last executing test programs: 2m16.760651414s ago: executing program 3 (id=2370): r0 = socket(0xa, 0x3, 0x3b) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(r3, 0xae41, r2) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r5 = socket(0x15, 0x5, 0x0) setsockopt$auto(r5, 0x114, 0x8, 0x0, 0x4) ioctl$auto(0x3, 0x89e0, 0x91) (async) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x482, 0x400, 0x9}]}) (async) madvise$auto(0x0, 0x200007, 0x8) (async) r6 = open(0x0, 0x26bc2, 0x161) ioctl$auto_BLKDISCARD(r6, 0x1277, 0x0) mprotect$auto(0x200000000000, 0x806121, 0x8) ppoll$auto(0x0, 0x6, &(0x7f0000000240)={0x0, 0x2}, 0x0, 0x8) (async) madvise$auto(0x0, 0x2003f0, 0x15) 2m16.386694687s ago: executing program 3 (id=2374): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x1000, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 2m16.094836172s ago: executing program 3 (id=2376): openat$auto_dfs_cpu_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/x86/topo/cpus/0\x00', 0x101000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptytc\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r0, 0x545c, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) mmap$auto(0x6, 0x202000a, 0x3, 0x16, r0, 0x8000) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, &(0x7f0000000080), 0x84000, 0x0) socket(0x9, 0x5, 0x808c) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x43403d0e, 0x0) 2m14.985503028s ago: executing program 3 (id=2379): mmap$auto(0x0, 0x2020008, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x2020008, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000054c0)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x20a01, 0x0) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) r1 = bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f00000000c0)=@bpf_attr_7={@link_id=0x80000001, 0x4, 0x9, r0}, 0xf) r2 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000001200)={0x1264, r2, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@OVS_METER_ATTR_BANDS={0x1248, 0x4, 0x0, 0x1, [@generic="c9f0a83233160395758ad5afb7ef17f6cdea734d7d5f9ca2116e5ca7af244281765041a837ab196993c9496f248f9e209477ba78a526934cbc642cafd050d0f17ca8269ae0de979de033ad9bb10953fb09a0068b3c49da8759b388c7f2eeee63f1e5b8b24eaaf97564c3754508b42e8a5226484c932de4d4e127a5007f504a04c25d6023931f7a4aa373aef7e0ff90d0d76eb074b92bb62102d6509697b4b034063399c696196c42c35bdc3ee08a2d25037f058bc80b35df603c5faa7b174d2c89b6960ebee3e2025e418389cacc9991", @typed={0xd, 0xe6, 0x0, 0x0, @str='\'\xdb.&]}\'}\x00'}, @nested={0x106f, 0x3e, 0x0, 0x1, [@generic="e3fa38af8e41bf7f5f6e8d4efaec6924ee1417a2ad01a5cc53a639218d78c6a86d7db33b220862e11f91dbcf5fbe2f8e61294da62594c473cb1e06e3f52d930d94fd4b96103109e1bdfeb1d26eac2737899928793c1dbea8caef8ae9a3256900649e636d10052b08d1fa674899268cd61bb8f04a46be2d76697c235da2f3ea2bd61a397d634f1390f0757270a945f8dc2de390085e9a7793f7743d9c059cdc949f3c8c47b09f4a92cb05919ee7813664d32d0e3512b3b991c2ba42c3efaa78165c5a500a281f60d40391c2c920f3ec2b4e7520c4ce412dc38bdc00a304ab0e0b1ab58ceaa03de89268b1d3e7ca99d7a0ffc75c991b441359b1d796e1d688a82583059e3f8c688d1882bbd88a42e86927acaa0c602352315ab53b1a75133a646dc5f031f3edb408276752922cde49136c02699082a6abf9bc2c6d444edddbc6ca0a6d880eeb4ec339dfa9533a670c7a08021e87120b2e4ad04419208cc63f7617e0bbcd3f7cd292497d7aa7790099f25473b11cc309b2179a6578a98c8a1b9ddc18c4ef9b64af51f7bfd9a0b3fbc38861e64ec06010af0b77bca045c2419bc2a003c7c46fa0fb7aaa40932646ef01a57d9a2a78d62137f8fe1a93f7808c4a721c1d867cb92e88187c0607c3f7f17afc9e5ea8ee7deefc00887a0411121424b5498b7109403f19e5a17283bc0033d4837dbc8e6fb7a1c240bee3fe498797ff9f0a3ac65d75065d076f35f0b7210ffc8c272b0fcdaa756cc8c9782c36f0d86f721fbebb69ef4325b072de3e05e60ea5ef5c9aebfb77c212f7663b73546108db69833ede3d61c161fcffa86a805186acd2e676f052481aff0b6e9c07c588d1dc9d5e033ace1553caaea93fd1671a792f63642cf85e7b40219ee6f0b79b34f2c74260d226ec3ecb6c94362b4148094abaa9fe05666b142f28221d15c6bc95e18fd11c5f32e5d1921a90c9766d72b36f69d34c392b40008c5fa4449acb7dc96c59010a1cfe9789db4d40caf882db91a718218ed40dd1c2775bfe82f92a6565ebdca5d3b9982651cd018cf0feec74ba580c00e22d1c7a67dab6acdd15af1fc29c106822b948d52057ec540cc4759c3009cd64733848fb7029c0efca2a78b3a7cb8712e9827b19f5cad640cc5b3af656e3c49ac095de7f383071e83b4fdee109921db0091226d69cb4aaa45f180e5a1efae07c694a9a7858a5d5baadd73e4b57da2fd156eb1530dfb0a7188d2a759108713b0349080f9bf167842563e559467b55dd9d28555deb4c2f4949063882e4797e053344ca62a993eac429c1a46f8f25e41185b46b8d745663f36202c6690024a25c97d33ae644f1ffdcead5e296fa38f2e581b307076abcd21fa822be42447e635fad74bb38c1a13bf3e7a643a10e66ac44f53953c3a83571c853be5b9add6128733d8c2279f93701d978489143aeb6561bac04aaf18c1b635461ec713bf60fc3428d034d311ff7584feb6f9fbbf5297a7cea81f9b4012af8423df5d2ed70a421c826719270f907f2ca5ebad06c4d0b7b980e26319e1ebf5116125bbe0bde15de159a6c9782de785ff569875d6196f21e99eab62fa8107eb6ad44f09d8f605b536756fc65b8bfa54b797190ba60656a77e35ac20572fedf1617f703a2ea3f5520443a371450d4ad5e26b0847a8de3ec55e889712307c36af4e6c4d12b24c116d2b7f7fba5bdd58f566e62fe098cf1d2003fba9a0e09fc98bcad8529a64ab17368554aadab6682abde710599d95a773745a5bf7f9ba8768c0dd02a12e78bab59205642fa9fbed8d85e94e66984182fbff0f98f9dbe084a8b5192a3eeb603f71e1f2967e62feaf2187a0799fcb7ee056368c54ca901e5bafa459819e3f17a4c9d429b0abe8eca767986f7c4362038535b81c69bdf09b8c2c6097ebb5ca64527a6177b7b3c43ac06f876fdf3280bddce7b25463853b56da23565b3012dfdfa919fc0820c23ff2b18393ea5776f6851362ce26550d9787fae897b8c45cccbb1b7492f12a3f0a085ab2f50ff5346e283f4d172d14d4c5eebed89580386c892d5abddccd251d40b9b60693faf949b10777b9b45a30de210d59d86376efc8c749b95620d0489c3aaaafb641de1106a82edc60651057e9f0b96b2b1f428783e1bbdd4f53d78ea8ae1443b61503792ce8277b18f6aa60bad8714153ccbc096add2853cd21b88cdca8302f949683b678585b13be903a0dc6eee9aa7c4382329583efc6c68c3163a08e1c286f6ed2d3f5c8500e0f9e237d55d823600e742d9b620d0fd997ccebe52be5803efc3a082c74ca055fc7dc1c47f262dcfc76a4dd7ea646301ed91beb24a8685d465fa855022a1e9f3240c1caa0306d70155117b7b9b4a5cd9f557f408d6e2497187a054da46163919bc32e23e38d58fbf44fc46635a1152c199d2e70c3de5ce3c644c7fc18be42929c7ca77b789817c1c1a1616839f322b70d2cf039ca0739bd07ae800a9ffb6ecda060c4668c68e35a88a127c14e5b255c242e64b8b3d93f0e04310d8a4acf2cbfeaa2addc6ea0d91a5ae2f481508bdf2438d834761a1b06b5da36cab2dbfa03ac4583c11d523dcd3809bb5f6ed650dd03725a43f4e4d88d5704586363dbc03b2b633b10e8396d5b0584e94c7174026e8305901502431741c5a0e5e7b28423b3800bc8a765e5c11c6a28f405643717e4f97741ba728abaf101fe74271e6d4a253696555570a5b4b6b40cfaa939f33141b359067a8266992d14d7adb0940b2bb82b034771e90e8e09a0b38901f0f37ed5c60bfd4ad5d7a7b8196b8bafa398b65ef213dbe192060f3537172c9ff81ee88debbc9884d84da88ac945659bb8ef30883619db534537519f2495af6754675ca68a323351fe9596713e1d8db12cf5bc8364a94b4b899d89b7edd699b135f6d3fc877dc77fd2f9af6a9f10eeededdb118346edfd3275443b28508e4dadba7b9333ccf2765419a98cd87cfe4b8970758e8fb963e77a9beed591e87223aaeaf7bd8c187ab702af80d781aecb99fcb59e6c29d99c0c3a75cd2b9893196da1e12d615c074d2d8134428e014bfecf77cbdc9f6308b8177bb84979949b8e41f659b3e139ec0d2296c91123d0ef237bdd8d2fcb915fc2f729e7d84ebc8d134bcb5bf6082b91b2c0336714e40e48acfd912e65cd74358dd81982d83a84a49000592e59eef67dcb2fb7164a7e6c8b96bf7192222d87b03c7e533508bb18a02a6d2d457d84fe179b892bd0b35be8b79eaaed0bb5cafe324d5057357bfe82758dd1e3e6de1ae8acf1d7cc1f57ea7d8e229e95d9e4397689041542f86b01612c40825717e10dc89073de26fc8c8df8200f1e483da5ea60e43dc6dce0829ce7512e161cd7dbaaeaa3d7d8902e751de396298fbdf5ba246d66bb1893714069e1dc81c02b4d417d9062b1d0824490c3e162c9d4107deb310d918b1e4ad3620fc60af75e3e5e1cb992e5530c0c5090c6c0a8f3f1b5d229ff1c9d271e0ac0266c3955d87ffd518f9e4ea6efe7f97d0f2a046d730b0e5f8fa988376a6a261928215e373cb251c8365ac6fb77485a944dd94c7328b72ec6687f258cd320a06ccb013279764fe964d373d0d0b6a700b9ce35cff04deaf1287125aff16f0d622a6ecd0cac30a09be08a9b90fa3f88363eed3417edf13d858c9d2d0cfc78e379d22e9d2184aac296a4c27225231188ed9090f5cab681dc4b36586933d27bc7235e4e2ba28ddf7662af9a5c64a3178fb5727703daf4eedf4302946f0f93ef23523db83d0bba3feac5a4c9a6abdb3e3aeb8d10bb0902cb6fbdf66ed4c47e5fe455d68fb9246fb0678e9c111f0df017ef27f4603a8cb45670dea3dc9c6306ccdd97fb3622af42cc9eecad9fa607875439cd8b97a80b04ffc5259bbda977eab32a6db698a7bd2ddb14ec2bb0dba0d564eb9e68a7296d5d06a47e3e57a9538f02f300940dd274dac52f10d2b7926b22af69e9b190abe055f543cd192074c3a3d7e08ed9087ab2d33c1936e720acb762c19264771e6d05b9a9c1df01bdfed12ed2490b1e7961e8a7ee5a5bdf7b83aad82c3ff9b4409b18b8342c54c8c24a2251a164bdf64bb995f513af11b8bb4680df6b97a7e6ba36d34128bc82287a889ea1f36ec53160f97958d6d2b6111d7d0c016bbb32ba1825bb3e58c5b4b9ee302faff08123568e81d7498512879ef42775385c86d0e25477e9338df8a5347672033bb6e4cfba81579baada6358ba4ec7403adf6cfc1d0919c8d8c28a9496c1fd1cc2aff7ab1df589849cc51b1277094e1c29cb356efe8a7a1a7701fb92d76cbe7d3be3afcef0786d2464bb35029ae7fa8eb68b0f53915ade7b68cc8b014ac1c43f9240ba2a101dc9f1b8d5e2954ca77f1bb38bd15d9e031cd835de4a78c690b8d421cce7bb9ca87ca4426c0b9a055c74ea58672ced48f7c5e5016f1d20c45e91108e08cc9cc4b573048ef82d81384ca32ae8f8a22e7c2c0ba9e3d014d792ee5b47efeccdc206a3c6e313f1c4ad0cc41b72ce2a39ada26588e77a866c5f534e2a7984f4e58d614749aa55f0ff6a772c03634128ee11c44c59386915d058d00837f9e0ff8fd52f0e0705b8a9f0a84f80eb151acb7c6736be5c5c7a8a1d75ed195e5b3f5e319ab44a14d3f8b3882f5e3d6dd85afd9b74cbc8fe9c400c8301714bcdcc6c1e110bfeb7bee9caee9087a3f66aae851b1b942f2af5218ae589e8ef374af15b84230a99c3fa114807b92890f0c95b83cc0e45c1b828cef18e0b7e52f62f59cedde997f635b03aa35aca662992418e390d5b4052b615c9aaf6ea39f1bebff3fd4b67b0fb2b6c90aa308fefd866c9c3cfe7f27e2d60a5d8f9d2b546b1ad0046f2d9878b36f6eeeee60d170bf83f95be19725144d073b9708ce5c0c65b0ba53a4517355817144e20d5c4e23bcae6e8f2a5b4ee99cdfc6ff1ee8255b83cc14e6504b5e6d45d8de24e5c18378904268907657897669f55d1583e752c2912c82f8d188990add83027b5334d302e936a256fb6ea90ebb2d9f5433cbe68321d8e6d1dd8dc10e2034da0382162941205a8b0f628e2ff035076a0e277b393c50e15f9966579dac61586c6a00bfe3e3437a67785d0c8803003b38cd2d3c29c4ffa9e0d8c0b7b772c3b5b4cc5940ca0728791025925044ce8127040374c9eeda1d2e81f7d61e8cc5bb8cfea7a74eff98511ec4d667f0caef90bc996d56d2541dab19c965c047a12029bf7625eaeec77f1ee30c8c3d2c427158e43cf24bd2075dd9ca103b78af13dedfd5d180bec987fd612dff5fd9171f48e4fdcf95f9fe2e5b69a6c0776fb6241b35f4100eefa1c038e04dfec375db6d463005937d62e70efca676f7e68f4233a9e1a6648f549f32228fd2e4aedb7522733035117923b9fac936cbdd3aa649c67f232fc845b343c28ef5e20e1be36b6fdd53e6c86094df1bb742a3da291e5a8c82e01678c698c686bd355e93b0451d1e1117471e3312a19741b5d95f1a6e40253347a289785866bf1fa8d6866688996f042f529e78cd2171e11be456d6e6746004bafd16a0b25dd2681983d96a4988d7cfb76bde165500ec8d8bc6ced98fa920738cd05eaeeed165dd2cb8af82a2812bfe3cac4c653dcaa6acae80d9a8791cc6c2d5b4e8e727f87969f7fee3f4cc4d64180940316b2f2d6c26184c2c3e348f922efb9ac7d93902fd2ce1d542fc75eede07f13f51a0ac1af52c52b0526ef00d5320b59ff381dd3457cd7fa0d2d87eb45781b11d3d6c5db1ab98d3492589004fcaa4e474181fd672ddb777a55b0796f433625fe92fe72dd99f455b0ac85f6642d9b4b5320bae", @generic="abfaaa345080a8d1f6783e2bfcadea8917eab7576438de27fb941ac27168e6a48077572f5b88174fe161e7f6bc433fe9e0f78ea764f449a88f380956208ef763923ca7f3b8651664960b240b3d1cec9a224a781c3fc1e7", @typed={0x14, 0xe5, 0x0, 0x0, @ipv6=@empty}]}, @typed={0x4, 0x40}, @generic="79a5a507d2ce26bfa66bf8bdea48e9d9b85cb115d2969778f5ba12581220a507e7d9b92fc5be45dd23942efe7f22eb95081eac8d1fa846ab3b0344170f08c667653c8e739a140f5e3d909b337fac05f2913f54e49131988fdc4a8891923656829efc35e4af0dc5d2a8fea01f98afa2b40a111e05cd465d371ccabebb1069576ff81e88ee117f9359cd3d3ad3880aba48af6d953014fe22f291c393b452b39cdccd809be00d18eacf6632da5b525830a694e62a62afdb4c5592d6a54f9772102a2caa0005cedfc206a98acf6327fb76016aebffaaaea53516d01212f29845ac84eaa304a2a9d081de28625de0f84d8045"]}, @OVS_METER_ATTR_CLEAR={0x4}, @OVS_METER_ATTR_CLEAR={0x4}]}, 0x1264}, 0x1, 0x0, 0x0, 0x20008001}, 0x1) (async) sendmsg$auto_OVS_METER_CMD_SET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000001200)={0x1264, r2, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@OVS_METER_ATTR_BANDS={0x1248, 0x4, 0x0, 0x1, [@generic="c9f0a83233160395758ad5afb7ef17f6cdea734d7d5f9ca2116e5ca7af244281765041a837ab196993c9496f248f9e209477ba78a526934cbc642cafd050d0f17ca8269ae0de979de033ad9bb10953fb09a0068b3c49da8759b388c7f2eeee63f1e5b8b24eaaf97564c3754508b42e8a5226484c932de4d4e127a5007f504a04c25d6023931f7a4aa373aef7e0ff90d0d76eb074b92bb62102d6509697b4b034063399c696196c42c35bdc3ee08a2d25037f058bc80b35df603c5faa7b174d2c89b6960ebee3e2025e418389cacc9991", @typed={0xd, 0xe6, 0x0, 0x0, @str='\'\xdb.&]}\'}\x00'}, @nested={0x106f, 0x3e, 0x0, 0x1, [@generic="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", @generic="abfaaa345080a8d1f6783e2bfcadea8917eab7576438de27fb941ac27168e6a48077572f5b88174fe161e7f6bc433fe9e0f78ea764f449a88f380956208ef763923ca7f3b8651664960b240b3d1cec9a224a781c3fc1e7", @typed={0x14, 0xe5, 0x0, 0x0, @ipv6=@empty}]}, @typed={0x4, 0x40}, @generic="79a5a507d2ce26bfa66bf8bdea48e9d9b85cb115d2969778f5ba12581220a507e7d9b92fc5be45dd23942efe7f22eb95081eac8d1fa846ab3b0344170f08c667653c8e739a140f5e3d909b337fac05f2913f54e49131988fdc4a8891923656829efc35e4af0dc5d2a8fea01f98afa2b40a111e05cd465d371ccabebb1069576ff81e88ee117f9359cd3d3ad3880aba48af6d953014fe22f291c393b452b39cdccd809be00d18eacf6632da5b525830a694e62a62afdb4c5592d6a54f9772102a2caa0005cedfc206a98acf6327fb76016aebffaaaea53516d01212f29845ac84eaa304a2a9d081de28625de0f84d8045"]}, @OVS_METER_ATTR_CLEAR={0x4}, @OVS_METER_ATTR_CLEAR={0x4}]}, 0x1264}, 0x1, 0x0, 0x0, 0x20008001}, 0x1) socket(0x2, 0x1, 0x106) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) io_uring_setup$auto(0xc, 0x0) (async) io_uring_setup$auto(0xc, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/028/001\x00', 0x4000, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0x4020aed2, r3) 2m14.544591945s ago: executing program 3 (id=2382): socket(0xa, 0x1, 0x84) (async) socket(0xa, 0x1, 0x84) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') ioctl$auto(r0, 0x8008b70d, 0xffffffffffffffff) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) 2m14.507344538s ago: executing program 3 (id=2383): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x3, 0x0, 0xffd8) r1 = socket(0x11, 0xa, 0x9) unshare$auto(0x40000080) write$auto(0x3, 0x0, 0x8) openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/setgroups\x00', 0x7f835763b555bbe0, 0x0) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0xe187) write$auto(r1, &(0x7f0000000480)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\x0f\x97\xa1\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd3lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\xfa\v?\\#\xfc\x15-\xbc\xcd$\x83\xcf\xc5D\xcc', 0xc8) socket(0x1f, 0x1, 0x8) r2 = socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) fanotify_init$auto(0x5, 0x2000000000002) socket(0x26, 0x80805, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) ioctl$auto(0x3, 0xff08, 0x0) r3 = setfsuid$auto(0xee00) setreuid$auto(r3, 0x0) msgctl$auto_MSG_INFO(0x875, 0xc, &(0x7f0000000180)={{0x2, 0xee00, 0x0, 0x9, 0x401, 0x0, 0x1}, 0x0, 0x0, 0x9, 0x7, 0x4, 0x5, 0x9, 0x200, 0x8, 0x5, @inferred=0xffffffffffffffff, @raw=0xcb}) fchown$auto(r2, r3, r4) keyctl$auto(0x23, r3, r3, 0x3, 0x9) prctl$auto(0x1000000003b, 0x80001, 0x0, 0x200000005, 0x100000000000007) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x181200, 0x0) 1m59.257821483s ago: executing program 32 (id=2383): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x3, 0x0, 0xffd8) r1 = socket(0x11, 0xa, 0x9) unshare$auto(0x40000080) write$auto(0x3, 0x0, 0x8) openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/setgroups\x00', 0x7f835763b555bbe0, 0x0) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0xe187) write$auto(r1, &(0x7f0000000480)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\x0f\x97\xa1\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd3lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\xfa\v?\\#\xfc\x15-\xbc\xcd$\x83\xcf\xc5D\xcc', 0xc8) socket(0x1f, 0x1, 0x8) r2 = socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) fanotify_init$auto(0x5, 0x2000000000002) socket(0x26, 0x80805, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) ioctl$auto(0x3, 0xff08, 0x0) r3 = setfsuid$auto(0xee00) setreuid$auto(r3, 0x0) msgctl$auto_MSG_INFO(0x875, 0xc, &(0x7f0000000180)={{0x2, 0xee00, 0x0, 0x9, 0x401, 0x0, 0x1}, 0x0, 0x0, 0x9, 0x7, 0x4, 0x5, 0x9, 0x200, 0x8, 0x5, @inferred=0xffffffffffffffff, @raw=0xcb}) fchown$auto(r2, r3, r4) keyctl$auto(0x23, r3, r3, 0x3, 0x9) prctl$auto(0x1000000003b, 0x80001, 0x0, 0x200000005, 0x100000000000007) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x181200, 0x0) 1m3.578784391s ago: executing program 0 (id=2615): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2a, 0x2, 0x1) sync_file_range$auto(r0, 0x0, 0x2, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyr0\x00', 0x41, 0x0) ioctl$auto(r4, 0x540a, 0x1) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000100)="8c070000001b208365d5c0d112dbab0800002eb01c3db79f77fdc2bb5057100112d88f73348a54396800ed598a0e5500d7c0cbb6b1e91df3a518659678d207bd9be09b6674129571d279", 0x40000000001243}, 0x3, 0x0) finit_module$auto(0x1, 0xfffffffffffffffc, 0x1) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), r1) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r6, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_MODULE_FW_FLASH_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @ETHTOOL_A_MODULE_FW_FLASH_PASSWORD={0x8, 0x3, 0x2}, @ETHTOOL_A_MODULE_FW_FLASH_FILE_NAME={0x7, 0x2, ':\'\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20004814) ioctl$auto(r3, 0x400454ca, 0x38) r7 = inotify_init1$auto(0x3000000000000) ioctl$auto_BLKPBSZGET(r7, 0x127b, 0x0) r8 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$auto(r8, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) r9 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000040), r0) connect$auto(0x3, &(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x2}, 0x52) r10 = socket(0x2, 0x802, 0x1) setsockopt$auto_SO_WIFI_STATUS(r10, 0x0, 0x29, &(0x7f0000000080)='\xef', 0x8000) sendmsg$auto_IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r9, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x43}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0xf9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x800) setsockopt$auto_SO_BSDCOMPAT(r4, 0xd, 0xe, &(0x7f0000000300)='#\x00', 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x21) ioctl$auto_FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000080)) 1m3.277457154s ago: executing program 0 (id=2619): close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) close_range$auto(0x0, 0x5, 0x0) rename$auto(&(0x7f0000000180)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', &(0x7f0000000300)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)') acct$auto(&(0x7f0000000280)='/dev/ptp0\x00') openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r0 = io_uring_setup$auto(0x400, 0x0) readv$auto(r0, 0x0, 0xfffffffffffffffe) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MCAST_FLAGS={0x8, 0x26, 0x6}, @BATADV_ATTR_MESH_ADDRESS={0xa}, @BATADV_ATTR_DAT_CACHE_IP4ADDRESS={0x8, 0x23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @BATADV_ATTR_HARD_IFNAME={0x14, 0x7, 'wlan0\x00'}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_ADDRESS={0xa, 0x8, @link_local}]}, 0x60}}, 0x1) ioctl$auto_SNDRV_PCM_IOCTL_WRITEI_FRAMES2(r0, 0x40184150, &(0x7f0000000000)={0x400, &(0x7f0000000080)="343c34f4f67943f8c5a6d2711d70652fee4313d3c1f329685b6b8f550343455f918e27b0ae3b990a62503f6b1b79485b703e972258fd30fd3f816e0224769469ae0e95e67d7bec24093e0401f8d6ddb149aa9b5f3608b78be0181c8e2cdc893887305a16808fb07872887ff1bd5ddef3e00131df8691ad34be8c67c2f273fc0d54a26b7fa4cd627da1600bcac89b6d671c23bbfd8be94856d4718fb18b913e084d7c38ce4b8d", 0x4}) madvise$auto(0x1, 0x5, 0x6) clock_adjtime$auto(0xfffffffffffffffb, 0x0) 1m2.876887943s ago: executing program 0 (id=2620): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x202, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x2) prctl$auto(0x9, 0x6, 0xffffffffffffffff, 0x7fffffffffffffff, 0xf20) io_uring_setup$auto(0x1d48, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x7fffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x13) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x100000000000000, 0x2020009, 0x3, 0xeb9, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) rename$auto(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') madvise$auto(0x0, 0xff7fffffffff0001, 0x15) getcpu$auto(0x0, &(0x7f00000000c0)=0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000001c0), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000240), 0xffffffffffffffff) sendto$auto(r1, &(0x7f0000000100)="7b7b4c71fa84648c33a0624414e4798ad3652c0811a6972f29d6eb806bf9ce8a43", 0x0, 0x2, &(0x7f0000000040)=@hci={0x1f, 0x4}, 0xffff) 1m1.193338839s ago: executing program 0 (id=2625): syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf8\xfe\n\xa7\xfeD\xca\xd9\xb3\xc1\xe4\xf5j\x94\x7f\x00\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xed\x013\x87l\xb9\x1e\x05\x90\xa2', 0x2) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/rxrpc/stats\x00', 0x401, 0x0) lseek$auto(0x3, 0x20000, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000003c0)='4', 0x1) getsockopt$auto_SO_RCVMARK(0xffffffffffffffff, 0x0, 0x4b, 0x0, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/veth0_virt_wifi/router_solicitation_interval\x00', 0x804000, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) madvise$auto(0x20000, 0x84, 0x9) madvise$auto(0xfffffffffffffffc, 0x6, 0x19) r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xe, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0x78, 0x0, 0x0, [0x0, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r5, @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x20008040) sendmmsg$auto(r1, &(0x7f0000000440)={{0x0, 0x1000, &(0x7f0000000100)={0x0, 0x100000001}, 0x80, 0x0, 0x8, 0xa505}}, 0xe4, 0x4006) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r7, 0x0, 0x10040) pread64$auto(r6, 0x0, 0x100000002, 0x100000001) write$auto_proc_sys_file_operations_proc_sysctl(r3, 0x0, 0x0) lseek$auto(r0, 0x4, 0x3) close_range$auto(0x2, r7, 0xffffffbb) 1m0.226667103s ago: executing program 0 (id=2628): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = socket(0x2b, 0x1, 0x0) r2 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(r1, 0x0, 0x7f, 0xfffffffd, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) pwrite64$auto(r2, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0xae80, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000600)={{&(0x7f0000000400)="5cdd59f1a68d086a02a2cc1399c7b3f7410eb36cfbec7e7224eaf6de379d09771080b197b8057225ffa98bc9a7bd53a5aee9a2d48d74d149c199be3009d2d61af64942e106e9b586aabcd7ae4de8a0e87e02af7f6af674c2fc8d8a8a78916f9c23e6b8a8be7141ae87f2996f079bfcbadc2ef4a6a3e894ba7dd3d9f11bd4d05558df32f9eeb4fda5e29576787e2ced58e35355c37e1ff8a11d36a067d362a37323c582eee83ea4cc9e7f", 0x6, &(0x7f0000000540)={&(0x7f00000004c0)="35a4988620ed7f4ab66aa8948d2c0530bb25f6057ba29add8bbc1d2db5f8682804b365a0d809d366e189194941627ddf76d73565a6133f661519a99780edab37135a9058cfbea6f19ec9ad30287159ec1c6afd59583911a5239ff895b0871d32f098c6cfdef0b944fe4659694d8716"}, 0x2, &(0x7f0000000580), 0x4, 0xc7b}, 0xfffffffe}, 0x6, 0x2) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x1, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) io_uring_setup$auto(0x59, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0xa, 0x5, 0x84) 58.582941018s ago: executing program 0 (id=2637): unshare$auto(0x40000080) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) (rerun: 32) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/netfs/volumes\x00', 0x40080, 0x0) pread64$auto(r3, 0x0, 0x8100000041, 0x413e) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) (async) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) (async) mremap$auto(0x20000000009, 0x66, 0x4000000000001, 0x7, 0x1001ff003) (async) r4 = fsopen$auto(0x0, 0x1) (async) keyctl$auto(0x1f, 0x1, 0x0, 0x0, 0x3ff) (async, rerun: 64) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) (async, rerun: 64) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, r4, 