last executing test programs: 5.787943153s ago: executing program 0 (id=373): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2982, 0x0) ioctl$auto_SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000040)="4e2896487fdd856cb8d360ab3e7dbb3f76e8889e689d28520d9ff6db9c5bba09387175722f748b2312155329c28d8c1ddab5324b1fcd00cc95c33f1e6befdbf6929a07707d6f4cbd43e17b3fad3cfa872766445b103e5f4ccbbe857575ff8093fac69a2b38e0fb38746f94c525ba69b66166976e5ddfe1acb61237d08618535721c8cd8d286d94deced6afede28ab92adca9692dd8fc5d0d57c76f2c03cb8b23f89021a7b1e5d3acb3c116dffb521dc3cb0400c1160408ae5e37cc19ad7a6ae21ff4a5f83b7f9921cc145f5bbcad9c60331492a2cbd7fa62c232c3") ioctl$auto_SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000140)="9f40b3b8ebcbfb85c9193f533261dd90a83e332525f27f9118be702f22c429028252b8b2959a11f77378ab8eb851d711a996f761a31514c0a40cb4abbb8b09082e53970467629c5a35974ae6a675314a093cf93fa7a0a221b747517a4fe19b938040cfc1ac0238ab40895d871e8af25a32466687be3f2e399d59b6126a05b4e1f72ac8388bf81f856a934b296e7db8a42d469a369ff2ee92d853fe4fce848d863edf1767") r1 = socket$auto(0x0, 0x7, 0x5) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) getsockname$auto(r2, &(0x7f0000000280)=@l2tp={0x2, 0x0, @remote, 0x6}, &(0x7f00000002c0)=0x3) r3 = syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000340), r1) sendmsg$auto_NET_DM_CMD_CONFIG(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r3, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NET_DM_ATTR_QUEUE_LEN={0x8, 0xb, 0xe}, @NET_DM_ATTR_QUEUE_LEN={0x8, 0xb, 0x1}, @NET_DM_ATTR_TRUNC_LEN={0x8, 0x9, 0xed2e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008045}, 0x4) r4 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000480), r1) sendmsg$auto_KSMBD_EVENT_TREE_CONNECT_REQUEST(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r4, 0x20, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40081}, 0x24008c10) getsockopt$auto_SO_RCVLOWAT(r1, 0x7, 0x12, &(0x7f0000000580)='SMBD_GENL\x00', &(0x7f00000005c0)=0x5) io_uring_register$auto_IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000600)="07bcf8a6846801b8b7db173c515bee4c4f7367d4b936e56b06b3d2267fdf2e567c1c4da918c85b3e818c58e7426e08170c95e8185dbe7972fc2bdf25102dc97ead795f845deb5faec6290d12874f675017c6c97c7fd1c87175b1b48f7b941aab598e26483e83c375cae99277c807534dd2c1393df5bedaf19f5c8e9417aff5991e7ca4ec84ddd4", 0x3) getsockopt$auto_SO_TXTIME(r1, 0x3, 0x3d, &(0x7f00000006c0)='NET_DM\x00', &(0x7f0000000700)=0x1) r5 = getpgrp(0xffffffffffffffff) waitid$auto_P_PIDFD(0x3, r1, &(0x7f00000007c0)={@siginfo_0_0={0xfffffff6, 0x0, 0x7ff, @_kill={0x0, 0xffffffffffffffff}}}, 0x2, &(0x7f0000000840)={{0x1, 0xf}, {0x4, 0x3ff}, 0x8001, 0x6, 0x5, 0x7fffffff, 0x6, 0x3, 0x3ff, 0x6, 0x5, 0xffffffffffffffff, 0x5, 0x9, 0x39d, 0x9}) rt_tgsigqueueinfo$auto_SIGCONT(r5, r6, 0x12, &(0x7f0000000900)={@_si_pad}) r7 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000009c0), r1) sendmsg$auto_BATADV_CMD_SET_MESH(r1, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x4c, r7, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TT_CRC32={0x8, 0x13, 0x3}, @BATADV_ATTR_LOG_LEVEL={0x8, 0x36, 0xfffffffa}, @BATADV_ATTR_TQ={0x5, 0x19, 0x9}, @BATADV_ATTR_BLA_VID={0x6, 0x20, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8041) ioctl$auto_FIGETBSZ(r1, 0x2, 0x7) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000b40), r1) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000001540)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001500)={&(0x7f0000000b80)={0x970, r8, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x8000}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0xffff8305}, @NL80211_ATTR_STA_WME={0x34, 0x81, 0x0, 0x1, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xfd}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xd}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xfb}]}, @NL80211_ATTR_DISABLE_HE={0x4}, @NL80211_ATTR_MAC_HINT={0xde, 0xc8, "331da05cb97430ba8a8a16f7eb9b22fc232448a33a3a62ffc5e743b7c6a4819411f4f7f5d6c3eb694129325f68ec5b3d8166ccb823e11a34988d6e6594fa2cea19a1ec7dcb223716c50d72a5213e0557ae6057c8387d283f14e12e05e6a50d65c9b7eca871d35a969625f88e23611ad094d1343dbf4aa2d61d329a8ab4c7c6b18666c5c3ec6c43bf7dc12a3e7e8643d5d4227c2e4ebdb1355802c434dad7d71252470ec82b1c55a2f84812e53c072676c2c4b7eaaa2915060e61373e28e40336c820b08d6e69dec7158ece3357cb7c0c7e6cfe3f53a33e948686"}, @NL80211_ATTR_MAC={0x50, 0x6, "6615d4f94e4cbe1c32987821be138784c0cc9e76fc632e0ef6edd57c2eb293fd6d58f96832bdd5c8cfdf98cb1590318b0eecd0a528835262f86567a34cd14fd04d94a4a1f1c7dca071930ea3"}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x80}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xffffffff}, @NL80211_ATTR_FRAME={0x7d2, 0x33, "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"}]}, 0x970}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) ioctl$auto_SOUND_MIXER_READ_RECSRC2(r0, 0x80044dff, &(0x7f0000001580)="bf2b7add563682e1b24fd2c044a1d30d881ee002951728959248a71f792acf705f5a8b1b2ad369d2b23110a21524386029799dc0ff53059cff0407349e6c9a5beac77b2514d2f1ea173a712c92ea62b9d413330c0055bd6b2d9ddce467bd3a051cf4d4ed6f0fe61d8866b92c39173c59b9afc1b9a7b16953b26e642c880e7671c6f68671bd798da1971f67adcc0b26074b4a75d5161fb6e2e70c77bb7d3ada3abe540a6bc3c6b9bd9fbe1fd8d0512a1a766db319da8fb94108d865b694a20653d486e1b616ad4ffbfa81") openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/debug/usb/usbmon/18t\x00', 0x8002, 0x0) getsockopt$auto_SO_PEEK_OFF(0xffffffffffffffff, 0xfffffffb, 0x2a, &(0x7f00000016c0)='SMBD_GENL\x00', &(0x7f0000001700)=0x3ff) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(r1, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x5c, r7, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_TT_ADDRESS={0xa, 0x10, @remote}, @BATADV_ATTR_THROUGHPUT={0x8, 0x1a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFNAME={0x14, 0x7, 'ipvlan1\x00'}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_BLA_VID={0x6, 0x20, 0x4}, @BATADV_ATTR_MCAST_FLAGS={0x8, 0x26, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket(0x1e, 0x3, 0x2) 5.781792756s ago: executing program 2 (id=381): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x67, 0x3) setpriority$auto_PRIO_USER(0x2, 0x0, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r2 = openat$auto_deferred_devs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0) read$auto(r2, 0x0, 0x4) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cmdline\x00', 0x481, 0x0) close_range$auto(0x2, 0x8, 0x0) setresuid$auto(0x0, 0x0, 0x0) keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0x0, 0x7fffffffffffffff, 0xffffffffffffe6d6, 0x2) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9c05", @ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf254b0000001c00e70020351644513a7bd458eecf3c840963a2350f2330419c3c40a4009d008182b2cd99554eee70979c47af537a163f65a1a5cb0dc88f31513db86fd3a37f30698be457c216b4fda8d1986eeb32c4a53d14b7071a97be6bf915335d252f3574037f42a59949294dcb3117f7ae7159f7b33e69dc43f14e7a478ad496538bad7d729784d9f4a723dcfa63ac419991a0", @ANYRES32=0x0, @ANYBLOB="0500290006000000ae040f00fa38fc1ce2bcbfdace4ce0a007bb13f43b3108d7e2cecccf33506bba9c0bbdc8a031ca7c3ad1025987708a5337a352660728c00d193cb3554b3b9bdd137eb5c2d52f2bcce073226aa41e76856727998c41eeb80198064cad66119de4fa829ad3584a8dfa3832f94546f3629cda63baa9967e7e546b00845a04aa0a34aec962b9c5d7c9856b0736e214b05a5566e810d3f473add19181e9e11fd74aa7906511794413e2c1868f507d1faff1b24691aeb05d2a539a993088b196c58a656c744c39a31e0951067deae831d8f5c723da1b7e2688686e184e5514091f13080da42fd236662656bf10e9833fbb4f7ecdc37fbc594c3f26d53bbbf9c818c2b71855f3a1f843bd5571d0b7832b35d380820bfd75883905f858473ede84caa005c2e9fe71f8ea2310e36c650566f68ceee7eb8b42e9262270fe3d227c021943bf8f9f00c3dc603007757fe399bc795b49fb122cf2ccf4e6a1a643f20e444706ed4f5cff66bae14cb6b9602d4c00512b19095c46e8fcd3a6d4b276bd4666c8f4a5c195fcdb2570a6d1bd5cc2377c8a863d624587a4e06d10f83f2b322dc8d6a80e8f4b5a3398c1deab5ab0a1e11ec7675e44f01409d39915a34050e4a14e1e53c560b33b58ccb788734c6ffecade76d2cbb778f6c24635078c7fbb70c420ae48011232d2148902512aa08176b6ca1a51bc5774c273b74bf450a650e8d49d10b0d9d247b6af592dcd1fb391c2d50024842c0fd5c735b35adb75030f783618a88c8c4cafedbefd2359605192bd9f70be54822fdd4cba3087ac960546f4d4695e6f7112dcf88f10368fa2cd94387652b69a167442f963e69c7b8211febc5c2bbe69afb56dffb2c2cf841ee4db972d03e1d9a360d5cb0421d43a30fc0722ced687e8c137101acc205f6a128f4f827a0e06f9be21fc66fe35ace03025f4ff159e83b3464a7b813af92ca8acd653a9e7f09e06d5da70bf7c9e3ce05431c1d73b6d5fb51f5fddf760b73aabb2883bd27f75a76ce1bf98e6349d12aaea1026d3b97375f5502022797a1d4ae012c02d85d37de68612867e3909f69eb2ac800669868abe8eff8ee8f6ac54d7233ff736b5f94de2230056f1f7a8619fbe7bcf10bc166f99540cdda69a529a20ce28aea62e82871f2676747e87e28520fd75df781b250d890ca99638fc5fc33d2bdb693bad1a2b296e59f55298480ddefa0f5e26e1789d28f2550f3d5bbc1afff16f23094179b29c8f2032e0a3d23244db82936d149d255b291881e59f6c09e3bd39a2f4f145deb9f44dc79d06a7bb084af6547875a4eb0c431c3b2415a9bdc44ce1f402552f1c130396e007f5dd83f43fd59fa248908996e1f9e31eb7c56aee98dfbbeba223f127c0e36b602f227a5d0e5e2945823947694c2976bc740ba444e46847d35d4f44fab25896a7c75ae72d43203df25a4daa26f4155de0b2d1cad44a0c5c21e8874ef21cd3efa2f1c946697b638fdbd80418a1a884b49149c45fea130bebcedb9a8c41650c85d468e088a2ac4de41f6b4f31d02038a8479211e5d64a9df6552ee5405f46641e59abb3abb88ed22b510f4b2adb0340a1ab01f175dbfdada121fbe19d2255022ad7720f16f574f57e9b405a223e28dbcf1f9fa0f58ba42d15510c855b7ade58f5cd9fd0f3b57ac38096c95ba44e2b062abf2d16de4baa178b8defc85b8522b85e3487fc4638465e0000"], 0x59c}, 0x1, 0x0, 0x0, 0x20040084}, 0x20000000) waitid$auto_P_ALL(0x0, 0x468e, 0x0, 0x20003, &(0x7f0000000340)={{0x8, 0x20000000000005}, {0xa, 0xffe}, 0xfffffffffffff801, 0x2, 0xfffffffffffffffa, 0x2, 0x7, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x7, 0x200009, 0x2, 0x8}) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x8, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x866d, 0x7fff, 0x9) madvise$auto(0x0, 0x20499d, 0x9) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x5) timer_create$auto(0x7, 0x0, &(0x7f0000000140)=0x6) mq_open$auto(&(0x7f0000000680)='netdev\x00', 0x7f, 0x5, &(0x7f00000006c0)={0x400000fffffffc, 0x8, 0x401, 0xffffffffffff8000}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0x10, &(0x7f0000001700)=@query={@target_fd, 0x11, 0x1, 0x9, 0x7f, @prog_cnt=0x2, 0x0, 0xf, 0x8, 0x7, 0x1}, 0x63a) 5.68666743s ago: executing program 3 (id=374): time$auto(0x0) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video17\x00', 0x80800, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/stats\x00', 0x900, 0x0) pread64$auto(r1, &(0x7f00000001c0)='/sys/kernel/irq/2/hwirq\x00', 0x3, 0x7f) r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/block/nbd11/sched/queued\x00', 0xa000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x51, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) write$auto(r3, &(0x7f0000000040)='S\x00\x00\x00\xfc\xff\xff\xff', 0x8587) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r2, &(0x7f0000000040)=""/124, 0x7c) write$auto_tty_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="500016b496bf35e9238200aab2fad2308ae36cabdb15c25d9dbd0cd69874f3ae1cac563b0d5ee5c71f56ff9b2cee9b86b9b1129a587ee0a13529295bbd4e311b1daba0001da010bea057b7983fe6d1793d57313cd5d61da21574d1f54ac7b6fa461fae33ac12dd4f8fbf52fbee63bbaec0e89ca55c2c20edcb8a136e7e4a806b211c1332a77817723985d0fb0c6615537b16531ab7cf703bc532aa78c3707437a59bfd3ceb060ba52276732839f96e520ac660c93249297296472bb94279af8a40c385ea1828c6f2eb33c60a2ee825f2ebe88f63caec5ccef318864100a258a3753dff1ad58a6ee48fc44537b570f500ad6f7f31a761", @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030000020000060007000200000008000300000400000a00050000000000000000000a00010000000000000000000a0005000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004c18}, 0x8894) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='h'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x6}, 0x1) r5 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40802, 0x0) write$auto(r5, 0x0, 0x881) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/swradio3\x00', 0x4180, 0x0) r6 = socket(0x2, 0x1, 0x0) getsockopt$auto(r6, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x200039) read$auto(r0, &(0x7f0000000140)='/dev/video15\x00', 0x5) getsockopt$auto(0xffffffffffffffff, 0x88, 0x66, 0x0, 0x0) 5.550896458s ago: executing program 0 (id=375): madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffe, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0xf6) setsockopt$auto(r1, 0x1, 0x12, 0x0, 0xa4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(0x0, r1) mmap$auto(0x2, 0x8, 0x10000000000df, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x78, 0x0, 0x8) sendmsg$auto_NBD_CMD_DISCONNECT(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2000c800) sendmsg$auto_NBD_CMD_STATUS(r2, &(0x7f00000014c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001480)={&(0x7f0000001200)=ANY=[@ANYBLOB="14010000", @ANYRES64=r3, @ANYBLOB="000826bd7000fedbdf250500000005000a0026000000e00009800400538004003680d4009d80ae39175bc2f5afa384cf2977d04e7b5d275b16b36ef09dfe104973b306ba7603efdb70906029a8cd1e57d6327786dc00000031b7897cf4d02829295209d8b48e7b35cecf1b6c90b156b000ef450f035ba9b672f4e0dfbcef66ee345d4976162a910c874b73040026800800a600", @ANYRES32=0x0, @ANYBLOB="14befcc37c1aea167bf420f5574a8dd1c0bf5f1b93f3b37e790183b155695017aebd321233578e7f0cdfbc4c973d92f8630c0bc38e03cd344f66ae00690067337718a795abb3dfde9cd5bdc0d959fd8e1a5a9a04004c800400c8800400f0000c00060009000000000000000c0002000700000000000000"], 0x114}, 0x1, 0x0, 0x0, 0x2400000c}, 0x8800) r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) madvise$auto(0x91, 0x72, 0x4) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) ioctl$auto_CEC_S_MODE(r4, 0x40046109, &(0x7f0000002c40)=0xd2) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0xffffffffffffffff, 0x200007, 0x19) syslog$auto(0x3, 0x0, 0xd) process_madvise$auto_MADV_NORMAL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000006c0)="755030e6cfd503a07bd3e6713c77fd4058b80d6bfa3ba03b3640819059bd247f2b79a7330d0c5168f25a8bcafc8c9aa3079093b6cff925410127e73552172fe373fa7bcffc0ace132988bade2f7dcefc65ec0c40", 0x9}, 0x1, 0x0, 0x9) poll$auto(0x0, 0x7f, 0x9) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x1c11c0, 0x0) r5 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r5, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r6, r6, 0x0, 0x3) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000200)="34aeede8", 0x4) 4.376768584s ago: executing program 0 (id=376): mmap$auto(0xc5f1, 0x8, 0x2, 0x9b72, 0x5, 0x0) unshare$auto(0x40000080) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sendfile$auto(r0, r0, 0x0, 0x7fffe000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) r3 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000002c0), 0x44100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x40146f2c, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/controlC2\x00', 0x80, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r5 = socket(0x15, 0x5, 0x0) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x40) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) mmap$auto(0x0, 0x40009, 0x4, 0x109b72, r3, 