX: ffffffffffffffda RBX: 00007fed5e615fa0 RCX: 00007fed5e39c799 [ 574.911375][T15008] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 000000000000000c [ 574.911383][T15008] RBP: 00007fed5e432c99 R08: 0000000000000000 R09: 0000000000000000 [ 574.911392][T15008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 574.911401][T15008] R13: 00007fed5e616038 R14: 00007fed5e615fa0 R15: 00007ffc6ac5c578 [ 574.911421][T15008] [ 579.478638][T15075] zswap: compressor û not available [ 579.722280][T15081] FAULT_INJECTION: forcing a failure. [ 579.722280][T15081] name failslab, interval 1, probability 0, space 0, times 0 [ 579.795038][T15081] CPU: 0 UID: 0 PID: 15081 Comm: syz.7.1885 Tainted: G L syzkaller #0 PREEMPT(full) [ 579.795065][T15081] Tainted: [L]=SOFTLOCKUP [ 579.795070][T15081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 579.795079][T15081] Call Trace: [ 579.795085][T15081] [ 579.795090][T15081] dump_stack_lvl+0x100/0x190 [ 579.795124][T15081] should_fail_ex.cold+0x5/0xa [ 579.795143][T15081] should_failslab+0xc2/0x120 [ 579.795159][T15081] __kmalloc_cache_noprof+0x7a/0x6f0 [ 579.795179][T15081] ? loop_add+0xb9/0xb60 [ 579.795202][T15081] loop_add+0xb9/0xb60 [ 579.795220][T15081] ? __pfx_loop_add+0x10/0x10 [ 579.795251][T15081] ? find_held_lock+0x2b/0x80 [ 579.795264][T15081] ? __fget_files+0x215/0x3d0 [ 579.795281][T15081] loop_control_ioctl+0xae/0x620 [ 579.795301][T15081] ? __pfx_loop_control_ioctl+0x10/0x10 [ 579.795323][T15081] ? __pfx_loop_control_ioctl+0x10/0x10 [ 579.795344][T15081] __x64_sys_ioctl+0x18e/0x210 [ 579.795366][T15081] do_syscall_64+0x106/0xf80 [ 579.795385][T15081] ? clear_bhb_loop+0x40/0x90 [ 579.795403][T15081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.795418][T15081] RIP: 0033:0x7f6441f9c799 [ 579.795431][T15081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.795445][T15081] RSP: 002b:00007f6442e51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 579.795460][T15081] RAX: ffffffffffffffda RBX: 00007f6442215fa0 RCX: 00007f6441f9c799 [ 579.795470][T15081] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000004 [ 579.795479][T15081] RBP: 00007f6442032c99 R08: 0000000000000000 R09: 0000000000000000 [ 579.795487][T15081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.795496][T15081] R13: 00007f6442216038 R14: 00007f6442215fa0 R15: 00007ffec83add28 [ 579.795515][T15081] [ 580.078895][T15083] ubi: mtd0 is already attached to ubi31 [ 580.097556][T15083] FAULT_INJECTION: forcing a failure. [ 580.097556][T15083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 580.110611][T15083] CPU: 0 UID: 0 PID: 15083 Comm: syz.5.1889 Tainted: G L syzkaller #0 PREEMPT(full) [ 580.110635][T15083] Tainted: [L]=SOFTLOCKUP [ 580.110640][T15083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 580.110648][T15083] Call Trace: [ 580.110655][T15083] [ 580.110661][T15083] dump_stack_lvl+0x100/0x190 [ 580.110687][T15083] should_fail_ex.cold+0x5/0xa [ 580.110705][T15083] _copy_from_iter+0x1f4/0x1690 [ 580.110727][T15083] ? __pfx__copy_from_iter+0x10/0x10 [ 580.110748][T15083] ? __pfx___might_resched+0x10/0x10 [ 580.110773][T15083] file_tty_write.isra.0+0x45b/0x890 [ 580.110800][T15083] redirected_tty_write+0xd4/0x120 [ 580.110821][T15083] vfs_write+0x6ac/0x1070 [ 580.110836][T15083] ? __pfx_redirected_tty_write+0x10/0x10 [ 580.110858][T15083] ? __pfx_vfs_write+0x10/0x10 [ 580.110870][T15083] ? find_held_lock+0x2b/0x80 [ 580.110896][T15083] ksys_write+0x12a/0x250 [ 580.110909][T15083] ? __pfx_ksys_write+0x10/0x10 [ 580.110928][T15083] do_syscall_64+0x106/0xf80 [ 580.110947][T15083] ? clear_bhb_loop+0x40/0x90 [ 580.110966][T15083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.110981][T15083] RIP: 0033:0x7f14d8d9c799 [ 580.110993][T15083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.111007][T15083] RSP: 002b:00007f14d9c62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 580.111021][T15083] RAX: ffffffffffffffda RBX: 00007f14d9015fa0 RCX: 00007f14d8d9c799 [ 580.111031][T15083] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 000000000000000c [ 580.111040][T15083] RBP: 00007f14d8e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 580.111049][T15083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 580.111069][T15083] R13: 00007f14d9016038 R14: 00007f14d9015fa0 R15: 00007ffd7b111528 [ 580.111089][T15083] [ 580.611307][T15089] FAULT_INJECTION: forcing a failure. [ 580.611307][T15089] name failslab, interval 1, probability 0, space 0, times 0 [ 580.674837][T15089] CPU: 0 UID: 0 PID: 15089 Comm: syz.6.1887 Tainted: G L syzkaller #0 PREEMPT(full) [ 580.674863][T15089] Tainted: [L]=SOFTLOCKUP [ 580.674869][T15089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 580.674878][T15089] Call Trace: [ 580.674884][T15089] [ 580.674890][T15089] dump_stack_lvl+0x100/0x190 [ 580.674917][T15089] should_fail_ex.cold+0x5/0xa [ 580.674936][T15089] should_failslab+0xc2/0x120 [ 580.674952][T15089] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 580.674973][T15089] ? mas_alloc_nodes+0x280/0x390 [ 580.674995][T15089] mas_alloc_nodes+0x280/0x390 [ 580.675023][T15089] mas_preallocate+0x39c/0xf10 [ 580.675045][T15089] ? __memcg_slab_post_alloc_hook+0x420/0x990 [ 580.675067][T15089] ? __pfx_mas_preallocate+0x10/0x10 [ 580.675093][T15089] ? anon_vma_name+0x5a/0x250 [ 580.675113][T15089] __split_vma+0x33d/0xd90 [ 580.675135][T15089] ? __pfx___split_vma+0x10/0x10 [ 580.675159][T15089] ? __pfx_mas_prev+0x10/0x10 [ 580.675184][T15089] vms_gather_munmap_vmas+0x39f/0x1500 [ 580.675204][T15089] ? find_held_lock+0x2b/0x80 [ 580.675222][T15089] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 580.675242][T15089] ? move_page_tables+0xe1d/0x4500 [ 580.675272][T15089] do_vmi_align_munmap+0x287/0x5f0 [ 580.675295][T15089] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 580.675341][T15089] do_vmi_munmap+0x1f8/0x3e0 [ 580.675365][T15089] move_vma+0xd99/0x1890 [ 580.675389][T15089] ? __pfx_move_vma+0x10/0x10 [ 580.675410][T15089] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 580.675435][T15089] ? vrm_set_new_addr+0x204/0x290 [ 580.675456][T15089] mremap_to+0x1b7/0x450 [ 580.675478][T15089] do_mremap+0xb76/0x2130 [ 580.675505][T15089] ? __pfx_do_mremap+0x10/0x10 [ 580.675529][T15089] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 580.675558][T15089] __do_sys_mremap+0x126/0x170 [ 580.675579][T15089] ? __pfx___do_sys_mremap+0x10/0x10 [ 580.675604][T15089] ? __x64_sys_futex+0x34f/0x4d0 [ 580.675634][T15089] do_syscall_64+0x106/0xf80 [ 580.675653][T15089] ? clear_bhb_loop+0x40/0x90 [ 580.675672][T15089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.675686][T15089] RIP: 0033:0x7fcf81d9c799 [ 580.675700][T15089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.675715][T15089] RSP: 002b:00007fcf82ccc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 580.675730][T15089] RAX: ffffffffffffffda RBX: 00007fcf82016090 RCX: 00007fcf81d9c799 [ 580.675739][T15089] RDX: 0000000000000037 RSI: 0000000000000008 RDI: 0000200000001000 [ 580.675748][T15089] RBP: 00007fcf81e32c99 R08: 000000110c230000 R09: 0000000000000000 [ 580.675758][T15089] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 580.675766][T15089] R13: 00007fcf82016128 R14: 00007fcf82016090 R15: 00007fffc36e13b8 [ 580.675786][T15089] [ 581.879456][T15111] Process accounting resumed [ 581.951656][T15113] FAULT_INJECTION: forcing a failure. [ 581.951656][T15113] name failslab, interval 1, probability 0, space 0, times 0 [ 582.017102][T15113] CPU: 0 UID: 0 PID: 15113 Comm: syz.6.1893 Tainted: G L syzkaller #0 PREEMPT(full) [ 582.017129][T15113] Tainted: [L]=SOFTLOCKUP [ 582.017135][T15113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 582.017144][T15113] Call Trace: [ 582.017150][T15113] [ 582.017156][T15113] dump_stack_lvl+0x100/0x190 [ 582.017184][T15113] should_fail_ex.cold+0x5/0xa [ 582.017203][T15113] should_failslab+0xc2/0x120 [ 582.017219][T15113] __kmalloc_node_noprof+0xe6/0x850 [ 582.017240][T15113] ? __rb_allocate_pages+0x589/0xf50 [ 