0x300000000000) socket(0x1d, 0x3, 0x1) ptrace$auto(0x4206, 0x1, 0x100000000, 0xe855) (async, rerun: 32) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) (rerun: 32) unshare$auto(0x3) sendfile$auto(r5, r5, 0x0, 0x3) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0005, 0x3) (rerun: 32) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x181101, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00'}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syzkaller1\x00'}) (rerun: 64) 49.255882525s ago: executing program 2 (id=2675): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = socket(0x2b, 0x1, 0x0) r2 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(r1, 0x0, 0x7f, 0xfffffffd, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) pwrite64$auto(r2, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0xae80, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000600)={{&(0x7f0000000400)="5cdd59f1a68d086a02a2cc1399c7b3f7410eb36cfbec7e7224eaf6de379d09771080b197b8057225ffa98bc9a7bd53a5aee9a2d48d74d149c199be3009d2d61af64942e106e9b586aabcd7ae4de8a0e87e02af7f6af674c2fc8d8a8a78916f9c23e6b8a8be7141ae87f2996f079bfcbadc2ef4a6a3e894ba7dd3d9f11bd4d05558df32f9eeb4fda5e29576787e2ced58e35355c37e1ff8a11d36a067d362a37323c582eee83ea4cc9e7f", 0x6, &(0x7f0000000540)={&(0x7f00000004c0)="35a4988620ed7f4ab66aa8948d2c0530bb25f6057ba29add8bbc1d2db5f8682804b365a0d809d366e189194941627ddf76d73565a6133f661519a99780edab37135a9058cfbea6f19ec9ad30287159ec1c6afd59583911a5239ff895b0871d32f098c6cfdef0b944fe4659694d8716"}, 0x2, &(0x7f0000000580)="6ea0838008f497d022b78e5e7eb7c80c499b948523cfff8c50f12ebc124c316e0b644f39bb8b55a743fb004e0ed1aec82d", 0x4, 0xc7b}, 0xfffffffe}, 0x6, 0x2) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x1, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) io_uring_setup$auto(0x59, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0xa, 0x5, 0x84) 47.748156478s ago: executing program 2 (id=2683): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = socket(0x2b, 0x1, 0x0) r2 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(r1, 0x0, 0x7f, 0xfffffffd, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) pwrite64$auto(r2, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0xae80, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000600)={{&(0x7f0000000400)="5cdd59f1a68d086a02a2cc1399c7b3f7410eb36cfbec7e7224eaf6de379d09771080b197b8057225ffa98bc9a7bd53a5aee9a2d48d74d149c199be3009d2d61af64942e106e9b586aabcd7ae4de8a0e87e02af7f6af674c2fc8d8a8a78916f9c23e6b8a8be7141ae87f2996f079bfcbadc2ef4a6a3e894ba7dd3d9f11bd4d05558df32f9eeb4fda5e29576787e2ced58e35355c37e1ff8a11d36a067d362a37323c582eee83ea4cc9e7f", 0x6, &(0x7f0000000540)={&(0x7f00000004c0)="35a4988620ed7f4ab66aa8948d2c0530bb25f6057ba29add8bbc1d2db5f8682804b365a0d809d366e189194941627ddf76d73565a6133f661519a99780edab37135a9058cfbea6f19ec9ad30287159ec1c6afd59583911a5239ff895b0871d32f098c6cfdef0b944fe4659694d8716"}, 0x2, &(0x7f0000000580), 0x4, 0xc7b}, 0xfffffffe}, 0x6, 0x2) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x1, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) io_uring_setup$auto(0x59, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0xa, 0x5, 0x84) 46.272112465s ago: executing program 2 (id=2687): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x3c, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) fsconfig$auto_XFS_DAX_INODE(r0, 0xfffff001, &(0x7f00000000c0)='#),%\xc2\'\x8b\x00', &(0x7f00000001c0)="0a10dc2c94a839f945729e8f3354e6d0090e59dd48c2c80cf330e1c4d902ff9365c17ea2da212d63c5edc565eed11bc38cd15675bcb5241ff379c0c2830ec7391e4a8539b21178674ec4a576f9a33a4cbca931e441b1c9b3b71046f34249ec0c3bbe425634c57ab70083d711e239416d3538d18991c68120428a9ae3202e5828fd6d58e8fb0bea791d78275cf3d993c330cee650b4f30200fbf0dfa9286683c74fec08a72c927de86098c095353f0332f47564d1ab3eea96b5185b5bb5177adc80be51f26521c1a27dfa29", 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0xfdef) write$auto(0x3, 0x0, 0xfdef) r1 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ppoll$auto(&(0x7f0000000140)={r1, 0x40, 0x2}, 0xb, &(0x7f0000000180)={0x1, 0x8}, 0x0, 0x8) mmap$auto(0x0, 0x4020009, 0x7fff, 0x50, r0, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x29, 0x17000000, 0x0, 0x0, 0x0) 45.367271434s ago: executing program 2 (id=2692): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async) close_range$auto(0x2, 0xa, 0x0) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0) read$auto(r0, 0x0, 0x39b8) (async) pwritev2$auto(r0, &(0x7f0000000000)={&(0x7f0000000080)="ae40012577e7a7b959b756ee32fa078365f5fd9bee58023bc21e18069cf3f0c59add34902132f7fda3fdbbe8147a81e6945b33a082f5b53e59af1f9c855faa61d11f03d571d687f5bbcbe5bb18e2ac1e70c8cf895df65fc1487ffb50967e6e8bab30d35bb5350b06b2e3444c98cd1e8e814a7d4c127223d2a187d16c49c564edeb200e4203452a5aa8debee0bef3ee22815827d8f484cd068b0e493673c4a87a0a1ef4db5cd9e8b0e5a0b7397e8d86ae2a3cf27339697d447431f253a368095689333769f4e8f5253e1a2e314e941a186c73726ae9c64eccad9b7e69ad5a82200c0d8bcffdc15e942a009fc1193d712c35", 0x9}, 0x1, 0x4, 0x0, 0x4) (async) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) shmget$auto(0x8, 0x10566, 0x52fe) (async) ioctl$auto_SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket(0x2, 0xa, 0x1) r3 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1b, r2, 0x10000}, 0x10) mmap$auto(0x0, 0x2009, 0xfffffffffffffffb, 0x8000200008011, r3, 0x0) (async) readv$auto(r1, &(0x7f0000000a80)={0x0, 0x2}, 0x1) 45.234740306s ago: executing program 2 (id=2693): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty51\x00', 0x80, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0xfffffdef) close_range$auto(0x2, 0x8, 0x0) r2 = socketpair$auto(0xf3, 0x4, 0x8000000000000000, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyp6\x00', 0xa0102, 0x0) syz_genetlink_get_family_id$auto_nlbl_unlbl(0x0, r2) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) read$auto(r0, 0x0, 0x6) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) setsockopt$auto_SO_ATTACH_FILTER(r0, 0xc, 0x1a, 0x0, 0x3ff) 44.712252833s ago: executing program 2 (id=2694): write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x11, 0x80003, 0x300) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(r0, 0x107, 0x14, 0x0, 0x4) sendto$auto(0x3, 0x0, 0x13, 0xfffffff5, &(0x7f0000000440)=@phonet={0x23, 0x7, 0xfd, 0x2c}, 0x22) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) vmsplice$auto(0x1, &(0x7f0000000000)={0x0, 0x5}, 0x6, 0x8) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_register$auto_IORING_REGISTER_FILES2(r1, 0xd, &(0x7f0000000200)="5b3652beee5da7f3a50b37149f2cc4be81af3b0840439c39330a2396301fe47b72ef47c61341c5a59255231376d91d81556cb7e70390e402e56a34db0bc28d6e8cdeeba7a47ea0f64b895f813928d578c3004f8d8279f51606c2744ea3ca254a59f74a0b65160c326be0e7e1e95b5161d6f7ec1e07b29eafef7fcd60b012039b", 0x8001) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r3 = ioctl$auto_SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f0000000180)=0x8f3a) ioctl$auto_FIBMAP(r3, 0x1, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket(0x1d, 0x2, 0x6) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd, 0xfd000000}, 0x6a) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_UI_SET_RELBIT(r1, 0x40045566, &(0x7f00000001c0)=0x20) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/nullb0/queue/write_cache\x00', 0x10b142, 0x0) sendfile$auto(r4, r4, 0x0, 0x1000200) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) madvise$auto(0x80000001, 0x400, 0x5) write$auto(r5, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\x91\x81\x8a\xc1!\xe8|\'\xdb\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\x01\x004\x8a\xbbY8@Z5`\xa4m\x04\x00\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\xc5\xf1\xc8HQ\x98\xb5\xe6\x95\xec\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x18\x0e\xfa3\xb4\xcbI\xc48\xd2r\xe1\xd9\x1asn)>\xe9\xa8\x12\x1bhH]\xd1c\xc3t\xc2\x80\xaaq\xb5g\x8e\xb8\x102\xbb\xf5\xc7\xdc\xff4R\xf6\xd69\xa7q(\x9f\x18D\vr\rD#\x04;[\xcb^F\x1a\xa8d\xd8t\xf6\x93D\xd5\xea\x98\xc5\xbe\xa1\xc2T\xd1\x1f\x94|\x1c\xf4\xed\x85\x97*!\xe3\fuU\xc3_\xe9\xd6\xd8\x03\xd0\x84\xdf\'\xa7A\x9d\xbf\xc3ia\xf7\x03i\x00\x00\x00\x00', 0x100000a3d9) madvise$auto(0x0, 0x7, 0x8bb) mprotect$auto(0x200000000000, 0x806122, 0xc) 43.433812652s ago: executing program 33 (id=2637): unshare$auto(0x40000080) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) (rerun: 32) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/netfs/volumes\x00', 0x40080, 0x0) pread64$auto(r3, 0x0, 0x8100000041, 0x413e) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) (async) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) (async) mremap$auto(0x20000000009, 0x66, 0x4000000000001, 0x7, 0x1001ff003) (async) r4 = fsopen$auto(0x0, 0x1) (async) keyctl$auto(0x1f, 0x1, 0x0, 0x0, 0x3ff) (async, rerun: 64) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) (async, rerun: 64) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, r4, 0x300000000000) socket(0x1d, 0x3, 0x1) ptrace$auto(0x4206, 0x1, 0x100000000, 0xe855) (async, rerun: 32) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) (rerun: 32) unshare$auto(0x3) sendfile$auto(r5, r5, 0x0, 0x3) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0005, 0x3) (rerun: 32) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x181101, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00'}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syzkaller1\x00'}) (rerun: 64) 37.151251849s ago: executing program 5 (id=2714): mmap$auto(0x0, 0x20008, 0x4000000000df, 0x2000eb1, 0xffffffffffffffff, 0x3) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0xb, 0xa, 0x4) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000100)=@query={@target_ifindex, 0x2, 0xff, 0x9f9d, 0x5, @prog_cnt=0x34f1, 0x0, 0x200, 0x7dc0, 0x8, 0x8}, 0xa3) bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0x3, 0x0, 0x3}, 0x4) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x10000000084, 0x4, 0x0, 0x4) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r1, &(0x7f0000000080)={0x0, 0x1000}, 0x3) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x11, 0x80003, 0x300) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x82002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)="fb", 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/i915/parameters/mitigations\x00', 0x88302, 0x0) sendfile$auto(r3, r3, 0x0, 0x7ffff000) 35.074552936s ago: executing program 5 (id=2720): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/cpu/events/branch-instructions\x00', 0x22b42, 0x0) sendfile$auto(r0, r0, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r2, 0xffffffffffdffe00, &(0x7f0000000140)=';') fchown$auto(r1, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x3) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x400284, 0x0) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) ioctl$auto(0xc8, 0x400454cb, 0xffffffffffffffff) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, 0x0, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f0000000040)={0x1, 0x4, 0x81, 0x8, 0x9, "8eabeb663b572a9f43298902518f2a438dbd8855e8529542d4517e62e6d3a8a4a5da485f77dd72ed364947a535dd13d01f2d605a9d4048ac958301f504720278", "16fa2d25729a89d38d43d0cf8adeb82aeee33ae39a462f1da4601effe99e3a7f97ca3c5f0b8cfca710b40c925fdda35afe70e310dc02ee15e5f91a3cd9ac0e6d9472360408d0033b8b04dae0ca88793f", "5792826c61c347bf4c2da10c8f236869d0a90f79fcc9659c2102aa3d294011d7", 0x2, 0x968f, 0x3, "abdc4185287359f85b748e2057d6212e6ba06742678a6f406df6659a51580f3089ecb0145b4337bc70fbbf69872df3c6c683085797fa76e5c6639de9"}) listmount$auto(&(0x7f0000000180)={0x101, @raw=0x10000, 0x7f, 0x2, 0x8}, &(0x7f00000001c0)=0xffffffffffffffff, 0x3, 0x2a76) 34.641783553s ago: executing program 5 (id=2721): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) (async) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async, rerun: 32) r2 = socket(0xa, 0x801, 0x106) (rerun: 32) setsockopt$auto(r2, 0x6, 0x21, 0x0, 0xe) (async) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r1, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) setfsuid$auto(0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x60, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x4}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8000}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)='\t', 0x1) (async, rerun: 64) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ati_remote2/parameters/mode_mask\x00', 0x0, 0x0) (rerun: 64) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000180)=""/33, 0x21) (async) r5 = socket(0xa, 0x5, 0x84) (async) r6 = io_uring_setup$auto(0x6, 0x0) getsockopt$auto(r5, 0x84, 0x18, 0x0, 0x0) (async) mmap$auto(0x0, 0x810004, 0x400000000fff, 0x8000000008011, 0x3, 0x8000) (async, rerun: 32) mmap$auto(0x2000000001, 0x20009, 0xbe, 0x19, r6, 0x8003) (rerun: 32) getdents$auto(0xffffffffffffffff, 0x0, 0x400018) (async) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/dev_snmp6/veth1_to_bond\x00', 0x2082, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async, rerun: 64) sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (rerun: 64) 32.718632004s ago: executing program 5 (id=2726): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0xf, 0xa, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffd45, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r4}, @NETDEV_A_DMABUF_FD={0x8}, @NETDEV_A_DMABUF_QUEUES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040050}, 0x4) listen$auto(r2, 0x84) r5 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto_F_NOTIFY(r5, 0x402, 0x9000) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) shutdown$auto(0x200000003, 0x2) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) madvise$auto(0x2, 0x7, 0x15) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32, @ANYBLOB="10002c8008004b0020f598629c"], 0x2c}}, 0x4000000) sendmsg$auto_NL80211_CMD_SET_COALESCE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x7}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/usb/usbmon/24t\x00', 0x10141, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0) close_range$auto(0x2, 0x8, 0x0) 31.556420534s ago: executing program 5 (id=2730): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) ustat$auto(0x801, 0x0) syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f0000000100), 0xffffffffffffffff) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000040), 0xffffffffffffffff) 30.641224338s ago: executing program 5 (id=2737): r0 = socket(0x10, 0x2, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x189002, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x2, 0x9) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[], 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$auto_UI_SET_RELBIT(r4, 0x40045566, &(0x7f0000000040)=0x7fffffff) r5 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r5, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00 \x00'/21, 0x100000002, 0x100000001) close_range$auto(0x0, 0xfffffffffffff000, 0x0) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2c, r7, 0x936355e497c8b7e5, 0x70bd24, 0x25dfdbfb, {}, [@ETHTOOL_A_TSINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x4048800) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000180), 0x410000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200", @ANYBLOB="5de1523353"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004800}, 0x40000) 29.444933458s ago: executing program 34 (id=2694): write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x11, 0x80003, 0x300) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(r0, 0x107, 0x14, 0x0, 0x4) sendto$auto(0x3, 0x0, 0x13, 0xfffffff5, &(0x7f0000000440)=@phonet={0x23, 0x7, 0xfd, 0x2c}, 0x22) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) vmsplice$auto(0x1, &(0x7f0000000000)={0x0, 0x5}, 0x6, 0x8) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_register$auto_IORING_REGISTER_FILES2(r1, 0xd, &(0x7f0000000200)="5b3652beee5da7f3a50b37149f2cc4be81af3b0840439c39330a2396301fe47b72ef47c61341c5a59255231376d91d81556cb7e70390e402e56a34db0bc28d6e8cdeeba7a47ea0f64b895f813928d578c3004f8d8279f51606c2744ea3ca254a59f74a0b65160c326be0e7e1e95b5161d6f7ec1e07b29eafef7fcd60b012039b", 0x8001) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r3 = ioctl$auto_SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f0000000180)=0x8f3a) ioctl$auto_FIBMAP(r3, 0x1, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket(0x1d, 0x2, 0x6) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd, 0xfd000000}, 0x6a) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_UI_SET_RELBIT(r1, 0x40045566, &(0x7f00000001c0)=0x20) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/nullb0/queue/write_cache\x00', 0x10b142, 0x0) sendfile$auto(r4, r4, 0x0, 0x1000200) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) madvise$auto(0x80000001, 0x400, 0x5) write$auto(r5, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\x91\x81\x8a\xc1!\xe8|\'\xdb\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\x01\x004\x8a\xbbY8@Z5`\xa4m\x04\x00\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\xc5\xf1\xc8HQ\x98\xb5\xe6\x95\xec\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x18\x0e\xfa3\xb4\xcbI\xc48\xd2r\xe1\xd9\x1asn)>\xe9\xa8\x12\x1bhH]\xd1c\xc3t\xc2\x80\xaaq\xb5g\x8e\xb8\x102\xbb\xf5\xc7\xdc\xff4R\xf6\xd69\xa7q(\x9f\x18D\vr\rD#\x04;[\xcb^F\x1a\xa8d\xd8t\xf6\x93D\xd5\xea\x98\xc5\xbe\xa1\xc2T\xd1\x1f\x94|\x1c\xf4\xed\x85\x97*!\xe3\fuU\xc3_\xe9\xd6\xd8\x03\xd0\x84\xdf\'\xa7A\x9d\xbf\xc3ia\xf7\x03i\x00\x00\x00\x00', 0x100000a3d9) madvise$auto(0x0, 0x7, 0x8bb) mprotect$auto(0x200000000000, 0x806122, 0xc) 15.451555648s ago: executing program 35 (id=2737): r0 = socket(0x10, 0x2, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x189002, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x2, 0x9) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[], 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$auto_UI_SET_RELBIT(r4, 0x40045566, &(0x7f0000000040)=0x7fffffff) r5 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r5, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00 \x00'/21, 0x100000002, 0x100000001) close_range$auto(0x0, 0xfffffffffffff000, 0x0) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2c, r7, 0x936355e497c8b7e5, 0x70bd24, 0x25dfdbfb, {}, [@ETHTOOL_A_TSINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x4048800) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000180), 0x410000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200", @ANYBLOB="5de1523353"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004800}, 0x40000) 7.709994421s ago: executing program 6 (id=2812): mmap$auto(0x0, 0x20008, 0x4000000000df, 0x2000eb1, 0xffffffffffffffff, 0x3) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0xb, 0xa, 0x4) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000100)=@query={@target_ifindex, 0x2, 0xff, 0x9f9d, 0x5, @prog_cnt=0x34f1, 0x0, 0x200, 0x7dc0, 0x8, 0x8}, 0xa3) bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0x3, 0x0, 0x3}, 0x4) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x10000000084, 0x4, 0x0, 0x4) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r1, &(0x7f0000000080)={0x0, 0x1000}, 0x3) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x11, 0x80003, 0x300) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x82002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)="fb", 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/i915/parameters/mitigations\x00', 0x88302, 0x0) sendfile$auto(r3, r3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) semget$auto(0x7eb, 0xc7, 0xfffffffd) 6.138962904s ago: executing program 6 (id=2822): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = socket(0x2b, 0x1, 0x0) r2 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(r1, 0x0, 0x7f, 0xfffffffd, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) pwrite64$auto(r2, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0xae80, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000600)={{&(0x7f0000000400)="5cdd59f1a68d086a02a2cc1399c7b3f7410eb36cfbec7e7224eaf6de379d09771080b197b8057225ffa98bc9a7bd53a5aee9a2d48d74d149c199be3009d2d61af64942e106e9b586aabcd7ae4de8a0e87e02af7f6af674c2fc8d8a8a78916f9c23e6b8a8be7141ae87f2996f079bfcbadc2ef4a6a3e894ba7dd3d9f11bd4d05558df32f9eeb4fda5e29576787e2ced58e35355c37e1ff8a11d36a067d362a37323c582eee83ea4cc9e7f", 0x6, &(0x7f0000000540)={&(0x7f00000004c0)="35a4988620ed7f4ab66aa8948d2c0530bb25f6057ba29add8bbc1d2db5f8682804b365a0d809d366e189194941627ddf76d73565a6133f661519a99780edab37135a9058cfbea6f19ec9ad30287159ec1c6afd59583911a5239ff895b0871d32f098c6cfdef0b944fe4659694d8716"}, 0x2, &(0x7f0000000580)="6ea0838008f497d022b78e5e7eb7c80c499b948523cfff8c50f12ebc124c316e0b644f39bb8b55a743fb004e0ed1aec82d0b82794ab3801ad7705749f562a3d87256f1ec7ebea9a0fd16decd422f095cc3abfc2c4e", 0x4, 0xc7b}, 0xfffffffe}, 0x6, 0x2) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x1, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) io_uring_setup$auto(0x59, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0xa, 0x5, 0x84) 4.979713428s ago: executing program 4 (id=2827): select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x200948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x6, 0x8000001f, 0x8, 0x6d3e, 0x6, 0x2, 0x1]}, 0x0) 4.916812693s ago: executing program 7 (id=2828): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/fib/nexthop_bucket_activity\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000002c80)='/sys/kernel/debug/netdevsim/netdevsim2/fib/nexthop_bucket_activity\x00', 0x100) socket(0x27, 0x5, 0x73) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(0x0, r1) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x84) setsockopt$auto(0xffffffffffffffff, 0x86, 0x0, 0x0, 0x20) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x8001, 0x0) futimesat$auto(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$auto_ila(0x0, 0xffffffffffffffff) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x121982, 0x0) write$auto(r2, 0x0, 0x85) clone$auto(0x8, 0x8, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) listmount$auto(&(0x7f0000000080)={0x1f, @inferred=r2, 0x80000026, 0xfffffffffdfffff7, 0x8}, 0x0, 0xf4240, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 4.802216334s ago: executing program 1 (id=2829): r0 = openat$auto_fops_u8_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/nfcsim/nfc0/dropframe\x00', 0x80102, 0x0) write$auto(r0, &(0x7f0000000440)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\b\x86\xc6\xd7L\xc6\xd1\xf4h\xf2\xc4\x9aZ\x14\x83\f\x17\xf6\xb1u!\xbc\xbc8H\x94,3\xba\x8a\'\xef\b\x942W\xb5:\xb4\xe3[\x9d\xc1s\x13\xf9\xd5X\xe0\xfd\x7f\x95\xf8\xc9\x85\xe7\xd9u3\xc3\xcd\x1dJX\xcd\xab\xf5\xdf\xf1\xad\xa4\xf1\x9b\xc4\xf9\xac\xa2\x8f\xff\xe2`\x9c7\xbc\xe7\xe1\x94\xcb\bt\xa0\x93]\xba\t\x92\xca\x1f\xc3\x00\x00\x00\x00\xf8\xeb\xc65\xd3\xd1\xc5\xbb\x96{\xa3\xe7\\y\xa9Em\xd5\x19\xef\xf8\xac!\xff@K\x1d\xeaE\xce=\x90\xe6O\x82X\xc1\xbfI:5\xac\xb0\x98\xbf\xf1\xba\xa4\x10s\xfb\xc1j{\xe6\x02\xb86$!v\xef\xce\x19eM\xae\xe3\xd9jc\x10\xa7\xf1\xce&\xd7\xb6\x06\xf3\xeb\xe8\x87[f\xe7\xdf\x8c\x0f\x80\xed\x04Z!\x89R\x8b-\xbcI\t:\xcf\x9b\xd5a\v\xf0^4\xe7\xb6\x06\xbb\xdf\xa5\x88\x96\xd2V{\xb7n\x1b5N\xb9\xdc\x97\x16\x9e\aag\x1b\xf0K\xebtw\xe3\xf0\x03\xf9\xf2\xe3\xb7x\x8c\xe2\xca\xfdB\xa5\x82nlV\xac\xe6bK\xec\xa3.\xe7qeOd\x19\xeaX\x94N\x84\xa51\xec7:\xef\xd1\x8f\xd4JP\x81\xc3\xa3/Mz\x91f\xcf\xdaO\xe1l\xcc\x8b\xb0\xe5\xc9n\x95\x9a\xa6\xf3Tk\xdf\xffm\x7fbC\x8a\x97\xdcM\x06\x8a\xd3g\xe5\f\x00\x00\x00\x00\x00\x00\x00\xf2\xacL\xe0\xab\x1d\x1e\x94?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\xbe&N\xe0\xe1\xa8\xc7\x9e-\\\xed\x93\xbe\xec\xe0\xd9\xd2\x1c\x1f#\xf6\x00\xc0E(\x15\xa5\xbb\xfc3\x00_\xf0\xd5]\xf1\xff\xb4\x1b\x94\xa2\x9f,\xd4?\xa6Nj\x12\xd2\x87\x14\xd6\x119u\v\x16k\xde5\xa1\x91G\xeb\xa31\xe2\xe4>\x03\xc7\x14\ba_~?