0x27fff) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="0001", @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf2503000000790008805b4f2525b2dc3a73ec37e7122e6f0d55382854d419b883b7ed64bd3c7b9fb15273e787030718751e0a22cc6cabcae114aa6448d0356183e1ca7c01536c5c6f37915b26a3e75515ab02807fe932b8a415a581dcdc7800f91e231c001d800400d3800c002000f3000000002b3c0c7e9b52baf56fe40000000008008c00ac1414aa000000700002806a00e400addd3588300c750bd8c6341eedf20d260a37a63d761fd730c00d02e9ba0a478e7a2f6629a6ad62011d9ab5dc40c928"], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x42) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) getsockopt$auto(r5, 0x114, 0x271f, 0xfffffffffffffffc, 0x0) 4.375844702s ago: executing program 3 (id=377): syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x9) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000002440), 0x80c02, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000500)={0x28, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000100)={0x44, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x6}, @ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x4}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x404889c}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x801, 0x84) readv$auto(0x3, &(0x7f0000003080)={0x0, 0x4}, 0x9) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) recvmmsg$auto(0xffffffffffffffff, 0x0, 0x6, 0x700, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) 4.195459655s ago: executing program 2 (id=378): mmap$auto(0x7, 0x1ff, 0x3, 0xeb1, 0xfffffffffffffffa, 0x5) r0 = socket(0x2, 0x3, 0xa) clone3$auto(0x0, 0x9) socketpair$auto(0x1, 0x0, 0xfffffffc, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(r0, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/sctp/remaddr\x00', 0x101d00, 0x0) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) getdents$auto(r1, &(0x7f0000000080)={0x7, 0xd, 0x3ff}, 0x201) socketpair$auto(0x1e, 0x0, 0x7, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0xa042, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyyb\x00', 0xc7f16bff2a10ba01, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x10000000000002f, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) mmap$auto(0x10, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/neigh/wlan1/mcast_solicit\x00', 0x2000, 0x0) setrlimit$auto(0x0, &(0x7f0000000000)={0x0, 0x3ff}) read$auto(r5, 0x0, 0x1ff) write$auto(r4, 0x0, 0x2) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES16=r6, @ANYBLOB="01db29bd700002dc2b1675d0"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) 4.105077408s ago: executing program 1 (id=379): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) r0 = openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f0000000840), 0x1, 0x0) writev$auto(r0, &(0x7f0000000940)={0x0, 0xb}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r1 = socket(0xa, 0x801, 0x84) socket(0xa, 0x2, 0x88) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x1f, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84}, 0x1fe, 0xd) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) getsockname$auto(0x3, &(0x7f00000002c0)=@generic={0x27, "d3b1c921e9a8592d45348fdaf029"}, &(0x7f0000000180)=0x4) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000100)={{0x0, 0xfffffea7, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) getsockopt$auto(r1, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x1000c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/sctp/assocs\x00', 0x400, 0x0) pread64$auto(r5, &(0x7f0000000080)='\xd5u+~\xa7x\xe0VQ\x1a6\xcf\xce\xfa\xfbN\x19\b\xf64\r\x122i\xd6\x0e\xfa\x96\x9aV:\xe1G\x14\xb2\xd4N\x0e#jX:\xd0\xe4\xa9\xda\xaf\x98\x94G\xa8\xb4\xa7uPc\x1ang\xdb\xb4\xa7\xad\x1b\xcbonh\xd8\x99\x03\x10\xb0\xa5\xfey\xd5F,70\xecG\x8a\fz\x95\x7f\xb0Y{\xdd\xa1\xa3E\x03\xd4\xc67U\x93\n\xfc\xa4\x0e_\xf8\x94\xc3a\x00\xe6\xea4\xa2\x7ft\xeb\x8b$\x16\x0e\xe8j\xcaI\xe0c\x05\x12(\v\xef\xc5Z\xfb\xed\xa3\x01\x001\xa5\x18%\xae/\x1b6\xaa\xf5ysD\xa6\xee\xbf\xc0v\"\x93\x96\"\xcak.\x0e_\xb3\xf7\xac\x9e\xbd/w\xdf\xfc\xe24z\x0f\x8f\b\xbe\xda\xfb\xd0Jj\x97\xfa{\x9d\xfd\xfb\x14\x1f\xb0\xe7\b#\xb9\x01\xf7\xf5\x1c1\xfbNX\xd9\xf0\x97@\xff(\x99\x13M\xadM\b\xf5\xcd\xa3\xe1Q|\r\x18\xd5\xb4\x1c\xa5\xfd\xdf\x98\xd9\xa7\xf3u\xa8ak\xfaHS\xfa\x12\x85\x85\x14\b\x9c\x15\xc10\xb3\xd5.\x13\xc6\xb6\xbak:\xbf\x8f\xcd\x7f\a\xb8\x00\x00\x00', 0x202, 0x7) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRES16=r4, @ANYBLOB="1b0026bd7400fddbdf250300000004000380120001009e8771f1c19f172858f4bcce0b5ff70004000280b2663ea42127ae3d731dbfb6e519602c01be0da62da8274c7c2e4a59b287d17e400693ddb94039af08acc5dba3458356f7ae7344c0bb410a17520f4873a6165cd58e4f7f90e1b8488f38f83fa8ca69ab6bd2fdc78d6127ad181888526693167550abc9318dfa1853"], 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0xc880) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x2000, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) 3.822511888s ago: executing program 1 (id=380): r0 = epoll_create$auto(0x2) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) sysfs$auto(0x2, 0x9, 0x0) fsopen$auto(0x0, 0x1) epoll_pwait2$auto(r0, 0x0, 0x8, &(0x7f0000002780)={0x10000000000, 0x5}, 0x0, 0x8) r1 = epoll_create$auto(0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000200)={0x40004200, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$auto_SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000240)="ff1c77e3e0c75de3e4b5b406551a5767a5356c9bd9de5c773f2e75e6819101f051269dc09510f21d26b8a47ea44ff3011466be44ee87e992ae7b381f46f7e8880f1e4e52a3aa37892fbbcee374327f019f5d1866ce7ce150a42b0a07517071aa68e5997c2bc1062a9b033ba7bfba2572aaa306a2725c16886e383a0973673e3ea024667ff4d2d10e01fd145039fbc221dcd97c590000000000000000005b0d5646bec3cc3e72e128b447ddfe9f9109d94bbbeeb889959201af3ee76e59ecacbc6cd4db93f60abb9223cbd86cb4ea79e84ec9c9bc05390d61c270dd5ea2a3334fd5db6942929d02c50bc254ecb9989258c9e074a6917a36f0") mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x80000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x801, 0x106) connect$auto(r2, &(0x7f00000000c0)=@in={0x2, 0x4e20, @multicast2}, 0x6) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x8006) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(r3, 0x0, 0x6, 0x700, 0x0) close_range$auto(0x0, 0x5, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/firmware/acpi/interrupts/gpe04\x00', 0x10000, 0x0) read$auto(r4, 0x0, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyu1\x00', 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r5 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) 3.821775105s ago: executing program 2 (id=382): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f0000000840), 0x1, 0x0) writev$auto(r1, &(0x7f0000000940)={0x0, 0xb}, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r2 = socket(0xa, 0x801, 0x84) socket(0xa, 0x2, 0x88) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x1f, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84}, 0x1fe, 0xd) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) getsockname$auto(0x3, &(0x7f00000002c0)=@generic={0x27, "d3b1c921e9a8592d45348fdaf029"}, &(0x7f0000000180)=0x4) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000100)={{0x0, 0xfffffea7, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) getsockopt$auto(r2, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x1000c0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/sctp/assocs\x00', 0x400, 0x0) pread64$auto(r6, &(0x7f0000000080)='\xd5u+~\xa7x\xe0VQ\x1a6\xcf\xce\xfa\xfbN\x19\b\xf64\r\x122i\xd6\x0e\xfa\x96\x9aV:\xe1G\x14\xb2\xd4N\x0e#jX:\xd0\xe4\xa9\xda\xaf\x98\x94G\xa8\xb4\xa7uPc\x1ang\xdb\xb4\xa7\xad\x1b\xcbonh\xd8\x99\x03\x10\xb0\xa5\xfey\xd5F,70\xecG\x8a\fz\x95\x7f\xb0Y{\xdd\xa1\xa3E\x03\xd4\xc67U\x93\n\xfc\xa4\x0e_\xf8\x94\xc3a\x00\xe6\xea4\xa2\x7ft\xeb\x8b$\x16\x0e\xe8j\xcaI\xe0c\x05\x12(\v\xef\xc5Z\xfb\xed\xa3\x01\x001\xa5\x18%\xae/\x1b6\xaa\xf5ysD\xa6\xee\xbf\xc0v\"\x93\x96\"\xcak.\x0e_\xb3\xf7\xac\x9e\xbd/w\xdf\xfc\xe24z\x0f\x8f\b\xbe\xda\xfb\xd0Jj\x97\xfa{\x9d\xfd\xfb\x14\x1f\xb0\xe7\b#\xb9\x01\xf7\xf5\x1c1\xfbNX\xd9\xf0\x97@\xff(\x99\x13M\xadM\b\xf5\xcd\xa3\xe1Q|\r\x18\xd5\xb4\x1c\xa5\xfd\xdf\x98\xd9\xa7\xf3u\xa8ak\xfaHS\xfa\x12\x85\x85\x14\b\x9c\x15\xc10\xb3\xd5.\x13\xc6\xb6\xbak:\xbf\x8f\xcd\x7f\a\xb8\x00\x00\x00', 0x202, 0x7) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRES16=r5, @ANYBLOB="1b0026bd7400fddbdf250300000004000380120001009e8771f1c19f172858f4bcce0b5ff70004000280b2663ea42127ae3d731dbfb6e519602c01be0da62da8274c7c2e4a59b287d17e400693ddb94039af08acc5dba3458356f7ae7344c0bb410a17520f4873a6165cd58e4f7f90e1b8488f38f83fa8ca69ab6bd2fdc78d6127ad181888526693167550abc9318dfa1853"], 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0xc880) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x2000, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) 3.756856833s ago: executing program 0 (id=383): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d) listen$auto(0x3, 0x81) r0 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$auto_SO_RCVLOWAT(r1, 0x0, 0x12, &(0x7f0000000340)='7\x00\x00\xec\x007\xfe(\xbd\xb0\x86\xe0K\xcf\xcf\x8d\xf2S6\x9e\x81\xcdc\xd7\x19-7\xc2\x89\x9d\x8cR`\xab6F\xd6O\x8b[\"\x80\xd0\xd2!\xc5\xdf\x8c&\xbd\x12\xb0\xa9v\vK\xfe+\xfb4\x02l\t5:a\xbf\xaf\xe3VX\x8d/l\f\xef\x1c\xc9\x13\xf6\x86\xb9N\xeeq\'\xb8\xb0\xa4\xd8\x94\xb8\xbc\b1\xc5\xb7\xca\x8e\x94\x0e\xc9\x99C\x97\xc2]\x80,\xaa\xf5\x17\xacnQ>\aH\xf6\xd6`/f\xcf\x8d\xaa\x00\xd5\x91\x9f\x96\xc6\xa4\'N\xebE\x8b', 0x1) unshare$auto(0x40000080) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/ati_remote2/parameters/channel_mask\x00', 0x1e1842, 0x0) write$auto(r2, &(0x7f0000000180)='7\x00\x00\xec\x007\xfe(\xbd\xb0\x86\xe0K\xcf\xcf\x8d\xf2S6\x9e\x81\xcdc\xd7\x19-7\xc2\x89\x9d\x8cR`\xab6F\xd6O\x8b[\"\x80\xd0\xd2!\xc5\xdf\x8c&\xbd\x12\xb0\xa9v\vK\xfe+\xfb4\x02l\t5:a\xbf\xaf\xe3VX\x8d/l\f\xef\x1c\xc9\x13\xf6\x86\xb9N\xeeq\'\xb8\xb0\xa4\xd8\x94\xb8\xbc\b1\xc5\xb7\xca\x8e\x94\x0e\xc9\x99C\x97\xc2]\x80,\xaa\xf5\x17\xacnQ>\aH\xf6\xd6`/f\xcf\x8d\xaa\x00\xd5\x91\x9f\x96\xc6\xa4\'N\xebE\x8b', 0x400000000003) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x27, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, 0x0) mmap$auto(0x7f, 0x2, 0x10000000000df, 0xeb2, 0x401, 0x2008000) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r6, r5, 0x4, 0x1ff, r4, @relative_fd, 0xe600}, 0xf) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/watchdog\x00', 0xc0002, 0x0) r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/conf/veth0_to_bridge/mc_forwarding\x00', 0x500, 0x0) sendfile$auto(r7, r8, 0x0, 0x18) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) 3.536488232s ago: executing program 2 (id=384): keyctl$auto_KEYCTL_LINK(0x8, 0xffffffffffffffff, 0x100, 0xec9, 0x8000000000000001) mmap$auto(0x0, 0x20007, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x4, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$auto(0x0, 0xa00006, 0x10000, 0x40eb1, 0x602, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64$auto(r0, 0x0, 0x100000001, 0x9) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) write$auto(r1, 0x0, 0x2) fdatasync$auto(r1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r2 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x303101, 0x0) getsockopt$auto_SO_PEEK_OFF(r2, 0x8, 0x2a, 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000180)={0x60, 0x0, 0x2, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_RNDGETENTCNT2(r3, 0x80045200, &(0x7f0000000200)=0x800) r5 = inotify_init1$auto(0x3) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000000c0)="12d6206be3b03d6c6e07cde708f4356ada10a0191bca4b7b4c6c57958e43ef27a04ba00c9ab65d8b9778ba6cf2838b74f74a67ae301158ffe9ff2a80ac59287fd2c39cc941e4ef00840a8614d78cae2506b04423c81df0c4f8d2acee1343889c0d5f4f28fffb2ab183e7913352d49e0e369869f386388738b015226a963ccf85aca27dc6307627bf71", 0x89) socket(0x22, 0x800, 0x3) ioctl$auto(r0, 0x4b4a, 0xffffffffffffffff) getcwd$auto(0x0, 0xffffffffffffffff) r6 = openat$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x404a03, 0x0) preadv$auto(r6, &(0x7f00000000c0)={&(0x7f0000000040)="47b8791647a59537d6bf32aad9344bcae0adcca93947d1042fdfe7573c847424b482f1897763933fddbaea745a51f73a94f425721c55062041526bf3400aba759adcba5becaaf9c5f172c8224d06e6ba1d4129d1cf947d4c4e8977d5695e2a295b0ac6f76715fbba47", 0x3}, 0xffffffffffffffff, 0x5, 0x9) 3.050925058s ago: executing program 3 (id=385): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2982, 0x0) ioctl$auto_SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000040)="4e2896487fdd856cb8d360ab3e7dbb3f76e8889e689d28520d9ff6db9c5bba09387175722f748b2312155329c28d8c1ddab5324b1fcd00cc95c33f1e6befdbf6929a07707d6f4cbd43e17b3fad3cfa872766445b103e5f4ccbbe857575ff8093fac69a2b38e0fb38746f94c525ba69b66166976e5ddfe1acb61237d08618535721c8cd8d286d94deced6afede28ab92adca9692dd8fc5d0d57c76f2c03cb8b23f89021a7b1e5d3acb3c116dffb521dc3cb0400c1160408ae5e37cc19ad7a6ae21ff4a5f83b7f9921cc145f5bbcad9c60331492a2cbd7fa62c232c3") ioctl$auto_SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000140)="9f40b3b8ebcbfb85c9193f533261dd90a83e332525f27f9118be702f22c429028252b8b2959a11f77378ab8eb851d711a996f761a31514c0a40cb4abbb8b09082e53970467629c5a35974ae6a675314a093cf93fa7a0a221b747517a4fe19b938040cfc1ac0238ab40895d871e8af25a32466687be3f2e399d59b6126a05b4e1f72ac8388bf81f856a934b296e7db8a42d469a369ff2ee92d853fe4fce848d863edf1767") r1 = socket$auto(0x0, 0x7, 0x5) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) getsockname$auto(r2, &(0x7f0000000280)=@l2tp={0x2, 0x0, @remote, 0x6}, &(0x7f00000002c0)=0x3) r3 = syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000340), r1) sendmsg$auto_NET_DM_CMD_CONFIG(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r3, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NET_DM_ATTR_QUEUE_LEN={0x8, 0xb, 0xe}, @NET_DM_ATTR_QUEUE_LEN={0x8, 0xb, 0x1}, @NET_DM_ATTR_TRUNC_LEN={0x8, 0x9, 0xed2e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008045}, 0x4) r4 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000480), r1) sendmsg$auto_KSMBD_EVENT_TREE_CONNECT_REQUEST(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r4, 0x20, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40081}, 0x24008c10) getsockopt$auto_SO_RCVLOWAT(r1, 0x7, 0x12, &(0x7f0000000580)='SMBD_GENL\x00', &(0x7f00000005c0)=0x5) io_uring_register$auto_IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000600)="07bcf8a6846801b8b7db173c515bee4c4f7367d4b936e56b06b3d2267fdf2e567c1c4da918c85b3e818c58e7426e08170c95e8185dbe7972fc2bdf25102dc97ead795f845deb5faec6290d12874f675017c6c97c7fd1c87175b1b48f7b941aab598e26483e83c375cae99277c807534dd2c1393df5bedaf19f5c8e9417aff5991e7ca4ec84ddd4", 0x3) getsockopt$auto_SO_TXTIME(r1, 0x3, 0x3d, &(0x7f00000006c0)='NET_DM\x00', &(0x7f0000000700)=0x1) r5 = getpgrp(0xffffffffffffffff) waitid$auto_P_PIDFD(0x3, r1, &(0x7f00000007c0)={@siginfo_0_0={0xfffffff6, 0x0, 0x7ff, @_kill={0x0, 0xffffffffffffffff}}}, 0x2, &(0x7f0000000840)={{0x1, 0xf}, {0x4, 0x3ff}, 0x8001, 0x6, 0x5, 0x7fffffff, 0x6, 0x3, 0x3ff, 0x6, 0x5, 0xffffffffffffffff, 0x5, 0x9, 0x39d, 0x9}) rt_tgsigqueueinfo$auto_SIGCONT(r5, r6, 0x12, &(0x7f0000000900)={@_si_pad}) r7 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000009c0), r1) sendmsg$auto_BATADV_CMD_SET_MESH(r1, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x4c, r7, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TT_CRC32={0x8, 0x13, 0x3}, @BATADV_ATTR_LOG_LEVEL={0x8, 