last executing test programs: 58.265375952s ago: executing program 1 (id=109): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r1 = socket(0xa, 0x5, 0x84) io_uring_setup$auto(0x401, 0x0) getsockopt$auto(r1, 0x84, 0x18, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0x400000000fff, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = socket(0xa, 0x3, 0x3a) close$auto(r2) io_uring_setup$auto(0x7a527d95, 0x0) io_uring_register$auto(r2, 0x8, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) getdents$auto(0xffffffffffffffff, 0x0, 0x400018) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/dev_snmp6/veth1_to_bond\x00', 0x2082, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x801, 0x4f46, 0x6) sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="1200", @ANYBLOB], 0x1ac}}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x56}, 0x6}, 0xfffffff9, 0x10, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 57.536192604s ago: executing program 2 (id=111): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mq_notify$auto(0x4, &(0x7f0000000040)={@sival_int=0x7, @inferred, 0x7, @_sigev_thread={&(0x7f0000000180)=0x0, 0x0}}) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040), 0xc, 0x0}, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmmsg$auto(r0, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa4, &(0x7f0000000040), 0x8000, 0x2}, 0x8}, 0x1, 0x5e0c) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 57.454401712s ago: executing program 2 (id=112): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008000) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000280), 0xffffffffffffffff) 55.64043245s ago: executing program 1 (id=118): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2a, 0x2, 0xb) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) pipe$auto(0x0) fcntl$auto(r0, 0x5, 0x6) r1 = socket(0x2, 0x1, 0x0) setsockopt$auto(r1, 0x0, 0x10, 0x0, 0x17) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 55.528965754s ago: executing program 2 (id=119): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/oom_adj\x00', 0x980, 0x0) read$auto(r0, 0x0, 0x4) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) prctl$auto(0x23, 0x7, 0x0, 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x111442, 0x0) fdatasync$auto(r0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) 55.241101581s ago: executing program 1 (id=122): close_range$auto(0x0, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.6/usb7/7-0:1.0/ep_81/interval\x00', 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfs\x00', 0x20000, 0x0) r0 = socket(0x10, 0x2, 0xc) close_range$auto(r0, 0xfffffffffffff000, 0x0) r1 = fanotify_init$auto(0x200, 0x1) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="010027bd7000fcdbdf2535493a2c040002"], 0x18}, 0x1, 0x0, 0x0, 0x801}, 0x4044) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES8=r0, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) 54.943909168s ago: executing program 1 (id=124): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0x4) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x2a) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15a}, 0x6, 0x8, 0x5) read$auto(0x3, 0x0, 0x8080) write$auto(0x3, 0x0, 0xffd8) 54.874239513s ago: executing program 2 (id=126): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @inferred, 0x1, @_tid}) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x80) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000040), 0x8000, 0x1}, 0x8}, 0x1, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) 54.695732658s ago: executing program 2 (id=127): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0xc0000101, 0x400, 0x2}]}) 54.618889958s ago: executing program 3 (id=128): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket(0x2, 0x2, 0x1) socket(0x2, 0x801, 0x106) socket(0x26, 0x80805, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x145) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) readv$auto(0x0, &(0x7f0000000080)={0x0, 0xc08a}, 0x33) 54.454690597s ago: executing program 3 (id=130): unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r2 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r2, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008000) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000280), 0xffffffffffffffff) 54.446792093s ago: executing program 1 (id=131): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r1 = socket(0xa, 0x5, 0x84) io_uring_setup$auto(0x401, 0x0) getsockopt$auto(r1, 0x84, 0x18, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0x400000000fff, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = socket(0xa, 0x3, 0x3a) close$auto(r2) io_uring_setup$auto(0x7a527d95, 0x0) io_uring_register$auto(r2, 0x8, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) getdents$auto(0xffffffffffffffff, 0x0, 0x400018) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/dev_snmp6/veth1_to_bond\x00', 0x2082, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x801, 0x4f46, 0x6) sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="1200", @ANYBLOB], 0x1ac}}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x56}, 0x6}, 0xfffffff9, 0x10, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 54.2840209s ago: executing program 2 (id=132): unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r2 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r2, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008000) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000280), 0xffffffffffffffff) 53.211517992s ago: executing program 3 (id=133): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0xffffffffffffffff, 0x10008000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x101001, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/031/001\x00', 0x208000, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/stat\x00', 0xc0802, 0x0) read$auto(0x3, 0x0, 0x8080) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(0x3, 0x0, 0x1000005) 52.686883961s ago: executing program 0 (id=134): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) fspick$auto(0xffffffffffffffff, 0x0, 0x6) faccessat2$auto(0x1, 0x0, 0x4, 0x1200) 52.63652032s ago: executing program 3 (id=135): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r0 = getpid() r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp6\x00', 0x0, 0x0) pread64$auto(r1, &(0x7f0000000040)='veth1\x00', 0x200000000006, 0x8) ioctl$auto_KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f00000000c0)="9ddf72c6b3ccf6e596c065e990ce4331174efad4aba90238c76c8e8ace07517933448ddfcdb03b280e903d6b2e9e41b8e66b664881cbfaa982fcf7b370ec62bcdd42a4bea27a5238d1", 0x4000000000123f}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) write$auto(0x3, 0x0, 0xffd8) 52.180308443s ago: executing program 3 (id=136): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r1 = socket(0xa, 0x5, 0x84) io_uring_setup$auto(0x401, 0x0) getsockopt$auto(r1, 0x84, 0x18, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0x400000000fff, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = socket(0xa, 0x3, 0x3a) close$auto(r2) io_uring_setup$auto(0x7a527d95, 0x0) io_uring_register$auto(r2, 0x8, 0x0, 0x0) r3 = open(0x0, 0x4603, 0x56) getdents$auto(r3, 0x0, 0x400018) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/dev_snmp6/veth1_to_bond\x00', 0x2082, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x801, 0x4f46, 0x6) sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="1200", @ANYBLOB], 0x1ac}}, 0x40000) recvmmsg$auto(r4, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x56}, 0x6}, 0xfffffff9, 0x10, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 52.070552434s ago: executing program 1 (id=137): unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) write$auto_proc_uid_map_operations_base(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008000) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000280), 0xffffffffffffffff) 51.99980075s ago: executing program 0 (id=138): r0 = socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x8914, 0x24) 51.04793219s ago: executing program 0 (id=139): r0 = socket(0xa, 0x2, 0x73) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x103642, 0x0) r1 = socket(0x2, 0x80002, 0x73) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000f9dbdf250100000008000a0008000000050007003b000000080009009c781e01060002000100000008001700", @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) fchdir$auto(0xffffffffffffffff) sendmsg$auto_IPVS_CMD_NEW_DEST(r1, 0x0, 0x20000000) close_range$auto(0x2, 0x8, 0x0) 51.001706168s ago: executing program 3 (id=140): unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r2 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r2, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008000) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000280), 0xffffffffffffffff) 50.9181938s ago: executing program 0 (id=141): unshare$auto(0x40000080) mmap$auto(0x0, 0x2020089, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0) brk$auto(0x7fffffffafff) brk$auto(0x7fffffffefff) 50.556438069s ago: executing program 0 (id=142): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) socket(0x10, 0x3, 0xa) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x101400, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x2440, 0x0) read$auto(r0, 0x0, 0x20) select$auto(0x9, 0x0, 0x0, 0x0, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) 49.674435597s ago: executing program 0 (id=143): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008000) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000280), 0xffffffffffffffff) 39.213504671s ago: executing program 32 (id=132): unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r2 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r2, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008000) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000280), 0xffffffffffffffff) 36.692504775s ago: executing program 33 (id=137): unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) write$auto_proc_uid_map_operations_base(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008000) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000280), 0xffffffffffffffff) 35.906739079s ago: executing program 34 (id=140): unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r2 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r2, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008000) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000280), 0xffffffffffffffff) 34.183394732s ago: executing program 35 (id=143): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008000) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000280), 0xffffffffffffffff) 6.238572956s ago: executing program 4 (id=241): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_ZEROCOPY(r0, 0x1, 0x3c, &(0x7f0000001e00)='.\\K}\xc3\x00', &(0x7f0000001e40)=0xd) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x280, 0x0) ioctl$auto_SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f00000000c0)) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000027, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b3b", 0xfdef) 5.834856105s ago: executing program 5 (id=244): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/bus/usb/drivers/ALi m5602/new_id\x00', 0x1f0083, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f00000000c0), 0x1000, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:01.3/local_cpulist\x00', 0x100, 0x0) read$auto(r1, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder1\x00', 0x60000, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x9, 0x1, 0xbc3, 0x800, 0x3, 0x97c, 0xffff, 0x400000000003, 0x6, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x9, 0xffffffffffffff81, 0x8]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) 5.336198114s ago: executing program 6 (id=245): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) socket(0x28, 0x5, 0x0) socket(0x2, 0x5, 0x0) epoll_create$auto(0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r2, 0x0) 5.024667608s ago: executing program 4 (id=246): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sysfs$auto(0x2, 0x10000000000002a, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) fcntl$auto(0x3, 0x4, 0xa553) write$auto(0x3, 0x0, 0xfdef) 4.932162966s ago: executing program 6 (id=247): mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) get_robust_list$auto(0x0, 0x0, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) clone$auto(0x100000020003b49, 0x80000000002, 0x0, 0x0, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x2, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x2, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_add_rule$auto(r0, 0x1, 0x0, 0x0) 4.85173942s ago: executing program 7 (id=248): openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0x3, 0x0, 0xfffffdef) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) ioctl$auto(0xffffffffffffffff, 0x8982, 0x1) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x1) getcwd$auto(0x0, 0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) 4.740632018s ago: executing program 6 (id=249): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) bind$auto(0x4, 0xfffffffffffffffe, 0x0) write$auto(0x3, 0x0, 0xfdef) read$auto(0x4, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) 4.198385957s ago: executing program 5 (id=250): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0xa, 0x0) socket(0x2, 0x5, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) socket(0x840000000002, 0x3, 0xff) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="00f772", @ANYBLOB="5de1"], 0x1ac}}, 0x4) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4.137872725s ago: executing program 5 (id=251): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008000) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000280), 0xffffffffffffffff) 3.97220291s ago: executing program 7 (id=252): open(&(0x7f0000000000)='./file0\x00', 0x20400, 0xe1d2b27bdc14aabc) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1c9b02, 0x0) pread64$auto(r0, &(0x7f00000005c0)='/pr\xa2Cv&P\x11\xf7\x01\xa4\xdcXd\x1dvices\x00F%\xf7\x175)x\xd6\fR\x117\t\x00F\xe6\x8bG$\xdaP\xf1\x1e\xe9Z\xc6K\xe44\xdc\x8f\x94\x86\n\x95\xb3I<\xd2~\xe5\xad\n\x0f\xbf\x97\xcf\xcd\x9b\x8f\x8dh\xb8\xffz_\x84Y\x1bt\xf3\xf19\xc0\x9d\xad\xb3\xd9\x89\x15|\x96\xb6\x7f^\x00\x00\x00\x00\xa5n\'(\xa2\x95*\xda\xfcVCf\xd7\x88h[\xd2\xd9\xba\xc5\xc53\x15\x11^Q\x80\xf8\xa77\xa0\xbd\n*\xe0\xcduw\x96f\x95\xcc\xcbP\xd1\xbe\xe21$=\xb6\xe3lP-\xcbs\xe0\f\xce=\xe9 \xe8\n)\xf2b*\xea\"\x94\x96\xcc\xc8S\xd3]Y\xca\xd3\x13\xe3\xd8\x82\x9c\xa5\x06\x01\xafR\x16r\xa3)9t\xae<(V2\xc7\x98A\xc7<&\x89\x98\x7f\x8a\xb1\x8a\xfc\x05T\x8d\xa3\xc2\xdf\xb0\x0f\xad\x85P\xed\x9ct\xf7M\f-\xd3\xe9\xfe\x15o\xab5\xb23\xd2\xef\x9c\xc2;\x91\x05\xd8^I\x8e\x18p\xfb\x8d\x06\xb8J1\xce\x00', 0x100000001, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x4, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x8500, 0x0) mmap$auto(0x0, 0x40009, 0x5, 0x9b72, 0x7, 0x6) socket(0x10, 0x2, 0x3) acct$auto(&(0x7f0000001580)='/dev/binderfs/binder1\x00') 3.514984383s ago: executing program 7 (id=253): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x3, 0x6) openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x200, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x2004c810) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r3 = prctl$auto_PR_SET_VMA_ANON_NAME(0x16a, 0x0, 0x0, 0x7, 0x0) ioctl$auto_TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000140)={0xd, &(0x7f0000000100)={0x1000, 0x1, 0x81, @inferred=r3}}) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x8}, 0x7}, 0x103, 0x300) 3.432716256s ago: executing program 6 (id=254): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, 0x0, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='r'], 0x1ac}, 0x1, 0x0, 0x0, 0x48010}, 0x40000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x5512c0, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b3b", 0xfdef) r1 = socket(0x11, 0x3, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000780), r2) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, 0x0, 0xc00, 0x0) sendmmsg$auto(r1, 0x0, 0x910e, 0x100) writev$auto(r0, 0x0, 0x1) 3.131103676s ago: executing program 7 (id=255): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008000) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000280), 0xffffffffffffffff) 2.862150391s ago: executing program 4 (id=256): mmap$auto(0x7, 0x400008, 0xdf, 0x91, 0x7, 0x800008000) socket(0xa, 0x3, 0x3a) ioctl$auto_TIOCMSET2(0xffffffffffffffff, 0x5418, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x2, 0x0) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xd1, 0x0, 0x4) write$auto(0xca, 0x0, 0x3) getdents$auto(0xffffffffffffffff, 0x0, 0x62d4) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) 2.690546503s ago: executing program 5 (id=257): socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) unshare$auto(0x40000080) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x81, 0x8000000000001, 0xa}, 0xb, 0x0) landlock_restrict_self$auto(r0, 0x8) 2.300412187s ago: executing program 6 (id=258): set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) ioctl$auto_KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xa8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0xffffffffffffffff, 0x300000000000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) 1.996058708s ago: executing program 7 (id=259): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/bus/usb/drivers/ALi m5602/new_id\x00', 0x1f0083, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f00000000c0), 0x1000, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:01.3/local_cpulist\x00', 0x100, 0x0) read$auto(r1, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder1\x00', 0x60000, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x9, 0x1, 0xbc3, 0x800, 0x3, 0x97c, 0xffff, 0x400000000003, 0x6, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x9, 0xffffffffffffff81, 0x8]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) 1.876621907s ago: executing program 4 (id=260): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0xa, 0x0) socket(0x2, 0x5, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) socket(0x840000000002, 0x3, 0xff) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="00f772", @ANYBLOB="5de1"], 0x1ac}}, 0x4) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.564544906s ago: executing program 4 (id=261): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008000) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000280), 0xffffffffffffffff) 697.036784ms ago: executing program 5 (id=262): io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040), 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2502"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) ioctl$auto_FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xb000000) 584.227478ms ago: executing program 7 (id=263): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r1 = socket(0xa, 0x5, 0x84) io_uring_setup$auto(0x401, 0x0) getsockopt$auto(r1, 0x84, 0x18, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0x400000000fff, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = socket(0xa, 0x3, 0x3a) close$auto(r2) io_uring_register$auto(r2, 0x8, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = open(0x0, 0x4603, 0x56) getdents$auto(r3, 0x0, 0x400018) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/dev_snmp6/veth1_to_bond\x00', 0x2082, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x801, 0x4f46, 0x6) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000200)='/proc/uptime\x00', 0x2800, 0x0) sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="1200", @ANYBLOB], 0x1ac}}, 0x40000) recvmmsg$auto(r4, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x56}, 0x6}, 0xfffffff9, 0x10, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 191.892537ms ago: executing program 5 (id=264): mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x1, 0x0, 0x10000000000000, 0x2}, 0x895}, 0x3, 0x0) r0 = getpid() sendmsg$auto_NL80211_CMD_SET_HW_TIMESTAMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYBLOB="ec972a543373198f253596cfb2ea4fb06a2af7052d8b889343b3a6c451af34f0168f97c0fc25f1d40ba0781b457780e2c859feef63b59730996a6d2791643a9d32967dcd5e4858af9dbc11c78c4d22a980f9d3eb3a02a404accd15003698df5e2c44875ee6b1ad429bb0c7bf66e5a795d211f4010e825b1724cccb295ab12f5f4ce4431218484bfd1c39f9196467f2d23fd44bded987d6a8543fa734e06e5af2", @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRESOCT=r0], 0x14}, 0x1, 0x0, 0x0, 0x20000804}, 0x4080) process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) write$auto(r1, &(0x7f00000007c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057\x1c&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\x7f\x00\x00\x00AN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81.f\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00\x00\x00\xec\xbd_r\xf16\xec\xf3\xbb[.