\x93Q\x82}Y^S\xad\xe5#\xa5\xadQ&\xdc\xbe\xb9\xf43\xfag\xce\a\x11\xc5y\xf3c\x90%R\xff6-\xd2\xc3\xcb\xe6\xae\x8e\xe9=\x82\xday\xc6\xcfC\xc7\xd9\xbdJ\x85\xa2\xa4Q\xcb\xa8\x15#\xb7\xe9l\x97\x19h\xd1\xcc\r[+\b\xdb\xc7\x7f\x1a\x93\x84\x81,\xd9\xab\xb0N!\x95h\x90=L+\x83\xa2\xd4*\xdf\xdf;W-=', 0x2) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/pm_freeze_timeout\x00', 0x200, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x1cb842, 0x0) landlock_restrict_self$auto(r2, 0x0) socketpair$auto(0x5, 0x2, 0xfffffffe, 0x0) getsockopt$auto_SO_TIMESTAMPNS_OLD(r3, 0x0, 0x23, &(0x7f0000000180)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', &(0x7f00000001c0)=0x9b3) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x1, @link_local}, 0x6a) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)=""/247, 0xe5) 4.74489112s ago: executing program 4 (id=2830): mmap$auto(0x0, 0xe983, 0x5, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x10, 0x2, 0x0) ioctl$auto_FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x10000) clock_adjtime$auto(0x0, &(0x7f0000000040)={0xfbb, 0x0, 0x7f, 0xfffffffff7fffffe, 0x602, 0x8, 0x7, 0x0, 0x7, 0xb, 0x1, {0x3ff, 0x7}, 0xfffffffffffffffa, 0x200000a5, 0xa, 0x13c, 0x0, 0xc3, 0xe56, 0x2, 0x5, 0x90, 0xfffffff5}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040010) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x16b280, 0x0) socketpair$auto(0x1e, 0x5, 0x3, 0x0) close_range$auto(0x2, r0, 0xe) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = open(&(0x7f0000000080)='./file0\x00', 0x261c2, 0x84) r2 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r1, 0xffffffffffffffff, 0x4, 0x302f, r2, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000000c0)=@raw_tracepoint={0x5, r3, 0x0, 0x3}, 0x91) open(0x0, 0x22240, 0x155) socket(0xa, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)={0x14, r5, 0x9ec6579d452c1f15, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000080) connect$auto(0x3, 0x0, 0x54) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r6, 0x0, 0x400000000006) 4.679683428s ago: executing program 1 (id=2831): mmap$auto(0x0, 0x20008, 0x4000000000df, 0x2000eb1, 0xffffffffffffffff, 0x3) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0xb, 0xa, 0x4) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000100)=@query={@target_ifindex, 0x2, 0xff, 0x9f9d, 0x5, @prog_cnt=0x34f1, 0x0, 0x200, 0x7dc0, 0x8, 0x8}, 0xa3) bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0x3, 0x0, 0x3}, 0x4) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x10000000084, 0x4, 0x0, 0x4) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r1, &(0x7f0000000080)={0x0, 0x1000}, 0x3) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x11, 0x80003, 0x300) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x82002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)="fb", 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/i915/parameters/mitigations\x00', 0x88302, 0x0) sendfile$auto(r3, r3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) semget$auto(0x7eb, 0xc7, 0xfffffffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 4.194635478s ago: executing program 6 (id=2832): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) ustat$auto(0x801, 0x0) syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f0000000100), 0xffffffffffffffff) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0xfffffbfb}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000040), 0xffffffffffffffff) 4.10361412s ago: executing program 7 (id=2833): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/smack/current\x00', 0x105000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x800008000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000000), 0x20140, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20804, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f0000000200)={[0x80000000008, 0xffffffffffffff4b, 0x100000001, 0x15, 0x8001, 0x1, 0x9, 0x5, 0x8, 0x40000000000000, 0x3, 0x8000000008, 0xfffffffffffffffa, 0xab, 0x2, 0x9]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan1\x00'}) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, 0x0, 0x7, 0x0, 0xc004, 0xb}, 0xfff}, 0x5, 0x311) 3.954657227s ago: executing program 4 (id=2834): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x2, 0x1) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000040)="03", 0x1) close_range$auto(0x0, 0x5, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x700081, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000d40)='/sys/bus/pci/drivers/i915/new_id\x00', 0x4a401, 0x0) socket(0x2, 0x80002, 0x73) read$auto(0x3, 0x0, 0x7fffffff) setsockopt$auto(0x3, 0x1, 0x5, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xffeb, 0xe, &(0x7f0000000100)=@in={0x2, 0x4e21, @loopback}, 0x19) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) pwrite64$auto(r1, &(0x7f0000000040)=':\'*&\x04!\x00', 0x2001, 0x23) 3.436452364s ago: executing program 4 (id=2835): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = socket(0x2b, 0x1, 0x0) r2 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(r1, 0x0, 0x7f, 0xfffffffd, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) pwrite64$auto(r2, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0xae80, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000600)={{&(0x7f0000000400)="5cdd59f1a68d086a02a2cc1399c7b3f7410eb36cfbec7e7224eaf6de379d09771080b197b8057225ffa98bc9a7bd53a5aee9a2d48d74d149c199be3009d2d61af64942e106e9b586aabcd7ae4de8a0e87e02af7f6af674c2fc8d8a8a78916f9c23e6b8a8be7141ae87f2996f079bfcbadc2ef4a6a3e894ba7dd3d9f11bd4d05558df32f9eeb4fda5e29576787e2ced58e35355c37e1ff8a11d36a067d362a37323c582eee83ea4cc9e7f", 0x6, &(0x7f0000000540)={&(0x7f00000004c0)="35a4988620ed7f4ab66aa8948d2c0530bb25f6057ba29add8bbc1d2db5f8682804b365a0d809d366e189194941627ddf76d73565a6133f661519a99780edab37135a9058cfbea6f19ec9ad30287159ec1c6afd59583911a5239ff895b0871d32f098c6cfdef0b944fe4659694d8716"}, 0x2, &(0x7f0000000580)="6ea0838008f497d022b78e5e7eb7c80c499b948523cfff8c50f12ebc124c316e0b644f39bb8b55a743fb004e0ed1aec82d0b82794ab3801ad7705749f562a3d87256f1ec7ebea9a0fd16decd422f095cc3abfc2c4e7fcc9916d6a7139c73", 0x4, 0xc7b}, 0xfffffffe}, 0x6, 0x2) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x1, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) io_uring_setup$auto(0x59, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0xa, 0x5, 0x84) 3.176371904s ago: executing program 6 (id=2836): unshare$auto(0x40000080) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r1 = prctl$auto(0x3e, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) listen$auto(0x3, 0x81) (async) mmap$auto(0x7846000000000000, 0x2020009, 0x9, 0x10, r1, 0x8000) socket(0xa, 0x5, 0x0) (async) getpeername$auto(0x3, 0x0, 0x0) (async) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) (async) madvise$auto(0x0, 0x2003f2, 0x15) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) (async) r4 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x200000, 0x0) write$auto_proc_uid_map_operations_base(r4, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYRES8=r4, @ANYRESDEC=r2, @ANYRES64=r0], 0xa8}, 0x1, 0x0, 0x0, 0x400e080}, 0x4004020) (async) madvise$auto(0x0, 0x200007, 0x19) (async) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x41a081, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0x111, r2, 0x8000) (async) prctl$auto(0x3fe, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0xff, 0x400005, 0xdf, 0xffffffffffffffff, 0x2, 0x8000) (async) madvise$auto(0x0, 0x2000040080000000, 0xe) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) madvise$auto(0x0, 0x8, 0xe) (async) fanotify_init$auto(0x6a1, 0x2000000000002) (async) socket(0x26, 0x80805, 0x0) socket(0x28, 0x1, 0x0) 2.970901838s ago: executing program 7 (id=2837): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) socket(0x10, 0x2, 0x0) socket(0x2, 0x3, 0x1) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) write$auto(0x3, 0x0, 0x7fffffff) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) 2.578312905s ago: executing program 6 (id=2838): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000340)={0x80, 0x6, 0xb03, 0xe8, 0x9, 0x6, &(0x7f0000000100)="38ca612a670c1cf848dca5002192e4ae7c2517a98f00ee1161b9e24cf2eec4a705a6"}) socket(0xa, 0x2, 0x84) mmap$auto(0x0, 0x2000a, 0xdf, 0xe31, 0x40000000000a5, 0x8000) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0x9, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x403c6f2b, 0x0) read$auto(0x3, 0x0, 0x80) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) readv$auto(0x3, &(0x7f0000000040)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) inotify_init1$auto(0x3000000000000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/vrf/strict_mode\x00', 0x80202, 0x0) sendfile$auto(r2, 0x3, 0x0, 0x400000000008) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) io_uring_setup$auto(0x59, &(0x7f00000001c0)={0x7ffffffc, 0x8, 0x3000, 0x3, 0x7, 0x400b, 0xffffffffffffffff, [], {0x6, 0x3, 0x8c48, 0x29a, 0x9, 0x81, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x24, 0xfe000000, 0x8, 0x8}}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/max_ptes_none\x00', 0x183042, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000300), 0x20882, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x200948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x6, 0x8000001f, 0x8, 0x6d3e, 0x6, 0x2, 0x1]}, 0x0) 2.294194929s ago: executing program 6 (id=2839): write$auto(0xffffffffffffffff, &(0x7f0000000480)='0\x00\xa6\xcc\r\x95QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\xc1\'\x0f\x84\xa0\xf4\x91\xab\xb1\xcf+M\xaf\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98]Z\xc6\xe4\xcaW\xa7\xee\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) (async) unshare$auto(0x40000080) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0xcf4, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) r1 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) poll$auto(&(0x7f0000000180)={r1, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) sysfs$auto(0x2, 0x4c, 0x0) (async) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) io_uring_setup$auto(0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) (async, rerun: 64) ioctl$auto(r2, 0x4008af12, 0xe) (rerun: 64) listen$auto(0xffffffffffffffff, 0x81) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) mmap$auto(0x40000000000008, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) (async) keyctl$auto(0x1f, 0x0, 0x6, 0x0, 0x3) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0xb) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x4000000000, 0x102003ef, 0x17) (async) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) (async, rerun: 32) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) (async, rerun: 32) madvise$auto(0x1000000000, 0xfa5, 0x20) (async) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) 2.030249897s ago: executing program 1 (id=2840): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = io_uring_setup$auto(0x5, 0x0) socketpair$auto(0x1, 0x7, 0x3e3, &(0x7f0000000000)=0x2) (async) close_range$auto(0x2, r0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d) (async) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) (async) r1 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x4, 0x0, 0x7fff, 0x1}, 0x80000b}, 0x5, 0x20000000) 1.956147006s ago: executing program 7 (id=2841): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x1d, 0x2, 0x6) socket(0x2, 0x2, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x84, 0x7d, 0x0, &(0x7f0000000000)=0x9b) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/dfscache\x00', 0x101a41, 0x0) write$auto(r0, 0x0, 0x6) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r2 = socket(0x2b, 0x1, 0x1) setsockopt$auto_SO_BSDCOMPAT(r2, 0x6, 0xe, &(0x7f0000000000), 0x80001) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="ebff0000e8f127d547ccb0f346c5", @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf250300000004000800140001800800148004001d8008001300ac14141a"], 0x2c}, 0x1, 0x0, 0x0, 0x20040010}, 0x800) 1.838165932s ago: executing program 4 (id=2842): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/fib/nexthop_bucket_activity\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000002c80)='/sys/kernel/debug/netdevsim/netdevsim2/fib/nexthop_bucket_activity\x00', 0x100) socket(0x27, 0x5, 0x73) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(0x0, r1) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x84) setsockopt$auto(0xffffffffffffffff, 0x86, 0x0, 0x0, 0x20) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x8001, 0x0) futimesat$auto(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$auto_ila(0x0, 0xffffffffffffffff) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x121982, 0x0) write$auto(r2, 0x0, 0x85) clone$auto(0x8, 0x8, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) listmount$auto(&(0x7f0000000080)={0x1f, @inferred=r2, 0x80000026, 0xfffffffffdfffff7, 0x8}, 0x0, 0xf4240, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 1.790966888s ago: executing program 1 (id=2843): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x2, 0x1) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000040)="03", 0x1) close_range$auto(0x0, 0x5, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x700081, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000d40)='/sys/bus/pci/drivers/i915/new_id\x00', 0x4a401, 0x0) socket(0x2, 0x80002, 0x73) read$auto(0x3, 0x0, 0x7fffffff) setsockopt$auto(0x3, 0x1, 0x5, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xffeb, 0xe, &(0x7f0000000100)=@in={0x2, 0x4e21, @loopback}, 0x19) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) pwrite64$auto(r1, &(0x7f0000000040)=':\'*&\x04!\x00', 0x2001, 0x23) 1.655062134s ago: executing program 7 (id=2844): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/rose14/statistics/rx_length_errors\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/dummy0/ifalias\x00', 0x8041, 0x0) write$auto(r1, 0x0, 0x7) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0xa0080, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r2, 0x0, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000000000)="c80d1b5d399b4b", 0xfdef) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) r5 = open(&(0x7f0000000040)='&&\x00', 0x84342, 0xe1d2b27bdc14aabc) flock$auto(r5, 0x3) flock$auto(r5, 0x5) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000180)=""/108, 0x6c) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), 0xffffffffffffffff) process_vm_writev$auto(0x0, 0x0, 0x200000000017, 0x0, 0x7, 0x0) flock$auto(r5, 0x803) mmap$auto(0xffffffffffffffff, 0x200000000400018, 0xdf, 0x9b72, 0x2, 0x3bfc) getcwd$auto(0x0, 0xffffffffffffffff) linkat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mmap$auto(0xfffffffffffffffd, 0x202000a, 0x6000000000, 0x10, r3, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) 1.4845706s ago: executing program 1 (id=2845): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) ustat$auto(0x801, 0x0) syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f0000000100), 0xffffffffffffffff) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x1}, 0x4, 0x966, 0x2b, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000040), 0xffffffffffffffff) 1.289827945s ago: executing program 4 (id=2846): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/cpu/events/branch-instructions\x00', 0x22b42, 0x0) sendfile$auto(r0, r0, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r2, 0xffffffffffdffe00, &(0x7f0000000140)=';') fchown$auto(r1, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x3) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x400284, 0x0) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x10540, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) ioctl$auto(0xc8, 0x400454cb, 0xffffffffffffffff) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, 0x0, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f0000000040)={0x1, 0x4, 0x81, 0x8, 0x9, "8eabeb663b572a9f43298902518f2a438dbd8855e8529542d4517e62e6d3a8a4a5da485f77dd72ed364947a535dd13d01f2d605a9d4048ac958301f504720278", "16fa2d25729a89d38d43d0cf8adeb82aeee33ae39a462f1da4601effe99e3a7f97ca3c5f0b8cfca710b40c925fdda35afe70e310dc02ee15e5f91a3cd9ac0e6d9472360408d0033b8b04dae0ca88793f", "5792826c61c347bf4c2da10c8f236869d0a90f79fcc9659c2102aa3d294011d7", 0x2, 0x968f, 0x3, "abdc4185287359f85b748e2057d6212e6ba06742678a6f406df6659a51580f3089ecb0145b4337bc70fbbf69872df3c6c683085797fa76e5c6639de9"}) listmount$auto(&(0x7f0000000180)={0x101, @raw=0x10000, 0x7f, 0x2, 0x8}, &(0x7f00000001c0)=0xffffffffffffffff, 0x3, 0x2a76) 367.44868ms ago: executing program 1 (id=2847): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(r0, &(0x7f0000000000)=@generic={0x5, "8076000900000b0000000001ffe2"}, 0x58) connect$auto(r0, 0x0, 0x58) mmap$auto(0x0, 0x202000a, 0x5, 0x10, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=@query={@target_ifindex, 0x6, 0x0, 0x8, 0x5, @prog_cnt=0x7, 0x0, 0x4, 0x2, 0x6, 0xfffffffffffffffe}, 0x84) listen$auto(r0, 0x200009) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) prctl$auto(0x101, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x6fa4, 0x7000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/bond0/bonding/slaves\x00', 0x80002, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, r0, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0xffffffffffffffff, r0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000003d40), 0xffffffffffffffff) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) msgrcv$auto(0x0, 0x0, 0x4, 0x9, 0x6) msgctl$auto(0x0, 0x1, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000180)=""/178, 0xb2) 0s ago: executing program 7 (id=2848): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x3, 0x100) (async, rerun: 64) unshare$auto(0x40000080) (rerun: 64) socket(0xa, 0x5, 0x0) (async, rerun: 32) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (rerun: 32) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thread-self/net/ip_vs_conn_sync\x00', 0x802, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\xb0\xa1\xeeJ\xd8\xef\xc8t\x9d\x1e=J\x91W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7b#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbr\xb9\xc3\xacH!\xc1\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2?\x0e\x85\xaaIGu\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1bx#\x87\xa9\x10\x9b\xf8YD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*w\x13\x96\xd5\xd0\x877\x12\xbc\xa1\xd0h@|\xf9\xfa\x9b\x17\x94\xb9\xe7\xf3\x15\x05\x91\xe8\x98p\x7f:\xd7s\xd9wo\x82\xda\xec\x91\xb7\xd9;H\x8a\b\x00\x00\x00\x00\x00\x00\x00\x8aZ\x94\x14$X7\xaeW6=^I\x9fQ\r5c\x81\xca]\x97m\x89o\x8f\xd8}P>I\xd0\xb3\x88C\xd7', 0x100000a3d9) (async) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) socket(0x2, 0x3, 0xa) (async) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd5, 0x948b, 0x3, 0x15f4da08, 0x4, 0x3, 0x62, 0x80000002, 0x5, 0x1, 0x9, 0x3, 0xfffffffffefffffe]}, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x1000, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x8062, 0x80000001, 0x800, 0x100006d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0) (async, rerun: 32) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000100), 0x20400, 0x0) (rerun: 32) select$auto(0xe, 0x0, 0x0, &(0x7f0000000380)={[0x10000, 0x4, 0xd, 0x1, 0x3, 0x3, 0x100015f4da0a, 0x3, 0x3, 0xe, 0x80000023, 0x7, 0x6d3e, 0xd, 0x1000000000d, 0x4]}, 0x0) r1 = openat$auto_stats_fops_(0xffffffffffffff9c, 0x0, 0x40002, 0x0) read$auto_stats_fops_(r1, 0x0, 0x0) unshare$auto(0x3) (async) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x9, 0x6, 0x6, 0x4, 0x11ffffffffffb, 0x6, 0x2, 0x6, 0x2, 0x80, 0x7ff, 0x8000, 0x1, 0x1, 0x202, 0x9, 0xbca7, 0x4, 0x0, 0x0, 0x0, 0x694, [0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x2, 0x5, 0x0, 0xfffffffffffffc01, 0x7fffffff, 0xfffffbfffffffffb, 0x0, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x400008, 0x0, 0x2000000000000, 0x0, 0x8000000000000000, 0x0, 0x1, 0x2db6, 0x7fffffff, 0x101, 0x0, 0x20000000000000, 0x0, 0x1000000000000200, 0x0, 0x400, 0x96, 0xc7b, 0x4, 0xe17, 0x0, 0x100000006]}, 0x1fe, 0x1) (async, rerun: 64) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) (rerun: 64) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffffffffffd03, &(0x7f00000001c0)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x1, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) munlock$auto(0xf, 0x6) kernel console output (not intermixed with test programs): v_slave_1 [ 838.564747][T17173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 838.664602][T17173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 838.915689][T17173] hsr_slave_0: entered promiscuous mode [ 838.950815][T17173] hsr_slave_1: entered promiscuous mode [ 838.977547][T17173] debugfs: 'hsr0' already exists in 'hsr' [ 838.983291][T17173] Cannot create hsr debugfs directory [ 839.999004][T17173] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.318510][T17173] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.458081][T17175] Bluetooth: hci2: command tx timeout [ 840.751406][T17173] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.237293][T17173] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.489189][T17228] FAULT_INJECTION: forcing a failure. [ 841.489189][T17228] name failslab, interval 1, probability 0, space 0, times 0 [ 841.663955][T17228] CPU: 0 UID: 0 PID: 17228 Comm: syz.0.2403 Tainted: G L syzkaller #0 PREEMPT(full) [ 841.663983][T17228] Tainted: [L]=SOFTLOCKUP [ 841.663989][T17228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 841.663999][T17228] Call Trace: [ 841.664005][T17228] [ 841.664011][T17228] dump_stack_lvl+0x100/0x190 [ 841.664039][T17228] should_fail_ex.cold+0x5/0xa [ 841.664062][T17228] should_failslab+0xc2/0x120 [ 841.664080][T17228] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 841.664102][T17228] ? dup_fd+0x4d/0xd10 [ 841.664118][T17228] ? trace_kmalloc+0x101/0x130 [ 841.664136][T17228] dup_fd+0x4d/0xd10 [ 841.664155][T17228] ? apparmor_task_alloc+0x2c1/0x3b0 [ 841.664173][T17228] copy_process+0x268f/0x7a40 [ 841.664201][T17228] ? __pfx_copy_process+0x10/0x10 [ 841.664219][T17228] ? find_held_lock+0x2b/0x80 [ 841.664242][T17228] kernel_clone+0xfc/0x9a0 [ 841.664258][T17228] ? __pfx_futex_wait+0x10/0x10 [ 841.664282][T17228] ? __pfx_kernel_clone+0x10/0x10 [ 841.664309][T17228] __do_sys_clone+0xd9/0x120 [ 841.664327][T17228] ? __pfx___do_sys_clone+0x10/0x10 [ 841.664360][T17228] do_syscall_64+0x106/0xf80 [ 841.664374][T17228] ? clear_bhb_loop+0x40/0x90 [ 841.664393][T17228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.664408][T17228] RIP: 0033:0x7fc36219c799 [ 841.664422][T17228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.664436][T17228] RSP: 002b:00007fc3603f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 841.664451][T17228] RAX: ffffffffffffffda RBX: 00007fc362415fa0 RCX: 00007fc36219c799 [ 841.664461][T17228] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 841.664470][T17228] RBP: 00007fc362232c99 R08: 0000000000000002 R09: 0000000000000000 [ 841.664480][T17228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 841.664488][T17228] R13: 00007fc362416038 R14: 00007fc362415fa0 R15: 00007fffdcf9aea8 [ 841.664508][T17228] [ 841.877338][T17173] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 841.891067][T17173] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 841.907254][T17173] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 841.942471][T17173] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 842.014765][T17232] FAULT_INJECTION: forcing a failure. [ 842.014765][T17232] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 842.028281][T17232] CPU: 0 UID: 0 PID: 17232 Comm: syz.2.2404 Tainted: G L syzkaller #0 PREEMPT(full) [ 842.028308][T17232] Tainted: [L]=SOFTLOCKUP [ 842.028314][T17232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 842.028323][T17232] Call Trace: [ 842.028330][T17232] [ 842.028337][T17232] dump_stack_lvl+0x100/0x190 [ 842.028365][T17232] should_fail_ex.cold+0x5/0xa [ 842.028382][T17232] ? prepare_alloc_pages+0x16d/0x5f0 [ 842.028401][T17232] should_fail_alloc_page+0xeb/0x140 [ 842.028419][T17232] prepare_alloc_pages+0x1f0/0x5f0 [ 842.028439][T17232] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 842.028465][T17232] ? rcu_is_watching+0x12/0xc0 [ 842.028487][T17232] ? trace_mm_page_alloc+0x17a/0x1d0 [ 842.028505][T17232] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 842.028530][T17232] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 842.028556][T17232] ? find_held_lock+0x2b/0x80 [ 842.028571][T17232] ? is_bpf_text_address+0x8a/0x1a0 [ 842.028594][T17232] ? is_bpf_text_address+0x8a/0x1a0 [ 842.028617][T17232] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 842.028635][T17232] ? is_bpf_text_address+0x94/0x1a0 [ 842.028656][T17232] ? kernel_text_address+0x8d/0x100 [ 842.028679][T17232] ? __kernel_text_address+0xd/0x30 [ 842.028699][T17232] ? unwind_get_return_address+0x59/0xa0 [ 842.028722][T17232] alloc_pages_bulk_noprof+0x782/0x1490 [ 842.028751][T17232] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 842.028776][T17232] ? kasan_save_stack+0x30/0x50 [ 842.028794][T17232] ? alloc_pages_noprof+0x233/0x390 [ 842.028813][T17232] __kasan_populate_vmalloc+0xf0/0x210 [ 842.028839][T17232] alloc_vmap_area+0x95d/0x2bd0 [ 842.028863][T17232] ? __pfx_alloc_vmap_area+0x10/0x10 [ 842.028885][T17232] __get_vm_area_node+0x1ca/0x330 [ 842.028914][T17232] __vmalloc_node_range_noprof+0x213/0x1530 [ 842.028934][T17232] ? kernel_clone+0xfc/0x9a0 [ 842.028961][T17232] ? find_held_lock+0x2b/0x80 [ 842.028977][T17232] ? local_lock_release+0x99/0x130 [ 842.028995][T17232] ? local_lock_release+0x99/0x130 [ 842.029016][T17232] ? kernel_clone+0xfc/0x9a0 [ 842.029035][T17232] ? find_held_lock+0x2b/0x80 [ 842.029049][T17232] ? rcu_read_unlock+0x17/0x60 [ 842.029066][T17232] ? rcu_read_unlock+0x17/0x60 [ 842.029083][T17232] ? obj_cgroup_charge_account+0x46d/0x640 [ 842.029101][T17232] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 842.029121][T17232] ? __memcg_slab_post_alloc_hook+0x51b/0x990 [ 842.029142][T17232] ? rcu_is_watching+0x12/0xc0 [ 842.029164][T17232] ? trace_kmem_cache_alloc+0xf3/0x120 [ 842.029187][T17232] ? kernel_clone+0xfc/0x9a0 [ 842.029203][T17232] __vmalloc_node_noprof+0xad/0xf0 [ 842.029222][T17232] ? kernel_clone+0xfc/0x9a0 [ 842.029240][T17232] copy_process+0x5ec/0x7a40 [ 842.029260][T17232] ? __pfx___futex_wait+0x10/0x10 [ 842.029283][T17232] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 842.029306][T17232] ? lockdep_hardirqs_on+0x78/0x100 [ 842.029334][T17232] ? __pfx_copy_process+0x10/0x10 [ 842.029352][T17232] ? find_held_lock+0x2b/0x80 [ 842.029388][T17232] kernel_clone+0xfc/0x9a0 [ 842.029404][T17232] ? __pfx_futex_wait+0x10/0x10 [ 842.029428][T17232] ? __pfx_kernel_clone+0x10/0x10 [ 842.029456][T17232] __do_sys_clone+0xd9/0x120 [ 842.029475][T17232] ? __pfx___do_sys_clone+0x10/0x10 [ 842.029508][T17232] do_syscall_64+0x106/0xf80 [ 842.029522][T17232] ? clear_bhb_loop+0x40/0x90 [ 842.029541][T17232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.029556][T17232] RIP: 0033:0x7f38d8f9c799 [ 842.029571][T17232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.029586][T17232] RSP: 002b:00007f38d9ec0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 842.029601][T17232] RAX: ffffffffffffffda RBX: 00007f38d9215fa0 RCX: 00007f38d8f9c799 [ 842.029611][T17232] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 842.029620][T17232] RBP: 00007f38d9032c99 R08: 0000000000000002 R09: 0000000000000000 [ 842.029631][T17232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 842.029641][T17232] R13: 00007f38d9216038 R14: 00007f38d9215fa0 R15: 00007fff552feb08 [ 842.029662][T17232] [ 842.029725][T17232] warn_alloc: 1 callbacks suppressed [ 842.029735][T17232] syz.2.2404: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 842.606799][T17175] Bluetooth: hci2: command tx timeout [ 842.853870][T17173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 842.905715][T17173] 8021q: adding VLAN 0 to HW filter on device team0 [ 842.960753][T16984] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.967916][T16984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 843.008947][T16984] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.016317][T16984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 843.124174][T17232] ,cpuset=/,mems_allowed=0-1 [ 843.175599][T17232] CPU: 0 UID: 0 PID: 17232 Comm: syz.2.2404 Tainted: G L syzkaller #0 PREEMPT(full) [ 843.175628][T17232] Tainted: [L]=SOFTLOCKUP [ 843.175633][T17232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 843.175643][T17232] Call Trace: [ 843.175649][T17232] [ 843.175655][T17232] dump_stack_lvl+0x100/0x190 [ 843.175682][T17232] warn_alloc.cold+0x95/0x1c1 [ 843.175707][T17232] ? __pfx_warn_alloc+0x10/0x10 [ 843.175727][T17232] ? lockdep_hardirqs_on+0x78/0x100 [ 843.175753][T17232] ? __get_vm_area_node+0x2c5/0x330 [ 843.175775][T17232] ? __get_vm_area_node+0x208/0x330 [ 843.175796][T17232] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 843.175814][T17232] ? find_held_lock+0x2b/0x80 [ 843.175829][T17232] ? local_lock_release+0x99/0x130 [ 843.175848][T17232] ? local_lock_release+0x99/0x130 [ 843.175867][T17232] ? kernel_clone+0xfc/0x9a0 [ 843.175886][T17232] ? find_held_lock+0x2b/0x80 [ 843.175908][T17232] ? rcu_read_unlock+0x17/0x60 [ 843.175925][T17232] ? rcu_read_unlock+0x17/0x60 [ 843.175941][T17232] ? obj_cgroup_charge_account+0x46d/0x640 [ 843.175959][T17232] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 843.175980][T17232] ? __memcg_slab_post_alloc_hook+0x51b/0x990 [ 843.176000][T17232] ? rcu_is_watching+0x12/0xc0 [ 843.176023][T17232] ? trace_kmem_cache_alloc+0xf3/0x120 [ 843.176041][T17232] ? kernel_clone+0xfc/0x9a0 [ 843.176058][T17232] __vmalloc_node_noprof+0xad/0xf0 [ 843.176077][T17232] ? kernel_clone+0xfc/0x9a0 [ 843.176095][T17232] copy_process+0x5ec/0x7a40 [ 843.176114][T17232] ? __pfx___futex_wait+0x10/0x10 [ 843.176136][T17232] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 843.176158][T17232] ? lockdep_hardirqs_on+0x78/0x100 [ 843.176186][T17232] ? __pfx_copy_process+0x10/0x10 [ 843.176204][T17232] ? find_held_lock+0x2b/0x80 [ 843.176226][T17232] kernel_clone+0xfc/0x9a0 [ 843.176242][T17232] ? __pfx_futex_wait+0x10/0x10 [ 843.176265][T17232] ? __pfx_kernel_clone+0x10/0x10 [ 843.176293][T17232] __do_sys_clone+0xd9/0x120 [ 843.176311][T17232] ? __pfx___do_sys_clone+0x10/0x10 [ 843.176343][T17232] do_syscall_64+0x106/0xf80 [ 843.176357][T17232] ? clear_bhb_loop+0x40/0x90 [ 843.176376][T17232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.176391][T17232] RIP: 0033:0x7f38d8f9c799 [ 843.176404][T17232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 843.176418][T17232] RSP: 002b:00007f38d9ec0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 843.176434][T17232] RAX: ffffffffffffffda RBX: 00007f38d9215fa0 RCX: 00007f38d8f9c799 [ 843.176443][T17232] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 843.176452][T17232] RBP: 00007f38d9032c99 R08: 0000000000000002 R09: 0000000000000000 [ 843.176461][T17232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 843.176470][T17232] R13: 00007f38d9216038 R14: 00007f38d9215fa0 R15: 00007fff552feb08 [ 843.176489][T17232] [ 843.176495][T17232] Mem-Info: [ 843.806192][T17173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 843.892871][T17173] veth0_vlan: entered promiscuous mode [ 843.905480][T17173] veth1_vlan: entered promiscuous mode [ 843.946052][T17232] active_anon:40569 inactive_anon:30 isolated_anon:0 [ 843.946052][T17232] active_file:12142 inactive_file:46844 isolated_file:0 [ 843.946052][T17232] unevictable:768 dirty:292 writeback:0 [ 843.946052][T17232] slab_reclaimable:13185 slab_unreclaimable:103272 [ 843.946052][T17232] mapped:39554 shmem:27182 pagetables:1219 [ 843.946052][T17232] sec_pagetables:0 bounce:0 [ 843.946052][T17232] kernel_misc_reclaimable:0 [ 843.946052][T17232] free:1273693 free_pcp:15451 free_cma:0 [ 844.010152][T17173] veth0_macvtap: entered promiscuous mode [ 844.032905][T17173] veth1_macvtap: entered promiscuous mode [ 844.066766][T17173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 844.092223][T17173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 844.121854][T17206] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.130647][T17206] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.154624][T17206] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.177764][T17206] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.210870][T17232] Node 0 active_anon:160884kB inactive_anon:120kB active_file:54712kB inactive_file:187732kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:165828kB dirty:7816kB writeback:0kB shmem:105736kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:28672kB kernel_stack:11680kB pagetables:4744kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 844.285075][T17232] Node 1 active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:284kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:148kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 844.405785][T17232] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 844.458954][T16984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.466974][T16984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.511662][T16968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.519597][T16968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.550091][T17232] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 844.555854][T17232] Node 0 DMA32 free:1154724kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:155892kB inactive_anon:120kB active_file:56376kB inactive_file:187860kB unevictable:1536kB writepending:9592kB zspages:308kB present:3129332kB managed:2537300kB mlocked:0kB bounce:0kB free_pcp:41072kB local_pcp:41072kB free_cma:0kB [ 844.646815][T17232] lowmem_reserve[]: 0 0 1 1 1 [ 844.652629][T17232] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1056kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 844.700048][T17175] Bluetooth: hci2: command tx timeout [ 844.726528][T17232] lowmem_reserve[]: 0 0 0 0 0 [ 844.736737][T17232] Node 1 Normal free:3921052kB boost:0kB min:55584kB low:69480kB high:83376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:284kB unevictable:1536kB writepending:0kB zspages:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18808kB local_pcp:18808kB free_cma:0kB [ 844.812897][T17232] lowmem_reserve[]: 0 0 0 0 0 [ 844.823023][T17232] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 844.851820][T17232] Node 0 DMA32: 8613*4kB (UME) 4695*8kB (UM) 2779*16kB (UME) 578*32kB (UME) 543*64kB (UME) 552*128kB (UME) 555*256kB (UM) 450*512kB (UM) 308*1024kB (UME) 38*2048kB (UM) 37*4096kB (UM) = 1157628kB [ 844.893702][T17232] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 844.917211][T17232] Node 1 Normal: 27*4kB (UM) 30*8kB (UM) 26*16kB (UM) 13*32kB (UM) 10*64kB (UM) 7*128kB (UM) 12*256kB (UM) 9*512kB (UM) 9*1024kB (UM) 1*2048kB (M) 952*4096kB (M) = 3921052kB [ 845.023758][T17232] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 845.056699][T17232] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 845.081104][T17232] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 845.118286][T17232] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 845.146700][T17232] 84856 total pagecache pages [ 845.168138][T17232] 54 pages in swap cache [ 845.172411][T17232] Free swap = 122628kB [ 845.198634][T17232] Total swap = 124996kB [ 845.202799][T17232] 2097051 pages RAM [ 845.206586][T17232] 0 pages HighMem/MovableOnly [ 845.259931][T17232] 430847 pages reserved [ 845.274868][T17232] 0 pages cma reserved [ 846.543200][T17260] random: crng reseeded on system resumption [ 846.772569][T17278] FAULT_INJECTION: forcing a failure. [ 846.772569][T17278] name failslab, interval 1, probability 0, space 0, times 0 [ 846.803996][T17278] CPU: 0 UID: 0 PID: 17278 Comm: syz.1.2411 Tainted: G L syzkaller #0 PREEMPT(full) [ 846.804024][T17278] Tainted: [L]=SOFTLOCKUP [ 846.804030][T17278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 846.804039][T17278] Call Trace: [ 846.804046][T17278] [ 846.804061][T17278] dump_stack_lvl+0x100/0x190 [ 846.804090][T17278] should_fail_ex.cold+0x5/0xa [ 846.804110][T17278] ? __register_sysctl_table+0xbe4/0x1650 [ 846.804127][T17278] should_failslab+0xc2/0x120 [ 846.804145][T17278] __kmalloc_noprof+0xe0/0x850 [ 846.804171][T17278] __register_sysctl_table+0xbe4/0x1650 [ 846.804191][T17278] ? __pfx___register_sysctl_table+0x10/0x10 [ 846.804214][T17278] ? is_module_address+0x69/0xf0 [ 846.804237][T17278] ? register_net_sysctl_sz+0x222/0x430 [ 846.804332][T17278] ? __asan_memcpy+0x3c/0x60 [ 846.804357][T17278] sysctl_core_net_init+0xe6/0x290 [ 846.804379][T17278] ? __pfx_sysctl_core_net_init+0x10/0x10 [ 846.804398][T17278] ops_init+0x1e2/0x5f0 [ 846.804415][T17278] setup_net+0x118/0x3a0 [ 846.804430][T17278] ? __pfx_setup_net+0x10/0x10 [ 846.804443][T17278] ? lockdep_init_map_type+0x5c/0x250 [ 846.804465][T17278] ? mutex_init_lockep+0x110/0x150 [ 846.804489][T17278] copy_net_ns+0x46f/0x7c0 [ 846.804507][T17278] create_new_namespaces+0x3ea/0xac0 [ 846.804528][T17278] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 846.804546][T17278] ksys_unshare+0x473/0xad0 [ 846.804565][T17278] ? native_tss_update_io_bitmap+0x3d6/0x740 [ 846.804590][T17278] ? __pfx_ksys_unshare+0x10/0x10 [ 846.804616][T17278] __x64_sys_unshare+0x31/0x40 [ 846.804634][T17278] do_syscall_64+0x106/0xf80 [ 846.804649][T17278] ? clear_bhb_loop+0x40/0x90 [ 846.804667][T17278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.804683][T17278] RIP: 0033:0x7f99b019c799 [ 846.804697][T17278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 846.804712][T17278] RSP: 002b:00007f99b111b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 846.804727][T17278] RAX: ffffffffffffffda RBX: 00007f99b0415fa0 RCX: 00007f99b019c799 [ 846.804738][T17278] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 846.804747][T17278] RBP: 00007f99b0232c99 R08: 0000000000000000 R09: 0000000000000000 [ 846.804757][T17278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 846.804766][T17278] R13: 00007f99b0416038 R14: 00007f99b0415fa0 R15: 00007ffe0f032258 [ 846.804786][T17278] [ 846.804794][T17278] sysctl could not get directory: /net/core -12 [ 847.304950][T10128] Process accounting paused [ 847.624730][T16986] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 847.636149][T16986] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 847.657594][T16986] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 847.672621][T16986] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 847.682236][T16986] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 848.854606][T17286] chnl_net:caif_netlink_parms(): no params data found [ 849.145661][T17286] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.187688][T17286] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.222556][T17286] bridge_slave_0: entered allmulticast mode [ 849.250221][T17286] bridge_slave_0: entered promiscuous mode [ 849.288411][T17286] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.323794][T17286] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.359776][T17286] bridge_slave_1: entered allmulticast mode [ 849.389319][T17286] bridge_slave_1: entered promiscuous mode [ 849.533556][T17286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 849.586229][T17286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 849.690000][T17286] team0: Port device team_slave_0 added [ 849.744656][T16986] Bluetooth: hci0: command tx timeout [ 849.763436][T17286] team0: Port device team_slave_1 added [ 849.892922][T17286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.931358][T17286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.054068][T17286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.122250][T17286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.154592][T17286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.280463][T17286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.496776][T17286] hsr_slave_0: entered promiscuous mode [ 850.531314][T17286] hsr_slave_1: entered promiscuous mode [ 850.555590][T17286] debugfs: 'hsr0' already exists in 'hsr' [ 850.584117][T17286] Cannot create hsr debugfs directory [ 851.822308][T16986] Bluetooth: hci0: command tx timeout [ 851.829471][T17286] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 851.899961][T17286] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 851.951574][T17286] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 851.996476][T17286] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 852.362927][T17286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 852.445048][T17286] 8021q: adding VLAN 0 to HW filter on device team0 [ 852.494891][T16972] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.502057][T16972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 852.594804][T16968] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.601975][T16968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 852.882590][T17378] random: crng reseeded on system resumption [ 853.285711][T17286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 853.904166][T16986] Bluetooth: hci0: command tx timeout [ 854.113018][T17286] veth0_vlan: entered promiscuous mode [ 854.151269][T17286] veth1_vlan: entered promiscuous mode [ 854.271050][T17286] veth0_macvtap: entered promiscuous mode [ 854.309396][T17286] veth1_macvtap: entered promiscuous mode [ 854.379624][T17286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 854.434946][T17286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 854.485420][T16968] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.514638][T16968] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.572284][T16968] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.637445][T16968] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.053114][T16971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.090279][T16971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.216126][T16968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.240545][T16968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.984001][T16986] Bluetooth: hci0: command tx timeout [ 856.197824][T17429] __vm_enough_memory: pid: 17429, comm: syz.4.2436, bytes: 4398046511104 not enough memory for the allocation [ 857.305270][T17175] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 857.314417][T17175] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 857.322221][T17175] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 857.330895][T17175] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 857.346881][T17175] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 858.088719][T17463] FAULT_INJECTION: forcing a failure. [ 858.088719][T17463] name fail_futex, interval 1, probability 0, space 0, times 0 [ 858.137772][T17463] CPU: 0 UID: 0 PID: 17463 Comm: syz.4.2444 Tainted: G L syzkaller #0 PREEMPT(full) [ 858.137799][T17463] Tainted: [L]=SOFTLOCKUP [ 858.137805][T17463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 858.137815][T17463] Call Trace: [ 858.137821][T17463] [ 858.137828][T17463] dump_stack_lvl+0x100/0x190 [ 858.137856][T17463] should_fail_ex.cold+0x5/0xa [ 858.137876][T17463] get_futex_key+0x1d2/0x1620 [ 858.137897][T17463] ? __pfx_get_futex_key+0x10/0x10 [ 858.137913][T17463] ? do_syscall_64+0x106/0xf80 [ 858.137935][T17463] futex_wake+0xea/0x530 [ 858.137958][T17463] ? __pfx_futex_wake+0x10/0x10 [ 858.137982][T17463] ? __lock_acquire+0x4a5/0x2630 [ 858.138007][T17463] do_futex+0x32b/0x350 [ 858.138026][T17463] ? __pfx_do_futex+0x10/0x10 [ 858.138047][T17463] ? find_held_lock+0x2b/0x80 [ 858.138074][T17463] __x64_sys_futex+0x34f/0x4d0 [ 858.138099][T17463] ? __pfx___x64_sys_futex+0x10/0x10 [ 858.138122][T17463] ? safesetid_task_fix_setgid+0x70/0x220 [ 858.138152][T17463] do_syscall_64+0x106/0xf80 [ 858.138166][T17463] ? clear_bhb_loop+0x40/0x90 [ 858.138184][T17463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.138200][T17463] RIP: 0033:0x7f19a6f9c799 [ 858.138213][T17463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 858.138228][T17463] RSP: 002b:00007f19a7d8f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 858.138243][T17463] RAX: ffffffffffffffda RBX: 00007f19a7215fa8 RCX: 00007f19a6f9c799 [ 858.138254][T17463] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f19a7215fac [ 858.138263][T17463] RBP: 00007f19a7215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 858.138272][T17463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 858.138282][T17463] R13: 00007f19a7216038 R14: 00007ffcb15d4cc0 R15: 00007ffcb15d4da8 [ 858.138302][T17463] [ 858.142673][T17449] chnl_net:caif_netlink_parms(): no params data found [ 859.226170][T17477] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 859.275186][T17477] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 859.426214][T17175] Bluetooth: hci5: command tx timeout [ 859.489225][T17449] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.533689][T17449] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.565775][T17449] bridge_slave_0: entered allmulticast mode [ 859.597264][T17449] bridge_slave_0: entered promiscuous mode [ 859.626581][T17449] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.659144][T17449] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.699277][T17449] bridge_slave_1: entered allmulticast mode [ 859.738705][T17449] bridge_slave_1: entered promiscuous mode [ 859.904801][T17449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 859.953916][T17449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 860.135546][T17449] team0: Port device team_slave_0 added [ 860.254154][T17449] team0: Port device team_slave_1 added [ 860.502070][T17449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 860.532785][T17449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 860.642000][T17449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 860.685049][T17449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 860.712752][T17449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 860.795811][T17449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 860.956733][T17449] hsr_slave_0: entered promiscuous mode [ 860.983290][T17449] hsr_slave_1: entered promiscuous mode [ 861.036476][T17449] debugfs: 'hsr0' already exists in 'hsr' [ 861.053000][T17449] Cannot create hsr debugfs directory [ 861.335337][T17503] FAULT_INJECTION: forcing a failure. [ 861.335337][T17503] name failslab, interval 1, probability 0, space 0, times 0 [ 861.474239][T17503] CPU: 0 UID: 0 PID: 17503 Comm: syz.1.2451 Tainted: G L syzkaller #0 PREEMPT(full) [ 861.474280][T17503] Tainted: [L]=SOFTLOCKUP [ 861.474286][T17503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 861.474296][T17503] Call Trace: [ 861.474302][T17503] [ 861.474308][T17503] dump_stack_lvl+0x100/0x190 [ 861.474338][T17503] should_fail_ex.cold+0x5/0xa [ 861.474358][T17503] should_failslab+0xc2/0x120 [ 861.474376][T17503] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 861.474398][T17503] ? acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 861.474492][T17503] ? acpi_ut_trace+0x1d7/0x2a0 [ 861.474538][T17503] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 861.474557][T17503] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 861.474576][T17503] acpi_ut_create_integer_object+0x46/0xe0 [ 861.474617][T17503] acpi_ex_read_data_from_field+0x146/0xd40 [ 861.474675][T17503] ? acpi_ut_ptr_exit+0x10c/0x180 [ 861.474694][T17503] ? acpi_ut_value_exit+0x10d/0x190 [ 861.474716][T17503] acpi_ex_resolve_node_to_value+0x6b8/0x9a0 [ 861.474742][T17503] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 861.474767][T17503] ? acpi_ds_create_operand+0x267/0xc20 [ 861.474810][T17503] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 