last executing test programs: 2m43.537592016s ago: executing program 1 (id=717): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mlockall$auto(0x7) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/dummy0/addr_gen_mode\x00', 0x1, 0x0) pwrite64$auto(r0, 0x0, 0x0, 0x2000000000040007) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) tgkill$auto(0x0, 0x0, 0x11) readv$auto(0x3, 0x0, 0x7) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010031bd7000fddbdf250c00000018000380140003800300b0800c000200657468746f6f6c001800018014000200776c616e30"], 0x44}}, 0x24048084) 2m42.2931053s ago: executing program 1 (id=725): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) socket(0x1d, 0x2, 0x7) socket(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) pidfd_open$auto(0x1, 0x0) socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0xa, 0x5, 0x0) r0 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r0], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) 2m42.061689735s ago: executing program 1 (id=727): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) waitid$auto_P_ALL(0x0, 0xe, &(0x7f0000000340)={@siginfo_0_0={0xe, 0x2, 0x1, @_sigsys={&(0x7f0000000240)="42b0c89670754d7c136b96b4a66c46a06b2ae30d2dc311827926354870ae18e520c9942cbb727ad9d1004e7ceee0f6528c08e4a11a907dedfe0538dbebd0a46638745a821ec33e749a9a2aefe289a8627446ad2bec1f96856715ac9d7759f01cb6f2daa5a180150a28620b407b9969", 0x2, 0x3}}}, 0x3e, &(0x7f00000003c0)={{0x9, 0xefd}, {0x4, 0x7}, 0x0, 0xfffffffffffffffb, 0x3ff, 0x8101, 0xc, 0xf3, 0x1, 0xd, 0x4, 0x5, 0xfffc, 0x8001, 0xc}) io_uring_setup$auto(0x6, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xae00, 0x0) ioctl$auto(0x3, 0x4018aebd, r1) sendto$auto(r0, &(0x7f0000000140)="c99b97a4a18833a72aff5c6edec12838e6c36aa3b8efa7e23eab4f993ce66256c3ee1fa1470cc34d0844ef66ea5db21196afca7b6062c22e25bd38ff3a8ffce75c51cd146c42cece3a3c2eb0447313f733c79892b36978f22e11d89e044a5b7bc7cdd5b31f", 0x0, 0x1e71, &(0x7f0000000000)=@can, 0x2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) 2m41.05676481s ago: executing program 1 (id=734): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x4) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x4a800, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x14, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) mmap$auto(0x1, 0x8, 0xdf, 0x7d, r0, 0x3) sysfs$auto(0x2, 0x24, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r1, 0x0, 0x3) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x81, 0x3, 0x15, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x1, 0x2020009, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/binder1\x00', 0x189160, 0x0) ioctl$auto_BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x129041, 0x0) epoll_create$auto(0x3e) ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0xb, 0xd, 0x2007d48, 0x948b, 0x4, 0x0, 0x4b, 0x3, 0x0, 0x80000001, 0x7, 0x4, 0x5, 0x2, 0x1]}, 0x0) 2m39.844720935s ago: executing program 1 (id=738): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg1\x00', 0x180443, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x121d02, 0x0) socket(0x10, 0x2, 0x14) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x622340, 0x0) openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) eventfd$auto(0x3) pipe$auto(0x0) socketpair$auto(0x1e, 0x1, 0x4, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x40384708, 0x0) 2m39.033141952s ago: executing program 1 (id=740): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) ustat$auto(0xca, &(0x7f00000000c0)={0x19c, 0xb0, "9e2e84d6e302", "931c5174a899"}) openat$auto_fops_u8_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/nfcsim/nfc1/dropframe\x00', 0x2c8200, 0x0) ioctl$auto_VHOST_SET_VRING_ERR2(0xffffffffffffffff, 0x4008af22, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x2, 0x208, 0x8004000080000db, 0x40eb2, 0x401, 0x300000000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/est_nice\x00', 0x143881, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20461, 0x0) mmap$auto(0x0, 0x200005, 0x4000000000e3, 0x840eb2, 0xd, 0x300000000000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r1, 0x0, 0x1ff) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r2 = semctl$auto_GETPID(0x5, 0xfff, 0xb, 0x1) move_pages$auto(r2, 0x5, 0x0, &(0x7f00000001c0)=0xc, 0x0, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b74, 0x2, 0x8000) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) ioctl$auto(r3, 0xb21064a6, 0x20000a) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x1eb082, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/smaps_rollup\x00', 0x840, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x48041, 0x0) write$auto(r4, 0x0, 0x8ed) 2m23.876042376s ago: executing program 32 (id=740): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) ustat$auto(0xca, &(0x7f00000000c0)={0x19c, 0xb0, "9e2e84d6e302", "931c5174a899"}) openat$auto_fops_u8_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/nfcsim/nfc1/dropframe\x00', 0x2c8200, 0x0) ioctl$auto_VHOST_SET_VRING_ERR2(0xffffffffffffffff, 0x4008af22, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x2, 0x208, 0x8004000080000db, 0x40eb2, 0x401, 0x300000000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/est_nice\x00', 0x143881, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20461, 0x0) mmap$auto(0x0, 0x200005, 0x4000000000e3, 0x840eb2, 0xd, 0x300000000000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r1, 0x0, 0x1ff) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r2 = semctl$auto_GETPID(0x5, 0xfff, 0xb, 0x1) move_pages$auto(r2, 0x5, 0x0, &(0x7f00000001c0)=0xc, 0x0, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b74, 0x2, 0x8000) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) ioctl$auto(r3, 0xb21064a6, 0x20000a) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x1eb082, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/smaps_rollup\x00', 0x840, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x48041, 0x0) write$auto(r4, 0x0, 0x8ed) 1m54.985986225s ago: executing program 3 (id=903): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x581402, 0x0) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0xc0403d11, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) waitid$auto_P_ALL(0x0, 0x3b000, &(0x7f0000000280)={@siginfo_0_0={0x200, 0x0, 0x6, @_sigsys={&(0x7f00000000c0)="55eb8df319677f9aebf453b195011dc75b314a6a2de037085459dc03a1ad199752151699faea53575d94e9e2f930abeb4f1cd2fa58eef0e25b15baeca5f900c19f32e51de1ba99fb4f82871232b30000000000", 0x1000, 0x826}}}, 0x3, &(0x7f0000000300)={{0xda0000000000000, 0x969d}, {0x2, 0x6}, 0x8000000000000000, 0xa, 0x8, 0xd11c, 0xb871, 0x6, 0x9ffd, 0x81, 0x4, 0x1000000000f8c5, 0x1000, 0x81, 0xc, 0xd}) madvise$auto(0x0, 0x200007, 0x1d) pwrite64$auto(0xc8, 0x0, 0xfded, 0x6) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f00000003c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4G\x0f\xed\xc0D\xd6\xaf%\xa5\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xccT\fZq', 0x100000a3da) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) open(&(0x7f0000000040)='./cgroup\x00', 0x80, 0xb5d1af1605322de0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r4, 0x0, 0x1f40) 1m53.678498801s ago: executing program 3 (id=908): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0x1, 0x3, 0x2) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r1 = socket(0x1e, 0x1, 0x0) r2 = socket(0x1d, 0x1, 0x6) r3 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000300), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth0_to_bridge\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="2f212cbd7010ca705d", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8810) sendmsg$auto_ETHTOOL_MSG_MM_GET(r1, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x450000}, 0xc, &(0x7f0000000500)={0x0}}, 0x4040) bind$auto(r2, &(0x7f0000000040)=@can={0x1d, r4, 0xfd}, 0x6a) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0xfffffffc, 0x1, 0x8000000000000000, 0x0) r8 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vbi0\x00', 0x80382, 0x0) vmsplice$auto(r0, &(0x7f0000000140)={&(0x7f00000000c0)="bc0e6c90aa18e7a675776ee36eb756c0601842e67a", 0x100000001}, 0x1ff, 0xf) ioctl$auto(r8, 0xc0045627, r1) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 1m53.134982465s ago: executing program 3 (id=911): syz_genetlink_get_family_id$auto_net_shaper(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x7) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x110c230000, 0x1, 0x9) getrandom$auto(0x0, 0x3, 0x80000001) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0xfffffffe, 0x44f, 0xa, 0x10, 0x1007181, 0x0, 0x62, 0x7, 0x800, 0x0, 0x26, 0x4, 0x200003fffffe, 0xfffffffffffffff5, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x862, 0xf, 0x22002, 0x200, 0x0, 0x62f, 0x6, 0x0, 0x0, 0x0, 0xb626, [0xfffffffffffffffe, 0xffffffffffff04ef, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e, 0x0, 0xa7, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x40, 0x81, 0x8a0, 0xb, 0x81, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100002, 0x0, 0x3ff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4000000000000]}, 0x800000000000b, 0xbc) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x4b72, r1) ioctl$auto_MON_IOCG_STATS(r1, 0x80089203, &(0x7f00000003c0)={0xa71b, 0x10000}) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd0c, &(0x7f00000001c0)) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_HE_BSS_COLOR={0x20, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x44) msync$auto(0x110c230000, 0x200001, 0x6) 1m51.452050127s ago: executing program 3 (id=917): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/sunrpc/parameters/tcp_max_slot_table_entries\x00', 0x88282, 0x0) sendfile$auto(r2, r2, 0x0, 0x71) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r1) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40000) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) mmap$auto(0x0, 0x4000005, 0xfffffffffffffe01, 0x8051, 0x3, 0x10000000008000) r3 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r3, &(0x7f0000000140)={{0x0, 0x3, 0x0, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000006c0)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x7}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2400000b756, 0x10001}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000080)={{@raw=0x1002, 0x6, 0xa, 0x7, "26d718b7d3ee69350e4ede7079dcb0c24c8aa1e3c7ee2e00308b8a7d74b0a707f7045e6d035b196ca83379bb", @inferred=0x0}, 0x7, 0xfffffffc, 0x82, @inferred, @enumerated={0x0, 0x6, "ad75b255b5cdd64a6b7a755de55f8e3b81e6c4e6fbf4f15a5ca5dc29f056113e9b60cd7bd82081ec90b01a6c1ae79b9fd0930da366e011ae30c0a636577776a6", 0x2003, 0xcac}, "18a801006a0900000000000000c4bd5359eeadc8357752b72fa176254d8797cdffd02555ac83a07983eeddcd24b626f54ad9d763dcdc9120af8b7c848ceb55a7"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000340)={{@raw=0x6, 0x308, 0xffff, 0x9, "cd9ac857d737bb20feeb0c005eb571a89986bbec6f001887a4d49e096afdf3bb0959c5432aadf71c2f91af00", @raw=0x4}, 0x9, 0xf, 0x1, @inferred=r5, @enumerated={0x7133, 0x5, "8e4ccd6746972c6ac28bdde69c5070d317980efcb9b3e8d7b8176a709302cefa4e7ad3920798a929a43f165472bdaab2c5d1c3f67faea7d8cf5430450d8da99c", 0xffffffff, 0xfffffff6}, "842e773e1652f754bc887e438da1a21b2bb21f22fdee260a7182c53b299693a64e7c248a610a2fc8edae9b434d3ad49e011705988084914add78fa45450688a7"}) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000001c0), r3) sendmsg$auto_BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TQ={0x5, 0x19, 0x9}, @BATADV_ATTR_TT_TTVN={0x5, 0x11, 0x2}, @BATADV_ATTR_TT_TTVN={0x5, 0x11, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4000) futex$auto(&(0x7f0000001d00)=0x4, 0x5, 0x7, 0x0, &(0x7f0000001d80)=0x3ff, 0x401) 1m51.112502208s ago: executing program 3 (id=918): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/snd_hda_intel/parameters/power_save\x00', 0x80002, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x101, 0x6, 0x1, 0x0) r1 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000540), 0x40, 0x0) ioctl$auto_TUNGETIFF(r1, 0x800454d2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/uprobe_events\x00', 0x2, 0x0) write$auto_uprobe_events_ops_trace_uprobe(r2, 0x0, 0x0) read$auto(0x3, 0x0, 0x10) fsopen$auto(0x0, 0x1) syz_genetlink_get_family_id$auto_nl802154(0x0, r0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) io_uring_setup$auto(0xfffffff9, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) write$auto(0x3, 0x0, 0xffd8) 1m50.654063957s ago: executing program 3 (id=920): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x581402, 0x0) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0xc0403d11, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x5, 0x3, 0x14, r2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x1d) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card1\x00', 0x109c01, 0x0) pwrite64$auto(0xc8, 0x0, 0xfded, 0x6) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f00000003c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4G\x0f\xed\xc0D\xd6\xaf%\xa5\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xccT\fZq', 0x100000a3da) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) open(&(0x7f0000000040)='./cgroup\x00', 0x80, 0xb5d1af1605322de0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) close_range$auto(0x2, 0x8, 0x0) 1m38.26130305s ago: executing program 0 (id=966): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setpgid$auto(0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, 0x0, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/snd_aloop.0/driver_override\x00', 0x101901, 0x0) write$auto(r1, 0x0, 0x81) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) socket(0xf, 0x3, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x5, 0xfffff05e, 0x0, 0x0, 0x80000001) gettid() r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile$auto(r2, r3, 0x0, 0x1000200) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8600, 0x0) 1m37.234790205s ago: executing program 0 (id=971): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) unshare$auto(0x40000080) write$auto(0xca, 0x0, 0x7f) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101840, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x282, 0x0) socket(0x18, 0xa, 0x1) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\xb0\xa1\xeeJ\xd8\xef\xc8t\x9d\x1e=J\x91W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7b#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbr\xb9\xc3\xacH!\xc1\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2?\x0e\x85\xaaIGu\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1bx#\x87\xa9\x10\x9b\xf8YD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*w\x13\x96\xd5\xd0\x877\x12\xbc\xa1\xd0h@|\xf9\xfa\x9b\x17\x94\xb9\xe7\xf3\x15\x05\x91\xe8\x98p\x7f:\xd7s\xd9wo\x82\xda\xec\x91\xb7\xd9;H\x8a\b\x00\x00\x00\x00\x00\x00\x00\x8aZ\x94\x14$X7\xaeW6=^I\x9fQ\r5c\x81\xca]\x97m\x89o\x8f\xd8}P>I\xd0\xb3\x88C\xd7', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd5, 0x948b, 0x3, 0x15f4da0a, 0x4, 0x3, 0x62, 0x80000002, 0x7, 0x1, 0x9, 0x3, 0xfffffffffefffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x7, 0xd40, 0x1a000, 0x948f, 0x5, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0xa, 0x8, 0x6]}, 0x0) flock$auto(0xffffffffffffffff, 0x1) r1 = open(0x0, 0x4242, 0x59) close_range$auto(r1, 0xffffffffffffffff, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0xba8) memfd_secret$auto(0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0) write$auto(r2, &(0x7f0000000000)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x3ff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/virtual/block/ram12/events\x00', 0x101480, 0x0) 1m36.019124458s ago: executing program 0 (id=976): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0x1, 0x3, 0x2) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x1e, 0x1, 0x0) socket(0x1d, 0x1, 0x6) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) socket(0xa, 0x801, 0x84) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vbi0\x00', 0x80382, 0x0) vmsplice$auto(r0, &(0x7f0000000140)={&(0x7f00000000c0)="bc0e6c90aa18e7a675776ee36eb756c0601842e67a", 0x100000001}, 0x1ff, 0xf) 1m35.658004106s ago: executing program 0 (id=978): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/sunrpc/parameters/tcp_max_slot_table_entries\x00', 0x88282, 0x0) sendfile$auto(r2, r2, 0x0, 0x71) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r1) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, r3, 0x301, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x40000) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) mmap$auto(0x0, 0x4000005, 0xfffffffffffffe01, 0x8051, 0x3, 0x10000000008000) r4 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0x3, 0x0, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f00000006c0)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x7}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2400000b756, 0x10001}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000080)={{@raw=0x1002, 0x6, 0xa, 0x7, "26d718b7d3ee69350e4ede7079dcb0c24c8aa1e3c7ee2e00308b8a7d74b0a707f7045e6d035b196ca83379bb", @inferred=0x0}, 0x7, 0xfffffffc, 0x82, @inferred, @enumerated={0x0, 0x6, "ad75b255b5cdd64a6b7a755de55f8e3b81e6c4e6fbf4f15a5ca5dc29f056113e9b60cd7bd82081ec90b01a6c1ae79b9fd0930da366e011ae30c0a636577776a6", 0x2003, 0xcac}, "18a801006a0900000000000000c4bd5359eeadc8357752b72fa176254d8797cdffd02555ac83a07983eeddcd24b626f54ad9d763dcdc9120af8b7c848ceb55a7"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000340)={{@raw=0x6, 0x308, 0xffff, 0x9, "cd9ac857d737bb20feeb0c005eb571a89986bbec6f001887a4d49e096afdf3bb0959c5432aadf71c2f91af00", @raw=0x4}, 0x9, 0xf, 0x1, @inferred=r6, @enumerated={0x7133, 0x5, "8e4ccd6746972c6ac28bdde69c5070d317980efcb9b3e8d7b8176a709302cefa4e7ad3920798a929a43f165472bdaab2c5d1c3f67faea7d8cf5430450d8da99c", 0xffffffff, 0xfffffff6}, "842e773e1652f754bc887e438da1a21b2bb21f22fdee260a7182c53b299693a64e7c248a610a2fc8edae9b434d3ad49e011705988084914add78fa45450688a7"}) r7 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000001c0), r4) sendmsg$auto_BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r7, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TQ={0x5, 0x19, 0x9}, @BATADV_ATTR_TT_TTVN={0x5, 0x11, 0x2}, @BATADV_ATTR_TT_TTVN={0x5, 0x11, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4000) futex$auto(&(0x7f0000001d00)=0x4, 0x5, 0x7, 0x0, &(0x7f0000001d80)=0x3ff, 0x401) 1m35.24177151s ago: executing program 33 (id=920): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x581402, 0x0) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0xc0403d11, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x5, 0x3, 0x14, r2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x1d) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card1\x00', 0x109c01, 0x0) pwrite64$auto(0xc8, 0x0, 0xfded, 0x6) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f00000003c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4G\x0f\xed\xc0D\xd6\xaf%\xa5\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xccT\fZq', 0x100000a3da) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) open(&(0x7f0000000040)='./cgroup\x00', 0x80, 0xb5d1af1605322de0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) close_range$auto(0x2, 0x8, 0x0) 1m35.221827162s ago: executing program 0 (id=980): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xae00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x4018aebd, r1) sendto$auto(r0, &(0x7f0000000140)="c99b97a4a18833a72aff5c6edec12838e6c36aa3b8efa7e23eab4f993ce66256c3ee1fa1470cc34d0844ef66ea5db21196afca7b6062c22e25bd38ff3a8ffce75c51cd146c42cece3a3c2eb0447313f733c79892b36978f22e11d89e044a5b7bc7cdd5b31f", 0x0, 0x1e71, &(0x7f0000000000)=@can, 0x2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) 1m34.014684338s ago: executing program 0 (id=985): close_range$auto(0x2, 0x8, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x2000, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48500, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x42082, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x5) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sem\x00', 0xc8202, 0x0) socket(0x18, 0x80000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100f9020000fbdbdf250100000008000b00ac141420080001"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x0) r0 = socket(0x11, 0xa, 0x9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/controlC0\x00', 0x880, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) socket(0xa, 0x2, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer2\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) 1m33.713033688s ago: executing program 4 (id=986): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/sunrpc/parameters/tcp_max_slot_table_entries\x00', 0x88282, 0x0) sendfile$auto(r2, r2, 0x0, 0x71) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r1) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40000) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x400, 0x0) mmap$auto(0x0, 0x4000005, 0xfffffffffffffe01, 0x8051, 0x3, 0x10000000008000) r3 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r3, &(0x7f0000000140)={{0x0, 0x3, 0x0, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000006c0)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x7}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2400000b756, 0x10001}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000080)={{@raw=0x1002, 0x6, 0xa, 0x7, "26d718b7d3ee69350e4ede7079dcb0c24c8aa1e3c7ee2e00308b8a7d74b0a707f7045e6d035b196ca83379bb", @inferred=0x0}, 0x7, 0xfffffffc, 0x82, @inferred, @enumerated={0x0, 0x6, "ad75b255b5cdd64a6b7a755de55f8e3b81e6c4e6fbf4f15a5ca5dc29f056113e9b60cd7bd82081ec90b01a6c1ae79b9fd0930da366e011ae30c0a636577776a6", 0x2003, 0xcac}, "18a801006a0900000000000000c4bd5359eeadc8357752b72fa176254d8797cdffd02555ac83a07983eeddcd24b626f54ad9d763dcdc9120af8b7c848ceb55a7"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000340)={{@raw=0x6, 0x308, 0xffff, 0x9, "cd9ac857d737bb20feeb0c005eb571a89986bbec6f001887a4d49e096afdf3bb0959c5432aadf71c2f91af00", @raw=0x4}, 0x9, 0xf, 0x1, @inferred=r5, @enumerated={0x7133, 0x5, "8e4ccd6746972c6ac28bdde69c5070d317980efcb9b3e8d7b8176a709302cefa4e7ad3920798a929a43f165472bdaab2c5d1c3f67faea7d8cf5430450d8da99c", 0xffffffff, 0xfffffff6}, "842e773e1652f754bc887e438da1a21b2bb21f22fdee260a7182c53b299693a64e7c248a610a2fc8edae9b434d3ad49e011705988084914add78fa45450688a7"}) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000001c0), r3) sendmsg$auto_BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TQ={0x5, 0x19, 0x9}, @BATADV_ATTR_TT_TTVN={0x5, 0x11, 0x2}, @BATADV_ATTR_TT_TTVN={0x5, 0x11, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4000) futex$auto(&(0x7f0000001d00)=0x4, 0x5, 0x7, 0x0, &(0x7f0000001d80)=0x3ff, 0x401) 1m33.330894803s ago: executing program 4 (id=988): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0x1, 0x3, 0x2) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r1 = socket(0x1e, 0x1, 0x0) r2 = socket(0x1d, 0x1, 0x6) r3 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000300), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth0_to_bridge\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r4) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="2f212cbd7010ca705d", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8810) sendmsg$auto_ETHTOOL_MSG_MM_GET(r1, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x450000}, 0xc, &(0x7f0000000500)={0x0}}, 