\xf3\xef\xf8\x16x\x9e\xb3*:/L\xa0Kg\xf0\xa2\x84\xa3o\xcc\x9e\xd3\xeb\xd3(\xaa\x93g~\x01\x81\x1eV\xf1L\xfc\xad\xa9#O\xe4\x12\xd3\xbda\xbc\x9a\x9f+9\'\xc4\x13\xf0\xc88\x1d80?\xc2\a\af\xdc?-&\xedAd\x9c\xe5&\xb9\x14\xe1\x85 \xbf\x18\xfc:#\xcf\x7ffT\xefPb\xe1\xfa]\xcc\x8a\xe3\x99\x98u\x9bj>\x9d\xc2\x1fk\x87\x92\xfb(U\xa8\xcd4+\xf6e5],\xec\x84 \x1b\x10d\x1b@\x84X\xa1\xa8\xd7\xccO\xb0Qq\x1a\xa4<\\\x0e\xa4\x7f^\x1a|\xfd\xe6#\x00\x9e\x1d\x00k\x84\x1b\xa3\xb1O\xe0IzJRO\xf4,\xe5\xdb\x03CA\x13Q\x84\xbb\x88\xb4\xe3\xba\xf0/\xd0\x04\ny\a\x8d\x12h\xe22\xcb\"\xce\x00\x00', 0x5) ioctl$auto_USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, 0x0) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x1f40) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 125.570894ms ago: executing program 4 (id=265): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008000) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000280), 0xffffffffffffffff) 0s ago: executing program 6 (id=266): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sysfs$auto(0x2, 0x10000000000002a, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) fcntl$auto(0x3, 0x4, 0xa553) write$auto(0x3, 0x0, 0xfdef) kernel console output (not intermixed with test programs): ve [ 79.242403][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.249613][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.275587][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.304011][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.311190][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.337585][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.340325][ T5145] Bluetooth: hci0: command tx timeout [ 79.358078][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.365167][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.391216][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.403557][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.411331][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.437419][ T5145] Bluetooth: hci1: command tx timeout [ 79.443382][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.545395][ T5827] hsr_slave_0: entered promiscuous mode [ 79.552188][ T5827] hsr_slave_1: entered promiscuous mode [ 79.558232][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 79.564208][ T5827] Cannot create hsr debugfs directory [ 79.575570][ T5831] hsr_slave_0: entered promiscuous mode [ 79.581407][ T51] Bluetooth: hci2: command tx timeout [ 79.582632][ T5831] hsr_slave_1: entered promiscuous mode [ 79.587189][ T5145] Bluetooth: hci3: command tx timeout [ 79.593328][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 79.603889][ T5831] Cannot create hsr debugfs directory [ 79.671172][ T5833] hsr_slave_0: entered promiscuous mode [ 79.677440][ T5833] hsr_slave_1: entered promiscuous mode [ 79.683680][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 79.689672][ T5833] Cannot create hsr debugfs directory [ 80.041104][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.074052][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.102095][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.121047][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.174528][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.189569][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.214966][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.225857][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.294103][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.306381][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.317242][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.334543][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.426464][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.438284][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.449907][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.468641][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.541127][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.607903][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.633566][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.664599][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.671934][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.682839][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.689987][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.709324][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.745909][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.758457][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.765673][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.789862][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.796953][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.840239][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.852800][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.888586][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.895788][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.914154][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.933729][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.940852][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.950659][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.957790][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.003296][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.010504][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.306106][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.427212][ T5145] Bluetooth: hci0: command tx timeout [ 81.463585][ T5823] veth0_vlan: entered promiscuous mode [ 81.501212][ T5145] Bluetooth: hci1: command tx timeout [ 81.525458][ T5823] veth1_vlan: entered promiscuous mode [ 81.557965][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.621528][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.634702][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.659754][ T5145] Bluetooth: hci3: command tx timeout [ 81.664441][ T5823] veth0_macvtap: entered promiscuous mode [ 81.665181][ T5145] Bluetooth: hci2: command tx timeout [ 81.678224][ T5823] veth1_macvtap: entered promiscuous mode [ 81.703962][ T5833] veth0_vlan: entered promiscuous mode [ 81.725801][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.781146][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.808736][ T5827] veth0_vlan: entered promiscuous mode [ 81.820218][ T5833] veth1_vlan: entered promiscuous mode [ 81.843202][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.870141][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.882600][ T5831] veth0_vlan: entered promiscuous mode [ 81.895688][ T5827] veth1_vlan: entered promiscuous mode [ 81.911627][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.929492][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.002643][ T5831] veth1_vlan: entered promiscuous mode [ 82.037743][ T5833] veth0_macvtap: entered promiscuous mode [ 82.124039][ T5833] veth1_macvtap: entered promiscuous mode [ 82.172592][ T5827] veth0_macvtap: entered promiscuous mode [ 82.185134][ T5831] veth0_macvtap: entered promiscuous mode [ 82.199065][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.205487][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.207128][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.242445][ T5831] veth1_macvtap: entered promiscuous mode [ 82.260965][ T5827] veth1_macvtap: entered promiscuous mode [ 82.271002][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.312806][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.324085][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.331865][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.345034][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.369000][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.380958][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.390856][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.408928][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.420002][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.434498][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.464014][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.484901][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.494208][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.497024][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.537607][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.547114][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.560114][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.621132][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.641625][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.788050][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.811923][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.875496][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.885563][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.948547][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.974406][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.023862][ T3549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.050117][ T3549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.060365][ T5917] FAULT_INJECTION: forcing a failure. [ 83.060365][ T5917] name failslab, interval 1, probability 0, space 0, times 1 [ 83.090028][ T3549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.093800][ T5917] CPU: 0 UID: 0 PID: 5917 Comm: syz.0.6 Not tainted syzkaller #0 PREEMPT(full) [ 83.093837][ T5917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 83.093860][ T5917] Call Trace: [ 83.093869][ T5917] [ 83.093882][ T5917] dump_stack_lvl+0x100/0x190 [ 83.093934][ T5917] should_fail_ex.cold+0x5/0xa [ 83.093967][ T5917] should_failslab+0xc2/0x120 [ 83.093996][ T5917] __kmalloc_cache_noprof+0x7a/0x6f0 [ 83.094031][ T5917] ? rfkill_fop_open+0x1b6/0x750 [ 83.094079][ T5917] ? mark_held_locks+0x40/0x70 [ 83.094121][ T5917] rfkill_fop_open+0x1b6/0x750 [ 83.094170][ T5917] ? __pfx_rfkill_fop_open+0x10/0x10 [ 83.094214][ T5917] misc_open+0x26d/0x450 [ 83.094240][ T5917] ? __pfx_misc_open+0x10/0x10 [ 83.094264][ T5917] chrdev_open+0x234/0x6a0 [ 83.094291][ T5917] ? __pfx_apparmor_file_open+0x10/0x10 [ 83.094329][ T5917] ? __pfx_chrdev_open+0x10/0x10 [ 83.094359][ T5917] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 83.094397][ T5917] do_dentry_open+0x6d8/0x1660 [ 83.094423][ T5917] ? __pfx_chrdev_open+0x10/0x10 [ 83.094460][ T5917] vfs_open+0x82/0x3f0 [ 83.094498][ T5917] path_openat+0x208c/0x31a0 [ 83.094538][ T5917] ? __pfx_path_openat+0x10/0x10 [ 83.094579][ T5917] do_file_open+0x20e/0x430 [ 83.094610][ T5917] ? __pfx_do_file_open+0x10/0x10 [ 83.094665][ T5917] ? alloc_fd+0x476/0x790 [ 83.094695][ T5917] ? do_getname+0x191/0x390 [ 83.094731][ T5917] do_sys_openat2+0x10d/0x1e0 [ 83.094766][ T5917] ? __pfx_do_sys_openat2+0x10/0x10 [ 83.094805][ T5917] ? __fget_files+0x21f/0x3d0 [ 83.094837][ T5917] __x64_sys_openat+0x12d/0x210 [ 83.094874][ T5917] ? __pfx___x64_sys_openat+0x10/0x10 [ 83.094924][ T5917] do_syscall_64+0x106/0xf80 [ 83.094955][ T5917] ? clear_bhb_loop+0x40/0x90 [ 83.094989][ T5917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.095016][ T5917] RIP: 0033:0x7fb5ffd9c799 [ 83.095044][ T5917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.095082][ T5917] RSP: 002b:00007fb600d10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 83.095113][ T5917] RAX: ffffffffffffffda RBX: 00007fb600015fa0 RCX: 00007fb5ffd9c799 [ 83.095132][ T5917] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 83.095150][ T5917] RBP: 00007fb5ffe32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 83.095167][ T5917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.095183][ T5917] R13: 00007fb600016038 R14: 00007fb600015fa0 R15: 00007ffe5c76cfd8 [ 83.095222][ T5917] [ 83.216939][ T3549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.478248][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.499746][ T5145] Bluetooth: hci0: command tx timeout [ 83.512993][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.581810][ T5145] Bluetooth: hci1: command tx timeout [ 83.634756][ T5924] FAULT_INJECTION: forcing a failure. [ 83.634756][ T5924] name failslab, interval 1, probability 0, space 0, times 0 [ 83.710223][ T5924] CPU: 1 UID: 0 PID: 5924 Comm: syz.0.8 Not tainted syzkaller #0 PREEMPT(full) [ 83.710260][ T5924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 83.710276][ T5924] Call Trace: [ 83.710285][ T5924] [ 83.710295][ T5924] dump_stack_lvl+0x100/0x190 [ 83.710343][ T5924] should_fail_ex.cold+0x5/0xa [ 83.710376][ T5924] should_failslab+0xc2/0x120 [ 83.710406][ T5924] __kmalloc_cache_noprof+0x7a/0x6f0 [ 83.710441][ T5924] ? ptp_open+0xe4/0x550 [ 83.710485][ T5924] ptp_open+0xe4/0x550 [ 83.710526][ T5924] ? __pfx_ptp_open+0x10/0x10 [ 83.710574][ T5924] ? __pfx_ptp_open+0x10/0x10 [ 83.710609][ T5924] posix_clock_open+0x17b/0x290 [ 83.710641][ T5924] ? __pfx_posix_clock_open+0x10/0x10 [ 83.710671][ T5924] chrdev_open+0x234/0x6a0 [ 83.710709][ T5924] ? __pfx_chrdev_open+0x10/0x10 [ 83.710740][ T5924] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 83.710778][ T5924] do_dentry_open+0x6d8/0x1660 [ 83.710805][ T5924] ? __pfx_chrdev_open+0x10/0x10 [ 83.710842][ T5924] vfs_open+0x82/0x3f0 [ 83.710881][ T5924] path_openat+0x208c/0x31a0 [ 83.710922][ T5924] ? __pfx_path_openat+0x10/0x10 [ 83.710965][ T5924] do_file_open+0x20e/0x430 [ 83.710997][ T5924] ? __pfx_do_file_open+0x10/0x10 [ 83.711054][ T5924] ? alloc_fd+0x476/0x790 [ 83.711085][ T5924] ? do_getname+0x191/0x390 [ 83.711122][ T5924] do_sys_openat2+0x10d/0x1e0 [ 83.711157][ T5924] ? __pfx_do_sys_openat2+0x10/0x10 [ 83.711195][ T5924] ? __fget_files+0x21f/0x3d0 [ 83.711229][ T5924] __x64_sys_openat+0x12d/0x210 [ 83.711265][ T5924] ? __pfx___x64_sys_openat+0x10/0x10 [ 83.711316][ T5924] do_syscall_64+0x106/0xf80 [ 83.711348][ T5924] ? clear_bhb_loop+0x40/0x90 [ 83.711382][ T5924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.711410][ T5924] RIP: 0033:0x7fb5ffd9c799 [ 83.711433][ T5924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.711458][ T5924] RSP: 002b:00007fb600d10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 83.711484][ T5924] RAX: ffffffffffffffda RBX: 00007fb600015fa0 RCX: 00007fb5ffd9c799 [ 83.711502][ T5924] RDX: 0000000000008000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 83.711520][ T5924] RBP: 00007fb5ffe32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 83.711536][ T5924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.711552][ T5924] R13: 00007fb600016038 R14: 00007fb600015fa0 R15: 00007ffe5c76cfd8 [ 83.711590][ T5924] [ 83.739498][ T5145] Bluetooth: hci2: command tx timeout [ 83.812647][ T51] Bluetooth: hci3: command tx timeout [ 84.067516][ T5930] FAULT_INJECTION: forcing a failure. [ 84.067516][ T5930] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 84.131376][ T5934] FAULT_INJECTION: forcing a failure. [ 84.131376][ T5934] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 84.146695][ T5930] CPU: 0 UID: 0 PID: 5930 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(full) [ 84.146734][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 84.146751][ T5930] Call Trace: [ 84.146760][ T5930] [ 84.146771][ T5930] dump_stack_lvl+0x100/0x190 [ 84.146822][ T5930] should_fail_ex.cold+0x5/0xa [ 84.146849][ T5930] ? prepare_alloc_pages+0x16d/0x5f0 [ 84.146885][ T5930] should_fail_alloc_page+0xeb/0x140 [ 84.146918][ T5930] prepare_alloc_pages+0x1f0/0x5f0 [ 84.146949][ T5930] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 84.147000][ T5930] ? __lock_acquire+0x4a5/0x2630 [ 84.147033][ T5930] ? css_rstat_updated+0x1ce/0x5a0 [ 84.147063][ T5930] ? __pfx_css_rstat_updated+0x10/0x10 [ 84.147090][ T5930] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 84.147133][ T5930] ? rcu_is_watching+0x12/0xc0 [ 84.147185][ T5930] ? __lock_acquire+0x4a5/0x2630 [ 84.147271][ T5930] ? __lock_acquire+0x4a5/0x2630 [ 84.147304][ T5930] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.147347][ T5930] ? policy_nodemask+0xed/0x4f0 [ 84.147376][ T5930] alloc_pages_mpol+0x1fb/0x550 [ 84.147403][ T5930] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 84.147431][ T5930] ? find_held_lock+0x2b/0x80 [ 84.147456][ T5930] ? filemap_get_entry+0x1a7/0x3b0 [ 84.147497][ T5930] ? filemap_get_entry+0x1a7/0x3b0 [ 84.147543][ T5930] folio_alloc_noprof+0x22/0x330 [ 84.147578][ T5930] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 84.147612][ T5930] ? __pfx_filemap_get_entry+0x10/0x10 [ 84.147652][ T5930] ? filemap_add_folio+0x114/0x690 [ 84.147698][ T5930] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 84.147738][ T5930] ? rcu_is_watching+0x12/0xc0 [ 84.147784][ T5930] __filemap_get_folio_mpol+0x6a4/0xe70 [ 84.147839][ T5930] ioctx_alloc+0x7e4/0x21d0 [ 84.147887][ T5930] ? __pfx_ioctx_alloc+0x10/0x10 [ 84.147928][ T5930] __x64_sys_io_setup+0xc9/0x220 [ 84.147962][ T5930] do_syscall_64+0x106/0xf80 [ 84.147995][ T5930] ? clear_bhb_loop+0x40/0x90 [ 84.148030][ T5930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.148059][ T5930] RIP: 0033:0x7fd2f2d9c799 [ 84.148084][ T5930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.148110][ T5930] RSP: 002b:00007fd2f0ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 84.148137][ T5930] RAX: ffffffffffffffda RBX: 00007fd2f3015fa0 RCX: 00007fd2f2d9c799 [ 84.148157][ T5930] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ff51 [ 84.148221][ T5930] RBP: 00007fd2f2e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 84.148239][ T5930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.148255][ T5930] R13: 00007fd2f3016038 R14: 00007fd2f3015fa0 R15: 00007ffd66badf38 [ 84.148294][ T5930] [ 84.436100][ T5934] CPU: 0 UID: 0 PID: 5934 Comm: syz.2.10 Not tainted syzkaller #0 PREEMPT(full) [ 84.436140][ T5934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 84.436156][ T5934] Call Trace: [ 84.436165][ T5934] [ 84.436175][ T5934] dump_stack_lvl+0x100/0x190 [ 84.436223][ T5934] should_fail_ex.cold+0x5/0xa [ 84.436249][ T5934] ? prepare_alloc_pages+0x16d/0x5f0 [ 84.436283][ T5934] should_fail_alloc_page+0xeb/0x140 [ 84.436314][ T5934] prepare_alloc_pages+0x1f0/0x5f0 [ 84.436343][ T5934] ? __lock_acquire+0x4a5/0x2630 [ 84.436380][ T5934] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 84.436425][ T5934] ? __lock_acquire+0x4a5/0x2630 [ 84.436477][ T5934] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 84.436518][ T5934] ? find_held_lock+0x2b/0x80 [ 84.436542][ T5934] ? is_bpf_text_address+0x8a/0x1a0 [ 84.436580][ T5934] ? is_bpf_text_address+0x8a/0x1a0 [ 84.436619][ T5934] ? bpf_ksym_find+0x124/0x1c0 [ 84.436652][ T5934] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 84.436686][ T5934] ? kernel_text_address+0x8d/0x100 [ 84.436723][ T5934] ? is_bpf_text_address+0x8a/0x1a0 [ 84.436762][ T5934] ? __kernel_text_address+0xd/0x30 [ 84.436799][ T5934] ? unwind_get_return_address+0x59/0xa0 [ 84.436828][ T5934] ? arch_stack_walk+0xa6/0xf0 [ 84.436856][ T5934] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.436902][ T5934] ? policy_nodemask+0xed/0x4f0 [ 84.436934][ T5934] alloc_pages_mpol+0x1fb/0x550 [ 84.436964][ T5934] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 84.437003][ T5934] alloc_pages_noprof+0x131/0x390 [ 84.437044][ T5934] __pud_alloc+0x3b/0x760 [ 84.437077][ T5934] copy_page_range+0x3f06/0x6570 [ 84.437125][ T5934] ? __lock_acquire+0x4a5/0x2630 [ 84.437185][ T5934] ? mas_wr_store_entry+0x6d2/0x2390 [ 84.437225][ T5934] ? __pfx_copy_page_range+0x10/0x10 [ 84.437269][ T5934] ? mas_store+0x666/0xac0 [ 84.437307][ T5934] ? __pfx_mas_store+0x10/0x10 [ 84.437352][ T5934] ? __pfx___vma_start_write+0x10/0x10 [ 84.437399][ T5934] dup_mmap+0xd25/0x2180 [ 84.437448][ T5934] ? __pfx_dup_mmap+0x10/0x10 [ 84.437479][ T5934] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 84.437518][ T5934] ? __lock_acquire+0x4a5/0x2630 [ 84.437552][ T5934] ? find_held_lock+0x2b/0x80 [ 84.437578][ T5934] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 84.437654][ T5934] copy_process+0x73d7/0x7a10 [ 84.437685][ T5934] ? futex_unqueue+0x133/0x2c0 [ 84.437739][ T5934] ? __pfx_copy_process+0x10/0x10 [ 84.437783][ T5934] ? _copy_from_user+0x59/0xd0 [ 84.437814][ T5934] kernel_clone+0xfc/0x9a0 [ 84.437846][ T5934] ? __pfx_kernel_clone+0x10/0x10 [ 84.437885][ T5934] ? __pfx_futex_wait+0x10/0x10 [ 84.437936][ T5934] __do_sys_clone3+0x214/0x290 [ 84.437967][ T5934] ? __pfx___do_sys_clone3+0x10/0x10 [ 84.438060][ T5934] do_syscall_64+0x106/0xf80 [ 84.438092][ T5934] ? clear_bhb_loop+0x40/0x90 [ 84.438127][ T5934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.438155][ T5934] RIP: 0033:0x7f05ba59c799 [ 84.438180][ T5934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.438206][ T5934] RSP: 002b:00007f05bb483ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 84.438232][ T5934] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f05ba59c799 [ 84.438250][ T5934] RDX: 00007f05bb483f10 RSI: 0000000000000058 RDI: 00007f05bb483f10 [ 84.438268][ T5934] RBP: 00007f05ba632bd9 R08: 0000000000000000 R09: 0000000000000058 [ 84.438284][ T5934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.438300][ T5934] R13: 00007f05ba816038 R14: 00007f05ba815fa0 R15: 00007ffd90d2df38 [ 84.438339][ T5934] [ 84.945464][ T5937] FAULT_INJECTION: forcing a failure. [ 84.945464][ T5937] name failslab, interval 1, probability 0, space 0, times 0 [ 84.959502][ T5937] CPU: 0 UID: 0 PID: 5937 Comm: syz.0.11 Not tainted syzkaller #0 PREEMPT(full) [ 84.959540][ T5937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 84.959555][ T5937] Call Trace: [ 84.959564][ T5937] [ 84.959573][ T5937] dump_stack_lvl+0x100/0x190 [ 84.959618][ T5937] should_fail_ex.cold+0x5/0xa [ 84.959650][ T5937] ? tomoyo_open_control+0x618/0xa20 [ 84.959683][ T5937] should_failslab+0xc2/0x120 [ 84.959711][ T5937] __kmalloc_noprof+0xe0/0x850 [ 84.959749][ T5937] ? lockdep_init_map_type+0x5c/0x250 [ 84.959790][ T5937] tomoyo_open_control+0x618/0xa20 [ 84.959831][ T5937] do_dentry_open+0x6d8/0x1660 [ 84.959858][ T5937] ? __pfx_tomoyo_open+0x10/0x10 [ 84.959898][ T5937] vfs_open+0x82/0x3f0 [ 84.959934][ T5937] path_openat+0x208c/0x31a0 [ 84.959969][ T5937] ? __pfx_path_openat+0x10/0x10 [ 84.960006][ T5937] do_file_open+0x20e/0x430 [ 84.960036][ T5937] ? __pfx_do_file_open+0x10/0x10 [ 84.960089][ T5937] ? alloc_fd+0x476/0x790 [ 84.960127][ T5937] ? do_getname+0x191/0x390 [ 84.960160][ T5937] do_sys_openat2+0x10d/0x1e0 [ 84.960197][ T5937] ? __pfx_do_sys_openat2+0x10/0x10 [ 84.960246][ T5937] ? __fget_files+0x21f/0x3d0 [ 84.960283][ T5937] __x64_sys_openat+0x12d/0x210 [ 84.960316][ T5937] ? __pfx___x64_sys_openat+0x10/0x10 [ 84.960367][ T5937] do_syscall_64+0x106/0xf80 [ 84.960395][ T5937] ? clear_bhb_loop+0x40/0x90 [ 84.960426][ T5937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.960484][ T5937] RIP: 0033:0x7fb5ffd9c799 [ 84.960506][ T5937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.960535][ T5937] RSP: 002b:00007fb600d10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 84.960559][ T5937] RAX: ffffffffffffffda RBX: 00007fb600015fa0 RCX: 00007fb5ffd9c799 [ 84.960576][ T5937] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 84.960592][ T5937] RBP: 00007fb5ffe32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 84.960608][ T5937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.960622][ T5937] R13: 00007fb600016038 R14: 00007fb600015fa0 R15: 00007ffe5c76cfd8 [ 84.960654][ T5937] [ 85.599383][ T51] Bluetooth: hci0: command tx timeout [ 85.665499][ T51] Bluetooth: hci1: command tx timeout [ 85.832978][ T51] Bluetooth: hci2: command tx timeout [ 85.971623][ T5957] mmap: syz.2.15 (5957) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 86.030184][ T5951] NFSD: Failed to start, no listeners configured. [ 86.069315][ T51] Bluetooth: hci3: command tx timeout [ 86.458521][ T5964] netlink: 334 bytes leftover after parsing attributes in process `syz.3.19'. [ 86.670884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.746184][ T5972] FAULT_INJECTION: forcing a failure. [ 86.746184][ T5972] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 86.781777][ T5972] CPU: 1 UID: 0 PID: 5972 Comm: syz.0.21 Not tainted syzkaller #0 PREEMPT(full) [ 86.781818][ T5972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 86.781834][ T5972] Call Trace: [ 86.781843][ T5972] [ 86.781855][ T5972] dump_stack_lvl+0x100/0x190 [ 86.781899][ T5972] should_fail_ex.cold+0x5/0xa [ 86.781926][ T5972] ? prepare_alloc_pages+0x16d/0x5f0 [ 86.781950][ T5972] should_fail_alloc_page+0xeb/0x140 [ 86.781968][ T5972] prepare_alloc_pages+0x1f0/0x5f0 [ 86.781988][ T5972] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 86.782017][ T5972] ? __lock_acquire+0x4a5/0x2630 [ 86.782035][ T5972] ? css_rstat_updated+0x1ce/0x5a0 [ 86.782052][ T5972] ? __pfx_css_rstat_updated+0x10/0x10 [ 86.782068][ T5972] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 86.782094][ T5972] ? rcu_is_watching+0x12/0xc0 [ 86.782118][ T5972] ? __lock_acquire+0x4a5/0x2630 [ 86.782138][ T5972] ? __lock_acquire+0x4a5/0x2630 [ 86.782154][ T5972] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 86.782178][ T5972] ? policy_nodemask+0xed/0x4f0 [ 86.782195][ T5972] alloc_pages_mpol+0x1fb/0x550 [ 86.782211][ T5972] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 86.782227][ T5972] ? find_held_lock+0x2b/0x80 [ 86.782239][ T5972] ? filemap_get_entry+0x1a7/0x3b0 [ 86.782268][ T5972] ? filemap_get_entry+0x1a7/0x3b0 [ 86.782293][ T5972] folio_alloc_noprof+0x22/0x330 [ 86.782312][ T5972] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 86.782330][ T5972] ? __pfx_filemap_get_entry+0x10/0x10 [ 86.782351][ T5972] ? filemap_add_folio+0x114/0x690 [ 86.782373][ T5972] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 86.782394][ T5972] ? rcu_is_watching+0x12/0xc0 [ 86.782423][ T5972] __filemap_get_folio_mpol+0x6a4/0xe70 [ 86.782452][ T5972] ioctx_alloc+0x7e4/0x21d0 [ 86.782477][ T5972] ? __pfx_ioctx_alloc+0x10/0x10 [ 86.782499][ T5972] __x64_sys_io_setup+0xc9/0x220 [ 86.782517][ T5972] do_syscall_64+0x106/0xf80 [ 86.782537][ T5972] ? clear_bhb_loop+0x40/0x90 [ 86.782557][ T5972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.782572][ T5972] RIP: 0033:0x7fb5ffd9c799 [ 86.782586][ T5972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.782600][ T5972] RSP: 002b:00007fb600d10028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 86.782614][ T5972] RAX: ffffffffffffffda RBX: 00007fb600015fa0 RCX: 00007fb5ffd9c799 [ 86.782624][ T5972] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ff51 [ 86.782633][ T5972] RBP: 00007fb5ffe32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 86.782642][ T5972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.782651][ T5972] R13: 00007fb600016038 R14: 00007fb600015fa0 R15: 00007ffe5c76cfd8 [ 86.782670][ T5972] [ 87.102589][ T47] cfg80211: failed to load regulatory.db [ 87.593771][ T5987] NFSD: Failed to start, no listeners configured. [ 87.603614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.629590][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.653619][ T5991] nfs: Unknown parameter '£m?¥ŒÁLH>®ï½¢^Ñe„°àko}* ' [ 87.666850][ T5991] FAULT_INJECTION: forcing a failure. [ 87.666850][ T5991] name failslab, interval 1, probability 0, space 0, times 0 [ 87.685172][ T5991] CPU: 1 UID: 0 PID: 5991 Comm: syz.1.26 Not tainted syzkaller #0 PREEMPT(full) [ 87.685192][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 87.685202][ T5991] Call Trace: [ 87.685207][ T5991] [ 87.685212][ T5991] dump_stack_lvl+0x100/0x190 [ 87.685240][ T5991] should_fail_ex.cold+0x5/0xa [ 87.685259][ T5991] should_failslab+0xc2/0x120 [ 87.685274][ T5991] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 87.685295][ T5991] ? __pmd_alloc+0xbf/0x9c0 [ 87.685316][ T5991] __pmd_alloc+0xbf/0x9c0 [ 87.685335][ T5991] move_page_tables+0x3224/0x4500 [ 87.685357][ T5991] ? __pfx_copy_vma+0x10/0x10 [ 87.685395][ T5991] ? __pfx_move_page_tables+0x10/0x10 [ 87.685430][ T5991] copy_vma_and_data+0x25c/0x7c0 [ 87.685453][ T5991] ? __pfx_copy_vma_and_data+0x10/0x10 [ 87.685483][ T5991] ? __vma_start_write+0x17f/0x280 [ 87.685503][ T5991] ? __pfx___vma_start_write+0x10/0x10 [ 87.685521][ T5991] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 87.685550][ T5991] move_vma+0x51b/0x1890 [ 87.685573][ T5991] ? __pfx_move_vma+0x10/0x10 [ 87.685595][ T5991] ? thp_get_unmapped_area_vmflags+0x27f/0x2d0 [ 87.685615][ T5991] ? cap_mmap_addr+0x4b/0x120 [ 87.685634][ T5991] ? bpf_lsm_mmap_addr+0x9/0x30 [ 87.685655][ T5991] ? security_mmap_addr+0x71/0x1e0 [ 87.685674][ T5991] ? __get_unmapped_area+0x255/0x3e0 [ 87.685692][ T5991] ? vrm_set_new_addr+0x204/0x290 [ 87.685714][ T5991] mremap_to+0x1b7/0x450 [ 87.685735][ T5991] do_mremap+0xb76/0x2130 [ 87.685763][ T5991] ? __pfx_do_mremap+0x10/0x10 [ 87.685788][ T5991] ? ksys_write+0x190/0x250 [ 87.685806][ T5991] __do_sys_mremap+0x126/0x170 [ 87.685827][ T5991] ? __pfx___do_sys_mremap+0x10/0x10 [ 87.685852][ T5991] ? __x64_sys_futex+0x34f/0x4d0 [ 87.685885][ T5991] do_syscall_64+0x106/0xf80 [ 87.685903][ T5991] ? clear_bhb_loop+0x40/0x90 [ 87.685921][ T5991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.685936][ T5991] RIP: 0033:0x7f86f319c799 [ 87.685950][ T5991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.685964][ T5991] RSP: 002b:00007f86f4098028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 87.685978][ T5991] RAX: ffffffffffffffda RBX: 00007f86f3415fa0 RCX: 00007f86f319c799 [ 87.685988][ T5991] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 000000110c231000 [ 87.685997][ T5991] RBP: 00007f86f3232bd9 R08: 0000000100000000 R09: 0000000000000000 [ 87.686006][ T5991] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 87.686015][ T5991] R13: 00007f86f3416038 R14: 00007f86f3415fa0 R15: 00007ffc861090e8 [ 87.686034][ T5991] [ 87.820177][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 88.430337][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.761573][ T5986] NFSD: Failed to start, no listeners configured. [ 88.903393][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.258628][ T6000] NFSD: Failed to start, no listeners configured. [ 89.414653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 89.519417][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.655552][ T6019] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.757913][ T6004] NFSD: Failed to start, no listeners configured. [ 89.872109][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.894520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.155959][ T6024] NFSD: Failed to start, no listeners configured. [ 90.496433][ T6033] FAULT_INJECTION: forcing a failure. [ 90.496433][ T6033] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 90.527101][ T6033] CPU: 1 UID: 0 PID: 6033 Comm: syz.1.34 Not tainted syzkaller #0 PREEMPT(full) [ 90.527142][ T6033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 90.527157][ T6033] Call Trace: [ 90.527165][ T6033] [ 90.527175][ T6033] dump_stack_lvl+0x100/0x190 [ 90.527221][ T6033] should_fail_ex.cold+0x5/0xa [ 90.527248][ T6033] ? prepare_alloc_pages+0x16d/0x5f0 [ 90.527278][ T6033] should_fail_alloc_page+0xeb/0x140 [ 90.527307][ T6033] prepare_alloc_pages+0x1f0/0x5f0 [ 90.527341][ T6033] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 90.527393][ T6033] ? __lock_acquire+0x4a5/0x2630 [ 90.527425][ T6033] ? css_rstat_updated+0x1ce/0x5a0 [ 90.527456][ T6033] ? __pfx_css_rstat_updated+0x10/0x10 [ 90.527485][ T6033] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 90.527543][ T6033] ? rcu_is_watching+0x12/0xc0 [ 90.527589][ T6033] ? __lock_acquire+0x4a5/0x2630 [ 90.527625][ T6033] ? __lock_acquire+0x4a5/0x2630 [ 90.527658][ T6033] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 90.527700][ T6033] ? policy_nodemask+0xed/0x4f0 [ 90.527730][ T6033] alloc_pages_mpol+0x1fb/0x550 [ 90.527775][ T6033] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 90.527799][ T6033] ? find_held_lock+0x2b/0x80 [ 90.527824][ T6033] ? filemap_get_entry+0x1a7/0x3b0 [ 90.527863][ T6033] ? filemap_get_entry+0x1a7/0x3b0 [ 90.527903][ T6033] folio_alloc_noprof+0x22/0x330 [ 90.527948][ T6033] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 90.527988][ T6033] ? __pfx_filemap_get_entry+0x10/0x10 [ 90.528027][ T6033] ? filemap_add_folio+0x114/0x690 [ 90.528064][ T6033] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 90.528108][ T6033] ? rcu_is_watching+0x12/0xc0 [ 90.528148][ T6033] __filemap_get_folio_mpol+0x6a4/0xe70 [ 90.528198][ T6033] ioctx_alloc+0x7e4/0x21d0 [ 90.528238][ T6033] ? __pfx_ioctx_alloc+0x10/0x10 [ 90.528277][ T6033] __x64_sys_io_setup+0xc9/0x220 [ 90.528311][ T6033] do_syscall_64+0x106/0xf80 [ 90.528342][ T6033] ? clear_bhb_loop+0x40/0x90 [ 90.528376][ T6033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.528403][ T6033] RIP: 0033:0x7f86f319c799 [ 90.528426][ T6033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.528451][ T6033] RSP: 002b:00007f86f4098028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 90.528476][ T6033] RAX: ffffffffffffffda RBX: 00007f86f3415fa0 RCX: 00007f86f319c799 [ 90.528493][ T6033] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ff51 [ 90.528507][ T6033] RBP: 00007f86f3232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 90.528531][ T6033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.528547][ T6033] R13: 00007f86f3416038 R14: 00007f86f3415fa0 R15: 00007ffc861090e8 [ 90.528583][ T6033] [ 90.890370][ T6041] FAULT_INJECTION: forcing a failure. [ 90.890370][ T6041] name failslab, interval 1, probability 0, space 0, times 0 [ 90.903048][ T6041] CPU: 1 UID: 0 PID: 6041 Comm: syz.1.36 Not tainted syzkaller #0 PREEMPT(full) [ 90.903069][ T6041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 90.903078][ T6041] Call Trace: [ 90.903085][ T6041] [ 90.903091][ T6041] dump_stack_lvl+0x100/0x190 [ 90.903118][ T6041] should_fail_ex.cold+0x5/0xa [ 90.903136][ T6041] should_failslab+0xc2/0x120 [ 90.903151][ T6041] __kmalloc_cache_node_noprof+0x7d/0x770 [ 90.903176][ T6041] ? __get_vm_area_node+0x101/0x330 [ 90.903196][ T6041] __get_vm_area_node+0x101/0x330 [ 90.903215][ T6041] __vmalloc_node_range_noprof+0x213/0x1530 [ 90.903234][ T6041] ? kernel_clone+0xfc/0x9a0 [ 90.903250][ T6041] ? local_lock_release+0x99/0x130 [ 90.903271][ T6041] ? kernel_clone+0xfc/0x9a0 [ 90.903287][ T6041] ? find_held_lock+0x2b/0x80 [ 90.903301][ T6041] ? rcu_read_unlock+0x17/0x60 [ 90.903315][ T6041] ? rcu_read_unlock+0x17/0x60 [ 90.903331][ T6041] ? obj_cgroup_charge_account+0x46d/0x640 [ 90.903347][ T6041] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 90.903366][ T6041] ? __memcg_slab_post_alloc_hook+0x51b/0x990 [ 90.903385][ T6041] ? rcu_is_watching+0x12/0xc0 [ 90.903406][ T6041] ? trace_kmem_cache_alloc+0xf3/0x120 [ 90.903422][ T6041] ? kernel_clone+0xfc/0x9a0 [ 90.903437][ T6041] __vmalloc_node_noprof+0xad/0xf0 [ 90.903455][ T6041] ? kernel_clone+0xfc/0x9a0 [ 90.903472][ T6041] copy_process+0x5ec/0x7a10 [ 90.903490][ T6041] ? __pfx___futex_wait+0x10/0x10 [ 90.903510][ T6041] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 90.903527][ T6041] ? lockdep_hardirqs_on+0x78/0x100 [ 90.903549][ T6041] ? __pfx_copy_process+0x10/0x10 [ 90.903565][ T6041] ? find_held_lock+0x2b/0x80 [ 90.903586][ T6041] kernel_clone+0xfc/0x9a0 [ 90.903601][ T6041] ? __pfx_futex_wait+0x10/0x10 [ 90.903623][ T6041] ? __pfx_kernel_clone+0x10/0x10 [ 90.903649][ T6041] __do_sys_clone+0xd9/0x120 [ 90.903666][ T6041] ? __pfx___do_sys_clone+0x10/0x10 [ 90.903682][ T6041] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 90.903722][ T6041] do_syscall_64+0x106/0xf80 [ 90.903745][ T6041] ? clear_bhb_loop+0x40/0x90 [ 90.903763][ T6041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.903778][ T6041] RIP: 0033:0x7f86f319c799 [ 90.903792][ T6041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.903806][ T6041] RSP: 002b:00007f86f4098028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 90.903820][ T6041] RAX: ffffffffffffffda RBX: 00007f86f3415fa0 RCX: 00007f86f319c799 [ 90.903830][ T6041] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 90.903839][ T6041] RBP: 00007f86f3232bd9 R08: 0000000000000002 R09: 0000000000000000 [ 90.903848][ T6041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.903856][ T6041] R13: 00007f86f3416038 R14: 00007f86f3415fa0 R15: 00007ffc861090e8 [ 90.903876][ T6041] [ 90.904004][ T6041] syz.1.36: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 91.220338][ T6041] CPU: 0 UID: 0 PID: 6041 Comm: syz.1.36 Not tainted syzkaller #0 PREEMPT(full) [ 91.220374][ T6041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 91.220389][ T6041] Call Trace: [ 91.220398][ T6041] [ 91.220409][ T6041] dump_stack_lvl+0x100/0x190 [ 91.220454][ T6041] warn_alloc.cold+0x95/0x1c1 [ 91.220501][ T6041] ? __pfx_warn_alloc+0x10/0x10 [ 91.220538][ T6041] ? trace_kmalloc+0x101/0x130 [ 91.220570][ T6041] ? __kmalloc_cache_node_noprof+0x2d9/0x770 [ 91.220617][ T6041] ? __kasan_kmalloc+0x8a/0xb0 [ 91.220700][ T6041] ? __get_vm_area_node+0x208/0x330 [ 91.220739][ T6041] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 91.220774][ T6041] ? local_lock_release+0x99/0x130 [ 91.220816][ T6041] ? kernel_clone+0xfc/0x9a0 [ 91.220848][ T6041] ? find_held_lock+0x2b/0x80 [ 91.220874][ T6041] ? rcu_read_unlock+0x17/0x60 [ 91.220902][ T6041] ? rcu_read_unlock+0x17/0x60 [ 91.220931][ T6041] ? obj_cgroup_charge_account+0x46d/0x640 [ 91.220962][ T6041] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 91.220999][ T6041] ? __memcg_slab_post_alloc_hook+0x51b/0x990 [ 91.221035][ T6041] ? rcu_is_watching+0x12/0xc0 [ 91.221076][ T6041] ? trace_kmem_cache_alloc+0xf3/0x120 [ 91.221108][ T6041] ? kernel_clone+0xfc/0x9a0 [ 91.221135][ T6041] __vmalloc_node_noprof+0xad/0xf0 [ 91.221161][ T6041] ? kernel_clone+0xfc/0x9a0 [ 91.221187][ T6041] copy_process+0x5ec/0x7a10 [ 91.221219][ T6041] ? __pfx___futex_wait+0x10/0x10 [ 91.221257][ T6041] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 91.221288][ T6041] ? lockdep_hardirqs_on+0x78/0x100 [ 91.221327][ T6041] ? __pfx_copy_process+0x10/0x10 [ 91.221355][ T6041] ? find_held_lock+0x2b/0x80 [ 91.221393][ T6041] kernel_clone+0xfc/0x9a0 [ 91.221420][ T6041] ? __pfx_futex_wait+0x10/0x10 [ 91.221461][ T6041] ? __pfx_kernel_clone+0x10/0x10 [ 91.221507][ T6041] __do_sys_clone+0xd9/0x120 [ 91.221539][ T6041] ? __pfx___do_sys_clone+0x10/0x10 [ 91.221569][ T6041] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 91.221640][ T6041] do_syscall_64+0x106/0xf80 [ 91.221672][ T6041] ? clear_bhb_loop+0x40/0x90 [ 91.221706][ T6041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.221732][ T6041] RIP: 0033:0x7f86f319c799 [ 91.221754][ T6041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.221780][ T6041] RSP: 002b:00007f86f4098028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 91.221806][ T6041] RAX: ffffffffffffffda RBX: 00007f86f3415fa0 RCX: 00007f86f319c799 [ 91.221823][ T6041] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 91.221838][ T6041] RBP: 00007f86f3232bd9 R08: 0000000000000002 R09: 0000000000000000 [ 91.221855][ T6041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.221870][ T6041] R13: 00007f86f3416038 R14: 00007f86f3415fa0 R15: 00007ffc861090e8 [ 91.221905][ T6041] [ 91.222170][ T6041] Mem-Info: [ 91.552669][ T6041] active_anon:6711 inactive_anon:0 isolated_anon:0 [ 91.552669][ T6041] active_file:3255 inactive_file:39928 isolated_file:0 [ 91.552669][ T6041] unevictable:768 dirty:1768 writeback:0 [ 91.552669][ T6041] slab_reclaimable:10448 slab_unreclaimable:91075 [ 91.552669][ T6041] mapped:28831 shmem:2383 pagetables:1112 [ 91.552669][ T6041] sec_pagetables:0 bounce:0 [ 91.552669][ T6041] kernel_misc_reclaimable:0 [ 91.552669][ T6041] free:1337954 free_pcp:19302 free_cma:0 [ 91.692694][ T6041] Node 0 active_anon:24404kB inactive_anon:0kB active_file:13020kB inactive_file:159504kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101076kB dirty:7060kB writeback:0kB shmem:7996kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11424kB pagetables:4300kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 91.862435][ T6029] NFSD: Failed to start, no listeners configured. [ 91.871314][ T6041] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 91.961431][ T6041] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 92.016288][ T6041] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 92.022608][ T6041] Node 0 DMA32 free:1423444kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24104kB inactive_anon:1408kB active_file:12920kB inactive_file:159504kB unevictable:1536kB writepending:7060kB zspages:296kB present:3129332kB managed:2537428kB mlocked:0kB bounce:0kB free_pcp:56000kB local_pcp:24500kB free_cma:0kB [ 92.066218][ T6041] lowmem_reserve[]: 0 0 1 1 1 [ 92.072235][ T6041] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1060kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 92.104762][ T6041] lowmem_reserve[]: 0 0 0 0 0 [ 92.110774][ T6041] Node 1 Normal free:3915212kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:12kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21156kB local_pcp:7772kB free_cma:0kB [ 92.163644][ T6041] lowmem_reserve[]: 0 0 0 0 0 [ 92.168399][ T6041] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 92.246079][ T6041] Node 0 DMA32: 1092*4kB (UM) 235*8kB (UM) 31*16kB (UME) 6*32kB (UME) 6*64kB (UME) 4*128kB (M) 6*256kB (UME) 2*512kB (M) 3*1024kB (M) 6*2048kB (UME) 341*4096kB (M) = 1422488kB [ 92.330096][ T6041] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 92.405449][ T6041] Node 1 Normal: 1*4kB (M) 1*8kB (U) 2*16kB (UM) 1*32kB (M) 4*64kB (U) 3*128kB (U) 1*256kB (U) 3*512kB (UM) 1*1024kB (U) 2*2048kB (UM) 954*4096kB (M) = 3915212kB [ 92.446111][ T6052] NFSD: Failed to start, no listeners configured. [ 92.462867][ T6055] netlink: 338 bytes leftover after parsing attributes in process `syz.3.41'. [ 92.483403][ T6057] netlink: 338 bytes leftover after parsing attributes in process `syz.3.41'. [ 92.501733][ T6055] netlink: 210 bytes leftover after parsing attributes in process `syz.3.41'. [ 92.529259][ T6041] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 92.563855][ T6041] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 92.589835][ T6041] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 92.618045][ T6041] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 92.628627][ T6041] 45022 total pagecache pages [ 92.634963][ T6041] 24 pages in swap cache [ 92.646817][ T6041] Free swap = 124996kB [ 92.702721][ T6041] Total swap = 124996kB [ 92.706926][ T6041] 2097051 pages RAM [ 92.725590][ T6041] 0 pages HighMem/MovableOnly [ 92.733477][ T6041] 430814 pages reserved [ 92.737666][ T6041] 0 pages cma reserved [ 93.213138][ T6060] NFSD: Failed to start, no listeners configured. [ 94.626502][ T6084] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 94.914167][ T6084] File: /dev/nullb0 PID: 6084 Comm: syz.2.47 [ 95.398317][ T6098] NFSD: Failed to start, no listeners configured. [ 95.527798][ T29] audit: type=1800 audit(1772844556.040:2): pid=6107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.53" name="lu_gp_id" dev="configfs" ino=9425 res=0 errno=0 [ 95.990540][ T6118] FAULT_INJECTION: forcing a failure. [ 95.990540][ T6118] name failslab, interval 1, probability 0, space 0, times 0 [ 96.039315][ T6118] CPU: 0 UID: 0 PID: 6118 Comm: syz.1.56 Not tainted syzkaller #0 PREEMPT(full) [ 96.039337][ T6118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 96.039346][ T6118] Call Trace: [ 96.039352][ T6118] [ 96.039361][ T6118] dump_stack_lvl+0x100/0x190 [ 96.039389][ T6118] should_fail_ex.cold+0x5/0xa [ 96.039408][ T6118] should_failslab+0xc2/0x120 [ 96.039423][ T6118] __kmalloc_cache_noprof+0x7a/0x6f0 [ 96.039442][ T6118] ? kobject_uevent_env+0x263/0x18b0 [ 96.039468][ T6118] kobject_uevent_env+0x263/0x18b0 [ 96.039490][ T6118] ? kvm_uevent_notify_change.part.0+0x321/0x450 [ 96.039510][ T6118] ? kfree+0x1f6/0x6b0 [ 96.039531][ T6118] kvm_uevent_notify_change.part.0+0x3a6/0x450 [ 96.039549][ T6118] ? __pfx_kvm_vm_release+0x10/0x10 [ 96.039565][ T6118] kvm_put_kvm+0xe4/0xb10 [ 96.039581][ T6118] ? lockdep_hardirqs_on+0x78/0x100 [ 96.039598][ T6118] ? _raw_spin_unlock_irq+0x2e/0x50 [ 96.039614][ T6118] ? __pfx_kvm_vm_release+0x10/0x10 [ 96.039639][ T6118] kvm_vm_release+0x3c/0x50 [ 96.039654][ T6118] __fput+0x3ff/0xb40 [ 96.039674][ T6118] ? _raw_spin_unlock_irq+0x23/0x50 [ 96.039691][ T6118] task_work_run+0x150/0x240 [ 96.039713][ T6118] ? __pfx_task_work_run+0x10/0x10 [ 96.039738][ T6118] exit_to_user_mode_loop+0x100/0x4a0 [ 96.039759][ T6118] do_syscall_64+0x668/0xf80 [ 96.039776][ T6118] ? clear_bhb_loop+0x40/0x90 [ 96.039793][ T6118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.039808][ T6118] RIP: 0033:0x7f86f319c799 [ 96.039822][ T6118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.039835][ T6118] RSP: 002b:00007f86f4098028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 96.039849][ T6118] RAX: 0000000000000000 RBX: 00007f86f3415fa0 RCX: 00007f86f319c799 [ 96.039858][ T6118] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 96.039867][ T6118] RBP: 00007f86f3232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 96.039875][ T6118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.039883][ T6118] R13: 00007f86f3416038 R14: 00007f86f3415fa0 R15: 00007ffc861090e8 [ 96.039902][ T6118] [ 96.747910][ T6122] process 'syz.3.57' launched ':,' with NULL argv: empty string added [ 97.938502][ T6137] NFSD: Failed to start, no listeners configured. [ 98.238123][ T6143] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 98.255286][ T6143] File: /dev/nullb0 PID: 6143 Comm: syz.0.63 [ 99.822844][ T6174] NFSD: Failed to start, no listeners configured. [ 101.166245][ T6189] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.496019][ T6195] NFSD: Failed to start, no listeners configured. [ 101.936166][ T6212] FAULT_INJECTION: forcing a failure. [ 101.936166][ T6212] name failslab, interval 1, probability 0, space 0, times 0 [ 101.970613][ T6212] CPU: 0 UID: 0 PID: 6212 Comm: syz.2.75 Not tainted syzkaller #0 PREEMPT(full) [ 101.970636][ T6212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 101.970645][ T6212] Call Trace: [ 101.970651][ T6212] [ 101.970657][ T6212] dump_stack_lvl+0x100/0x190 [ 101.970684][ T6212] should_fail_ex.cold+0x5/0xa [ 101.970704][ T6212] should_failslab+0xc2/0x120 [ 101.970719][ T6212] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 101.970740][ T6212] ? __mpol_dup+0x74/0x370 [ 101.970760][ T6212] __mpol_dup+0x74/0x370 [ 101.970777][ T6212] ? __pfx___mpol_dup+0x10/0x10 [ 101.970812][ T6212] ? anon_vma_name+0x5a/0x250 [ 101.970832][ T6212] vma_dup_policy+0x42/0xb0 [ 101.970849][ T6212] __split_vma+0x35e/0xd90 [ 101.970873][ T6212] ? __pfx___split_vma+0x10/0x10 [ 101.970904][ T6212] ? find_held_lock+0x2b/0x80 [ 101.970919][ T6212] ? ima_match_policy+0x8c4/0x2350 [ 101.970939][ T6212] vms_gather_munmap_vmas+0x1c6/0x1500 [ 101.970965][ T6212] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 101.970988][ T6212] ? mas_walk+0x6ef/0x9b0 [ 101.971011][ T6212] __mmap_region+0x492/0x29e0 [ 101.971035][ T6212] ? __pfx___mmap_region+0x10/0x10 [ 101.971055][ T6212] ? process_measurement+0x1f4/0x2350 [ 101.971076][ T6212] ? css_rstat_updated+0x1ce/0x5a0 [ 101.971093][ T6212] ? __pfx_css_rstat_updated+0x10/0x10 [ 101.971116][ T6212] ? __lock_acquire+0x4a5/0x2630 [ 101.971142][ T6212] ? lock_acquire+0x1cf/0x380 [ 101.971158][ T6212] ? find_held_lock+0x2b/0x80 [ 101.971171][ T6212] ? finish_task_switch.isra.0+0x200/0xb80 [ 101.971187][ T6212] ? finish_task_switch.isra.0+0x200/0xb80 [ 101.971209][ T6212] ? trace_sched_exit_tp+0x13a/0x180 [ 101.971226][ T6212] ? __schedule+0x1000/0x6120 [ 101.971272][ T6212] mmap_region+0x180/0x3e0 [ 101.971297][ T6212] do_mmap+0xc63/0x12f0 [ 101.971317][ T6212] ? __pfx_do_mmap+0x10/0x10 [ 101.971333][ T6212] ? __pfx_down_write_killable+0x10/0x10 [ 101.971356][ T6212] vm_mmap_pgoff+0x29e/0x470 [ 101.971376][ T6212] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 101.971393][ T6212] ? do_futex+0x192/0x350 [ 101.971412][ T6212] ? __pfx_do_futex+0x10/0x10 [ 101.971434][ T6212] ksys_mmap_pgoff+0xe1/0x650 [ 101.971449][ T6212] ? __x64_sys_futex+0x34f/0x4d0 [ 101.971466][ T6212] ? __x64_sys_futex+0x358/0x4d0 [ 101.971485][ T6212] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 101.971500][ T6212] ? xfd_validate_state+0x129/0x190 [ 101.971525][ T6212] __x64_sys_mmap+0x125/0x190 [ 101.971548][ T6212] do_syscall_64+0x106/0xf80 [ 101.971564][ T6212] ? clear_bhb_loop+0x40/0x90 [ 101.971582][ T6212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.971597][ T6212] RIP: 0033:0x7f05ba59c799 [ 101.971610][ T6212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.971625][ T6212] RSP: 002b:00007f05bb463028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 101.971639][ T6212] RAX: ffffffffffffffda RBX: 00007f05ba816090 RCX: 00007f05ba59c799 [ 101.971649][ T6212] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000002000 [ 101.971658][ T6212] RBP: 00007f05ba632bd9 R08: 0000000000000002 R09: 0000000000008000 [ 101.971667][ T6212] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 101.971675][ T6212] R13: 00007f05ba816128 R14: 00007f05ba816090 R15: 00007ffd90d2df38 [ 101.971696][ T6212] [ 102.761615][ T6204] NFSD: Failed to start, no listeners configured. [ 103.362505][ T6219] NFSD: Failed to start, no listeners configured. [ 105.399607][ T6250] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 105.411607][ T6250] File: /dev/nullb0 PID: 6250 Comm: syz.0.82 [ 106.382814][ T6253] Invalid ELF header magic: != ELF [ 106.867513][ T6225] NFSD: Failed to start, no listeners configured. [ 107.047584][ T6235] NFSD: Failed to start, no listeners configured. [ 107.196247][ T6255] NFSD: Failed to start, no listeners configured. [ 107.684272][ T6274] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.016564][ T6280] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 108.264492][ T6284] FAULT_INJECTION: forcing a failure. [ 108.264492][ T6284] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 108.327151][ T6284] CPU: 0 UID: 0 PID: 6284 Comm: syz.0.93 Not tainted syzkaller #0 PREEMPT(full) [ 108.327189][ T6284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 108.327205][ T6284] Call Trace: [ 108.327214][ T6284] [ 108.327224][ T6284] dump_stack_lvl+0x100/0x190 [ 108.327270][ T6284] should_fail_ex.cold+0x5/0xa [ 108.327295][ T6284] ? prepare_alloc_pages+0x16d/0x5f0 [ 108.327327][ T6284] should_fail_alloc_page+0xeb/0x140 [ 108.327358][ T6284] prepare_alloc_pages+0x1f0/0x5f0 [ 108.327385][ T6284] ? __lock_acquire+0x4a5/0x2630 [ 108.327424][ T6284] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 108.327469][ T6284] ? lock_acquire+0x1cf/0x380 [ 108.327500][ T6284] ? find_held_lock+0x2b/0x80 [ 108.327520][ T6284] ? page_table_check_set+0x49a/0xa10 [ 108.327557][ T6284] ? page_table_check_set+0x49a/0xa10 [ 108.327595][ T6284] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 108.327642][ T6284] ? __page_table_check_ptes_set+0x1b5/0x4e0 [ 108.327663][ T6284] ? xas_move_index+0xae/0x110 [ 108.327696][ T6284] ? xas_find+0x32c/0x8e0 [ 108.327732][ T6284] ? find_held_lock+0x2b/0x80 [ 108.327756][ T6284] ? find_held_lock+0x2b/0x80 [ 108.327779][ T6284] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 108.327821][ T6284] ? policy_nodemask+0xed/0x4f0 [ 108.327863][ T6284] alloc_pages_mpol+0x1fb/0x550 [ 108.327896][ T6284] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 108.327937][ T6284] folio_alloc_mpol_noprof+0x36/0x340 [ 108.327975][ T6284] vma_alloc_folio_noprof+0xed/0x1d0 [ 108.328008][ T6284] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 108.328049][ T6284] do_anonymous_page+0xb3a/0x1fb0 [ 108.328094][ T6284] __handle_mm_fault+0x1d42/0x2b60 [ 108.328140][ T6284] ? reacquire_held_locks+0xce/0x1e0 [ 108.328178][ T6284] ? __pfx___handle_mm_fault+0x10/0x10 [ 108.328222][ T6284] ? lock_vma_under_rcu+0x17c/0x590 [ 108.328283][ T6284] handle_mm_fault+0x36d/0xa20 [ 108.328329][ T6284] do_user_addr_fault+0x5a3/0x12f0 [ 108.328383][ T6284] exc_page_fault+0x6f/0xd0 [ 108.328418][ T6284] asm_exc_page_fault+0x26/0x30 [ 108.328446][ T6284] RIP: 0033:0x7fb5ffc5df4b [ 108.328470][ T6284] Code: 00 00 00 48 8d 3d 3d a7 1a 00 48 89 c1 31 c0 e8 9b 32 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 71 a7 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 108.328497][ T6284] RSP: 002b:00007fb600d0efa0 EFLAGS: 00010206 [ 108.328520][ T6284] RAX: 0000000000000000 RBX: 00007fb600015fa0 RCX: 0000000000000000 [ 108.328538][ T6284] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000001140 [ 108.328556][ T6284] RBP: 00007fb5ffe32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 108.328573][ T6284] R10: 0000200000001140 R11: 0000000000000000 R12: 0000000000000000 [ 108.328589][ T6284] R13: 00007fb600016038 R14: 00007fb600015fa0 R15: 00007ffe5c76cfd8 [ 108.328629][ T6284] [ 108.409519][ T6284] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 109.173640][ T6291] NFSD: Failed to start, no listeners configured. [ 110.414297][ T6306] NFSD: Failed to start, no listeners configured. [ 110.728781][ T6324] FAULT_INJECTION: forcing a failure. [ 110.728781][ T6324] name failslab, interval 1, probability 0, space 0, times 0 [ 110.756050][ T6324] CPU: 1 UID: 0 PID: 6324 Comm: syz.0.101 Not tainted syzkaller #0 PREEMPT(full) [ 110.756096][ T6324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 110.756105][ T6324] Call Trace: [ 110.756111][ T6324] [ 110.756118][ T6324] dump_stack_lvl+0x100/0x190 [ 110.756147][ T6324] should_fail_ex.cold+0x5/0xa [ 110.756166][ T6324] should_failslab+0xc2/0x120 [ 110.756181][ T6324] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 110.756205][ T6324] ? __alloc_skb+0x140/0x710 [ 110.756225][ T6324] __alloc_skb+0x140/0x710 [ 110.756240][ T6324] ? __alloc_skb+0x5b7/0x710 [ 110.756255][ T6324] ? __pfx___alloc_skb+0x10/0x10 [ 110.756273][ T6324] ? __pfx___register_sysctl_table+0x10/0x10 [ 110.756296][ T6324] ? is_module_address+0x69/0xf0 [ 110.756316][ T6324] inet_netconf_notify_devconf+0x9d/0x170 [ 110.756339][ T6324] __devinet_sysctl_register+0x227/0x360 [ 110.756360][ T6324] ? trace_kmalloc+0x101/0x130 [ 110.756376][ T6324] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 110.756400][ T6324] ? __asan_memcpy+0x3c/0x60 [ 110.756421][ T6324] devinet_init_net+0x334/0x8d0 [ 110.756442][ T6324] ? __pfx_devinet_init_net+0x10/0x10 [ 110.756466][ T6324] ops_init+0x1e2/0x5f0 [ 110.756486][ T6324] setup_net+0x118/0x3a0 [ 110.756505][ T6324] ? __pfx_setup_net+0x10/0x10 [ 110.756522][ T6324] ? lockdep_init_map_type+0x5c/0x250 [ 110.756541][ T6324] ? mutex_init_lockep+0x110/0x150 [ 110.756569][ T6324] copy_net_ns+0x46f/0x7c0 [ 110.756594][ T6324] create_new_namespaces+0x3ea/0xac0 [ 110.756614][ T6324] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 110.756632][ T6324] ksys_unshare+0x473/0xad0 [ 110.756651][ T6324] ? __pfx_ksys_unshare+0x10/0x10 [ 110.756676][ T6324] __x64_sys_unshare+0x31/0x40 [ 110.756693][ T6324] do_syscall_64+0x106/0xf80 [ 110.756710][ T6324] ? clear_bhb_loop+0x40/0x90 [ 110.756728][ T6324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.756743][ T6324] RIP: 0033:0x7fb5ffd9c799 [ 110.756756][ T6324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.756771][ T6324] RSP: 002b:00007fb600d10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 110.756785][ T6324] RAX: ffffffffffffffda RBX: 00007fb600015fa0 RCX: 00007fb5ffd9c799 [ 110.756794][ T6324] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 110.756803][ T6324] RBP: 00007fb5ffe32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 110.756811][ T6324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.756820][ T6324] R13: 00007fb600016038 R14: 00007fb600015fa0 R15: 00007ffe5c76cfd8 [ 110.756840][ T6324] [ 110.756999][ T6319] Zero length message leads to an empty skb [ 111.602736][ T6337] NFSD: Failed to start, no listeners configured. [ 115.431431][ T6343] NFSD: Failed to start, no listeners configured. [ 115.664088][ T6353] NFSD: Failed to start, no listeners configured. [ 115.983012][ T6357] NFSD: Failed to start, no listeners configured. [ 116.364319][ T6367] NFSD: Failed to start, no listeners configured. [ 116.723905][ T6388] NFSD: Failed to start, no listeners configured. [ 117.009015][ T6402] FAULT_INJECTION: forcing a failure. [ 117.009015][ T6402] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 117.062077][ T6402] CPU: 0 UID: 0 PID: 6402 Comm: syz.3.113 Not tainted syzkaller #0 PREEMPT(full) [ 117.062101][ T6402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 117.062118][ T6402] Call Trace: [ 117.062127][ T6402] [ 117.062137][ T6402] dump_stack_lvl+0x100/0x190 [ 117.062197][ T6402] should_fail_ex.cold+0x5/0xa [ 117.062221][ T6402] ? fs_reclaim_acquire+0x70/0x100 [ 117.062256][ T6402] should_fail_alloc_page+0xeb/0x140 [ 117.062286][ T6402] prepare_alloc_pages+0x1f0/0x5f0 [ 117.062316][ T6402] ? bpf_ksym_find+0x124/0x1c0 [ 117.062351][ T6402] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 117.062398][ T6402] ? __lock_acquire+0x4a5/0x2630 [ 117.062432][ T6402] ? arch_stack_walk+0xa6/0xf0 [ 117.062472][ T6402] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 117.062512][ T6402] ? do_raw_spin_lock+0x128/0x260 [ 117.062569][ T6402] ? debug_check_no_obj_freed+0x31f/0x630 [ 117.062612][ T6402] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 117.062656][ T6402] ? policy_nodemask+0xed/0x4f0 [ 117.062686][ T6402] alloc_pages_mpol+0x1fb/0x550 [ 117.062713][ T6402] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 117.062762][ T6402] alloc_pages_noprof+0x131/0x390 [ 117.062794][ T6402] get_free_pages_noprof+0x10/0xb0 [ 117.062821][ T6402] usb_device_dump+0xcf/0x2350 [ 117.062853][ T6402] ? usb_device_read+0x1e9/0x320 [ 117.062882][ T6402] ? idr_get_next_ul+0x196/0x2e0 [ 117.062917][ T6402] ? __pfx___mutex_lock+0x10/0x10 [ 117.062963][ T6402] ? idr_get_next+0xec/0x150 [ 117.062980][ T6402] ? __pfx_idr_get_next+0x10/0x10 [ 117.063000][ T6402] usb_device_read+0x227/0x320 [ 117.063018][ T6402] ? __pfx_usb_device_read+0x10/0x10 [ 117.063032][ T6402] ? __pfx___might_resched+0x10/0x10 [ 117.063052][ T6402] ? lock_acquire+0x1cf/0x380 [ 117.063071][ T6402] ? __debugfs_file_get+0x1fc/0x860 [ 117.063089][ T6402] ? __pfx___debugfs_file_get+0x10/0x10 [ 117.063113][ T6402] full_proxy_read+0x135/0x1a0 [ 117.063130][ T6402] ? __pfx_full_proxy_read+0x10/0x10 [ 117.063148][ T6402] vfs_read+0x1e4/0xb30 [ 117.063173][ T6402] ? __pfx_vfs_read+0x10/0x10 [ 117.063199][ T6402] ? __x64_sys_close_range+0x2d9/0x5d0 [ 117.063222][ T6402] ksys_read+0x12a/0x250 [ 117.063243][ T6402] ? __pfx_ksys_read+0x10/0x10 [ 117.063271][ T6402] do_syscall_64+0x106/0xf80 [ 117.063287][ T6402] ? clear_bhb_loop+0x40/0x90 [ 117.063305][ T6402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.063320][ T6402] RIP: 0033:0x7fd2f2d9c799 [ 117.063345][ T6402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.063360][ T6402] RSP: 002b:00007fd2f0ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 117.063375][ T6402] RAX: ffffffffffffffda RBX: 00007fd2f3015fa0 RCX: 00007fd2f2d9c799 [ 117.063385][ T6402] RDX: 0000000000008080 RSI: 0000000000000000 RDI: 0000000000000003 [ 117.063394][ T6402] RBP: 00007fd2f2e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 117.063403][ T6402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.063412][ T6402] R13: 00007fd2f3016038 R14: 00007fd2f3015fa0 R15: 00007ffd66badf38 [ 117.063433][ T6402] [ 117.635037][ T6397] NFSD: Failed to start, no listeners configured. [ 118.682765][ T6419] FAULT_INJECTION: forcing a failure. [ 118.682765][ T6419] name failslab, interval 1, probability 0, space 0, times 0 [ 118.704177][ T6419] CPU: 1 UID: 0 PID: 6419 Comm: syz.2.119 Not tainted syzkaller #0 PREEMPT(full) [ 118.704213][ T6419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 118.704229][ T6419] Call Trace: [ 118.704238][ T6419] [ 118.704248][ T6419] dump_stack_lvl+0x100/0x190 [ 118.704296][ T6419] should_fail_ex.cold+0x5/0xa [ 118.704325][ T6419] ? sk_prot_alloc+0x10b/0x2a0 [ 118.704361][ T6419] should_failslab+0xc2/0x120 [ 118.704391][ T6419] __kmalloc_noprof+0xe0/0x850 [ 118.704441][ T6419] sk_prot_alloc+0x10b/0x2a0 [ 118.704479][ T6419] sk_alloc+0x36/0xe80 [ 118.704510][ T6419] tap_open+0x2ed/0x1180 [ 118.704557][ T6419] ? __pfx_tap_open+0x10/0x10 [ 118.704597][ T6419] chrdev_open+0x234/0x6a0 [ 118.704627][ T6419] ? __pfx_chrdev_open+0x10/0x10 [ 118.704658][ T6419] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 118.704693][ T6419] do_dentry_open+0x6d8/0x1660 [ 118.704719][ T6419] ? __pfx_chrdev_open+0x10/0x10 [ 118.704756][ T6419] vfs_open+0x82/0x3f0 [ 118.704794][ T6419] path_openat+0x208c/0x31a0 [ 118.704833][ T6419] ? __pfx_path_openat+0x10/0x10 [ 118.704873][ T6419] do_file_open+0x20e/0x430 [ 118.704901][ T6419] ? __pfx_do_file_open+0x10/0x10 [ 118.704955][ T6419] ? alloc_fd+0x476/0x790 [ 118.704994][ T6419] ? do_getname+0x191/0x390 [ 118.705031][ T6419] do_sys_openat2+0x10d/0x1e0 [ 118.705067][ T6419] ? __pfx_do_sys_openat2+0x10/0x10 [ 118.705103][ T6419] ? find_held_lock+0x2b/0x80 [ 118.705127][ T6419] ? __fget_files+0x215/0x3d0 [ 118.705161][ T6419] __x64_sys_openat+0x12d/0x210 [ 118.705197][ T6419] ? __pfx___x64_sys_openat+0x10/0x10 [ 118.705247][ T6419] do_syscall_64+0x106/0xf80 [ 118.705279][ T6419] ? clear_bhb_loop+0x40/0x90 [ 118.705313][ T6419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.705341][ T6419] RIP: 0033:0x7f05ba59c799 [ 118.705364][ T6419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.705389][ T6419] RSP: 002b:00007f05bb484028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 118.705415][ T6419] RAX: ffffffffffffffda RBX: 00007f05ba815fa0 RCX: 00007f05ba59c799 [ 118.705433][ T6419] RDX: 0000000000000801 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 118.705450][ T6419] RBP: 00007f05ba632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 118.705466][ T6419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.705482][ T6419] R13: 00007f05ba816038 R14: 00007f05ba815fa0 R15: 00007ffd90d2df38 [ 118.705518][ T6419] [ 119.856319][ T6457] NFSD: Failed to start, no listeners configured. [ 120.537422][ T6460] NFSD: Failed to start, no listeners configured. [ 120.830412][ T6475] FAULT_INJECTION: forcing a failure. [ 120.830412][ T6475] name failslab, interval 1, probability 0, space 0, times 0 [ 120.867398][ T6475] CPU: 0 UID: 0 PID: 6475 Comm: syz.3.133 Not tainted syzkaller #0 PREEMPT(full) [ 120.867446][ T6475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 120.867462][ T6475] Call Trace: [ 120.867471][ T6475] [ 120.867482][ T6475] dump_stack_lvl+0x100/0x190 [ 120.867531][ T6475] should_fail_ex.cold+0x5/0xa [ 120.867564][ T6475] ? tomoyo_realpath_from_path+0xb6/0x690 [ 120.867596][ T6475] should_failslab+0xc2/0x120 [ 120.867625][ T6475] __kmalloc_noprof+0xe0/0x850 [ 120.867671][ T6475] tomoyo_realpath_from_path+0xb6/0x690 [ 120.867710][ T6475] tomoyo_get_exe+0x63/0xa0 [ 120.867749][ T6475] tomoyo_write_control+0x69e/0x13a0 [ 120.867801][ T6475] ? __pfx_tomoyo_write_control+0x10/0x10 [ 120.867849][ T6475] vfs_write+0x2aa/0x1070 [ 120.867894][ T6475] ? __pfx_tomoyo_write+0x10/0x10 [ 120.867928][ T6475] ? __pfx_vfs_write+0x10/0x10 [ 120.867969][ T6475] ? __fget_files+0x215/0x3d0 [ 120.868004][ T6475] ? __fget_files+0x21f/0x3d0 [ 120.868042][ T6475] ksys_write+0x12a/0x250 [ 120.868067][ T6475] ? __pfx_ksys_write+0x10/0x10 [ 120.868104][ T6475] do_syscall_64+0x106/0xf80 [ 120.868136][ T6475] ? clear_bhb_loop+0x40/0x90 [ 120.868171][ T6475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.868201][ T6475] RIP: 0033:0x7fd2f2d9c799 [ 120.868225][ T6475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.868251][ T6475] RSP: 002b:00007fd2f0ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 120.868275][ T6475] RAX: ffffffffffffffda RBX: 00007fd2f3015fa0 RCX: 00007fd2f2d9c799 [ 120.868291][ T6475] RDX: 0000000001000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 120.868306][ T6475] RBP: 00007fd2f2e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 120.868320][ T6475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.868334][ T6475] R13: 00007fd2f3016038 R14: 00007fd2f3015fa0 R15: 00007ffd66badf38 [ 120.868369][ T6475] [ 120.868381][ T6475] ERROR: Out of memory at tomoyo_realpath_from_path. [ 121.417961][ T6480] zswap: compressor not available [ 130.388111][ T6461] NFSD: Failed to start, no listeners configured. [ 132.942428][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.948936][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.815162][ T5145] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 134.825000][ T5145] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 134.833337][ T5145] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 134.842547][ T5145] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 134.850289][ T5145] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 134.985261][ T6531] chnl_net:caif_netlink_parms(): no params data found [ 135.050804][ T6531] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.057952][ T6531] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.066330][ T6531] bridge_slave_0: entered allmulticast mode [ 135.073475][ T6531] bridge_slave_0: entered promiscuous mode [ 135.081379][ T6531] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.090292][ T6531] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.097638][ T6531] bridge_slave_1: entered allmulticast mode [ 135.105116][ T6531] bridge_slave_1: entered promiscuous mode [ 135.132689][ T6531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.144591][ T6531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.173688][ T6531] team0: Port device team_slave_0 added [ 135.182631][ T6531] team0: Port device team_slave_1 added [ 135.208020][ T6531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.215278][ T6531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.241249][ T6531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.253107][ T6531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.260106][ T6531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.286077][ T6531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.328004][ T6531] hsr_slave_0: entered promiscuous mode [ 135.334393][ T6531] hsr_slave_1: entered promiscuous mode [ 135.340762][ T6531] debugfs: 'hsr0' already exists in 'hsr' [ 135.346491][ T6531] Cannot create hsr debugfs directory [ 135.478017][ T6531] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 135.488567][ T6531] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 135.500556][ T6531] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 135.512829][ T6531] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 135.542771][ T6531] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.550019][ T6531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.557972][ T6531] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.565157][ T6531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.628259][ T6531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.645587][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.654272][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.668437][ T6531] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.682725][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.689893][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.706222][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.713383][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.881205][ T6531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.071793][ T6531] veth0_vlan: entered promiscuous mode [ 136.085193][ T6531] veth1_vlan: entered promiscuous mode [ 136.112546][ T6531] veth0_macvtap: entered promiscuous mode [ 136.123436][ T6531] veth1_macvtap: entered promiscuous mode [ 136.141213][ T6531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.155609][ T6531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.169032][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.179839][ T86] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.188577][ T86] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.202266][ T86] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.268093][ T3549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.281608][ T3549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.311514][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.321472][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.940250][ T51] Bluetooth: hci4: command tx timeout [ 137.494691][ T5145] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 137.510031][ T5145] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 137.518367][ T5145] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 137.527437][ T5145] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 137.536180][ T5145] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 137.841762][ T6564] chnl_net:caif_netlink_parms(): no params data found [ 137.968105][ T6564] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.989659][ T6564] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.996953][ T6564] bridge_slave_0: entered allmulticast mode [ 138.025143][ T6564] bridge_slave_0: entered promiscuous mode [ 138.052809][ T6564] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.079427][ T6564] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.086697][ T6564] bridge_slave_1: entered allmulticast mode [ 138.110376][ T6564] bridge_slave_1: entered promiscuous mode [ 138.178666][ T5145] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 138.199986][ T5145] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 138.208369][ T5145] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 138.233357][ T5145] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 138.252199][ T5145] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 138.318257][ T6564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.331836][ T6564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.401249][ T6564] team0: Port device team_slave_0 added [ 138.424132][ T6564] team0: Port device team_slave_1 added [ 138.508587][ T6564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.529417][ T6564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.573227][ T6564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.595714][ T6564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.603198][ T6564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.629445][ T6564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.790628][ T6564] hsr_slave_0: entered promiscuous mode [ 138.797291][ T6564] hsr_slave_1: entered promiscuous mode [ 138.803984][ T6564] debugfs: 'hsr0' already exists in 'hsr' [ 138.809960][ T6564] Cannot create hsr debugfs directory [ 139.022044][ T5145] Bluetooth: hci4: command tx timeout [ 139.097999][ T6581] chnl_net:caif_netlink_parms(): no params data found [ 139.220571][ T6581] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.227865][ T6581] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.235335][ T6581] bridge_slave_0: entered allmulticast mode [ 139.242701][ T6581] bridge_slave_0: entered promiscuous mode [ 139.251296][ T6581] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.258433][ T6581] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.266227][ T6581] bridge_slave_1: entered allmulticast mode [ 139.274292][ T6581] bridge_slave_1: entered promiscuous mode [ 139.297662][ T6564] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 139.316167][ T6564] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 139.328787][ T6581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.338222][ T6564] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 139.354044][ T6581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.364103][ T6564] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 139.407807][ T6581] team0: Port device team_slave_0 added [ 139.418124][ T6581] team0: Port device team_slave_1 added [ 139.450576][ T6581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.457531][ T6581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.483675][ T6581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.497348][ T6581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.504820][ T6581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.534229][ T6581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.579238][ T5145] Bluetooth: hci5: command tx timeout [ 139.593325][ T6581] hsr_slave_0: entered promiscuous mode [ 139.600230][ T6581] hsr_slave_1: entered promiscuous mode [ 139.606297][ T6581] debugfs: 'hsr0' already exists in 'hsr' [ 139.612325][ T6581] Cannot create hsr debugfs directory [ 139.836134][ T6564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.895593][ T6581] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 139.917167][ T6564] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.925561][ T6581] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 139.945399][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.952557][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.962708][ T6581] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 139.970549][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 139.983363][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 139.992801][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 139.996533][ T6581] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 140.011364][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 140.022233][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 140.074601][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.081829][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.299900][ T51] Bluetooth: hci6: command tx timeout [ 140.510034][ T6622] kvm_intel: kvm [6621]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xfffffffffffffffe [ 140.524453][ T6581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.602059][ T6564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.630075][ T6581] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.646681][ T6605] chnl_net:caif_netlink_parms(): no params data found [ 140.696516][ T86] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.703713][ T86] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.814736][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.821926][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.079374][ T6605] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.086621][ T6605] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.104331][ T6605] bridge_slave_0: entered allmulticast mode [ 141.110588][ T51] Bluetooth: hci4: command tx timeout [ 141.121100][ T6605] bridge_slave_0: entered promiscuous mode [ 141.136729][ T6605] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.143933][ T6605] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.151313][ T6605] bridge_slave_1: entered allmulticast mode [ 141.159040][ T6605] bridge_slave_1: entered promiscuous mode [ 141.237827][ T6605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.272951][ T6605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.362831][ T6605] team0: Port device team_slave_0 added [ 141.391820][ T6605] team0: Port device team_slave_1 added [ 141.414578][ T6564] veth0_vlan: entered promiscuous mode [ 141.515752][ T6564] veth1_vlan: entered promiscuous mode [ 141.523882][ T6605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.539548][ T6605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.572255][ T6605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.603178][ T6605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.611189][ T6605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.640211][ T6605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.660657][ T51] Bluetooth: hci5: command tx timeout [ 141.785012][ T6605] hsr_slave_0: entered promiscuous mode [ 141.793598][ T6605] hsr_slave_1: entered promiscuous mode [ 141.800223][ T6605] debugfs: 'hsr0' already exists in 'hsr' [ 141.805976][ T6605] Cannot create hsr debugfs directory [ 141.815463][ T6564] veth0_macvtap: entered promiscuous mode [ 141.886023][ T6564] veth1_macvtap: entered promiscuous mode [ 141.946822][ T6581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.991884][ T6564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.030414][ T6564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.079239][ T51] Bluetooth: hci7: command tx timeout [ 142.206831][ T58] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.220358][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.267948][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.304616][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.379700][ T51] Bluetooth: hci6: command tx timeout [ 142.488378][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.511228][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.673444][ T6498] NFSD: Failed to start, no listeners configured. [ 142.703415][ T6605] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 142.743953][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.753110][ T6605] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 142.767348][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.781788][ T6605] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 142.856816][ T6605] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 142.991107][ T6581] veth0_vlan: entered promiscuous mode [ 143.043135][ T6581] veth1_vlan: entered promiscuous mode [ 143.160701][ T6514] NFSD: Failed to start, no listeners configured. [ 143.184725][ T51] Bluetooth: hci4: command tx timeout [ 143.677830][ T6526] NFSD: Failed to start, no listeners configured. [ 143.697795][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.739542][ T51] Bluetooth: hci5: command tx timeout [ 143.852627][ T6581] veth0_macvtap: entered promiscuous mode [ 143.924123][ T6581] veth1_macvtap: entered promiscuous mode [ 144.139620][ T51] Bluetooth: hci7: command tx timeout [ 144.169025][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.410702][ T6683] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 144.460791][ T51] Bluetooth: hci6: command tx timeout [ 144.489756][ T6683] FAULT_INJECTION: forcing a failure. [ 144.489756][ T6683] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 144.539292][ T6683] CPU: 0 UID: 0 PID: 6683 Comm: syz.5.167 Not tainted syzkaller #0 PREEMPT(full) [ 144.539331][ T6683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 144.539347][ T6683] Call Trace: [ 144.539357][ T6683] [ 144.539367][ T6683] dump_stack_lvl+0x100/0x190 [ 144.539413][ T6683] should_fail_ex.cold+0x5/0xa [ 144.539441][ T6683] ? prepare_alloc_pages+0x16d/0x5f0 [ 144.539475][ T6683] should_fail_alloc_page+0xeb/0x140 [ 144.539506][ T6683] prepare_alloc_pages+0x1f0/0x5f0 [ 144.539540][ T6683] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 144.539580][ T6683] ? buffer_subbuf_size_write+0x182/0x280 [ 144.539619][ T6683] ? do_writev+0x13e/0x340 [ 144.539653][ T6683] ? do_syscall_64+0x106/0xf80 [ 144.539684][ T6683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.539729][ T6683] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 144.539791][ T6683] ? rcu_is_watching+0x12/0xc0 [ 144.539828][ T6683] ? trace_kmalloc+0x101/0x130 [ 144.539852][ T6683] ? __kasan_kmalloc+0xaa/0xb0 [ 144.539898][ T6683] __alloc_pages_noprof+0xb/0x1b0 [ 144.539936][ T6683] alloc_cpu_data+0x60/0x130 [ 144.539968][ T6683] __rb_allocate_pages+0x6a5/0xf50 [ 144.540011][ T6683] ring_buffer_subbuf_order_set+0x3ef/0x18c0 [ 144.540057][ T6683] ? tracing_stop_tr+0xf6/0x210 [ 144.540094][ T6683] ? __pfx_ring_buffer_subbuf_order_set+0x10/0x10 [ 144.540138][ T6683] buffer_subbuf_size_write+0x182/0x280 [ 144.540181][ T6683] ? __pfx_buffer_subbuf_size_write+0x10/0x10 [ 144.540234][ T6683] ? iov_iter_advance+0xac/0x6d0 [ 144.540281][ T6683] ? __pfx_buffer_subbuf_size_write+0x10/0x10 [ 144.540320][ T6683] vfs_writev+0x5ea/0xe10 [ 144.540357][ T6683] ? rcu_is_watching+0x12/0xc0 [ 144.540407][ T6683] ? __pfx_vfs_writev+0x10/0x10 [ 144.540444][ T6683] ? fdget_pos+0x2aa/0x380 [ 144.540497][ T6683] ? __fget_files+0x21f/0x3d0 [ 144.540528][ T6683] ? do_writev+0x13e/0x340 [ 144.540563][ T6683] do_writev+0x13e/0x340 [ 144.540603][ T6683] ? __pfx_do_writev+0x10/0x10 [ 144.540649][ T6683] do_syscall_64+0x106/0xf80 [ 144.540678][ T6683] ? clear_bhb_loop+0x40/0x90 [ 144.540710][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.540737][ T6683] RIP: 0033:0x7fcb28d9c799 [ 144.540761][ T6683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.540786][ T6683] RSP: 002b:00007fcb29cc0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 144.540812][ T6683] RAX: ffffffffffffffda RBX: 00007fcb29015fa0 RCX: 00007fcb28d9c799 [ 144.540828][ T6683] RDX: 000000000000000a RSI: 0000200000000200 RDI: 0000000000000006 [ 144.540844][ T6683] RBP: 00007fcb28e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 144.540859][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.540873][ T6683] R13: 00007fcb29016038 R14: 00007fcb29015fa0 R15: 00007ffc17aa4688 [ 144.540895][ T6683] [ 144.661602][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.053188][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.167155][ T6581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.187170][ T6605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.220537][ T6581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.290816][ T6605] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.317469][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.324722][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.328911][ T6696] FAULT_INJECTION: forcing a failure. [ 145.328911][ T6696] name failslab, interval 1, probability 0, space 0, times 0 [ 145.373598][ T6696] CPU: 1 UID: 0 PID: 6696 Comm: syz.5.173 Not tainted syzkaller #0 PREEMPT(full) [ 145.373637][ T6696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 145.373654][ T6696] Call Trace: [ 145.373663][ T6696] [ 145.373674][ T6696] dump_stack_lvl+0x100/0x190 [ 145.373722][ T6696] should_fail_ex.cold+0x5/0xa [ 145.373756][ T6696] should_failslab+0xc2/0x120 [ 145.373786][ T6696] __kmalloc_node_noprof+0xe6/0x850 [ 145.373827][ T6696] ? blk_mq_alloc_tag_set+0x477/0x1330 [ 145.373865][ T6696] ? __raw_spin_lock_init+0x3a/0x110 [ 145.373911][ T6696] blk_mq_alloc_tag_set+0x477/0x1330 [ 145.373947][ T6696] ? idr_alloc+0xdd/0x130 [ 145.373979][ T6696] ? __pfx_idr_alloc+0x10/0x10 [ 145.374021][ T6696] loop_add+0x3b7/0xb60 [ 145.374055][ T6696] ? __pfx_loop_add+0x10/0x10 [ 145.374116][ T6696] ? find_held_lock+0x2b/0x80 [ 145.374142][ T6696] ? __fget_files+0x215/0x3d0 [ 145.374173][ T6696] loop_control_ioctl+0xae/0x620 [ 145.374209][ T6696] ? __pfx_loop_control_ioctl+0x10/0x10 [ 145.374245][ T6696] ? __pfx_loop_control_ioctl+0x10/0x10 [ 145.374281][ T6696] __x64_sys_ioctl+0x18e/0x210 [ 145.374323][ T6696] do_syscall_64+0x106/0xf80 [ 145.374355][ T6696] ? clear_bhb_loop+0x40/0x90 [ 145.374386][ T6696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.374415][ T6696] RIP: 0033:0x7fcb28d9c799 [ 145.374438][ T6696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.374464][ T6696] RSP: 002b:00007fcb29cc0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.374491][ T6696] RAX: ffffffffffffffda RBX: 00007fcb29015fa0 RCX: 00007fcb28d9c799 [ 145.374509][ T6696] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 145.374526][ T6696] RBP: 00007fcb28e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 145.374543][ T6696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.374558][ T6696] R13: 00007fcb29016038 R14: 00007fcb29015fa0 R15: 00007ffc17aa4688 [ 145.374590][ T6696] [ 145.396273][ T1142] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.600347][ T1142] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.634609][ T1142] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.646315][ T6698] FAULT_INJECTION: forcing a failure. [ 145.646315][ T6698] name failslab, interval 1, probability 0, space 0, times 0 [ 145.660040][ T1142] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.674473][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.681718][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.691667][ T6698] CPU: 1 UID: 0 PID: 6698 Comm: syz.4.174 Not tainted syzkaller #0 PREEMPT(full) [ 145.691704][ T6698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 145.691721][ T6698] Call Trace: [ 145.691730][ T6698] [ 145.691740][ T6698] dump_stack_lvl+0x100/0x190 [ 145.691787][ T6698] should_fail_ex.cold+0x5/0xa [ 145.691820][ T6698] ? copy_splice_read+0x1a3/0xb90 [ 145.691862][ T6698] should_failslab+0xc2/0x120 [ 145.691891][ T6698] __kmalloc_noprof+0xe0/0x850 [ 145.691939][ T6698] copy_splice_read+0x1a3/0xb90 [ 145.691983][ T6698] ? __pfx_pipe_to_null+0x10/0x10 [ 145.692026][ T6698] ? __pfx_copy_splice_read+0x10/0x10 [ 145.692074][ T6698] ? __pfx_splice_from_pipe+0x10/0x10 [ 145.692111][ T6698] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 145.692156][ T6698] ? __pfx_copy_splice_read+0x10/0x10 [ 145.692199][ T6698] do_splice_read+0x285/0x370 [ 145.692247][ T6698] splice_direct_to_actor+0x2a1/0xa30 [ 145.692277][ T6698] ? __pfx_direct_splice_actor+0x10/0x10 [ 145.692327][ T6698] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 145.692366][ T6698] do_splice_direct+0x174/0x240 [ 145.692394][ T6698] ? __pfx_do_splice_direct+0x10/0x10 [ 145.692423][ T6698] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 145.692469][ T6698] ? bpf_lsm_file_permission+0x9/0x10 [ 145.692510][ T6698] ? security_file_permission+0x76/0x210 [ 145.692541][ T6698] ? rw_verify_area+0xce/0x6d0 [ 145.692593][ T6698] do_sendfile+0xadc/0xe20 [ 145.692643][ T6698] ? __pfx_do_sendfile+0x10/0x10 [ 145.692690][ T6698] ? __x64_sys_futex+0x34f/0x4d0 [ 145.692725][ T6698] ? __x64_sys_futex+0x358/0x4d0 [ 145.692765][ T6698] __x64_sys_sendfile64+0x1d8/0x220 [ 145.692797][ T6698] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 145.692840][ T6698] do_syscall_64+0x106/0xf80 [ 145.692873][ T6698] ? clear_bhb_loop+0x40/0x90 [ 145.692907][ T6698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.692936][ T6698] RIP: 0033:0x7ff48bd9c799 [ 145.692960][ T6698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.692986][ T6698] RSP: 002b:00007ff489ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 145.693012][ T6698] RAX: ffffffffffffffda RBX: 00007ff48c015fa0 RCX: 00007ff48bd9c799 [ 145.693031][ T6698] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 145.693047][ T6698] RBP: 00007ff48be32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 145.693064][ T6698] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 145.693079][ T6698] R13: 00007ff48c016038 R14: 00007ff48c015fa0 R15: 00007fff8d57d738 [ 145.693116][ T6698] [ 145.980786][ T51] Bluetooth: hci5: command tx timeout [ 146.114199][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.122209][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.138583][ T6605] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 146.157340][ T6605] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.220139][ T51] Bluetooth: hci7: command tx timeout [ 146.267418][ T49] bridge_slave_1: left allmulticast mode [ 146.277841][ T49] bridge_slave_1: left promiscuous mode [ 146.318320][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.368430][ T49] bridge_slave_0: left allmulticast mode [ 146.388722][ T49] bridge_slave_0: left promiscuous mode [ 146.396962][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.556732][ T51] Bluetooth: hci6: command tx timeout [ 146.728208][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.742882][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.753408][ T49] bond0 (unregistering): Released all slaves [ 146.786613][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.818496][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.145242][ T6605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.474124][ T49] hsr_slave_0: left promiscuous mode [ 147.529558][ T49] hsr_slave_1: left promiscuous mode [ 147.559752][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.567206][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.614876][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.626479][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.709373][ T6726] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 147.723218][ T49] veth1_macvtap: left promiscuous mode [ 147.739221][ T49] veth0_macvtap: left promiscuous mode [ 147.751144][ T49] veth1_vlan: left promiscuous mode [ 147.756542][ T49] veth0_vlan: left promiscuous mode [ 147.780724][ T6726] File: /dev/nullb0 PID: 6726 Comm: syz.6.149 [ 148.123886][ T6746] input: f¬ as /devices/virtual/input/input5 [ 148.302016][ T51] Bluetooth: hci7: command tx timeout [ 148.479574][ T49] team0 (unregistering): Port device team_slave_1 removed [ 148.530516][ T49] team0 (unregistering): Port device team_slave_0 removed [ 148.871259][ T6754] mkiss: ax0: crc mode is auto. [ 149.241783][ T6605] veth0_vlan: entered promiscuous mode [ 149.267800][ T6605] veth1_vlan: entered promiscuous mode [ 149.418268][ T6605] veth0_macvtap: entered promiscuous mode [ 149.476266][ T6605] veth1_macvtap: entered promiscuous mode [ 149.558280][ T6774] sp0: Synchronizing with TNC [ 149.687396][ T6605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.732269][ T6605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.790025][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.822917][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.996892][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.019607][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.181787][ T6792] FAULT_INJECTION: forcing a failure. [ 150.181787][ T6792] name failslab, interval 1, probability 0, space 0, times 0 [ 150.225074][ T6792] CPU: 0 UID: 0 PID: 6792 Comm: syz.5.194 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.225119][ T6792] Tainted: [L]=SOFTLOCKUP [ 150.225128][ T6792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 150.225144][ T6792] Call Trace: [ 150.225152][ T6792] [ 150.225163][ T6792] dump_stack_lvl+0x100/0x190 [ 150.225211][ T6792] should_fail_ex.cold+0x5/0xa [ 150.225242][ T6792] ? lsm_blob_alloc+0x68/0x90 [ 150.225275][ T6792] should_failslab+0xc2/0x120 [ 150.225305][ T6792] __kmalloc_noprof+0xe0/0x850 [ 150.225345][ T6792] ? trace_kmalloc+0x101/0x130 [ 150.225380][ T6792] lsm_blob_alloc+0x68/0x90 [ 150.225412][ T6792] security_sk_alloc+0x2d/0x290 [ 150.225451][ T6792] sk_prot_alloc+0x12a/0x2a0 [ 150.225490][ T6792] sk_alloc+0x36/0xe80 [ 150.225520][ T6792] pppoe_create+0x32/0x360 [ 150.225547][ T6792] pppox_create+0x15c/0x2c0 [ 150.225588][ T6792] __sock_create+0x339/0x860 [ 150.225629][ T6792] __sys_socket+0x14d/0x260 [ 150.225679][ T6792] ? __pfx___sys_socket+0x10/0x10 [ 150.225728][ T6792] __x64_sys_socket+0x72/0xb0 [ 150.225750][ T6792] ? lockdep_hardirqs_on+0x78/0x100 [ 150.225783][ T6792] do_syscall_64+0x106/0xf80 [ 150.225814][ T6792] ? clear_bhb_loop+0x40/0x90 [ 150.225847][ T6792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.225872][ T6792] RIP: 0033:0x7fcb28d9c799 [ 150.225895][ T6792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.225920][ T6792] RSP: 