861.474838][T17503] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 861.474868][T17503] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 861.474909][T17503] ? acpi_ut_track_stack_ptr+0x114/0x180 [ 861.474933][T17503] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 861.474953][T17503] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 861.474972][T17503] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 861.474990][T17503] ? acpi_ut_trace_ptr+0x1c1/0x2a0 [ 861.475012][T17503] acpi_ds_exec_end_op+0xb78/0x1e60 [ 861.475032][T17503] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 861.475049][T17503] acpi_ps_parse_loop+0x5dd/0x24a0 [ 861.475072][T17503] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 861.475090][T17503] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 861.475112][T17503] ? acpi_ut_create_thread_state+0x6d/0x170 [ 861.475137][T17503] acpi_ps_parse_aml+0x81e/0x1120 [ 861.475161][T17503] acpi_ps_execute_method+0x5c4/0xe90 [ 861.475186][T17503] acpi_ns_evaluate+0x640/0x1670 [ 861.475212][T17503] acpi_evaluate_object+0x420/0xe00 [ 861.475227][T17503] ? kasan_save_stack+0x30/0x50 [ 861.475241][T17503] ? kasan_save_track+0x14/0x30 [ 861.475258][T17503] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 861.475281][T17503] acpi_evaluate_integer+0xdf/0x220 [ 861.475340][T17503] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 861.475371][T17503] ? __pfx_status_show+0x10/0x10 [ 861.475409][T17503] status_show+0xa0/0x120 [ 861.475425][T17503] ? __pfx_status_show+0x10/0x10 [ 861.475447][T17503] dev_attr_show+0x52/0xa0 [ 861.475495][T17503] ? __pfx_dev_attr_show+0x10/0x10 [ 861.475515][T17503] sysfs_kf_seq_show+0x217/0x3a0 [ 861.475540][T17503] seq_read_iter+0x32f/0x1270 [ 861.475572][T17503] kernfs_fop_read_iter+0x46c/0x610 [ 861.475590][T17503] ? rw_verify_area+0xce/0x6d0 [ 861.475612][T17503] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 861.475631][T17503] vfs_read+0x825/0xb30 [ 861.475648][T17503] ? __pfx_vfs_read+0x10/0x10 [ 861.475675][T17503] ksys_read+0x12a/0x250 [ 861.475690][T17503] ? __pfx_ksys_read+0x10/0x10 [ 861.475710][T17503] do_syscall_64+0x106/0xf80 [ 861.475725][T17503] ? clear_bhb_loop+0x40/0x90 [ 861.475744][T17503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.475761][T17503] RIP: 0033:0x7f99b019c799 [ 861.475776][T17503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 861.475792][T17503] RSP: 002b:00007f99b10fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 861.475808][T17503] RAX: ffffffffffffffda RBX: 00007f99b0416090 RCX: 00007f99b019c799 [ 861.475824][T17503] RDX: 000000000000007a RSI: 0000200000000240 RDI: 0000000000000006 [ 861.475833][T17503] RBP: 00007f99b0232c99 R08: 0000000000000000 R09: 0000000000000000 [ 861.475846][T17503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 861.475863][T17503] R13: 00007f99b0416128 R14: 00007f99b0416090 R15: 00007ffe0f032258 [ 861.475885][T17503] [ 861.926078][T17175] Bluetooth: hci5: command tx timeout [ 862.467815][T17516] zero sized request [ 862.478529][T17449] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.647235][T17516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2455'. [ 862.687879][T17449] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.784831][T17449] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.133516][T17449] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 863.195684][T17449] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 863.230882][T17449] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 863.278400][T17449] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 863.558445][T17449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 863.607558][T17449] 8021q: adding VLAN 0 to HW filter on device team0 [ 863.631068][ T30] audit: type=1807 audit(4294973535.449:15): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 863.659004][T16968] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.666181][T16968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 863.707782][ T30] audit: type=1802 audit(4294973535.469:16): pid=17514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.2454" res=0 errno=0 [ 863.768155][T16972] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.775285][T16972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 863.996207][T17175] Bluetooth: hci5: command tx timeout [ 864.359262][T17503] ACPI Error: Could not allocate an object descriptor (20251212/utobject-180) [ 864.373242][T17449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 864.461119][T17503] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20251212/psparse-529) [ 864.516852][T17449] veth0_vlan: entered promiscuous mode [ 864.567443][T17449] veth1_vlan: entered promiscuous mode [ 864.662092][T17449] veth0_macvtap: entered promiscuous mode [ 864.741696][T17449] veth1_macvtap: entered promiscuous mode [ 864.794276][T17449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 864.845850][T17449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 864.929917][T17206] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.950662][T17206] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.977518][T17512] ima: policy update failed [ 865.063894][ T30] audit: type=1802 audit(4294973536.878:17): pid=17512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.2454" res=0 errno=0 [ 865.266355][T17206] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.378261][T17206] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.598141][T17408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.619704][T17408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.689237][T16971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.697050][T16971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.076443][T17175] Bluetooth: hci5: command tx timeout [ 869.291551][T17634] FAULT_INJECTION: forcing a failure. [ 869.291551][T17634] name failslab, interval 1, probability 0, space 0, times 0 [ 869.310452][T17635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2481'. [ 869.345019][T17634] CPU: 0 UID: 0 PID: 17634 Comm: syz.2.2480 Tainted: G L syzkaller #0 PREEMPT(full) [ 869.345048][T17634] Tainted: [L]=SOFTLOCKUP [ 869.345054][T17634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 869.345064][T17634] Call Trace: [ 869.345070][T17634] [ 869.345078][T17634] dump_stack_lvl+0x100/0x190 [ 869.345113][T17634] should_fail_ex.cold+0x5/0xa [ 869.345136][T17634] should_failslab+0xc2/0x120 [ 869.345161][T17634] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 869.345189][T17634] ? dup_fd+0x4d/0xd10 [ 869.345204][T17634] ? trace_kmalloc+0x101/0x130 [ 869.345228][T17634] dup_fd+0x4d/0xd10 [ 869.345247][T17634] ? apparmor_task_alloc+0x2c1/0x3b0 [ 869.345266][T17634] copy_process+0x268f/0x7a40 [ 869.345294][T17634] ? __pfx_copy_process+0x10/0x10 [ 869.345326][T17634] kernel_clone+0xfc/0x9a0 [ 869.345348][T17634] ? __pfx_futex_wait+0x10/0x10 [ 869.345372][T17634] ? __pfx_kernel_clone+0x10/0x10 [ 869.345401][T17634] __do_sys_clone+0xd9/0x120 [ 869.345420][T17634] ? __pfx___do_sys_clone+0x10/0x10 [ 869.345454][T17634] do_syscall_64+0x106/0xf80 [ 869.345468][T17634] ? clear_bhb_loop+0x40/0x90 [ 869.345488][T17634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.345503][T17634] RIP: 0033:0x7f38d8f9c799 [ 869.345517][T17634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 869.345533][T17634] RSP: 002b:00007f38d9ec0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 869.345548][T17634] RAX: ffffffffffffffda RBX: 00007f38d9215fa0 RCX: 00007f38d8f9c799 [ 869.345559][T17634] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 869.345567][T17634] RBP: 00007f38d9032c99 R08: 0000000000000002 R09: 0000000000000000 [ 869.345577][T17634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 869.345586][T17634] R13: 00007f38d9216038 R14: 00007f38d9215fa0 R15: 00007fff552feb08 [ 869.345605][T17634] [ 870.621420][T17647] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 871.042215][T17647] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 871.186015][T17647] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 871.391719][T17647] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 871.443197][T17647] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 871.486903][T17647] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 871.518755][T17647] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 871.552620][T17647] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 871.573747][T17647] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 871.595935][T17647] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 871.622106][T17647] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 871.634649][T17647] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 871.655680][T17647] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 872.632711][T17175] Bluetooth: hci4: command 0x0c1a tx timeout [ 872.638767][T17175] Bluetooth: hci1: command 0x0406 tx timeout [ 872.962062][T17705] FAULT_INJECTION: forcing a failure. [ 872.962062][T17705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 873.022728][T17705] CPU: 0 UID: 0 PID: 17705 Comm: syz.0.2493 Tainted: G L syzkaller #0 PREEMPT(full) [ 873.022754][T17705] Tainted: [L]=SOFTLOCKUP [ 873.022759][T17705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 873.022768][T17705] Call Trace: [ 873.022774][T17705] [ 873.022780][T17705] dump_stack_lvl+0x100/0x190 [ 873.022807][T17705] should_fail_ex.cold+0x5/0xa [ 873.022825][T17705] _copy_from_user+0x2e/0xd0 [ 873.022847][T17705] memdup_user+0x6b/0xe0 [ 873.022861][T17705] nvram_misc_write+0x92/0xf0 [ 873.022882][T17705] vfs_write+0x2aa/0x1070 [ 873.022898][T17705] ? __pfx_nvram_misc_write+0x10/0x10 [ 873.022914][T17705] ? __pfx_vfs_write+0x10/0x10 [ 873.022926][T17705] ? find_held_lock+0x2b/0x80 [ 873.022940][T17705] ? __fget_files+0x215/0x3d0 [ 873.022954][T17705] ? __fget_files+0x215/0x3d0 [ 873.022971][T17705] ? __fget_files+0x21f/0x3d0 [ 873.022990][T17705] ksys_write+0x12a/0x250 [ 873.023004][T17705] ? __pfx_ksys_write+0x10/0x10 [ 873.023023][T17705] do_syscall_64+0x106/0xf80 [ 873.023038][T17705] ? clear_bhb_loop+0x40/0x90 [ 873.023056][T17705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.023070][T17705] RIP: 0033:0x7f385ff9c799 [ 873.023083][T17705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 873.023097][T17705] RSP: 002b:00007f3860dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 873.023112][T17705] RAX: ffffffffffffffda RBX: 00007f3860215fa0 RCX: 00007f385ff9c799 [ 873.023121][T17705] RDX: 0000000000200007 RSI: 0000000000000000 RDI: 0000000000000003 [ 873.023130][T17705] RBP: 00007f3860dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 873.023139][T17705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 873.023147][T17705] R13: 00007f3860216038 R14: 00007f3860215fa0 R15: 00007ffdd2caa878 [ 873.023166][T17705] [ 873.289385][T17709] : Can't lookup blockdev [ 873.552642][T17175] Bluetooth: hci2: command 0x0c1a tx timeout [ 873.622100][T17175] Bluetooth: hci0: command 0x0c1a tx timeout [ 873.691537][T17175] Bluetooth: hci5: command 0x0c1a tx timeout [ 874.424898][T17731] FAULT_INJECTION: forcing a failure. [ 874.424898][T17731] name fail_futex, interval 1, probability 0, space 0, times 0 [ 874.493810][T17731] CPU: 0 UID: 0 PID: 17731 Comm: syz.4.2498 Tainted: G L syzkaller #0 PREEMPT(full) [ 874.493838][T17731] Tainted: [L]=SOFTLOCKUP [ 874.493844][T17731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 874.493854][T17731] Call Trace: [ 874.493863][T17731] [ 874.493869][T17731] dump_stack_lvl+0x100/0x190 [ 874.493897][T17731] should_fail_ex.cold+0x5/0xa [ 874.493917][T17731] get_futex_key+0x1d2/0x1620 [ 874.493938][T17731] ? __pfx_get_futex_key+0x10/0x10 [ 874.493957][T17731] ? update_se+0x94/0x760 [ 874.493980][T17731] futex_wait_setup+0x83/0x510 [ 874.494009][T17731] __futex_wait+0x19f/0x300 [ 874.494032][T17731] ? __pfx___futex_wait+0x10/0x10 [ 874.494058][T17731] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 874.494081][T17731] ? lockdep_hardirqs_on+0x78/0x100 [ 874.494107][T17731] ? __pfx_futex_wake_mark+0x10/0x10 [ 874.494133][T17731] ? find_held_lock+0x2b/0x80 [ 874.494148][T17731] ? futex_wake+0x456/0x530 [ 874.494175][T17731] futex_wait+0xed/0x380 [ 874.494198][T17731] ? __pfx_futex_wait+0x10/0x10 [ 874.494230][T17731] do_futex+0x1ef/0x350 [ 874.494249][T17731] ? __pfx_do_futex+0x10/0x10 [ 874.494267][T17731] ? __mm_populate+0x33a/0x3a0 [ 874.494285][T17731] ? __pfx_apply_mlockall_flags.isra.0+0x10/0x10 [ 874.494312][T17731] __x64_sys_futex+0x34f/0x4d0 [ 874.494333][T17731] ? __pfx___x64_sys_futex+0x10/0x10 [ 874.494360][T17731] do_syscall_64+0x106/0xf80 [ 874.494374][T17731] ? clear_bhb_loop+0x40/0x90 [ 874.494392][T17731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.494408][T17731] RIP: 0033:0x7f19a6f9c799 [ 874.494422][T17731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 874.494437][T17731] RSP: 002b:00007f19a7d8f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 874.494452][T17731] RAX: ffffffffffffffda RBX: 00007f19a7215fa8 RCX: 00007f19a6f9c799 [ 874.494463][T17731] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f19a7215fa8 [ 874.494472][T17731] RBP: 00007f19a7215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 874.494481][T17731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 874.494490][T17731] R13: 00007f19a7216038 R14: 00007ffcb15d4cc0 R15: 00007ffcb15d4da8 [ 874.494511][T17731] [ 874.966127][T17175] Bluetooth: hci4: command 0x0c1a tx timeout [ 874.986575][T17740] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 875.050342][T17739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2500'. [ 875.097286][T17743] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.16.0), cmd(12) [ 875.423281][T17755] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 875.593599][T16986] Bluetooth: hci2: command 0x0c1a tx timeout [ 875.727806][T17175] Bluetooth: hci0: command 0x0c1a tx timeout [ 875.756090][T16986] Bluetooth: hci5: command 0x0c1a tx timeout [ 877.033953][T16986] Bluetooth: hci4: command 0x0c1a tx timeout [ 877.196683][T17786] futex_wake_op: syz.2.2508 tries to shift op by -2048; fix this program [ 877.690833][T16986] Bluetooth: hci2: command 0x0c1a tx timeout [ 877.754419][T16986] Bluetooth: hci0: command 0x0c1a tx timeout [ 877.838794][T16986] Bluetooth: hci5: command 0x0c1a tx timeout [ 881.644137][T17851] FAULT_INJECTION: forcing a failure. [ 881.644137][T17851] name failslab, interval 1, probability 0, space 0, times 0 [ 881.657636][T17851] CPU: 1 UID: 0 PID: 17851 Comm: syz.4.2523 Tainted: G L syzkaller #0 PREEMPT(full) [ 881.657684][T17851] Tainted: [L]=SOFTLOCKUP [ 881.657696][T17851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 881.657715][T17851] Call Trace: [ 881.657726][T17851] [ 881.657738][T17851] dump_stack_lvl+0x100/0x190 [ 881.657788][T17851] should_fail_ex.cold+0x5/0xa [ 881.657825][T17851] should_failslab+0xc2/0x120 [ 881.657858][T17851] __kmalloc_cache_noprof+0x7a/0x6f0 [ 881.657899][T17851] ? alloc_fdtable+0xbd/0x2d0 [ 881.657933][T17851] ? find_held_lock+0x2b/0x80 [ 881.657962][T17851] ? dup_fd+0x924/0xd10 [ 881.657997][T17851] alloc_fdtable+0xbd/0x2d0 [ 881.658028][T17851] dup_fd+0x995/0xd10 [ 881.658064][T17851] ? apparmor_task_alloc+0x2c1/0x3b0 [ 881.658099][T17851] copy_process+0x268f/0x7a40 [ 881.658135][T17851] ? preempt_schedule_thunk+0x16/0x30 [ 881.658189][T17851] ? __pfx_copy_process+0x10/0x10 [ 881.658224][T17851] ? find_held_lock+0x2b/0x80 [ 881.658259][T17851] ? futex_private_hash_put+0x107/0x1c0 [ 881.658302][T17851] kernel_clone+0xfc/0x9a0 [ 881.658339][T17851] ? __pfx_kernel_clone+0x10/0x10 [ 881.658392][T17851] __do_sys_clone+0xd9/0x120 [ 881.658427][T17851] ? __pfx___do_sys_clone+0x10/0x10 [ 881.658490][T17851] do_syscall_64+0x106/0xf80 [ 881.658518][T17851] ? clear_bhb_loop+0x40/0x90 [ 881.658553][T17851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.658583][T17851] RIP: 0033:0x7f19a6f9c799 [ 881.658607][T17851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 881.658636][T17851] RSP: 002b:00007f19a7d8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 881.658664][T17851] RAX: ffffffffffffffda RBX: 00007f19a7215fa0 RCX: 00007f19a6f9c799 [ 881.658684][T17851] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 881.658701][T17851] RBP: 00007f19a7032c99 R08: 0000000000000002 R09: 0000000000000000 [ 881.658719][T17851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 881.658737][T17851] R13: 00007f19a7216038 R14: 00007f19a7215fa0 R15: 00007ffcb15d4da8 [ 881.658776][T17851] [ 883.519813][T17900] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 885.172744][T17926] ovs_: entered promiscuous mode [ 885.512461][T17931] zswap: compressor û not available [ 885.578372][T17937] Setting dangerous option i915.mitigations - tainting kernel [ 886.209465][T17955] netlink: 93 bytes leftover after parsing attributes in process `syz.1.2544'. [ 886.210537][T17953] netlink: 93 bytes leftover after parsing attributes in process `syz.1.2544'. [ 886.649654][T17963] nvme_fcloop: unknown parameter or missing value '7' [ 886.940265][T17973] random: crng reseeded on system resumption [ 887.066632][T17971] zswap: compressor not available [ 887.361662][T17992] FAULT_INJECTION: forcing a failure. [ 887.361662][T17992] name failslab, interval 1, probability 0, space 0, times 0 [ 887.427171][T17992] CPU: 1 UID: 0 PID: 17992 Comm: syz.1.2552 Tainted: G U L syzkaller #0 PREEMPT(full) [ 887.427222][T17992] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 887.427234][T17992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 887.427252][T17992] Call Trace: [ 887.427262][T17992] [ 887.427274][T17992] dump_stack_lvl+0x100/0x190 [ 887.427324][T17992] should_fail_ex.cold+0x5/0xa [ 887.427360][T17992] should_failslab+0xc2/0x120 [ 887.427394][T17992] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 887.427438][T17992] ? shmem_alloc_inode+0x25/0x50 [ 887.427474][T17992] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 887.427511][T17992] shmem_alloc_inode+0x25/0x50 [ 887.427544][T17992] alloc_inode+0x68/0x250 [ 887.427590][T17992] new_inode+0x22/0x1c0 [ 887.427631][T17992] shmem_get_inode+0x212/0x1040 [ 887.427675][T17992] ? __pfx_shmem_get_inode+0x10/0x10 [ 887.427714][T17992] ? d_add+0x443/0x850 [ 887.427752][T17992] ? do_raw_spin_unlock+0x145/0x1e0 [ 887.427803][T17992] shmem_mknod+0x20c/0x470 [ 887.427842][T17992] ? __pfx_shmem_mknod+0x10/0x10 [ 887.427877][T17992] ? bpf_lsm_inode_create+0x9/0x10 [ 887.427925][T17992] ? __pfx_shmem_create+0x10/0x10 [ 887.427973][T17992] lookup_open.isra.0+0xc47/0x11b0 [ 887.428027][T17992] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 887.428075][T17992] ? __pfx___might_resched+0x10/0x10 [ 887.428117][T17992] ? mnt_get_write_access+0x52/0x2f0 [ 887.428162][T17992] ? __pfx_down_write+0x10/0x10 [ 887.428194][T17992] ? mnt_get_write_access+0x1e9/0x2f0 [ 887.428234][T17992] path_openat+0x2291/0x31a0 [ 887.428269][T17992] ? entry_SYSCALL_64_after_hwframe+0x48/0x7f [ 887.428307][T17992] ? __pfx_path_openat+0x10/0x10 [ 887.428353][T17992] do_file_open+0x20e/0x430 [ 887.428389][T17992] ? __pfx_do_file_open+0x10/0x10 [ 887.428446][T17992] ? _raw_spin_unlock+0x28/0x50 [ 887.428484][T17992] ? alloc_fd+0x476/0x790 [ 887.428524][T17992] do_sys_openat2+0x10d/0x1e0 [ 887.428562][T17992] ? __pfx_do_sys_openat2+0x10/0x10 [ 887.428602][T17992] ? __fget_files+0x21f/0x3d0 [ 887.428639][T17992] __x64_sys_open+0xfe/0x1d0 [ 887.428677][T17992] ? __pfx___x64_sys_open+0x10/0x10 [ 887.428729][T17992] do_syscall_64+0x106/0xf80 [ 887.428755][T17992] ? clear_bhb_loop+0x40/0x90 [ 887.428789][T17992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.428819][T17992] RIP: 0033:0x7f99b019c799 [ 887.428844][T17992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 887.428873][T17992] RSP: 002b:00007f99b111b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 887.428903][T17992] RAX: ffffffffffffffda RBX: 00007f99b0415fa0 RCX: 00007f99b019c799 [ 887.428920][T17992] RDX: 0000000000000130 RSI: 0000000000161342 RDI: 0000200000000000 [ 887.428946][T17992] RBP: 00007f99b0232c99 R08: 0000000000000000 R09: 0000000000000000 [ 887.428962][T17992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 887.428978][T17992] R13: 00007f99b0416038 R14: 00007f99b0415fa0 R15: 00007ffe0f032258 [ 887.429012][T17992] [ 888.436181][T18011] FAULT_INJECTION: forcing a failure. [ 888.436181][T18011] name fail_futex, interval 1, probability 0, space 0, times 0 [ 888.449719][T18011] CPU: 0 UID: 0 PID: 18011 Comm: syz.0.2556 Tainted: G U L syzkaller #0 PREEMPT(full) [ 888.449762][T18011] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 888.449771][T18011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 888.449785][T18011] Call Trace: [ 888.449793][T18011] [ 888.449802][T18011] dump_stack_lvl+0x100/0x190 [ 888.449844][T18011] should_fail_ex.cold+0x5/0xa [ 888.449875][T18011] get_futex_key+0x1d2/0x1620 [ 888.449913][T18011] ? __pfx_get_futex_key+0x10/0x10 [ 888.449956][T18011] futex_wake+0xea/0x530 [ 888.449992][T18011] ? __pfx___might_resched+0x10/0x10 [ 888.450031][T18011] ? __pfx_futex_wake+0x10/0x10 [ 888.450072][T18011] ? lockdep_init_map_type+0x5c/0x250 [ 888.450112][T18011] do_futex+0x32b/0x350 [ 888.450145][T18011] ? __pfx_do_futex+0x10/0x10 [ 888.450185][T18011] __x64_sys_futex+0x34f/0x4d0 [ 888.450220][T18011] ? fd_install+0x223/0x580 [ 888.450246][T18011] ? __pfx___x64_sys_futex+0x10/0x10 [ 888.450302][T18011] do_syscall_64+0x106/0xf80 [ 888.450328][T18011] ? clear_bhb_loop+0x40/0x90 [ 888.450359][T18011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.450385][T18011] RIP: 0033:0x7f385ff9c799 [ 888.450407][T18011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.450432][T18011] RSP: 002b:00007f3860d930e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 888.450457][T18011] RAX: ffffffffffffffda RBX: 00007f3860216188 RCX: 00007f385ff9c799 [ 888.450475][T18011] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f386021618c [ 888.450492][T18011] RBP: 00007f3860216180 R08: 0000000000000000 R09: 0000000000000000 [ 888.450509][T18011] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 888.450525][T18011] R13: 00007f3860216218 R14: 00007ffdd2caa790 R15: 00007ffdd2caa878 [ 888.450561][T18011] [ 889.093616][T18030] zswap: compressor  not available [ 890.864793][T18077] netlink: 98 bytes leftover after parsing attributes in process `syz.1.2570'. [ 892.314442][T18093] sp0: Synchronizing with TNC [ 893.373111][T18117] zswap: compressor  not available [ 893.966870][T18133] FAULT_INJECTION: forcing a failure. [ 893.966870][T18133] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 894.060081][T18133] CPU: 0 UID: 0 PID: 18133 Comm: syz.1.2586 Tainted: G U L syzkaller #0 PREEMPT(full) [ 894.060132][T18133] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 894.060142][T18133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 894.060158][T18133] Call Trace: [ 894.060168][T18133] [ 894.060179][T18133] dump_stack_lvl+0x100/0x190 [ 894.060226][T18133] should_fail_ex.cold+0x5/0xa [ 894.060257][T18133] ? prepare_alloc_pages+0x16d/0x5f0 [ 894.060292][T18133] should_fail_alloc_page+0xeb/0x140 [ 894.060324][T18133] prepare_alloc_pages+0x1f0/0x5f0 [ 894.060361][T18133] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 894.060405][T18133] ? rcu_is_watching+0x12/0xc0 [ 894.060447][T18133] ? trace_mm_page_alloc+0x17a/0x1d0 [ 894.060482][T18133] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 894.060529][T18133] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 894.060570][T18133] ? stack_trace_save+0x8e/0xc0 [ 894.060603][T18133] ? stack_depot_save_flags+0x27/0x9d0 [ 894.060641][T18133] ? is_bpf_text_address+0x8a/0x1a0 [ 894.060685][T18133] ? is_bpf_text_address+0x8a/0x1a0 [ 894.060731][T18133] ? kasan_save_stack+0x3f/0x50 [ 894.060753][T18133] ? kasan_save_track+0x14/0x30 [ 894.060777][T18133] ? kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 