582.017264][T15113] __rb_allocate_pages+0x589/0xf50 [ 582.017290][T15113] ring_buffer_subbuf_order_set+0x3ef/0x18c0 [ 582.017315][T15113] ? tracing_stop_tr+0xf6/0x210 [ 582.017337][T15113] ? __pfx_ring_buffer_subbuf_order_set+0x10/0x10 [ 582.017357][T15113] ? __pfx___might_resched+0x10/0x10 [ 582.017378][T15113] ? iovec_from_user+0xda/0x140 [ 582.017400][T15113] buffer_subbuf_size_write+0x182/0x280 [ 582.017415][T15113] ? __pfx_buffer_subbuf_size_write+0x10/0x10 [ 582.017439][T15113] ? iov_iter_advance+0xac/0x6d0 [ 582.017458][T15113] ? __pfx_buffer_subbuf_size_write+0x10/0x10 [ 582.017480][T15113] vfs_writev+0x5ea/0xe10 [ 582.017502][T15113] ? rcu_is_watching+0x12/0xc0 [ 582.017528][T15113] ? __pfx_vfs_writev+0x10/0x10 [ 582.017547][T15113] ? fdget_pos+0x2aa/0x380 [ 582.017576][T15113] ? __fget_files+0x21f/0x3d0 [ 582.017595][T15113] ? do_writev+0x13e/0x340 [ 582.017614][T15113] do_writev+0x13e/0x340 [ 582.017635][T15113] ? __pfx_do_writev+0x10/0x10 [ 582.017662][T15113] do_syscall_64+0x106/0xf80 [ 582.017681][T15113] ? clear_bhb_loop+0x40/0x90 [ 582.017699][T15113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.017714][T15113] RIP: 0033:0x7fcf81d9c799 [ 582.017728][T15113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 582.017742][T15113] RSP: 002b:00007fcf82ced028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 582.017756][T15113] RAX: ffffffffffffffda RBX: 00007fcf82015fa0 RCX: 00007fcf81d9c799 [ 582.017766][T15113] RDX: 000000000000000a RSI: 0000200000000200 RDI: 0000000000000009 [ 582.017775][T15113] RBP: 00007fcf81e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 582.017783][T15113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 582.017792][T15113] R13: 00007fcf82016038 R14: 00007fcf82015fa0 R15: 00007fffc36e13b8 [ 582.017815][T15113] [ 582.450578][T15085] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1888'. [ 584.182670][T15140] FAULT_INJECTION: forcing a failure. [ 584.182670][T15140] name failslab, interval 1, probability 0, space 0, times 0 [ 584.218912][T15140] CPU: 0 UID: 0 PID: 15140 Comm: syz.7.1899 Tainted: G L syzkaller #0 PREEMPT(full) [ 584.218938][T15140] Tainted: [L]=SOFTLOCKUP [ 584.218944][T15140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 584.218953][T15140] Call Trace: [ 584.218958][T15140] [ 584.218964][T15140] dump_stack_lvl+0x100/0x190 [ 584.218991][T15140] should_fail_ex.cold+0x5/0xa [ 584.219009][T15140] ? process_preds+0x452/0x1d90 [ 584.219029][T15140] should_failslab+0xc2/0x120 [ 584.219045][T15140] __kmalloc_noprof+0xe0/0x850 [ 584.219071][T15140] process_preds+0x452/0x1d90 [ 584.219096][T15140] ? create_filter_start.constprop.0+0x134/0x310 [ 584.219120][T15140] create_filter+0x140/0x210 [ 584.219142][T15140] ? __pfx_create_filter+0x10/0x10 [ 584.219163][T15140] ? __pfx___mutex_lock+0x10/0x10 [ 584.219184][T15140] ? find_held_lock+0x2b/0x80 [ 584.219201][T15140] apply_event_filter+0x220/0x500 [ 584.219224][T15140] ? __pfx_apply_event_filter+0x10/0x10 [ 584.219252][T15140] event_filter_write+0x16d/0x290 [ 584.219271][T15140] vfs_write+0x2aa/0x1070 [ 584.219285][T15140] ? __pfx_event_filter_write+0x10/0x10 [ 584.219304][T15140] ? __pfx_vfs_write+0x10/0x10 [ 584.219316][T15140] ? find_held_lock+0x2b/0x80 [ 584.219329][T15140] ? __fget_files+0x215/0x3d0 [ 584.219343][T15140] ? __fget_files+0x215/0x3d0 [ 584.219360][T15140] ? __fget_files+0x21f/0x3d0 [ 584.219379][T15140] __x64_sys_pwrite64+0x1eb/0x250 [ 584.219394][T15140] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 584.219415][T15140] do_syscall_64+0x106/0xf80 [ 584.219434][T15140] ? clear_bhb_loop+0x40/0x90 [ 584.219452][T15140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.219468][T15140] RIP: 0033:0x7f6441f9c799 [ 584.219481][T15140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.219495][T15140] RSP: 002b:00007f6442e30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 584.219509][T15140] RAX: ffffffffffffffda RBX: 00007f6442216090 RCX: 00007f6441f9c799 [ 584.219519][T15140] RDX: 00000000000006bc RSI: 0000000000000000 RDI: 0000000000000004 [ 584.219528][T15140] RBP: 00007f6442032c99 R08: 0000000000000000 R09: 0000000000000000 [ 584.219537][T15140] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 584.219545][T15140] R13: 00007f6442216128 R14: 00007f6442216090 R15: 00007ffec83add28 [ 584.219564][T15140] [ 584.895171][T15148] ubi: mtd0 is already attached to ubi31 [ 585.022555][T15148] FAULT_INJECTION: forcing a failure. [ 585.022555][T15148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 585.093224][T15148] CPU: 0 UID: 0 PID: 15148 Comm: syz.7.1900 Tainted: G L syzkaller #0 PREEMPT(full) [ 585.093250][T15148] Tainted: [L]=SOFTLOCKUP [ 585.093255][T15148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 585.093264][T15148] Call Trace: [ 585.093269][T15148] [ 585.093275][T15148] dump_stack_lvl+0x100/0x190 [ 585.093301][T15148] should_fail_ex.cold+0x5/0xa [ 585.093318][T15148] _copy_from_iter+0x1f4/0x1690 [ 585.093341][T15148] ? __pfx__copy_from_iter+0x10/0x10 [ 585.093362][T15148] ? __pfx___might_resched+0x10/0x10 [ 585.093387][T15148] file_tty_write.isra.0+0x45b/0x890 [ 585.093414][T15148] redirected_tty_write+0xd4/0x120 [ 585.093436][T15148] vfs_write+0x6ac/0x1070 [ 585.093450][T15148] ? __pfx_redirected_tty_write+0x10/0x10 [ 585.093473][T15148] ? __pfx_vfs_write+0x10/0x10 [ 585.093486][T15148] ? find_held_lock+0x2b/0x80 [ 585.093512][T15148] ksys_write+0x12a/0x250 [ 585.093526][T15148] ? __pfx_ksys_write+0x10/0x10 [ 585.093545][T15148] do_syscall_64+0x106/0xf80 [ 585.093565][T15148] ? clear_bhb_loop+0x40/0x90 [ 585.093583][T15148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.093603][T15148] RIP: 0033:0x7f6441f9c799 [ 585.093616][T15148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.093630][T15148] RSP: 002b:00007f6442e51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 585.093644][T15148] RAX: ffffffffffffffda RBX: 00007f6442215fa0 RCX: 00007f6441f9c799 [ 585.093654][T15148] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 000000000000000c [ 585.093663][T15148] RBP: 00007f6442032c99 R08: 0000000000000000 R09: 0000000000000000 [ 585.093671][T15148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.093680][T15148] R13: 00007f6442216038 R14: 00007f6442215fa0 R15: 00007ffec83add28 [ 585.093699][T15148] [ 586.163419][T15169] FAULT_INJECTION: forcing a failure. [ 586.163419][T15169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.234556][T15169] CPU: 0 UID: 0 PID: 15169 Comm: syz.0.1915 Tainted: G L syzkaller #0 PREEMPT(full) [ 586.234581][T15169] Tainted: [L]=SOFTLOCKUP [ 586.234586][T15169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 586.234594][T15169] Call Trace: [ 586.234599][T15169] [ 586.234605][T15169] dump_stack_lvl+0x100/0x190 [ 586.234631][T15169] should_fail_ex.cold+0x5/0xa [ 586.234648][T15169] _copy_to_user+0x32/0xd0 [ 586.234666][T15169] simple_read_from_buffer+0xcb/0x170 [ 586.234689][T15169] proc_fail_nth_read+0x1af/0x230 [ 586.234708][T15169] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 586.234726][T15169] ? rw_verify_area+0xce/0x6d0 [ 586.234745][T15169] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 586.234762][T15169] vfs_read+0x1e4/0xb30 [ 586.234785][T15169] ? __pfx_vfs_read+0x10/0x10 [ 586.234804][T15169] ? __fget_files+0x215/0x3d0 [ 586.234822][T15169] ? __fget_files+0x21f/0x3d0 [ 586.234840][T15169] ksys_read+0x12a/0x250 [ 586.234852][T15169] ? __pfx_ksys_read+0x10/0x10 [ 586.234863][T15169] ? _raw_read_unlock+0x28/0x50 [ 586.234882][T15169] ? ptrace_check_attach+0xa7/0x410 [ 586.234901][T15169] do_syscall_64+0x106/0xf80 [ 586.234920][T15169] ? clear_bhb_loop+0x40/0x90 [ 586.234938][T15169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.234952][T15169] RIP: 0033:0x7fed5e35cfce [ 586.234964][T15169] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 586.234978][T15169] RSP: 002b:00007fed5f1effe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 586.234993][T15169] RAX: ffffffffffffffda RBX: 00007fed5f1f06c0 RCX: 00007fed5e35cfce [ 586.235002][T15169] RDX: 