0x4040) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) socketpair$auto(0xfffffffc, 0x1, 0x8000000000000000, 0x0) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vbi0\x00', 0x80382, 0x0) vmsplice$auto(r0, &(0x7f0000000140)={&(0x7f00000000c0)="bc0e6c90aa18e7a675776ee36eb756c0601842e67a", 0x100000001}, 0x1ff, 0xf) ioctl$auto(r6, 0xc0045627, r1) 1m33.104312511s ago: executing program 4 (id=989): mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0xa, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) getsockopt$auto(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f0000000280)=0x1000c0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x800a6f2f, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) r3 = socket(0x10, 0x2, 0x0) connect$auto(r3, &(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x2100}, 0x6) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x40a02, 0x0) ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x23, 0x1, 0xe00, 0x87, 0x8, 0x102}) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) ioctl$auto_KVM_CREATE_VM(r5, 0x4048aecb, 0x0) 1m32.816248596s ago: executing program 4 (id=991): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2800, 0x0) r0 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(0x0, r1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, 0x0) read$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0x3, 0x402c542b, 0x38) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x30000881}, 0xc000810) wait4$auto(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, 0x0, 0x891) 1m32.601533653s ago: executing program 4 (id=992): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2800, 0x0) r0 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(0x0, r1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, 0x0) read$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0x3, 0x402c542b, 0x38) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x30000881}, 0xc000810) wait4$auto(0xffffffffffffffff, 0x0, 0x0, 0x0) msgctl$auto_MSG_INFO(0x8, 0xc, 0x0) sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, 0x0, 0x891) 1m32.380826245s ago: executing program 4 (id=993): openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2201, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0\x00', 0x200, 0x0) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop0\x00', 0x6c602, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/hw_queues\x00', 0x80800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0x1263, 0xffffffffffffffff) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r1, &(0x7f00000000c0)='N\xd5\f\xb9GC*(,\x80\xc4bAL\xa3`\xb1\xf2\xe7\xc0/\xff', 0x100000001) write$auto(r1, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x5, 0x0) fcntl$auto_F_WRLCK(r2, 0x3ff, 0x1) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r3, 0x64c6, 0xffffffffffffffff) 1m26.110847702s ago: executing program 5 (id=1008): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg1\x00', 0x180443, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x121d02, 0x0) socket(0x10, 0x2, 0x14) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x622340, 0x0) openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) eventfd$auto(0x3) pipe$auto(0x0) socketpair$auto(0x1e, 0x1, 0x4, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_TCFLSH2(r0, 0x40384708, 0x0) 1m25.847891445s ago: executing program 5 (id=1009): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) ioctl$auto_TIOCGDEV2(r0, 0x80045432, &(0x7f0000000040)=0xddc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r1, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x4a7) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) getpgid(0xffffffffffffffff) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x414041, 0x0) mmap$auto(0x0, 0x400008, 0xde, 0x9b72, 0x2, 0x800008000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x9, 0x20000000) getpid() socket(0xa, 0x2, 0x0) 1m24.651817078s ago: executing program 5 (id=1012): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x4241, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) ioctl$auto(0x3, 0x80004508, 0x10000000000402) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x6}, 0x1b) unshare$auto(0x40000080) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0) mmap$auto(0x0, 0x20009, 0x44000000000df, 0xeb1, 0x401, 0x8000) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x12\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$auto_RNDADDENTROPY(r1, 0x40085203, 0x0) bpf$auto(0x25, &(0x7f0000000140)=@link_create={@prog_fd=0xffffffffffffffff, @target_ifindex, 0x1, 0x9, @tracing={0x12, 0x1}}, 0xff) getsockopt$auto_SO_RCVBUF(r0, 0x5, 0x8, &(0x7f0000000200)='\x00', &(0x7f0000000240)) msgsnd$auto(0xfffffffe, &(0x7f0000000040)={0x3, 0x7}, 0x400, 0x1) prctl$auto(0x4, 0xffffffffffff8000, 0x0, 0x80000001, 0x1ea280000000000) ioctl$auto_proc_reg_file_ops_compat_inode(r2, 0x4, &(0x7f0000000280)="f26891cb2ed18376017ff1ab12c1792935603a41d4aa06cb408af493565f5f681a8ea3c393851f3e9e9ff18e46c874829f4690aa9deb4ce9ff6524a4e182a843681ee75966c8d0e7e77d777a1531cdc6faff458cf96f44dab5415092292166f727df1ee0ae366beace4eb1de82c93a7f5f0a839fe922f2b3393f4df6af12803213f171c129cc17d13400c1da13f077dfa7251c1a477921e24f5cdc93dd2292daaee610ad261965c267f6a7") read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00<\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t+\xe4\xc2\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) write$auto_console_fops_tty_io(r3, &(0x7f0000000000)="c80d1b5d399b65", 0xfdef) msgrcv$auto(0x0, 0x0, 0x4bd, 0x1, 0xf1) 1m24.247567451s ago: executing program 5 (id=1013): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg1\x00', 0x180443, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x121d02, 0x0) socket(0x10, 0x2, 0x14) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x622340, 0x0) openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) eventfd$auto(0x3) pipe$auto(0x0) socketpair$auto(0x1e, 0x1, 0x4, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_TCFLSH2(r0, 0x40384708, 0x0) 1m23.979713212s ago: executing program 5 (id=1014): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x40100, 0x0) readv$auto(0x3, 0x0, 0x7) ioctl$auto_EVIOCGMASK(r0, 0x80104592, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x10000100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) io_uring_register$auto(r1, 0x3, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x3, 0x2, 0x3, 0x1) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x8, 0x3, 0x2, 0x4) setrlimit$auto(0xc, &(0x7f0000000040)={0x5, 0x2}) socket(0xf, 0x800, 0x4) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/admmidi2\x00', 0x88042, 0x0) ioprio_set$auto(0x1, 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x8, 0x7, 0x9, 0x3) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-0/xps_cpus\x00', 0x10b062, 0x0) write$auto(r2, 0x0, 0x81) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x3) openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) setsockopt$auto(0x3, 0x1, 0x19, 0xffffffffffffffff, 0x0) 1m23.833680672s ago: executing program 5 (id=1015): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xb, 0x3, 0x1ff, 0x10001001, 0x1, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb5, 0x2, 0x7, 0x10002, 0x7f, 0x8, 0x5, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0xfffd, 0xfffffffc, [0x56, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x46, 0x7, 0x0, 0x0, 0x0, 0x7, 0x4, 0x2c, 0xa, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x81, 0x0, 0x1, 0x1, 0xfffff7ffffffffff, 0x5eb3, 0x8000000, 0x0, 0xffffffffffffffff, 0x3]}, 0x1fe, 0xd) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd03, &(0x7f00000001c0)) r2 = socket(0x11, 0x80000, 0x2) getpeername$auto(r2, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = socket(0x2a, 0x2, 0x1) connect$auto(r3, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) io_uring_setup$auto(0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x23, 0x80805, 0x0) getsockopt$auto(r4, 0x40000000113, 0x1, 0xfffffffffffffffc, 0x0) unshare$auto(0x85) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8003) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) write$auto(0x3, 0x0, 0x7fffffff) ioctl$auto(r0, 0x1, 0xffffffffffffffff) fcntl$auto_F_SETOWN_EX(r0, 0xf, 0x5) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x10a00, 0x0) 1m18.936573468s ago: executing program 34 (id=985): close_range$auto(0x2, 0x8, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x2000, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48500, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x42082, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x5) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sem\x00', 0xc8202, 0x0) socket(0x18, 0x80000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100f9020000fbdbdf250100000008000b00ac141420080001"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x0) r0 = socket(0x11, 0xa, 0x9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/controlC0\x00', 0x880, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) socket(0xa, 0x2, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer2\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) 1m17.239202445s ago: executing program 35 (id=993): openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2201, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0\x00', 0x200, 0x0) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop0\x00', 0x6c602, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/hw_queues\x00', 0x80800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0x1263, 0xffffffffffffffff) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r1, &(0x7f00000000c0)='N\xd5\f\xb9GC*(,\x80\xc4bAL\xa3`\xb1\xf2\xe7\xc0/\xff', 0x100000001) write$auto(r1, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x5, 0x0) fcntl$auto_F_WRLCK(r2, 0x3ff, 0x1) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r3, 0x64c6, 0xffffffffffffffff) 1m8.69160256s ago: executing program 36 (id=1015): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xb, 0x3, 0x1ff, 0x10001001, 0x1, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb5, 0x2, 0x7, 0x10002, 0x7f, 0x8, 0x5, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0xfffd, 0xfffffffc, [0x56, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x46, 0x7, 0x0, 0x0, 0x0, 0x7, 0x4, 0x2c, 0xa, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x81, 0x0, 0x1, 0x1, 0xfffff7ffffffffff, 0x5eb3, 0x8000000, 0x0, 0xffffffffffffffff, 0x3]}, 0x1fe, 0xd) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd03, &(0x7f00000001c0)) r2 = socket(0x11, 0x80000, 0x2) getpeername$auto(r2, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = socket(0x2a, 0x2, 0x1) connect$auto(r3, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) io_uring_setup$auto(0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x23, 0x80805, 0x0) getsockopt$auto(r4, 0x40000000113, 0x1, 0xfffffffffffffffc, 0x0) unshare$auto(0x85) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8003) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) write$auto(0x3, 0x0, 0x7fffffff) ioctl$auto(r0, 0x1, 0xffffffffffffffff) fcntl$auto_F_SETOWN_EX(r0, 0xf, 0x5) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x10a00, 0x0) 6.504580031s ago: executing program 7 (id=1282): mmap$auto(0x0, 0x400008, 0xdf, 0xfffffffffffffc10, 0xffffffffffffffff, 0x800008000) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x5c) fcntl$auto(r0, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae80, 0x0) ioctl$auto(r1, 0xae44, 0xffffffffffffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptywf\x00', 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xb, 0x4, 0x80) unshare$auto(0x40000080) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x0, 0x0) lseek$auto(r2, 0x7fd, 0x1) mmap$auto(0x5, 0x580f, 0x112f4a03, 0x8000000008011, 0x3, 0x0) fadvise64$auto(0xffffffffffffffff, 0x0, 0xffffffff80000001, 0x8) futex_waitv$auto(&(0x7f0000000000)={0xb, 0x7ffffffff000, 0x6}, 0x1, 0x0, 0x0, 0x623d) msgget$auto(0x0, 0x5) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, 0x0, 0x20602, 0x0) msgctl$auto(0x0, 0x0, 0x0) 5.585697479s ago: executing program 7 (id=1289): bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0xc, 0x24, 0x1, 0xffffffffffffffff, 0x0, 0x5}, 0x4f4) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x0, 0x2, 0x8, 0xc, 0x66b, 0x4, 0x1}, 0x6f4) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) ioctl$auto_SNDCTL_DSP_RESET(r0, 0x5000, 0x0) bpf$auto(0x1, 0x0, 0x9) connect$auto(0x3, 0x0, 0x50) r1 = io_uring_setup$auto(0x59, 0x0) io_uring_enter$auto(r1, 0x9, 0x820e, 0x6, 0x0, 0x18) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r2, 0x1269, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) sendfile$auto(r3, r3, 0x0, 0x7fffe000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xa40, 0x0) ioctl$auto(r4, 0x5606, r4) fcntl$auto_F_GETPIPE_SZ(r4, 0x408, 0x5) 5.068720757s ago: executing program 7 (id=1290): setresgid$auto(0x81, 0x800000a0, 0x8) setgroups$auto(0x10, &(0x7f0000000000)=0x80) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x40009, 0xde, 0x9b73, 0xffffffffffffffff, 0x27ffc) write$auto(0xffffffffffffffff, 0x0, 0x70) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/usb/drivers/usbip-host/rebind\x00', 0x121681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)='-', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/netdevsim/netdevsim4/ports/2/bpf_tc_non_bound_accept\x00', 0x100, 0x0) mmap$auto(0x657, 0x2020009, 0x3, 0xebd, r1, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x9, 0x3, 0x2) setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) ioctl$auto_MEMUNLOCK(0xffffffffffffffff, 0x40084d06, &(0x7f0000000100)={0x3, 0x56}) mmap$auto(0x0, 0x1, 0x9, 0xeb1, 0xfffffffffffffffa, 0x9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x1021}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) 4.430552848s ago: executing program 8 (id=1291): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x0, 0x238, 0x1000, 0x12, r0, 0x28000) r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r1, &(0x7f0000001680)="a7", 0x80047) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, 0x0, 0x6a) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) mknod$auto(&(0x7f0000000080)='}[,&*}\x00', 0xe6c, 0x17) llistxattr$auto(&(0x7f0000000040)='}[,&*}\x00', 0x0, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mlock$auto(0x1004, 0x6) 4.397668349s ago: executing program 2 (id=1300): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) waitid$auto_P_ALL(0x0, 0xe, &(0x7f0000000340)={@siginfo_0_0={0xe, 0x2, 0x1, @_sigsys={&(0x7f0000000240)="42b0c89670754d7c136b96b4a66c46a06b2ae30d2dc311827926354870ae18e520c9942cbb727ad9d1004e7ceee0f6528c08e4a11a907dedfe0538dbebd0a46638745a821ec33e749a9a2aefe289a8627446ad2bec1f96856715ac9d7759f01cb6f2daa5a180150a28620b407b9969", 0x2, 0x3}}}, 0x3e, &(0x7f00000003c0)={{0x9, 0xefd}, {0x4, 0x7}, 0x0, 0xfffffffffffffffb, 0x3ff, 0x8101, 0xc, 0xf3, 0x1, 0xd, 0x4, 0x5, 0xfffc, 0x8001, 0xc}) io_uring_setup$auto(0x6, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xae00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x4018aebd, r1) sendto$auto(r0, &(0x7f0000000140)="c99b97a4a18833a72aff5c6edec12838e6c36aa3b8efa7e23eab4f993ce66256c3ee1fa1470cc34d0844ef66ea5db21196afca7b6062c22e25bd38ff3a8ffce75c51cd146c42cece3a3c2eb0447313f733c79892b36978f22e11d89e044a5b7bc7cdd5b31f", 0x0, 0x1e71, &(0x7f0000000000)=@can, 0x2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) 3.767573181s ago: executing program 7 (id=1293): socket(0x15, 0x5, 0x3) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = pidfd_open$auto(0x1, 0x0) r1 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r1, 0x65, 0x3, 0x0, 0x4) setns(r0, 0x60020000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) madvise$auto(0x800, 0x3, 0x4) syz_clone3(&(0x7f0000000300)={0x153326100, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0xa7) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) getsockopt$auto(0xffffffffffffffff, 0x84, 0x24, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x80000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) socket(0x1d, 0x2, 0x7) r2 = socket(0x2, 0x1, 0x0) sendmsg$auto_NL80211_CMD_ADD_LINK(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_COLOR_CHANGE_COUNT={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40814}, 0x20000090) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x40, 0x801ffdf, 0x1, 0x2000000000000006, 0x3, 0x8, 0x5, 0x6, 0x7, 0x1, 0x9, 0x2, 0x3, 0x5, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x3b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xffffffff00000000, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x5, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000]}, 0x5, 0x2) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0xffffff9e}, 0x40000) 3.682802072s ago: executing program 8 (id=1294): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mlockall$auto(0x7) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/dummy0/addr_gen_mode\x00', 0x1, 0x0) pwrite64$auto(r0, 0x0, 0x0, 0x2000000000040007) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) tgkill$auto(0x0, 0x0, 0x11) readv$auto(0x3, 0x0, 0x7) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010031bd7000fddbdf250c00000018000380140003800300b0800c000200657468746f6f6c001800018014000200776c616e30"], 0x44}}, 0x24048084) 3.461749173s ago: executing program 2 (id=1295): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/sunrpc/parameters/tcp_max_slot_table_entries\x00', 0x88282, 0x0) sendfile$auto(r2, r2, 0x0, 0x71) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r1) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, r3, 0x301, 0x70bd29, 0x25dfdbfe, {}, [@NETDEV_A_QSTATS_SCOPE={0xc, 0x4, 0x1}]}, 0x20}}, 0x40000) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x401, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) mmap$auto(0x0, 0x4000005, 0xfffffffffffffe01, 0x8051, 0x3, 0x10000000008000) r4 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0x3, 0x0, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000080)={{@raw=0x1002, 0x6, 0xa, 0x7, "26d718b7d3ee69350e4ede7079dcb0c24c8aa1e3c7ee2e00308b8a7d74b0a707f7045e6d035b196ca83379bb", @inferred=0x0}, 0x7, 0xfffffffc, 0x82, @inferred, @enumerated={0x0, 0x6, "ad75b255b5cdd64a6b7a755de55f8e3b81e6c4e6fbf4f15a5ca5dc29f056113e9b60cd7bd82081ec90b01a6c1ae79b9fd0930da366e011ae30c0a636577776a6", 0x2003, 0xcac}, "18a801006a0900000000000000c4bd5359eeadc8357752b72fa176254d8797cdffd02555ac83a07983eeddcd24b626f54ad9d763dcdc9120af8b7c848ceb55a7"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000340)={{@raw=0x6, 0x308, 0xffff, 0x9, "cd9ac857d737bb20feeb0c005eb571a89986bbec6f001887a4d49e096afdf3bb0959c5432aadf71c2f91af00", @raw=0x4}, 0x9, 0xf, 0x1, @inferred=r6, @enumerated={0x7133, 0x5, "8e4ccd6746972c6ac28bdde69c5070d317980efcb9b3e8d7b8176a709302cefa4e7ad3920798a929a43f165472bdaab2c5d1c3f67faea7d8cf5430450d8da99c", 0xffffffff, 0xfffffff6}, "842e773e1652f754bc887e438da1a21b2bb21f22fdee260a7182c53b299693a64e7c248a610a2fc8edae9b434d3ad49e011705988084914add78fa45450688a7"}) syz_genetlink_get_family_id$auto_batadv(&(0x7f00000001c0), r4) sendmsg$auto_BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x4000) futex$auto(&(0x7f0000001d00)=0x4, 0x5, 0x7, 0x0, &(0x7f0000001d80)=0x3ff, 0x401) 3.271750672s ago: executing program 2 (id=1296): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/sunrpc/parameters/tcp_max_slot_table_entries\x00', 0x88282, 0x0) sendfile$auto(r2, r2, 0x0, 0x71) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r1) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40000) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) mmap$auto(0x0, 0x4000005, 0xfffffffffffffe01, 0x8051, 0x3, 0x10000000008000) r3 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r3, &(0x7f0000000140)={{0x0, 0x3, 0x0, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000006c0)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x7}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2400000b756, 0x10001}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000080)={{@raw=0x1002, 0x6, 0xa, 0x7, "26d718b7d3ee69350e4ede7079dcb0c24c8aa1e3c7ee2e00308b8a7d74b0a707f7045e6d035b196ca83379bb"}, 0x7, 0xfffffffc, 0x82, @inferred, @enumerated={0x0, 0x6, "ad75b255b5cdd64a6b7a755de55f8e3b81e6c4e6fbf4f15a5ca5dc29f056113e9b60cd7bd82081ec90b01a6c1ae79b9fd0930da366e011ae30c0a636577776a6", 0x2003, 0xcac}, "18a801006a0900000000000000c4bd5359eeadc8357752b72fa176254d8797cdffd02555ac83a07983eeddcd24b626f54ad9d763dcdc9120af8b7c848ceb55a7"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f00000001c0), r3) sendmsg$auto_BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x4000) futex$auto(&(0x7f0000001d00)=0x4, 0x5, 0x7, 0x0, &(0x7f0000001d80)=0x3ff, 0x401) 3.130648267s ago: executing program 7 (id=1297): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/sunrpc/parameters/tcp_max_slot_table_entries\x00', 0x88282, 0x0) sendfile$auto(r2, r2, 0x0, 0x71) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r1) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, r3, 0x301, 0x70bd29, 0x25dfdbfe, {}, [@NETDEV_A_QSTATS_SCOPE={0xc, 0x4, 0x1}]}, 0x20}}, 0x40000) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) mmap$auto(0x0, 0x4000005, 0xfffffffffffffe01, 0x8051, 0x3, 0x10000000008000) r4 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0x3, 0x0, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f00000006c0)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x7}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2400000b756, 0x10001}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000080)={{@raw=0x1002, 0x6, 0xa, 0x7, "26d718b7d3ee69350e4ede7079dcb0c24c8aa1e3c7ee2e00308b8a7d74b0a707f7045e6d035b196ca83379bb"}, 0x7, 0xfffffffc, 0x82, @inferred, @enumerated={0x0, 0x6, "ad75b255b5cdd64a6b7a755de55f8e3b81e6c4e6fbf4f15a5ca5dc29f056113e9b60cd7bd82081ec90b01a6c1ae79b9fd0930da366e011ae30c0a636577776a6", 0x2003, 0xcac}, "18a801006a0900000000000000c4bd5359eeadc8357752b72fa176254d8797cdffd02555ac83a07983eeddcd24b626f54ad9d763dcdc9120af8b7c848ceb55a7"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, 0x0) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000001c0), r4) sendmsg$auto_BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TQ={0x5, 0x19, 0x9}, @BATADV_ATTR_TT_TTVN={0x5, 0x11, 0x2}, @BATADV_ATTR_TT_TTVN={0x5, 0x11, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4000) futex$auto(&(0x7f0000001d00)=0x4, 0x5, 0x7, 0x0, &(0x7f0000001d80)=0x3ff, 0x401) 3.012290564s ago: executing program 6 (id=1299): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/034/001\x00', 0x201, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x2401, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x73) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) socket(0xa, 0x2, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x161401, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/hugepages-64kB/stats/nr_anon\x00', 0x0, 0x0) socket(0x2b, 0x1, 0x0) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x109500, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socketpair$auto(0x4004, 0x8, 0x7, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) ioctl$auto_TCFLSH2(r0, 0xc0384707, 0x0) 2.824286319s ago: executing program 2 (id=1301): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) waitid$auto_P_ALL(0x0, 0xe, &(0x7f0000000340)={@siginfo_0_0={0xe, 0x2, 