894.060818][T18133] ? alloc_vmap_area+0x186c/0x2bd0 [ 894.060846][T18133] ? __get_vm_area_node+0x1ca/0x330 [ 894.060876][T18133] ? __vmalloc_node_range_noprof+0x213/0x1530 [ 894.060920][T18133] ? __vmalloc_node_noprof+0xad/0xf0 [ 894.060950][T18133] ? copy_process+0x5ec/0x7a40 [ 894.060979][T18133] ? kernel_clone+0xfc/0x9a0 [ 894.061007][T18133] ? __do_sys_clone+0xd9/0x120 [ 894.061035][T18133] ? do_syscall_64+0x106/0xf80 [ 894.061070][T18133] alloc_pages_bulk_noprof+0x782/0x1490 [ 894.061119][T18133] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 894.061172][T18133] ? alloc_pages_noprof+0x233/0x390 [ 894.061207][T18133] __kasan_populate_vmalloc+0xf0/0x210 [ 894.061256][T18133] alloc_vmap_area+0x95d/0x2bd0 [ 894.061302][T18133] ? __pfx_alloc_vmap_area+0x10/0x10 [ 894.061344][T18133] __get_vm_area_node+0x1ca/0x330 [ 894.061383][T18133] __vmalloc_node_range_noprof+0x213/0x1530 [ 894.061416][T18133] ? kernel_clone+0xfc/0x9a0 [ 894.061444][T18133] ? find_held_lock+0x2b/0x80 [ 894.061471][T18133] ? local_lock_release+0x99/0x130 [ 894.061502][T18133] ? local_lock_release+0x99/0x130 [ 894.061540][T18133] ? kernel_clone+0xfc/0x9a0 [ 894.061574][T18133] ? find_held_lock+0x2b/0x80 [ 894.061601][T18133] ? rcu_read_unlock+0x17/0x60 [ 894.061631][T18133] ? rcu_read_unlock+0x17/0x60 [ 894.061662][T18133] ? obj_cgroup_charge_account+0x46d/0x640 [ 894.061696][T18133] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 894.061732][T18133] ? __memcg_slab_post_alloc_hook+0x51b/0x990 [ 894.061766][T18133] ? rcu_is_watching+0x12/0xc0 [ 894.061807][T18133] ? trace_kmem_cache_alloc+0xf3/0x120 [ 894.061839][T18133] ? kernel_clone+0xfc/0x9a0 [ 894.061867][T18133] __vmalloc_node_noprof+0xad/0xf0 [ 894.061905][T18133] ? kernel_clone+0xfc/0x9a0 [ 894.061939][T18133] copy_process+0x5ec/0x7a40 [ 894.061969][T18133] ? preempt_schedule_thunk+0x16/0x30 [ 894.062006][T18133] ? try_to_wake_up+0x644/0x1a80 [ 894.062036][T18133] ? __pfx_copy_process+0x10/0x10 [ 894.062066][T18133] ? find_held_lock+0x2b/0x80 [ 894.062096][T18133] ? futex_private_hash_put+0x107/0x1c0 [ 894.062134][T18133] kernel_clone+0xfc/0x9a0 [ 894.062166][T18133] ? __pfx_kernel_clone+0x10/0x10 [ 894.062214][T18133] __do_sys_clone+0xd9/0x120 [ 894.062246][T18133] ? __pfx___do_sys_clone+0x10/0x10 [ 894.062302][T18133] do_syscall_64+0x106/0xf80 [ 894.062325][T18133] ? clear_bhb_loop+0x40/0x90 [ 894.062356][T18133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.062384][T18133] RIP: 0033:0x7f99b019c799 [ 894.062406][T18133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 894.062433][T18133] RSP: 002b:00007f99b111b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 894.062460][T18133] RAX: ffffffffffffffda RBX: 00007f99b0415fa0 RCX: 00007f99b019c799 [ 894.062479][T18133] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 894.062496][T18133] RBP: 00007f99b0232c99 R08: 0000000000000002 R09: 0000000000000000 [ 894.062514][T18133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 894.062530][T18133] R13: 00007f99b0416038 R14: 00007f99b0415fa0 R15: 00007ffe0f032258 [ 894.062566][T18133] [ 895.008505][T18133] syz.1.2586: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 895.122188][T18133] CPU: 1 UID: 0 PID: 18133 Comm: syz.1.2586 Tainted: G U L syzkaller #0 PREEMPT(full) [ 895.122222][T18133] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 895.122227][T18133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 895.122237][T18133] Call Trace: [ 895.122243][T18133] [ 895.122250][T18133] dump_stack_lvl+0x100/0x190 [ 895.122279][T18133] warn_alloc.cold+0x95/0x1c1 [ 895.122305][T18133] ? __pfx_warn_alloc+0x10/0x10 [ 895.122326][T18133] ? lockdep_hardirqs_on+0x78/0x100 [ 895.122351][T18133] ? __get_vm_area_node+0x2c5/0x330 [ 895.122372][T18133] ? __get_vm_area_node+0x208/0x330 [ 895.122393][T18133] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 895.122412][T18133] ? find_held_lock+0x2b/0x80 [ 895.122427][T18133] ? local_lock_release+0x99/0x130 [ 895.122445][T18133] ? local_lock_release+0x99/0x130 [ 895.122465][T18133] ? kernel_clone+0xfc/0x9a0 [ 895.122483][T18133] ? find_held_lock+0x2b/0x80 [ 895.122497][T18133] ? rcu_read_unlock+0x17/0x60 [ 895.122513][T18133] ? rcu_read_unlock+0x17/0x60 [ 895.122530][T18133] ? obj_cgroup_charge_account+0x46d/0x640 [ 895.122548][T18133] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 895.122569][T18133] ? __memcg_slab_post_alloc_hook+0x51b/0x990 [ 895.122590][T18133] ? rcu_is_watching+0x12/0xc0 [ 895.122612][T18133] ? trace_kmem_cache_alloc+0xf3/0x120 [ 895.122631][T18133] ? kernel_clone+0xfc/0x9a0 [ 895.122648][T18133] __vmalloc_node_noprof+0xad/0xf0 [ 895.122667][T18133] ? kernel_clone+0xfc/0x9a0 [ 895.122686][T18133] copy_process+0x5ec/0x7a40 [ 895.122710][T18133] ? preempt_schedule_thunk+0x16/0x30 [ 895.122744][T18133] ? try_to_wake_up+0x644/0x1a80 [ 895.122775][T18133] ? __pfx_copy_process+0x10/0x10 [ 895.122808][T18133] ? find_held_lock+0x2b/0x80 [ 895.122840][T18133] ? futex_private_hash_put+0x107/0x1c0 [ 895.122875][T18133] kernel_clone+0xfc/0x9a0 [ 895.122908][T18133] ? __pfx_kernel_clone+0x10/0x10 [ 895.122958][T18133] __do_sys_clone+0xd9/0x120 [ 895.122991][T18133] ? __pfx___do_sys_clone+0x10/0x10 [ 895.123056][T18133] do_syscall_64+0x106/0xf80 [ 895.123084][T18133] ? clear_bhb_loop+0x40/0x90 [ 895.123120][T18133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.123151][T18133] RIP: 0033:0x7f99b019c799 [ 895.123178][T18133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 895.123215][T18133] RSP: 002b:00007f99b111b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 895.123243][T18133] RAX: ffffffffffffffda RBX: 00007f99b0415fa0 RCX: 00007f99b019c799 [ 895.123264][T18133] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 895.123281][T18133] RBP: 00007f99b0232c99 R08: 0000000000000002 R09: 0000000000000000 [ 895.123299][T18133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 895.123318][T18133] R13: 00007f99b0416038 R14: 00007f99b0415fa0 R15: 00007ffe0f032258 [ 895.123356][T18133] [ 895.644075][T18133] Mem-Info: [ 895.647236][T18133] active_anon:47075 inactive_anon:1 isolated_anon:0 [ 895.647236][T18133] active_file:12633 inactive_file:47117 isolated_file:0 [ 895.647236][T18133] unevictable:768 dirty:900 writeback:0 [ 895.647236][T18133] slab_reclaimable:13376 slab_unreclaimable:124060 [ 895.647236][T18133] mapped:54618 shmem:29240 pagetables:1289 [ 895.647236][T18133] sec_pagetables:0 bounce:0 [ 895.647236][T18133] kernel_misc_reclaimable:0 [ 895.647236][T18133] free:1226119 free_pcp:20799 free_cma:0 [ 895.930177][T18145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2587'. [ 895.997038][T18133] Node 0 active_anon:192028kB inactive_anon:4kB active_file:50532kB inactive_file:188140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:211680kB dirty:3596kB writeback:0kB shmem:121024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:38912kB kernel_stack:13636kB pagetables:5172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 896.095458][T18133] Node 1 active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:328kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:192kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 896.159620][T18133] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 896.255164][T18133] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 896.260940][T18133] Node 0 DMA32 free:955744kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:194400kB inactive_anon:4kB active_file:50532kB inactive_file:188140kB unevictable:1536kB writepending:3596kB zspages:80kB present:3129332kB managed:2537300kB mlocked:0kB bounce:0kB free_pcp:68096kB local_pcp:35816kB free_cma:0kB [ 896.350188][T18133] lowmem_reserve[]: 0 0 1 1 1 [ 896.364175][T18133] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1056kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 896.487271][T18133] lowmem_reserve[]: 0 0 0 0 0 [ 896.492042][T18133] Node 1 Normal free:3913900kB boost:0kB min:55584kB low:69480kB high:83376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2200kB inactive_anon:4kB active_file:16kB inactive_file:328kB unevictable:1536kB writepending:4kB zspages:8kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:23684kB local_pcp:2708kB free_cma:0kB [ 896.537044][T18152] FAULT_INJECTION: forcing a failure. [ 896.537044][T18152] name failslab, interval 1, probability 0, space 0, times 0 [ 896.596281][T18133] lowmem_reserve[]: 0 0 0 0 0 [ 896.622717][T18133] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 896.674663][T18133] Node 0 DMA32: 663*4kB (UME) 3145*8kB (UME) 2267*16kB (UME) 180*32kB (UME) 65*64kB (UME) 191*128kB (UME) 455*256kB (UME) 355*512kB (UM) 272*1024kB (UME) 12*2048kB (M) 64*4096kB (M) = 961940kB [ 896.683745][T18152] CPU: 0 UID: 0 PID: 18152 Comm: syz.2.2588 Tainted: G U L syzkaller #0 PREEMPT(full) [ 896.683792][T18152] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 896.683804][T18152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 896.683822][T18152] Call Trace: [ 896.683833][T18152] [ 896.683845][T18152] dump_stack_lvl+0x100/0x190 [ 896.683894][T18152] should_fail_ex.cold+0x5/0xa [ 896.683929][T18152] should_failslab+0xc2/0x120 [ 896.683960][T18152] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 896.684002][T18152] ? dup_fd+0x4d/0xd10 [ 896.684031][T18152] ? trace_kmalloc+0x101/0x130 [ 896.684074][T18152] dup_fd+0x4d/0xd10 [ 896.684109][T18152] ? apparmor_task_alloc+0x2c1/0x3b0 [ 896.684144][T18152] copy_process+0x268f/0x7a40 [ 896.684195][T18152] ? __pfx_copy_process+0x10/0x10 [ 896.684230][T18152] ? find_held_lock+0x2b/0x80 [ 896.684272][T18152] kernel_clone+0xfc/0x9a0 [ 896.684302][T18152] ? __pfx_futex_wait+0x10/0x10 [ 896.684346][T18152] ? __pfx_kernel_clone+0x10/0x10 [ 896.684398][T18152] __do_sys_clone+0xd9/0x120 [ 896.684431][T18152] ? __pfx___do_sys_clone+0x10/0x10 [ 896.684494][T18152] do_syscall_64+0x106/0xf80 [ 896.684521][T18152] ? clear_bhb_loop+0x40/0x90 [ 896.684569][T18152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.684599][T18152] RIP: 0033:0x7f38d8f9c799 [ 896.684624][T18152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 896.684652][T18152] RSP: 002b:00007f38d9ec0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 896.684678][T18152] RAX: ffffffffffffffda RBX: 00007f38d9215fa0 RCX: 00007f38d8f9c799 [ 896.684698][T18152] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 896.684714][T18152] RBP: 00007f38d9032c99 R08: 0000000000000002 R09: 0000000000000000 [ 896.684732][T18152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 896.684749][T18152] R13: 00007f38d9216038 R14: 00007f38d9215fa0 R15: 00007fff552feb08 [ 896.684786][T18152] [ 896.900074][T18133] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 897.054107][T18133] Node 1 Normal: 1*4kB (U) 1*8kB (U) 6*16kB (U) 16*32kB (UM) 13*64kB (UM) 8*128kB (UM) 11*256kB (UM) 8*512kB (UM) 9*1024kB (UM) 2*2048kB (UM) 950*4096kB (M) = 3913900kB [ 897.144017][T18133] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 897.194114][T18133] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 897.258671][T18133] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 897.294066][T18133] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 897.313277][T18133] 82485 total pagecache pages [ 897.321779][T18133] 74 pages in swap cache [ 897.404023][T18133] Free swap = 122484kB [ 897.414188][T18133] Total swap = 124996kB [ 897.427777][T18133] 2097051 pages RAM [ 897.441901][T18133] 0 pages HighMem/MovableOnly [ 897.454009][T18133] 430847 pages reserved [ 897.466733][T18133] 0 pages cma reserved [ 897.584000][T18161] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 897.949374][T18170] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.16.0), cmd(12) [ 898.030903][T18171] FAULT_INJECTION: forcing a failure. [ 898.030903][T18171] name fail_futex, interval 1, probability 0, space 0, times 0 [ 898.060218][T18171] CPU: 1 UID: 0 PID: 18171 Comm: syz.0.2593 Tainted: G U L syzkaller #0 PREEMPT(full) [ 898.060247][T18171] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 898.060254][T18171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 898.060263][T18171] Call Trace: [ 898.060269][T18171] [ 898.060276][T18171] dump_stack_lvl+0x100/0x190 [ 898.060305][T18171] should_fail_ex.cold+0x5/0xa [ 898.060324][T18171] get_futex_key+0x1d2/0x1620 [ 898.060346][T18171] ? __pfx_get_futex_key+0x10/0x10 [ 898.060366][T18171] ? do_user_addr_fault+0x8d6/0x12f0 [ 898.060387][T18171] futex_wake+0xea/0x530 [ 898.060408][T18171] ? irqentry_exit+0x180/0x670 [ 898.060426][T18171] ? __pfx_futex_wake+0x10/0x10 [ 898.060455][T18171] do_futex+0x32b/0x350 [ 898.060475][T18171] ? __pfx_do_futex+0x10/0x10 [ 898.060499][T18171] ? __do_sys_statmount+0xb65/0x2490 [ 898.060527][T18171] __x64_sys_futex+0x34f/0x4d0 [ 898.060553][T18171] ? __pfx___x64_sys_futex+0x10/0x10 [ 898.060580][T18171] do_syscall_64+0x106/0xf80 [ 898.060594][T18171] ? clear_bhb_loop+0x40/0x90 [ 898.060614][T18171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.060630][T18171] RIP: 0033:0x7f385ff9c799 [ 898.060643][T18171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 898.060659][T18171] RSP: 002b:00007f3860db40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 898.060674][T18171] RAX: ffffffffffffffda RBX: 00007f3860216098 RCX: 00007f385ff9c799 [ 898.060685][T18171] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f386021609c [ 898.060694][T18171] RBP: 00007f3860216090 R08: 0000000000000000 R09: 0000000000000000 [ 898.060703][T18171] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 898.060713][T18171] R13: 00007f3860216128 R14: 00007ffdd2caa790 R15: 00007ffdd2caa878 [ 898.060732][T18171] [ 900.438198][T18222] FAULT_INJECTION: forcing a failure. [ 900.438198][T18222] name fail_futex, interval 1, probability 0, space 0, times 0 [ 900.482454][T18222] CPU: 1 UID: 0 PID: 18222 Comm: syz.0.2606 Tainted: G U L syzkaller #0 PREEMPT(full) [ 900.482494][T18222] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 900.482506][T18222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 900.482521][T18222] Call Trace: [ 900.482530][T18222] [ 900.482540][T18222] dump_stack_lvl+0x100/0x190 [ 900.482580][T18222] should_fail_ex.cold+0x5/0xa [ 900.482609][T18222] get_futex_key+0x1d2/0x1620 [ 900.482645][T18222] ? __pfx_get_futex_key+0x10/0x10 [ 900.482686][T18222] futex_wake+0xea/0x530 [ 900.482727][T18222] ? __pfx_futex_wake+0x10/0x10 [ 900.482767][T18222] ? putname+0xb1/0x110 [ 900.482791][T18222] ? kmem_cache_free+0x124/0x6a0 [ 900.482822][T18222] ? do_sys_openat2+0x1b4/0x1e0 [ 900.482860][T18222] do_futex+0x32b/0x350 [ 900.482893][T18222] ? __pfx_do_futex+0x10/0x10 [ 900.482922][T18222] ? __pfx_do_sys_openat2+0x10/0x10 [ 900.482955][T18222] ? kfree+0x2ec/0x6b0 [ 900.482992][T18222] __x64_sys_futex+0x34f/0x4d0 [ 900.483027][T18222] ? __x64_sys_openat+0x12d/0x210 [ 900.483062][T18222] ? __pfx___x64_sys_futex+0x10/0x10 [ 900.483106][T18222] do_syscall_64+0x106/0xf80 [ 900.483131][T18222] ? clear_bhb_loop+0x40/0x90 [ 900.483162][T18222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.483189][T18222] RIP: 0033:0x7f385ff9c799 [ 900.483211][T18222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 900.483244][T18222] RSP: 002b:00007f3860db40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 900.483269][T18222] RAX: ffffffffffffffda RBX: 00007f3860216098 RCX: 00007f385ff9c799 [ 900.483287][T18222] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f386021609c [ 900.483304][T18222] RBP: 00007f3860216090 R08: 0000000000000000 R09: 0000000000000000 [ 900.483321][T18222] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 900.483338][T18222] R13: 00007f3860216128 R14: 00007ffdd2caa790 R15: 00007ffdd2caa878 [ 900.483374][T18222] [ 902.210774][T18256] zswap: compressor  not available [ 903.160348][T18271] nvme_fcloop: unknown parameter or missing value '7' [ 903.279491][T18273] FAULT_INJECTION: forcing a failure. [ 903.279491][T18273] name failslab, interval 1, probability 0, space 0, times 0 [ 903.308294][T18273] CPU: 1 UID: 0 PID: 18273 Comm: syz.4.2617 Tainted: G U L syzkaller #0 PREEMPT(full) [ 903.308345][T18273] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 903.308356][T18273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 903.308371][T18273] Call Trace: [ 903.308381][T18273] [ 903.308391][T18273] dump_stack_lvl+0x100/0x190 [ 903.308438][T18273] should_fail_ex.cold+0x5/0xa [ 903.308475][T18273] should_failslab+0xc2/0x120 [ 903.308505][T18273] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 903.308558][T18273] ? shmem_alloc_inode+0x25/0x50 [ 903.308593][T18273] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 903.308626][T18273] shmem_alloc_inode+0x25/0x50 [ 903.308655][T18273] alloc_inode+0x68/0x250 [ 903.308689][T18273] new_inode+0x22/0x1c0 [ 903.308725][T18273] shmem_get_inode+0x212/0x1040 [ 903.308763][T18273] ? __pfx_shmem_get_inode+0x10/0x10 [ 903.308798][T18273] ? d_add+0x443/0x850 [ 903.308835][T18273] ? do_raw_spin_unlock+0x145/0x1e0 [ 903.308880][T18273] shmem_mknod+0x20c/0x470 [ 903.308915][T18273] ? __pfx_shmem_mknod+0x10/0x10 [ 903.308947][T18273] ? bpf_lsm_inode_create+0x9/0x10 [ 903.308993][T18273] ? __pfx_shmem_create+0x10/0x10 [ 903.309031][T18273] lookup_open.isra.0+0xc47/0x11b0 [ 903.309082][T18273] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 903.309131][T18273] ? __pfx___might_resched+0x10/0x10 [ 903.309171][T18273] ? mnt_get_write_access+0x52/0x2f0 [ 903.309218][T18273] ? __pfx_down_write+0x10/0x10 [ 903.309248][T18273] ? mnt_get_write_access+0x1e9/0x2f0 [ 903.309293][T18273] path_openat+0x2291/0x31a0 [ 903.309331][T18273] ? entry_SYSCALL_64_after_hwframe+0x48/0x7f [ 903.309366][T18273] ? __pfx_path_openat+0x10/0x10 [ 903.309411][T18273] do_file_open+0x20e/0x430 [ 903.309445][T18273] ? __pfx_do_file_open+0x10/0x10 [ 903.309505][T18273] ? _raw_spin_unlock+0x28/0x50 [ 903.309553][T18273] ? alloc_fd+0x476/0x790 [ 903.309594][T18273] do_sys_openat2+0x10d/0x1e0 [ 903.309633][T18273] ? __pfx_do_sys_openat2+0x10/0x10 [ 903.309673][T18273] ? __fget_files+0x21f/0x3d0 [ 903.309711][T18273] __x64_sys_open+0xfe/0x1d0 [ 903.309748][T18273] ? __pfx___x64_sys_open+0x10/0x10 [ 903.309802][T18273] do_syscall_64+0x106/0xf80 [ 903.309828][T18273] ? clear_bhb_loop+0x40/0x90 [ 903.309861][T18273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.309891][T18273] RIP: 0033:0x7f19a6f9c799 [ 903.309916][T18273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 903.309945][T18273] RSP: 002b:00007f19a7d8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 903.309973][T18273] RAX: ffffffffffffffda RBX: 00007f19a7215fa0 RCX: 00007f19a6f9c799 [ 903.309994][T18273] RDX: 0000000000000130 RSI: 0000000000161342 RDI: 0000200000000000 [ 903.310013][T18273] RBP: 00007f19a7032c99 R08: 0000000000000000 R09: 0000000000000000 [ 903.310030][T18273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 903.310047][T18273] R13: 00007f19a7216038 R14: 00007f19a7215fa0 R15: 00007ffcb15d4da8 [ 903.310087][T18273] [ 903.740295][T18284] FAULT_INJECTION: forcing a failure. [ 903.740295][T18284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 903.865481][T18284] CPU: 0 UID: 0 PID: 18284 Comm: syz.0.2620 Tainted: G U L syzkaller #0 PREEMPT(full) [ 903.865519][T18284] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 903.865526][T18284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 903.865545][T18284] Call Trace: [ 903.865553][T18284] [ 903.865559][T18284] dump_stack_lvl+0x100/0x190 [ 903.865596][T18284] should_fail_ex.cold+0x5/0xa [ 903.865620][T18284] _copy_to_user+0x32/0xd0 [ 903.865643][T18284] io_uring_setup.cold+0x1560/0x1d79 [ 903.865669][T18284] ? __pfx_io_uring_setup+0x10/0x10 [ 903.865804][T18284] ? __pfx_do_futex+0x10/0x10 [ 903.865835][T18284] ? xfd_validate_state+0x129/0x190 [ 903.865863][T18284] __x64_sys_io_uring_setup+0xc2/0x170 [ 903.865890][T18284] do_syscall_64+0x106/0xf80 [ 903.865906][T18284] ? clear_bhb_loop+0x40/0x90 [ 903.865928][T18284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.865954][T18284] RIP: 0033:0x7f385ff9c799 [ 903.865969][T18284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 903.865985][T18284] RSP: 002b:00007f3860dd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 903.866001][T18284] RAX: ffffffffffffffda RBX: 00007f3860215fa0 RCX: 00007f385ff9c799 [ 903.866011][T18284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001d48 [ 903.866021][T18284] RBP: 00007f3860032c99 R08: 0000000000000000 R09: 0000000000000000 [ 903.866030][T18284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 903.866039][T18284] R13: 00007f3860216038 R14: 00007f3860215fa0 R15: 00007ffdd2caa878 [ 903.866060][T18284] [ 904.367804][T18293] zswap: compressor  not available [ 907.074945][T18345] zswap: compressor  not available [ 909.064007][T18384] zswap: compressor  not available [ 909.184081][T18394] FAULT_INJECTION: forcing a failure. [ 909.184081][T18394] name failslab, interval 1, probability 0, space 0, times 0 [ 909.219487][T18394] CPU: 0 UID: 0 PID: 18394 Comm: syz.2.2642 Tainted: G U L syzkaller #0 PREEMPT(full) [ 909.219516][T18394] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 909.219523][T18394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 909.219533][T18394] Call Trace: [ 909.219539][T18394] [ 909.219545][T18394] dump_stack_lvl+0x100/0x190 [ 909.219574][T18394] should_fail_ex.cold+0x5/0xa [ 909.219595][T18394] should_failslab+0xc2/0x120 [ 909.219617][T18394] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 909.219640][T18394] ? dup_fd+0x4d/0xd10 [ 909.219656][T18394] ? trace_kmalloc+0x101/0x130 [ 909.219675][T18394] dup_fd+0x4d/0xd10 [ 909.219693][T18394] ? apparmor_task_alloc+0x2c1/0x3b0 [ 909.219712][T18394] copy_process+0x268f/0x7a40 [ 909.219740][T18394] ? __pfx_copy_process+0x10/0x10 [ 909.219758][T18394] ? find_held_lock+0x2b/0x80 [ 909.219793][T18394] kernel_clone+0xfc/0x9a0 [ 909.219822][T18394] ? __pfx_futex_wait+0x10/0x10 [ 909.219860][T18394] ? __pfx_kernel_clone+0x10/0x10 [ 909.219887][T18394] __do_sys_clone+0xd9/0x120 [ 909.219906][T18394] ? __pfx___do_sys_clone+0x10/0x10 [ 909.219939][T18394] do_syscall_64+0x106/0xf80 [ 909.219954][T18394] ? clear_bhb_loop+0x40/0x90 [ 909.219973][T18394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.219989][T18394] RIP: 0033:0x7f38d8f9c799 [ 909.220003][T18394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 909.220019][T18394] RSP: 002b:00007f38d9ec0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 909.220034][T18394] RAX: ffffffffffffffda RBX: 00007f38d9215fa0 RCX: 00007f38d8f9c799 [ 909.220044][T18394] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 909.220053][T18394] RBP: 00007f38d9032c99 R08: 0000000000000002 R09: 0000000000000000 [ 909.220063][T18394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 909.220072][T18394] R13: 00007f38d9216038 R14: 00007f38d9215fa0 R15: 00007fff552feb08 [ 909.220099][T18394] [ 909.896993][T18403] Invalid ELF header magic: != ELF [ 911.527464][T18437] zswap: compressor  not available [ 912.777310][T18464] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2655'. [ 912.869181][T18464] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2655'. [ 912.889237][T18465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2655'. [ 915.531501][T17407] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.641365][T18518] zswap: compressor û not available [ 916.659331][T18521] Setting dangerous option i915.mitigations - tainting kernel [ 919.882160][T18597] FAULT_INJECTION: forcing a failure. [ 919.882160][T18597] name failslab, interval 1, probability 0, space 0, times 0 [ 919.895180][T18597] CPU: 0 UID: 0 PID: 18597 Comm: syz.4.2686 Tainted: G U L syzkaller #0 PREEMPT(full) [ 919.895209][T18597] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 919.895215][T18597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 919.895226][T18597] Call Trace: [ 919.895232][T18597] [ 919.895238][T18597] dump_stack_lvl+0x100/0x190 [ 919.895266][T18597] should_fail_ex.cold+0x5/0xa [ 919.895285][T18597] should_failslab+0xc2/0x120 [ 919.895302][T18597] __kmalloc_cache_noprof+0x7a/0x6f0 [ 919.895322][T18597] ? alloc_fdtable+0xbd/0x2d0 [ 919.895336][T18597] ? find_held_lock+0x2b/0x80 [ 919.895351][T18597] ? dup_fd+0x924/0xd10 [ 919.895368][T18597] alloc_fdtable+0xbd/0x2d0 [ 919.895383][T18597] dup_fd+0x995/0xd10 [ 919.895401][T18597] ? apparmor_task_alloc+0x2c1/0x3b0 [ 919.895419][T18597] copy_process+0x268f/0x7a40 [ 919.895438][T18597] ? preempt_schedule_thunk+0x16/0x30 [ 919.895464][T18597] ? __pfx_copy_process+0x10/0x10 [ 919.895481][T18597] ? find_held_lock+0x2b/0x80 [ 919.895499][T18597] ? futex_private_hash_put+0x107/0x1c0 [ 919.895520][T18597] kernel_clone+0xfc/0x9a0 [ 919.895539][T18597] ? __pfx_kernel_clone+0x10/0x10 [ 919.895566][T18597] __do_sys_clone+0xd9/0x120 [ 919.895584][T18597] ? __pfx___do_sys_clone+0x10/0x10 [ 919.895616][T18597] do_syscall_64+0x106/0xf80 [ 919.895631][T18597] ? clear_bhb_loop+0x40/0x90 [ 919.895649][T18597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.895665][T18597] RIP: 0033:0x7f19a6f9c799 [ 919.895679][T18597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 919.895694][T18597] RSP: 002b:00007f19a7d8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 919.895709][T18597] RAX: ffffffffffffffda RBX: 00007f19a7215fa0 RCX: 00007f19a6f9c799 [ 919.895719][T18597] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 919.895729][T18597] RBP: 00007f19a7032c99 R08: 0000000000000002 R09: 0000000000000000 [ 919.895739][T18597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 919.895748][T18597] R13: 00007f19a7216038 R14: 00007f19a7215fa0 R15: 00007ffcb15d4da8 [ 919.895768][T18597] [ 920.595985][T18606] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 921.545979][T18629] serio: Serial port pty6 [ 922.144773][T18639] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 922.436421][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 922.617394][T18650] FAULT_INJECTION: forcing a failure. [ 922.617394][T18650] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 922.631719][T18650] CPU: 1 UID: 0 PID: 18650 Comm: syz.4.2699 Tainted: G U L syzkaller #0 PREEMPT(full) [ 922.631771][T18650] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 922.631784][T18650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 922.631802][T18650] Call Trace: [ 922.631812][T18650] [ 922.631824][T18650] dump_stack_lvl+0x100/0x190 [ 922.631873][T18650] should_fail_ex.cold+0x5/0xa [ 922.631903][T18650] ? prepare_alloc_pages+0x16d/0x5f0 [ 922.631953][T18650] should_fail_alloc_page+0xeb/0x140 [ 922.631988][T18650] prepare_alloc_pages+0x1f0/0x5f0 [ 922.632028][T18650] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 922.632077][T18650] ? rcu_is_watching+0x12/0xc0 [ 922.632121][T18650] ? trace_mm_page_alloc+0x17a/0x1d0 [ 922.632156][T18650] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 922.632205][T18650] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 922.632303][T18650] ? find_held_lock+0x2b/0x80 [ 922.632332][T18650] ? is_bpf_text_address+0x8a/0x1a0 [ 922.632375][T18650] ? is_bpf_text_address+0x8a/0x1a0 [ 922.632420][T18650] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 922.632452][T18650] ? is_bpf_text_address+0x94/0x1a0 [ 922.632490][T18650] ? kernel_text_address+0x8d/0x100 [ 922.632529][T18650] ? __kernel_text_address+0xd/0x30 [ 922.632570][T18650] ? unwind_get_return_address+0x59/0xa0 [ 922.632612][T18650] alloc_pages_bulk_noprof+0x782/0x1490 [ 922.632671][T18650] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 922.632717][T18650] ? kasan_save_stack+0x30/0x50 [ 922.632752][T18650] ? alloc_pages_noprof+0x233/0x390 [ 922.632788][T18650] __kasan_populate_vmalloc+0xf0/0x210 [ 922.632839][T18650] alloc_vmap_area+0x95d/0x2bd0 [ 922.632885][T18650] ? __pfx_alloc_vmap_area+0x10/0x10 [ 922.632936][T18650] __get_vm_area_node+0x1ca/0x330 [ 922.632978][T18650] __vmalloc_node_range_noprof+0x213/0x1530 [ 922.633017][T18650] ? kernel_clone+0xfc/0x9a0 [ 922.633048][T18650] ? find_held_lock+0x2b/0x80 [ 922.633077][T18650] ? local_lock_release+0x99/0x130 [ 922.633111][T18650] ? local_lock_release+0x99/0x130 [ 922.633150][T18650] ? kernel_clone+0xfc/0x9a0 [ 922.633193][T18650] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 922.633233][T18650] ? __memcg_slab_post_alloc_hook+0x51b/0x990 [ 922.633273][T18650] ? rcu_is_watching+0x12/0xc0 [ 922.633316][T18650] ? trace_kmem_cache_alloc+0xf3/0x120 [ 922.633352][T18650] ? kernel_clone+0xfc/0x9a0 [ 922.633383][T18650] __vmalloc_node_noprof+0xad/0xf0 [ 922.633417][T18650] ? kernel_clone+0xfc/0x9a0 [ 922.633446][T18650] copy_process+0x5ec/0x7a40 [ 922.633483][T18650] ? __pfx___futex_wait+0x10/0x10 [ 922.633525][T18650] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 922.633567][T18650] ? lockdep_hardirqs_on+0x78/0x100 [ 922.633615][T18650] ? __pfx_copy_process+0x10/0x10 [ 922.633649][T18650] ? find_held_lock+0x2b/0x80 [ 922.633691][T18650] kernel_clone+0xfc/0x9a0 [ 922.633724][T18650] ? __pfx_futex_wait+0x10/0x10 [ 922.633779][T18650] ? __pfx_kernel_clone+0x10/0x10 [ 922.633835][T18650] __do_sys_clone+0xd9/0x120 [ 922.633871][T18650] ? __pfx___do_sys_clone+0x10/0x10 [ 922.633946][T18650] do_syscall_64+0x106/0xf80 [ 922.633973][T18650] ? clear_bhb_loop+0x40/0x90 [ 922.634010][T18650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.634040][T18650] RIP: 0033:0x7f19a6f9c799 [ 922.634064][T18650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 922.634093][T18650] RSP: 002b:00007f19a7d8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 922.634121][T18650] RAX: ffffffffffffffda RBX: 00007f19a7215fa0 RCX: 00007f19a6f9c799 [ 922.634142][T18650] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 922.634159][T18650] RBP: 00007f19a7032c99 R08: 0000000000000002 R09: 0000000000000000 [ 922.634177][T18650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 922.634194][T18650] R13: 00007f19a7216038 R14: 00007f19a7215fa0 R15: 00007ffcb15d4da8 [ 922.634233][T18650] [ 922.634321][T18650] syz.4.2699: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 923.060145][T18650] CPU: 1 UID: 0 PID: 18650 Comm: syz.4.2699 Tainted: G U L syzkaller #0 PREEMPT(full) [ 923.060189][T18650] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 923.060200][T18650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 923.060217][T18650] Call Trace: [ 923.060227][T18650] [ 923.060237][T18650] dump_stack_lvl+0x100/0x190 [ 923.060284][T18650] warn_alloc.cold+0x95/0x1c1 [ 923.060328][T18650] ? __pfx_warn_alloc+0x10/0x10 [ 923.060375][T18650] ? lockdep_hardirqs_on+0x78/0x100 [ 923.060422][T18650] ? __get_vm_area_node+0x2c5/0x330 [ 923.060463][T18650] ? __get_vm_area_node+0x208/0x330 [ 923.060501][T18650] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 923.060534][T18650] ? find_held_lock+0x2b/0x80 [ 923.060561][T18650] ? local_lock_release+0x99/0x130 [ 923.060593][T18650] ? local_lock_release+0x99/0x130 [ 923.060630][T18650] ? kernel_clone+0xfc/0x9a0 [ 923.060673][T18650] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 923.060712][T18650] ? __memcg_slab_post_alloc_hook+0x51b/0x990 [ 923.060750][T18650] ? rcu_is_watching+0x12/0xc0 [ 923.060790][T18650] ? trace_kmem_cache_alloc+0xf3/0x120 [ 923.060823][T18650] ? kernel_clone+0xfc/0x9a0 [ 923.060853][T18650] __vmalloc_node_noprof+0xad/0xf0 [ 923.060885][T18650] ? kernel_clone+0xfc/0x9a0 [ 923.060919][T18650] copy_process+0x5ec/0x7a40 [ 923.060949][T18650] ? __pfx___futex_wait+0x10/0x10 [ 923.060987][T18650] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 923.061026][T18650] ? lockdep_hardirqs_on+0x78/0x100 [ 923.061075][T18650] ? __pfx_copy_process+0x10/0x10 [ 923.061107][T18650] ? find_held_lock+0x2b/0x80 [ 923.061143][T18650] kernel_clone+0xfc/0x9a0 [ 923.061172][T18650] ? __pfx_futex_wait+0x10/0x10 [ 923.061213][T18650] ? __pfx_kernel_clone+0x10/0x10 [ 923.061265][T18650] __do_sys_clone+0xd9/0x120 [ 923.061300][T18650] ? __pfx___do_sys_clone+0x10/0x10 [ 923.061373][T18650] do_syscall_64+0x106/0xf80 [ 923.061400][T18650] ? clear_bhb_loop+0x40/0x90 [ 923.061437][T18650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.061466][T18650] RIP: 0033:0x7f19a6f9c799 [ 923.061490][T18650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 923.061519][T18650] RSP: 002b:00007f19a7d8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 923.061547][T18650] RAX: ffffffffffffffda RBX: 00007f19a7215fa0 RCX: 00007f19a6f9c799 [ 923.061567][T18650] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 923.061585][T18650] RBP: 00007f19a7032c99 R08: 0000000000000002 R09: 0000000000000000 [ 923.061604][T18650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 923.061622][T18650] R13: 00007f19a7216038 R14: 00007f19a7215fa0 R15: 00007ffcb15d4da8 [ 923.061661][T18650] [ 923.061731][T18650] Mem-Info: [ 923.338499][T18650] active_anon:45128 inactive_anon:3 isolated_anon:0 [ 923.338499][T18650] active_file:11061 inactive_file:46853 isolated_file:0 [ 923.338499][T18650] unevictable:768 dirty:1066 writeback:0 [ 923.338499][T18650] slab_reclaimable:13476 slab_unreclaimable:135495 [ 923.338499][T18650] mapped:51208 shmem:27829 pagetables:1289 [ 923.338499][T18650] sec_pagetables:0 bounce:0 [ 923.338499][T18650] kernel_misc_reclaimable:0 [ 923.338499][T18650] free:1222373 free_pcp:14233 free_cma:0 [ 923.384656][T18650] Node 0 active_anon:180512kB inactive_anon:12kB active_file:44176kB inactive_file:187120kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:204752kB dirty:4252kB writeback:0kB shmem:109780kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:38912kB kernel_stack:14404kB pagetables:4872kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 923.436983][T18650] Node 1 active_anon:0kB inactive_anon:0kB active_file:68kB inactive_file:292kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:180kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 923.527073][T18650] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 923.587450][T18650] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 923.607039][T18650] Node 0 DMA32 free:905384kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:191364kB inactive_anon:20kB active_file:44176kB inactive_file:187120kB unevictable:1536kB writepending:4252kB zspages:204kB present:3129332kB managed:2537300kB mlocked:0kB bounce:0kB free_pcp:28304kB local_pcp:11600kB free_cma:0kB [ 923.658027][T18650] lowmem_reserve[]: 0 0 1 1 1 [ 923.681400][T17175] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 923.698627][T17175] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 923.738236][T17175] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 923.747093][T18650] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1056kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 923.788351][T17175] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 923.806828][T17175] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 923.842049][T18650] lowmem_reserve[]: 0 0 0 0 0 [ 923.869837][T18650] Node 1 Normal free:3916764kB boost:0kB min:55584kB low:69480kB high:83376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:68kB inactive_file:292kB unevictable:1536kB writepending:12kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:23004kB local_pcp:2284kB free_cma:0kB [ 923.957288][T18650] lowmem_reserve[]: 0 0 0 0 0 [ 923.963120][T18650] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 924.024053][T18650] Node 0 DMA32: 108*4kB (UME) 2370*8kB (UE) 1985*16kB (UM) 46*32kB (UE) 32*64kB (UME) 31*128kB (ME) 498*256kB (UME) 414*512kB (UM) 296*1024kB (UME) 8*2048kB (U) 44*4096kB (M) = 897808kB [ 924.106142][T18650] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 924.137705][T18650] Node 1 Normal: 35*4kB (UM) 40*8kB (UM) 33*16kB (UM) 16*32kB (UM) 10*64kB (UM) 7*128kB (UM) 8*256kB (UM) 8*512kB (UM) 8*1024kB (UM) 4*2048kB (UM) 950*4096kB (M) = 3916764kB [ 924.175203][T18650] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 924.215794][T18650] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 924.225403][T18650] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 924.235146][T18650] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 924.293535][T18657] chnl_net:caif_netlink_parms(): no params data found [ 924.300427][T18650] 90412 total pagecache pages [ 924.305089][T18650] 73 pages in swap cache [ 924.327398][T18650] Free swap = 120608kB [ 924.351952][T18650] Total swap = 124996kB [ 924.358049][T18650] 2097051 pages RAM [ 924.369803][T18650] 0 pages HighMem/MovableOnly [ 924.374503][T18650] 430847 pages reserved [ 924.417118][T18650] 0 pages cma reserved [ 924.603298][T18657] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.630382][T18657] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.643903][T18672] misc userio: No port type given on /dev/userio [ 924.663962][T18657] bridge_slave_0: entered allmulticast mode [ 924.690628][T18657] bridge_slave_0: entered promiscuous mode [ 924.767924][T18657] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.785621][T18657] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.814894][T18657] bridge_slave_1: entered allmulticast mode [ 924.869450][T18657] bridge_slave_1: entered promiscuous mode [ 925.119108][T18657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 925.158431][T18657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 925.269529][T18657] team0: Port device team_slave_0 added [ 925.299574][T18657] team0: Port device team_slave_1 added [ 925.379511][T18657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 925.386489][T18657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 925.478616][T18657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 925.502504][T18657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 925.578205][T18657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 925.628806][T18657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 925.767578][T18657] hsr_slave_0: entered promiscuous mode [ 925.780381][T18657] hsr_slave_1: entered promiscuous mode [ 925.800368][T18657] debugfs: 'hsr0' already exists in 'hsr' [ 925.821915][T18657] Cannot create hsr debugfs directory [ 925.858831][T17175] Bluetooth: hci3: command tx timeout [ 926.475007][T18657] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 926.523836][T18657] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 926.555837][T18657] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 926.623753][T18657] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 926.920589][T18657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 927.020553][T18657] 8021q: adding VLAN 0 to HW filter on device team0 [ 927.037864][T16971] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.045021][T16971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 927.089106][T17408] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.096284][T17408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 927.240670][T18657] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 927.752872][T18657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 927.942200][T17175] Bluetooth: hci3: command tx timeout [ 928.285038][T18657] veth0_vlan: entered promiscuous mode [ 928.363916][T18657] veth1_vlan: entered promiscuous mode [ 928.405511][T18657] veth0_macvtap: entered promiscuous mode [ 928.420944][T18657] veth1_macvtap: entered promiscuous mode [ 928.444131][T18657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 928.464627][T18657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 928.488289][T16968] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.517771][T16968] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.543137][T16968] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.563074][T16968] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.691117][T17407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 928.699145][T17407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.744339][T16971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 928.765612][T16971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 929.660135][T18749] Setting dangerous option i915.mitigations - tainting kernel [ 930.030346][T17175] Bluetooth: hci3: command tx timeout [ 930.163934][T18754] zswap: compressor û not available [ 930.170600][T18753] Setting dangerous option i915.mitigations - tainting kernel [ 932.104316][T17175] Bluetooth: hci3: command tx timeout [ 932.139965][T18780] zswap: compressor not available [ 932.407281][T18780] zswap: compressor not available [ 932.625473][T18780] zswap: compressor not available [ 932.883295][T18780] zswap: compressor not available [ 933.003680][T18772] zswap: compressor û not available [ 933.444664][T18810] Setting dangerous option i915.mitigations - tainting kernel [ 935.242812][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 935.468273][T18855] ICMPv6: process `syz.4.2732' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 935.729140][T18864] Setting dangerous option i915.mitigations - tainting kernel [ 935.912334][T18868] FAULT_INJECTION: forcing a failure. [ 935.912334][T18868] name failslab, interval 1, probability 0, space 0, times 0 [ 935.934987][T18868] CPU: 1 UID: 0 PID: 18868 Comm: syz.4.2736 Tainted: G U L syzkaller #0 PREEMPT(full) [ 935.935041][T18868] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 935.935053][T18868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 935.935069][T18868] Call Trace: [ 935.935079][T18868] [ 935.935090][T18868] dump_stack_lvl+0x100/0x190 [ 935.935141][T18868] should_fail_ex.cold+0x5/0xa [ 935.935178][T18868] should_failslab+0xc2/0x120 [ 935.935211][T18868] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 935.935253][T18868] ? dup_fd+0x4d/0xd10 [ 935.935281][T18868] ? trace_kmalloc+0x101/0x130 [ 935.935316][T18868] dup_fd+0x4d/0xd10 [ 935.935350][T18868] ? apparmor_task_alloc+0x2c1/0x3b0 [ 935.935385][T18868] copy_process+0x268f/0x7a40 [ 935.935439][T18868] ? __pfx_copy_process+0x10/0x10 [ 935.935473][T18868] ? find_held_lock+0x2b/0x80 [ 935.935521][T18868] kernel_clone+0xfc/0x9a0 [ 935.935561][T18868] ? __pfx_futex_wait+0x10/0x10 [ 935.935609][T18868] ? __pfx_kernel_clone+0x10/0x10 [ 935.935664][T18868] __do_sys_clone+0xd9/0x120 [ 935.935700][T18868] ? __pfx___do_sys_clone+0x10/0x10 [ 935.935748][T18868] ? ksys_write+0x1ac/0x250 [ 935.935776][T18868] ? __pfx_ksys_write+0x10/0x10 [ 935.935815][T18868] do_syscall_64+0x106/0xf80 [ 935.935843][T18868] ? clear_bhb_loop+0x40/0x90 [ 935.935879][T18868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.935910][T18868] RIP: 0033:0x7f19a6f9c799 [ 935.935936][T18868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 935.935965][T18868] RSP: 002b:00007f19a7d8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 935.935993][T18868] RAX: ffffffffffffffda RBX: 00007f19a7215fa0 RCX: 00007f19a6f9c799 [ 935.936013][T18868] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 935.936030][T18868] RBP: 00007f19a7032c99 R08: 0000000000000002 R09: 0000000000000000 [ 935.936047][T18868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 935.936064][T18868] R13: 00007f19a7216038 R14: 00007f19a7215fa0 R15: 00007ffcb15d4da8 [ 935.936102][T18868] [ 937.507411][T16986] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 937.516298][T16986] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 937.526304][T16986] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 937.534840][T16986] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 937.542523][T16986] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 937.988371][T18882] chnl_net:caif_netlink_parms(): no params data found [ 938.130619][T18893] FAULT_INJECTION: forcing a failure. [ 938.130619][T18893] name fail_futex, interval 1, probability 0, space 0, times 0 [ 938.150688][T18893] CPU: 1 UID: 0 PID: 18893 Comm: syz.1.2740 Tainted: G U L syzkaller #0 PREEMPT(full) [ 938.150737][T18893] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 938.150750][T18893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 938.150767][T18893] Call Trace: [ 938.150777][T18893] [ 938.150788][T18893] dump_stack_lvl+0x100/0x190 [ 938.150836][T18893] should_fail_ex.cold+0x5/0xa [ 938.150873][T18893] get_futex_key+0x1d2/0x1620 [ 938.150913][T18893] ? __pfx_get_futex_key+0x10/0x10 [ 938.150962][T18893] futex_wait_setup+0x83/0x510 [ 938.151025][T18893] __futex_wait+0x19f/0x300 [ 938.151069][T18893] ? __pfx___futex_wait+0x10/0x10 [ 938.151117][T18893] ? __pfx_futex_wake_mark+0x10/0x10 [ 938.151165][T18893] ? futex_hash+0x2c5/0x380 [ 938.151209][T18893] futex_wait+0xed/0x380 [ 938.151252][T18893] ? __pfx_futex_wait+0x10/0x10 [ 938.151302][T18893] ? __pfx_do_recvmmsg+0x10/0x10 [ 938.151337][T18893] ? __might_fault+0xc5/0x140 [ 938.151377][T18893] ? __might_fault+0xc5/0x140 [ 938.151424][T18893] do_futex+0x1ef/0x350 [ 938.151461][T18893] ? __pfx_do_futex+0x10/0x10 [ 938.151507][T18893] __x64_sys_futex+0x34f/0x4d0 [ 938.151550][T18893] ? __pfx___x64_sys_futex+0x10/0x10 [ 938.151588][T18893] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 938.151628][T18893] do_syscall_64+0x106/0xf80 [ 938.151655][T18893] ? clear_bhb_loop+0x40/0x90 [ 938.151690][T18893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.151721][T18893] RIP: 0033:0x7f99b019c799 [ 938.151746][T18893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 938.151775][T18893] RSP: 002b:00007f99b111b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 938.151804][T18893] RAX: ffffffffffffffda RBX: 00007f99b0415fa8 RCX: 00007f99b019c799 [ 938.151823][T18893] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f99b0415fa8 [ 938.151842][T18893] RBP: 00007f99b0415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 938.151860][T18893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 938.151877][T18893] R13: 00007f99b0416038 R14: 00007ffe0f032170 R15: 00007ffe0f032258 [ 938.151914][T18893] [ 938.163606][T18882] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.397326][T18882] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.406058][T18882] bridge_slave_0: entered allmulticast mode [ 938.413706][T18882] bridge_slave_0: entered promiscuous mode [ 938.447174][T18882] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.454621][T18882] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.462018][T18882] bridge_slave_1: entered allmulticast mode [ 938.469594][T18882] bridge_slave_1: entered promiscuous mode [ 938.531564][T18882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 938.550493][T18882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 938.612995][T18882] team0: Port device team_slave_0 added [ 938.624054][T18882] team0: Port device team_slave_1 added [ 938.662950][T18882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 938.670480][T18882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.698800][T18882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 938.711126][T18882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 938.718271][T18882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.744660][T18882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 938.853284][T18882] hsr_slave_0: entered promiscuous mode [ 938.872959][T18882] hsr_slave_1: entered promiscuous mode [ 938.988031][T18882] debugfs: 'hsr0' already exists in 'hsr' [ 939.025130][T18882] Cannot create hsr debugfs directory [ 939.507762][T18882] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 939.550777][T18882] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 939.586288][T18882] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 939.611880][T18882] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 939.621374][T18923] FAULT_INJECTION: forcing a failure. [ 939.621374][T18923] name failslab, interval 1, probability 0, space 0, times 0 [ 939.648800][T16986] Bluetooth: hci4: command tx timeout [ 939.668056][T18923] CPU: 0 UID: 0 PID: 18923 Comm: syz.4.2747 Tainted: G U L syzkaller #0 PREEMPT(full) [ 