0x36, 0xfffffffa}, @BATADV_ATTR_TQ={0x5, 0x19, 0x9}, @BATADV_ATTR_BLA_VID={0x6, 0x20, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8041) ioctl$auto_FIGETBSZ(r1, 0x2, 0x7) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000b40), r1) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000001540)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001500)={&(0x7f0000000b80)={0x970, r8, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x8000}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0xffff8305}, @NL80211_ATTR_STA_WME={0x34, 0x81, 0x0, 0x1, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xfd}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xd}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xfb}]}, @NL80211_ATTR_DISABLE_HE={0x4}, @NL80211_ATTR_MAC_HINT={0xde, 0xc8, "331da05cb97430ba8a8a16f7eb9b22fc232448a33a3a62ffc5e743b7c6a4819411f4f7f5d6c3eb694129325f68ec5b3d8166ccb823e11a34988d6e6594fa2cea19a1ec7dcb223716c50d72a5213e0557ae6057c8387d283f14e12e05e6a50d65c9b7eca871d35a969625f88e23611ad094d1343dbf4aa2d61d329a8ab4c7c6b18666c5c3ec6c43bf7dc12a3e7e8643d5d4227c2e4ebdb1355802c434dad7d71252470ec82b1c55a2f84812e53c072676c2c4b7eaaa2915060e61373e28e40336c820b08d6e69dec7158ece3357cb7c0c7e6cfe3f53a33e948686"}, @NL80211_ATTR_MAC={0x50, 0x6, "6615d4f94e4cbe1c32987821be138784c0cc9e76fc632e0ef6edd57c2eb293fd6d58f96832bdd5c8cfdf98cb1590318b0eecd0a528835262f86567a34cd14fd04d94a4a1f1c7dca071930ea3"}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x80}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xffffffff}, @NL80211_ATTR_FRAME={0x7d2, 0x33, "9b95dc3be30a9828e558482215df104831ed27d98aebe1349dbefb141b9f14d1f0114a0a00ae506f5a50b38b62dfd8d43454613e3a8813c6ac4fbc5ae25a8883d79178848e31315fdfc23a8e15ffee08dd5c1bc99e9ae6f0faaae106e31cad35e30a3024b9265ae4992227809d02adf5177b03bde95567d17b14b2dff6f64eb2227a3f010343f6fd119733774bf6bc4e81bace75d43d668d8365c18a9ce642fafd90c33bfcad43d51758407be7bb10b17c8df792c532d6b00fe34af3492284c5ea1a9f2e511ac397e2ea21eb7a4dd89725bc0d24302454d18e8096f0095ab0c98bcc06563dc008d0fdb0abd2abb4b8a7e1d328481838d28ad32e6c2f6b47697a57b084478b5448d277c3420c4aaee5b549b83639f4573b52b26f6f400eb1020d6b5636cb14c54de1fa8502b2dabf20a9e2e4083fe0c49ab9b1838312f34f3b16559b201a611ba2475f39bd22efdc86729c787df64fb1684724ed35dfb0530546b73db3e3021cc22504dcd8e7ec882a13ff9bf7d8958c81f17bbf1ab5a4fe1c7d8ae9af417d34f73eeeaeae3d94bebcff38893f02ed6f86b57bd3c172f5d2399223a437fcc392ef9be68629f56574be544c449f8b671803e5cd5f6a25b7eee286734144e23dee47dcbf701b881b2e26bb8d0acb2c9cbbf88aad71b9544346c9e51591bb4c77d463e9581581ebca3a8bfc30a1a100a4897f25029628cc91bf3c3c68ad729f457b67e080c104e85d1ddb67e7b0aaed7a492a11a1575c0d21dae070c33689dc6277a99e4b18d6138ddf00d25a00fbd7bddba1ed528d94a510ca4500fbb93ed9106d71e5c2af684c2d290e3d4d122b50fd3d4db21538d61d7fcaf3210879b36000e8da4ea06d104abfc19b3633df163ecee35060e4fff0f48601591a2449a5f787e6fcdb412e4a7d957dd251d2ec27eac990fba38eab0991971c419490b10dce331ece6678b561d772e4da16ee3e6ed697a982e946c88c0c1213a9a25e7c6858b2c1fd9d07f5e0082765e4fa0277ff2e37a5c0c3f17150117e6ae04835cc0cce7093b90922e1e8044a00944b9fe3068f8ade62e74e199f1ed20c34888cf3dc9eade75e977d42120f88a170b9ca604037d11b2b76c4cab54d0ae2e2c58187dffc073de00cfbc243d65bfa72052dd05bba00b749381ee208e06d3da98c9f61573898c5ac9f9efd60405ac87226d423025611e2f745132fded39397a365eed25ab7a44610c575574420cc657f3dda3eb3a8b73c3b8dbd0fad1efcc1ce078c69aa2a041cc44be5e6b2cbb3a7ab3bff2c8986bb219fae5ec5413ecdd09328ecf20689066cd75add4ccdf86d1e8fde0c0da75d809c66f254ad95122a772a9254a22270f25acf87c61faf79953c26a93d5555fee534b2785c22aa850744e36fe3b2b97c632fe4ae719fafe4cf3b6918d275cff93df74834dce453ded68492b8f0d6e0ca21797a486d780f0593906180cc2c7f44b6b1cd2cf6e868cafe6a28e4fa0f427e2519f8eae7e053d17b309e70d04cb47bb8ffc88e7eb517861c24df8796e81dd38e64a1a14ea0ced31af839da2d4061fcc117ebae36c7caf1ff9605dad447c247d178c3780618173cf06ffe8b1699bfd400ce58b11cd16566fbadd64373631a162061da86a594223afefc93290887406706a60a17d8798cc395f9a8a6f53d0699f32c06625dc6116f68db0ee13b174204c6531eec93b36a4dc360409758c06ea8455aea075f64f854d3c6ad5e716be1f15343bab486b613367aee574af2e34ddce4e10ff4a7a7a03f02d996b55b0a9c830c5ed3725a7a31470110cffacae04403180c5dc1e93ebbc5c3b19b80f65eac7874a363c011fa8521183d33bffd35843205b44ed421d7f18f2fe2652a5cf93d7923e6dce95c37f1d23b5c79d43ddc1b240f7109ea6f66b96286b1707f6b9d77a7b2f04befbbeebea0e04e80c6ce0ade0fe320ae69f148d652936f4fcf3a157e9463fdef8843bb66221fd3358012f596c712e1db53745fa8c0616db30314cf1e1bcd699af969ae759077a888338a5fbfd92db246a81439b9e68c071f7cc9f793187ceb711a913c9aa5070b41fcb395cee74bd6199344d7d437b3429d1ad60b6826e581e7a8170d83f416a2ce3ac71c96e50d188e9f9a3981c7dd252a56777c6908fe84906eb9e9e66e10950282a76293a3efe4b9b0be28739e6591efdc08713dc4a07fffb26e7f51e63dee44ef2318ce9fd2432a29dfc1731a5e3ee6701552346a66b82dabf7cc5cf8d4125248dd1575a1a807954e890c1cc00da5754b490dd6591c57a5e6cfc34590e6196a60564c6798212c39b868cbf3523141cf4cf24e4e95c1b14ca5515912d5bdbb5449de7d93a4ad5ce8d668968ce253bd4405cdc7714ec6da6f5a088ce6c5e541f54aeb31a3ac7f6f0be89937829088b183b673ec5b81f019617d6fdf2ab97c91e2f4c38c3f659140637833a9788a1406975896736acfb6a3883565aa3ed0e48986117ef1228887bf078d3d3a4782f1aacbd6c208849c8c172f671927fc17c085cc1f947d165d3505e7ed35cb584e4a1e763d9aea665af70ed04c64297536ffa529479c761a831f8b865f1767d325adeb4cb65b040a22e28cf7b1e0f2f7ed08b588d954622f184c76add453970b5ed26ac7ad527a9982ff7b7aefc8ba531dd1dd9f3f2b8e11ef657a198f248a890842819960bf02c4db3c84ec4ab2edec0b8f6401cd827780544910856e7d42e942b822e6b0431cf6b78a8a46450e5a68c83ecd9182e2e8ec80bfd0c5dfc0c2ee6d7756c061e762d9559ccb5ec7d658d762de087751c052fb3fa29f8253c54632be29cb"}]}, 0x970}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) ioctl$auto_SOUND_MIXER_READ_RECSRC2(r0, 0x80044dff, &(0x7f0000001580)="bf2b7add563682e1b24fd2c044a1d30d881ee002951728959248a71f792acf705f5a8b1b2ad369d2b23110a21524386029799dc0ff53059cff0407349e6c9a5beac77b2514d2f1ea173a712c92ea62b9d413330c0055bd6b2d9ddce467bd3a051cf4d4ed6f0fe61d8866b92c39173c59b9afc1b9a7b16953b26e642c880e7671c6f68671bd798da1971f67adcc0b26074b4a75d5161fb6e2e70c77bb7d3ada3abe540a6bc3c6b9bd9fbe1fd8d0512a1a766db319da8fb94108d865b694a20653d486e1b616ad4ffbfa81") openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/debug/usb/usbmon/18t\x00', 0x8002, 0x0) getsockopt$auto_SO_PEEK_OFF(0xffffffffffffffff, 0xfffffffb, 0x2a, &(0x7f00000016c0)='SMBD_GENL\x00', &(0x7f0000001700)=0x3ff) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(r1, 0x0, 0x0) socket(0x1e, 0x3, 0x2) 2.850039267s ago: executing program 0 (id=386): r0 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000640)={0x34, r0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x3}]}, @NET_SHAPER_A_LEAVES={0x4}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r1}, @NET_SHAPER_A_PRIORITY={0x8, 0x6, 0xdf4}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'pim6reg0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'pimreg1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10080}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0xf8, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_TSCONFIG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @ETHTOOL_A_TSCONFIG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9f8c}]}, @ETHTOOL_A_TSCONFIG_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x80000000}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_TSCONFIG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @ETHTOOL_A_TSCONFIG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_TSCONFIG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_TSCONFIG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001}, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x14, 0x2, 0x8000) r3 = socket(0x2, 0x1, 0x106) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x8, &(0x7f00000000c0)={[0xeeda, 0x7, 0x6, 0x9, 0x34, 0x1ff, 0x6, 0x4, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8e, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f00000001c0)={0x6, 0xcb}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fbe2df2502000000080002000100000028e5ff102d084475a9db785e92655ba955715583cc8a50063b3f5b86a34d4538191f112a8151d1cd40b92ef28fecf0ee5384dc719adb2cdb504b5061949d21c6c08399099c7aeb25a44be34571d51bd758e1d8a1135a4f734dc9494b025b6bdf4fbbf44b5355558911de93218243672f35b4eebeff5095141729de40aee41da2a874a3096581f618dd02d4f9ea95617b64f8b2b91222aa5c540d25e26833945b44d647c86bb617"], 0x1c}, 0x1, 0x0, 0x0, 0x24008054}, 0x40) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00+'], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) shutdown$auto(0x200000003, 0x2) 2.573669516s ago: executing program 3 (id=387): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f0000000840), 0x1, 0x0) writev$auto(r1, &(0x7f0000000940)={0x0, 0xb}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0xa, 0x801, 0x84) socket(0xa, 0x2, 0x88) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x1f, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84}, 0x1fe, 0xd) r3 = socket(0x10, 0x2, 0x0) getsockname$auto(0x3, &(0x7f00000002c0)=@generic={0x27, "d3b1c921e9a8592d45348fdaf029"}, &(0x7f0000000180)=0x4) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) bind$auto(0x3, 0x0, 0x6a) getsockopt$auto(r2, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x1000c0) 2.413261756s ago: executing program 3 (id=388): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x67, 0x3) setpriority$auto_PRIO_USER(0x2, 0x0, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r2 = openat$auto_deferred_devs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0) read$auto(r2, 0x0, 0x4) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cmdline\x00', 0x481, 0x0) close_range$auto(0x2, 0x8, 0x0) setresuid$auto(0x0, 0x0, 0x0) keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0x0, 0x7fffffffffffffff, 0xffffffffffffe6d6, 0x2) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9c05", @ANYBLOB="000126bd7000ffdbdf254b0000001c00e70020351644513a7bd458eecf3c840963a2350f2330419c3c40a4009d008182b2cd99554eee70979c47af537a163f65a1a5cb0dc88f31513db86fd3a37f30698be457c216b4fda8d1986eeb32c4a53d14b7071a97be6bf915335d252f3574037f42a59949294dcb3117f7ae7159f7b33e69dc43f14e7a478ad496538bad7d729784d9f4a723dcfa63ac419991a0ae", @ANYRES32=0x0, @ANYBLOB="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"], 0x59c}, 0x1, 0x0, 0x0, 0x20040084}, 0x20000000) waitid$auto_P_ALL(0x0, 0x468e, 0x0, 0x20003, &(0x7f0000000340)={{0x8, 0x20000000000005}, {0xa, 0xffe}, 0xfffffffffffff801, 0x2, 0xfffffffffffffffa, 0x2, 0x7, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x7, 0x200009, 0x2, 0x8}) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x8, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x866d, 0x7fff, 0x9) madvise$auto(0x0, 0x20499d, 0x9) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x5) timer_create$auto(0x7, 0x0, &(0x7f0000000140)=0x6) mq_open$auto(&(0x7f0000000680)='netdev\x00', 0x7f, 0x5, &(0x7f00000006c0)={0x400000fffffffc, 0x8, 0x401, 0xffffffffffff8000}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0x10, &(0x7f0000001700)=@query={@target_fd, 0x11, 0x1, 0x9, 0x7f, @prog_cnt=0x2, 0x0, 0xf, 0x8, 0x7, 0x1}, 0x63a) 1.728055009s ago: executing program 2 (id=389): syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r0) mkdir$auto(&(0x7f0000000480)='./cgroup\x00', 0x6) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) rmdir$auto(&(0x7f0000000300)='./cgroup\x00') mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x2, 0x62, 0x80000000, 0x9, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) getpid() mlockall$auto(0x5) rt_sigprocmask$auto(0x20000004, &(0x7f0000000100)={0x6}, 0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x4) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x400, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 1.727177519s ago: executing program 1 (id=390): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f0000000840), 0x1, 0x0) writev$auto(r1, &(0x7f0000000940)={0x0, 0xb}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r2 = socket(0xa, 0x801, 0x84) socket(0xa, 0x2, 0x88) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x1f, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84}, 0x1fe, 0xd) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) getsockname$auto(0x3, &(0x7f00000002c0)=@generic={0x27, "d3b1c921e9a8592d45348fdaf029"}, &(0x7f0000000180)=0x4) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000100)={{0x0, 0xfffffea7, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) getsockopt$auto(r2, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x1000c0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/sctp/assocs\x00', 0x400, 0x0) pread64$auto(r6, &(0x7f0000000080)='\xd5u+~\xa7x\xe0VQ\x1a6\xcf\xce\xfa\xfbN\x19\b\xf64\r\x122i\xd6\x0e\xfa\x96\x9aV:\xe1G\x14\xb2\xd4N\x0e#jX:\xd0\xe4\xa9\xda\xaf\x98\x94G\xa8\xb4\xa7uPc\x1ang\xdb\xb4\xa7\xad\x1b\xcbonh\xd8\x99\x03\x10\xb0\xa5\xfey\xd5F,70\xecG\x8a\fz\x95\x7f\xb0Y{\xdd\xa1\xa3E\x03\xd4\xc67U\x93\n\xfc\xa4\x0e_\xf8\x94\xc3a\x00\xe6\xea4\xa2\x7ft\xeb\x8b$\x16\x0e\xe8j\xcaI\xe0c\x05\x12(\v\xef\xc5Z\xfb\xed\xa3\x01\x001\xa5\x18%\xae/\x1b6\xaa\xf5ysD\xa6\xee\xbf\xc0v\"\x93\x96\"\xcak.\x0e_\xb3\xf7\xac\x9e\xbd/w\xdf\xfc\xe24z\x0f\x8f\b\xbe\xda\xfb\xd0Jj\x97\xfa{\x9d\xfd\xfb\x14\x1f\xb0\xe7\b#\xb9\x01\xf7\xf5\x1c1\xfbNX\xd9\xf0\x97@\xff(\x99\x13M\xadM\b\xf5\xcd\xa3\xe1Q|\r\x18\xd5\xb4\x1c\xa5\xfd\xdf\x98\xd9\xa7\xf3u\xa8ak\xfaHS\xfa\x12\x85\x85\x14\b\x9c\x15\xc10\xb3\xd5.