0x1, @_sigsys={&(0x7f0000000240)="42b0c89670754d7c136b96b4a66c46a06b2ae30d2dc311827926354870ae18e520c9942cbb727ad9d1004e7ceee0f6528c08e4a11a907dedfe0538dbebd0a46638745a821ec33e749a9a2aefe289a8627446ad2bec1f96856715ac9d7759f01cb6f2daa5a180150a28620b407b9969", 0x2, 0x3}}}, 0x3e, &(0x7f00000003c0)={{0x9, 0xefd}, {0x4, 0x7}, 0x0, 0xfffffffffffffffb, 0x3ff, 0x8101, 0xc, 0xf3, 0x1, 0xd, 0x4, 0x5, 0xfffc, 0x8001, 0xc}) io_uring_setup$auto(0x6, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xae00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x4018aebd, r1) sendto$auto(r0, &(0x7f0000000140)="c99b97a4a18833a72aff5c6edec12838e6c36aa3b8efa7e23eab4f993ce66256c3ee1fa1470cc34d0844ef66ea5db21196afca7b6062c22e25bd38ff3a8ffce75c51cd146c42cece3a3c2eb0447313f733c79892b36978f22e11d89e044a5b7bc7cdd5b31f", 0x0, 0x1e71, &(0x7f0000000000)=@can, 0x2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) 2.746647639s ago: executing program 7 (id=1302): semctl$auto_SETALL(0x0, 0x9, 0x11, 0x9) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15a}, 0x6, 0x8, 0x5) read$auto(0x3, 0x0, 0x8080) write$auto(0x3, 0x0, 0xffd8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) pipe2$auto(0x0, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x0, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x42000, 0x0) io_uring_setup$auto(0x59, 0x0) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ptrace$auto_PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x7, 0x4) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) acct$auto(&(0x7f00000001c0)='/dev/vhci\x00') madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 2.651931875s ago: executing program 6 (id=1303): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/sunrpc/parameters/tcp_max_slot_table_entries\x00', 0x88282, 0x0) sendfile$auto(r2, r2, 0x0, 0x71) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r1) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, r3, 0x301, 0x70bd29, 0x25dfdbfe, {}, [@NETDEV_A_QSTATS_SCOPE={0xc, 0x4, 0x1}]}, 0x20}}, 0x40000) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) mmap$auto(0x0, 0x4000005, 0xfffffffffffffe01, 0x8051, 0x3, 0x10000000008000) r4 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0x3, 0x0, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f00000006c0)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x7}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2400000b756, 0x10001}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000080)={{@raw=0x1002, 0x6, 0xa, 0x7, "26d718b7d3ee69350e4ede7079dcb0c24c8aa1e3c7ee2e00308b8a7d74b0a707f7045e6d035b196ca83379bb"}, 0x7, 0xfffffffc, 0x82, @inferred, @enumerated={0x0, 0x6, "ad75b255b5cdd64a6b7a755de55f8e3b81e6c4e6fbf4f15a5ca5dc29f056113e9b60cd7bd82081ec90b01a6c1ae79b9fd0930da366e011ae30c0a636577776a6", 0x2003, 0xcac}, "18a801006a0900000000000000c4bd5359eeadc8357752b72fa176254d8797cdffd02555ac83a07983eeddcd24b626f54ad9d763dcdc9120af8b7c848ceb55a7"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, 0x0) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000001c0), r4) sendmsg$auto_BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TQ={0x5, 0x19, 0x9}, @BATADV_ATTR_TT_TTVN={0x5, 0x11, 0x2}, @BATADV_ATTR_TT_TTVN={0x5, 0x11, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4000) futex$auto(&(0x7f0000001d00)=0x4, 0x5, 0x7, 0x0, &(0x7f0000001d80)=0x3ff, 0x401) 2.399825358s ago: executing program 8 (id=1304): setresgid$auto(0x81, 0x800000a0, 0x8) setgroups$auto(0x10, &(0x7f0000000000)=0x80) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x40009, 0xde, 0x9b73, 0xffffffffffffffff, 0x27ffc) write$auto(0xffffffffffffffff, 0x0, 0x70) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/usb/drivers/usbip-host/rebind\x00', 0x121681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)='-', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/netdevsim/netdevsim4/ports/2/bpf_tc_non_bound_accept\x00', 0x100, 0x0) mmap$auto(0x657, 0x2020009, 0x3, 0xebd, r1, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x9, 0x3, 0x2) setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) ioctl$auto_MEMUNLOCK(0xffffffffffffffff, 0x40084d06, &(0x7f0000000100)={0x3, 0x56}) mmap$auto(0x0, 0x1, 0x9, 0xeb1, 0xfffffffffffffffa, 0x9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x1021}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) 2.268415771s ago: executing program 6 (id=1305): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x0, 0x238, 0x1000, 0x12, r0, 0x28000) r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r1, &(0x7f0000001680)="a7", 0x80047) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, 0x0, 0x6a) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) mknod$auto(&(0x7f0000000080)='}[,&*}\x00', 0xe6c, 0x17) llistxattr$auto(&(0x7f0000000040)='}[,&*}\x00', 0x0, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mlock$auto(0x1004, 0x6) 1.289042022s ago: executing program 8 (id=1306): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) waitid$auto_P_ALL(0x0, 0xe, &(0x7f0000000340)={@siginfo_0_0={0xe, 0x2, 0x1, @_sigsys={&(0x7f0000000240)="42b0c89670754d7c136b96b4a66c46a06b2ae30d2dc311827926354870ae18e520c9942cbb727ad9d1004e7ceee0f6528c08e4a11a907dedfe0538dbebd0a46638745a821ec33e749a9a2aefe289a8627446ad2bec1f96856715ac9d7759f01cb6f2daa5a180150a28620b407b9969", 0x2, 0x3}}}, 0x3e, &(0x7f00000003c0)={{0x9, 0xefd}, {0x4, 0x7}, 0x0, 0xfffffffffffffffb, 0x3ff, 0x8101, 0xc, 0xf3, 0x1, 0xd, 0x4, 0x5, 0xfffc, 0x8001, 0xc}) io_uring_setup$auto(0x6, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xae00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x4018aebd, r1) sendto$auto(r0, &(0x7f0000000140)="c99b97a4a18833a72aff5c6edec12838e6c36aa3b8efa7e23eab4f993ce66256c3ee1fa1470cc34d0844ef66ea5db21196afca7b6062c22e25bd38ff3a8ffce75c51cd146c42cece3a3c2eb0447313f733c79892b36978f22e11d89e044a5b7bc7cdd5b31f", 0x0, 0x1e71, &(0x7f0000000000)=@can, 0x2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) 1.200648141s ago: executing program 6 (id=1307): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/sunrpc/parameters/tcp_max_slot_table_entries\x00', 0x88282, 0x0) sendfile$auto(r2, r2, 0x0, 0x71) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r1) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, r3, 0x301, 0x70bd29, 0x25dfdbfe, {}, [@NETDEV_A_QSTATS_SCOPE={0xc, 0x4, 0x1}]}, 0x20}}, 0x40000) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x401, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) mmap$auto(0x0, 0x4000005, 0xfffffffffffffe01, 0x8051, 0x3, 0x10000000008000) r4 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0x3, 0x0, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000080)={{@raw=0x1002, 0x6, 0xa, 0x7, "26d718b7d3ee69350e4ede7079dcb0c24c8aa1e3c7ee2e00308b8a7d74b0a707f7045e6d035b196ca83379bb", @inferred=0x0}, 0x7, 0xfffffffc, 0x82, @inferred, @enumerated={0x0, 0x6, "ad75b255b5cdd64a6b7a755de55f8e3b81e6c4e6fbf4f15a5ca5dc29f056113e9b60cd7bd82081ec90b01a6c1ae79b9fd0930da366e011ae30c0a636577776a6", 0x2003, 0xcac}, "18a801006a0900000000000000c4bd5359eeadc8357752b72fa176254d8797cdffd02555ac83a07983eeddcd24b626f54ad9d763dcdc9120af8b7c848ceb55a7"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000340)={{@raw=0x6, 0x308, 0xffff, 0x9, "cd9ac857d737bb20feeb0c005eb571a89986bbec6f001887a4d49e096afdf3bb0959c5432aadf71c2f91af00", @raw=0x4}, 0x9, 0xf, 0x1, @inferred=r6, @enumerated={0x7133, 0x5, "8e4ccd6746972c6ac28bdde69c5070d317980efcb9b3e8d7b8176a709302cefa4e7ad3920798a929a43f165472bdaab2c5d1c3f67faea7d8cf5430450d8da99c", 0xffffffff, 0xfffffff6}, "842e773e1652f754bc887e438da1a21b2bb21f22fdee260a7182c53b299693a64e7c248a610a2fc8edae9b434d3ad49e011705988084914add78fa45450688a7"}) syz_genetlink_get_family_id$auto_batadv(&(0x7f00000001c0), r4) sendmsg$auto_BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x4000) futex$auto(&(0x7f0000001d00)=0x4, 0x5, 0x7, 0x0, &(0x7f0000001d80)=0x3ff, 0x401) 1.048251152s ago: executing program 2 (id=1308): socket(0x15, 0x5, 0x3) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = pidfd_open$auto(0x1, 0x0) r1 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r1, 0x65, 0x3, 0x0, 0x4) setns(r0, 0x60020000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) madvise$auto(0x800, 0x3, 0x4) syz_clone3(&(0x7f0000000300)={0x153326100, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0xa7) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) getsockopt$auto(0xffffffffffffffff, 0x84, 0x24, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x80000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) socket(0x1d, 0x2, 0x7) r2 = socket(0x2, 0x1, 0x0) sendmsg$auto_NL80211_CMD_ADD_LINK(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_COLOR_CHANGE_COUNT={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40814}, 0x20000090) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x40, 0x801ffdf, 0x1, 0x2000000000000006, 0x3, 0x8, 0x5, 0x6, 0x7, 0x1, 0x9, 0x2, 0x3, 0x5, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x3b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xffffffff00000000, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x5, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000]}, 0x5, 0x2) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0xffffff9e}, 0x40000) 556.727779ms ago: executing program 6 (id=1309): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0x1, 0x3, 0x2) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r1 = socket(0x1d, 0x1, 0x6) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000300), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_bridge\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="2f212cbd7010ca705d", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8810) sendmsg$auto_ETHTOOL_MSG_MM_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x450000}, 0xc, &(0x7f0000000500)={0x0}}, 0x4040) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) socketpair$auto(0xfffffffc, 0x1, 0x8000000000000000, 0x0) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vbi0\x00', 0x80382, 0x0) vmsplice$auto(r0, &(0x7f0000000140)={&(0x7f00000000c0)="bc0e6c90aa18e7a675776ee36eb756c0601842e67a", 0x100000001}, 0x1ff, 0xf) ioctl$auto(r6, 0xc0045627, 0xffffffffffffffff) 394.790352ms ago: executing program 8 (id=1310): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/sunrpc/parameters/tcp_max_slot_table_entries\x00', 0x88282, 0x0) sendfile$auto(r2, r2, 0x0, 0x71) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r1) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, r3, 0x301, 0x70bd29, 0x25dfdbfe, {}, [@NETDEV_A_QSTATS_SCOPE={0xc, 0x4, 0x1}]}, 0x20}}, 0x40000) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) mmap$auto(0x0, 0x4000005, 0xfffffffffffffe01, 0x8051, 0x3, 0x10000000008000) r4 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0x3, 0x0, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f00000006c0)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x7}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2400000b756, 0x10001}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000080)={{@raw=0x1002, 0x6, 0xa, 0x7, "26d718b7d3ee69350e4ede7079dcb0c24c8aa1e3c7ee2e00308b8a7d74b0a707f7045e6d035b196ca83379bb"}, 0x7, 0xfffffffc, 0x82, @inferred, @enumerated={0x0, 0x6, "ad75b255b5cdd64a6b7a755de55f8e3b81e6c4e6fbf4f15a5ca5dc29f056113e9b60cd7bd82081ec90b01a6c1ae79b9fd0930da366e011ae30c0a636577776a6", 0x2003, 0xcac}, "18a801006a0900000000000000c4bd5359eeadc8357752b72fa176254d8797cdffd02555ac83a07983eeddcd24b626f54ad9d763dcdc9120af8b7c848ceb55a7"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, 0x0) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000001c0), r4) sendmsg$auto_BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TQ={0x5, 0x19, 0x9}, @BATADV_ATTR_TT_TTVN={0x5, 0x11, 0x2}, @BATADV_ATTR_TT_TTVN={0x5, 0x11, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4000) futex$auto(&(0x7f0000001d00)=0x4, 0x5, 0x7, 0x0, &(0x7f0000001d80)=0x3ff, 0x401) 166.51507ms ago: executing program 6 (id=1311): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x121d02, 0x0) socket(0x10, 0x2, 0x14) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x622340, 0x0) openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) eventfd$auto(0x3) pipe$auto(0x0) socketpair$auto(0x1e, 0x1, 0x4, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_TCFLSH2(r0, 0x40384708, 0x0) 724.402µs ago: executing program 8 (id=1312): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x80000c}, 0x7, 0x20000000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x220, 0x0) mprotect$auto(0x200000000000, 0x806122, 0xc) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x10000, 0x0) sched_setscheduler$auto(0x0, 0x5, 0x0) mprotect$auto(0x5cb, 0x0, 0xe4b) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0xffffffffffffffff, 0x340000000000) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r1 = openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/gid_map\x00', 0x20002, 0x0) write$auto_proc_gid_map_operations_base(r1, 0x0, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "00800000ffefffffff0200000001"}, 0x55) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8002, 0x0) write$auto(0x3, 0x0, 0xffd8) 0s ago: executing program 2 (id=1320): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0x1, 0x3, 0x2) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r1 = socket(0x1d, 0x1, 0x6) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000300), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_bridge\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="2f212cbd7010ca705d", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8810) sendmsg$auto_ETHTOOL_MSG_MM_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x450000}, 0xc, &(0x7f0000000500)={0x0}}, 0x4040) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) socketpair$auto(0xfffffffc, 0x1, 0x8000000000000000, 0x0) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vbi0\x00', 0x80382, 0x0) vmsplice$auto(r0, &(0x7f0000000140)={&(0x7f00000000c0)="bc0e6c90aa18e7a675776ee36eb756c0601842e67a", 0x100000001}, 0x1ff, 0xf) ioctl$auto(r6, 0xc0045627, 0xffffffffffffffff) kernel console output (not intermixed with test programs): 543': attribute type 1 has an invalid length. [ 236.449395][ T8554] bridge0: port 3(team0) entered blocking state [ 236.498000][ T8554] bridge0: port 3(team0) entered disabled state [ 236.629183][ T8554] team0: entered allmulticast mode [ 236.658850][ T8554] team_slave_0: entered allmulticast mode [ 236.759168][ T8554] team_slave_1: entered allmulticast mode [ 236.779545][ T8573] vivid-007: ================= START STATUS ================= [ 236.854620][ T8573] vivid-007: Generate PTS: true [ 236.878859][ T8554] team0: entered promiscuous mode [ 236.899263][ T8573] vivid-007: Generate SCR: true [ 236.904170][ T8573] tpg source WxH: 320x240 (Y'CbCr) [ 236.972813][ T8573] tpg field: 1 [ 237.001942][ T8554] team_slave_0: entered promiscuous mode [ 237.020094][ T8573] tpg crop: (0,0)/320x240 [ 237.073815][ T8573] tpg compose: (0,0)/320x240 [ 237.123858][ T8573] tpg colorspace: 8 [ 237.165046][ T8573] tpg transfer function: 0/0 [ 237.185573][ T8554] team_slave_1: entered promiscuous mode [ 237.215403][ T8573] tpg Y'CbCr encoding: 0/0 [ 237.222052][ T8554] bridge0: port 3(team0) entered blocking state [ 237.228573][ T8554] bridge0: port 3(team0) entered forwarding state [ 237.245034][ T8573] tpg quantization: 0/0 [ 237.263893][ T8573] tpg RGB range: 0/2 [ 237.304102][ T8573] vivid-007: ================== END STATUS ================== [ 237.765557][ T8586] tc_dump_action: action bad kind [ 241.563469][ T8665] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 242.426999][ T8684] vivid-007: ================= START STATUS ================= [ 242.525787][ T8684] vivid-007: Generate PTS: true [ 242.586661][ T8684] vivid-007: Generate SCR: true [ 242.644557][ T8684] tpg source WxH: 320x240 (Y'CbCr) [ 242.690402][ T8684] tpg field: 1 [ 242.727439][ T8684] tpg crop: (0,0)/320x240 [ 242.774169][ T8684] tpg compose: (0,0)/320x240 [ 242.827494][ T8684] tpg colorspace: 8 [ 242.878886][ T8684] tpg transfer function: 0/0 [ 242.906603][ T8684] tpg Y'CbCr encoding: 0/0 [ 242.942688][ T8684] tpg quantization: 0/0 [ 242.968368][ T8684] tpg RGB range: 0/2 [ 243.004302][ T8684] vivid-007: ================== END STATUS ================== [ 244.145753][ T8730] Invalid ELF header magic: != ELF [ 245.556188][ T8758] vivid-007: ================= START STATUS ================= [ 245.626806][ T8758] vivid-007: Generate PTS: true [ 245.662595][ T8758] vivid-007: Generate SCR: true [ 245.719933][ T8758] tpg source WxH: 320x240 (Y'CbCr) [ 245.767798][ T8758] tpg field: 1 [ 245.817932][ T8758] tpg crop: (0,0)/320x240 [ 245.879742][ T8758] tpg compose: (0,0)/320x240 [ 246.049103][ T8758] tpg colorspace: 8 [ 246.156451][ T8758] tpg transfer function: 0/0 [ 246.633650][ T8758] tpg Y'CbCr encoding: 0/0 [ 246.670032][ T8758] tpg quantization: 0/0 [ 246.674206][ T8758] tpg RGB range: 0/2 [ 246.734556][ T8758] vivid-007: ================== END STATUS ================== [ 246.971564][ T8782] random: crng reseeded on system resumption [ 247.034448][ T8782] hub 1-0:1.0: USB hub found [ 247.076204][ T8782] hub 1-0:1.0: 1 port detected [ 248.159160][ T8801] hugetlbfs: syz.3.594 (8801): Using mlock ulimits for SHM_HUGETLB is obsolete [ 248.833273][ T8815] netlink: 330 bytes leftover after parsing attributes in process `syz.0.597'. [ 248.852638][ T8812] Invalid ELF header magic: != ELF [ 249.556352][ T8822] vivid-007: ================= START STATUS ================= [ 249.601155][ T8822] vivid-007: Generate PTS: true [ 249.606098][ T8822] vivid-007: Generate SCR: true [ 249.841263][ T8822] tpg source WxH: 320x240 (Y'CbCr) [ 249.873656][ T8822] tpg field: 1 [ 249.890223][ T8822] tpg crop: (0,0)/320x240 [ 249.925696][ T8822] tpg compose: (0,0)/320x240 [ 249.975435][ T8822] tpg colorspace: 8 [ 249.981632][ T8828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.600'. [ 249.999257][ T8822] tpg transfer function: 0/0 [ 250.022231][ T8822] tpg Y'CbCr encoding: 0/0 [ 250.066042][ T8822] tpg quantization: 0/0 [ 250.088019][ T8828] netlink: 25 bytes leftover after parsing attributes in process `syz.0.600'. [ 250.101128][ T8822] tpg RGB range: 0/2 [ 250.121179][ T8822] vivid-007: ================== END STATUS ================== [ 251.604600][ T8859] FAULT_INJECTION: forcing a failure. [ 251.604600][ T8859] name failslab, interval 1, probability 0, space 0, times 0 [ 251.659545][ T8859] CPU: 0 UID: 0 PID: 8859 Comm: syz.1.607 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.659572][ T8859] Tainted: [L]=SOFTLOCKUP [ 251.659577][ T8859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 251.659590][ T8859] Call Trace: [ 251.659595][ T8859] [ 251.659601][ T8859] dump_stack_lvl+0x100/0x190 [ 251.659629][ T8859] should_fail_ex.cold+0x5/0xa [ 251.659648][ T8859] should_failslab+0xc2/0x120 [ 251.659663][ T8859] __kmalloc_cache_noprof+0x7a/0x6f0 [ 251.659683][ T8859] ? rand_initialize_disk+0x4a/0xb2 [ 251.659706][ T8859] rand_initialize_disk+0x4a/0xb2 [ 251.659724][ T8859] __alloc_disk_node+0x322/0x6b0 [ 251.659744][ T8859] __blk_alloc_disk+0xd2/0x170 [ 251.659759][ T8859] ? __pfx___blk_alloc_disk+0x10/0x10 [ 251.659785][ T8859] ? __pfx_idr_alloc+0x10/0x10 [ 251.659806][ T8859] ? lockdep_init_map_type+0x5c/0x250 [ 251.659825][ T8859] ? __raw_spin_lock_init+0x3a/0x110 [ 251.659848][ T8859] ? __pfx_hot_add_show+0x10/0x10 [ 251.659867][ T8859] zram_add+0x1bf/0x610 [ 251.659885][ T8859] ? __pfx_zram_add+0x10/0x10 [ 251.659916][ T8859] ? find_held_lock+0x2b/0x80 [ 251.659929][ T8859] ? sysfs_file_kobj+0xe4/0x290 [ 251.659949][ T8859] ? __pfx_hot_add_show+0x10/0x10 [ 251.659968][ T8859] hot_add_show+0x21/0x80 [ 251.659986][ T8859] class_attr_show+0x72/0xa0 [ 251.660004][ T8859] ? __pfx_class_attr_show+0x10/0x10 [ 251.660018][ T8859] sysfs_kf_seq_show+0x217/0x3a0 [ 251.660040][ T8859] seq_read_iter+0x32f/0x1270 [ 251.660070][ T8859] kernfs_fop_read_iter+0x46c/0x610 [ 251.660087][ T8859] ? rw_verify_area+0xce/0x6d0 [ 251.660107][ T8859] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 251.660125][ T8859] vfs_read+0x825/0xb30 [ 251.660149][ T8859] ? __pfx_vfs_read+0x10/0x10 [ 251.660184][ T8859] ksys_read+0x12a/0x250 [ 251.660197][ T8859] ? __pfx_ksys_read+0x10/0x10 [ 251.660216][ T8859] do_syscall_64+0x106/0xf80 [ 251.660236][ T8859] ? clear_bhb_loop+0x40/0x90 [ 251.660254][ T8859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.660268][ T8859] RIP: 0033:0x7fcd4819c799 [ 251.660281][ T8859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.660295][ T8859] RSP: 002b:00007fcd490c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 251.660314][ T8859] RAX: ffffffffffffffda RBX: 00007fcd48415fa0 RCX: 00007fcd4819c799 [ 251.660323][ T8859] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000007 [ 251.660332][ T8859] RBP: 00007fcd48232c99 R08: 0000000000000000 R09: 0000000000000000 [ 251.660340][ T8859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.660348][ T8859] R13: 00007fcd48416038 R14: 00007fcd48415fa0 R15: 00007fff947b9058 [ 251.660368][ T8859] [ 252.336318][ T8859] zram: Added device: zram2 [ 252.578632][ T8870] random: crng reseeded on system resumption [ 252.688343][ T8870] hub 1-0:1.0: USB hub found [ 252.742590][ T8870] hub 1-0:1.0: 1 port detected [ 254.683154][ T8893] Invalid ELF header magic: != ELF [ 255.707567][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.714885][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.153522][ T8912] netlink: 'syz.0.618': attribute type 1 has an invalid length. [ 256.568250][ T8831] Process accounting paused [ 261.884720][ T8993] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 263.140337][ T9022] futex_wake_op: syz.1.645 tries to shift op by -2048; fix this program [ 263.240030][ T9022] futex_wake_op: syz.1.645 tries to shift op by -2048; fix this program [ 264.542021][ T9045] hub 1-0:1.0: USB hub found [ 264.620765][ T9045] hub 1-0:1.0: 1 port detected [ 265.502151][ T9069] program syz.0.655 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 266.979981][ T9104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.665'. [ 267.050647][ T9108] netlink: 354 bytes leftover after parsing attributes in process `syz.1.665'. [ 267.516243][ T9109] Invalid ELF header magic: != ELF [ 268.140346][ T9127] Invalid ELF header magic: != ELF [ 275.279065][ T9258] Invalid ELF header magic: != ELF [ 277.426732][ T9305] block2mtd: illegal erase size [ 278.193602][ T9320] futex_wake_op: syz.1.714 tries to shift op by -2048; fix this program [ 278.249096][ T9320] futex_wake_op: syz.1.714 tries to shift op by -2048; fix this program [ 279.755900][ T9358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.725'. [ 279.785269][ T9358] netlink: 354 bytes leftover after parsing attributes in process `syz.1.725'. [ 279.797106][ T9361] netlink: 28 bytes leftover after parsing attributes in process `syz.3.724'. [ 280.597419][ T8717] Bluetooth: hci3: unexpected event 0x1c length: 725 > 5 [ 280.675000][ T9389] openvswitch: netlink: Multiple metadata blocks provided [ 281.506510][ T9409] Invalid ELF header magic: != ELF [ 285.234281][ T9481] FAULT_INJECTION: forcing a failure. [ 285.234281][ T9481] name failslab, interval 1, probability 0, space 0, times 0 [ 285.309150][ T9481] CPU: 0 UID: 0 PID: 9481 Comm: syz.3.749 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.309176][ T9481] Tainted: [L]=SOFTLOCKUP [ 285.309182][ T9481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 285.309191][ T9481] Call Trace: [ 285.309196][ T9481] [ 285.309202][ T9481] dump_stack_lvl+0x100/0x190 [ 285.309229][ T9481] should_fail_ex.cold+0x5/0xa [ 285.309247][ T9481] should_failslab+0xc2/0x120 [ 285.309263][ T9481] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 285.309285][ T9481] ? alloc_unbound_pwq+0x3ff/0xdd0 [ 285.309304][ T9481] alloc_unbound_pwq+0x3ff/0xdd0 [ 285.309324][ T9481] apply_wqattrs_prepare+0x847/0xbb0 [ 285.309345][ T9481] apply_workqueue_attrs_locked+0x64/0xe0 [ 285.309361][ T9481] __alloc_workqueue+0x1111/0x1880 [ 285.309385][ T9481] alloc_workqueue_noprof+0xd2/0x200 [ 285.309402][ T9481] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 285.309421][ T9481] ? kobject_init+0x159/0x1b0 [ 285.309444][ T9481] ? __alloc_disk_node+0x4d8/0x6b0 [ 285.309465][ T9481] nbd_dev_add+0x51a/0xb10 [ 285.309479][ T9481] ? find_held_lock+0x2b/0x80 [ 285.309494][ T9481] ? __pfx_nbd_dev_add+0x10/0x10 [ 285.309506][ T9481] ? nbd_genl_connect+0x131a/0x1a40 [ 285.309533][ T9481] ? bpf_lsm_capable+0x9/0x10 [ 285.309557][ T9481] ? __radix_tree_lookup+0x217/0x2b0 [ 285.309580][ T9481] nbd_genl_connect+0xb8d/0x1a40 [ 285.309595][ T9481] ? rcu_is_watching+0x12/0xc0 [ 285.309619][ T9481] ? __pfx_nbd_genl_connect+0x10/0x10 [ 285.309636][ T9481] ? __nla_parse+0x40/0x60 [ 285.309658][ T9481] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 285.309675][ T9481] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 285.309694][ T9481] genl_family_rcv_msg_doit+0x214/0x300 [ 285.309712][ T9481] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 285.309727][ T9481] ? genl_get_cmd+0x3ef/0x720 [ 285.309746][ T9481] ? __dev_queue_xmit+0x5af/0x4800 [ 285.309762][ T9481] ? __radix_tree_lookup+0x217/0x2b0 [ 285.309783][ T9481] genl_rcv_msg+0x560/0x800 [ 285.309801][ T9481] ? __pfx_genl_rcv_msg+0x10/0x10 [ 285.309816][ T9481] ? __pfx_nbd_genl_connect+0x10/0x10 [ 285.309838][ T9481] netlink_rcv_skb+0x159/0x420 [ 285.309860][ T9481] ? __pfx_genl_rcv_msg+0x10/0x10 [ 285.309875][ T9481] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 285.309909][ T9481] ? netlink_deliver_tap+0x1ae/0xcc0 [ 285.309935][ T9481] genl_rcv+0x28/0x40 [ 285.309948][ T9481] netlink_unicast+0x5aa/0x870 [ 285.309972][ T9481] ? __pfx_netlink_unicast+0x10/0x10 [ 285.310000][ T9481] netlink_sendmsg+0x8b0/0xda0 [ 285.310025][ T9481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.310045][ T9481] ? __import_iovec+0x1d2/0x640 [ 285.310064][ T9481] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 285.310090][ T9481] ____sys_sendmsg+0x9e1/0xb70 [ 285.310104][ T9481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.310128][ T9481] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.310147][ T9481] ? __pfx_futex_wake_mark+0x10/0x10 [ 285.310171][ T9481] ___sys_sendmsg+0x190/0x1e0 [ 285.310188][ T9481] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.310228][ T9481] __sys_sendmsg+0x170/0x220 [ 285.310248][ T9481] ? __pfx___sys_sendmsg+0x10/0x10 [ 285.310268][ T9481] ? __x64_sys_futex+0x34f/0x4d0 [ 285.310298][ T9481] do_syscall_64+0x106/0xf80 [ 285.310318][ T9481] ? clear_bhb_loop+0x40/0x90 [ 285.310336][ T9481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.310351][ T9481] RIP: 0033:0x7f798499c799 [ 285.310365][ T9481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.310379][ T9481] RSP: 002b:00007f7985793028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.310394][ T9481] RAX: ffffffffffffffda RBX: 00007f7984c15fa0 RCX: 00007f798499c799 [ 285.310403][ T9481] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000008 [ 285.310412][ T9481] RBP: 00007f7984a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 285.310421][ T9481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.310430][ T9481] R13: 00007f7984c16038 R14: 00007f7984c15fa0 R15: 00007fffad9a3e18 [ 285.310450][ T9481] [ 285.711651][ T9481] block (null): Could not allocate knbd recv work queue. [ 285.844584][ T9481] nbd: failed to add new device [ 286.237073][ T9490] Invalid ELF header magic: != ELF [ 288.180248][ T9518] capability: warning: `syz.0.755' uses 32-bit capabilities (legacy support in use) [ 288.440323][ T8717] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 288.497495][ T9484] Process accounting resumed [ 288.960428][ T9538] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 288.966453][ T9538] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 289.062229][ T9538] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 289.100549][ T9538] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 290.842394][ T9575] vivid-007: ================= START STATUS ================= [ 290.870763][ T9575] vivid-007: Generate PTS: true [ 290.890507][ T9575] vivid-007: Generate SCR: true [ 290.927027][ T9575] tpg source WxH: 320x240 (Y'CbCr) [ 290.943916][ T9575] tpg field: 1 [ 290.958905][ T9575] tpg crop: (0,0)/320x240 [ 290.978254][ T9575] tpg compose: (0,0)/320x240 [ 290.999419][ T9575] tpg colorspace: 8 [ 291.003555][ T9496] Bluetooth: hci1: command 0x0c1a tx timeout [ 291.009551][ T8717] Bluetooth: hci0: command 0x0c1a tx timeout [ 291.021932][ T9575] tpg transfer function: 0/0 [ 291.040303][ T9575] tpg Y'CbCr encoding: 0/0 [ 291.054193][ T9575] tpg quantization: 0/0 [ 291.083033][ T8717] Bluetooth: hci2: command 0x0c1a tx timeout [ 291.090201][ T9575] tpg RGB range: 0/2 [ 291.100920][ T9575] vivid-007: ================== END STATUS ================== [ 291.161754][ T8717] Bluetooth: hci3: command 0x0c1a tx timeout [ 291.511558][ T9586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.772'. [ 291.615512][ T9586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.772'. [ 292.062701][ T9596] futex_wake_op: syz.0.774 tries to shift op by -2048; fix this program [ 292.124450][ T9596] futex_wake_op: syz.0.774 tries to shift op by -2048; fix this program [ 292.792112][ T9617] vivid-007: ================= START STATUS ================= [ 292.816336][ T9617] vivid-007: Generate PTS: true [ 292.827251][ T9617] vivid-007: Generate SCR: true [ 292.842200][ T9617] tpg source WxH: 320x240 (Y'CbCr) [ 292.853057][ T9617] tpg field: 1 [ 292.856431][ T9617] tpg crop: (0,0)/320x240 [ 292.881673][ T9617] tpg compose: (0,0)/320x240 [ 292.891951][ T9617] tpg colorspace: 8 [ 292.906047][ T9617] tpg transfer function: 0/0 [ 292.922471][ T9617] tpg Y'CbCr encoding: 0/0 [ 292.933720][ T9617] tpg quantization: 0/0 [ 292.943628][ T9617] tpg RGB range: 0/2 [ 292.959869][ T9617] vivid-007: ================== END STATUS ================== [ 293.759632][ T9633] Invalid ELF header magic: != ELF [ 295.997361][ T9671] vivid-007: ================= START STATUS ================= [ 296.065655][ T9671] vivid-007: Generate PTS: true [ 296.138837][ T9671] vivid-007: Generate SCR: true [ 296.143724][ T9671] tpg source WxH: 320x240 (Y'CbCr) [ 296.212025][ T9671] tpg field: 1 [ 296.245225][ T9671] tpg crop: (0,0)/320x240 [ 296.276102][ T9671] tpg compose: (0,0)/320x240 [ 296.345294][ T9671] tpg colorspace: 8 [ 296.362192][ T9671] tpg transfer function: 0/0 [ 296.408291][ T9671] tpg Y'CbCr encoding: 0/0 [ 296.454027][ T9671] tpg quantization: 0/0 [ 296.496146][ T9671] tpg RGB range: 0/2 [ 296.526339][ T9671] vivid-007: ================== END STATUS ================== [ 298.477257][ T9496] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 298.496742][ T9496] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 298.504121][ T9496] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 298.512104][ T9496] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 298.519630][ T9496] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 299.020134][ T9728] chnl_net:caif_netlink_parms(): no params data found [ 299.228154][ T9728] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.254212][ T9728] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.287427][ T9728] bridge_slave_0: entered allmulticast mode [ 299.317983][ T9728] bridge_slave_0: entered promiscuous mode [ 299.364413][ T9728] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.390173][ T9728] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.420461][ T9728] bridge_slave_1: entered allmulticast mode [ 299.445164][ T9728] bridge_slave_1: entered promiscuous mode [ 299.534340][ T9728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.754638][ T9756] zswap: compressor û not available [ 299.763848][ T9728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.785329][ T9747] zram0: detected capacity change from 16 to 0 [ 299.898079][ T9728] team0: Port device team_slave_0 added [ 299.905662][ T9728] team0: Port device team_slave_1 added [ 300.092809][ T9728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.133479][ T9728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.263530][ T9728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.316762][ T9728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.366836][ T9728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.493678][ T9728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.606279][ T9496] Bluetooth: hci4: command tx timeout [ 300.679013][ T9728] hsr_slave_0: entered promiscuous mode [ 300.685245][ T9728] hsr_slave_1: entered promiscuous mode [ 300.733604][ T9728] debugfs: 'hsr0' already exists in 'hsr' [ 300.752480][ T9728] Cannot create hsr debugfs directory [ 301.279438][ T9728] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 301.300935][ T9728] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 301.352204][ T9728] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 301.369395][ T9728] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 301.496029][ T9728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.515679][ T9728] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.528007][ T8714] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.535107][ T8714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.560856][ T8714] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.567987][ T8714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.722113][ T9728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.920360][ T9728] veth0_vlan: entered promiscuous mode [ 301.931896][ T9728] veth1_vlan: entered promiscuous mode [ 301.959320][ T9728] veth0_macvtap: entered promiscuous mode [ 301.969785][ T9728] veth1_macvtap: entered promiscuous mode [ 301.986524][ T9728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.000684][ T9728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.015045][ T8714] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.039496][ T8714] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.050766][ T8714] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.092537][ T8714] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.119267][ T8836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.139557][ T8836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.165628][ T8714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.175829][ T8714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.687439][ T9496] Bluetooth: hci4: command tx timeout [ 302.893363][ T9810] FAULT_INJECTION: forcing a failure. [ 302.893363][ T9810] name fail_futex, interval 1, probability 0, space 0, times 1 [ 303.053839][ T9810] CPU: 0 UID: 0 PID: 9810 Comm: syz.0.820 Tainted: G L syzkaller #0 PREEMPT(full) [ 303.053865][ T9810] Tainted: [L]=SOFTLOCKUP [ 303.053871][ T9810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 303.053880][ T9810] Call Trace: [ 303.053885][ T9810] [ 303.053892][ T9810] dump_stack_lvl+0x100/0x190 [ 303.053918][ T9810] should_fail_ex.cold+0x5/0xa [ 303.053935][ T9810] get_futex_key+0x1d2/0x1620 [ 303.053956][ T9810] ? __pfx_get_futex_key+0x10/0x10 [ 303.053974][ T9810] ? update_se+0x94/0x760 [ 303.053994][ T9810] futex_wait_setup+0x83/0x510 [ 303.054021][ T9810] __futex_wait+0x19f/0x300 [ 303.054043][ T9810] ? __pfx___futex_wait+0x10/0x10 [ 303.054063][ T9810] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 303.054082][ T9810] ? lockdep_hardirqs_on+0x78/0x100 [ 303.054104][ T9810] ? __pfx_futex_wake_mark+0x10/0x10 [ 303.054128][ T9810] ? find_held_lock+0x2b/0x80 [ 303.054142][ T9810] ? futex_wake+0x456/0x530 [ 303.054172][ T9810] futex_wait+0xed/0x380 [ 303.054193][ T9810] ? __pfx_futex_wait+0x10/0x10 [ 303.054218][ T9810] ? putname+0xb1/0x110 [ 303.054233][ T9810] ? kmem_cache_free+0x124/0x6a0 [ 303.054251][ T9810] ? do_sys_openat2+0x1b4/0x1e0 [ 303.054273][ T9810] do_futex+0x1ef/0x350 [ 303.054291][ T9810] ? __pfx_do_futex+0x10/0x10 [ 303.054307][ T9810] ? __pfx_do_sys_openat2+0x10/0x10 [ 303.054327][ T9810] ? __fget_files+0x21f/0x3d0 [ 303.054342][ T9810] __x64_sys_futex+0x34f/0x4d0 [ 303.054368][ T9810] ? __x64_sys_openat+0x12d/0x210 [ 303.054387][ T9810] ? __pfx___x64_sys_futex+0x10/0x10 [ 303.054413][ T9810] do_syscall_64+0x106/0xf80 [ 303.054434][ T9810] ? clear_bhb_loop+0x40/0x90 [ 303.054452][ T9810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.054467][ T9810] RIP: 0033:0x7f64dc99c799 [ 303.054480][ T9810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.054494][ T9810] RSP: 002b:00007f64dd7e80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 303.054508][ T9810] RAX: ffffffffffffffda RBX: 00007f64dcc16098 RCX: 00007f64dc99c799 [ 303.054518][ T9810] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f64dcc16098 [ 303.054527][ T9810] RBP: 00007f64dcc16090 R08: 0000000000000000 R09: 0000000000000000 [ 303.054536][ T9810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.054544][ T9810] R13: 00007f64dcc16128 R14: 00007fff9e3b02b0 R15: 00007fff9e3b0398 [ 303.054564][ T9810] [ 303.970173][ T9814] program syz.4.799 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 304.267335][ T9823] program syz.2.814 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 304.684730][ T9830] Invalid ELF header magic: != ELF [ 304.770347][ T9496] Bluetooth: hci4: command tx timeout [ 305.950983][ T9856] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 306.511441][ T9858] FAULT_INJECTION: forcing a failure. [ 306.511441][ T9858] name failslab, interval 1, probability 0, space 0, times 0 [ 306.791218][ T9858] CPU: 0 UID: 0 PID: 9858 Comm: syz.2.825 Tainted: G L syzkaller #0 PREEMPT(full) [ 306.791245][ T9858] Tainted: [L]=SOFTLOCKUP [ 306.791250][ T9858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 306.791259][ T9858] Call Trace: [ 306.791266][ T9858] [ 306.791272][ T9858] dump_stack_lvl+0x100/0x190 [ 306.791300][ T9858] should_fail_ex.cold+0x5/0xa [ 306.791318][ T9858] ? tomoyo_realpath_from_path+0xb6/0x690 [ 306.791338][ T9858] should_failslab+0xc2/0x120 [ 306.791354][ T9858] __kmalloc_noprof+0xe0/0x850 [ 306.791380][ T9858] tomoyo_realpath_from_path+0xb6/0x690 [ 306.791404][ T9858] tomoyo_path_number_perm+0x23c/0x580 [ 306.791420][ T9858] ? tomoyo_path_number_perm+0x22e/0x580 [ 306.791438][ T9858] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 306.791461][ T9858] ? do_raw_spin_lock+0x128/0x260 [ 306.791492][ T9858] ? find_held_lock+0x2b/0x80 [ 306.791505][ T9858] ? __pfx_d_add+0x10/0x10 [ 306.791522][ T9858] ? d_alloc+0x176/0x1e0 [ 306.791536][ T9858] ? current_check_access_path+0x281/0x460 [ 306.791556][ T9858] ? __pfx_current_check_access_path+0x10/0x10 [ 306.791576][ T9858] ? simple_lookup+0x105/0x1d0 [ 306.791600][ T9858] tomoyo_path_mknod+0x164/0x190 [ 306.791621][ T9858] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 306.791643][ T9858] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 306.791675][ T9858] security_path_mknod+0x161/0x300 [ 306.791698][ T9858] filename_mknodat+0x241/0x7f0 [ 306.791718][ T9858] ? __pfx_filename_mknodat+0x10/0x10 [ 306.791734][ T9858] ? strncpy_from_user+0x19d/0x2d0 [ 306.791752][ T9858] ? do_getname+0x191/0x390 [ 306.791772][ T9858] __x64_sys_mknod+0x8f/0xc0 [ 306.791789][ T9858] do_syscall_64+0x106/0xf80 [ 306.791808][ T9858] ? clear_bhb_loop+0x40/0x90 [ 306.791826][ T9858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.791841][ T9858] RIP: 0033:0x7f8b8dd9c799 [ 306.791854][ T9858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.791868][ T9858] RSP: 002b:00007f8b8ebc3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 306.791882][ T9858] RAX: ffffffffffffffda RBX: 00007f8b8e015fa0 RCX: 00007f8b8dd9c799 [ 306.791892][ T9858] RDX: 0000000000000017 RSI: 0000000000000e6c RDI: 0000200000000080 [ 306.791900][ T9858] RBP: 00007f8b8de32c99 R08: 0000000000000000 R09: 0000000000000000 [ 306.791909][ T9858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.791917][ T9858] R13: 00007f8b8e016038 R14: 00007f8b8e015fa0 R15: 00007fffdde75188 [ 306.791937][ T9858] [ 306.791944][ T9858] ERROR: Out of memory at tomoyo_realpath_from_path. [ 307.098107][ T9496] Bluetooth: hci4: command tx timeout [ 307.751841][ T9876] zswap: compressor not available [ 312.347748][ T9968] netlink: 25 bytes leftover after parsing attributes in process `syz.4.846'. [ 313.170490][ T9979] vivid-007: ================= START STATUS ================= [ 313.262931][ T9979] vivid-007: Generate PTS: true [ 313.300519][ T9979] vivid-007: Generate SCR: true [ 313.341836][ T9979] tpg source WxH: 320x240 (Y'CbCr) [ 313.403849][ T9979] tpg field: 1 [ 313.417541][ T9979] tpg crop: (0,0)/320x240 [ 313.461726][ T9979] tpg compose: (0,0)/320x240 [ 313.502824][ T9979] tpg colorspace: 8 [ 313.523658][ T9979] tpg transfer function: 0/0 [ 313.567448][ T9979] tpg Y'CbCr encoding: 0/0 [ 313.641752][ T9979] tpg quantization: 0/0 [ 313.683072][ T9979] tpg RGB range: 0/2 [ 313.697403][ T9979] vivid-007: ================== END STATUS ================== [ 314.110428][T10000] FAULT_INJECTION: forcing a failure. [ 314.110428][T10000] name failslab, interval 1, probability 0, space 0, times 0 [ 314.204408][T10000] CPU: 0 UID: 0 PID: 10000 Comm: syz.4.857 Tainted: G L syzkaller #0 PREEMPT(full) [ 314.204434][T10000] Tainted: [L]=SOFTLOCKUP [ 314.204439][T10000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 314.204448][T10000] Call Trace: [ 314.204454][T10000] [ 314.204459][T10000] dump_stack_lvl+0x100/0x190 [ 314.204487][T10000] should_fail_ex.cold+0x5/0xa [ 314.204504][T10000] should_failslab+0xc2/0x120 [ 314.204520][T10000] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 314.204540][T10000] ? __kernfs_new_node+0xd2/0x960 [ 314.204564][T10000] __kernfs_new_node+0xd2/0x960 [ 314.204586][T10000] ? __pfx___kernfs_new_node+0x10/0x10 [ 314.204611][T10000] ? find_held_lock+0x2b/0x80 [ 314.204624][T10000] ? kernfs_root+0xee/0x2a0 [ 314.204643][T10000] ? kernfs_root+0xee/0x2a0 [ 314.204666][T10000] kernfs_new_node+0x11b/0x1a0 [ 314.204691][T10000] __kernfs_create_file+0x53/0x350 [ 314.204710][T10000] sysfs_add_file_mode_ns+0x207/0x3c0 [ 314.204734][T10000] sysfs_merge_group+0x194/0x340 [ 314.204755][T10000] ? __pfx_sysfs_merge_group+0x10/0x10 [ 314.204777][T10000] ? __pfx_dev_add_physical_location+0x10/0x10 [ 314.204794][T10000] ? bus_to_subsys+0x114/0x150 [ 314.204815][T10000] dpm_sysfs_add+0x237/0x280 [ 314.204833][T10000] device_add+0x9ef/0x1950 [ 314.204851][T10000] ? __pfx_device_add+0x10/0x10 [ 314.204868][T10000] ? lockdep_init_map_type+0x5c/0x250 [ 314.204888][T10000] ? __init_waitqueue_head+0xca/0x150 [ 314.204913][T10000] netdev_register_kobject+0x1a9/0x3d0 [ 314.204939][T10000] register_netdevice+0x12e0/0x2210 [ 314.204963][T10000] ? idr_alloc+0xdd/0x130 [ 314.204983][T10000] ? __pfx_register_netdevice+0x10/0x10 [ 314.205002][T10000] ? net_generic+0xea/0x2a0 [ 314.205027][T10000] ppp_dev_configure+0x986/0xcb0 [ 314.205050][T10000] ppp_ioctl+0x985/0x2800 [ 314.205072][T10000] ? find_held_lock+0x2b/0x80 [ 314.205085][T10000] ? __pfx_ppp_ioctl+0x10/0x10 [ 314.205108][T10000] ? __fget_files+0x21f/0x3d0 [ 314.205124][T10000] ? __pfx_ppp_ioctl+0x10/0x10 [ 314.205145][T10000] __x64_sys_ioctl+0x18e/0x210 [ 314.205177][T10000] do_syscall_64+0x106/0xf80 [ 314.205198][T10000] ? clear_bhb_loop+0x40/0x90 [ 314.205217][T10000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.205232][T10000] RIP: 0033:0x7f4721f9c799 [ 314.205245][T10000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.205259][T10000] RSP: 002b:00007f4722d79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.205273][T10000] RAX: ffffffffffffffda RBX: 00007f4722215fa0 RCX: 00007f4721f9c799 [ 314.205282][T10000] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000008 [ 314.205291][T10000] RBP: 00007f4722032c99 R08: 0000000000000000 R09: 0000000000000000 [ 314.205300][T10000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.205309][T10000] R13: 00007f4722216038 R14: 00007f4722215fa0 R15: 00007ffe838faac8 [ 314.205328][T10000] [ 315.913803][T10038] vivid-007: ================= START STATUS ================= [ 315.964139][T10038] vivid-007: Generate PTS: true [ 316.013822][T10038] vivid-007: Generate SCR: true [ 316.052183][T10038] tpg source WxH: 320x240 (Y'CbCr) [ 316.114328][T10038] tpg field: 1 [ 316.132075][T10038] tpg crop: (0,0)/320x240 [ 316.166993][T10038] tpg compose: (0,0)/320x240 [ 316.214579][T10038] tpg colorspace: 8 [ 316.253053][T10035] Invalid ELF header magic: != ELF [ 316.261608][T10038] tpg transfer function: 0/0 [ 316.302750][T10038] tpg Y'CbCr encoding: 0/0 [ 316.340746][T10038] tpg quantization: 0/0 [ 316.380402][T10038] tpg RGB range: 0/2 [ 316.422017][T10038] vivid-007: ================== END STATUS ================== [ 316.973637][T10060] bridge0: port 3(gretap0) entered blocking state [ 317.017933][T10060] bridge0: port 3(gretap0) entered disabled state [ 317.051931][T10060] gretap0: entered allmulticast mode [ 317.081689][T10060] FAULT_INJECTION: forcing a failure. [ 317.081689][T10060] name failslab, interval 1, probability 0, space 0, times 0 [ 317.134607][T10060] CPU: 0 UID: 0 PID: 10060 Comm: syz.2.869 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.134634][T10060] Tainted: [L]=SOFTLOCKUP [ 317.134639][T10060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 317.134648][T10060] Call Trace: [ 317.134653][T10060] [ 317.134659][T10060] dump_stack_lvl+0x100/0x190 [ 317.134685][T10060] should_fail_ex.cold+0x5/0xa [ 317.134703][T10060] should_failslab+0xc2/0x120 [ 317.134719][T10060] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 317.134740][T10060] ? __kernfs_new_node+0xd2/0x960 [ 317.134761][T10060] ? kstrdup+0xb3/0xe0 [ 317.134785][T10060] __kernfs_new_node+0xd2/0x960 [ 317.134808][T10060] ? __pfx___kernfs_new_node+0x10/0x10 [ 317.134840][T10060] ? find_held_lock+0x2b/0x80 [ 317.134854][T10060] ? kernfs_root+0xee/0x2a0 [ 317.134873][T10060] ? kernfs_root+0xee/0x2a0 [ 317.134897][T10060] kernfs_new_node+0x11b/0x1a0 [ 317.134923][T10060] kernfs_create_link+0xcc/0x240 [ 317.134942][T10060] sysfs_do_create_link_sd+0x90/0x140 [ 317.134964][T10060] sysfs_create_link+0x61/0xc0 [ 317.134984][T10060] __netdev_adjacent_dev_insert+0x819/0xbf0 [ 317.135007][T10060] ? __pfx___netdev_adjacent_dev_insert+0x10/0x10 [ 317.135033][T10060] __netdev_upper_dev_link+0x413/0x7e0 [ 317.135051][T10060] ? __pfx___netdev_upper_dev_link+0x10/0x10 [ 317.135066][T10060] ? kernfs_root+0xf8/0x2a0 [ 317.135088][T10060] ? kernfs_add_one+0x214/0x850 [ 317.135114][T10060] netdev_master_upper_dev_link+0x9f/0xd0 [ 317.135130][T10060] ? __pfx_netdev_master_upper_dev_link+0x10/0x10 [ 317.135147][T10060] ? lockdep_rtnl_is_held+0x26/0x40 [ 317.135163][T10060] ? netdev_is_rx_handler_busy+0x83/0x140 [ 317.135186][T10060] br_add_if+0x9fd/0x1b40 [ 317.135207][T10060] ? security_capable+0x80/0x260 [ 317.135232][T10060] add_del_if+0x114/0x160 [ 317.135252][T10060] br_dev_siocdevprivate+0x8ac/0x1650 [ 317.135277][T10060] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 317.135305][T10060] ? lock_acquire+0x1cf/0x380 [ 