000000000000000f RSI: 00007fed5f1f00a0 RDI: 0000000000000003 [ 586.235011][T15169] RBP: 00007fed5f1f0090 R08: 0000000000000000 R09: 0000000000000000 [ 586.235019][T15169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.235027][T15169] R13: 00007fed5e616038 R14: 00007fed5e615fa0 R15: 00007ffc6ac5c578 [ 586.235046][T15169] [ 590.604699][T15252] Process accounting resumed [ 593.871655][T15372] FAULT_INJECTION: forcing a failure. [ 593.871655][T15372] name failslab, interval 1, probability 0, space 0, times 0 [ 593.953712][T15372] CPU: 0 UID: 0 PID: 15372 Comm: syz.6.1948 Tainted: G L syzkaller #0 PREEMPT(full) [ 593.953737][T15372] Tainted: [L]=SOFTLOCKUP [ 593.953742][T15372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 593.953750][T15372] Call Trace: [ 593.953755][T15372] [ 593.953761][T15372] dump_stack_lvl+0x100/0x190 [ 593.953786][T15372] should_fail_ex.cold+0x5/0xa [ 593.953808][T15372] ? tomoyo_realpath_from_path+0xb6/0x690 [ 593.953827][T15372] should_failslab+0xc2/0x120 [ 593.953842][T15372] __kmalloc_noprof+0xe0/0x850 [ 593.953867][T15372] tomoyo_realpath_from_path+0xb6/0x690 [ 593.953889][T15372] tomoyo_path_number_perm+0x23c/0x580 [ 593.953904][T15372] ? tomoyo_path_number_perm+0x22e/0x580 [ 593.953921][T15372] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 593.953954][T15372] ? find_held_lock+0x2b/0x80 [ 593.953967][T15372] ? __fget_files+0x215/0x3d0 [ 593.953980][T15372] ? hook_file_ioctl_common+0x146/0x410 [ 593.954062][T15372] ? __fget_files+0x21f/0x3d0 [ 593.954078][T15372] security_file_ioctl+0xd3/0x230 [ 593.954095][T15372] __x64_sys_ioctl+0xb7/0x210 [ 593.954116][T15372] do_syscall_64+0x106/0xf80 [ 593.954135][T15372] ? clear_bhb_loop+0x40/0x90 [ 593.954153][T15372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.954168][T15372] RIP: 0033:0x7fcf81d9c799 [ 593.954180][T15372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.954194][T15372] RSP: 002b:00007fcf82ced028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 593.954208][T15372] RAX: ffffffffffffffda RBX: 00007fcf82015fa0 RCX: 00007fcf81d9c799 [ 593.954218][T15372] RDX: 0000200000000180 RSI: 0000000000000707 RDI: 0000000000000003 [ 593.954226][T15372] RBP: 00007fcf82ced090 R08: 0000000000000000 R09: 0000000000000000 [ 593.954235][T15372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.954243][T15372] R13: 00007fcf82016038 R14: 00007fcf82015fa0 R15: 00007fffc36e13b8 [ 593.954261][T15372] [ 593.954267][T15372] ERROR: Out of memory at tomoyo_realpath_from_path. [ 595.122987][T15382] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1951'. [ 595.304760][T15397] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1949'. [ 595.978902][T15413] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 596.003853][T15413] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 596.050339][T15413] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 596.124182][T15413] page_type: f5(slab) [ 596.159432][T15413] raw: 00fff00000000040 ffff88801ce8d8c0 dead000000000100 dead000000000122 [ 596.237338][T15413] raw: 0000000000000000 0000000800190019 00000000f5000000 0000000000000000 [ 596.290775][T15413] head: 00fff00000000040 ffff88801ce8d8c0 dead000000000100 dead000000000122 [ 596.368254][T15413] head: 0000000000000000 0000000800190019 00000000f5000000 0000000000000000 [ 596.439909][T15413] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 596.469651][T15418] zswap: compressor û not available [ 596.499228][T15413] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 596.566003][T15413] page dumped because: unmovable page [ 596.604208][T15413] page_owner tracks the page as allocated [ 596.643786][T15413] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5196, tgid 5196 (udevadm), ts 28983411177, free_ts 23573992064 [ 596.720699][T15413] post_alloc_hook+0x153/0x170 [ 596.823914][T15413] get_page_from_freelist+0x111d/0x3140 [ 596.849992][T15413] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 596.878927][T15413] new_slab+0xa6/0x6b0 [ 596.898549][T15413] refill_objects+0x26b/0x400 [ 596.926972][T15413] __pcs_replace_empty_main+0x1ab/0x660 [ 596.946551][T15413] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 596.960061][T15413] alloc_inode+0x183/0x250 [ 596.970572][T15413] iget_locked+0x1d9/0x6d0 [ 596.981839][T15413] kernfs_get_inode+0x46/0x470 [ 596.993382][T15413] kernfs_iop_lookup+0x1a7/0x2d0 [ 597.005257][T15413] lookup_open.isra.0+0x631/0x11b0 [ 597.019531][T15413] path_openat+0xa98/0x31a0 [ 597.033493][T15413] do_file_open+0x20e/0x430 [ 597.049992][T15413] do_sys_openat2+0x10d/0x1e0 [ 597.070380][T15413] __x64_sys_openat+0x12d/0x210 [ 597.091893][T15413] page last free pid 1 tgid 1 stack trace: [ 597.097691][T15413] __free_frozen_pages+0x7e1/0x10d0 [ 597.139690][T15413] free_contig_range+0xde/0x1d0 [ 597.149989][T15413] destroy_args+0xa8/0x7a0 [ 597.180532][T15413] debug_vm_pgtable+0x1b66/0x34c0 [ 597.210773][T15413] do_one_initcall+0x11d/0x760 [ 597.224640][T15413] kernel_init_freeable+0x6e5/0x7a0 [ 597.229843][T15413] kernel_init+0x1f/0x1e0 [ 597.271428][T15413] ret_from_fork+0x754/0xd80 [ 597.289752][T15413] ret_from_fork_asm+0x1a/0x30 [ 597.844994][T15443] FAULT_INJECTION: forcing a failure. [ 597.844994][T15443] name failslab, interval 1, probability 0, space 0, times 0 [ 597.887518][T15443] CPU: 0 UID: 0 PID: 15443 Comm: syz.5.1963 Tainted: G L syzkaller #0 PREEMPT(full) [ 597.887543][T15443] Tainted: [L]=SOFTLOCKUP [ 597.887548][T15443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 597.887556][T15443] Call Trace: [ 597.887561][T15443] [ 597.887567][T15443] dump_stack_lvl+0x100/0x190 [ 597.887594][T15443] should_fail_ex.cold+0x5/0xa [ 597.887610][T15443] ? tomoyo_encode2+0xfb/0x3c0 [ 597.887627][T15443] should_failslab+0xc2/0x120 [ 597.887642][T15443] __kmalloc_noprof+0xe0/0x850 [ 597.887662][T15443] ? d_absolute_path+0x136/0x1b0 [ 597.887683][T15443] tomoyo_encode2+0xfb/0x3c0 [ 597.887704][T15443] tomoyo_encode+0x29/0x50 [ 597.887720][T15443] tomoyo_realpath_from_path+0x18c/0x690 [ 597.887742][T15443] tomoyo_path_number_perm+0x23c/0x580 [ 597.887758][T15443] ? tomoyo_path_number_perm+0x22e/0x580 [ 597.887774][T15443] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 597.887808][T15443] ? find_held_lock+0x2b/0x80 [ 597.887821][T15443] ? __fget_files+0x215/0x3d0 [ 597.887833][T15443] ? hook_file_ioctl_common+0x146/0x410 [ 597.887853][T15443] ? __fget_files+0x21f/0x3d0 [ 597.887869][T15443] security_file_ioctl+0xd3/0x230 [ 597.887886][T15443] __x64_sys_ioctl+0xb7/0x210 [ 597.887907][T15443] do_syscall_64+0x106/0xf80 [ 597.887926][T15443] ? clear_bhb_loop+0x40/0x90 [ 597.887944][T15443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.887958][T15443] RIP: 0033:0x7f14d8d9c799 [ 597.887971][T15443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.887984][T15443] RSP: 002b:00007f14d9c62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 597.887998][T15443] RAX: ffffffffffffffda RBX: 00007f14d9015fa0 RCX: 00007f14d8d9c799 [ 597.888007][T15443] RDX: 0000200000000180 RSI: 0000000000000707 RDI: 0000000000000003 [ 597.888016][T15443] RBP: 00007f14d9c62090 R08: 0000000000000000 R09: 0000000000000000 [ 597.888024][T15443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.888032][T15443] R13: 00007f14d9016038 R14: 00007f14d9015fa0 R15: 00007ffd7b111528 [ 597.888051][T15443] [ 597.888064][T15443] ERROR: Out of memory at tomoyo_realpath_from_path. [ 599.475114][T12406] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.591244][T12406] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.688810][T12406] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.840763][T12406] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.028474][ T8585] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 600.055008][ T8585] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 600.063171][ T8585] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 600.075435][ T8585] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 600.083774][ T8585] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 