939.668102][T18923] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 939.668114][T18923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 939.668131][T18923] Call Trace: [ 939.668137][T18923] [ 939.668144][T18923] dump_stack_lvl+0x100/0x190 [ 939.668171][T18923] should_fail_ex.cold+0x5/0xa [ 939.668191][T18923] should_failslab+0xc2/0x120 [ 939.668208][T18923] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 939.668230][T18923] ? dup_fd+0x4d/0xd10 [ 939.668245][T18923] ? trace_kmalloc+0x101/0x130 [ 939.668264][T18923] dup_fd+0x4d/0xd10 [ 939.668282][T18923] ? apparmor_task_alloc+0x2c1/0x3b0 [ 939.668300][T18923] copy_process+0x268f/0x7a40 [ 939.668329][T18923] ? __pfx_copy_process+0x10/0x10 [ 939.668356][T18923] kernel_clone+0xfc/0x9a0 [ 939.668373][T18923] ? __pfx_futex_wait+0x10/0x10 [ 939.668397][T18923] ? __pfx_kernel_clone+0x10/0x10 [ 939.668428][T18923] __do_sys_clone+0xd9/0x120 [ 939.668446][T18923] ? __pfx___do_sys_clone+0x10/0x10 [ 939.668479][T18923] do_syscall_64+0x106/0xf80 [ 939.668493][T18923] ? clear_bhb_loop+0x40/0x90 [ 939.668512][T18923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.668527][T18923] RIP: 0033:0x7f19a6f9c799 [ 939.668541][T18923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 939.668556][T18923] RSP: 002b:00007f19a7d8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 939.668571][T18923] RAX: ffffffffffffffda RBX: 00007f19a7215fa0 RCX: 00007f19a6f9c799 [ 939.668581][T18923] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 939.668590][T18923] RBP: 00007f19a7032c99 R08: 0000000000000002 R09: 0000000000000000 [ 939.668600][T18923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 939.668609][T18923] R13: 00007f19a7216038 R14: 00007f19a7215fa0 R15: 00007ffcb15d4da8 [ 939.668629][T18923] [ 940.250488][T18882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 940.297089][T18882] 8021q: adding VLAN 0 to HW filter on device team0 [ 940.475324][T18232] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.482731][T18232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 940.532420][T18232] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.539574][T18232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 940.747722][T18940] netlink: 'syz.1.2750': attribute type 11 has an invalid length. [ 940.755724][T18940] netlink: 'syz.1.2750': attribute type 11 has an invalid length. [ 940.763563][T18940] netlink: 'syz.1.2750': attribute type 11 has an invalid length. [ 941.072149][T18882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 941.432856][T18882] veth0_vlan: entered promiscuous mode [ 941.479176][T18882] veth1_vlan: entered promiscuous mode [ 941.538612][T18882] veth0_macvtap: entered promiscuous mode [ 941.613844][T18882] veth1_macvtap: entered promiscuous mode [ 941.685320][T18882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 941.706954][T16986] Bluetooth: hci4: command tx timeout [ 941.732299][T18882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 941.773101][T18961] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2753'. [ 941.793014][T16971] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.862525][T16971] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.891273][T16971] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.978755][T16971] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.104129][T18232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.128138][T18232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.185104][T16971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.193121][T18967] FAULT_INJECTION: forcing a failure. [ 942.193121][T18967] name failslab, interval 1, probability 0, space 0, times 0 [ 942.193167][T18967] CPU: 1 UID: 0 PID: 18967 Comm: syz.4.2755 Tainted: G U L syzkaller #0 PREEMPT(full) [ 942.193209][T18967] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 942.193220][T18967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 942.193236][T18967] Call Trace: [ 942.193245][T18967] [ 942.193256][T18967] dump_stack_lvl+0x100/0x190 [ 942.193301][T18967] should_fail_ex.cold+0x5/0xa [ 942.193335][T18967] should_failslab+0xc2/0x120 [ 942.193366][T18967] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 942.193406][T18967] ? dup_fd+0x4d/0xd10 [ 942.193433][T18967] ? trace_kmalloc+0x101/0x130 [ 942.193467][T18967] dup_fd+0x4d/0xd10 [ 942.193500][T18967] ? apparmor_task_alloc+0x2c1/0x3b0 [ 942.193534][T18967] copy_process+0x268f/0x7a40 [ 942.193597][T18967] ? __pfx_copy_process+0x10/0x10 [ 942.193648][T18967] kernel_clone+0xfc/0x9a0 [ 942.193680][T18967] ? __pfx_futex_wait+0x10/0x10 [ 942.193725][T18967] ? __pfx_kernel_clone+0x10/0x10 [ 942.193778][T18967] __do_sys_clone+0xd9/0x120 [ 942.193812][T18967] ? __pfx___do_sys_clone+0x10/0x10 [ 942.193875][T18967] do_syscall_64+0x106/0xf80 [ 942.193902][T18967] ? clear_bhb_loop+0x40/0x90 [ 942.193939][T18967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.193969][T18967] RIP: 0033:0x7f19a6f9c799 [ 942.193992][T18967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 942.194020][T18967] RSP: 002b:00007f19a7d8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 942.194051][T18967] RAX: ffffffffffffffda RBX: 00007f19a7215fa0 RCX: 00007f19a6f9c799 [ 942.194071][T18967] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 942.194089][T18967] RBP: 00007f19a7032c99 R08: 0000000000000002 R09: 0000000000000000 [ 942.194107][T18967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 942.194125][T18967] R13: 00007f19a7216038 R14: 00007f19a7215fa0 R15: 00007ffcb15d4da8 [ 942.194163][T18967] [ 942.739840][T16971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.114084][T18978] FAULT_INJECTION: forcing a failure. [ 943.114084][T18978] name failslab, interval 1, probability 0, space 0, times 0 [ 943.142267][T18978] CPU: 0 UID: 0 PID: 18978 Comm: syz.6.2758 Tainted: G U L syzkaller #0 PREEMPT(full) [ 943.142320][T18978] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 943.142332][T18978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 943.142350][T18978] Call Trace: [ 943.142361][T18978] [ 943.142372][T18978] dump_stack_lvl+0x100/0x190 [ 943.142429][T18978] should_fail_ex.cold+0x5/0xa [ 943.142466][T18978] should_failslab+0xc2/0x120 [ 943.142499][T18978] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 943.142537][T18978] ? dup_fd+0x4d/0xd10 [ 943.142564][T18978] ? trace_kmalloc+0x101/0x130 [ 943.142599][T18978] dup_fd+0x4d/0xd10 [ 943.142633][T18978] ? apparmor_task_alloc+0x2c1/0x3b0 [ 943.142668][T18978] copy_process+0x268f/0x7a40 [ 943.142722][T18978] ? __pfx_copy_process+0x10/0x10 [ 943.142756][T18978] ? find_held_lock+0x2b/0x80 [ 943.142800][T18978] kernel_clone+0xfc/0x9a0 [ 943.142837][T18978] ? __pfx_futex_wait+0x10/0x10 [ 943.142884][T18978] ? __pfx_kernel_clone+0x10/0x10 [ 943.142937][T18978] __do_sys_clone+0xd9/0x120 [ 943.142971][T18978] ? __pfx___do_sys_clone+0x10/0x10 [ 943.143030][T18978] do_syscall_64+0x106/0xf80 [ 943.143055][T18978] ? clear_bhb_loop+0x40/0x90 [ 943.143091][T18978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.143128][T18978] RIP: 0033:0x7f040619c799 [ 943.143152][T18978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 943.143179][T18978] RSP: 002b:00007f0407016028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 943.143206][T18978] RAX: ffffffffffffffda RBX: 00007f0406415fa0 RCX: 00007f040619c799 [ 943.143230][T18978] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 943.143246][T18978] RBP: 00007f0406232c99 R08: 0000000000000002 R09: 0000000000000000 [ 943.143263][T18978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 943.143279][T18978] R13: 00007f0406416038 R14: 00007f0406415fa0 R15: 00007ffc9b2f4578 [ 943.143317][T18978] [ 943.787887][T16986] Bluetooth: hci4: command tx timeout [ 944.697702][T19005] zero sized request [ 944.747724][T19001] zswap: compressor û not available [ 944.784618][T19009] Setting dangerous option i915.mitigations - tainting kernel [ 944.849264][T19005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2763'. [ 945.877600][T16986] Bluetooth: hci4: command tx timeout [ 945.938253][ T30] audit: type=1800 audit(4294988962.689:18): pid=19028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2768" name="features" dev="configfs" ino=310495 res=0 errno=0 [ 947.443795][T16986] Bluetooth: hci4: Malformed Event: 0x02 [ 949.607290][T19087] netlink: 2468 bytes leftover after parsing attributes in process `syz.1.2784'. [ 949.632045][T19089] netlink: 2468 bytes leftover after parsing attributes in process `syz.1.2784'. [ 950.691419][T19108] NFSD: Failed to start, no listeners configured. [ 951.432747][T17175] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 951.447163][T17175] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 951.457267][T17175] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 951.475774][T17175] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 951.491104][T17175] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 952.402376][T19120] chnl_net:caif_netlink_parms(): no params data found [ 952.854730][T19120] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.891824][T19120] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.919434][T19120] bridge_slave_0: entered allmulticast mode [ 952.950268][T19120] bridge_slave_0: entered promiscuous mode [ 952.964321][T19120] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.991907][T19120] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.016561][T19120] bridge_slave_1: entered allmulticast mode [ 953.028318][T19120] bridge_slave_1: entered promiscuous mode [ 953.230350][T19120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.354092][T19120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 953.554645][T17175] Bluetooth: hci6: command tx timeout [ 953.676284][T19120] team0: Port device team_slave_0 added [ 953.716151][T19120] team0: Port device team_slave_1 added [ 953.905328][T19120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.929518][T19120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.007775][T19120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 954.047622][T19120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 954.066359][T19120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.144775][T19120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 954.287490][T19120] hsr_slave_0: entered promiscuous mode [ 954.308105][T19120] hsr_slave_1: entered promiscuous mode [ 954.329508][T19141] zswap: compressor û not available [ 954.335593][T19147] Setting dangerous option i915.mitigations - tainting kernel [ 954.376452][T19120] debugfs: 'hsr0' already exists in 'hsr' [ 954.397874][T19120] Cannot create hsr debugfs directory [ 954.588810][T19157] can: request_module (can-proto-0) failed. [ 954.847694][T19164] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2802'. [ 954.909108][T19164] team0: Port device team_slave_1 removed [ 955.285411][T19120] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 955.314255][T19120] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 955.383463][T19120] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 955.404037][T19120] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 955.633145][T17175] Bluetooth: hci6: command tx timeout [ 955.808059][T19120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 955.890267][T19120] 8021q: adding VLAN 0 to HW filter on device team0 [ 955.941946][T18232] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.949184][T18232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 956.019195][T18232] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.026441][T18232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 956.265859][T19169] zswap: compressor û not available [ 956.329289][T19171] Setting dangerous option i915.mitigations - tainting kernel [ 956.898299][T19120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 957.683270][T19200] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 957.714436][T17175] Bluetooth: hci6: command tx timeout [ 957.727277][T19120] veth0_vlan: entered promiscuous mode [ 957.780400][T19120] veth1_vlan: entered promiscuous mode [ 957.949040][T19120] veth0_macvtap: entered promiscuous mode [ 957.960698][T19120] veth1_macvtap: entered promiscuous mode [ 958.022238][T19120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 958.107502][T19120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 958.123118][T17408] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.151102][T17408] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.160657][T17408] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.176955][T17408] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.328000][T17408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 958.363622][T17408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 958.427403][T16968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 958.436616][T16968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.069214][T19222] zswap: compressor  not available [ 959.795309][T17175] Bluetooth: hci6: command tx timeout [ 959.807215][T19254] zswap: compressor û not available [ 959.934796][T19247] Setting dangerous option i915.mitigations - tainting kernel [ 961.128162][T19284] zswap: compressor  not available [ 961.265880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 961.269852][T19291] bond0: invalid ARP target specified [ 962.962271][T19325] zswap: compressor  not available [ 963.216013][T19316] zswap: compressor û not available [ 963.259744][T19313] Setting dangerous option i915.mitigations - tainting kernel [ 963.757238][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 963.772824][T19343] vivid-007: ================= START STATUS ================= [ 963.807287][T19343] vivid-007: Generate PTS: true [ 963.878567][T19343] vivid-007: Generate SCR: true [ 963.937715][T19343] tpg source WxH: 320x240 (Y'CbCr) [ 963.997389][T19343] tpg field: 1 [ 964.025683][T19343] tpg crop: (0,0)/320x240 [ 964.051467][T19343] tpg compose: (0,0)/320x240 [ 964.087278][T19343] tpg colorspace: 8 [ 964.110247][T19343] tpg transfer function: 0/0 [ 964.337405][T19343] tpg Y'CbCr encoding: 0/0 [ 964.353570][T19343] tpg quantization: 0/0 [ 964.371343][T19343] tpg RGB range: 0/2 [ 964.387786][T19343] vivid-007: ================== END STATUS ================== [ 964.943218][T19369] zswap: compressor  not available [ 974.929699][ T31] INFO: task kworker/u10:3:16973 blocked for more than 143 seconds. [ 974.942738][ T31] Tainted: G U L syzkaller #0 [ 974.949346][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 974.958103][ T31] task:kworker/u10:3 state:D stack:26888 pid:16973 tgid:16973 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 974.971893][ T31] Workqueue: netns cleanup_net [ 974.976771][ T31] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 974.980599][ T31] [ 974.984165][ T31] __schedule+0xfee/0x6120 [ 974.988626][ T31] ? __lock_acquire+0x4a5/0x2630 [ 974.997247][ T31] ? __pfx___schedule+0x10/0x10 [ 975.002182][ T31] ? find_held_lock+0x2b/0x80 [ 975.012748][ T31] ? schedule+0x2bf/0x390 [ 975.017146][ T31] schedule+0xdd/0x390 [ 975.023385][ T31] schedule_timeout+0x1b2/0x280 [ 975.029205][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 975.035065][ T31] ? mark_held_locks+0x40/0x70 [ 975.040052][ T31] __wait_for_common+0x2e7/0x4c0 [ 975.053088][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 975.058531][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 975.093162][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 975.118634][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 975.132779][ T31] __flush_workqueue+0x3f7/0x1200 [ 975.137891][ T31] ? __lock_acquire+0x4a5/0x2630 [ 975.165075][ T31] ? __lock_acquire+0x4a5/0x2630 [ 975.177404][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 975.188088][ T31] ? reacquire_held_locks+0xce/0x1e0 [ 975.193860][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 975.202574][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 975.208631][ T31] rds_tcp_listen_stop+0x104/0x160 [ 975.214264][ T31] rds_tcp_exit_net+0xe0/0x870 [ 975.219206][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 975.226630][ T31] ? __pfx___might_resched+0x10/0x10 [ 975.232515][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 975.238005][ T31] ops_undo_list+0x2ee/0xab0 [ 975.242706][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 975.248315][ T31] ? cleanup_net+0x332/0x920 [ 975.252966][ T31] ? idr_destroy+0x62/0x2e0 [ 975.257490][ T31] cleanup_net+0x499/0x920 [ 975.261899][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 975.270796][ T31] ? rcu_is_watching+0x12/0xc0 [ 975.277535][ T31] process_one_work+0xa23/0x19a0 [ 975.283463][ T31] ? __pfx_process_one_work+0x10/0x10 [ 975.289847][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 975.295287][ T31] worker_thread+0x5ef/0xe50 [ 975.300418][ T31] ? kthread+0x13a/0x450 [ 975.306214][ T31] ? __pfx_worker_thread+0x10/0x10 [ 975.311339][ T31] kthread+0x370/0x450 [ 975.315465][ T31] ? __pfx_kthread+0x10/0x10 [ 975.320204][ T31] ret_from_fork+0x754/0xd80 [ 975.324982][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 975.331115][ T31] ? __switch_to+0x7b4/0x1120 [ 975.336466][ T31] ? __pfx_kthread+0x10/0x10 [ 975.341069][ T31] ret_from_fork_asm+0x1a/0x30 [ 975.345927][ T31] [ 975.349133][ T31] [ 975.349133][ T31] Showing all locks held in the system: [ 975.357072][ T31] 1 lock held by khungtaskd/31: [ 975.361937][ T31] #0: ffffffff8e7e7760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 975.372034][ T31] 2 locks held by getty/5586: [ 975.385668][ T31] #0: ffff8880378880a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 975.397148][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 975.412282][ T31] 3 locks held by kworker/u10:3/16973: [ 975.418036][ T31] #0: ffff88801c6b6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 975.429659][ T31] #1: ffffc90003cd7d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 975.441486][ T31] #2: ffffffff905fd910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 975.451008][ T31] 1 lock held by syz.3.2383/17108: [ 975.456207][ T31] #0: ffffffff905fd910 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 975.465792][ T31] 1 lock held by syz.0.2637/18366: [ 975.470918][ T31] #0: ffffffff905fd910 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 975.481352][ T31] 1 lock held by syz.2.2694/18634: [ 975.496381][ T31] #0: ffffffff905fd910 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 975.510068][ T31] 3 locks held by kworker/1:2/18733: [ 975.515492][ T31] #0: ffff88813fe63148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 975.526083][ T31] #1: ffffc90006b07d08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 975.537570][ T31] #2: ffffffff8e7f32b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 975.548592][ T31] 1 lock held by syz.5.2737/18871: [ 975.553810][ T31] #0: ffffffff905fd910 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 975.572378][ T31] 1 lock held by syz.6.2839/19356: [ 975.577631][ T31] #0: ffffffff905fd910 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 975.588108][ T31] 1 lock held by syz.4.2846/19384: [ 975.596485][ T31] #0: ffffffff905fd910 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 975.609063][ T31] 1 lock held by syz.7.2848/19395: [ 975.615409][ T31] #0: ffffffff905fd910 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 975.624927][ T31] [ 975.627286][ T31] ============================================= [ 975.627286][ T31] [ 975.637567][ T31] NMI backtrace for cpu 0 [ 975.637591][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 975.637631][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 975.637641][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 975.637656][ T31] Call Trace: [ 975.637666][ T31] [ 975.637676][ T31] dump_stack_lvl+0x100/0x190 [ 975.637724][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 975.637765][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 975.637803][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 975.637842][ T31] sys_info+0x141/0x190 [ 975.637869][ T31] watchdog+0xd25/0x1050 [ 975.637907][ T31] ? __pfx_watchdog+0x10/0x10 [ 975.637934][ T31] ? __kthread_parkme+0x18c/0x230 [ 975.637968][ T31] ? kthread+0x13a/0x450 [ 975.637999][ T31] ? __pfx_watchdog+0x10/0x10 [ 975.638022][ T31] kthread+0x370/0x450 [ 975.638054][ T31] ? __pfx_kthread+0x10/0x10 [ 975.638089][ T31] ret_from_fork+0x754/0xd80 [ 975.638127][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 975.638166][ T31] ? __switch_to+0x7b4/0x1120 [ 975.638195][ T31] ? __pfx_kthread+0x10/0x10 [ 975.638230][ T31] ret_from_fork_asm+0x1a/0x30 [ 975.638275][ T31] [ 975.638284][ T31] Sending NMI from CPU 0 to CPUs 1: [ 975.780436][ C1] NMI backtrace for cpu 1 [ 975.780464][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G U L syzkaller #0 PREEMPT(full) [ 975.780499][ C1] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 975.780509][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 975.780524][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 975.780571][ C1] Code: e8 84 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 50 1d 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 975.780595][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246 [ 975.780614][ C1] RAX: 0000000000377217 RBX: ffff88801e688000 RCX: ffffffff8b8e3c75 [ 975.780631][ C1] RDX: 0000000000000000 RSI: ffffffff8de82065 RDI: ffffffff8c1b16a0 [ 975.780647][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170a679d [ 975.780662][ C1] R10: ffff8880b8533ceb R11: 0000000000000000 R12: 0000000000000001 [ 975.780677][ C1] R13: ffffed1003cd1000 R14: 0000000000000001 R15: ffffffff90d9ec10 [ 975.780694][ C1] FS: 0000000000000000(0000) GS:ffff888124443000(0000) knlGS:0000000000000000 [ 975.780716][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 975.780732][ C1] CR2: 0000563c15dd21a0 CR3: 00000000345d0000 CR4: 00000000003526f0 [ 975.780748][ C1] Call Trace: [ 975.780756][ C1] [ 975.780764][ C1] default_idle+0x9/0x10 [ 975.780789][ C1] default_idle_call+0x6c/0xb0 [ 975.780815][ C1] do_idle+0x464/0x590 [ 975.780840][ C1] ? __pfx_do_idle+0x10/0x10 [ 975.780867][ C1] cpu_startup_entry+0x4f/0x60 [ 975.780894][ C1] start_secondary+0x21d/0x2d0 [ 975.780925][ C1] ? __pfx_start_secondary+0x10/0x10 [ 975.780958][ C1] common_startup_64+0x13e/0x148 [ 975.780992][ C1] [ 975.985167][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 975.992113][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 976.002775][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 976.007967][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 976.018012][ T31] Call Trace: [ 976.021280][ T31] [ 976.024200][ T31] dump_stack_lvl+0x100/0x190 [ 976.028960][ T31] vpanic+0x552/0x970 [ 976.032929][ T31] ? __pfx_vpanic+0x10/0x10 [ 976.037430][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 976.043637][ T31] panic+0xd1/0xe0 [ 976.047350][ T31] ? __pfx_panic+0x10/0x10 [ 976.051749][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 976.057891][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 976.064054][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 976.070195][ T31] ? watchdog.cold+0x198/0x1ca [ 976.074952][ T31] ? watchdog+0xd35/0x1050 [ 976.079356][ T31] watchdog.cold+0x1a9/0x1ca [ 976.083980][ T31] ? __pfx_watchdog+0x10/0x10 [ 976.088645][ T31] ? __kthread_parkme+0x18c/0x230 [ 976.093662][ T31] ? kthread+0x13a/0x450 [ 976.097894][ T31] ? __pfx_watchdog+0x10/0x10 [ 976.102555][ T31] kthread+0x370/0x450 [ 976.106615][ T31] ? __pfx_kthread+0x10/0x10 [ 976.111196][ T31] ret_from_fork+0x754/0xd80 [ 976.115780][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 976.120894][ T31] ? __switch_to+0x7b4/0x1120 [ 976.125643][ T31] ? __pfx_kthread+0x10/0x10 [ 976.130233][ T31] ret_from_fork_asm+0x1a/0x30 [ 976.134998][ T31] [ 976.138292][ T31] Kernel Offset: disabled [ 976.142724][ T31] Rebooting in 86400 seconds..