317.135329][T10060] ? netdev_name_node_lookup+0x107/0x150 [ 317.135345][T10060] ? __mutex_lock+0x26a/0x1b90 [ 317.135368][T10060] dev_ifsioc+0xc1e/0x1e90 [ 317.135388][T10060] ? __pfx_dev_ifsioc+0x10/0x10 [ 317.135405][T10060] ? __pfx___mutex_lock+0x10/0x10 [ 317.135433][T10060] ? dev_load+0x8e/0x240 [ 317.135449][T10060] ? dev_load+0x8e/0x240 [ 317.135471][T10060] dev_ioctl+0x70e/0x1070 [ 317.135490][T10060] sock_ioctl+0x494/0x6b0 [ 317.135507][T10060] ? __pfx_sock_ioctl+0x10/0x10 [ 317.135522][T10060] ? hook_file_ioctl_common+0x146/0x410 [ 317.135542][T10060] ? __fget_files+0x21f/0x3d0 [ 317.135558][T10060] ? __pfx_sock_ioctl+0x10/0x10 [ 317.135575][T10060] __x64_sys_ioctl+0x18e/0x210 [ 317.135597][T10060] do_syscall_64+0x106/0xf80 [ 317.135616][T10060] ? clear_bhb_loop+0x40/0x90 [ 317.135634][T10060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.135649][T10060] RIP: 0033:0x7f8b8dd9c799 [ 317.135662][T10060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.135676][T10060] RSP: 002b:00007f8b8ebc3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 317.135690][T10060] RAX: ffffffffffffffda RBX: 00007f8b8e015fa0 RCX: 00007f8b8dd9c799 [ 317.135700][T10060] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 000000000000000a [ 317.135709][T10060] RBP: 00007f8b8de32c99 R08: 0000000000000000 R09: 0000000000000000 [ 317.135718][T10060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.135726][T10060] R13: 00007f8b8e016038 R14: 00007f8b8e015fa0 R15: 00007fffdde75188 [ 317.135746][T10060] [ 317.136903][T10060] gretap0: left allmulticast mode [ 317.537240][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.543531][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.759303][T10086] Process accounting paused [ 319.472013][T10117] vivid-007: ================= START STATUS ================= [ 319.569285][T10117] vivid-007: Generate PTS: true [ 319.593947][T10117] vivid-007: Generate SCR: true [ 319.660695][T10117] tpg source WxH: 320x240 (Y'CbCr) [ 319.709678][T10117] tpg field: 1 [ 319.770499][T10117] tpg crop: (0,0)/320x240 [ 319.804745][T10117] tpg compose: (0,0)/320x240 [ 319.872323][T10117] tpg colorspace: 8 [ 319.907602][T10117] tpg transfer function: 0/0 [ 319.963116][T10117] tpg Y'CbCr encoding: 0/0 [ 320.017172][T10117] tpg quantization: 0/0 [ 320.071785][T10117] tpg RGB range: 0/2 [ 320.143973][T10117] vivid-007: ================== END STATUS ================== [ 320.462287][T10127] vivid-007: ================= START STATUS ================= [ 320.502960][T10127] vivid-007: Generate PTS: true [ 320.516777][T10127] vivid-007: Generate SCR: true [ 320.585854][T10127] tpg source WxH: 320x240 (Y'CbCr) [ 320.624849][T10127] tpg field: 1 [ 320.637436][T10136] Invalid ELF header magic: != ELF [ 320.645331][T10127] tpg crop: (0,0)/320x240 [ 320.669550][T10127] tpg compose: (0,0)/320x240 [ 320.674155][T10127] tpg colorspace: 8 [ 320.714518][T10127] tpg transfer function: 0/0 [ 320.734714][T10127] tpg Y'CbCr encoding: 0/0 [ 320.788572][T10127] tpg quantization: 0/0 [ 320.856817][T10127] tpg RGB range: 0/2 [ 320.886591][T10127] vivid-007: ================== END STATUS ================== [ 321.056919][T10145] FAULT_INJECTION: forcing a failure. [ 321.056919][T10145] name failslab, interval 1, probability 0, space 0, times 0 [ 321.221448][T10145] CPU: 0 UID: 0 PID: 10145 Comm: syz.4.882 Tainted: G L syzkaller #0 PREEMPT(full) [ 321.221475][T10145] Tainted: [L]=SOFTLOCKUP [ 321.221481][T10145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 321.221490][T10145] Call Trace: [ 321.221495][T10145] [ 321.221501][T10145] dump_stack_lvl+0x100/0x190 [ 321.221529][T10145] should_fail_ex.cold+0x5/0xa [ 321.221546][T10145] should_failslab+0xc2/0x120 [ 321.221562][T10145] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 321.221583][T10145] ? fcntl_getlk+0x84/0x8a0 [ 321.221603][T10145] fcntl_getlk+0x84/0x8a0 [ 321.221618][T10145] ? find_held_lock+0x2b/0x80 [ 321.221631][T10145] ? __might_fault+0xc5/0x140 [ 321.221651][T10145] ? __pfx_fcntl_getlk+0x10/0x10 [ 321.221673][T10145] do_fcntl+0x10f0/0x1670 [ 321.221693][T10145] ? __pfx_do_fcntl+0x10/0x10 [ 321.221709][T10145] ? __fget_files+0x215/0x3d0 [ 321.221729][T10145] ? tomoyo_file_fcntl+0x6c/0xc0 [ 321.221752][T10145] __x64_sys_fcntl+0x163/0x200 [ 321.221773][T10145] do_syscall_64+0x106/0xf80 [ 321.221793][T10145] ? clear_bhb_loop+0x40/0x90 [ 321.221811][T10145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.221826][T10145] RIP: 0033:0x7f4721f9c799 [ 321.221839][T10145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.221852][T10145] RSP: 002b:00007f4722d79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 321.221867][T10145] RAX: ffffffffffffffda RBX: 00007f4722215fa0 RCX: 00007f4721f9c799 [ 321.221876][T10145] RDX: 0000000000008960 RSI: 0000000000000024 RDI: 0000000000000003 [ 321.221885][T10145] RBP: 00007f4722032c99 R08: 0000000000000000 R09: 0000000000000000 [ 321.221893][T10145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.221907][T10145] R13: 00007f4722216038 R14: 00007f4722215fa0 R15: 00007ffe838faac8 [ 321.221926][T10145] [ 325.128649][T10248] vivid-007: ================= START STATUS ================= [ 325.137153][T10239] FAULT_INJECTION: forcing a failure. [ 325.137153][T10239] name failslab, interval 1, probability 0, space 0, times 0 [ 325.184275][T10248] vivid-007: Generate PTS: true [ 325.235930][T10239] CPU: 0 UID: 0 PID: 10239 Comm: syz.3.895 Tainted: G L syzkaller #0 PREEMPT(full) [ 325.235957][T10239] Tainted: [L]=SOFTLOCKUP [ 325.235962][T10239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 325.235976][T10239] Call Trace: [ 325.235993][T10239] [ 325.236003][T10239] dump_stack_lvl+0x100/0x190 [ 325.236035][T10239] should_fail_ex.cold+0x5/0xa [ 325.236052][T10239] ? __register_sysctl_table+0xbe4/0x1650 [ 325.236075][T10239] should_failslab+0xc2/0x120 [ 325.236091][T10239] __kmalloc_noprof+0xe0/0x850 [ 325.236127][T10239] __register_sysctl_table+0xbe4/0x1650 [ 325.236162][T10239] ? __pfx___register_sysctl_table+0x10/0x10 [ 325.236183][T10239] ? is_module_address+0x69/0xf0 [ 325.236201][T10239] ? register_net_sysctl_sz+0x222/0x430 [ 325.236225][T10239] ? __asan_memcpy+0x3c/0x60 [ 325.236246][T10239] ? __pfx_nf_lwtunnel_net_init+0x10/0x10 [ 325.236269][T10239] nf_lwtunnel_net_init+0x60/0xf0 [ 325.236290][T10239] ops_init+0x1e2/0x5f0 [ 325.236313][T10239] setup_net+0x118/0x3a0 [ 325.236334][T10239] ? __pfx_setup_net+0x10/0x10 [ 325.236353][T10239] ? lockdep_init_map_type+0x5c/0x250 [ 325.236372][T10239] ? mutex_init_lockep+0x110/0x150 [ 325.236395][T10239] copy_net_ns+0x46f/0x7c0 [ 325.236411][T10239] create_new_namespaces+0x3ea/0xac0 [ 325.236431][T10239] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 325.236448][T10239] ksys_unshare+0x473/0xad0 [ 325.236468][T10239] ? __pfx_ksys_unshare+0x10/0x10 [ 325.236492][T10239] __x64_sys_unshare+0x31/0x40 [ 325.236510][T10239] do_syscall_64+0x106/0xf80 [ 325.236529][T10239] ? clear_bhb_loop+0x40/0x90 [ 325.236547][T10239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.236562][T10239] RIP: 0033:0x7f798499c799 [ 325.236575][T10239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.236588][T10239] RSP: 002b:00007f7985793028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 325.236603][T10239] RAX: ffffffffffffffda RBX: 00007f7984c15fa0 RCX: 00007f798499c799 [ 325.236612][T10239] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 325.236621][T10239] RBP: 00007f7984a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 325.236630][T10239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.236638][T10239] R13: 00007f7984c16038 R14: 00007f7984c15fa0 R15: 00007fffad9a3e18 [ 325.236658][T10239] [ 325.236666][T10239] sysctl could not get directory: /net/netfilter -12 [ 325.491163][T10248] vivid-007: Generate SCR: true [ 325.532132][T10248] tpg source WxH: 320x240 (Y'CbCr) [ 325.537604][T10248] tpg field: 1 [ 325.558816][T10248] tpg crop: (0,0)/320x240 [ 325.564312][T10248] tpg compose: (0,0)/320x240 [ 325.578836][T10248] tpg colorspace: 8 [ 325.584446][T10248] tpg transfer function: 0/0 [ 325.626982][T10248] tpg Y'CbCr encoding: 0/0 [ 325.649433][T10248] tpg quantization: 0/0 [ 325.659523][T10248] tpg RGB range: 0/2 [ 325.678404][T10248] vivid-007: ================== END STATUS ================== [ 325.798257][T10249] vivid-007: kernel_thread() failed [ 330.465562][T10358] Invalid ELF header magic: != ELF [ 332.006385][T10401] FAULT_INJECTION: forcing a failure. [ 332.006385][T10401] name failslab, interval 1, probability 0, space 0, times 0 [ 332.053705][T10401] CPU: 0 UID: 0 PID: 10401 Comm: syz.4.922 Tainted: G L syzkaller #0 PREEMPT(full) [ 332.053732][T10401] Tainted: [L]=SOFTLOCKUP [ 332.053737][T10401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 332.053746][T10401] Call Trace: [ 332.053751][T10401] [ 332.053758][T10401] dump_stack_lvl+0x100/0x190 [ 332.053784][T10401] should_fail_ex.cold+0x5/0xa [ 332.053803][T10401] should_failslab+0xc2/0x120 [ 332.053818][T10401] __kmalloc_cache_noprof+0x7a/0x6f0 [ 332.053837][T10401] ? snd_fasync_helper+0xe2/0x290 [ 332.053851][T10401] ? __might_fault+0xc5/0x140 [ 332.053870][T10401] ? __might_fault+0xc5/0x140 [ 332.053892][T10401] snd_fasync_helper+0xe2/0x290 [ 332.053906][T10401] ? __pfx_snd_timer_user_fasync+0x10/0x10 [ 332.053922][T10401] do_vfs_ioctl+0xfb2/0x13e0 [ 332.053945][T10401] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 332.053969][T10401] ? find_held_lock+0x2b/0x80 [ 332.053983][T10401] ? __fget_files+0x215/0x3d0 [ 332.053995][T10401] ? hook_file_ioctl_common+0x146/0x410 [ 332.054016][T10401] ? __fget_files+0x21f/0x3d0 [ 332.054034][T10401] __x64_sys_ioctl+0x114/0x210 [ 332.054066][T10401] do_syscall_64+0x106/0xf80 [ 332.054087][T10401] ? clear_bhb_loop+0x40/0x90 [ 332.054104][T10401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.054119][T10401] RIP: 0033:0x7f4721f9c799 [ 332.054133][T10401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.054147][T10401] RSP: 002b:00007f4722d79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 332.054161][T10401] RAX: ffffffffffffffda RBX: 00007f4722215fa0 RCX: 00007f4721f9c799 [ 332.054171][T10401] RDX: 0000200000000080 RSI: 0000000000005452 RDI: 0000000000000005 [ 332.054179][T10401] RBP: 00007f4722032c99 R08: 0000000000000000 R09: 0000000000000000 [ 332.054188][T10401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.054196][T10401] R13: 00007f4722216038 R14: 00007f4722215fa0 R15: 00007ffe838faac8 [ 332.054214][T10401] [ 334.256995][T10433] Invalid ELF header magic: != ELF [ 335.912516][T10457] can: request_module (can-proto-4) failed. [ 336.878966][T10477] bridge0: port 3(gretap0) entered blocking state [ 336.898804][T10477] bridge0: port 3(gretap0) entered disabled state [ 336.920193][T10477] gretap0: entered allmulticast mode [ 336.938416][T10477] FAULT_INJECTION: forcing a failure. [ 336.938416][T10477] name failslab, interval 1, probability 0, space 0, times 0 [ 336.983810][T10477] CPU: 0 UID: 0 PID: 10477 Comm: syz.2.940 Tainted: G L syzkaller #0 PREEMPT(full) [ 336.983837][T10477] Tainted: [L]=SOFTLOCKUP [ 336.983843][T10477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 336.983852][T10477] Call Trace: [ 336.983857][T10477] [ 336.983863][T10477] dump_stack_lvl+0x100/0x190 [ 336.983890][T10477] should_fail_ex.cold+0x5/0xa [ 336.983908][T10477] should_failslab+0xc2/0x120 [ 336.983925][T10477] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 336.983947][T10477] ? __kernfs_new_node+0xd2/0x960 [ 336.983967][T10477] ? kstrdup+0xb3/0xe0 [ 336.983991][T10477] __kernfs_new_node+0xd2/0x960 [ 336.984013][T10477] ? __pfx___kernfs_new_node+0x10/0x10 [ 336.984039][T10477] ? find_held_lock+0x2b/0x80 [ 336.984052][T10477] ? kernfs_root+0xee/0x2a0 [ 336.984070][T10477] ? kernfs_root+0xee/0x2a0 [ 336.984093][T10477] kernfs_new_node+0x11b/0x1a0 [ 336.984118][T10477] kernfs_create_link+0xcc/0x240 [ 336.984137][T10477] sysfs_do_create_link_sd+0x90/0x140 [ 336.984158][T10477] sysfs_create_link+0x61/0xc0 [ 336.984178][T10477] __netdev_adjacent_dev_insert+0x819/0xbf0 [ 336.984200][T10477] ? __pfx___netdev_adjacent_dev_insert+0x10/0x10 [ 336.984227][T10477] __netdev_upper_dev_link+0x3d8/0x7e0 [ 336.984244][T10477] ? __pfx___netdev_upper_dev_link+0x10/0x10 [ 336.984259][T10477] ? kernfs_root+0xf8/0x2a0 [ 336.984279][T10477] ? kernfs_add_one+0x214/0x850 [ 336.984306][T10477] netdev_master_upper_dev_link+0x9f/0xd0 [ 336.984322][T10477] ? __pfx_netdev_master_upper_dev_link+0x10/0x10 [ 336.984339][T10477] ? lockdep_rtnl_is_held+0x26/0x40 [ 336.984357][T10477] ? netdev_is_rx_handler_busy+0x83/0x140 [ 336.984381][T10477] br_add_if+0x9fd/0x1b40 [ 336.984403][T10477] ? security_capable+0x80/0x260 [ 336.984428][T10477] add_del_if+0x114/0x160 [ 336.984448][T10477] br_dev_siocdevprivate+0x8ac/0x1650 [ 336.984469][T10477] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 336.984497][T10477] ? lock_acquire+0x1cf/0x380 [ 336.984522][T10477] ? netdev_name_node_lookup+0x107/0x150 [ 336.984539][T10477] ? __mutex_lock+0x26a/0x1b90 [ 336.984562][T10477] dev_ifsioc+0xc1e/0x1e90 [ 336.984583][T10477] ? __pfx_dev_ifsioc+0x10/0x10 [ 336.984607][T10477] ? __pfx___mutex_lock+0x10/0x10 [ 336.984635][T10477] ? dev_load+0x8e/0x240 [ 336.984652][T10477] ? dev_load+0x8e/0x240 [ 336.984675][T10477] dev_ioctl+0x70e/0x1070 [ 336.984696][T10477] sock_ioctl+0x494/0x6b0 [ 336.984714][T10477] ? __pfx_sock_ioctl+0x10/0x10 [ 336.984729][T10477] ? hook_file_ioctl_common+0x146/0x410 [ 336.984749][T10477] ? __fget_files+0x21f/0x3d0 [ 336.984766][T10477] ? __pfx_sock_ioctl+0x10/0x10 [ 336.984782][T10477] __x64_sys_ioctl+0x18e/0x210 [ 336.984804][T10477] do_syscall_64+0x106/0xf80 [ 336.984823][T10477] ? clear_bhb_loop+0x40/0x90 [ 336.984841][T10477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.984856][T10477] RIP: 0033:0x7f8b8dd9c799 [ 336.984870][T10477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.984884][T10477] RSP: 002b:00007f8b8ebc3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 336.984899][T10477] RAX: ffffffffffffffda RBX: 00007f8b8e015fa0 RCX: 00007f8b8dd9c799 [ 336.984909][T10477] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 000000000000000a [ 336.984918][T10477] RBP: 00007f8b8de32c99 R08: 0000000000000000 R09: 0000000000000000 [ 336.984927][T10477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.984935][T10477] R13: 00007f8b8e016038 R14: 00007f8b8e015fa0 R15: 00007fffdde75188 [ 336.984955][T10477] [ 338.520239][T10477] gretap0: left allmulticast mode [ 339.948784][T10509] vivid-007: ================= START STATUS ================= [ 339.958153][T10516] HfR: entered promiscuous mode [ 339.965765][T10509] vivid-007: Generate PTS: true [ 339.975947][T10509] vivid-007: Generate SCR: true [ 339.982252][T10516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.951'. [ 339.996370][T10509] tpg source WxH: 320x240 (Y'CbCr) [ 340.001577][T10509] tpg field: 1 [ 340.009359][T10509] tpg crop: (0,0)/320x240 [ 340.018142][T10509] tpg compose: (0,0)/320x240 [ 340.024996][T10516] HfR: left promiscuous mode [ 340.031470][T10509] tpg colorspace: 8 [ 340.040081][T10509] tpg transfer function: 0/0 [ 340.050163][T10509] tpg Y'CbCr encoding: 0/0 [ 340.062677][T10509] tpg quantization: 0/0 [ 340.072850][T10509] tpg RGB range: 0/2 [ 340.081872][T10509] vivid-007: ================== END STATUS ================== [ 342.066398][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.959'. [ 342.138706][T10555] netlink: 'syz.2.959': attribute type 1 has an invalid length. [ 342.196328][T10555] netlink: 51505 bytes leftover after parsing attributes in process `syz.2.959'. [ 342.676822][T10559] block2mtd: illegal erase size [ 344.973590][ T9496] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 346.191422][T10630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.975'. [ 347.184317][ T8717] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 347.195517][ T8717] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 347.207383][ T8717] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 347.220001][ T8717] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 347.230998][ T8717] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 347.998868][T10654] chnl_net:caif_netlink_parms(): no params data found [ 348.427588][T10654] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.468545][T10654] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.494160][T10654] bridge_slave_0: entered allmulticast mode [ 348.519081][T10654] bridge_slave_0: entered promiscuous mode [ 348.554181][T10654] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.584790][T10654] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.604801][T10654] bridge_slave_1: entered allmulticast mode [ 348.637186][T10654] bridge_slave_1: entered promiscuous mode [ 348.724333][T10654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.767229][T10654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.872476][T10654] team0: Port device team_slave_0 added [ 348.909138][T10697] Process accounting resumed [ 348.916699][T10704] vhci_hcd vhci_hcd.2: invalid port number 135 [ 348.924766][T10654] team0: Port device team_slave_1 added [ 348.934474][T10704] vhci_hcd vhci_hcd.2: invalid port number 135 [ 349.021634][T10654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.040586][T10654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.134588][T10654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.188303][T10654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.220330][T10654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.278715][ T8717] Bluetooth: hci5: command tx timeout [ 349.350858][T10654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.494949][T10654] hsr_slave_0: entered promiscuous mode [ 349.521449][T10654] hsr_slave_1: entered promiscuous mode [ 349.542181][T10654] debugfs: 'hsr0' already exists in 'hsr' [ 349.554772][T10706] FAULT_INJECTION: forcing a failure. [ 349.554772][T10706] name fail_futex, interval 1, probability 0, space 0, times 0 [ 349.577524][T10654] Cannot create hsr debugfs directory [ 349.711259][T10706] CPU: 0 UID: 0 PID: 10706 Comm: syz.2.990 Tainted: G L syzkaller #0 PREEMPT(full) [ 349.711286][T10706] Tainted: [L]=SOFTLOCKUP [ 349.711291][T10706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 349.711301][T10706] Call Trace: [ 349.711306][T10706] [ 349.711312][T10706] dump_stack_lvl+0x100/0x190 [ 349.711339][T10706] should_fail_ex.cold+0x5/0xa [ 349.711357][T10706] get_futex_key+0x1d2/0x1620 [ 349.711377][T10706] ? __pfx_get_futex_key+0x10/0x10 [ 349.711397][T10706] ? __pfx_wake_up_new_task+0x10/0x10 [ 349.711412][T10706] ? kernel_clone+0x78c/0x9a0 [ 349.711433][T10706] futex_wake+0xea/0x530 [ 349.711453][T10706] ? put_pid+0x24/0x30 [ 349.711471][T10706] ? __pfx_futex_wake+0x10/0x10 [ 349.711500][T10706] do_futex+0x32b/0x350 [ 349.711518][T10706] ? __pfx_do_futex+0x10/0x10 [ 349.711535][T10706] ? __do_sys_clone+0xd9/0x120 [ 349.711552][T10706] ? __pfx___do_sys_clone+0x10/0x10 [ 349.711568][T10706] ? __fget_files+0x21f/0x3d0 [ 349.711584][T10706] __x64_sys_futex+0x34f/0x4d0 [ 349.711605][T10706] ? __pfx___x64_sys_futex+0x10/0x10 [ 349.711631][T10706] do_syscall_64+0x106/0xf80 [ 349.711651][T10706] ? clear_bhb_loop+0x40/0x90 [ 349.711669][T10706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.711684][T10706] RIP: 0033:0x7f8b8dd9c799 [ 349.711697][T10706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.711711][T10706] RSP: 002b:00007f8b8ebc30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 349.711726][T10706] RAX: ffffffffffffffda RBX: 00007f8b8e015fa8 RCX: 00007f8b8dd9c799 [ 349.711735][T10706] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8b8e015fac [ 349.711744][T10706] RBP: 00007f8b8e015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 349.711752][T10706] R10: 00000000000003d5 R11: 0000000000000246 R12: 0000000000000000 [ 349.711761][T10706] R13: 00007f8b8e016038 R14: 00007fffdde750a0 R15: 00007fffdde75188 [ 349.711780][T10706] [ 350.247080][T10654] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 350.263322][T10654] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 350.296250][T10654] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 350.336782][T10654] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 350.569790][T10654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.609382][T10654] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.630108][ T8702] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.637246][ T8702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.675847][ T8702] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.682999][ T8702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.012544][T10654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.357526][ T8717] Bluetooth: hci5: command tx timeout [ 351.438343][T10654] veth0_vlan: entered promiscuous mode [ 351.484020][T10654] veth1_vlan: entered promiscuous mode [ 351.582588][T10654] veth0_macvtap: entered promiscuous mode [ 351.626468][T10654] veth1_macvtap: entered promiscuous mode [ 351.678767][T10654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.745354][T10654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.791542][ T8774] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.815805][ T8774] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.879358][ T8774] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.906908][ T8774] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.104742][ T8715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.133783][ T8715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.209566][ T8774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.233917][ T8774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.644327][T10777] netlink: 28 bytes leftover after parsing attributes in process `syz.2.998'. [ 352.769900][T10777] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.777193][T10777] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.897750][T10777] bridge0: entered promiscuous mode [ 353.205478][T10783] Invalid ELF header magic: != ELF [ 353.432702][ T8717] Bluetooth: hci5: command tx timeout [ 355.442482][T10813] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1004'. [ 355.454884][T10813] netlink: 354 bytes leftover after parsing attributes in process `syz.5.1004'. [ 355.513907][ T8717] Bluetooth: hci5: command tx timeout [ 357.366460][T10862] Console: switching to colour VGA+ 80x25 [ 359.838612][T10932] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1023'. [ 362.016590][T10956] FAULT_INJECTION: forcing a failure. [ 362.016590][T10956] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 362.030452][T10956] CPU: 0 UID: 0 PID: 10956 Comm: syz.2.1031 Tainted: G L syzkaller #0 PREEMPT(full) [ 362.030478][T10956] Tainted: [L]=SOFTLOCKUP [ 362.030483][T10956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 362.030526][T10956] Call Trace: [ 362.030563][T10956] [ 362.030570][T10956] dump_stack_lvl+0x100/0x190 [ 362.030644][T10956] should_fail_ex.cold+0x5/0xa [ 362.030680][T10956] ? prepare_alloc_pages+0x16d/0x5f0 [ 362.030719][T10956] should_fail_alloc_page+0xeb/0x140 [ 362.030746][T10956] prepare_alloc_pages+0x1f0/0x5f0 [ 362.030767][T10956] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 362.030799][T10956] ? stack_trace_save+0x8e/0xc0 [ 362.030829][T10956] ? __pfx_stack_trace_save+0x10/0x10 [ 362.030844][T10956] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 362.030864][T10956] ? stack_depot_save_flags+0x27/0x9d0 [ 362.030959][T10956] ? lock_acquire+0x1cf/0x380 [ 362.030993][T10956] ? kasan_save_stack+0x3f/0x50 [ 362.031015][T10956] ? kasan_save_stack+0x30/0x50 [ 362.031036][T10956] ? kasan_save_track+0x14/0x30 [ 362.031056][T10956] ? __kasan_kmalloc+0xaa/0xb0 [ 362.031078][T10956] ? do_file_open+0x20e/0x430 [ 362.031096][T10956] ? do_sys_openat2+0x10d/0x1e0 [ 362.031113][T10956] ? __x64_sys_openat+0x12d/0x210 [ 362.031131][T10956] ? do_syscall_64+0x106/0xf80 [ 362.031234][T10956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.031261][T10956] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 362.031293][T10956] ? policy_nodemask+0xed/0x4f0 [ 362.031311][T10956] alloc_pages_mpol+0x1fb/0x550 [ 362.031327][T10956] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 362.031348][T10956] alloc_pages_noprof+0x131/0x390 [ 362.031365][T10956] get_zeroed_page_noprof+0x18/0xb0 [ 362.031380][T10956] mon_alloc_buff+0xce/0x1b0 [ 362.031448][T10956] ? kasan_save_track+0x14/0x30 [ 362.031472][T10956] mon_bin_open+0x207/0x470 [ 362.031489][T10956] ? __pfx_mon_bin_open+0x10/0x10 [ 362.031506][T10956] chrdev_open+0x234/0x6a0 [ 362.031522][T10956] ? __pfx_chrdev_open+0x10/0x10 [ 362.031539][T10956] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 362.031566][T10956] do_dentry_open+0x6d8/0x1660 [ 362.031580][T10956] ? __pfx_chrdev_open+0x10/0x10 [ 362.031599][T10956] vfs_open+0x82/0x3f0 [ 362.031620][T10956] path_openat+0x208c/0x31a0 [ 362.031641][T10956] ? __pfx_path_openat+0x10/0x10 [ 362.031663][T10956] do_file_open+0x20e/0x430 [ 362.031687][T10956] ? __pfx_do_file_open+0x10/0x10 [ 362.031716][T10956] ? alloc_fd+0x476/0x790 [ 362.031738][T10956] ? do_getname+0x191/0x390 [ 362.031758][T10956] do_sys_openat2+0x10d/0x1e0 [ 362.031778][T10956] ? __pfx_do_sys_openat2+0x10/0x10 [ 362.031799][T10956] ? __fget_files+0x21f/0x3d0 [ 362.031816][T10956] __x64_sys_openat+0x12d/0x210 [ 362.031836][T10956] ? __pfx___x64_sys_openat+0x10/0x10 [ 362.031862][T10956] do_syscall_64+0x106/0xf80 [ 362.031881][T10956] ? clear_bhb_loop+0x40/0x90 [ 362.031899][T10956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.031914][T10956] RIP: 0033:0x7f8b8dd9c799 [ 362.031929][T10956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.031943][T10956] RSP: 002b:00007f8b8ebc3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 362.031991][T10956] RAX: ffffffffffffffda RBX: 00007f8b8e015fa0 RCX: 00007f8b8dd9c799 [ 362.032001][T10956] RDX: 0000000000002040 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 362.032010][T10956] RBP: 00007f8b8de32c99 R08: 0000000000000000 R09: 0000000000000000 [ 362.032019][T10956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.032027][T10956] R13: 00007f8b8e016038 R14: 00007f8b8e015fa0 R15: 00007fffdde75188 [ 362.032047][T10956] [ 363.224970][ T9496] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 363.233949][ T9496] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 363.242469][ T9496] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 363.250184][ T9496] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 363.257666][ T9496] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 363.575539][T10969] chnl_net:caif_netlink_parms(): no params data found [ 363.735897][T10969] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.753527][T10969] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.782288][T10969] bridge_slave_0: entered allmulticast mode [ 363.794656][T10969] bridge_slave_0: entered promiscuous mode [ 363.812341][T10969] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.820797][T10969] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.829468][T10969] bridge_slave_1: entered allmulticast mode [ 363.836497][T10969] bridge_slave_1: entered promiscuous mode [ 363.866247][T10969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.890866][T10969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.962030][T10969] team0: Port device team_slave_0 added [ 363.980205][T10969] team0: Port device team_slave_1 added [ 364.038534][T10969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.054581][T10969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.105811][T10969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.118613][T10969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.125599][T10969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.153116][T10969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.196676][T10969] hsr_slave_0: entered promiscuous mode [ 364.205057][T10969] hsr_slave_1: entered promiscuous mode [ 364.213512][T10969] debugfs: 'hsr0' already exists in 'hsr' [ 364.219596][T10969] Cannot create hsr debugfs directory [ 364.370925][T10969] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 364.381901][T10969] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 364.391858][T10969] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 364.402842][T10969] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 364.437888][T10969] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.445039][T10969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.452415][T10969] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.459508][T10969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.514429][T10969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.535315][ T8693] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.544486][ T8693] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.564350][T10969] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.575858][ T8715] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.583002][ T8715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.616188][ T8715] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.623357][ T8715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.023293][ T9496] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 365.034898][ T9496] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 365.043668][ T9496] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 365.066530][ T9496] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 365.076458][ T9496] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 365.211247][T10969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.279535][ T9496] Bluetooth: hci6: command tx timeout [ 365.624702][T11002] chnl_net:caif_netlink_parms(): no params data found [ 365.790563][T11002] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.803120][T11002] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.831460][T11002] bridge_slave_0: entered allmulticast mode [ 365.856597][T11002] bridge_slave_0: entered promiscuous mode [ 365.875520][T10969] veth0_vlan: entered promiscuous mode [ 365.887280][T11002] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.895448][T11002] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.903300][T11002] bridge_slave_1: entered allmulticast mode [ 365.911189][T11002] bridge_slave_1: entered promiscuous mode [ 365.925067][T10969] veth1_vlan: entered promiscuous mode [ 366.011783][T11002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.046734][T11002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.067554][T10969] veth0_macvtap: entered promiscuous mode [ 366.118005][T10969] veth1_macvtap: entered promiscuous mode [ 366.141740][T11002] team0: Port device team_slave_0 added [ 366.175786][T10969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.211139][T11002] team0: Port device team_slave_1 added [ 366.224517][T10969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.288661][T11002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.307732][T11002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.401459][T11002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.420284][ T8702] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.453149][T11002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.465196][T11002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.559856][T11002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.580267][ T8702] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.611868][ T8702] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.636318][ T8702] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.764983][T11002] hsr_slave_0: entered promiscuous mode [ 366.781002][T11002] hsr_slave_1: entered promiscuous mode [ 366.791965][T11002] debugfs: 'hsr0' already exists in 'hsr' [ 366.797698][T11002] Cannot create hsr debugfs directory [ 366.845710][ T8715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.865034][ T8715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.925061][ T8715] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.954316][ T8715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.121309][ T9496] Bluetooth: hci7: command tx timeout [ 367.286336][T11002] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 367.327150][T11002] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 367.361307][ T8717] Bluetooth: hci6: command tx timeout [ 367.367893][T11002] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 367.388736][T11002] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 367.654656][T11002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.752937][T11002] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.867428][ T8774] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.874585][ T8774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.930269][ T8774] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.937393][ T8774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.729210][T11002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.204578][ T8717] Bluetooth: hci7: command tx timeout [ 369.441933][ T8717] Bluetooth: hci6: command tx timeout [ 369.773895][T11002] veth0_vlan: entered promiscuous mode [ 369.831273][T11002] veth1_vlan: entered promiscuous mode [ 369.882154][T11111] mkiss: ax0: crc mode is auto. [ 370.051655][T11002] veth0_macvtap: entered promiscuous mode [ 370.148328][T11002] veth1_macvtap: entered promiscuous mode [ 370.257726][T11002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.330203][T11002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.397642][ T8774] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.425235][ T8774] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.501225][ T8774] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.557520][ T8774] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.744752][ T8774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.782612][ T8774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.984567][ T8714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.001010][ T8714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.282448][ T8717] Bluetooth: hci7: command tx timeout [ 371.522435][ T8717] Bluetooth: hci6: command tx timeout [ 373.367098][ T8717] Bluetooth: hci7: command tx timeout [ 373.484198][T11173] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1066'. [ 373.646461][T11173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.679163][ T9496] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 373.703355][ T9496] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 373.711432][ T9496] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 373.720075][ T9496] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 373.730290][T11173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.738495][ T9496] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 373.779619][T11173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.800134][T11173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.482539][T11175] chnl_net:caif_netlink_parms(): no params data found [ 374.803145][T11175] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.850407][T11175] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.887477][T11175] bridge_slave_0: entered allmulticast mode [ 374.914071][T11175] bridge_slave_0: entered promiscuous mode [ 375.001197][T11175] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.031840][T11175] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.073953][T11175] bridge_slave_1: entered allmulticast mode [ 375.101845][T11175] bridge_slave_1: entered promiscuous mode [ 375.268270][T11175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.331221][T11175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.382171][T11175] team0: Port device team_slave_0 added [ 375.390017][T11175] team0: Port device team_slave_1 added [ 375.419190][T11175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.426934][T11175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.464370][T11175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.498424][T11175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.506672][T11175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.541465][T11175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.764739][ T9496] Bluetooth: hci8: command tx timeout [ 375.790399][T11175] hsr_slave_0: entered promiscuous mode [ 375.827999][T11175] hsr_slave_1: entered promiscuous mode [ 375.850645][T11175] debugfs: 'hsr0' already exists in 'hsr' [ 375.877726][T11175] Cannot create hsr debugfs directory [ 376.415130][T11234] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1081'. [ 376.517715][T11175] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 376.610172][T11175] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 376.677324][T11175] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 376.731544][T11175] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 377.004305][T11175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.064175][T11175] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.156934][ T8714] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.164070][ T8714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.214434][ T8714] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.221609][ T8714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.845255][ T9496] Bluetooth: hci8: command tx timeout [ 377.912314][T11175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.401792][T11288] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 378.494407][ T9496] Bluetooth: hci7: unexpected event 0x17 length: 440 > 6 [ 378.654757][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.668386][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.866942][T11175] veth0_vlan: entered promiscuous mode [ 379.042161][T11265] Process accounting paused [ 379.096869][T11175] veth1_vlan: entered promiscuous mode [ 379.255463][T11175] veth0_macvtap: entered promiscuous mode [ 379.300904][T11175] veth1_macvtap: entered promiscuous mode [ 379.383573][T11175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.431976][T11175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.515748][ T8714] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.524495][ T8714] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.597297][ T8714] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.646029][ T8714] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.846353][ T8715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.854179][ T8715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.930225][ T9496] Bluetooth: hci8: command tx timeout [ 379.982249][ T8715] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.013195][ T8715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.548000][T11340] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 381.617257][T11340] FAULT_INJECTION: forcing a failure. [ 381.617257][T11340] name failslab, interval 1, probability 0, space 0, times 0 [ 381.719878][T11340] CPU: 0 UID: 0 PID: 11340 Comm: syz.2.1101 Tainted: G L syzkaller #0 PREEMPT(full) [ 381.719905][T11340] Tainted: [L]=SOFTLOCKUP [ 381.719911][T11340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 381.719921][T11340] Call Trace: [ 381.719926][T11340] [ 381.719933][T11340] dump_stack_lvl+0x100/0x190 [ 381.719962][T11340] should_fail_ex.cold+0x5/0xa [ 381.719981][T11340] should_failslab+0xc2/0x120 [ 381.719999][T11340] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 381.720021][T11340] ? seq_open+0x55/0x170 [ 381.720043][T11340] ? __pfx_tracing_trace_options_show+0x10/0x10 [ 381.720064][T11340] seq_open+0x55/0x170 [ 381.720082][T11340] ? __pfx_tracing_trace_options_show+0x10/0x10 [ 381.720099][T11340] single_open+0xfc/0x1d0 [ 381.720119][T11340] tracing_trace_options_open+0xb0/0x100 [ 381.720152][T11340] do_dentry_open+0x6d8/0x1660 [ 381.720168][T11340] ? __pfx_tracing_trace_options_open+0x10/0x10 [ 381.720196][T11340] vfs_open+0x82/0x3f0 [ 381.720217][T11340] path_openat+0x208c/0x31a0 [ 381.720239][T11340] ? __pfx_path_openat+0x10/0x10 [ 381.720261][T11340] do_file_open+0x20e/0x430 [ 381.720277][T11340] ? __pfx_do_file_open+0x10/0x10 [ 381.720305][T11340] ? alloc_fd+0x476/0x790 [ 381.720321][T11340] ? do_getname+0x191/0x390 [ 381.720341][T11340] do_sys_openat2+0x10d/0x1e0 [ 381.720359][T11340] ? __pfx_do_sys_openat2+0x10/0x10 [ 381.720379][T11340] ? __fget_files+0x21f/0x3d0 [ 381.720397][T11340] __x64_sys_openat+0x12d/0x210 [ 381.720416][T11340] ? __pfx___x64_sys_openat+0x10/0x10 [ 381.720442][T11340] do_syscall_64+0x106/0xf80 [ 381.720464][T11340] ? clear_bhb_loop+0x40/0x90 [ 381.720482][T11340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.720497][T11340] RIP: 0033:0x7f8b8dd9c799 [ 381.720510][T11340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.720525][T11340] RSP: 002b:00007f8b8ebc3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 381.720540][T11340] RAX: ffffffffffffffda RBX: 00007f8b8e015fa0 RCX: 00007f8b8dd9c799 [ 381.720550][T11340] RDX: 0000000000040081 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 381.720559][T11340] RBP: 00007f8b8de32c99 R08: 0000000000000000 R09: 0000000000000000 [ 381.720568][T11340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.720576][T11340] R13: 00007f8b8e016038 R14: 00007f8b8e015fa0 R15: 00007fffdde75188 [ 381.720595][T11340] [ 382.239742][ T9496] Bluetooth: hci8: command tx timeout [ 382.954640][T11359] Invalid ELF header magic: != ELF [ 383.000261][T11359] FAULT_INJECTION: forcing a failure. [ 383.000261][T11359] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 383.050206][T11359] CPU: 0 UID: 0 PID: 11359 Comm: syz.2.1106 Tainted: G L syzkaller #0 PREEMPT(full) [ 383.050235][T11359] Tainted: [L]=SOFTLOCKUP [ 383.050240][T11359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 383.050249][T11359] Call Trace: [ 383.050255][T11359] [ 383.050261][T11359] dump_stack_lvl+0x100/0x190 [ 383.050290][T11359] should_fail_ex.cold+0x5/0xa [ 383.050308][T11359] _copy_from_iter+0x1f4/0x1690 [ 383.050412][T11359] ? __pfx__copy_from_iter+0x10/0x10 [ 383.050433][T11359] ? __pfx___might_resched+0x10/0x10 [ 383.050465][T11359] file_tty_write.isra.0+0x45b/0x890 [ 383.050559][T11359] vfs_write+0x6ac/0x1070 [ 383.050575][T11359] ? __pfx_tty_write+0x10/0x10 [ 383.050597][T11359] ? __pfx_vfs_write+0x10/0x10 [ 383.050609][T11359] ? find_held_lock+0x2b/0x80 [ 383.050637][T11359] ksys_write+0x12a/0x250 [ 383.050650][T11359] ? __pfx_ksys_write+0x10/0x10 [ 383.050670][T11359] do_syscall_64+0x106/0xf80 [ 383.050692][T11359] ? clear_bhb_loop+0x40/0x90 [ 383.050710][T11359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.050725][T11359] RIP: 0033:0x7f8b8dd9c799 [ 383.050738][T11359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.050753][T11359] RSP: 002b:00007f8b8ebc3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 383.050767][T11359] RAX: ffffffffffffffda RBX: 00007f8b8e015fa0 RCX: 00007f8b8dd9c799 [ 383.050777][T11359] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 383.050786][T11359] RBP: 00007f8b8de32c99 R08: 0000000000000000 R09: 0000000000000000 [ 383.050795][T11359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.050804][T11359] R13: 00007f8b8e016038 R14: 00007f8b8e015fa0 R15: 00007fffdde75188 [ 383.050824][T11359] [ 387.040896][T11436] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1123'. [ 387.206360][T11438] FAULT_INJECTION: forcing a failure. [ 387.206360][T11438] name failslab, interval 1, probability 0, space 0, times 0 [ 387.341336][T11438] CPU: 0 UID: 0 PID: 11438 Comm: syz.2.1123 Tainted: G L syzkaller #0 PREEMPT(full) [ 387.341364][T11438] Tainted: [L]=SOFTLOCKUP [ 387.341370][T11438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 387.341380][T11438] Call Trace: [ 387.341385][T11438] [ 387.341391][T11438] dump_stack_lvl+0x100/0x190 [ 387.341420][T11438] should_fail_ex.cold+0x5/0xa [ 387.341438][T11438] should_failslab+0xc2/0x120 [ 387.341455][T11438] __kmalloc_cache_noprof+0x7a/0x6f0 [ 387.341474][T11438] ? bpf_prog_alloc_no_stats+0x15f/0x640 [ 387.341535][T11438] bpf_prog_alloc_no_stats+0x15f/0x640 [ 387.341559][T11438] bpf_prog_alloc+0x3b/0x200 [ 387.341581][T11438] bpf_prog_create_from_user+0xb4/0x2f0 [ 387.341746][T11438] ? __pfx_seccomp_check_filter+0x10/0x10 [ 387.341767][T11438] do_seccomp+0x7f7/0x2740 [ 387.341790][T11438] ? __pfx_do_seccomp+0x10/0x10 [ 387.341809][T11438] ? __x64_sys_openat+0x12d/0x210 [ 387.341829][T11438] ? xfd_validate_state+0x129/0x190 [ 387.341864][T11438] do_syscall_64+0x106/0xf80 [ 387.341886][T11438] ? clear_bhb_loop+0x40/0x90 [ 387.341904][T11438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.341920][T11438] RIP: 0033:0x7f8b8dd9c799 [ 387.341935][T11438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.341950][T11438] RSP: 002b:00007f8b8eb81028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 387.341965][T11438] RAX: ffffffffffffffda RBX: 00007f8b8e016180 RCX: 00007f8b8dd9c799 [ 387.341975][T11438] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000000000000001 [ 387.341984][T11438] RBP: 00007f8b8de32c99 R08: 0000000000000000 R09: 0000000000000000 [ 387.341994][T11438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.342002][T11438] R13: 00007f8b8e016218 R14: 00007f8b8e016180 R15: 00007fffdde75188 [ 387.342022][T11438] [ 388.093556][T11433] bond0: invalid ARP target specified [ 392.163806][T11517] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 392.315183][ T8717] Bluetooth: hci8: unexpected event 0x17 length: 440 > 6 [ 393.583920][T11551] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 393.733821][T11551] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 393.826444][T11551] FAULT_INJECTION: forcing a failure. [ 393.826444][T11551] name failslab, interval 1, probability 0, space 0, times 0 [ 393.933182][T11551] CPU: 0 UID: 0 PID: 11551 Comm: syz.6.1146 Tainted: G L syzkaller #0 PREEMPT(full) [ 393.933210][T11551] Tainted: [L]=SOFTLOCKUP [ 393.933215][T11551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 393.933225][T11551] Call Trace: [ 393.933231][T11551] [ 393.933237][T11551] dump_stack_lvl+0x100/0x190 [ 393.933264][T11551] should_fail_ex.cold+0x5/0xa [ 393.933282][T11551] should_failslab+0xc2/0x120 [ 393.933298][T11551] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 393.933321][T11551] ? alloc_vfsmnt+0x23/0x6a0 [ 393.933342][T11551] alloc_vfsmnt+0x23/0x6a0 [ 393.933362][T11551] fc_mount+0x105/0x220 [ 393.933383][T11551] trace_automount.cold+0x70/0x75 [ 393.933403][T11551] __traverse_mounts+0x1b9/0x8a0 [ 393.933424][T11551] step_into_slowpath+0xb7e/0xf90 [ 393.933444][T11551] ? __d_lookup+0x25c/0x4a0 [ 393.933463][T11551] ? __d_lookup+0x25c/0x4a0 [ 393.933484][T11551] ? __pfx_step_into_slowpath+0x10/0x10 [ 393.933504][T11551] ? __d_lookup+0x266/0x4a0 [ 393.933526][T11551] ? lookup_fast+0x2da/0x600 [ 393.933544][T11551] ? inode_permission+0x374/0x620 [ 393.933565][T11551] link_path_walk+0xf28/0x1cc0 [ 393.933593][T11551] path_openat+0x1be/0x31a0 [ 