600.331463][T12406] bridge_slave_1: left allmulticast mode [ 600.352153][T12406] bridge_slave_1: left promiscuous mode [ 600.370881][T12406] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.405747][T12406] bridge_slave_0: left allmulticast mode [ 600.411385][T12406] bridge_slave_0: left promiscuous mode [ 600.452610][T12406] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.744186][T15492] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1982'. [ 600.933300][T12406] bond0 (unregistering): (slave ›): Releasing backup interface [ 600.974994][T12406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.996759][T12406] bond0 (unregistering): Released all slaves [ 601.448633][T15477] chnl_net:caif_netlink_parms(): no params data found [ 601.683217][T15507] zswap: compressor û not available [ 602.030092][T15477] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.062241][T15477] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.088501][T15477] bridge_slave_0: entered allmulticast mode [ 602.109866][T15477] bridge_slave_0: entered promiscuous mode [ 602.146050][T14512] Bluetooth: hci4: command tx timeout [ 602.174266][T12406] hsr_slave_0: left promiscuous mode [ 602.197160][T12406] hsr_slave_1: left promiscuous mode [ 602.216481][T12406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.239521][T12406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.262613][T12406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.282871][T12406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.298384][T12406] veth1_macvtap: left promiscuous mode [ 602.304065][T12406] veth0_macvtap: left promiscuous mode [ 602.324555][T12406] veth1_vlan: left promiscuous mode [ 602.329778][T12406] veth0_vlan: left promiscuous mode [ 602.519107][T12406] team0 (unregistering): Port device team_slave_1 removed [ 602.534182][T12406] team0 (unregistering): Port device team_slave_0 removed [ 602.644808][T15477] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.653918][T15477] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.672742][T15477] bridge_slave_1: entered allmulticast mode [ 602.691764][T15477] bridge_slave_1: entered promiscuous mode [ 602.830835][T15477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.878503][T15477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.977622][T15477] team0: Port device team_slave_0 added [ 603.045108][T15477] team0: Port device team_slave_1 added [ 603.159558][T15477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.196328][T15477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.335003][T15477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.383218][T15477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.431029][T15477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.489030][T15544] FAULT_INJECTION: forcing a failure. [ 603.489030][T15544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 603.523700][T15544] CPU: 0 UID: 0 PID: 15544 Comm: syz.5.1980 Tainted: G L syzkaller #0 PREEMPT(full) [ 603.523724][T15544] Tainted: [L]=SOFTLOCKUP [ 603.523729][T15544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 603.523737][T15544] Call Trace: [ 603.523742][T15544] [ 603.523747][T15544] dump_stack_lvl+0x100/0x190 [ 603.523772][T15544] should_fail_ex.cold+0x5/0xa [ 603.523789][T15544] _copy_from_user+0x2e/0xd0 [ 603.523806][T15544] i2cdev_ioctl+0x10a/0x830 [ 603.523889][T15544] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 603.523903][T15544] ? __fget_files+0x21f/0x3d0 [ 603.523919][T15544] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 603.523934][T15544] __x64_sys_ioctl+0x18e/0x210 [ 603.523954][T15544] do_syscall_64+0x106/0xf80 [ 603.523974][T15544] ? clear_bhb_loop+0x40/0x90 [ 603.523991][T15544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.524005][T15544] RIP: 0033:0x7f14d8d9c799 [ 603.524018][T15544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.524032][T15544] RSP: 002b:00007f14d9c62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 603.524046][T15544] RAX: ffffffffffffffda RBX: 00007f14d9015fa0 RCX: 00007f14d8d9c799 [ 603.524056][T15544] RDX: 0000200000000180 RSI: 0000000000000707 RDI: 0000000000000003 [ 603.524064][T15544] RBP: 00007f14d9c62090 R08: 0000000000000000 R09: 0000000000000000 [ 603.524072][T15544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.524081][T15544] R13: 00007f14d9016038 R14: 00007f14d9015fa0 R15: 00007ffd7b111528 [ 603.524099][T15544] [ 603.709660][T15477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.745392][T15477] hsr_slave_0: entered promiscuous mode [ 603.751529][T15477] hsr_slave_1: entered promiscuous mode [ 603.757521][T15477] debugfs: 'hsr0' already exists in 'hsr' [ 603.763224][T15477] Cannot create hsr debugfs directory [ 604.225708][T14512] Bluetooth: hci4: command tx timeout [ 604.839359][T15477] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 604.897339][T15477] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 604.942356][T15477] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 605.016614][T15477] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 605.292717][T15477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.368308][T15477] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.427474][ T9097] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.434577][ T9097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.475438][ T9097] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.482583][ T9097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.006709][T15582] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1984'. [ 606.089933][T15477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.227909][T15477] veth0_vlan: entered promiscuous mode [ 606.277761][T15477] veth1_vlan: entered promiscuous mode [ 606.312898][T14512] Bluetooth: hci4: command tx timeout [ 606.384410][T15477] veth0_macvtap: entered promiscuous mode [ 606.414565][T15477] veth1_macvtap: entered promiscuous mode [ 606.476021][T15477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.539291][T15477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.607646][ T9097] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.643881][ T9097] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.696330][ T9097] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.746761][ T9097] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.973135][T11665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.018675][T11665] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.110450][ T9096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.140334][ T9096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.262887][T15632] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 608.365003][T15635] cgroup: fork rejected by pids controller in /syz5 [ 608.390670][T14512] Bluetooth: hci4: command tx timeout [ 608.401149][T15636] zswap: compressor û not available [ 608.466763][T15638] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1985'. [ 609.317726][T15692] block nbd8: shutting down sockets [ 609.495181][T15699] netlink: 146 bytes leftover after parsing attributes in process `syz.7.1995'. [ 609.521524][T15700] netlink: 146 bytes leftover after parsing attributes in process `syz.7.1995'. [ 609.970467][T15708] futex_wake_op: syz.5.1997 tries to shift op by -2048; fix this program [ 609.990327][T15708] futex_wake_op: syz.5.1997 tries to shift op by -2048; fix this program [ 610.010867][T15708] 0x000000000001-0x000000020000 : "" [ 610.049333][T15708] ftl_cs: FTL header corrupt! [ 610.235924][T15711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1994'. [ 610.679279][ T8585] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 610.689166][ T8585] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 610.696697][ T8585] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 610.705220][ T8585] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 610.713488][ T8585] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 611.723038][T15726] chnl_net:caif_netlink_parms(): no