002b:00007fcb29cc0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 150.225944][ T6792] RAX: ffffffffffffffda RBX: 00007fcb29015fa0 RCX: 00007fcb28d9c799 [ 150.225960][ T6792] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000018 [ 150.225978][ T6792] RBP: 00007fcb28e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 150.225994][ T6792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.226009][ T6792] R13: 00007fcb29016038 R14: 00007fcb29015fa0 R15: 00007ffc17aa4688 [ 150.226046][ T6792] [ 150.512348][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.756552][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.817713][ T6801] FAULT_INJECTION: forcing a failure. [ 150.817713][ T6801] name failslab, interval 1, probability 0, space 0, times 0 [ 150.856805][ T6801] CPU: 0 UID: 0 PID: 6801 Comm: syz.5.197 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.856849][ T6801] Tainted: [L]=SOFTLOCKUP [ 150.856859][ T6801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 150.856872][ T6801] Call Trace: [ 150.856881][ T6801] [ 150.856891][ T6801] dump_stack_lvl+0x100/0x190 [ 150.856937][ T6801] should_fail_ex.cold+0x5/0xa [ 150.856971][ T6801] should_failslab+0xc2/0x120 [ 150.857000][ T6801] __kmalloc_cache_noprof+0x7a/0x6f0 [ 150.857036][ T6801] ? user_buffer_init+0x40f/0x6d0 [ 150.857082][ T6801] user_buffer_init+0x40f/0x6d0 [ 150.857129][ T6801] tracing_mark_open+0x1b7/0x240 [ 150.857175][ T6801] do_dentry_open+0x6d8/0x1660 [ 150.857201][ T6801] ? __pfx_tracing_mark_open+0x10/0x10 [ 150.857260][ T6801] vfs_open+0x82/0x3f0 [ 150.857297][ T6801] path_openat+0x208c/0x31a0 [ 150.857336][ T6801] ? __pfx_path_openat+0x10/0x10 [ 150.857375][ T6801] do_file_open+0x20e/0x430 [ 150.857406][ T6801] ? __pfx_do_file_open+0x10/0x10 [ 150.857463][ T6801] ? alloc_fd+0x476/0x790 [ 150.857492][ T6801] ? do_getname+0x191/0x390 [ 150.857528][ T6801] do_sys_openat2+0x10d/0x1e0 [ 150.857561][ T6801] ? __pfx_do_sys_openat2+0x10/0x10 [ 150.857599][ T6801] ? __fget_files+0x21f/0x3d0 [ 150.857632][ T6801] __x64_sys_openat+0x12d/0x210 [ 150.857668][ T6801] ? __pfx___x64_sys_openat+0x10/0x10 [ 150.857719][ T6801] do_syscall_64+0x106/0xf80 [ 150.857751][ T6801] ? clear_bhb_loop+0x40/0x90 [ 150.857785][ T6801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.857813][ T6801] RIP: 0033:0x7fcb28d9c799 [ 150.857838][ T6801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.857865][ T6801] RSP: 002b:00007fcb29cc0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 150.857890][ T6801] RAX: ffffffffffffffda RBX: 00007fcb29015fa0 RCX: 00007fcb28d9c799 [ 150.857909][ T6801] RDX: 0000000000109c00 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 150.857926][ T6801] RBP: 00007fcb28e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 150.857943][ T6801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.857958][ T6801] R13: 00007fcb29016038 R14: 00007fcb29015fa0 R15: 00007ffc17aa4688 [ 150.857996][ T6801] [ 150.919232][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.100572][ T6804] FAULT_INJECTION: forcing a failure. [ 151.100572][ T6804] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 151.114130][ T6804] CPU: 0 UID: 0 PID: 6804 Comm: syz.4.196 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.114174][ T6804] Tainted: [L]=SOFTLOCKUP [ 151.114184][ T6804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 151.114200][ T6804] Call Trace: [ 151.114209][ T6804] [ 151.114219][ T6804] dump_stack_lvl+0x100/0x190 [ 151.114266][ T6804] should_fail_ex.cold+0x5/0xa [ 151.114292][ T6804] ? prepare_alloc_pages+0x16d/0x5f0 [ 151.114325][ T6804] should_fail_alloc_page+0xeb/0x140 [ 151.114356][ T6804] prepare_alloc_pages+0x1f0/0x5f0 [ 151.114392][ T6804] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 151.114440][ T6804] ? try_to_migrate_one+0x142e/0x37f0 [ 151.114489][ T6804] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 151.114543][ T6804] ? reacquire_held_locks+0xce/0x1e0 [ 151.114578][ T6804] ? folio_lock_anon_vma_read+0x348/0xe30 [ 151.114617][ T6804] ? folio_lock_anon_vma_read+0x348/0xe30 [ 151.114655][ T6804] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 151.114701][ T6804] ? policy_nodemask+0xed/0x4f0 [ 151.114732][ T6804] alloc_pages_mpol+0x1fb/0x550 [ 151.114762][ T6804] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 151.114799][ T6804] folio_alloc_mpol_noprof+0x36/0x340 [ 151.114842][ T6804] alloc_migration_target_by_mpol+0x2c1/0x650 [ 151.114881][ T6804] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 151.114916][ T6804] ? __pfx___might_resched+0x10/0x10 [ 151.114953][ T6804] ? folio_get_anon_vma+0x16b/0x980 [ 151.114993][ T6804] migrate_pages_batch+0x4f2/0x4530 [ 151.115028][ T6804] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 151.115078][ T6804] ? __pfx_migrate_pages_batch+0x10/0x10 [ 151.115109][ T6804] ? irqentry_exit+0x180/0x670 [ 151.115144][ T6804] ? irqentry_exit+0x180/0x670 [ 151.115190][ T6804] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 151.115231][ T6804] migrate_pages_sync+0x12c/0x880 [ 151.115265][ T6804] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 151.115308][ T6804] ? lockdep_hardirqs_on+0x78/0x100 [ 151.115340][ T6804] ? __pfx_migrate_pages_sync+0x10/0x10 [ 151.115389][ T6804] migrate_pages+0x1aae/0x28a0 [ 151.115425][ T6804] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 151.115469][ T6804] ? __pfx_migrate_pages+0x10/0x10 [ 151.115501][ T6804] ? mas_next_slot+0x1003/0x18b0 [ 151.115537][ T6804] ? find_held_lock+0x2b/0x80 [ 151.115564][ T6804] ? do_mbind+0x557/0xfd0 [ 151.115601][ T6804] ? up_write+0x290/0x4f0 [ 151.115641][ T6804] do_mbind+0x5a6/0xfd0 [ 151.115685][ T6804] ? __pfx_do_mbind+0x10/0x10 [ 151.115718][ T6804] ? vfs_write+0x15d/0x1070 [ 151.115760][ T6804] ? __pfx_sock_write_iter+0x10/0x10 [ 151.115814][ T6804] ? __pfx_get_nodes+0x10/0x10 [ 151.115873][ T6804] kernel_mbind+0x1b7/0x200 [ 151.115911][ T6804] ? __pfx_kernel_mbind+0x10/0x10 [ 151.115957][ T6804] do_syscall_64+0x106/0xf80 [ 151.115988][ T6804] ? clear_bhb_loop+0x40/0x90 [ 151.116021][ T6804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.116050][ T6804] RIP: 0033:0x7ff48bd9c799 [ 151.116073][ T6804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.116099][ T6804] RSP: 002b:00007ff489fd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 151.116124][ T6804] RAX: ffffffffffffffda RBX: 00007ff48c016090 RCX: 00007ff48bd9c799 [ 151.116143][ T6804] RDX: 0000002100000000 RSI: 0000000100000008 RDI: 0000000000002000 [ 151.116160][ T6804] RBP: 00007ff48be32bd9 R08: 0000000000000006 R09: 0000000000000002 [ 151.116177][ T6804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.116193][ T6804] R13: 00007ff48c016128 R14: 00007ff48c016090 R15: 00007fff8d57d738 [ 151.116230][ T6804] [ 151.473747][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.670731][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.868402][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.890471][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.073354][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.444755][ T6823] vivid-007: ================= START STATUS ================= [ 152.515194][ T6823] vivid-007: Generate PTS: true [ 152.544820][ T6823] vivid-007: Generate SCR: true [ 152.581163][ T6823] tpg source WxH: 320x240 (Y'CbCr) [ 152.586331][ T6823] tpg field: 1 [ 152.630848][ T6823] tpg crop: (0,0)/320x240 [ 152.647741][ T6823] tpg compose: (0,0)/320x240 [ 152.675636][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.677100][ T6823] tpg colorspace: 8 [ 152.759874][ T6823] tpg transfer function: 0/0 [ 152.764520][ T6823] tpg Y'CbCr encoding: 0/0 [ 152.831871][ T6823] tpg quantization: 0/0 [ 152.836081][ T6823] tpg RGB range: 0/2 [ 152.889987][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.905649][ T6823] vivid-007: ================== END STATUS ================== [ 153.221722][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.461837][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.136761][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.594943][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.662109][ T6880] NFSD: Failed to start, no listeners configured. [ 155.070822][ T6883] sp0: Synchronizing with TNC [ 155.417118][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.801729][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.221701][ T6906] NFSD: Failed to start, no listeners configured. [ 156.435869][ T49] bridge_slave_1: left allmulticast mode [ 156.450865][ T49] bridge_slave_1: left promiscuous mode [ 156.464658][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.525473][ T49] bridge_slave_0: left allmulticast mode [ 156.549942][ T49] bridge_slave_0: left promiscuous mode [ 156.581650][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.684983][ T49] bridge_slave_1: left allmulticast mode [ 156.706186][ T49] bridge_slave_1: left promiscuous mode [ 156.739065][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.802322][ T49] bridge_slave_0: left allmulticast mode [ 156.808009][ T49] bridge_slave_0: left promiscuous mode [ 156.815614][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.885777][ T49] bridge_slave_1: left allmulticast mode [ 156.914429][ T49] bridge_slave_1: left promiscuous mode [ 156.928815][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.009516][ T49] bridge_slave_0: left allmulticast mode [ 157.026825][ T49] bridge_slave_0: left promiscuous mode [ 157.040904][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.548000][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.606077][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.628756][ T49] bond0 (unregistering): Released all slaves [ 157.954989][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.975307][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.993312][ T49] bond0 (unregistering): Released all slaves [ 158.241043][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.275347][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.292065][ T49] bond0 (unregistering): Released all slaves [ 158.931821][ T6943] NFSD: Failed to start, no listeners configured. [ 159.592528][ T6973] ubi0: attaching mtd0 [ 159.622057][ T6973] ubi0: scanning is finished [ 159.626671][ T6973] ubi0: empty MTD device detected [ 160.148668][ T6985] netlink: 12 bytes leftover after parsing attributes in process `syz.7.225'. [ 160.205851][ T6965] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 160.231380][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.7.225'. [ 160.240446][ T6973] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 160.251429][ T6954] NFSD: Failed to start, no listeners configured. [ 160.266736][ T6973] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 160.285620][ T6965] File: /dev/nullb0 PID: 6965 Comm: syz.6.222 [ 160.296314][ T6973] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 160.304056][ T6973] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 160.312750][ T6973] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 160.320185][ T6973] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 160.329288][ T6973] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1777514325 [ 160.373157][ T6973] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 160.399326][ T6987] ubi0: background thread "ubi_bgt0d" started, PID 6987 [ 160.407761][ T6976] ubi0: detaching mtd0 [ 160.419260][ T6976] ubi0: mtd0 is detached [ 160.597401][ T6990] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 161.044942][ T49] hsr_slave_0: left promiscuous mode [ 161.097419][ T49] hsr_slave_1: left promiscuous mode [ 161.137401][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.167224][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.210182][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.259279][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.314372][ T49] hsr_slave_0: left promiscuous mode [ 161.325665][ T49] hsr_slave_1: left promiscuous mode [ 161.350379][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.357982][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.407579][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.431336][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.525261][ T49] hsr_slave_0: left promiscuous mode [ 161.584509][ T49] hsr_slave_1: left promiscuous mode [ 161.605094][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.624288][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.646213][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.668361][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.816353][ T49] veth1_macvtap: left promiscuous mode [ 161.834567][ T49] veth0_macvtap: left promiscuous mode [ 161.849629][ T49] veth1_vlan: left promiscuous mode [ 161.860576][ T49] veth0_vlan: left promiscuous mode [ 162.005317][ T7023] NFSD: Failed to start, no listeners configured. [ 162.017266][ T49] veth1_macvtap: left promiscuous mode [ 162.036838][ T49] veth0_macvtap: left promiscuous mode [ 162.048986][ T49] veth1_vlan: left promiscuous mode [ 162.077858][ T49] veth0_vlan: left promiscuous mode [ 162.172190][ T49] veth1_macvtap: left promiscuous mode [ 162.187295][ T49] veth0_macvtap: left promiscuous mode [ 162.207874][ T49] veth1_vlan: left promiscuous mode [ 162.234164][ T49] veth0_vlan: left promiscuous mode [ 162.594569][ T7034] NFSD: Failed to start, no listeners configured. [ 163.304469][ T49] team0 (unregistering): Port device team_slave_1 removed [ 163.349826][ T49] team0 (unregistering): Port device team_slave_0 removed [ 163.992190][ T49] team0 (unregistering): Port device team_slave_1 removed [ 164.024114][ T49] team0 (unregistering): Port device team_slave_0 removed [ 164.547719][ T7048] sd 0:0:1:0: device reset [ 164.680380][ T49] team0 (unregistering): Port device team_slave_1 removed [ 164.717110][ T49] team0 (unregistering): Port device team_slave_0 removed [ 165.285193][ T7055] FAULT_INJECTION: forcing a failure. [ 165.285193][ T7055] name failslab, interval 1, probability 0, space 0, times 0 [ 165.319251][ T7055] CPU: 1 UID: 0 PID: 7055 Comm: syz.5.237 Tainted: G L syzkaller #0 PREEMPT(full) [ 165.319295][ T7055] Tainted: [L]=SOFTLOCKUP [ 165.319307][ T7055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 165.319324][ T7055] Call Trace: [ 165.319333][ T7055] [ 165.319345][ T7055] dump_stack_lvl+0x100/0x190 [ 165.319392][ T7055] should_fail_ex.cold+0x5/0xa [ 165.319424][ T7055] should_failslab+0xc2/0x120 [ 165.319450][ T7055] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 165.319488][ T7055] ? __kernfs_new_node+0xd2/0x960 [ 165.319530][ T7055] __kernfs_new_node+0xd2/0x960 [ 165.319566][ T7055] ? __pfx___kernfs_new_node+0x10/0x10 [ 165.319593][ T7055] ? find_held_lock+0x2b/0x80 [ 165.319606][ T7055] ? kernfs_root+0xee/0x2a0 [ 165.319625][ T7055] ? kernfs_root+0xee/0x2a0 [ 165.319649][ T7055] kernfs_new_node+0x11b/0x1a0 [ 165.319674][ T7055] kernfs_create_link+0xcc/0x240 [ 165.319692][ T7055] sysfs_do_create_link_sd+0x90/0x140 [ 165.319714][ T7055] sysfs_create_link+0x61/0xc0 [ 165.319733][ T7055] device_add+0x553/0x1950 [ 165.319749][ T7055] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 165.319773][ T7055] ? __pfx_device_add+0x10/0x10 [ 165.319788][ T7055] ? lockdep_init_map_type+0x5c/0x250 [ 165.319808][ T7055] ? __init_waitqueue_head+0xca/0x150 [ 165.319833][ T7055] netdev_register_kobject+0x1a9/0x3d0 [ 165.319858][ T7055] register_netdevice+0x12e0/0x2210 [ 165.319881][ T7055] ? __pfx_register_netdevice+0x10/0x10 [ 165.319906][ T7055] internal_dev_create+0x2d3/0x520 [ 165.319927][ T7055] ovs_vport_add+0x147/0x4d0 [ 165.319945][ T7055] new_vport+0x16/0x1d0 [ 165.319968][ T7055] ovs_dp_cmd_new+0x65d/0xdf0 [ 165.319987][ T7055] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 165.320006][ T7055] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 165.320028][ T7055] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 165.320054][ T7055] genl_family_rcv_msg_doit+0x214/0x300 [ 165.320087][ T7055] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 165.320110][ T7055] ? genl_get_cmd+0x3ef/0x720 [ 165.320136][ T7055] ? bpf_lsm_capable+0x9/0x10 [ 165.320152][ T7055] ? security_capable+0x80/0x260 [ 165.320173][ T7055] ? ns_capable+0xd2/0xf0 [ 165.320189][ T7055] genl_rcv_msg+0x560/0x800 [ 165.320212][ T7055] ? __pfx_genl_rcv_msg+0x10/0x10 [ 165.320234][ T7055] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 165.320255][ T7055] netlink_rcv_skb+0x159/0x420 [ 165.320274][ T7055] ? __pfx_genl_rcv_msg+0x10/0x10 [ 165.320297][ T7055] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 165.320325][ T7055] ? netlink_deliver_tap+0x1ae/0xcc0 [ 165.320346][ T7055] genl_rcv+0x28/0x40 [ 165.320365][ T7055] netlink_unicast+0x5aa/0x870 [ 165.320387][ T7055] ? __pfx_netlink_unicast+0x10/0x10 [ 165.320414][ T7055] netlink_sendmsg+0x8b0/0xda0 [ 165.320437][ T7055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.320455][ T7055] ? __import_iovec+0x1d2/0x640 [ 165.320472][ T7055] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 165.320496][ T7055] ____sys_sendmsg+0x9e1/0xb70 [ 165.320517][ T7055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.320537][ T7055] ? __pfx_____sys_sendmsg+0x10/0x10 [ 165.320563][ T7055] ? __pfx_futex_wake_mark+0x10/0x10 [ 165.320588][ T7055] ___sys_sendmsg+0x190/0x1e0 [ 165.320612][ T7055] ? __pfx____sys_sendmsg+0x10/0x10 [ 165.320658][ T7055] __sys_sendmsg+0x170/0x220 [ 165.320677][ T7055] ? __pfx___sys_sendmsg+0x10/0x10 [ 165.320694][ T7055] ? __x64_sys_futex+0x34f/0x4d0 [ 165.320724][ T7055] do_syscall_64+0x106/0xf80 [ 165.320741][ T7055] ? clear_bhb_loop+0x40/0x90 [ 165.320760][ T7055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.320775][ T7055] RIP: 0033:0x7fcb28d9c799 [ 165.320789][ T7055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.320803][ T7055] RSP: 002b:00007fcb29cc0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.320818][ T7055] RAX: ffffffffffffffda RBX: 00007fcb29015fa0 RCX: 00007fcb28d9c799 [ 165.320828][ T7055] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000007 [ 165.320838][ T7055] RBP: 00007fcb28e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 165.320847][ T7055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.320856][ T7055] R13: 00007fcb29016038 R14: 00007fcb29015fa0 R15: 00007ffc17aa4688 [ 165.320877][ T7055] [ 166.817005][ T7073] NFSD: Failed to start, no listeners configured. [ 167.726856][ T7081] NFSD: Failed to start, no listeners configured. [ 169.325783][ T7123] FAULT_INJECTION: forcing a failure. [ 169.325783][ T7123] name failslab, interval 1, probability 0, space 0, times 0 [ 169.370058][ T7123] CPU: 0 UID: 0 PID: 7123 Comm: syz.7.248 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.370104][ T7123] Tainted: [L]=SOFTLOCKUP [ 169.370114][ T7123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 169.370130][ T7123] Call Trace: [ 169.370139][ T7123] [ 169.370149][ T7123] dump_stack_lvl+0x100/0x190 [ 169.370197][ T7123] should_fail_ex.cold+0x5/0xa [ 169.370231][ T7123] should_failslab+0xc2/0x120 [ 169.370260][ T7123] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 169.370304][ T7123] ? cache_create_net+0x2b/0x1f0 [ 169.370342][ T7123] ? __pfx_nfsd_net_init+0x10/0x10 [ 169.370383][ T7123] kmemdup_noprof+0x29/0x60 [ 169.370426][ T7123] cache_create_net+0x2b/0x1f0 [ 169.370460][ T7123] ? __pfx_nfsd_net_init+0x10/0x10 [ 169.370502][ T7123] nfsd_export_init+0x62/0x250 [ 169.370546][ T7123] ? __pfx_nfsd_net_init+0x10/0x10 [ 169.370587][ T7123] nfsd_net_init+0x33/0x3d0 [ 169.370629][ T7123] ? __pfx_nfsd_net_init+0x10/0x10 [ 169.370670][ T7123] ops_init+0x1e2/0x5f0 [ 169.370709][ T7123] setup_net+0x118/0x3a0 [ 169.370745][ T7123] ? __pfx_setup_net+0x10/0x10 [ 169.370777][ T7123] ? lockdep_init_map_type+0x5c/0x250 [ 169.370814][ T7123] ? mutex_init_lockep+0x110/0x150 [ 169.370865][ T7123] copy_net_ns+0x46f/0x7c0 [ 169.370908][ T7123] create_new_namespaces+0x3ea/0xac0 [ 169.370947][ T7123] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 169.370980][ T7123] ksys_unshare+0x473/0xad0 [ 169.371017][ T7123] ? __pfx_ksys_unshare+0x10/0x10 [ 169.371066][ T7123] __x64_sys_unshare+0x31/0x40 [ 169.371103][ T7123] do_syscall_64+0x106/0xf80 [ 169.371134][ T7123] ? clear_bhb_loop+0x40/0x90 [ 169.371169][ T7123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.371197][ T7123] RIP: 0033:0x7f9372d9c799 [ 169.371221][ T7123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.371248][ T7123] RSP: 002b:00007f9370ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 169.371275][ T7123] RAX: ffffffffffffffda RBX: 00007f9373015fa0 RCX: 00007f9372d9c799 [ 169.371294][ T7123] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 169.371312][ T7123] RBP: 00007f9372e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 169.371329][ T7123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.371345][ T7123] R13: 00007f9373016038 R14: 00007f9373015fa0 R15: 00007ffe588b74e8 [ 169.371383][ T7123] [ 170.239457][ T7137] NFSD: Failed to start, no listeners configured. [ 170.599551][ T7151] netlink: 12 bytes leftover after parsing attributes in process `syz.7.253'. [ 170.629540][ T7151] unsupported nlmsg_type 40 [ 171.317978][ T7160] NFSD: Failed to start, no listeners configured. [ 171.584243][ T51] Bluetooth: hci4: ACL packet too small [ 173.052248][ T7214] NFSD: Failed to start, no listeners configured. [ 173.443340][ T7225] netlink: 342 bytes leftover after parsing attributes in process `syz.5.262'. [ 174.093892][ T7238] NFSD: Failed to start, no listeners configured. [ 174.509559][ T7234] smpboot: CPU 1 is now offline [ 174.718968][ T7250] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 174.751763][ T19] ------------[ cut here ]------------ [ 174.752743][ T19] [ 174.752750][ T19] ====================================================== [ 174.752754][ T19] WARNING: possible circular locking dependency detected [ 174.752762][ T19] syzkaller #0 Tainted: G L [ 174.752769][ T19] ------------------------------------------------------ [ 174.752774][ T19] migration/0/19 is trying to acquire lock: [ 174.752781][ T19] ffffffff8e6f53c0 (console_owner){-...}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 174.752825][ T19] [ 174.752825][ T19] but task is already holding lock: [ 174.752830][ T19] ffff8880b843b2e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 174.752860][ T19] [ 174.752860][ T19] which lock already depends on the new lock. [ 174.752860][ T19] [ 174.752864][ T19] [ 174.752864][ T19] the existing dependency chain (in reverse order) is: [ 174.752868][ T19] [ 174.752868][ T19] -> #5 (&rq->__lock){-.-.}-{2:2}: [ 174.752888][ T19] _raw_spin_lock_nested+0x31/0x40 [ 174.752902][ T19] raw_spin_rq_lock_nested+0x2c/0x140 [ 174.752914][ T19] _task_rq_lock+0xcf/0x490 [ 174.752975][ T19] cgroup_move_task+0x81/0x2b0 [ 174.752988][ T19] css_set_move_task+0x285/0x600 [ 174.753000][ T19] cgroup_post_fork+0x202/0x9b0 [ 174.753012][ T19] copy_process+0x5f26/0x7a10 [ 174.753026][ T19] kernel_clone+0xfc/0x9a0 [ 174.753039][ T19] user_mode_thread+0xcc/0x110 [ 174.753053][ T19] rest_init+0x21/0x260 [ 174.753073][ T19] start_kernel+0x47f/0x480 [ 174.753091][ T19] x86_64_start_reservations+0x24/0x30 [ 174.753112][ T19] x86_64_start_kernel+0x12b/0x130 [ 174.753130][ T19] common_startup_64+0x13e/0x148 [ 174.753143][ T19] [ 174.753143][ T19] -> #4 (&p->pi_lock){-.-.}-{2:2}: [ 174.753160][ T19] _raw_spin_lock_irqsave+0x3a/0x60 [ 174.753173][ T19] try_to_wake_up+0xb2/0x1a80 [ 174.753184][ T19] create_worker+0x33a/0x740 [ 174.753200][ T19] workqueue_init+0x768/0x930 [ 174.753214][ T19] kernel_init_freeable+0x3d4/0x7a0 [ 174.753234][ T19] kernel_init+0x1f/0x1e0 [ 174.753251][ T19] ret_from_fork+0x754/0xd80 [ 174.753269][ T19] ret_from_fork_asm+0x1a/0x30 [ 174.753283][ T19] [ 174.753283][ T19] -> #3 (&pool->lock){-.-.}-{2:2}: [ 174.753299][ T19] _raw_spin_lock+0x2e/0x40 [ 174.753310][ T19] __queue_work+0x270/0x1150 [ 174.753328][ T19] queue_work_on+0x1a9/0x1e0 [ 174.753344][ T19] rpm_suspend+0xee1/0x11c0 [ 174.753361][ T19] rpm_idle+0x637/0x7c0 [ 174.753377][ T19] __pm_runtime_idle+0xba/0x1a0 [ 174.753393][ T19] __device_attach+0x37e/0x4d0 [ 174.753411][ T19] device_initial_probe+0xaf/0xd0 [ 174.753431][ T19] bus_probe_device+0x64/0x160 [ 174.753446][ T19] device_add+0x11d9/0x1950 [ 174.753456][ T19] serial_base_port_add+0x227/0x2b0 [ 174.753474][ T19] serial_core_register_port+0x13c/0x17a0 [ 174.753494][ T19] serial8250_register_8250_port+0x155a/0x2260 [ 174.753507][ T19] serial_pnp_probe+0x436/0x930 [ 174.753519][ T19] pnp_device_probe+0x2b3/0x4a0 [ 174.753536][ T19] really_probe+0x241/0xa60 [ 174.753552][ T19] __driver_probe_device+0x1de/0x400 [ 174.753569][ T19] driver_probe_device+0x4c/0x1b0 [ 174.753586][ T19] __driver_attach+0x2f4/0x6a0 [ 174.753603][ T19] bus_for_each_dev+0x13e/0x1d0 [ 174.753618][ T19] bus_add_driver+0x305/0x5b0 [ 174.753638][ T19] driver_register+0x1e2/0x360 [ 174.753656][ T19] serial8250_init+0xcc/0x1b0 [ 174.753669][ T19] do_one_initcall+0x11d/0x760 [ 174.753681][ T19] kernel_init_freeable+0x6e5/0x7a0 [ 174.753698][ T19] kernel_init+0x1f/0x1e0 [ 174.753715][ T19] ret_from_fork+0x754/0xd80 [ 174.753732][ T19] ret_from_fork_asm+0x1a/0x30 [ 174.753744][ T19] [ 174.753744][ T19] -> #2 (&dev->power.lock){-.-.}-{3:3}: [ 174.753761][ T19] _raw_spin_lock_irqsave+0x3a/0x60 [ 174.753773][ T19] __pm_runtime_resume+0xa9/0x170 [ 174.753790][ T19] __uart_start+0x1b0/0x510 [ 174.753802][ T19] uart_write+0x211/0xb20 [ 174.753816][ T19] n_tty_write+0x44f/0x12d0 [ 174.753835][ T19] file_tty_write.isra.0+0x4d2/0x890 [ 174.753849][ T19] redirected_tty_write+0xd4/0x120 [ 174.753864][ T19] vfs_write+0x6ac/0x1070 [ 174.753883][ T19] ksys_write+0x12a/0x250 [ 174.753893][ T19] do_syscall_64+0x106/0xf80 [ 174.753907][ T19] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.753920][ T19] [ 174.753920][ T19] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 174.753941][ T19] _raw_spin_lock_irqsave+0x3a/0x60 [ 174.753954][ T19] serial8250_console_write+0x17e/0x1900 [ 174.753973][ T19] console_flush_one_record+0x790/0xe50 [ 174.753991][ T19] console_unlock+0x103/0x260 [ 174.754010][ T19] vprintk_emit+0x407/0x6b0 [ 174.754020][ T19] _printk+0xcf/0x110 [ 174.754031][ T19] register_console.cold+0xc0/0x248 [ 174.754044][ T19] univ8250_console_init+0x6f/0x80 [ 174.754057][ T19] console_init+0x423/0x620 [ 174.754069][ T19] start_kernel+0x305/0x480 [ 174.754084][ T19] x86_64_start_reservations+0x24/0x30 [ 174.754102][ T19] x86_64_start_kernel+0x12b/0x130 [ 174.754119][ T19] common_startup_64+0x13e/0x148 [ 174.754131][ T19] [ 174.754131][ T19] -> #0 (console_owner){-...}-{0:0}: [ 174.754147][ T19] __lock_acquire+0x14b8/0x2630 [ 174.754162][ T19] lock_acquire+0x1cf/0x380 [ 174.754176][ T19] console_lock_spinning_enable+0x72/0x80 [ 174.754195][ T19] console_flush_one_record+0x739/0xe50 [ 174.754214][ T19] console_unlock+0x103/0x260 [ 174.754232][ T19] vprintk_emit+0x407/0x6b0 [ 174.754242][ T19] _printk+0xcf/0x110 [ 174.754252][ T19] __report_bug.cold+0x15/0x137 [ 174.754269][ T19] report_bug+0xb2/0x220 [ 174.754282][ T19] handle_bug+0x16a/0x2a0 [ 174.754298][ T19] exc_invalid_op+0x17/0x50 [ 174.754314][ T19] asm_exc_invalid_op+0x1a/0x20 [ 174.754326][ T19] update_rq_clock+0x40a/0xd20 [ 174.754338][ T19] __schedule+0x1b7d/0x6120 [ 174.754350][ T19] schedule+0xdd/0x390 [ 174.754362][ T19] smpboot_thread_fn+0x893/0xaa0 [ 174.754376][ T19] kthread+0x370/0x450 [ 174.754391][ T19] ret_from_fork+0x754/0xd80 [ 174.754408][ T19] ret_from_fork_asm+0x1a/0x30 [ 174.754421][ T19] [ 174.754421][ T19] other info that might help us debug this: [ 174.754421][ T19] [ 174.754425][ T19] Chain exists of: [ 174.754425][ T19] console_owner --> &p->pi_lock --> &rq->__lock [ 174.754425][ T19] [ 174.754445][ T19] Possible unsafe locking scenario: [ 174.754445][ T19] [ 174.754449][ T19] CPU0 CPU1 [ 174.754453][ T19] ---- ---- [ 174.754456][ T19] lock(&rq->__lock); [ 174.754463][ T19] lock(&p->pi_lock); [ 174.754472][ T19] lock(&rq->__lock); [ 174.754480][ T19] lock(console_owner); [ 174.754488][ T19] [ 174.754488][ T19] *** DEADLOCK *** [ 174.754488][ T19] [ 174.754490][ T19] 3 locks held by migration/0/19: [ 174.754498][ T19] #0: ffff8880b843b2e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 174.754527][ T19] #1: ffffffff8e7d5800 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 [ 174.754556][ T19] #2: ffffffff8e7d5878 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xe50 [ 174.754593][ T19] [ 174.754593][ T19] stack backtrace: [ 174.754602][ T19] CPU: 0 UID: 0 PID: 19 Comm: migration/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 174.754621][ T19] Tainted: [L]=SOFTLOCKUP [ 174.754625][ T19] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 174.754634][ T19] Stopper: 0x0 <- 0x0 [ 174.754646][ T19] Call Trace: [ 174.754650][ T19] [ 174.754656][ T19] dump_stack_lvl+0x100/0x190 [ 174.754679][ T19] print_circular_bug.cold+0x178/0x1c7 [ 174.754701][ T19] check_noncircular+0x146/0x160 [ 174.754718][ T19] __lock_acquire+0x14b8/0x2630 [ 174.754737][ T19] lock_acquire+0x1cf/0x380 [ 174.754752][ T19] ? console_lock_spinning_enable+0x61/0x80 [ 174.754773][ T19] ? console_lock_spinning_enable+0x4a/0x80 [ 174.754794][ T19] console_lock_spinning_enable+0x72/0x80 [ 174.754814][ T19] ? console_lock_spinning_enable+0x61/0x80 [ 174.754833][ T19] console_flush_one_record+0x739/0xe50 [ 174.754855][ T19] ? __pfx_console_flush_one_record+0x10/0x10 [ 174.754878][ T19] ? is_printk_cpu_sync_owner+0x32/0x40 [ 174.754893][ T19] console_unlock+0x103/0x260 [ 174.754912][ T19] ? __pfx_console_unlock+0x10/0x10 [ 174.754937][ T19] ? do_raw_spin_unlock+0x145/0x1e0 [ 174.754957][ T19] ? _printk+0xcf/0x110 [ 174.754970][ T19] vprintk_emit+0x407/0x6b0 [ 174.754982][ T19] ? __pfx_vprintk_emit+0x10/0x10 [ 174.755002][ T19] ? rcu_is_watching+0x12/0xc0 [ 174.755022][ T19] ? kvm_sched_clock_read+0x11/0x20 [ 174.755038][ T19] _printk+0xcf/0x110 [ 174.755050][ T19] ? __pfx__printk+0x10/0x10 [ 174.755062][ T19] ? __update_load_avg_se+0x5c7/0xe80 [ 174.755078][ T19] ? update_cfs_rq_load_avg+0x51/0x550 [ 174.755093][ T19] ? __report_bug.cold+0x5/0x137 [ 174.755110][ T19] ? __report_bug+0x377/0x3d0 [ 174.755124][ T19] __report_bug.cold+0x15/0x137 [ 174.755141][ T19] ? update_rq_clock+0x40a/0xd20 [ 174.755155][ T19] ? __pfx___report_bug+0x10/0x10 [ 174.755169][ T19] ? set_next_task_fair+0x219/0x370 [ 174.755192][ T19] ? update_rq_clock+0x40a/0xd20 [ 174.755205][ T19] report_bug+0xb2/0x220 [ 174.755218][ T19] ? update_rq_clock+0x40a/0xd20 [ 174.755232][ T19] handle_bug+0x16a/0x2a0 [ 174.755249][ T19] exc_invalid_op+0x17/0x50 [ 174.755266][ T19] asm_exc_invalid_op+0x1a/0x20 [ 174.755279][ T19] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 174.755294][ T19] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 40 0b 00 00 48 b8 00 00 00 00 00 [ 174.755307][ T19] RSP: 0000:ffffc90000187c28 EFLAGS: 00010046 [ 174.755318][ T19] RAX: 0000000000000000 RBX: ffff8880b853b280 RCX: 0000000000000001 [ 174.755327][ T19] RDX: 0000000000000046 RSI: ffffffff8de57572 RDI: ffffffff8c1af7a0 [ 174.755335][ T19] RBP: ffffc90000187dd0 R08: 0000000000000001 R09: 0000000000000001 [ 174.755344][ T19] R10: ffff8880267d7007 R11: 0000000000000000 R12: ffffffff90d9fee4 [ 174.755352][ T19] R13: ffff8880b853c0c0 R14: ffff88805a5dbd00 R15: ffff8880b853b280 [ 174.755365][ T19] ? update_rq_clock+0x9c/0xd20 [ 174.755378][ T19] ? pick_task_fair+0x85/0x350 [ 174.755391][ T19] __schedule+0x1b7d/0x6120 [ 174.755404][ T19] ? __lock_acquire+0x4a5/0x2630 [ 174.755424][ T19] ? __pfx___schedule+0x10/0x10 [ 174.755440][ T19] ? find_held_lock+0x2b/0x80 [ 174.755452][ T19] ? schedule+0x2bf/0x390 [ 174.755466][ T19] schedule+0xdd/0x390 [ 174.755479][ T19] smpboot_thread_fn+0x893/0xaa0 [ 174.755496][ T19] ? kthread+0x13a/0x450 [ 174.755511][ T19] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 174.755526][ T19] kthread+0x370/0x450 [ 174.755542][ T19] ? __pfx_kthread+0x10/0x10 [ 174.755559][ T19] ret_from_fork+0x754/0xd80 [ 174.755578][ T19] ? __pfx_ret_from_fork+0x10/0x10 [ 174.755598][ T19] ? __switch_to+0x7b4/0x1120 [ 174.755613][ T19] ? __pfx_kthread+0x10/0x10 [ 174.755630][ T19] ret_from_fork_asm+0x1a/0x30 [ 174.755647][ T19] [ 175.860616][ T19] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 175.860627][ T19] WARNING: kernel/sched/sched.h:1600 at update_rq_clock+0x40a/0xd20, CPU#0: migration/0/19 [ 175.878373][ T19] Modules linked in: [ 175.882264][ T19] CPU: 0 UID: 0 PID: 19 Comm: migration/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.893007][ T19] Tainted: [L]=SOFTLOCKUP [ 175.897307][ T19] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 175.907346][ T19] Stopper: 0x0 <- 0x0 [ 175.911313][ T19] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 175.916855][ T19] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 40 0b 00 00 48 b8 00 00 00 00 00 [ 175.936463][ T19] RSP: 0000:ffffc90000187c28 EFLAGS: 00010046 [ 175.942542][ T19] RAX: 0000000000000000 RBX: ffff8880b853b280 RCX: 0000000000000001 [ 175.950507][ T19] RDX: 0000000000000046 RSI: ffffffff8de57572 RDI: ffffffff8c1af7a0 [ 175.958464][ T19] RBP: ffffc90000187dd0 R08: 0000000000000001 R09: 0000000000000001 [ 175.966421][ T19] R10: ffff8880267d7007 R11: 0000000000000000 R12: ffffffff90d9fee4 [ 175.974394][ T19] R13: ffff8880b853c0c0 R14: ffff88805a5dbd00 R15: ffff8880b853b280 [ 175.982348][ T19] FS: 0000000000000000(0000) GS:ffff88812434d000(0000) knlGS:0000000000000000 [ 175.991260][ T19] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 175.997831][ T19] CR2: 00007f12eb099286 CR3: 000000003334a000 CR4: 00000000003526f0 [ 176.005792][ T19] Call Trace: [ 176.009070][ T19] [ 176.011981][ T19] ? pick_task_fair+0x85/0x350 [ 176.016739][ T19] __schedule+0x1b7d/0x6120 [ 176.021225][ T19] ? __lock_acquire+0x4a5/0x2630 [ 176.026151][ T19] ? __pfx___schedule+0x10/0x10 [ 176.030983][ T19] ? find_held_lock+0x2b/0x80 [ 176.035638][ T19] ? schedule+0x2bf/0x390 [ 176.039950][ T19] schedule+0xdd/0x390 [ 176.044087][ T19] smpboot_thread_fn+0x893/0xaa0 [ 176.049008][ T19] ? kthread+0x13a/0x450 [ 176.053246][ T19] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 176.058712][ T19] kthread+0x370/0x450 [ 176.062765][ T19] ? __pfx_kthread+0x10/0x10 [ 176.067339][ T19] ret_from_fork+0x754/0xd80 [ 176.071917][ T19] ? __pfx_ret_from_fork+0x10/0x10 [ 176.077025][ T19] ? __switch_to+0x7b4/0x1120 [ 176.081685][ T19] ? __pfx_kthread+0x10/0x10 [ 176.086345][ T19] ret_from_fork_asm+0x1a/0x30 [ 176.091117][ T19] [ 176.094119][ T19] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 176.101381][ T19] CPU: 0 UID: 0 PID: 19 Comm: migration/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.112122][ T19] Tainted: [L]=SOFTLOCKUP [ 176.116440][ T19] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 176.126473][ T19] Stopper: 0x0 <- 0x0 [ 176.130433][ T19] Call Trace: [ 176.133695][ T19] [ 176.136607][ T19] dump_stack_lvl+0x100/0x190 [ 176.141271][ T19] vpanic+0x552/0x970 [ 176.145233][ T19] ? __pfx_vpanic+0x10/0x10 [ 176.149716][ T19] ? lock_release+0x263/0x320 [ 176.154395][ T19] panic+0xd1/0xe0 [ 176.158100][ T19] ? __pfx_panic+0x10/0x10 [ 176.162496][ T19] ? check_panic_on_warn+0x1f/0x90 [ 176.167593][ T19] check_panic_on_warn.cold+0x19/0x34 [ 176.172958][ T19] ? update_rq_clock+0x40a/0xd20 [ 176.177878][ T19] __warn.cold+0x191/0x348 [ 176.182283][ T19] __report_bug+0x296/0x3d0 [ 176.186769][ T19] ? update_rq_clock+0x40a/0xd20 [ 176.191690][ T19] ? __pfx___report_bug+0x10/0x10 [ 176.196697][ T19] ? set_next_task_fair+0x219/0x370 [ 176.201888][ T19] ? update_rq_clock+0x40a/0xd20 [ 176.206809][ T19] report_bug+0xb2/0x220 [ 176.211032][ T19] ? update_rq_clock+0x40a/0xd20 [ 176.215949][ T19] handle_bug+0x16a/0x2a0 [ 176.220280][ T19] exc_invalid_op+0x17/0x50 [ 176.224768][ T19] asm_exc_invalid_op+0x1a/0x20 [ 176.229602][ T19] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 176.235130][ T19] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 40 0b 00 00 48 b8 00 00 00 00 00 [ 176.254817][ T19] RSP: 0000:ffffc90000187c28 EFLAGS: 00010046 [ 176.260875][ T19] RAX: 0000000000000000 RBX: ffff8880b853b280 RCX: 0000000000000001 [ 176.268831][ T19] RDX: 0000000000000046 RSI: ffffffff8de57572 RDI: ffffffff8c1af7a0 [ 176.276783][ T19] RBP: ffffc90000187dd0 R08: 0000000000000001 R09: 0000000000000001 [ 176.284751][ T19] R10: ffff8880267d7007 R11: 0000000000000000 R12: ffffffff90d9fee4 [ 176.292704][ T19] R13: ffff8880b853c0c0 R14: ffff88805a5dbd00 R15: ffff8880b853b280 [ 176.300664][ T19] ? update_rq_clock+0x9c/0xd20 [ 176.305501][ T19] ? pick_task_fair+0x85/0x350 [ 176.310246][ T19] __schedule+0x1b7d/0x6120 [ 176.314733][ T19] ? __lock_acquire+0x4a5/0x2630 [ 176.319657][ T19] ? __pfx___schedule+0x10/0x10 [ 176.324495][ T19] ? find_held_lock+0x2b/0x80 [ 176.329151][ T19] ? schedule+0x2bf/0x390 [ 176.333461][ T19] schedule+0xdd/0x390 [ 176.337511][ T19] smpboot_thread_fn+0x893/0xaa0 [ 176.342434][ T19] ? kthread+0x13a/0x450 [ 176.346660][ T19] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 176.352115][ T19] kthread+0x370/0x450 [ 176.356169][ T19] ? __pfx_kthread+0x10/0x10 [ 176.360747][ T19] ret_from_fork+0x754/0xd80 [ 176.365326][ T19] ? __pfx_ret_from_fork+0x10/0x10 [ 176.370421][ T19] ? __switch_to+0x7b4/0x1120 [ 176.375078][ T19] ? __pfx_kthread+0x10/0x10 [ 176.379657][ T19] ret_from_fork_asm+0x1a/0x30 [ 176.384406][ T19] [ 176.387573][ T19] Kernel Offset: disabled [ 176.391885][ T19] Rebooting in 86400 seconds..