393.933606][T11551] ? kasan_save_stack+0x3f/0x50 [ 393.933627][T11551] ? kasan_save_stack+0x30/0x50 [ 393.933646][T11551] ? kasan_save_track+0x14/0x30 [ 393.933667][T11551] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 393.933692][T11551] ? __pfx_path_openat+0x10/0x10 [ 393.933723][T11551] do_file_open+0x20e/0x430 [ 393.933740][T11551] ? __pfx_do_file_open+0x10/0x10 [ 393.933769][T11551] ? alloc_fd+0x476/0x790 [ 393.933786][T11551] ? do_getname+0x191/0x390 [ 393.933805][T11551] do_sys_openat2+0x10d/0x1e0 [ 393.933825][T11551] ? __pfx_do_sys_openat2+0x10/0x10 [ 393.933845][T11551] ? __fget_files+0x21f/0x3d0 [ 393.933863][T11551] __x64_sys_openat+0x12d/0x210 [ 393.933882][T11551] ? __pfx___x64_sys_openat+0x10/0x10 [ 393.933908][T11551] do_syscall_64+0x106/0xf80 [ 393.933929][T11551] ? clear_bhb_loop+0x40/0x90 [ 393.933946][T11551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.933962][T11551] RIP: 0033:0x7f6254b9c799 [ 393.933976][T11551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.933990][T11551] RSP: 002b:00007f6255a0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 393.934005][T11551] RAX: ffffffffffffffda RBX: 00007f6254e15fa0 RCX: 00007f6254b9c799 [ 393.934016][T11551] RDX: 0000000000040081 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 393.934026][T11551] RBP: 00007f6254c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 393.934035][T11551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.934044][T11551] R13: 00007f6254e16038 R14: 00007f6254e15fa0 R15: 00007ffc76e566b8 [ 393.934063][T11551] [ 396.252657][T11592] futex_wake_op: syz.6.1151 tries to shift op by -2048; fix this program [ 396.299491][T11592] futex_wake_op: syz.6.1151 tries to shift op by -2048; fix this program [ 396.405481][T11598] 0x000000000001-0x000000020000 : "" [ 396.580529][T11598] ftl_cs: FTL header corrupt! [ 404.252322][T11739] futex_wake_op: syz.8.1176 tries to shift op by -2048; fix this program [ 404.302403][T11739] futex_wake_op: syz.8.1176 tries to shift op by -2048; fix this program [ 404.362889][T11748] 0x000000000001-0x000000020000 : "" [ 404.452684][T11748] ftl_cs: FTL header corrupt! [ 407.081094][T11795] FAULT_INJECTION: forcing a failure. [ 407.081094][T11795] name failslab, interval 1, probability 0, space 0, times 0 [ 407.161631][T11795] CPU: 0 UID: 0 PID: 11795 Comm: syz.2.1185 Tainted: G L syzkaller #0 PREEMPT(full) [ 407.161658][T11795] Tainted: [L]=SOFTLOCKUP [ 407.161664][T11795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 407.161673][T11795] Call Trace: [ 407.161678][T11795] [ 407.161684][T11795] dump_stack_lvl+0x100/0x190 [ 407.161711][T11795] should_fail_ex.cold+0x5/0xa [ 407.161730][T11795] should_failslab+0xc2/0x120 [ 407.161746][T11795] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 407.161767][T11795] ? __kernfs_new_node+0xd2/0x960 [ 407.161822][T11795] ? kstrdup+0xb3/0xe0 [ 407.161851][T11795] __kernfs_new_node+0xd2/0x960 [ 407.161875][T11795] ? __pfx___kernfs_new_node+0x10/0x10 [ 407.161900][T11795] ? find_held_lock+0x2b/0x80 [ 407.161913][T11795] ? kernfs_root+0xee/0x2a0 [ 407.161932][T11795] ? kernfs_root+0xee/0x2a0 [ 407.161955][T11795] kernfs_new_node+0x11b/0x1a0 [ 407.161980][T11795] kernfs_create_dir_ns+0x4c/0x1a0 [ 407.161997][T11795] sysfs_create_dir_ns+0x13a/0x2b0 [ 407.162017][T11795] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 407.162035][T11795] ? find_held_lock+0x2b/0x80 [ 407.162048][T11795] ? kobject_add_internal+0x25f/0x930 [ 407.162138][T11795] ? kobject_add_internal+0x25f/0x930 [ 407.162154][T11795] ? class_dir_child_ns_type+0xd/0x60 [ 407.162221][T11795] kobject_add_internal+0x2c8/0x930 [ 407.162240][T11795] kobject_add+0x16a/0x1e0 [ 407.162255][T11795] ? __pfx_kobject_add+0x10/0x10 [ 407.162274][T11795] ? kobject_put+0xb9/0x640 [ 407.162324][T11795] device_add+0x294/0x1950 [ 407.162366][T11795] ? __pfx_dev_set_name+0x10/0x10 [ 407.162386][T11795] ? __pfx_device_add+0x10/0x10 [ 407.162402][T11795] ? __pfx___might_resched+0x10/0x10 [ 407.162432][T11795] __add_disk+0x518/0xe40 [ 407.162490][T11795] add_disk_fwnode+0x118/0x5c0 [ 407.162508][T11795] nbd_dev_add+0x77a/0xb10 [ 407.162552][T11795] ? find_held_lock+0x2b/0x80 [ 407.162567][T11795] ? __pfx_nbd_dev_add+0x10/0x10 [ 407.162580][T11795] ? nbd_genl_connect+0x131a/0x1a40 [ 407.162608][T11795] ? bpf_lsm_capable+0x9/0x10 [ 407.162635][T11795] ? __radix_tree_lookup+0x217/0x2b0 [ 407.162681][T11795] nbd_genl_connect+0xb8d/0x1a40 [ 407.162697][T11795] ? rcu_is_watching+0x12/0xc0 [ 407.162727][T11795] ? __pfx_nbd_genl_connect+0x10/0x10 [ 407.162744][T11795] ? __nla_parse+0x40/0x60 [ 407.162767][T11795] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 407.162825][T11795] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 407.162846][T11795] genl_family_rcv_msg_doit+0x214/0x300 [ 407.162864][T11795] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 407.162880][T11795] ? genl_get_cmd+0x3ef/0x720 [ 407.162900][T11795] ? kasan_save_track+0x14/0x30 [ 407.162921][T11795] ? __kasan_slab_alloc+0x89/0x90 [ 407.162934][T11795] ? __radix_tree_lookup+0x217/0x2b0 [ 407.162956][T11795] genl_rcv_msg+0x560/0x800 [ 407.162973][T11795] ? __pfx_genl_rcv_msg+0x10/0x10 [ 407.162989][T11795] ? __pfx_nbd_genl_connect+0x10/0x10 [ 407.163007][T11795] ? __lock_acquire+0x4a5/0x2630 [ 407.163029][T11795] netlink_rcv_skb+0x159/0x420 [ 407.163074][T11795] ? __pfx_genl_rcv_msg+0x10/0x10 [ 407.163091][T11795] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 407.163129][T11795] ? netlink_deliver_tap+0x1ae/0xcc0 [ 407.163155][T11795] genl_rcv+0x28/0x40 [ 407.163168][T11795] netlink_unicast+0x5aa/0x870 [ 407.163194][T11795] ? __pfx_netlink_unicast+0x10/0x10 [ 407.163223][T11795] netlink_sendmsg+0x8b0/0xda0 [ 407.163250][T11795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.163271][T11795] ? __import_iovec+0x1d2/0x640 [ 407.163291][T11795] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 407.163350][T11795] ____sys_sendmsg+0x9e1/0xb70 [ 407.163392][T11795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.163417][T11795] ? __pfx_____sys_sendmsg+0x10/0x10 [ 407.163437][T11795] ? __pfx_futex_wake_mark+0x10/0x10 [ 407.163464][T11795] ___sys_sendmsg+0x190/0x1e0 [ 407.163482][T11795] ? __pfx____sys_sendmsg+0x10/0x10 [ 407.163522][T11795] __sys_sendmsg+0x170/0x220 [ 407.163543][T11795] ? __pfx___sys_sendmsg+0x10/0x10 [ 407.163562][T11795] ? __x64_sys_futex+0x34f/0x4d0 [ 407.163593][T11795] do_syscall_64+0x106/0xf80 [ 407.163613][T11795] ? clear_bhb_loop+0x40/0x90 [ 407.163631][T11795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.163646][T11795] RIP: 0033:0x7f8b8dd9c799 [ 407.163660][T11795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.163675][T11795] RSP: 002b:00007f8b8ebc3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.163691][T11795] RAX: ffffffffffffffda RBX: 00007f8b8e015fa0 RCX: 00007f8b8dd9c799 [ 407.163701][T11795] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000009 [ 407.163710][T11795] RBP: 00007f8b8de32c99 R08: 0000000000000000 R09: 0000000000000000 [ 407.163719][T11795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.163728][T11795] R13: 00007f8b8e016038 R14: 00007f8b8e015fa0 R15: 00007fffdde75188 [ 407.163748][T11795] [ 407.670063][T11795] kobject: kobject_add_internal failed for nbd4129 (error: -12 parent: block) [ 407.720047][T11795] nbd: failed to add new device [ 410.261498][T11841] zswap: compressor û not available [ 410.315873][T11815] Process accounting resumed [ 410.366628][T11846] FAULT_INJECTION: forcing a failure. [ 410.366628][T11846] name failslab, interval 1, probability 0, space 0, times 0 [ 410.471239][T11846] CPU: 0 UID: 0 PID: 11846 Comm: syz.8.1196 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.471266][T11846] Tainted: [L]=SOFTLOCKUP [ 410.471271][T11846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 410.471280][T11846] Call Trace: [ 410.471286][T11846] [ 410.471292][T11846] dump_stack_lvl+0x100/0x190 [ 410.471320][T11846] should_fail_ex.cold+0x5/0xa [ 410.471338][T11846] should_failslab+0xc2/0x120 [ 410.471354][T11846] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 410.471378][T11846] ? __kthread_create_on_node+0x186/0x3f0 [ 410.471401][T11846] kvasprintf+0xbc/0x150 [ 410.471498][T11846] ? __pfx_kvasprintf+0x10/0x10 [ 410.471523][T11846] ? __pfx_rescuer_thread+0x10/0x10 [ 410.471543][T11846] __kthread_create_on_node+0x186/0x3f0 [ 410.471561][T11846] ? vsnprintf+0x4ee/0x1240 [ 410.471580][T11846] ? __pfx___kthread_create_on_node+0x10/0x10 [ 410.471607][T11846] ? __pfx_rescuer_thread+0x10/0x10 [ 410.471627][T11846] kthread_create_on_node+0xc7/0x100 [ 410.471645][T11846] ? __pfx_kthread_create_on_node+0x10/0x10 [ 410.471662][T11846] ? __pfx_scnprintf+0x10/0x10 [ 410.471690][T11846] init_rescuer+0x321/0x550 [ 410.471709][T11846] ? __pfx_init_rescuer+0x10/0x10 [ 410.471733][T11846] ? wq_adjust_max_active+0x352/0x4a0 [ 410.471756][T11846] __alloc_workqueue+0xc90/0x1880 [ 410.471787][T11846] alloc_workqueue_noprof+0xd2/0x200 [ 410.471806][T11846] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 410.471826][T11846] ? kobject_init+0x159/0x1b0 [ 410.471849][T11846] ? __alloc_disk_node+0x4d8/0x6b0 [ 410.471899][T11846] nbd_dev_add+0x51a/0xb10 [ 410.471915][T11846] ? find_held_lock+0x2b/0x80 [ 410.471929][T11846] ? __pfx_nbd_dev_add+0x10/0x10 [ 410.471942][T11846] ? nbd_genl_connect+0x131a/0x1a40 [ 410.471970][T11846] ? bpf_lsm_capable+0x9/0x10 [ 410.471986][T11846] ? __radix_tree_lookup+0x217/0x2b0 [ 410.472010][T11846] nbd_genl_connect+0xb8d/0x1a40 [ 410.472025][T11846] ? rcu_is_watching+0x12/0xc0 [ 410.472048][T11846] ? __pfx_nbd_genl_connect+0x10/0x10 [ 410.472065][T11846] ? __nla_parse+0x40/0x60 [ 410.472088][T11846] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 410.472105][T11846] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 410.472125][T11846] genl_family_rcv_msg_doit+0x214/0x300 [ 410.472143][T11846] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 410.472158][T11846] ? genl_get_cmd+0x3ef/0x720 [ 410.472178][T11846] ? __dev_queue_xmit+0x5af/0x4800 [ 410.472243][T11846] ? __radix_tree_lookup+0x217/0x2b0 [ 410.472265][T11846] genl_rcv_msg+0x560/0x800 [ 410.472284][T11846] ? __pfx_genl_rcv_msg+0x10/0x10 [ 410.472300][T11846] ? __pfx_nbd_genl_connect+0x10/0x10 [ 410.472324][T11846] netlink_rcv_skb+0x159/0x420 [ 410.472346][T11846] ? __pfx_genl_rcv_msg+0x10/0x10 [ 410.472363][T11846] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 410.472392][T11846] ? netlink_deliver_tap+0x1ae/0xcc0 [ 410.472416][T11846] genl_rcv+0x28/0x40 [ 410.472429][T11846] netlink_unicast+0x5aa/0x870 [ 410.472453][T11846] ? __pfx_netlink_unicast+0x10/0x10 [ 410.472482][T11846] netlink_sendmsg+0x8b0/0xda0 [ 410.472507][T11846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.472527][T11846] ? __import_iovec+0x1d2/0x640 [ 410.472547][T11846] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 410.472573][T11846] ____sys_sendmsg+0x9e1/0xb70 [ 410.472587][T11846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.472611][T11846] ? __pfx_____sys_sendmsg+0x10/0x10 [ 410.472630][T11846] ? __pfx_futex_wake_mark+0x10/0x10 [ 410.472655][T11846] ___sys_sendmsg+0x190/0x1e0 [ 410.472673][T11846] ? __pfx____sys_sendmsg+0x10/0x10 [ 410.472712][T11846] __sys_sendmsg+0x170/0x220 [ 410.472733][T11846] ? __pfx___sys_sendmsg+0x10/0x10 [ 410.472753][T11846] ? __x64_sys_futex+0x34f/0x4d0 [ 410.472790][T11846] do_syscall_64+0x106/0xf80 [ 410.472811][T11846] ? clear_bhb_loop+0x40/0x90 [ 410.472830][T11846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.472845][T11846] RIP: 0033:0x7f32b8d9c799 [ 410.472859][T11846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.472874][T11846] RSP: 002b:00007f32b9b88028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.472889][T11846] RAX: ffffffffffffffda RBX: 00007f32b9015fa0 RCX: 00007f32b8d9c799 [ 410.472899][T11846] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000009 [ 410.472908][T11846] RBP: 00007f32b8e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 410.472918][T11846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.472926][T11846] R13: 00007f32b9016038 R14: 00007f32b9015fa0 R15: 00007fff78d87888 [ 410.472946][T11846] [ 410.472981][T11846] workqueue: Failed to create a rescuer kthread for wq "nbd4129-recv": -ENOMEM [ 411.713348][T11846] block (null): Could not allocate knbd recv work queue. [ 411.812131][T11846] nbd: failed to add new device [ 415.444037][T11942] FAULT_INJECTION: forcing a failure. [ 415.444037][T11942] name fail_futex, interval 1, probability 0, space 0, times 0 [ 415.505512][T11942] CPU: 0 UID: 0 PID: 11942 Comm: syz.7.1220 Tainted: G L syzkaller #0 PREEMPT(full) [ 415.505539][T11942] Tainted: [L]=SOFTLOCKUP [ 415.505545][T11942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 415.505554][T11942] Call Trace: [ 415.505559][T11942] [ 415.505566][T11942] dump_stack_lvl+0x100/0x190 [ 415.505593][T11942] should_fail_ex.cold+0x5/0xa [ 415.505608][T11942] ? __kernel_text_address+0xd/0x30 [ 415.505632][T11942] get_futex_key+0x1d2/0x1620 [ 415.505652][T11942] ? __pfx_get_futex_key+0x10/0x10 [ 415.505669][T11942] ? putname+0xb1/0x110 [ 415.505685][T11942] ? stack_trace_save+0x8e/0xc0 [ 415.505700][T11942] ? __pfx_stack_trace_save+0x10/0x10 [ 415.505716][T11942] futex_wait_setup+0x83/0x510 [ 415.505746][T11942] __futex_wait+0x19f/0x300 [ 415.505769][T11942] ? __pfx___futex_wait+0x10/0x10 [ 415.505792][T11942] ? __pfx_futex_wake_mark+0x10/0x10 [ 415.505816][T11942] ? futex_hash+0x2c5/0x380 [ 415.505838][T11942] futex_wait+0xed/0x380 [ 415.505859][T11942] ? __pfx_futex_wait+0x10/0x10 [ 415.505884][T11942] ? putname+0xb1/0x110 [ 415.505898][T11942] ? kmem_cache_free+0x124/0x6a0 [ 415.505916][T11942] ? do_sys_openat2+0x1b4/0x1e0 [ 415.505937][T11942] do_futex+0x1ef/0x350 [ 415.505956][T11942] ? __pfx_do_futex+0x10/0x10 [ 415.505973][T11942] ? __pfx_do_sys_openat2+0x10/0x10 [ 415.505992][T11942] ? __fget_files+0x21f/0x3d0 [ 415.506008][T11942] __x64_sys_futex+0x34f/0x4d0 [ 415.506027][T11942] ? __x64_sys_openat+0x12d/0x210 [ 415.506046][T11942] ? __pfx___x64_sys_futex+0x10/0x10 [ 415.506072][T11942] do_syscall_64+0x106/0xf80 [ 415.506092][T11942] ? clear_bhb_loop+0x40/0x90 [ 415.506110][T11942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.506125][T11942] RIP: 0033:0x7fbbd9d9c799 [ 415.506137][T11942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.506152][T11942] RSP: 002b:00007fbbdaba70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 415.506167][T11942] RAX: ffffffffffffffda RBX: 00007fbbda016098 RCX: 00007fbbd9d9c799 [ 415.506176][T11942] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbbda016098 [ 415.506185][T11942] RBP: 00007fbbda016090 R08: 0000000000000000 R09: 0000000000000000 [ 415.506194][T11942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.506202][T11942] R13: 00007fbbda016128 R14: 00007fff6d9d3de0 R15: 00007fff6d9d3ec8 [ 415.506221][T11942] [ 421.448598][ T9496] Bluetooth: hci7: unexpected event 0x1c length: 725 > 5 [ 421.512532][T12064] openvswitch: netlink: Multiple metadata blocks provided [ 421.708673][ T9496] Bluetooth: hci4: command 0x0406 tx timeout [ 422.692631][T12082] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1242'. [ 425.182267][T12124] block2mtd: illegal erase size [ 426.274574][T12138] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1252'. [ 426.401316][T12138] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.409473][T12138] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.476758][T12138] bridge0: entered promiscuous mode [ 426.923918][T12142] bridge0: port 3(gretap0) entered blocking state [ 426.965747][T12142] bridge0: port 3(gretap0) entered disabled state [ 427.005813][T12142] gretap0: entered allmulticast mode [ 427.046047][T12142] FAULT_INJECTION: forcing a failure. [ 427.046047][T12142] name failslab, interval 1, probability 0, space 0, times 0 [ 427.099998][T12142] CPU: 0 UID: 0 PID: 12142 Comm: syz.7.1253 Tainted: G L syzkaller #0 PREEMPT(full) [ 427.100026][T12142] Tainted: [L]=SOFTLOCKUP [ 427.100031][T12142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 427.100040][T12142] Call Trace: [ 427.100046][T12142] [ 427.100052][T12142] dump_stack_lvl+0x100/0x190 [ 427.100080][T12142] should_fail_ex.cold+0x5/0xa [ 427.100099][T12142] should_failslab+0xc2/0x120 [ 427.100115][T12142] __kmalloc_cache_noprof+0x7a/0x6f0 [ 427.100134][T12142] ? __netdev_adjacent_dev_insert+0x22b/0xbf0 [ 427.100155][T12142] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 427.100297][T12142] __netdev_adjacent_dev_insert+0x22b/0xbf0 [ 427.100317][T12142] ? ip6_route_dev_notify+0xe4/0x750 [ 427.100402][T12142] ? ndisc_netdev_event+0xa1/0x560 [ 427.100442][T12142] ? __pfx___netdev_adjacent_dev_insert+0x10/0x10 [ 427.100462][T12142] ? notifier_call_chain+0x34c/0x420 [ 427.100490][T12142] __netdev_upper_dev_link+0x3d8/0x7e0 [ 427.100509][T12142] ? __pfx___netdev_upper_dev_link+0x10/0x10 [ 427.100523][T12142] ? kernfs_root+0xf8/0x2a0 [ 427.100545][T12142] ? kernfs_add_one+0x214/0x850 [ 427.100572][T12142] netdev_master_upper_dev_link+0x9f/0xd0 [ 427.100589][T12142] ? __pfx_netdev_master_upper_dev_link+0x10/0x10 [ 427.100606][T12142] ? lockdep_rtnl_is_held+0x26/0x40 [ 427.100649][T12142] ? netdev_is_rx_handler_busy+0x83/0x140 [ 427.100693][T12142] br_add_if+0x9fd/0x1b40 [ 427.100777][T12142] ? security_capable+0x80/0x260 [ 427.100849][T12142] add_del_if+0x114/0x160 [ 427.100870][T12142] br_dev_siocdevprivate+0x8ac/0x1650 [ 427.100893][T12142] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 427.100921][T12142] ? lock_acquire+0x1cf/0x380 [ 427.100947][T12142] ? netdev_name_node_lookup+0x107/0x150 [ 427.100964][T12142] ? __mutex_lock+0x26a/0x1b90 [ 427.101019][T12142] dev_ifsioc+0xc1e/0x1e90 [ 427.101041][T12142] ? __pfx_dev_ifsioc+0x10/0x10 [ 427.101059][T12142] ? __pfx___mutex_lock+0x10/0x10 [ 427.101087][T12142] ? dev_load+0x8e/0x240 [ 427.101104][T12142] ? dev_load+0x8e/0x240 [ 427.101125][T12142] dev_ioctl+0x70e/0x1070 [ 427.101146][T12142] sock_ioctl+0x494/0x6b0 [ 427.101163][T12142] ? __pfx_sock_ioctl+0x10/0x10 [ 427.101178][T12142] ? hook_file_ioctl_common+0x146/0x410 [ 427.101221][T12142] ? __fget_files+0x21f/0x3d0 [ 427.101239][T12142] ? __pfx_sock_ioctl+0x10/0x10 [ 427.101256][T12142] __x64_sys_ioctl+0x18e/0x210 [ 427.101279][T12142] do_syscall_64+0x106/0xf80 [ 427.101299][T12142] ? clear_bhb_loop+0x40/0x90 [ 427.101317][T12142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.101332][T12142] RIP: 0033:0x7fbbd9d9c799 [ 427.101347][T12142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.101362][T12142] RSP: 002b:00007fbbdabc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 427.101378][T12142] RAX: ffffffffffffffda RBX: 00007fbbda015fa0 RCX: 00007fbbd9d9c799 [ 427.101388][T12142] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 000000000000000a [ 427.101397][T12142] RBP: 00007fbbd9e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 427.101406][T12142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.101415][T12142] R13: 00007fbbda016038 R14: 00007fbbda015fa0 R15: 00007fff6d9d3ec8 [ 427.101435][T12142] [ 427.916289][T12142] gretap0: left allmulticast mode [ 430.230660][ T8717] Bluetooth: hci8: unexpected event 0x1c length: 725 > 5 [ 430.345168][T12199] openvswitch: netlink: Multiple metadata blocks provided [ 433.749432][T12267] FAULT_INJECTION: forcing a failure. [ 433.749432][T12267] name failslab, interval 1, probability 0, space 0, times 0 [ 433.816199][T12267] CPU: 0 UID: 0 PID: 12267 Comm: syz.6.1279 Tainted: G L syzkaller #0 PREEMPT(full) [ 433.816226][T12267] Tainted: [L]=SOFTLOCKUP [ 433.816231][T12267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 433.816241][T12267] Call Trace: [ 433.816246][T12267] [ 433.816252][T12267] dump_stack_lvl+0x100/0x190 [ 433.816280][T12267] should_fail_ex.cold+0x5/0xa [ 433.816298][T12267] should_failslab+0xc2/0x120 [ 433.816314][T12267] __kmalloc_cache_noprof+0x7a/0x6f0 [ 433.816334][T12267] ? device_add+0xd3a/0x1950 [ 433.816354][T12267] device_add+0xd3a/0x1950 [ 433.816371][T12267] ? dev_set_name+0xc7/0x100 [ 433.816389][T12267] ? __pfx_dev_set_name+0x10/0x10 [ 433.816409][T12267] ? __pfx_device_add+0x10/0x10 [ 433.816425][T12267] ? __pfx___might_resched+0x10/0x10 [ 433.816453][T12267] __add_disk+0x518/0xe40 [ 433.816472][T12267] add_disk_fwnode+0x118/0x5c0 [ 433.816489][T12267] nbd_dev_add+0x77a/0xb10 [ 433.816505][T12267] ? find_held_lock+0x2b/0x80 [ 433.816519][T12267] ? __pfx_nbd_dev_add+0x10/0x10 [ 433.816533][T12267] ? nbd_genl_connect+0x131a/0x1a40 [ 433.816561][T12267] ? bpf_lsm_capable+0x9/0x10 [ 433.816577][T12267] ? __radix_tree_lookup+0x217/0x2b0 [ 433.816601][T12267] nbd_genl_connect+0xb8d/0x1a40 [ 433.816615][T12267] ? rcu_is_watching+0x12/0xc0 [ 433.816640][T12267] ? __pfx_nbd_genl_connect+0x10/0x10 [ 433.816657][T12267] ? __nla_parse+0x40/0x60 [ 433.816679][T12267] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 433.816697][T12267] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 433.816717][T12267] genl_family_rcv_msg_doit+0x214/0x300 [ 433.816735][T12267] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 433.816750][T12267] ? genl_get_cmd+0x3ef/0x720 [ 433.816769][T12267] ? __dev_queue_xmit+0x5af/0x4800 [ 433.816785][T12267] ? __radix_tree_lookup+0x217/0x2b0 [ 433.816807][T12267] genl_rcv_msg+0x560/0x800 [ 433.816824][T12267] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.816840][T12267] ? __pfx_nbd_genl_connect+0x10/0x10 [ 433.816862][T12267] netlink_rcv_skb+0x159/0x420 [ 433.816884][T12267] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.816900][T12267] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 433.816929][T12267] ? netlink_deliver_tap+0x1ae/0xcc0 [ 433.816952][T12267] genl_rcv+0x28/0x40 [ 433.816965][T12267] netlink_unicast+0x5aa/0x870 [ 433.816990][T12267] ? __pfx_netlink_unicast+0x10/0x10 [ 433.817019][T12267] netlink_sendmsg+0x8b0/0xda0 [ 433.817044][T12267] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.817074][T12267] ? __import_iovec+0x1d2/0x640 [ 433.817094][T12267] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 433.817121][T12267] ____sys_sendmsg+0x9e1/0xb70 [ 433.817136][T12267] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.817159][T12267] ? __pfx_____sys_sendmsg+0x10/0x10 [ 433.817178][T12267] ? try_to_wake_up+0x644/0x1a80 [ 433.817196][T12267] ___sys_sendmsg+0x190/0x1e0 [ 433.817214][T12267] ? __pfx____sys_sendmsg+0x10/0x10 [ 433.817233][T12267] ? futex_private_hash_put+0x107/0x1c0 [ 433.817272][T12267] __sys_sendmsg+0x170/0x220 [ 433.817293][T12267] ? __pfx___sys_sendmsg+0x10/0x10 [ 433.817313][T12267] ? __x64_sys_futex+0x34f/0x4d0 [ 433.817343][T12267] do_syscall_64+0x106/0xf80 [ 433.817363][T12267] ? clear_bhb_loop+0x40/0x90 [ 433.817381][T12267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.817397][T12267] RIP: 0033:0x7f6254b9c799 [ 433.817410][T12267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.817424][T12267] RSP: 002b:00007f6255a0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.817439][T12267] RAX: ffffffffffffffda RBX: 00007f6254e15fa0 RCX: 00007f6254b9c799 [ 433.817449][T12267] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000009 [ 433.817458][T12267] RBP: 00007f6254c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 433.817468][T12267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.817476][T12267] R13: 00007f6254e16038 R14: 00007f6254e15fa0 R15: 00007ffc76e566b8 [ 433.817497][T12267] [ 434.419100][T12267] nbd: failed to add new device [ 436.492873][T12307] futex_wake_op: syz.7.1289 