params data found [ 611.807393][T15741] FAULT_INJECTION: forcing a failure. [ 611.807393][T15741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 611.860495][T15741] CPU: 0 UID: 0 PID: 15741 Comm: syz.7.2003 Tainted: G L syzkaller #0 PREEMPT(full) [ 611.860518][T15741] Tainted: [L]=SOFTLOCKUP [ 611.860523][T15741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 611.860531][T15741] Call Trace: [ 611.860535][T15741] [ 611.860541][T15741] dump_stack_lvl+0x100/0x190 [ 611.860566][T15741] should_fail_ex.cold+0x5/0xa [ 611.860583][T15741] _copy_from_user+0x2e/0xd0 [ 611.860600][T15741] memdup_user+0x6b/0xe0 [ 611.860614][T15741] i2cdev_ioctl+0x16a/0x830 [ 611.860629][T15741] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 611.860642][T15741] ? __fget_files+0x21f/0x3d0 [ 611.860659][T15741] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 611.860672][T15741] __x64_sys_ioctl+0x18e/0x210 [ 611.860693][T15741] do_syscall_64+0x106/0xf80 [ 611.860711][T15741] ? clear_bhb_loop+0x40/0x90 [ 611.860728][T15741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.860743][T15741] RIP: 0033:0x7f6441f9c799 [ 611.860756][T15741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.860769][T15741] RSP: 002b:00007f6442e51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 611.860783][T15741] RAX: ffffffffffffffda RBX: 00007f6442215fa0 RCX: 00007f6441f9c799 [ 611.860792][T15741] RDX: 0000200000000180 RSI: 0000000000000707 RDI: 0000000000000003 [ 611.860800][T15741] RBP: 00007f6442e51090 R08: 0000000000000000 R09: 0000000000000000 [ 611.860809][T15741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.860817][T15741] R13: 00007f6442216038 R14: 00007f6442215fa0 R15: 00007ffec83add28 [ 611.860836][T15741] [ 612.067299][T15726] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.074686][T15726] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.083254][T15726] bridge_slave_0: entered allmulticast mode [ 612.090261][T15726] bridge_slave_0: entered promiscuous mode [ 612.097534][T15726] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.104643][T15726] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.111768][T15726] bridge_slave_1: entered allmulticast mode [ 612.118622][T15726] bridge_slave_1: entered promiscuous mode [ 612.141641][T15726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.152952][T15726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.178579][T15726] team0: Port device team_slave_0 added [ 612.187372][T15726] team0: Port device team_slave_1 added [ 612.208973][T15726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.215970][T15726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.242316][T15726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.260830][T15726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.267756][T15726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.352669][T15726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.437963][T15726] hsr_slave_0: entered promiscuous mode [ 612.444309][T15726] hsr_slave_1: entered promiscuous mode [ 612.456143][T15726] debugfs: 'hsr0' already exists in 'hsr' [ 612.489934][T15743] FAULT_INJECTION: forcing a failure. [ 612.489934][T15743] name fail_futex, interval 1, probability 0, space 0, times 0 [ 612.504282][T15718] Process accounting paused [ 612.509833][T15726] Cannot create hsr debugfs directory [ 612.543113][T15743] CPU: 0 UID: 0 PID: 15743 Comm: syz.0.2004 Tainted: G L syzkaller #0 PREEMPT(full) [ 612.543136][T15743] Tainted: [L]=SOFTLOCKUP [ 612.543142][T15743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 612.543151][T15743] Call Trace: [ 612.543156][T15743] [ 612.543161][T15743] dump_stack_lvl+0x100/0x190 [ 612.543188][T15743] should_fail_ex.cold+0x5/0xa [ 612.543207][T15743] get_futex_key+0x1d2/0x1620 [ 612.543227][T15743] ? __pfx_get_futex_key+0x10/0x10 [ 612.543245][T15743] ? __lock_acquire+0x4a5/0x2630 [ 612.543267][T15743] futex_wake+0xea/0x530 [ 612.543290][T15743] ? __pfx_futex_wake+0x10/0x10 [ 612.543312][T15743] ? find_held_lock+0x2b/0x80 [ 612.543325][T15743] ? do_sys_openat2+0x1b4/0x1e0 [ 612.543343][T15743] ? do_sys_openat2+0x1b4/0x1e0 [ 612.543364][T15743] do_futex+0x32b/0x350 [ 612.543382][T15743] ? __pfx_do_futex+0x10/0x10 [ 612.543399][T15743] ? __pfx_do_sys_openat2+0x10/0x10 [ 612.543419][T15743] ? __sys_connect+0xe4/0x170 [ 612.543439][T15743] __x64_sys_futex+0x34f/0x4d0 [ 612.543459][T15743] ? __x64_sys_openat+0x12d/0x210 [ 612.543477][T15743] ? __pfx___x64_sys_futex+0x10/0x10 [ 612.543503][T15743] do_syscall_64+0x106/0xf80 [ 612.543522][T15743] ? clear_bhb_loop+0x40/0x90 [ 612.543540][T15743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.543555][T15743] RIP: 0033:0x7f9386b9c799 [ 612.543568][T15743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.543583][T15743] RSP: 002b:00007f9387b0e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 612.543597][T15743] RAX: ffffffffffffffda RBX: 00007f9386e15fa8 RCX: 00007f9386b9c799 [ 612.543606][T15743] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9386e15fac [ 612.543615][T15743] RBP: 00007f9386e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 612.543624][T15743] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 612.543633][T15743] R13: 00007f9386e16038 R14: 00007fffecdfd9f0 R15: 00007fffecdfdad8 [ 612.543652][T15743] [ 612.991917][ T8585] Bluetooth: hci7: command tx timeout [ 613.893976][T15726] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 613.999296][T15726] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 614.089371][T15726] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 614.167802][T15726] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 614.464198][T15726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.539183][T15726] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.563439][T15784] FAULT_INJECTION: forcing a failure. [ 614.563439][T15784] name failslab, interval 1, probability 0, space 0, times 0 [ 614.592762][T11665] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.599854][T11665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.698836][T11665] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.705981][T11665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.719021][T15784] CPU: 0 UID: 0 PID: 15784 Comm: syz.5.2013 Tainted: G L syzkaller #0 PREEMPT(full) [ 614.719044][T15784] Tainted: [L]=SOFTLOCKUP [ 614.719048][T15784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 614.719057][T15784] Call Trace: [ 614.719062][T15784] [ 614.719068][T15784] dump_stack_lvl+0x100/0x190 [ 614.719093][T15784] should_fail_ex.cold+0x5/0xa [ 614.719110][T15784] ? i2cdev_ioctl_rdwr+0xcf/0x700 [ 614.719124][T15784] should_failslab+0xc2/0x120 [ 614.719139][T15784] __kmalloc_noprof+0xe0/0x850 [ 614.719159][T15784] ? __might_fault+0xc5/0x140 [ 614.719181][T15784] i2cdev_ioctl_rdwr+0xcf/0x700 [ 614.719199][T15784] i2cdev_ioctl+0x19d/0x830 [ 614.719213][T15784] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 614.719226][T15784] ? __fget_files+0x21f/0x3d0 [ 614.719243][T15784] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 614.719257][T15784] __x64_sys_ioctl+0x18e/0x210 [ 614.719277][T15784] do_syscall_64+0x106/0xf80 [ 614.719296][T15784] ? clear_bhb_loop+0x40/0x90 [ 614.719313][T15784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.719328][T15784] RIP: 0033:0x7f14d8d9c799 [ 614.719340][T15784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.719354][T15784] RSP: 002b:00007f14d9c62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 614.719367][T15784] RAX: ffffffffffffffda RBX: 00007f14d9015fa0 RCX: 00007f14d8d9c799 [ 614.719377][T15784] RDX: 0000200000000180 RSI: 0000000000000707 RDI: 0000000000000003 [ 614.719385][T15784] RBP: 00007f14d9c62090 R08: 0000000000000000 R09: 0000000000000000 [ 614.719393][T15784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.719401][T15784] R13: 00007f14d9016038 R14: 00007f14d9015fa0 R15: 00007ffd7b111528 [ 614.719420][T15784] [ 615.178439][ T8585] Bluetooth: hci7: command tx timeout [ 615.226314][T15726] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 615.265824][T15726] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 615.790145][T15726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.637269][T15726] veth0_vlan: entered promiscuous mode [ 616.721071][T15726] veth1_vlan: entered promiscuous mode [ 616.912164][T15726] veth0_macvtap: entered promiscuous mode [ 616.965091][T15726] veth1_macvtap: entered promiscuous mode [ 617.189224][T15726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 617.201746][ T8585] Bluetooth: hci7: command tx timeout [ 617.328737][T15726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.419685][ T9096] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.459891][ T9096] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.541999][ T9096] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.614747][ T9096] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.744345][ T9096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.786423][ T9096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.945015][T12404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.997881][T12404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.240148][T15853] zswap: compressor not available [ 619.210074][T15871] zswap: compressor not available [ 619.282131][ T8585] Bluetooth: hci7: command tx timeout [ 619.642141][T15884] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2030'. [ 619.653359][T15873] zswap: compressor not available [ 619.695858][T15884] veth1_vlan: entered allmulticast mode [ 620.174275][T15895] netlink: 338 bytes leftover after parsing attributes in process `syz.7.2033'. [ 620.432803][T15898] FAULT_INJECTION: forcing a failure. [ 620.432803][T15898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 620.546311][T15898] CPU: 0 UID: 0 PID: 15898 Comm: syz.0.2034 Tainted: G L syzkaller #0 PREEMPT(full) [ 620.546336][T15898] Tainted: [L]=SOFTLOCKUP [ 620.546341][T15898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 620.546349][T15898] Call Trace: [ 620.546354][T15898] [ 620.546360][T15898] dump_stack_lvl+0x100/0x190 [ 620.546384][T15898] should_fail_ex.cold+0x5/0xa [ 620.546402][T15898] _copy_from_user+0x2e/0xd0 [ 620.546420][T15898] memdup_user+0x6b/0xe0 [ 620.546434][T15898] i2cdev_ioctl_rdwr+0x2de/0x700 [ 620.546453][T15898] i2cdev_ioctl+0x19d/0x830 [ 620.546466][T15898] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 620.546480][T15898] ? __fget_files+0x21f/0x3d0 [ 620.546496][T15898] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 620.546510][T15898] __x64_sys_ioctl+0x18e/0x210 [ 620.546531][T15898] do_syscall_64+0x106/0xf80 [ 620.546549][T15898] ? clear_bhb_loop+0x40/0x90 [ 620.546566][T15898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.546581][T15898] RIP: 0033:0x7f9386b9c799 [ 620.546593][T15898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.546607][T15898] RSP: 002b:00007f9387b0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 620.546621][T15898] RAX: ffffffffffffffda RBX: 00007f9386e15fa0 RCX: 00007f9386b9c799 [ 620.546631][T15898] RDX: 0000200000000180 RSI: 0000000000000707 RDI: 0000000000000003 [ 620.546640][T15898] RBP: 00007f9387b0e090 R08: 0000000000000000 R09: 0000000000000000 [ 620.546648][T15898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.546656][T15898] R13: 00007f9386e16038 R14: 00007f9386e15fa0 R15: 00007fffecdfdad8 [ 620.546675][T15898] [ 620.763233][T15902] aoe: could not set interface list: too many interfaces [ 622.043219][T15932] futex_wake_op: syz.7.2044 tries to shift op by -2048; fix this program [ 622.055970][T15933] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2037'. [ 622.215674][T15932] futex_wake_op: syz.7.2044 tries to shift op by -2048; fix this program [ 622.424186][T15932] misc userio: No port type given on /dev/userio [ 622.570622][T15932] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 622.950217][T15932] PCI: Can't parse resource_alignment parameter:  [ 623.879363][T15982] FAULT_INJECTION: forcing a failure. [ 623.879363][T15982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 623.933959][T15982] CPU: 0 UID: 0 PID: 15982 Comm: syz.8.2054 Tainted: G L syzkaller #0 PREEMPT(full) [ 623.933984][T15982] Tainted: [L]=SOFTLOCKUP [ 623.933989][T15982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 623.933997][T15982] Call Trace: [ 623.934003][T15982] [ 623.934008][T15982] dump_stack_lvl+0x100/0x190 [ 623.934035][T15982] should_fail_ex.cold+0x5/0xa [ 623.934053][T15982] _copy_to_user+0x32/0xd0 [ 623.934071][T15982] simple_read_from_buffer+0xcb/0x170 [ 623.934093][T15982] proc_fail_nth_read+0x1af/0x230 [ 623.934111][T15982] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 623.934130][T15982] ? rw_verify_area+0xce/0x6d0 [ 623.934149][T15982] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 623.934165][T15982] vfs_read+0x1e4/0xb30 [ 623.934188][T15982] ? __pfx_vfs_read+0x10/0x10 [ 623.934208][T15982] ? __fget_files+0x215/0x3d0 [ 623.934225][T15982] ? __fget_files+0x21f/0x3d0 [ 623.934243][T15982] ksys_read+0x12a/0x250 [ 623.934256][T15982] ? __pfx_ksys_read+0x10/0x10 [ 623.934274][T15982] do_syscall_64+0x106/0xf80 [ 623.934292][T15982] ? clear_bhb_loop+0x40/0x90 [ 623.934310][T15982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.934324][T15982] RIP: 0033:0x7f8774b5cfce [ 623.934336][T15982] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 623.934349][T15982] RSP: 002b:00007f8775a29fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 623.934364][T15982] RAX: ffffffffffffffda RBX: 00007f8775a2a6c0 RCX: 00007f8774b5cfce [ 623.934373][T15982] RDX: 000000000000000f RSI: 00007f8775a2a0a0 RDI: 0000000000000004 [ 623.934381][T15982] RBP: 00007f8775a2a090 R08: 0000000000000000 R09: 0000000000000000 [ 623.934390][T15982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.934398][T15982] R13: 00007f8774e16038 R14: 00007f8774e15fa0 R15: 00007ffc0e7a17b8 [ 623.934417][T15982] [ 624.457730][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.464018][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.586855][T15990] random: crng reseeded on system resumption [ 625.673765][T16002] zswap: compressor û not available [ 626.212430][T16024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2058'. [ 626.240736][T16023] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2063'. [ 626.279371][T16022] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2063'. [ 626.374994][T16023] ipvlan0: entered promiscuous mode [ 626.429255][T16023] ipvlan0: entered allmulticast mode [ 626.503827][T16023] veth0_vlan: entered allmulticast mode [ 627.010093][T16039] FAULT_INJECTION: forcing a failure. [ 627.010093][T16039] name failslab, interval 1, probability 0, space 0, times 0 [ 627.156646][T16039] CPU: 0 UID: 0 PID: 16039 Comm: syz.7.2065 Tainted: G L syzkaller #0 PREEMPT(full) [ 627.156672][T16039] Tainted: [L]=SOFTLOCKUP [ 627.156678][T16039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 627.156687][T16039] Call Trace: [ 627.156692][T16039] [ 627.156698][T16039] dump_stack_lvl+0x100/0x190 [ 627.156725][T16039] should_fail_ex.cold+0x5/0xa [ 627.156744][T16039] should_failslab+0xc2/0x120 [ 627.156760][T16039] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 627.156783][T16039] ? drm_edid_alloc+0x4d/0x120 [ 627.156867][T16039] ? __might_fault+0xc5/0x140 [ 627.156891][T16039] kmemdup_noprof+0x29/0x60 [ 627.156914][T16039] drm_edid_alloc+0x4d/0x120 [ 627.156936][T16039] drm_edid_override_set+0x27/0x2c0 [ 627.156954][T16039] edid_write+0xe3/0x180 [ 627.156995][T16039] full_proxy_write+0x135/0x1a0 [ 627.157063][T16039] vfs_write+0x2aa/0x1070 [ 627.157078][T16039] ? __pfx_full_proxy_write+0x10/0x10 [ 627.157101][T16039] ? __pfx_vfs_write+0x10/0x10 [ 627.157115][T16039] ? __fget_files+0x215/0x3d0 [ 627.157134][T16039] ? __fget_files+0x21f/0x3d0 [ 627.157153][T16039] ksys_write+0x12a/0x250 [ 627.157167][T16039] ? __pfx_ksys_write+0x10/0x10 [ 627.157186][T16039] do_syscall_64+0x106/0xf80 [ 627.157206][T16039] ? clear_bhb_loop+0x40/0x90 [ 627.157224][T16039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.157239][T16039] RIP: 0033:0x7f6441f9c799 [ 627.157253][T16039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.157267][T16039] RSP: 002b:00007f6442e30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 627.157282][T16039] RAX: ffffffffffffffda RBX: 00007f6442216090 RCX: 00007f6441f9c799 [ 627.157292][T16039] RDX: 0000000000000180 RSI: 00002000000000c0 RDI: 0000000000000003 [ 627.157301][T16039] RBP: 00007f6442032c99 R08: 0000000000000000 R09: 0000000000000000 [ 627.157310][T16039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 627.157319][T16039] R13: 00007f6442216128 R14: 00007f6442216090 R15: 00007ffec83add28 [ 627.157339][T16039] [ 627.904822][T16066] zswap: compressor û not available [ 628.782609][T16089] cgroup: fork rejected by pids controller in /syz0 [ 629.639685][T16137] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2079'. [ 630.810049][T16162] futex_wake_op: syz.0.2084 tries to shift op by -2048; fix this program [ 630.888786][T16162] futex_wake_op: syz.0.2084 tries to shift op by -2048; fix this program [ 631.357918][T16162] misc userio: No port type given on /dev/userio [ 632.289071][T16165] zswap: compressor û not available [ 632.698759][T16202] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 633.620929][T16216] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2094'. [ 634.596510][T16233] futex_wake_op: syz.8.2098 tries to shift op by -2048; fix this program [ 634.730863][T16233] futex_wake_op: syz.8.2098 tries to shift op by -2048; fix this program [ 634.768767][T16237] 0x000000000001-0x000000020000 : "" [ 634.879296][T16237] ftl_cs: FTL header corrupt! [ 635.717040][T16231] misc userio: No port type given on /dev/userio [ 637.993331][T16270] cifs: Unknown parameter 'øMi' [ 638.055958][T16272] netlink: 338 bytes leftover after parsing attributes in process `syz.8.2107'. [ 639.059129][T16299] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2112'. [ 639.078611][T16300] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2112'. [ 640.710267][T16325] bonding: no command found in bonding_masters - use +ifname or -ifname [ 641.083694][T16338] ecryptfs_miscdev_response: (sizeof(*msg) + msg->data_len) = [1067213646]; data_size = [146]. Invalid packet. [ 641.168772][T16338] ecryptfs_miscdev_write: Failed to deliver miscdev response to requesting operation; rc = [-22] [ 641.665961][T16347] zswap: compressor not available [ 641.711224][T16347] FAULT_INJECTION: forcing a failure. [ 641.711224][T16347] name failslab, interval 1, probability 0, space 0, times 0 [ 641.794814][T16347] CPU: 0 UID: 0 PID: 16347 Comm: syz.8.2124 Tainted: G L syzkaller #0 PREEMPT(full) [ 641.794840][T16347] Tainted: [L]=SOFTLOCKUP [ 641.794845][T16347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 641.794854][T16347] Call Trace: [ 641.794860][T16347] [ 641.794866][T16347] dump_stack_lvl+0x100/0x190 [ 641.794894][T16347] should_fail_ex.cold+0x5/0xa [ 641.794912][T16347] ? lsm_blob_alloc+0x68/0x90 [ 641.794931][T16347] should_failslab+0xc2/0x120 [ 641.794948][T16347] __kmalloc_noprof+0xe0/0x850 [ 641.794969][T16347] ? trace_kmem_cache_alloc+0xf3/0x120 [ 641.794988][T16347] lsm_blob_alloc+0x68/0x90 [ 641.795009][T16347] security_prepare_creds+0x2d/0x290 [ 641.795029][T16347] prepare_creds+0x5d6/0x950 [ 641.795052][T16347] lookup_user_key+0xfb2/0x1300 [ 641.795136][T16347] ? __pfx_lookup_user_key+0x10/0x10 [ 641.795154][T16347] ? do_raw_spin_lock+0x128/0x260 [ 641.795177][T16347] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 641.795197][T16347] ? _raw_spin_unlock_irq+0x2e/0x50 [ 641.795215][T16347] ? do_sigaltstack.constprop.0+0x4c0/0x670 [ 641.795239][T16347] keyctl_restrict_keyring+0x99/0x250 [ 641.795255][T16347] ? __pfx_keyctl_restrict_keyring+0x10/0x10 [ 641.795277][T16347] __do_sys_keyctl+0x2e8/0x5a0 [ 641.795293][T16347] do_syscall_64+0x106/0xf80 [ 641.795312][T16347] ? clear_bhb_loop+0x40/0x90 [ 641.795330][T16347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.795345][T16347] RIP: 0033:0x7f8774b9c799 [ 641.795358][T16347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.795372][T16347] RSP: 002b:00007f8775a09028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 641.795387][T16347] RAX: ffffffffffffffda RBX: 00007f8774e16090 RCX: 00007f8774b9c799 [ 641.795397][T16347] RDX: 0000000000000002 RSI: fffffffffffffffd RDI: 000000000000001d [ 641.795405][T16347] RBP: 00007f8774c32c99 R08: fffffffffffffffd R09: 0000000000000000 [ 641.795415][T16347] R10: 0000000000000628 R11: 0000000000000246 R12: 0000000000000000 [ 641.795424][T16347] R13: 00007f8774e16128 R14: 00007f8774e16090 R15: 00007ffc0e7a17b8 [ 641.795444][T16347] [ 641.800394][T16344] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2124'. [ 642.979785][T16363] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2127'. [ 643.320001][T13826] Process accounting resumed [ 643.606411][ T31] INFO: task syz.1.1616:13778 blocked for more than 143 seconds. [ 643.614579][ T31] Tainted: G L syzkaller #0 [ 643.629886][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 643.647339][T14512] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 643.665657][T14512] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 643.673252][T14512] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 643.688597][T14512] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 643.696032][T14512] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 643.746068][ T31] task:syz.1.1616 state:D stack:26968 pid:13778 tgid:13777 ppid:5829 task_flags:0x400140 flags:0x00080002 [ 643.796493][ T31] Call Trace: [ 643.799816][ T31] [ 643.802736][ T31] __schedule+0xfee/0x6120 [ 643.882598][ T31] ? __lock_acquire+0x4a5/0x2630 [ 643.899600][ T31] ? irqentry_exit+0x180/0x670 [ 643.904381][ T31] ? __pfx___schedule+0x10/0x10 [ 643.945261][ T31] ? find_held_lock+0x2b/0x80 [ 643.949955][ T31] ? schedule+0x2bf/0x390 [ 643.954274][ T31] schedule+0xdd/0x390 [ 643.995290][ T31] schedule_preempt_disabled+0x13/0x30 [ 644.000766][ T31] __mutex_lock+0xc9a/0x1b90 [ 644.025342][ T31] ? kasan_save_track+0x14/0x30 [ 644.030208][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 644.065820][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 644.071638][ T31] ? netlink_rcv_skb+0x159/0x420 [ 644.077569][ T31] ? genl_rcv+0x28/0x40 [ 644.081717][ T31] ? ____sys_sendmsg+0x9e1/0xb70 [ 644.087203][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 644.092251][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 644.098373][ T31] ? __nla_validate_parse+0x1e7/0x28b0 [ 644.103900][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 644.109978][ T31] nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 644.119464][ T31] ? rcu_is_watching+0x12/0xc0 [ 644.124231][ T31] ? trace_kmalloc+0x101/0x130 [ 644.130766][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 644.137085][ T31] ? __nla_parse+0x40/0x60 [ 644.141513][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 644.150981][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 644.158391][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 644.163934][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 644.171325][ T31] ? genl_get_cmd+0x3ef/0x720 [ 644.176151][ T31] ? bpf_lsm_capable+0x9/0x10 [ 644.180812][ T31] ? security_capable+0x80/0x260 [ 644.185997][ T31] genl_rcv_msg+0x560/0x800 [ 644.190493][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 644.195745][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 644.201894][ T31] netlink_rcv_skb+0x159/0x420 [ 644.206897][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 644.211939][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 644.217473][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 644.222752][ T31] genl_rcv+0x28/0x40 [ 644.231287][ T31] netlink_unicast+0x5aa/0x870 [ 644.237250][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 644.242556][ T31] ? __pfx___might_resched+0x10/0x10 [ 644.259157][ T31] ? __lock_acquire+0x4a5/0x2630 [ 644.264099][ T31] netlink_sendmsg+0x8b0/0xda0 [ 644.269433][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.274734][ T31] ? __import_iovec+0x1d2/0x640 [ 644.279802][ T31] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 644.285708][ T31] ____sys_sendmsg+0x9e1/0xb70 [ 644.290461][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.296115][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 644.301390][ T31] ? try_to_wake_up+0x644/0x1a80 [ 644.306590][ T31] ___sys_sendmsg+0x190/0x1e0 [ 644.311279][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 644.316784][ T31] ? futex_private_hash_put+0x107/0x1c0 [ 644.322343][ T31] __sys_sendmsg+0x170/0x220 [ 644.328335][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 644.333446][ T31] ? __x64_sys_futex+0x34f/0x4d0 [ 644.342811][ T31] do_syscall_64+0x106/0xf80 [ 644.348722][ T31] ? clear_bhb_loop+0x40/0x90 [ 644.356382][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.362293][ T31] RIP: 0033:0x7fc0d939c799 [ 644.366975][ T31] RSP: 002b:00007fc0da305028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 644.375393][ T31] RAX: ffffffffffffffda RBX: 00007fc0d9615fa0 RCX: 00007fc0d939c799 [ 644.383919][ T31] RDX: 0000000020008050 RSI: 00002000000050c0 RDI: 0000000000000003 [ 644.392075][ T31] RBP: 00007fc0d9432c99 R08: 0000000000000000 R09: 0000000000000000 [ 644.400172][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 644.408375][ T31] R13: 00007fc0d9616038 R14: 00007fc0d9615fa0 R15: 00007ffd96a11178 [ 644.416574][ T31] [ 644.470659][ T31] [ 644.470659][ T31] Showing all locks held in the system: [ 644.502103][ T31] 3 locks held by kworker/0:1/10: [ 644.508727][ T31] #0: ffff88813fe63148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 644.546323][ T31] #1: ffff88807df0c008 (&____s->seqcount#14){.-.-}-{0:0}, at: trace_ignore_this_task+0xbc/0x100 [ 644.596358][ T31] #2: ffff88807da7e240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b8/0x63b0 [ 644.635628][ T31] 1 lock held by khungtaskd/31: [ 644.640473][ T31] #0: ffffffff8e7e74e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 644.690414][ T31] 2 locks held by getty/5587: [ 644.695109][ T31] #0: ffff8880331680a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 644.735663][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 644.761639][ T31] 2 locks held by kworker/u10:1/8563: [ 644.793207][ T31] #0: ffff88801ebe5148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 644.832570][ T31] #1: ffffc900048ffd08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 644.875737][ T31] 2 locks held by kworker/u10:4/8587: [ 644.881109][ T31] #0: ffff88813fea4148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 644.945790][ T31] #1: ffff88807df0c008 (&____s->seqcount#14){.-.-}-{0:0}, at: trace_ignore_this_task+0xbc/0x100 [ 644.975813][ T31] 4 locks held by kworker/u10:52/12419: [ 644.981358][ T31] #0: ffff88801c6ae948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 645.006008][ T31] #1: ffffc90003807d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 645.038888][ T31] #2: ffffffff905fbc10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 645.055804][ T31] #3: ffffffff8e7f30f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 645.075966][ T31] 2 locks held by syz.3.1604/13731: [ 645.081151][ T31] #0: ffffffff906c07d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 645.105863][ T31] #1: ffffffff8ec58228 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 645.128094][ T31] 2 locks held by syz.1.1616/13778: [ 645.133280][ T31] #0: ffffffff906c07d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 645.155860][ T31] #1: ffffffff8ec58228 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 645.185903][ T31] 2 locks held by syz.4.1760/14505: [ 645.191100][ T31] #0: ffff8880277ea0e0 (&type->s_umount_key#54){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 645.215891][ T31] #1: ffffffff8ec58228 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 645.225493][ T31] 2 locks held by syz.6.1953/15396: [ 645.245938][ T31] #0: ffffffff906c07d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 645.254117][ T31] #1: ffffffff8ec58228 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 645.294755][ T31] 2 locks held by syz-executor/15477: [ 645.306130][ T31] #0: ffff888059d440e0 (&type->s_umount_key#54){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 645.326091][ T31] #1: ffffffff8ec58228 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 645.335669][ T31] 2 locks held by syz.5.2073/16074: [ 645.359326][ T31] #0: ffffffff906c07d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 645.369652][ T31] #1: ffffffff8ec58228 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 645.385886][ T31] 1 lock held by syz.7.2119/16328: [ 645.391169][ T31] #0: ffffffff90614468 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 645.400393][ T31] 1 lock held by syz.8.2127/16361: [ 645.405484][ T31] #0: ffffffff8e7f2fc0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 645.415656][ T31] 1 lock held by syz-executor/16370: [ 645.421071][ T31] #0: ffffffff8e7f30f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 645.474078][ T31] [ 645.498993][ T31] ============================================= [ 645.498993][ T31] [ 645.529335][ T31] NMI backtrace for cpu 0 [ 645.529349][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 645.529369][ T31] Tainted: [L]=SOFTLOCKUP [ 645.529374][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 645.529382][ T31] Call Trace: [ 645.529387][ T31] [ 645.529393][ T31] dump_stack_lvl+0x100/0x190 [ 645.529417][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 645.529439][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 645.529458][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 645.529477][ T31] sys_info+0x141/0x190 [ 645.529490][ T31] watchdog+0xd25/0x1050 [ 645.529508][ T31] ? __pfx_watchdog+0x10/0x10 [ 645.529522][ T31] ? __kthread_parkme+0x18c/0x230 [ 645.529540][ T31] ? kthread+0x13a/0x450 [ 645.529556][ T31] ? __pfx_watchdog+0x10/0x10 [ 645.529568][ T31] kthread+0x370/0x450 [ 645.529584][ T31] ? __pfx_kthread+0x10/0x10 [ 645.529602][ T31] ret_from_fork+0x754/0xd80 [ 645.529623][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 645.529643][ T31] ? __switch_to+0x7b4/0x1120 [ 645.529658][ T31] ? __pfx_kthread+0x10/0x10 [ 645.529676][ T31] ret_from_fork_asm+0x1a/0x30 [ 645.529698][ T31] [ 645.797709][T14512] Bluetooth: hci8: command tx timeout [ 645.962499][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 645.969364][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 645.980015][ T31] Tainted: [L]=SOFTLOCKUP [ 645.984312][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 645.994342][ T31] Call Trace: [ 645.997599][ T31] [ 646.000509][ T31] dump_stack_lvl+0x100/0x190 [ 646.005176][ T31] vpanic+0x552/0x970 [ 646.009139][ T31] ? __pfx_vpanic+0x10/0x10 [ 646.013621][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 646.019765][ T31] panic+0xd1/0xe0 [ 646.023467][ T31] ? __pfx_panic+0x10/0x10 [ 646.027867][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 646.034002][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 646.040137][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 646.046271][ T31] ? watchdog.cold+0x198/0x1ca [ 646.051013][ T31] ? watchdog+0xd35/0x1050 [ 646.055408][ T31] watchdog.cold+0x1a9/0x1ca [ 646.059984][ T31] ? __pfx_watchdog+0x10/0x10 [ 646.064640][ T31] ? __kthread_parkme+0x18c/0x230 [ 646.069663][ T31] ? kthread+0x13a/0x450 [ 646.073890][ T31] ? __pfx_watchdog+0x10/0x10 [ 646.078542][ T31] kthread+0x370/0x450 [ 646.082591][ T31] ? __pfx_kthread+0x10/0x10 [ 646.087163][ T31] ret_from_fork+0x754/0xd80 [ 646.091738][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 646.096832][ T31] ? __switch_to+0x7b4/0x1120 [ 646.101488][ T31] ? __pfx_kthread+0x10/0x10 [ 646.106062][ T31] ret_from_fork_asm+0x1a/0x30 [ 646.110815][ T31] [ 646.113887][ T31] Kernel Offset: disabled [ 646.118199][ T31] Rebooting in 86400 seconds..