tries to shift op by -2048; fix this program [ 436.525609][T12307] futex_wake_op: syz.7.1289 tries to shift op by -2048; fix this program [ 436.591109][T12310] 0x000000000001-0x000000020000 : "" [ 436.652081][T12310] ftl_cs: FTL header corrupt! [ 436.980767][T12315] FAULT_INJECTION: forcing a failure. [ 436.980767][T12315] name failslab, interval 1, probability 0, space 0, times 0 [ 437.024356][T12315] CPU: 0 UID: 0 PID: 12315 Comm: syz.7.1290 Tainted: G L syzkaller #0 PREEMPT(full) [ 437.024385][T12315] Tainted: [L]=SOFTLOCKUP [ 437.024391][T12315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 437.024401][T12315] Call Trace: [ 437.024407][T12315] [ 437.024413][T12315] dump_stack_lvl+0x100/0x190 [ 437.024441][T12315] should_fail_ex.cold+0x5/0xa [ 437.024459][T12315] should_failslab+0xc2/0x120 [ 437.024475][T12315] __kmalloc_cache_node_noprof+0x7d/0x770 [ 437.024500][T12315] ? init_rescuer+0x19f/0x550 [ 437.024522][T12315] init_rescuer+0x19f/0x550 [ 437.024541][T12315] ? __pfx_init_rescuer+0x10/0x10 [ 437.024565][T12315] ? wq_adjust_max_active+0x352/0x4a0 [ 437.024588][T12315] __alloc_workqueue+0xc90/0x1880 [ 437.024620][T12315] alloc_workqueue_noprof+0xd2/0x200 [ 437.024639][T12315] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 437.024658][T12315] ? kobject_init+0x159/0x1b0 [ 437.024682][T12315] ? __alloc_disk_node+0x4d8/0x6b0 [ 437.024703][T12315] nbd_dev_add+0x51a/0xb10 [ 437.024718][T12315] ? find_held_lock+0x2b/0x80 [ 437.024732][T12315] ? __pfx_nbd_dev_add+0x10/0x10 [ 437.024745][T12315] ? nbd_genl_connect+0x131a/0x1a40 [ 437.024772][T12315] ? bpf_lsm_capable+0x9/0x10 [ 437.024788][T12315] ? __radix_tree_lookup+0x217/0x2b0 [ 437.024810][T12315] nbd_genl_connect+0xb8d/0x1a40 [ 437.024825][T12315] ? rcu_is_watching+0x12/0xc0 [ 437.024848][T12315] ? __pfx_nbd_genl_connect+0x10/0x10 [ 437.024865][T12315] ? __nla_parse+0x40/0x60 [ 437.024887][T12315] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 437.024905][T12315] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 437.024925][T12315] genl_family_rcv_msg_doit+0x214/0x300 [ 437.024942][T12315] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 437.024958][T12315] ? genl_get_cmd+0x3ef/0x720 [ 437.024977][T12315] ? __dev_queue_xmit+0x5af/0x4800 [ 437.024993][T12315] ? __radix_tree_lookup+0x217/0x2b0 [ 437.025015][T12315] genl_rcv_msg+0x560/0x800 [ 437.025032][T12315] ? __pfx_genl_rcv_msg+0x10/0x10 [ 437.025048][T12315] ? __pfx_nbd_genl_connect+0x10/0x10 [ 437.025070][T12315] netlink_rcv_skb+0x159/0x420 [ 437.025092][T12315] ? __pfx_genl_rcv_msg+0x10/0x10 [ 437.025108][T12315] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 437.025137][T12315] ? netlink_deliver_tap+0x1ae/0xcc0 [ 437.025161][T12315] genl_rcv+0x28/0x40 [ 437.025173][T12315] netlink_unicast+0x5aa/0x870 [ 437.025198][T12315] ? __pfx_netlink_unicast+0x10/0x10 [ 437.025227][T12315] netlink_sendmsg+0x8b0/0xda0 [ 437.025252][T12315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.025272][T12315] ? __import_iovec+0x1d2/0x640 [ 437.025291][T12315] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 437.025318][T12315] ____sys_sendmsg+0x9e1/0xb70 [ 437.025332][T12315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.025355][T12315] ? __pfx_____sys_sendmsg+0x10/0x10 [ 437.025373][T12315] ? try_to_wake_up+0x644/0x1a80 [ 437.025392][T12315] ___sys_sendmsg+0x190/0x1e0 [ 437.025409][T12315] ? __pfx____sys_sendmsg+0x10/0x10 [ 437.025425][T12315] ? futex_private_hash_put+0x107/0x1c0 [ 437.025465][T12315] __sys_sendmsg+0x170/0x220 [ 437.025486][T12315] ? __pfx___sys_sendmsg+0x10/0x10 [ 437.025506][T12315] ? __x64_sys_futex+0x34f/0x4d0 [ 437.025535][T12315] do_syscall_64+0x106/0xf80 [ 437.025555][T12315] ? clear_bhb_loop+0x40/0x90 [ 437.025573][T12315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.025589][T12315] RIP: 0033:0x7fbbd9d9c799 [ 437.025608][T12315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.025624][T12315] RSP: 002b:00007fbbdabc8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 437.025639][T12315] RAX: ffffffffffffffda RBX: 00007fbbda015fa0 RCX: 00007fbbd9d9c799 [ 437.025649][T12315] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000009 [ 437.025658][T12315] RBP: 00007fbbd9e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 437.025668][T12315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.025676][T12315] R13: 00007fbbda016038 R14: 00007fbbda015fa0 R15: 00007fff6d9d3ec8 [ 437.025697][T12315] [ 437.547209][T12315] workqueue: Failed to allocate a rescuer for wq "nbd4129-recv" [ 437.702343][T12323] FAULT_INJECTION: forcing a failure. [ 437.702343][T12323] name failslab, interval 1, probability 0, space 0, times 0 [ 437.715099][T12323] CPU: 0 UID: 0 PID: 12323 Comm: syz.8.1291 Tainted: G L syzkaller #0 PREEMPT(full) [ 437.715125][T12323] Tainted: [L]=SOFTLOCKUP [ 437.715130][T12323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 437.715140][T12323] Call Trace: [ 437.715148][T12323] [ 437.715156][T12323] dump_stack_lvl+0x100/0x190 [ 437.715184][T12323] should_fail_ex.cold+0x5/0xa [ 437.715202][T12323] should_failslab+0xc2/0x120 [ 437.715219][T12323] __kvmalloc_node_noprof+0xfa/0xa00 [ 437.715242][T12323] ? listxattr+0x89/0x190 [ 437.715264][T12323] ? strncpy_from_user+0x19d/0x2d0 [ 437.715284][T12323] listxattr+0x89/0x190 [ 437.715306][T12323] path_listxattrat+0x150/0x370 [ 437.715329][T12323] ? __pfx_path_listxattrat+0x10/0x10 [ 437.715358][T12323] do_syscall_64+0x106/0xf80 [ 437.715379][T12323] ? clear_bhb_loop+0x40/0x90 [ 437.715397][T12323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.715412][T12323] RIP: 0033:0x7f32b8d9c799 [ 437.715427][T12323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.715441][T12323] RSP: 002b:00007f32b6ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3 [ 437.715456][T12323] RAX: ffffffffffffffda RBX: 00007f32b9016090 RCX: 00007f32b8d9c799 [ 437.715466][T12323] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000200000000040 [ 437.715476][T12323] RBP: 00007f32b8e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 437.715486][T12323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.715495][T12323] R13: 00007f32b9016128 R14: 00007f32b9016090 R15: 00007fff78d87888 [ 437.715522][T12323] [ 438.071494][T12315] block (null): Could not allocate knbd recv work queue. [ 438.117338][T12315] nbd: failed to add new device [ 438.346992][T12334] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1293'. [ 439.039651][T12352] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 439.697383][T12367] FAULT_INJECTION: forcing a failure. [ 439.697383][T12367] name failslab, interval 1, probability 0, space 0, times 0 [ 439.753479][T12367] CPU: 0 UID: 0 PID: 12367 Comm: syz.8.1304 Tainted: G L syzkaller #0 PREEMPT(full) [ 439.753505][T12367] Tainted: [L]=SOFTLOCKUP [ 439.753511][T12367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 439.753520][T12367] Call Trace: [ 439.753526][T12367] [ 439.753532][T12367] dump_stack_lvl+0x100/0x190 [ 439.753559][T12367] should_fail_ex.cold+0x5/0xa [ 439.753579][T12367] should_failslab+0xc2/0x120 [ 439.753598][T12367] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 439.753622][T12367] ? kstrdup_const+0x63/0x80 [ 439.753635][T12367] ? find_held_lock+0x2b/0x80 [ 439.753649][T12367] ? is_bpf_text_address+0x8a/0x1a0 [ 439.753674][T12367] kstrdup+0x51/0xe0 [ 439.753696][T12367] kstrdup_const+0x63/0x80 [ 439.753710][T12367] __kernfs_new_node+0x9b/0x960 [ 439.753730][T12367] ? __kernel_text_address+0xd/0x30 [ 439.753752][T12367] ? arch_stack_walk+0xa6/0xf0 [ 439.753799][T12367] ? __pfx___kernfs_new_node+0x10/0x10 [ 439.753824][T12367] ? find_held_lock+0x2b/0x80 [ 439.753839][T12367] ? kernfs_root+0xee/0x2a0 [ 439.753858][T12367] ? kernfs_root+0xee/0x2a0 [ 439.753882][T12367] kernfs_new_node+0x11b/0x1a0 [ 439.753908][T12367] kernfs_create_dir_ns+0x4c/0x1a0 [ 439.753925][T12367] sysfs_create_dir_ns+0x13a/0x2b0 [ 439.753945][T12367] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 439.753963][T12367] ? find_held_lock+0x2b/0x80 [ 439.753976][T12367] ? kobject_add_internal+0x25f/0x930 [ 439.753991][T12367] ? kobject_add_internal+0x25f/0x930 [ 439.754007][T12367] ? class_dir_child_ns_type+0xd/0x60 [ 439.754027][T12367] kobject_add_internal+0x2c8/0x930 [ 439.754045][T12367] kobject_add+0x16a/0x1e0 [ 439.754059][T12367] ? __pfx_kobject_add+0x10/0x10 [ 439.754077][T12367] ? kobject_put+0xb9/0x640 [ 439.754105][T12367] device_add+0x294/0x1950 [ 439.754123][T12367] ? __pfx_dev_set_name+0x10/0x10 [ 439.754143][T12367] ? __pfx_device_add+0x10/0x10 [ 439.754158][T12367] ? __pfx___might_resched+0x10/0x10 [ 439.754185][T12367] __add_disk+0x518/0xe40 [ 439.754204][T12367] add_disk_fwnode+0x118/0x5c0 [ 439.754221][T12367] nbd_dev_add+0x77a/0xb10 [ 439.754236][T12367] ? find_held_lock+0x2b/0x80 [ 439.754250][T12367] ? __pfx_nbd_dev_add+0x10/0x10 [ 439.754263][T12367] ? nbd_genl_connect+0x131a/0x1a40 [ 439.754291][T12367] ? bpf_lsm_capable+0x9/0x10 [ 439.754313][T12367] ? __radix_tree_lookup+0x217/0x2b0 [ 439.754338][T12367] nbd_genl_connect+0xb8d/0x1a40 [ 439.754353][T12367] ? rcu_is_watching+0x12/0xc0 [ 439.754378][T12367] ? __pfx_nbd_genl_connect+0x10/0x10 [ 439.754395][T12367] ? __nla_parse+0x40/0x60 [ 439.754418][T12367] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 439.754435][T12367] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 439.754455][T12367] genl_family_rcv_msg_doit+0x214/0x300 [ 439.754472][T12367] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 439.754488][T12367] ? genl_get_cmd+0x3ef/0x720 [ 439.754507][T12367] ? __dev_queue_xmit+0x5af/0x4800 [ 439.754524][T12367] ? __radix_tree_lookup+0x217/0x2b0 [ 439.754546][T12367] genl_rcv_msg+0x560/0x800 [ 439.754563][T12367] ? __pfx_genl_rcv_msg+0x10/0x10 [ 439.754579][T12367] ? __pfx_nbd_genl_connect+0x10/0x10 [ 439.754602][T12367] netlink_rcv_skb+0x159/0x420 [ 439.754623][T12367] ? __pfx_genl_rcv_msg+0x10/0x10 [ 439.754639][T12367] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 439.754669][T12367] ? netlink_deliver_tap+0x1ae/0xcc0 [ 439.754692][T12367] genl_rcv+0x28/0x40 [ 439.754705][T12367] netlink_unicast+0x5aa/0x870 [ 439.754729][T12367] ? __pfx_netlink_unicast+0x10/0x10 [ 439.754758][T12367] netlink_sendmsg+0x8b0/0xda0 [ 439.754782][T12367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.754803][T12367] ? __import_iovec+0x1d2/0x640 [ 439.754822][T12367] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 439.754848][T12367] ____sys_sendmsg+0x9e1/0xb70 [ 439.754862][T12367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.754886][T12367] ? __pfx_____sys_sendmsg+0x10/0x10 [ 439.754906][T12367] ? __pfx_futex_wake_mark+0x10/0x10 [ 439.754931][T12367] ___sys_sendmsg+0x190/0x1e0 [ 439.754948][T12367] ? __pfx____sys_sendmsg+0x10/0x10 [ 439.754988][T12367] __sys_sendmsg+0x170/0x220 [ 439.755009][T12367] ? __pfx___sys_sendmsg+0x10/0x10 [ 439.755028][T12367] ? __x64_sys_futex+0x34f/0x4d0 [ 439.755058][T12367] do_syscall_64+0x106/0xf80 [ 439.755079][T12367] ? clear_bhb_loop+0x40/0x90 [ 439.755096][T12367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.755112][T12367] RIP: 0033:0x7f32b8d9c799 [ 439.755125][T12367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.755140][T12367] RSP: 002b:00007f32b9b88028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.755155][T12367] RAX: ffffffffffffffda RBX: 00007f32b9015fa0 RCX: 00007f32b8d9c799 [ 439.755164][T12367] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000009 [ 439.755173][T12367] RBP: 00007f32b8e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 439.755183][T12367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.755192][T12367] R13: 00007f32b9016038 R14: 00007f32b9015fa0 R15: 00007fff78d87888 [ 439.755212][T12367] [ 440.263452][T12367] kobject: kobject_add_internal failed for nbd4129 (error: -12 parent: block) [ 440.273307][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.279842][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.361495][T12371] FAULT_INJECTION: forcing a failure. [ 440.361495][T12371] name fail_futex, interval 1, probability 0, space 0, times 0 [ 440.374355][T12371] CPU: 0 UID: 0 PID: 12371 Comm: syz.6.1305 Tainted: G L syzkaller #0 PREEMPT(full) [ 440.374380][T12371] Tainted: [L]=SOFTLOCKUP [ 440.374386][T12371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 440.374396][T12371] Call Trace: [ 440.374402][T12371] [ 440.374408][T12371] dump_stack_lvl+0x100/0x190 [ 440.374435][T12371] should_fail_ex.cold+0x5/0xa [ 440.374450][T12371] ? __lock_acquire+0x4a5/0x2630 [ 440.374472][T12371] get_futex_key+0x1d2/0x1620 [ 440.374492][T12371] ? __pfx_get_futex_key+0x10/0x10 [ 440.374517][T12371] futex_wake+0xea/0x530 [ 440.374540][T12371] ? __pfx_futex_wake+0x10/0x10 [ 440.374569][T12371] do_futex+0x32b/0x350 [ 440.374588][T12371] ? __pfx_do_futex+0x10/0x10 [ 440.374608][T12371] ? putname+0xb1/0x110 [ 440.374625][T12371] __x64_sys_futex+0x34f/0x4d0 [ 440.374644][T12371] ? putname+0xb6/0x110 [ 440.374659][T12371] ? __pfx___x64_sys_futex+0x10/0x10 [ 440.374678][T12371] ? __pfx_path_listxattrat+0x10/0x10 [ 440.374706][T12371] do_syscall_64+0x106/0xf80 [ 440.374727][T12371] ? clear_bhb_loop+0x40/0x90 [ 440.374744][T12371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.374760][T12371] RIP: 0033:0x7f6254b9c799 [ 440.374775][T12371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.374789][T12371] RSP: 002b:00007f62559ec0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 440.374804][T12371] RAX: ffffffffffffffda RBX: 00007f6254e16098 RCX: 00007f6254b9c799 [ 440.374813][T12371] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6254e1609c [ 440.374822][T12371] RBP: 00007f6254e16090 R08: 0000000000000000 R09: 0000000000000000 [ 440.374831][T12371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.374839][T12371] R13: 00007f6254e16128 R14: 00007ffc76e565d0 R15: 00007ffc76e566b8 [ 440.374859][T12371] [ 440.597931][T12367] nbd: failed to add new device [ 440.841957][T12354] Process accounting paused [ 440.951423][T12384] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1308'. [ 442.039695][ T30] INFO: task syz.1.740:9423 blocked for more than 143 seconds. [ 442.056165][ T30] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 442.090035][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 442.161098][ T30] task:syz.1.740 state:D stack:26648 pid:9423 tgid:9423 ppid:5824 task_flags:0x400040 flags:0x00080002 [ 442.258071][ T30] Call Trace: [ 442.261373][ T30] [ 442.308313][ T30] __schedule+0xfee/0x6120 [ 442.314310][ T30] ? __lock_acquire+0x4a5/0x2630 [ 442.347705][ T30] ? __pfx___schedule+0x10/0x10 [ 442.383896][ T30] ? find_held_lock+0x2b/0x80 [ 442.433695][ T30] ? schedule+0x2bf/0x390 [ 442.448171][ T30] schedule+0xdd/0x390 [ 442.452262][ T30] schedule_timeout+0x1b2/0x280 [ 442.481153][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 442.506487][ T30] ? mark_held_locks+0x40/0x70 [ 442.543345][ T30] __wait_for_common+0x2e7/0x4c0 [ 442.624076][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 442.657320][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 442.662810][ T30] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 442.707157][ T30] ? find_held_lock+0x2b/0x80 [ 442.714168][ T30] ? __flush_work+0x928/0xcb0 [ 442.727432][ T30] ? __flush_work+0x928/0xcb0 [ 442.732126][ T30] ? __flush_work+0x4ca/0xcb0 [ 442.736792][ T30] __flush_work+0x7c7/0xcb0 [ 442.761292][ T30] ? __pfx___flush_work+0x10/0x10 [ 442.766344][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 442.784935][ T30] ? __pfx___might_resched+0x10/0x10 [ 442.810883][ T30] ? drm_atomic_helper_wait_for_flip_done+0x190/0x1f0 [ 442.827863][ T30] vkms_atomic_commit_tail+0x172/0x240 [ 442.833432][ T30] ? __pfx_vkms_atomic_commit_tail+0x10/0x10 [ 442.858214][ T30] commit_tail+0x293/0x430 [ 442.862721][ T30] drm_atomic_helper_commit+0x303/0x380 [ 442.877794][ T30] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 442.883876][ T30] drm_atomic_commit+0x230/0x300 [ 442.897401][ T30] ? __pfx_drm_atomic_commit+0x10/0x10 [ 442.902877][ T30] ? __pfx___drm_printfn_info+0x10/0x10 [ 442.913915][ T30] ? drm_client_rotation+0x451/0x6a0 [ 442.925884][ T30] drm_client_modeset_commit_atomic+0x6a6/0x7e0 [ 442.934027][ T30] ? __mutex_lock+0x26a/0x1b90 [ 442.939205][ T30] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 442.945964][ T30] ? drm_master_internal_acquire+0x21/0x80 [ 442.952056][ T30] drm_client_modeset_commit_locked+0x14d/0x580 [ 442.958479][ T30] drm_client_modeset_commit+0x4f/0x80 [ 442.963935][ T30] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 442.972419][ T30] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 442.979450][ T30] drm_fbdev_client_restore+0x1b/0x30 [ 442.984853][ T30] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 442.991173][ T30] drm_client_dev_restore+0x205/0x2a0 [ 442.998265][ T30] drm_release+0x2c6/0x360 [ 443.002750][ T30] ? __pfx_drm_release+0x10/0x10 [ 443.007960][ T30] __fput+0x3ff/0xb40 [ 443.011942][ T30] task_work_run+0x150/0x240 [ 443.016520][ T30] ? __pfx_task_work_run+0x10/0x10 [ 443.021983][ T30] exit_to_user_mode_loop+0x100/0x4a0 [ 443.033970][ T30] do_syscall_64+0x668/0xf80 [ 443.039782][ T30] ? clear_bhb_loop+0x40/0x90 [ 443.044456][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.050776][ T30] RIP: 0033:0x7fcd4819c799 [ 443.055184][ T30] RSP: 002b:00007fff947b91b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 443.063887][ T30] RAX: 0000000000000000 RBX: 00007fff947b92a0 RCX: 00007fcd4819c799 [ 443.072033][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 443.080483][ T30] RBP: 0000000000045120 R08: 0000000000000001 R09: 0000000000000000 [ 443.088638][ T30] R10: 0000001b2fd20000 R11: 0000000000000246 R12: 00007fff947b92e0 [ 443.098015][ T30] R13: 00007fcd48415fac R14: 00000000000452dd R15: 00007fcd48415fa0 [ 443.105991][ T30] [ 443.224296][ T30] [ 443.224296][ T30] Showing all locks held in the system: [ 443.274930][ T30] 1 lock held by khungtaskd/30: [ 443.307845][ T30] #0: ffffffff8e7e7660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 443.337657][ T30] 2 locks held by getty/5583: [ 443.342346][ T30] #0: ffff888037b220a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 443.402669][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 443.437659][ T30] 1 lock held by syz-executor/5827: [ 443.442922][ T30] 6 locks held by syz.1.740/9423: [ 443.473400][ T30] #0: ffff888026490278 (&dev->clientlist_mutex){+.+.}-{4:4}, at: drm_client_dev_restore+0xe9/0x2a0 [ 443.523375][ T30] #1: ffff888026461a80 (&helper->lock){+.+.}-{4:4}, at: __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x21/0x160 [ 443.557717][ T30] #2: ffff888026490130 (&dev->master_mutex){+.+.}-{4:4}, at: drm_master_internal_acquire+0x21/0x80 [ 443.605105][ T30] #3: ffff888026461898 (&client->modeset_mutex){+.+.}-{4:4}, at: drm_client_modeset_commit_locked+0x4c/0x580 [ 443.620354][ T30] #4: ffffc90004197b30 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_client_modeset_commit_atomic+0xc4/0x7e0 [ 443.632193][ T30] #5: ffffc90004197b58 (crtc_ww_class_mutex){+.+.}-{4:4}, at: drm_client_modeset_commit_atomic+0xc4/0x7e0 [ 443.647230][ T30] 1 lock held by syz.3.920/10392: [ 443.652440][ T30] #0: ffff888026490130 (&dev->master_mutex){+.+.}-{4:4}, at: drm_master_open+0x78/0x220 [ 443.662469][ T30] 1 lock held by syz.0.985/10685: [ 443.667474][ T30] #0: ffff888026490130 (&dev->master_mutex){+.+.}-{4:4}, at: drm_master_open+0x78/0x220 [ 443.677521][ T30] 1 lock held by syz.4.993/10722: [ 443.682728][ T30] #0: ffff888026490130 (&dev->master_mutex){+.+.}-{4:4}, at: drm_master_open+0x78/0x220 [ 443.692718][ T30] 1 lock held by syz.5.1015/10885: [ 443.701099][ T30] #0: ffff888026490130 (&dev->master_mutex){+.+.}-{4:4}, at: drm_master_open+0x78/0x220 [ 443.713897][ T30] 2 locks held by syz-executor/10969: [ 443.720376][ T30] #0: ffff888036274ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 443.730985][ T30] #1: ffff8880362740c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 443.743240][ T30] 3 locks held by syz.7.1302/12364: [ 443.748936][ T30] #0: ffffffff905fbd90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 443.758536][ T30] #1: ffffffff906145e8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 443.767643][ T30] #2: ffffffff8e7f3278 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 443.777977][ T30] 4 locks held by syz.8.1312/12401: [ 443.783160][ T30] #0: ffff88806efe4ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 443.792987][ T30] #1: ffff88806efe40c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 443.806791][ T30] #2: ffffffff908ad288 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 443.823060][ T30] #3: ffff8880497a52f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x770 [ 443.871527][ T30] [ 443.873870][ T30] ============================================= [ 443.873870][ T30] [ 443.901437][ T30] NMI backtrace for cpu 0 [ 443.901453][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 443.901472][ T30] Tainted: [L]=SOFTLOCKUP [ 443.901477][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 443.901486][ T30] Call Trace: [ 443.901491][ T30] [ 443.901497][ T30] dump_stack_lvl+0x100/0x190 [ 443.901523][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 443.901545][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 443.901566][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 443.901585][ T30] sys_info+0x141/0x190 [ 443.901598][ T30] watchdog+0xd25/0x1050 [ 443.901618][ T30] ? __pfx_watchdog+0x10/0x10 [ 443.901632][ T30] ? __kthread_parkme+0x18c/0x230 [ 443.901649][ T30] ? kthread+0x13a/0x450 [ 443.901666][ T30] ? __pfx_watchdog+0x10/0x10 [ 443.901677][ T30] kthread+0x370/0x450 [ 443.901694][ T30] ? __pfx_kthread+0x10/0x10 [ 443.901712][ T30] ret_from_fork+0x754/0xd80 [ 443.901734][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 443.901755][ T30] ? __switch_to+0x7b4/0x1120 [ 443.901771][ T30] ? __pfx_kthread+0x10/0x10 [ 443.901789][ T30] ret_from_fork_asm+0x1a/0x30 [ 443.901812][ T30] [ 444.075715][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 444.082581][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 444.093270][ T30] Tainted: [L]=SOFTLOCKUP [ 444.097581][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 444.107618][ T30] Call Trace: [ 444.110887][ T30] [ 444.113808][ T30] dump_stack_lvl+0x100/0x190 [ 444.118479][ T30] vpanic+0x552/0x970 [ 444.122443][ T30] ? __pfx_vpanic+0x10/0x10 [ 444.126930][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 444.133072][ T30] panic+0xd1/0xe0 [ 444.136774][ T30] ? __pfx_panic+0x10/0x10 [ 444.141173][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 444.147307][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 444.153443][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 444.159577][ T30] ? watchdog.cold+0x198/0x1ca [ 444.164322][ T30] ? watchdog+0xd35/0x1050 [ 444.168719][ T30] watchdog.cold+0x1a9/0x1ca [ 444.173297][ T30] ? __pfx_watchdog+0x10/0x10 [ 444.177954][ T30] ? __kthread_parkme+0x18c/0x230 [ 444.182967][ T30] ? kthread+0x13a/0x450 [ 444.187199][ T30] ? __pfx_watchdog+0x10/0x10 [ 444.191854][ T30] kthread+0x370/0x450 [ 444.195907][ T30] ? __pfx_kthread+0x10/0x10 [ 444.200482][ T30] ret_from_fork+0x754/0xd80 [ 444.205061][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 444.210160][ T30] ? __switch_to+0x7b4/0x1120 [ 444.214819][ T30] ? __pfx_kthread+0x10/0x10 [ 444.219392][ T30] ret_from_fork_asm+0x1a/0x30 [ 444.224148][ T30] [ 444.227297][ T30] Kernel Offset: disabled [ 444.231638][ T30] Rebooting in 86400 seconds..