\x13\xc6\xb6\xbak:\xbf\x8f\xcd\x7f\a\xb8\x00\x00\x00', 0x202, 0x7) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRES16=r5, @ANYBLOB="1b0026bd7400fddbdf250300000004000380120001009e8771f1c19f172858f4bcce0b5ff70004000280b2663ea42127ae3d731dbfb6e519602c01be0da62da8274c7c2e4a59b287d17e400693ddb94039af08acc5dba3458356f7ae7344c0bb410a17520f4873a6165cd58e4f7f90e1b8488f38f83fa8ca69ab6bd2fdc78d6127ad181888526693167550abc9318dfa1853"], 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0xc880) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x2000, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) 1.356787975s ago: executing program 1 (id=391): mmap$auto(0x7, 0x1ff, 0x3, 0xeb1, 0xfffffffffffffffa, 0x5) r0 = socket(0x2, 0x3, 0xa) clone3$auto(0x0, 0x9) socketpair$auto(0x1, 0x0, 0xfffffffc, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(r0, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/sctp/remaddr\x00', 0x101d00, 0x0) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) getdents$auto(r1, &(0x7f0000000080)={0x7, 0xd, 0x3ff}, 0x201) socketpair$auto(0x1e, 0x0, 0x7, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0xa042, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyyb\x00', 0xc7f16bff2a10ba01, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x10000000000002f, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) mmap$auto(0x10, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/neigh/wlan1/mcast_solicit\x00', 0x2000, 0x0) setrlimit$auto(0x0, &(0x7f0000000000)={0x0, 0x3ff}) read$auto(r5, 0x0, 0x1ff) write$auto(r4, 0x0, 0x2) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES16=r6, @ANYBLOB="01db29bd700002dc2b1675d0"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) 1.355965766s ago: executing program 0 (id=399): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x52001, 0x0) socket(0x29, 0x800, 0xfffffffc) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) mremap$auto(0x8, 0x4000007, 0x3fd7, 0x0, 0x20000020000001) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, 0x0, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) r2 = memfd_create$auto(0x0, 0xc) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1) write$auto(r3, &(0x7f0000000000)='//\xf2\x00', 0x80000000) ioctl$auto_NS_GET_TGID_IN_PIDNS(r2, 0x8004b709, &(0x7f00000000c0)=0xb) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/query\x00', 0x20600, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x8000, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/pcm1p/sub4/info\x00', 0xa0000, 0x0) pread64$auto(r5, 0x0, 0x200000000004, 0x4) ioctl$auto(0x3, 0x402c542b, 0x38) r6 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0) sendfile$auto(r6, r4, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x2) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0x8901, 0x0) 585.386846ms ago: executing program 3 (id=392): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x34, 0x400000000065f, 0x1ffde, 0x40007, 0x40000000007f, 0x20000005, 0x9, 0x3, 0x6, 0x400000004, 0xb4, 0x4, 0x6, 0x2, 0x1, 0xfff, 0xfffffff7, 0x7, 0x1fff, 0x203, 0x838b, 0x84, 0x2, 0x0, 0x5, 0x0, 0x0, [0x0, 0x0, 0x0, 0x40000000000, 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x400, 0x0, 0x0, 0x401, 0x70000, 0x0, 0x7, 0x0, 0x81, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x251, 0x3, 0x0, 0x0, 0x8, 0x3, 0xfffffffffffff7cc, 0x4, 0x400000000000002, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x2000]}, 0x1fe, 0x8) personality$auto(0x5) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec4\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/003/001\x00', 0x8001, 0x0) ioctl$auto_USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000040)={0x2, 0x800}) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x8) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dsp1\x00', 0x44e02, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0) socket(0x1d, 0x80008, 0x7fff) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r5, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) r6 = socket(0x18, 0x5, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r7, 0x5403, 0x0) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r6, 0x0, 0x30004850) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtdblock0\x00', 0x20200, 0x0) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r4) 524.941755ms ago: executing program 1 (id=393): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f0000000840), 0x1, 0x0) writev$auto(r1, &(0x7f0000000940)={0x0, 0xb}, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r2 = socket(0xa, 0x801, 0x84) socket(0xa, 0x2, 0x88) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x1f, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84}, 0x1fe, 0xd) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) getsockname$auto(0x3, &(0x7f00000002c0)=@generic={0x27, "d3b1c921e9a8592d45348fdaf029"}, &(0x7f0000000180)=0x4) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000100)={{0x0, 0xfffffea7, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) getsockopt$auto(r2, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x1000c0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/sctp/assocs\x00', 0x400, 0x0) pread64$auto(r6, &(0x7f0000000080)='\xd5u+~\xa7x\xe0VQ\x1a6\xcf\xce\xfa\xfbN\x19\b\xf64\r\x122i\xd6\x0e\xfa\x96\x9aV:\xe1G\x14\xb2\xd4N\x0e#jX:\xd0\xe4\xa9\xda\xaf\x98\x94G\xa8\xb4\xa7uPc\x1ang\xdb\xb4\xa7\xad\x1b\xcbonh\xd8\x99\x03\x10\xb0\xa5\xfey\xd5F,70\xecG\x8a\fz\x95\x7f\xb0Y{\xdd\xa1\xa3E\x03\xd4\xc67U\x93\n\xfc\xa4\x0e_\xf8\x94\xc3a\x00\xe6\xea4\xa2\x7ft\xeb\x8b$\x16\x0e\xe8j\xcaI\xe0c\x05\x12(\v\xef\xc5Z\xfb\xed\xa3\x01\x001\xa5\x18%\xae/\x1b6\xaa\xf5ysD\xa6\xee\xbf\xc0v\"\x93\x96\"\xcak.\x0e_\xb3\xf7\xac\x9e\xbd/w\xdf\xfc\xe24z\x0f\x8f\b\xbe\xda\xfb\xd0Jj\x97\xfa{\x9d\xfd\xfb\x14\x1f\xb0\xe7\b#\xb9\x01\xf7\xf5\x1c1\xfbNX\xd9\xf0\x97@\xff(\x99\x13M\xadM\b\xf5\xcd\xa3\xe1Q|\r\x18\xd5\xb4\x1c\xa5\xfd\xdf\x98\xd9\xa7\xf3u\xa8ak\xfaHS\xfa\x12\x85\x85\x14\b\x9c\x15\xc10\xb3\xd5.\x13\xc6\xb6\xbak:\xbf\x8f\xcd\x7f\a\xb8\x00\x00\x00', 0x202, 0x7) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRES16=r5, @ANYBLOB="1b0026bd7400fddbdf250300000004000380120001009e8771f1c19f172858f4bcce0b5ff70004000280b2663ea42127ae3d731dbfb6e519602c01be0da62da8274c7c2e4a59b287d17e400693ddb94039af08acc5dba3458356f7ae7344c0bb410a17520f4873a6165cd58e4f7f90e1b8488f38f83fa8ca69ab6bd2fdc78d6127ad181888526693167550abc9318dfa1853"], 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0xc880) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x2000, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) 183.040483ms ago: executing program 1 (id=394): sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0x2000c800) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x9) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000002440), 0x80c02, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000500)={0x28, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000100)={0x44, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x6}, @ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x4}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x404889c}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x801, 0x84) readv$auto(0x3, &(0x7f0000003080)={0x0, 0x4}, 0x9) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) recvmmsg$auto(0xffffffffffffffff, 0x0, 0x6, 0x700, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) 0s ago: executing program 2 (id=395): r0 = socket(0x1, 0x3, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000080) sendfile$auto(0x1, 0x3, 0x0, 0x400) r1 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x46e381, 0x0) ioctl$auto(0xffffffffffffffff, 0xab07, 0xffffffffffffffff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.0/usb1/bDeviceProtocol\x00', 0x12bc00, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(r1, r2, 0x40000000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe2702, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101200, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0x4008ae90, &(0x7f0000000300)={0x2, 0x0, [{0x1, 0x7ff, 0x8}, {0x10002, 0x30, 0x2}]}) semctl$auto(0x8, 0x806, 0x13, 0x46) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop1\x00', 0xc6c43, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/kvm/pages_2m\x00', 0xa2500, 0x0) read$auto_stat_fops_per_vm_kvm_main(r5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x26, 0xa, 0x1) socket(0xa, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x102, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.52' (ED25519) to the list of known hosts. [ 81.127114][ T5821] cgroup: Unknown subsys name 'net' [ 81.259893][ T5821] cgroup: Unknown subsys name 'cpuset' [ 81.269033][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.800652][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.783865][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.792058][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.799884][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.808020][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.826558][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.890258][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.898453][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.906488][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.914956][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.922788][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.947912][ T5155] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.967525][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.975741][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.990957][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.994120][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.007716][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.015011][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.017203][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.023869][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.029925][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.526448][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 85.553026][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 85.689563][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 85.769853][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 85.832749][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.840640][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.848149][ T5832] bridge_slave_0: entered allmulticast mode [ 85.855238][ T5832] bridge_slave_0: entered promiscuous mode [ 85.872310][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.879610][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.886819][ T5843] bridge_slave_0: entered allmulticast mode [ 85.893763][ T5843] bridge_slave_0: entered promiscuous mode [ 85.911722][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.919125][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.926367][ T5832] bridge_slave_1: entered allmulticast mode [ 85.933474][ T5832] bridge_slave_1: entered promiscuous mode [ 85.951090][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.958268][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.965539][ T5843] bridge_slave_1: entered allmulticast mode [ 85.973482][ T5843] bridge_slave_1: entered promiscuous mode [ 86.048041][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.055227][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.062615][ T5836] bridge_slave_0: entered allmulticast mode [ 86.069612][ T5836] bridge_slave_0: entered promiscuous mode [ 86.080191][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.097852][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.107273][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.114930][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.122197][ T5836] bridge_slave_1: entered allmulticast mode [ 86.129229][ T5836] bridge_slave_1: entered promiscuous mode [ 86.138679][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.157545][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.212370][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.220030][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.227283][ T5839] bridge_slave_0: entered allmulticast mode [ 86.234233][ T5839] bridge_slave_0: entered promiscuous mode [ 86.264387][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.274080][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.281443][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.288672][ T5839] bridge_slave_1: entered allmulticast mode [ 86.295674][ T5839] bridge_slave_1: entered promiscuous mode [ 86.304233][ T5832] team0: Port device team_slave_0 added [ 86.311969][ T5843] team0: Port device team_slave_0 added [ 86.320211][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.342560][ T5832] team0: Port device team_slave_1 added [ 86.350673][ T5843] team0: Port device team_slave_1 added [ 86.397864][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.447524][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.473121][ T5836] team0: Port device team_slave_0 added [ 86.479858][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.487218][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.513325][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.533860][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.540877][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.567036][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.580370][ T5836] team0: Port device team_slave_1 added [ 86.587122][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.594076][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.620159][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.643050][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.650231][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.676628][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.708285][ T5839] team0: Port device team_slave_0 added [ 86.734197][ T5839] team0: Port device team_slave_1 added [ 86.767491][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.774871][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.808296][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.866646][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.873617][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.900261][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.911301][ T5844] Bluetooth: hci0: command tx timeout [ 86.918824][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.925775][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.952311][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.002477][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.011428][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.038956][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.057194][ T5155] Bluetooth: hci2: command tx timeout [ 87.057531][ T5835] Bluetooth: hci1: command tx timeout [ 87.068839][ T5844] Bluetooth: hci3: command tx timeout [ 87.078901][ T5832] hsr_slave_0: entered promiscuous mode [ 87.085740][ T5832] hsr_slave_1: entered promiscuous mode [ 87.101177][ T5843] hsr_slave_0: entered promiscuous mode [ 87.107465][ T5843] hsr_slave_1: entered promiscuous mode [ 87.113527][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 87.119474][ T5843] Cannot create hsr debugfs directory [ 87.193979][ T5836] hsr_slave_0: entered promiscuous mode [ 87.200315][ T5836] hsr_slave_1: entered promiscuous mode [ 87.206782][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 87.212533][ T5836] Cannot create hsr debugfs directory [ 87.288241][ T5839] hsr_slave_0: entered promiscuous mode [ 87.294501][ T5839] hsr_slave_1: entered promiscuous mode [ 87.300905][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 87.306887][ T5839] Cannot create hsr debugfs directory [ 87.695134][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.712783][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.723082][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.741537][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.809761][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.823668][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.834571][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.852804][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.913578][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.928786][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.947647][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.959199][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.040506][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.059013][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.070592][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.086621][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.130367][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.210276][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.241862][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.249117][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.274018][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.281151][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.300863][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.347063][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.375044][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.382264][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.412419][ T4791] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.419633][ T4791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.448134][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.469243][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.521427][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.541656][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.548841][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.585068][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.607253][ T4791] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.614433][ T4791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.643023][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.668597][ T4791] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.675779][ T4791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.713579][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.720776][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.860230][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.977418][ T5835] Bluetooth: hci0: command tx timeout [ 89.018278][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.042193][ T5843] veth0_vlan: entered promiscuous mode [ 89.088889][ T5843] veth1_vlan: entered promiscuous mode [ 89.137191][ T5844] Bluetooth: hci1: command tx timeout [ 89.138186][ T5155] Bluetooth: hci3: command tx timeout [ 89.142663][ T5835] Bluetooth: hci2: command tx timeout [ 89.198197][ T5839] veth0_vlan: entered promiscuous mode [ 89.209628][ T5843] veth0_macvtap: entered promiscuous mode [ 89.233484][ T5843] veth1_macvtap: entered promiscuous mode [ 89.243832][ T5839] veth1_vlan: entered promiscuous mode [ 89.283921][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.310921][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.335725][ T3775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.353864][ T3775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.368099][ T3775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.380551][ T3775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.396830][ T5839] veth0_macvtap: entered promiscuous mode [ 89.434457][ T5839] veth1_macvtap: entered promiscuous mode [ 89.473024][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.512930][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.544882][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.554613][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.581024][ T3555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.594644][ T3555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.603065][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.614523][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.640562][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.649854][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.693268][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.702966][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.779856][ T5836] veth0_vlan: entered promiscuous mode [ 89.799084][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.837492][ T5832] veth0_vlan: entered promiscuous mode [ 89.846536][ T5836] veth1_vlan: entered promiscuous mode [ 89.853636][ T4791] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.877837][ T4791] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.948631][ T5832] veth1_vlan: entered promiscuous mode [ 89.972759][ T4791] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.991289][ T4791] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.043017][ T5836] veth0_macvtap: entered promiscuous mode [ 90.089398][ T5836] veth1_macvtap: entered promiscuous mode [ 90.147730][ T5832] veth0_macvtap: entered promiscuous mode [ 90.193763][ T5832] veth1_macvtap: entered promiscuous mode [ 90.223987][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.246972][ T5928] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.259394][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.288672][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.357008][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.429487][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 90.452652][ T3775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.484547][ T3775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.494535][ T3775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.630448][ T3775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.672010][ T3775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.702180][ T3775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.856238][ T3775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.911264][ T3775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.036187][ T3775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.056230][ T5835] Bluetooth: hci0: command tx timeout [ 91.068058][ T3775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.123665][ T3697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.141174][ T3697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.216483][ T5835] Bluetooth: hci2: command tx timeout [ 91.216719][ T5155] Bluetooth: hci3: command tx timeout [ 91.221945][ T5844] Bluetooth: hci1: command tx timeout [ 91.279770][ T3775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.316171][ T3775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.348250][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.384105][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.869730][ T9] cfg80211: failed to load regulatory.db [ 92.370489][ T5953] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.571206][ T5958] netlink: 330 bytes leftover after parsing attributes in process `syz.0.8'. [ 92.761324][ T5958] Zero length message leads to an empty skb [ 92.808249][ T5957] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 92.845114][ T5957] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 92.856383][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.032781][ T5957] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 93.039355][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.048298][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 93.104847][ T5957] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 93.145393][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.152618][ T5957] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 93.183255][ T5957] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 93.209935][ T5957] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 93.227934][ T5957] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 93.247420][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 93.306676][ T5835] Bluetooth: hci3: command tx timeout [ 93.590831][ T5957] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 93.868982][ T5957] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 93.906393][ T5957] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 93.986684][ T5957] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 94.056625][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.208070][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.216871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.335155][ T5982] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 94.409806][ T5982] process 'syz.1.13' launched '/dev/fd/5' with NULL argv: empty string added [ 94.826146][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 95.150531][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 95.307983][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 95.640156][ T6001] FAULT_INJECTION: forcing a failure. [ 95.640156][ T6001] name failslab, interval 1, probability 0, space 0, times 1 [ 95.652915][ T6001] CPU: 1 UID: 0 PID: 6001 Comm: syz.2.18 Not tainted syzkaller #0 PREEMPT(full) [ 95.652947][ T6001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 95.652974][ T6001] Call Trace: [ 95.652983][ T6001] [ 95.652992][ T6001] dump_stack_lvl+0x16c/0x1f0 [ 95.653023][ T6001] should_fail_ex+0x512/0x640 [ 95.653049][ T6001] ? __kmalloc_cache_noprof+0x5f/0x800 [ 95.653084][ T6001] should_failslab+0xc2/0x120 [ 95.653111][ T6001] __kmalloc_cache_noprof+0x72/0x800 [ 95.653142][ T6001] ? sctp_auth_shkey_create+0x9e/0x210 [ 95.653187][ T6001] ? sctp_auth_shkey_create+0x9e/0x210 [ 95.653223][ T6001] sctp_auth_shkey_create+0x9e/0x210 [ 95.653264][ T6001] sctp_endpoint_new+0x589/0xb20 [ 95.653291][ T6001] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 95.653317][ T6001] ? lockdep_init_map_type+0x5c/0x270 [ 95.653347][ T6001] ? lockdep_init_map_type+0x5c/0x270 [ 95.653381][ T6001] sctp_init_sock+0xe2b/0x12f0 [ 95.653418][ T6001] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 95.653457][ T6001] sctp_v6_init_sock+0x16/0x70 [ 95.653492][ T6001] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 95.653528][ T6001] inet6_create+0xb30/0x12b0 [ 95.653568][ T6001] ? inet6_create+0x7f/0x12b0 [ 95.653606][ T6001] __sock_create+0x339/0x8a0 [ 95.653644][ T6001] __sys_socket+0x153/0x2d0 [ 95.653666][ T6001] ? __pfx___sys_socket+0x10/0x10 [ 95.653687][ T6001] ? xfd_validate_state+0x61/0x180 [ 95.653731][ T6001] __x64_sys_socket+0x72/0xb0 [ 95.653752][ T6001] ? lockdep_hardirqs_on+0x7c/0x110 [ 95.653777][ T6001] do_syscall_64+0xcd/0xf80 [ 95.653805][ T6001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.653829][ T6001] RIP: 0033:0x7f8f3038f7c9 [ 95.653857][ T6001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.653880][ T6001] RSP: 002b:00007f8f3125d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 95.653902][ T6001] RAX: ffffffffffffffda RBX: 00007f8f305e5fa0 RCX: 00007f8f3038f7c9 [ 95.653919][ T6001] RDX: 0000000000000084 RSI: 0000000000000801 RDI: 000000000000000a [ 95.653934][ T6001] RBP: 00007f8f30413f91 R08: 0000000000000000 R09: 0000000000000000 [ 95.653947][ T6001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.653968][ T6001] R13: 00007f8f305e6038 R14: 00007f8f305e5fa0 R15: 00007fff28cecbe8 [ 95.654004][ T6001] [ 95.936956][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 96.216684][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 96.276288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.908163][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 96.975747][ T6023] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 97.216330][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 97.397539][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 97.453855][ T6027] sd 0:0:1:0: PR command failed: 1026 [ 97.470318][ T6027] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 97.526295][ T6027] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 98.017405][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 98.976275][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.296223][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 99.456384][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 99.521613][ T6050] FAULT_INJECTION: forcing a failure. [ 99.521613][ T6050] name fail_futex, interval 1, probability 0, space 0, times 1 [ 99.566839][ T6050] CPU: 0 UID: 0 PID: 6050 Comm: syz.0.28 Not tainted syzkaller #0 PREEMPT(full) [ 99.566859][ T6050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.566868][ T6050] Call Trace: [ 99.566872][ T6050] [ 99.566878][ T6050] dump_stack_lvl+0x16c/0x1f0 [ 99.566896][ T6050] should_fail_ex+0x512/0x640 [ 99.566913][ T6050] get_futex_key+0x1085/0x15f0 [ 99.566933][ T6050] ? __pfx_get_futex_key+0x10/0x10 [ 99.566949][ T6050] ? __pfx___might_resched+0x10/0x10 [ 99.566973][ T6050] futex_wake+0xea/0x530 [ 99.566994][ T6050] ? __pfx_futex_wake+0x10/0x10 [ 99.567021][ T6050] do_futex+0x1e3/0x350 [ 99.567037][ T6050] ? __pfx_do_futex+0x10/0x10 [ 99.567052][ T6050] ? __might_fault+0xe3/0x190 [ 99.567073][ T6050] mm_release+0x24e/0x300 [ 99.567093][ T6050] do_exit+0x69e/0x2bd0 [ 99.567105][ T6050] ? __pfx___might_resched+0x10/0x10 [ 99.567127][ T6050] ? __pfx_do_exit+0x10/0x10 [ 99.567140][ T6050] ? do_raw_spin_lock+0x12c/0x2b0 [ 99.567156][ T6050] ? find_held_lock+0x2b/0x80 [ 99.567178][ T6050] do_group_exit+0xd3/0x2a0 [ 99.567193][ T6050] get_signal+0x2671/0x26d0 [ 99.567216][ T6050] ? task_work_add+0x1ee/0x380 [ 99.567232][ T6050] ? __pfx_get_signal+0x10/0x10 [ 99.567255][ T6050] arch_do_signal_or_restart+0x8f/0x7a0 [ 99.567273][ T6050] ? __pfx___fput_deferred+0x10/0x10 [ 99.567290][ T6050] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 99.567311][ T6050] ? fput+0xcf/0xf0 [ 99.567325][ T6050] ? do_readv+0x238/0x340 [ 99.567347][ T6050] exit_to_user_mode_loop+0x8c/0x540 [ 99.567368][ T6050] do_syscall_64+0x4ee/0xf80 [ 99.567382][ T6050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.567396][ T6050] RIP: 0033:0x7fab76b8f7c9 [ 99.567407][ T6050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.567419][ T6050] RSP: 002b:00007fab77b11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 99.567433][ T6050] RAX: fffffffffffffe00 RBX: 00007fab76de5fa0 RCX: 00007fab76b8f7c9 [ 99.567441][ T6050] RDX: 0000000000000009 RSI: 0000200000003080 RDI: 0000000000000003 [ 99.567449][ T6050] RBP: 00007fab76c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 99.567457][ T6050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.567465][ T6050] R13: 00007fab76de6038 R14: 00007fab76de5fa0 R15: 00007ffc4aa2cb18 [ 99.567483][ T6050] [ 100.096279][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 100.264412][ T6074] can0: slcan on ptm0. [ 100.783748][ T6071] can0 (unregistered): slcan off ptm0. [ 101.597223][ T6112] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 102.185332][ T6130] sd 0:0:1:0: PR command failed: 1026 [ 102.191318][ T6130] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 102.201041][ T6130] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 104.867555][ T6187] netlink: 28 bytes leftover after parsing attributes in process `syz.0.53'. [ 104.899073][ T6187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.236327][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.205294][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.65'. [ 112.147043][ T6330] netlink: 338 bytes leftover after parsing attributes in process `syz.1.84'. [ 113.166581][ T6341] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 113.174439][ T6341] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 113.181111][ T6341] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 113.193906][ T6341] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 113.202015][ T6346] FAULT_INJECTION: forcing a failure. [ 113.202015][ T6346] name failslab, interval 1, probability 0, space 0, times 0 [ 113.229265][ T6346] CPU: 1 UID: 0 PID: 6346 Comm: syz.3.87 Not tainted syzkaller #0 PREEMPT(full) [ 113.229297][ T6346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 113.229311][ T6346] Call Trace: [ 113.229319][ T6346] [ 113.229328][ T6346] dump_stack_lvl+0x16c/0x1f0 [ 113.229358][ T6346] should_fail_ex+0x512/0x640 [ 113.229384][ T6346] ? fs_reclaim_acquire+0xae/0x150 [ 113.229412][ T6346] should_failslab+0xc2/0x120 [ 113.229437][ T6346] kmem_cache_alloc_noprof+0x75/0x760 [ 113.229469][ T6346] ? __pfx_map_id_range_down+0x10/0x10 [ 113.229506][ T6346] ? security_inode_alloc+0x3b/0x2b0 [ 113.229550][ T6346] ? security_inode_alloc+0x3b/0x2b0 [ 113.229584][ T6346] security_inode_alloc+0x3b/0x2b0 [ 113.229623][ T6346] inode_init_always_gfp+0xced/0x1040 [ 113.229650][ T6346] alloc_inode+0x86/0x240 [ 113.229681][ T6346] new_inode+0x22/0x1c0 [ 113.229715][ T6346] debugfs_create_symlink+0xd3/0x320 [ 113.229744][ T6346] ref_tracker_dir_symlink+0x255/0x360 [ 113.229773][ T6346] ? __pfx_ref_tracker_dir_symlink+0x10/0x10 [ 113.229804][ T6346] ? __lock_acquire+0x433/0x22f0 [ 113.229857][ T6346] ? __lock_acquire+0x433/0x22f0 [ 113.229883][ T6346] ? crng_make_state+0x48e/0x6c0 [ 113.229933][ T6346] ? __pfx_net_ns_net_init+0x10/0x10 [ 113.229967][ T6346] net_ns_net_init+0xd2/0x120 [ 113.230000][ T6346] ops_init+0x1e2/0x5f0 [ 113.230038][ T6346] setup_net+0x11d/0x3a0 [ 113.230070][ T6346] ? __pfx_setup_net+0x10/0x10 [ 113.230099][ T6346] ? lockdep_init_map_type+0x5c/0x270 [ 113.230128][ T6346] ? mutex_init_lockep+0x110/0x150 [ 113.230162][ T6346] copy_net_ns+0x351/0x5d0 [ 113.230208][ T6346] create_new_namespaces+0x3ea/0xab0 [ 113.230254][ T6346] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 113.230290][ T6346] ksys_unshare+0x45b/0xa40 [ 113.230315][ T6346] ? __pfx_ksys_unshare+0x10/0x10 [ 113.230340][ T6346] ? xfd_validate_state+0x61/0x180 [ 113.230387][ T6346] __x64_sys_unshare+0x31/0x40 [ 113.230410][ T6346] do_syscall_64+0xcd/0xf80 [ 113.230438][ T6346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.230465][ T6346] RIP: 0033:0x7fd988d8f7c9 [ 113.230484][ T6346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.230503][ T6346] RSP: 002b:00007fd986ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 113.230521][ T6346] RAX: ffffffffffffffda RBX: 00007fd988fe5fa0 RCX: 00007fd988d8f7c9 [ 113.230534][ T6346] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 113.230549][ T6346] RBP: 00007fd988e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 113.230564][ T6346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.230579][ T6346] R13: 00007fd988fe6038 R14: 00007fd988fe5fa0 R15: 00007fffbd639648 [ 113.230616][ T6346] [ 113.230757][ T6346] debugfs: out of free dentries, can not create symlink 'netns-34-4026533803-notrefcnt' [ 115.217919][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.217950][ T5155] Bluetooth: hci1: command 0x0c1a tx timeout [ 115.223997][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.236169][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.583189][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.100'. [ 119.049827][ T6432] syz.3.105 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 119.581884][ T6448] mmap: syz.0.109 (6448) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 119.635332][ T6448] netlink: 28 bytes leftover after parsing attributes in process `syz.0.109'. [ 119.656124][ T6448] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.704932][ T6448] bridge_slave_1 (unregistering): left allmulticast mode [ 119.748740][ T6448] bridge_slave_1 (unregistering): left promiscuous mode [ 119.772413][ T6448] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.110197][ T6490] netlink: 28 bytes leftover after parsing attributes in process `syz.1.118'. [ 123.348913][ T6510] vhci_hcd: invalid port number 16 [ 125.023197][ T6525] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.338094][ T6545] usb usb3: usbfs: process 6545 (syz.1.131) did not claim interface 2 before use [ 126.500261][ T6551] netlink: 342 bytes leftover after parsing attributes in process `syz.0.133'. [ 126.517818][ T6551] netlink: 342 bytes leftover after parsing attributes in process `syz.0.133'. [ 126.599789][ T6551] netlink: 342 bytes leftover after parsing attributes in process `syz.0.133'. [ 129.765091][ T6582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.135'. [ 131.738784][ T6634] random: crng reseeded on system resumption [ 132.397388][ T6649] netlink: 'syz.0.152': attribute type 11 has an invalid length. [ 132.524187][ T6651] FAULT_INJECTION: forcing a failure. [ 132.524187][ T6651] name failslab, interval 1, probability 0, space 0, times 0 [ 132.582626][ T6651] CPU: 1 UID: 0 PID: 6651 Comm: syz.0.152 Not tainted syzkaller #0 PREEMPT(full) [ 132.582657][ T6651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 132.582665][ T6651] Call Trace: [ 132.582671][ T6651] [ 132.582676][ T6651] dump_stack_lvl+0x16c/0x1f0 [ 132.582695][ T6651] should_fail_ex+0x512/0x640 [ 132.582710][ T6651] ? __kmalloc_cache_noprof+0x5f/0x800 [ 132.582730][ T6651] should_failslab+0xc2/0x120 [ 132.582745][ T6651] __kmalloc_cache_noprof+0x72/0x800 [ 132.582762][ T6651] ? kvm_set_irq_routing+0x24f/0x970 [ 132.582779][ T6651] ? kvm_set_irq_routing+0x24f/0x970 [ 132.582791][ T6651] kvm_set_irq_routing+0x24f/0x970 [ 132.582808][ T6651] kvm_arch_vm_ioctl+0x934/0x18b0 [ 132.582827][ T6651] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 132.582849][ T6651] ? __lock_acquire+0x433/0x22f0 [ 132.582865][ T6651] ? __lock_acquire+0x433/0x22f0 [ 132.582884][ T6651] ? __lock_acquire+0x433/0x22f0 [ 132.582902][ T6651] ? __lock_acquire+0x433/0x22f0 [ 132.582930][ T6651] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 132.582944][ T6651] ? is_bpf_text_address+0x94/0x1a0 [ 132.582963][ T6651] ? kernel_text_address+0x8d/0x100 [ 132.582979][ T6651] ? __kernel_text_address+0xd/0x40 [ 132.582994][ T6651] ? unwind_get_return_address+0x59/0xa0 [ 132.583010][ T6651] ? arch_stack_walk+0xa6/0x100 [ 132.583032][ T6651] ? stack_trace_save+0x8e/0xc0 [ 132.583046][ T6651] ? __pfx_stack_trace_save+0x10/0x10 [ 132.583058][ T6651] ? kasan_save_track+0x14/0x30 [ 132.583078][ T6651] ? stack_depot_save_flags+0x29/0x9b0 [ 132.583095][ T6651] ? kasan_save_stack+0x42/0x60 [ 132.583112][ T6651] ? kasan_save_stack+0x33/0x60 [ 132.583130][ T6651] ? kasan_save_track+0x14/0x30 [ 132.583147][ T6651] ? __kasan_save_free_info+0x3b/0x60 [ 132.583163][ T6651] ? __kasan_slab_free+0x5f/0x80 [ 132.583173][ T6651] ? kfree+0x2f8/0x6e0 [ 132.583186][ T6651] ? tomoyo_path_number_perm+0x470/0x580 [ 132.583199][ T6651] ? security_file_ioctl+0x9b/0x240 [ 132.583212][ T6651] ? __x64_sys_ioctl+0xb7/0x210 [ 132.583231][ T6651] kvm_vm_ioctl+0x1a91/0x3fa0 [ 132.583254][ T6651] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 132.583279][ T6651] ? kasan_quarantine_put+0x10a/0x240 [ 132.583297][ T6651] ? lockdep_hardirqs_on+0x7c/0x110 [ 132.583314][ T6651] ? find_held_lock+0x2b/0x80 [ 132.583332][ T6651] ? tomoyo_path_number_perm+0x295/0x580 [ 132.583348][ T6651] ? tomoyo_path_number_perm+0x18d/0x580 [ 132.583363][ T6651] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 132.583375][ T6651] ? futex_wake+0x1ad/0x530 [ 132.583404][ T6651] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 132.583427][ T6651] ? do_vfs_ioctl+0x128/0x14f0 [ 132.583445][ T6651] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 132.583478][ T6651] ? find_held_lock+0x2b/0x80 [ 132.583497][ T6651] ? hook_file_ioctl_common+0x144/0x410 [ 132.583516][ T6651] ? __fget_files+0x20e/0x3c0 [ 132.583532][ T6651] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 132.583548][ T6651] __x64_sys_ioctl+0x18e/0x210 [ 132.583566][ T6651] do_syscall_64+0xcd/0xf80 [ 132.583581][ T6651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.583594][ T6651] RIP: 0033:0x7fab76b8f7c9 [ 132.583606][ T6651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.583619][ T6651] RSP: 002b:00007fab77af0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 132.583633][ T6651] RAX: ffffffffffffffda RBX: 00007fab76de6090 RCX: 00007fab76b8f7c9 [ 132.583642][ T6651] RDX: 0010000000000402 RSI: 000000000000ae60 RDI: 0000000000000003 [ 132.583651][ T6651] RBP: 00007fab76c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 132.583659][ T6651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.583667][ T6651] R13: 00007fab76de6128 R14: 00007fab76de6090 R15: 00007ffc4aa2cb18 [ 132.583686][ T6651] [ 133.027230][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.033689][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.565176][ T6656] zswap: compressor not available [ 133.573267][ T6658] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 134.772445][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.154'. [ 139.474335][ T30] audit: type=1800 audit(1764877207.989:2): pid=6748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.171" name="dbroot" dev="configfs" ino=11650 res=0 errno=0 [ 140.786293][ T6785] netlink: 28 bytes leftover after parsing attributes in process `syz.1.177'. [ 141.193966][ T6783] nbd: socks must be embedded in a SOCK_ITEM attr [ 141.558864][ T6780] FAULT_INJECTION: forcing a failure. [ 141.558864][ T6780] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 141.643531][ T6780] CPU: 0 UID: 0 PID: 6780 Comm: syz.1.177 Not tainted syzkaller #0 PREEMPT(full) [ 141.643572][ T6780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 141.643587][ T6780] Call Trace: [ 141.643593][ T6780] [ 141.643598][ T6780] dump_stack_lvl+0x16c/0x1f0 [ 141.643619][ T6780] should_fail_ex+0x512/0x640 [ 141.643633][ T6780] ? page_copy_sane+0xcd/0x2d0 [ 141.643655][ T6780] copy_folio_from_iter_atomic+0x3ba/0x1a10 [ 141.643678][ T6780] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 141.643693][ T6780] ? fault_in_readable+0x179/0x1d0 [ 141.643712][ T6780] ? __pfx_fault_in_readable+0x10/0x10 [ 141.643730][ T6780] ? I_BDEV+0xd/0x20 [ 141.643746][ T6780] ? inode_to_bdi+0x9e/0x160 [ 141.643768][ T6780] iomap_file_buffered_write+0x530/0xab0 [ 141.643796][ T6780] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 141.643815][ T6780] ? __lock_acquire+0x433/0x22f0 [ 141.643831][ T6780] ? inode_set_ctime_current+0x29a/0x7f0 [ 141.643860][ T6780] ? __pfx_down_read+0x10/0x10 [ 141.643875][ T6780] ? mnt_put_write_access_file+0xc1/0xf0 [ 141.643888][ T6780] ? file_update_time_flags+0x35c/0x520 [ 141.643906][ T6780] blkdev_write_iter+0x575/0xe00 [ 141.643926][ T6780] vfs_write+0x7d3/0x11d0 [ 141.643949][ T6780] ? __pfx_blkdev_write_iter+0x10/0x10 [ 141.643981][ T6780] ? __pfx_vfs_write+0x10/0x10 [ 141.643993][ T6780] ? find_held_lock+0x2b/0x80 [ 141.644024][ T6780] ksys_write+0x12a/0x250 [ 141.644036][ T6780] ? __pfx_ksys_write+0x10/0x10 [ 141.644053][ T6780] do_syscall_64+0xcd/0xf80 [ 141.644068][ T6780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.644081][ T6780] RIP: 0033:0x7fb97018f7c9 [ 141.644093][ T6780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.644105][ T6780] RSP: 002b:00007fb970fcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 141.644117][ T6780] RAX: ffffffffffffffda RBX: 00007fb9703e5fa0 RCX: 00007fb97018f7c9 [ 141.644126][ T6780] RDX: 0000000080000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 141.644134][ T6780] RBP: 00007fb970213f91 R08: 0000000000000000 R09: 0000000000000000 [ 141.644141][ T6780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.644149][ T6780] R13: 00007fb9703e6038 R14: 00007fb9703e5fa0 R15: 00007ffda346a308 [ 141.644169][ T6780] [ 142.125216][ T6799] FAULT_INJECTION: forcing a failure. [ 142.125216][ T6799] name failslab, interval 1, probability 0, space 0, times 0 [ 142.224868][ T6799] CPU: 1 UID: 0 PID: 6799 Comm: syz.0.179 Not tainted syzkaller #0 PREEMPT(full) [ 142.224900][ T6799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 142.224913][ T6799] Call Trace: [ 142.224921][ T6799] [ 142.224931][ T6799] dump_stack_lvl+0x16c/0x1f0 [ 142.224961][ T6799] should_fail_ex+0x512/0x640 [ 142.224984][ T6799] ? __kmalloc_cache_noprof+0x5f/0x800 [ 142.225019][ T6799] should_failslab+0xc2/0x120 [ 142.225045][ T6799] __kmalloc_cache_noprof+0x72/0x800 [ 142.225078][ T6799] ? kvm_init_irq_routing+0x43/0xf0 [ 142.225108][ T6799] ? kvm_init_irq_routing+0x43/0xf0 [ 142.225130][ T6799] kvm_init_irq_routing+0x43/0xf0 [ 142.225154][ T6799] kvm_dev_ioctl+0x7ca/0x1a80 [ 142.225196][ T6799] ? find_held_lock+0x2b/0x80 [ 142.225243][ T6799] ? hook_file_ioctl_common+0x144/0x410 [ 142.225271][ T6799] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 142.225306][ T6799] ? __fget_files+0x20e/0x3c0 [ 142.225334][ T6799] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 142.225366][ T6799] __x64_sys_ioctl+0x18e/0x210 [ 142.225403][ T6799] do_syscall_64+0xcd/0xf80 [ 142.225431][ T6799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.225456][ T6799] RIP: 0033:0x7fab76b8f7c9 [ 142.225475][ T6799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.225497][ T6799] RSP: 002b:00007fab77aae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.225521][ T6799] RAX: ffffffffffffffda RBX: 00007fab76de6270 RCX: 00007fab76b8f7c9 [ 142.225535][ T6799] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 142.225547][ T6799] RBP: 00007fab76c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 142.225561][ T6799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.225573][ T6799] R13: 00007fab76de6308 R14: 00007fab76de6270 R15: 00007ffc4aa2cb18 [ 142.225604][ T6799] [ 142.290022][ T6802] netlink: 338 bytes leftover after parsing attributes in process `syz.1.181'. [ 142.469226][ T30] audit: type=1400 audit(1764877210.959:3): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=6801 comm="syz.1.181" [ 143.916425][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.183'. [ 145.383343][ T6856] bond0: invalid ARP target specified [ 146.206511][ T6875] random: crng reseeded on system resumption [ 146.812970][ T6883] sp0: Synchronizing with TNC [ 146.893057][ T6884] ptp ptp0: new virtual clock ptp1 [ 146.954063][ T6884] ptp ptp0: new virtual clock ptp2 [ 146.963134][ T6884] ptp ptp0: new virtual clock ptp3 [ 146.974108][ T6884] ptp ptp0: guarantee physical clock free running [ 147.087921][ T6887] FAULT_INJECTION: forcing a failure. [ 147.087921][ T6887] name failslab, interval 1, probability 0, space 0, times 0 [ 147.102779][ T6887] CPU: 1 UID: 0 PID: 6887 Comm: syz.2.195 Not tainted syzkaller #0 PREEMPT(full) [ 147.102813][ T6887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 147.102828][ T6887] Call Trace: [ 147.102837][ T6887] [ 147.102846][ T6887] dump_stack_lvl+0x16c/0x1f0 [ 147.102875][ T6887] should_fail_ex+0x512/0x640 [ 147.102899][ T6887] ? __kmalloc_cache_node_noprof+0x62/0x820 [ 147.102940][ T6887] should_failslab+0xc2/0x120 [ 147.102975][ T6887] __kmalloc_cache_node_noprof+0x75/0x820 [ 147.103012][ T6887] ? __alloc_workqueue+0x670/0x1810 [ 147.103042][ T6887] ? __alloc_workqueue+0x670/0x1810 [ 147.103062][ T6887] __alloc_workqueue+0x670/0x1810 [ 147.103094][ T6887] alloc_workqueue_noprof+0xd2/0x200 [ 147.103116][ T6887] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 147.103158][ T6887] nci_register_device+0x394/0xb80 [ 147.103194][ T6887] ? __pfx_nci_register_device+0x10/0x10 [ 147.103231][ T6887] ? lockdep_init_map_type+0x5c/0x270 [ 147.103266][ T6887] virtual_ncidev_open+0x141/0x220 [ 147.103296][ T6887] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 147.103324][ T6887] misc_open+0x26d/0x450 [ 147.103350][ T6887] ? __pfx_misc_open+0x10/0x10 [ 147.103375][ T6887] chrdev_open+0x234/0x6a0 [ 147.103403][ T6887] ? __pfx_chrdev_open+0x10/0x10 [ 147.103432][ T6887] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 147.103467][ T6887] do_dentry_open+0x748/0x1590 [ 147.103490][ T6887] ? __pfx_chrdev_open+0x10/0x10 [ 147.103525][ T6887] vfs_open+0x82/0x3f0 [ 147.103561][ T6887] path_openat+0x2078/0x3140 [ 147.103598][ T6887] ? __pfx_path_openat+0x10/0x10 [ 147.103636][ T6887] do_filp_open+0x20b/0x470 [ 147.103663][ T6887] ? __pfx_do_filp_open+0x10/0x10 [ 147.103720][ T6887] ? alloc_fd+0x471/0x7d0 [ 147.103755][ T6887] do_sys_openat2+0x11f/0x280 [ 147.103789][ T6887] ? __pfx_do_sys_openat2+0x10/0x10 [ 147.103824][ T6887] ? __fput+0x68d/0xb70 [ 147.103863][ T6887] __x64_sys_openat+0x174/0x210 [ 147.103895][ T6887] ? __pfx___x64_sys_openat+0x10/0x10 [ 147.103942][ T6887] do_syscall_64+0xcd/0xf80 [ 147.103977][ T6887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.104004][ T6887] RIP: 0033:0x7f8f3038f7c9 [ 147.104024][ T6887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.104047][ T6887] RSP: 002b:00007f8f3125d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 147.104070][ T6887] RAX: ffffffffffffffda RBX: 00007f8f305e5fa0 RCX: 00007f8f3038f7c9 [ 147.104086][ T6887] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 147.104102][ T6887] RBP: 00007f8f30413f91 R08: 0000000000000000 R09: 0000000000000000 [ 147.104118][ T6887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.104131][ T6887] R13: 00007f8f305e6038 R14: 00007f8f305e5fa0 R15: 00007fff28cecbe8 [ 147.104167][ T6887] [ 149.275000][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.201'. [ 149.559236][ T6934] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 149.887529][ T6938] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 150.629270][ T6951] FAULT_INJECTION: forcing a failure. [ 150.629270][ T6951] name failslab, interval 1, probability 0, space 0, times 0 [ 150.638739][ T6945] syz.2.205(6945): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 150.646310][ T6951] CPU: 0 UID: 0 PID: 6951 Comm: syz.3.208 Not tainted syzkaller #0 PREEMPT(full) [ 150.646344][ T6951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 150.646358][ T6951] Call Trace: [ 150.646366][ T6951] [ 150.646382][ T6951] dump_stack_lvl+0x16c/0x1f0 [ 150.646412][ T6951] should_fail_ex+0x512/0x640 [ 150.646436][ T6951] ? __kmalloc_cache_noprof+0x5f/0x800 [ 150.646471][ T6951] should_failslab+0xc2/0x120 [ 150.646497][ T6951] __kmalloc_cache_noprof+0x72/0x800 [ 150.646528][ T6951] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 150.646565][ T6951] ? sctp_endpoint_new+0xfc/0xb20 [ 150.646588][ T6951] ? __lock_acquire+0x433/0x22f0 [ 150.646616][ T6951] ? sctp_endpoint_new+0xfc/0xb20 [ 150.646638][ T6951] sctp_endpoint_new+0xfc/0xb20 [ 150.646665][ T6951] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 150.646692][ T6951] ? lockdep_init_map_type+0x5c/0x270 [ 150.646721][ T6951] ? lockdep_init_map_type+0x5c/0x270 [ 150.646755][ T6951] sctp_init_sock+0xe2b/0x12f0 [ 150.646791][ T6951] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 150.646828][ T6951] sctp_v6_init_sock+0x16/0x70 [ 150.646862][ T6951] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 150.646898][ T6951] inet6_create+0xb30/0x12b0 [ 150.646937][ T6951] ? inet6_create+0x7f/0x12b0 [ 150.646976][ T6951] __sock_create+0x339/0x8a0 [ 150.647019][ T6951] __sys_socket+0x153/0x2d0 [ 150.647041][ T6951] ? __pfx___sys_socket+0x10/0x10 [ 150.647062][ T6951] ? xfd_validate_state+0x61/0x180 [ 150.647107][ T6951] __x64_sys_socket+0x72/0xb0 [ 150.647127][ T6951] ? lockdep_hardirqs_on+0x7c/0x110 [ 150.647151][ T6951] do_syscall_64+0xcd/0xf80 [ 150.647177][ T6951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.647201][ T6951] RIP: 0033:0x7fd988d8f7c9 [ 150.647220][ T6951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.647242][ T6951] RSP: 002b:00007fd986ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 150.647264][ T6951] RAX: ffffffffffffffda RBX: 00007fd988fe5fa0 RCX: 00007fd988d8f7c9 [ 150.647281][ T6951] RDX: 0000000000000084 RSI: 0000000000000801 RDI: 000000000000000a [ 150.647295][ T6951] RBP: 00007fd988e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 150.647311][ T6951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.647325][ T6951] R13: 00007fd988fe6038 R14: 00007fd988fe5fa0 R15: 00007fffbd639648 [ 150.647360][ T6951] [ 152.092277][ T6977] FAULT_INJECTION: forcing a failure. [ 152.092277][ T6977] name failslab, interval 1, probability 0, space 0, times 0 [ 152.196177][ T6977] CPU: 0 UID: 0 PID: 6977 Comm: syz.0.213 Not tainted syzkaller #0 PREEMPT(full) [ 152.196210][ T6977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 152.196224][ T6977] Call Trace: [ 152.196233][ T6977] [ 152.196242][ T6977] dump_stack_lvl+0x16c/0x1f0 [ 152.196271][ T6977] should_fail_ex+0x512/0x640 [ 152.196286][ T6977] ? kmem_cache_alloc_noprof+0x62/0x760 [ 152.196310][ T6977] should_failslab+0xc2/0x120 [ 152.196333][ T6977] kmem_cache_alloc_noprof+0x75/0x760 [ 152.196362][ T6977] ? prepare_creds+0x2c/0x740 [ 152.196398][ T6977] ? prepare_creds+0x2c/0x740 [ 152.196418][ T6977] prepare_creds+0x2c/0x740 [ 152.196436][ T6977] __sys_setfsuid+0xda/0x350 [ 152.196459][ T6977] ? rcu_is_watching+0x12/0xc0 [ 152.196480][ T6977] do_syscall_64+0xcd/0xf80 [ 152.196495][ T6977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.196509][ T6977] RIP: 0033:0x7fab76b8f7c9 [ 152.196520][ T6977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.196532][ T6977] RSP: 002b:00007fab77b11038 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 152.196545][ T6977] RAX: ffffffffffffffda RBX: 00007fab76de5fa0 RCX: 00007fab76b8f7c9 [ 152.196554][ T6977] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 152.196562][ T6977] RBP: 00007fab76c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 152.196570][ T6977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.196578][ T6977] R13: 00007fab76de6038 R14: 00007fab76de5fa0 R15: 00007ffc4aa2cb18 [ 152.196596][ T6977] [ 152.364776][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.559371][ T6977] TCP: TCP_TX_DELAY enabled [ 153.123459][ T6986] Invalid ELF header magic: != ELF [ 153.308819][ T6985] usb usb36: usbfs: process 6985 (syz.1.216) did not claim interface 0 before use [ 153.443420][ T6997] Invalid ELF header magic: != ELF [ 154.580896][ T7030] FAULT_INJECTION: forcing a failure. [ 154.580896][ T7030] name failslab, interval 1, probability 0, space 0, times 0 [ 154.633868][ T7030] CPU: 1 UID: 0 PID: 7030 Comm: syz.2.224 Not tainted syzkaller #0 PREEMPT(full) [ 154.633890][ T7030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 154.633898][ T7030] Call Trace: [ 154.633912][ T7030] [ 154.633919][ T7030] dump_stack_lvl+0x16c/0x1f0 [ 154.633937][ T7030] should_fail_ex+0x512/0x640 [ 154.633953][ T7030] ? __kmalloc_noprof+0xca/0x8f0 [ 154.633971][ T7030] should_failslab+0xc2/0x120 [ 154.633987][ T7030] __kmalloc_noprof+0xdd/0x8f0 [ 154.634002][ T7030] ? iovec_from_user+0x108/0x140 [ 154.634018][ T7030] ? iovec_from_user+0x108/0x140 [ 154.634030][ T7030] iovec_from_user+0x108/0x140 [ 154.634044][ T7030] __import_iovec+0x88/0x650 [ 154.634056][ T7030] ? __pfx_try_to_wake_up+0x10/0x10 [ 154.634078][ T7030] import_iovec+0x86/0xb0 [ 154.634093][ T7030] vfs_readv+0x19a/0x8b0 [ 154.634114][ T7030] ? __lock_acquire+0x433/0x22f0 [ 154.634129][ T7030] ? __pfx_vfs_readv+0x10/0x10 [ 154.634147][ T7030] ? percpu_counter_add_batch+0xca/0x200 [ 154.634169][ T7030] ? errseq_sample+0x53/0x70 [ 154.634191][ T7030] ? __fget_files+0x20e/0x3c0 [ 154.634208][ T7030] ? do_readv+0x28c/0x340 [ 154.634224][ T7030] do_readv+0x28c/0x340 [ 154.634243][ T7030] ? __pfx_do_readv+0x10/0x10 [ 154.634266][ T7030] do_syscall_64+0xcd/0xf80 [ 154.634281][ T7030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.634295][ T7030] RIP: 0033:0x7f8f3038f7c9 [ 154.634307][ T7030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.634319][ T7030] RSP: 002b:00007f8f3125d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 154.634332][ T7030] RAX: ffffffffffffffda RBX: 00007f8f305e5fa0 RCX: 00007f8f3038f7c9 [ 154.634340][ T7030] RDX: 0000000000000009 RSI: 0000200000003080 RDI: 0000000000000003 [ 154.634348][ T7030] RBP: 00007f8f30413f91 R08: 0000000000000000 R09: 0000000000000000 [ 154.634356][ T7030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.634363][ T7030] R13: 00007f8f305e6038 R14: 00007f8f305e5fa0 R15: 00007fff28cecbe8 [ 154.634381][ T7030] [ 156.363738][ T7061] program syz.0.229 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.394731][ T7061] netlink: 28 bytes leftover after parsing attributes in process `syz.0.229'. [ 156.841046][ T7063] Invalid ELF header magic: != ELF [ 157.079297][ T5842] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 157.258205][ T7081] netlink: zone id is out of range [ 157.301494][ T7084] netlink: set zone limit has 8 unknown bytes [ 157.306875][ T7081] netlink: del zone limit has 4 unknown bytes [ 157.424762][ T7086] FAULT_INJECTION: forcing a failure. [ 157.424762][ T7086] name failslab, interval 1, probability 0, space 0, times 0 [ 157.448848][ T7086] CPU: 1 UID: 0 PID: 7086 Comm: syz.1.234 Not tainted syzkaller #0 PREEMPT(full) [ 157.448889][ T7086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.448903][ T7086] Call Trace: [ 157.448911][ T7086] [ 157.448922][ T7086] dump_stack_lvl+0x16c/0x1f0 [ 157.448954][ T7086] should_fail_ex+0x512/0x640 [ 157.448979][ T7086] ? fs_reclaim_acquire+0xae/0x150 [ 157.449008][ T7086] should_failslab+0xc2/0x120 [ 157.449033][ T7086] kmem_cache_alloc_noprof+0x75/0x760 [ 157.449064][ T7086] ? __pfx_map_id_range_down+0x10/0x10 [ 157.449097][ T7086] ? security_inode_alloc+0x3b/0x2b0 [ 157.449137][ T7086] ? security_inode_alloc+0x3b/0x2b0 [ 157.449171][ T7086] security_inode_alloc+0x3b/0x2b0 [ 157.449207][ T7086] inode_init_always_gfp+0xced/0x1040 [ 157.449237][ T7086] alloc_inode+0x86/0x240 [ 157.449267][ T7086] new_inode+0x22/0x1c0 [ 157.449299][ T7086] __debugfs_create_file+0x11c/0x6b0 [ 157.449329][ T7086] debugfs_create_file_full+0x41/0x60 [ 157.449358][ T7086] ref_tracker_dir_debugfs+0x19d/0x290 [ 157.449386][ T7086] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 157.449446][ T7086] ? lockdep_init_map_type+0x5c/0x270 [ 157.449479][ T7086] preinit_net.part.0+0x24e/0x8f0 [ 157.449513][ T7086] copy_net_ns+0x405/0x5d0 [ 157.449551][ T7086] create_new_namespaces+0x3ea/0xab0 [ 157.449596][ T7086] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 157.449634][ T7086] ksys_unshare+0x45b/0xa40 [ 157.449658][ T7086] ? __pfx_ksys_unshare+0x10/0x10 [ 157.449683][ T7086] ? xfd_validate_state+0x61/0x180 [ 157.449732][ T7086] __x64_sys_unshare+0x31/0x40 [ 157.449755][ T7086] do_syscall_64+0xcd/0xf80 [ 157.449783][ T7086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.449808][ T7086] RIP: 0033:0x7fb97018f7c9 [ 157.449830][ T7086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.449852][ T7086] RSP: 002b:00007fb970fcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 157.449884][ T7086] RAX: ffffffffffffffda RBX: 00007fb9703e5fa0 RCX: 00007fb97018f7c9 [ 157.449901][ T7086] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 157.449916][ T7086] RBP: 00007fb970213f91 R08: 0000000000000000 R09: 0000000000000000 [ 157.449932][ T7086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.449947][ T7086] R13: 00007fb9703e6038 R14: 00007fb9703e5fa0 R15: 00007ffda346a308 [ 157.449984][ T7086] [ 157.450024][ T7086] debugfs: out of free dentries, can not create file 'net_refcnt@ffff88802fd98218' [ 159.144415][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 159.361786][ T7121] FAULT_INJECTION: forcing a failure. [ 159.361786][ T7121] name failslab, interval 1, probability 0, space 0, times 0 [ 159.447103][ T7121] CPU: 1 UID: 0 PID: 7121 Comm: syz.3.242 Not tainted syzkaller #0 PREEMPT(full) [ 159.447138][ T7121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 159.447153][ T7121] Call Trace: [ 159.447162][ T7121] [ 159.447172][ T7121] dump_stack_lvl+0x16c/0x1f0 [ 159.447203][ T7121] should_fail_ex+0x512/0x640 [ 159.447228][ T7121] ? __kmalloc_node_noprof+0xcd/0x920 [ 159.447269][ T7121] should_failslab+0xc2/0x120 [ 159.447296][ T7121] __kmalloc_node_noprof+0xe0/0x920 [ 159.447331][ T7121] ? load_msg+0x43/0x4a0 [ 159.447366][ T7121] ? load_msg+0x43/0x4a0 [ 159.447392][ T7121] load_msg+0x43/0x4a0 [ 159.447421][ T7121] ? __pfx___sys_sendto+0x10/0x10 [ 159.447452][ T7121] do_msgrcv+0x202/0x16c0 [ 159.447494][ T7121] ? do_futex+0x122/0x350 [ 159.447526][ T7121] ? __pfx_do_msg_fill+0x10/0x10 [ 159.447564][ T7121] ? __pfx_do_msgrcv+0x10/0x10 [ 159.447589][ T7121] ? __x64_sys_futex+0x1e0/0x4c0 [ 159.447618][ T7121] ? __pfx___x64_sys_futex+0x10/0x10 [ 159.447644][ T7121] ? __pfx___do_sys_rseq+0x10/0x10 [ 159.447679][ T7121] ? do_syscall_64+0xcd/0xf80 [ 159.447700][ T7121] do_syscall_64+0xcd/0xf80 [ 159.447723][ T7121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.447749][ T7121] RIP: 0033:0x7fd988d8f7c9 [ 159.447767][ T7121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.447790][ T7121] RSP: 002b:00007fd986ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000046 [ 159.447812][ T7121] RAX: ffffffffffffffda RBX: 00007fd988fe5fa0 RCX: 00007fd988d8f7c9 [ 159.447827][ T7121] RDX: 0000002400000000 RSI: 0000000000000000 RDI: 00000000000000ff [ 159.447841][ T7121] RBP: 00007fd988e13f91 R08: 000000006bc2cc7d R09: 0000000000000000 [ 159.447856][ T7121] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 159.447868][ T7121] R13: 00007fd988fe6038 R14: 00007fd988fe5fa0 R15: 00007fffbd639648 [ 159.447902][ T7121] [ 159.875700][ T7136] FAULT_INJECTION: forcing a failure. [ 159.875700][ T7136] name failslab, interval 1, probability 0, space 0, times 0 [ 159.916164][ T7136] CPU: 1 UID: 0 PID: 7136 Comm: syz.3.246 Not tainted syzkaller #0 PREEMPT(full) [ 159.916196][ T7136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 159.916209][ T7136] Call Trace: [ 159.916218][ T7136] [ 159.916228][ T7136] dump_stack_lvl+0x16c/0x1f0 [ 159.916259][ T7136] should_fail_ex+0x512/0x640 [ 159.916283][ T7136] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 159.916315][ T7136] should_failslab+0xc2/0x120 [ 159.916349][ T7136] kmem_cache_alloc_noprof+0x75/0x760 [ 159.916383][ T7136] ? skb_clone+0x190/0x3f0 [ 159.916419][ T7136] ? skb_clone+0x190/0x3f0 [ 159.916448][ T7136] skb_clone+0x190/0x3f0 [ 159.916480][ T7136] netlink_deliver_tap+0xabd/0xd30 [ 159.916524][ T7136] netlink_unicast+0x71f/0x870 [ 159.916564][ T7136] ? __pfx_netlink_unicast+0x10/0x10 [ 159.916598][ T7136] ? genl_rcv_msg+0x4bb/0x800 [ 159.916638][ T7136] netlink_ack+0x696/0xb80 [ 159.916685][ T7136] netlink_rcv_skb+0x332/0x420 [ 159.916719][ T7136] ? __pfx_genl_rcv_msg+0x10/0x10 [ 159.916743][ T7136] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 159.916794][ T7136] ? netlink_deliver_tap+0x1ae/0xd30 [ 159.916827][ T7136] genl_rcv+0x28/0x40 [ 159.916844][ T7136] netlink_unicast+0x5aa/0x870 [ 159.916880][ T7136] ? __pfx_netlink_unicast+0x10/0x10 [ 159.916927][ T7136] netlink_sendmsg+0x8c8/0xdd0 [ 159.916968][ T7136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.917012][ T7136] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 159.917054][ T7136] ____sys_sendmsg+0xa5d/0xc30 [ 159.917093][ T7136] ? copy_msghdr_from_user+0x10a/0x160 [ 159.917124][ T7136] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.917171][ T7136] ? __pfx_futex_wake_mark+0x10/0x10 [ 159.917214][ T7136] ___sys_sendmsg+0x134/0x1d0 [ 159.917241][ T7136] ? find_held_lock+0x2b/0x80 [ 159.917278][ T7136] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.917306][ T7136] ? __lock_acquire+0x433/0x22f0 [ 159.917373][ T7136] __sys_sendmsg+0x16d/0x220 [ 159.917405][ T7136] ? __pfx___sys_sendmsg+0x10/0x10 [ 159.917433][ T7136] ? __x64_sys_futex+0x1e0/0x4c0 [ 159.917478][ T7136] ? fput+0x70/0xf0 [ 159.917513][ T7136] do_syscall_64+0xcd/0xf80 [ 159.917541][ T7136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.917566][ T7136] RIP: 0033:0x7fd988d8f7c9 [ 159.917587][ T7136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.917610][ T7136] RSP: 002b:00007fd986ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.917641][ T7136] RAX: ffffffffffffffda RBX: 00007fd988fe5fa0 RCX: 00007fd988d8f7c9 [ 159.917658][ T7136] RDX: 0000000000000000 RSI: 0000200000000cc0 RDI: 0000000000000007 [ 159.917673][ T7136] RBP: 00007fd988e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 159.917688][ T7136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.917703][ T7136] R13: 00007fd988fe6038 R14: 00007fd988fe5fa0 R15: 00007fffbd639648 [ 159.917742][ T7136] [ 160.333543][ T7139] FAULT_INJECTION: forcing a failure. [ 160.333543][ T7139] name failslab, interval 1, probability 0, space 0, times 0 [ 160.346925][ T7139] CPU: 0 UID: 0 PID: 7139 Comm: syz.1.247 Not tainted syzkaller #0 PREEMPT(full) [ 160.346958][ T7139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 160.346972][ T7139] Call Trace: [ 160.346980][ T7139] [ 160.346989][ T7139] dump_stack_lvl+0x16c/0x1f0 [ 160.347020][ T7139] should_fail_ex+0x512/0x640 [ 160.347045][ T7139] ? fs_reclaim_acquire+0xae/0x150 [ 160.347071][ T7139] should_failslab+0xc2/0x120 [ 160.347098][ T7139] kmem_cache_alloc_noprof+0x75/0x760 [ 160.347130][ T7139] ? __pfx_map_id_range_down+0x10/0x10 [ 160.347164][ T7139] ? security_inode_alloc+0x3b/0x2b0 [ 160.347203][ T7139] ? security_inode_alloc+0x3b/0x2b0 [ 160.347236][ T7139] security_inode_alloc+0x3b/0x2b0 [ 160.347274][ T7139] inode_init_always_gfp+0xced/0x1040 [ 160.347304][ T7139] alloc_inode+0x86/0x240 [ 160.347335][ T7139] new_inode+0x22/0x1c0 [ 160.347369][ T7139] shmem_get_inode+0x19a/0xfb0 [ 160.347406][ T7139] ? __vm_enough_memory+0x184/0x3f0 [ 160.347448][ T7139] __shmem_file_setup+0x279/0x330 [ 160.347480][ T7139] shmem_zero_setup+0x93/0x1a0 [ 160.347514][ T7139] __mmap_region+0x2076/0x2770 [ 160.347550][ T7139] ? __pfx___mmap_region+0x10/0x10 [ 160.347581][ T7139] ? kvm_sched_clock_read+0x11/0x20 [ 160.347604][ T7139] ? sched_clock+0x38/0x60 [ 160.347641][ T7139] ? lock_acquire+0x179/0x330 [ 160.347668][ T7139] ? find_held_lock+0x2b/0x80 [ 160.347705][ T7139] ? finish_task_switch.isra.0+0x207/0xbd0 [ 160.347737][ T7139] ? lockdep_hardirqs_on+0x7c/0x110 [ 160.347828][ T7139] ? rcu_is_watching+0x12/0xc0 [ 160.347871][ T7139] mmap_region+0x1ab/0x3f0 [ 160.347902][ T7139] ? __get_unmapped_area+0x267/0x440 [ 160.347940][ T7139] do_mmap+0xa3e/0x1210 [ 160.347983][ T7139] ? __pfx_do_mmap+0x10/0x10 [ 160.348019][ T7139] ? __pfx_down_write_killable+0x10/0x10 [ 160.348055][ T7139] vm_mmap_pgoff+0x29e/0x470 [ 160.348098][ T7139] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 160.348142][ T7139] ? __x64_sys_futex+0x1e0/0x4c0 [ 160.348170][ T7139] ? __x64_sys_futex+0x1e9/0x4c0 [ 160.348203][ T7139] ksys_mmap_pgoff+0x7d/0x5c0 [ 160.348234][ T7139] ? xfd_validate_state+0x61/0x180 [ 160.348276][ T7139] __x64_sys_mmap+0x125/0x190 [ 160.348304][ T7139] do_syscall_64+0xcd/0xf80 [ 160.348331][ T7139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.348355][ T7139] RIP: 0033:0x7fb97018f7c9 [ 160.348385][ T7139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.348409][ T7139] RSP: 002b:00007fb970fcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 160.348433][ T7139] RAX: ffffffffffffffda RBX: 00007fb9703e5fa0 RCX: 00007fb97018f7c9 [ 160.348449][ T7139] RDX: 00000000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 160.348464][ T7139] RBP: 00007fb970213f91 R08: 0000000000000401 R09: 0000000000008000 [ 160.348483][ T7139] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 160.348498][ T7139] R13: 00007fb9703e6038 R14: 00007fb9703e5fa0 R15: 00007ffda346a308 [ 160.348534][ T7139] [ 161.216209][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 163.119704][ T7171] FAULT_INJECTION: forcing a failure. [ 163.119704][ T7171] name failslab, interval 1, probability 0, space 0, times 0 [ 163.196387][ T7171] CPU: 1 UID: 0 PID: 7171 Comm: syz.2.253 Not tainted syzkaller #0 PREEMPT(full) [ 163.196422][ T7171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 163.196437][ T7171] Call Trace: [ 163.196445][ T7171] [ 163.196456][ T7171] dump_stack_lvl+0x16c/0x1f0 [ 163.196488][ T7171] should_fail_ex+0x512/0x640 [ 163.196513][ T7171] ? __kmalloc_node_noprof+0xcd/0x920 [ 163.196554][ T7171] should_failslab+0xc2/0x120 [ 163.196581][ T7171] __kmalloc_node_noprof+0xe0/0x920 [ 163.196616][ T7171] ? __rb_allocate_pages+0x4b7/0xeb0 [ 163.196654][ T7171] ? __rb_allocate_pages+0x4b7/0xeb0 [ 163.196683][ T7171] __rb_allocate_pages+0x4b7/0xeb0 [ 163.196727][ T7171] ring_buffer_resize+0x717/0x1f90 [ 163.196770][ T7171] ? __pfx_update_last_data+0x10/0x10 [ 163.196803][ T7171] __tracing_resize_ring_buffer.part.0+0x52/0x1f0 [ 163.196849][ T7171] tracing_update_buffers+0x12e/0x150 [ 163.196886][ T7171] event_pid_write.isra.0+0xf8/0x7f0 [ 163.196927][ T7171] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 163.196974][ T7171] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 163.197011][ T7171] vfs_write+0x2a0/0x11d0 [ 163.197037][ T7171] ? __pfx___mutex_lock+0x10/0x10 [ 163.197068][ T7171] ? __pfx_vfs_write+0x10/0x10 [ 163.197111][ T7171] ? __fget_files+0x20e/0x3c0 [ 163.197148][ T7171] ksys_write+0x12a/0x250 [ 163.197171][ T7171] ? __pfx_ksys_write+0x10/0x10 [ 163.197208][ T7171] do_syscall_64+0xcd/0xf80 [ 163.197237][ T7171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.197262][ T7171] RIP: 0033:0x7f8f3038f7c9 [ 163.197283][ T7171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.197305][ T7171] RSP: 002b:00007f8f3121b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 163.197329][ T7171] RAX: ffffffffffffffda RBX: 00007f8f305e6180 RCX: 00007f8f3038f7c9 [ 163.197346][ T7171] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 163.197362][ T7171] RBP: 00007f8f30413f91 R08: 0000000000000000 R09: 0000000000000000 [ 163.197377][ T7171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.197391][ T7171] R13: 00007f8f305e6218 R14: 00007f8f305e6180 R15: 00007fff28cecbe8 [ 163.197429][ T7171] [ 163.206304][ T30] audit: type=1806 audit(4294967301.380:4): xattr=CFE1D972E5990420196EE9E809 res=-22 [ 163.539805][ T7188] FAULT_INJECTION: forcing a failure. [ 163.539805][ T7188] name failslab, interval 1, probability 0, space 0, times 0 [ 163.589876][ T7188] CPU: 0 UID: 0 PID: 7188 Comm: syz.1.258 Not tainted syzkaller #0 PREEMPT(full) [ 163.589911][ T7188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 163.589926][ T7188] Call Trace: [ 163.589934][ T7188] [ 163.589943][ T7188] dump_stack_lvl+0x16c/0x1f0 [ 163.589972][ T7188] should_fail_ex+0x512/0x640 [ 163.589997][ T7188] ? kmem_cache_alloc_lru_noprof+0x66/0x760 [ 163.590045][ T7188] should_failslab+0xc2/0x120 [ 163.590071][ T7188] kmem_cache_alloc_lru_noprof+0x79/0x760 [ 163.590103][ T7188] ? shmem_alloc_inode+0x25/0x50 [ 163.590140][ T7188] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 163.590169][ T7188] ? shmem_alloc_inode+0x25/0x50 [ 163.590199][ T7188] shmem_alloc_inode+0x25/0x50 [ 163.590231][ T7188] alloc_inode+0x64/0x240 [ 163.590260][ T7188] new_inode+0x22/0x1c0 [ 163.590292][ T7188] shmem_get_inode+0x19a/0xfb0 [ 163.590316][ T7188] ? __vm_enough_memory+0x184/0x3f0 [ 163.590355][ T7188] __shmem_file_setup+0x279/0x330 [ 163.590385][ T7188] shmem_zero_setup+0x93/0x1a0 [ 163.590416][ T7188] __mmap_region+0x2076/0x2770 [ 163.590449][ T7188] ? __pfx___mmap_region+0x10/0x10 [ 163.590478][ T7188] ? kvm_sched_clock_read+0x11/0x20 [ 163.590499][ T7188] ? sched_clock+0x38/0x60 [ 163.590534][ T7188] ? lock_acquire+0x179/0x330 [ 163.590558][ T7188] ? find_held_lock+0x2b/0x80 [ 163.590597][ T7188] ? finish_task_switch.isra.0+0x207/0xbd0 [ 163.590630][ T7188] ? lockdep_hardirqs_on+0x7c/0x110 [ 163.590714][ T7188] ? rcu_is_watching+0x12/0xc0 [ 163.590755][ T7188] mmap_region+0x1ab/0x3f0 [ 163.590783][ T7188] ? __get_unmapped_area+0x267/0x440 [ 163.590819][ T7188] do_mmap+0xa3e/0x1210 [ 163.590858][ T7188] ? __pfx_do_mmap+0x10/0x10 [ 163.590891][ T7188] ? __pfx_down_write_killable+0x10/0x10 [ 163.590924][ T7188] vm_mmap_pgoff+0x29e/0x470 [ 163.590962][ T7188] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 163.591002][ T7188] ? __x64_sys_futex+0x1e0/0x4c0 [ 163.591036][ T7188] ? __x64_sys_futex+0x1e9/0x4c0 [ 163.591069][ T7188] ksys_mmap_pgoff+0x7d/0x5c0 [ 163.591102][ T7188] ? xfd_validate_state+0x61/0x180 [ 163.591142][ T7188] __x64_sys_mmap+0x125/0x190 [ 163.591167][ T7188] do_syscall_64+0xcd/0xf80 [ 163.591192][ T7188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.591215][ T7188] RIP: 0033:0x7fb97018f7c9 [ 163.591233][ T7188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.591253][ T7188] RSP: 002b:00007fb970fcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 163.591275][ T7188] RAX: ffffffffffffffda RBX: 00007fb9703e5fa0 RCX: 00007fb97018f7c9 [ 163.591291][ T7188] RDX: 00000000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 163.591306][ T7188] RBP: 00007fb970213f91 R08: 0000000000000401 R09: 0000000000008000 [ 163.591320][ T7188] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 163.591334][ T7188] R13: 00007fb9703e6038 R14: 00007fb9703e5fa0 R15: 00007ffda346a308 [ 163.591369][ T7188] [ 165.948783][ T7217] syz.3.263 uses obsolete (PF_INET,SOCK_PACKET) [ 165.951661][ T7217] FAULT_INJECTION: forcing a failure. [ 165.951661][ T7217] name failslab, interval 1, probability 0, space 0, times 0 [ 165.951731][ T7217] CPU: 0 UID: 0 PID: 7217 Comm: syz.3.263 Not tainted syzkaller #0 PREEMPT(full) [ 165.951762][ T7217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 165.951776][ T7217] Call Trace: [ 165.951784][ T7217] [ 165.951793][ T7217] dump_stack_lvl+0x16c/0x1f0 [ 165.951823][ T7217] should_fail_ex+0x512/0x640 [ 165.951848][ T7217] ? kmem_cache_alloc_noprof+0x62/0x760 [ 165.951885][ T7217] should_failslab+0xc2/0x120 [ 165.951911][ T7217] kmem_cache_alloc_noprof+0x75/0x760 [ 165.951942][ T7217] ? __kernfs_new_node+0xd2/0x8d0 [ 165.951983][ T7217] ? __kernfs_new_node+0xd2/0x8d0 [ 165.952029][ T7217] __kernfs_new_node+0xd2/0x8d0 [ 165.952069][ T7217] ? __pfx___kernfs_new_node+0x10/0x10 [ 165.952112][ T7217] ? find_held_lock+0x2b/0x80 [ 165.952149][ T7217] ? kernfs_root+0xee/0x2a0 [ 165.952189][ T7217] kernfs_new_node+0x13c/0x1e0 [ 165.952234][ T7217] __kernfs_create_file+0x53/0x350 [ 165.952263][ T7217] sysfs_add_file_mode_ns+0x207/0x3c0 [ 165.952304][ T7217] internal_create_group+0x578/0xf20 [ 165.952340][ T7217] ? __pfx_internal_create_group+0x10/0x10 [ 165.952361][ T7217] ? kernfs_create_link+0x1bd/0x240 [ 165.952378][ T7217] internal_create_groups+0x9d/0x150 [ 165.952398][ T7217] device_add+0x731/0x1950 [ 165.952413][ T7217] ? __pfx_device_add+0x10/0x10 [ 165.952426][ T7217] ? rcu_is_watching+0x12/0xc0 [ 165.952445][ T7217] ? lockdep_init_map_type+0x5c/0x270 [ 165.952464][ T7217] input_register_device+0x7e8/0x1180 [ 165.952481][ T7217] ? input_ff_create+0x256/0x350 [ 165.952496][ T7217] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 165.952518][ T7217] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 165.952539][ T7217] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 165.952558][ T7217] ? find_held_lock+0x2b/0x80 [ 165.952585][ T7217] ? __pfx_uinput_ioctl+0x10/0x10 [ 165.952599][ T7217] __x64_sys_ioctl+0x18e/0x210 [ 165.952618][ T7217] do_syscall_64+0xcd/0xf80 [ 165.952633][ T7217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.952646][ T7217] RIP: 0033:0x7fd988d8f7c9 [ 165.952659][ T7217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.952672][ T7217] RSP: 002b:00007fd986ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.952685][ T7217] RAX: ffffffffffffffda RBX: 00007fd988fe5fa0 RCX: 00007fd988d8f7c9 [ 165.952694][ T7217] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000009 [ 165.952702][ T7217] RBP: 00007fd988e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 165.952710][ T7217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.952718][ T7217] R13: 00007fd988fe6038 R14: 00007fd988fe5fa0 R15: 00007fffbd639648 [ 165.952737][ T7217] [ 167.860363][ T7251] binder: 7250:7251 unknown command 1969382756 [ 167.906407][ T7251] binder: 7250:7251 ioctl c0306201 0 returned -22 [ 168.535059][ T30] audit: type=1800 audit(4294967306.720:5): pid=7245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.270" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 171.918036][ T7301] netlink: 28 bytes leftover after parsing attributes in process `syz.2.282'. [ 172.171254][ T7301] bond0: (slave bond_slave_0): Releasing backup interface [ 173.606835][ T7333] FAULT_INJECTION: forcing a failure. [ 173.606835][ T7333] name failslab, interval 1, probability 0, space 0, times 0 [ 173.660422][ T7333] CPU: 0 UID: 0 PID: 7333 Comm: syz.0.290 Not tainted syzkaller #0 PREEMPT(full) [ 173.660458][ T7333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 173.660472][ T7333] Call Trace: [ 173.660481][ T7333] [ 173.660491][ T7333] dump_stack_lvl+0x16c/0x1f0 [ 173.660523][ T7333] should_fail_ex+0x512/0x640 [ 173.660549][ T7333] ? kmem_cache_alloc_node_noprof+0x65/0x7f0 [ 173.660588][ T7333] should_failslab+0xc2/0x120 [ 173.660615][ T7333] kmem_cache_alloc_node_noprof+0x78/0x7f0 [ 173.660648][ T7333] ? __alloc_skb+0x156/0x410 [ 173.660673][ T7333] ? __alloc_skb+0x35d/0x410 [ 173.660705][ T7333] ? __alloc_skb+0x156/0x410 [ 173.660727][ T7333] __alloc_skb+0x156/0x410 [ 173.660751][ T7333] ? __alloc_skb+0x35d/0x410 [ 173.660776][ T7333] ? __pfx___alloc_skb+0x10/0x10 [ 173.660804][ T7333] ? netlink_autobind.isra.0+0x158/0x370 [ 173.660851][ T7333] netlink_alloc_large_skb+0x69/0x140 [ 173.660890][ T7333] netlink_sendmsg+0x698/0xdd0 [ 173.660932][ T7333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.660972][ T7333] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 173.661016][ T7333] __sys_sendto+0x4a3/0x520 [ 173.661044][ T7333] ? __pfx___sys_sendto+0x10/0x10 [ 173.661082][ T7333] ? find_held_lock+0x2b/0x80 [ 173.661132][ T7333] ? exc_page_fault+0x64/0xc0 [ 173.661164][ T7333] __x64_sys_sendto+0xe0/0x1c0 [ 173.661191][ T7333] ? do_syscall_64+0x91/0xf80 [ 173.661214][ T7333] ? lockdep_hardirqs_on+0x7c/0x110 [ 173.661246][ T7333] do_syscall_64+0xcd/0xf80 [ 173.661274][ T7333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.661301][ T7333] RIP: 0033:0x7fab76b9165c [ 173.661321][ T7333] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 173.661344][ T7333] RSP: 002b:00007fab77b0fec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 173.661368][ T7333] RAX: ffffffffffffffda RBX: 00007fab77b0ffc0 RCX: 00007fab76b9165c [ 173.661385][ T7333] RDX: 0000000000000024 RSI: 00007fab77b10010 RDI: 0000000000000007 [ 173.661401][ T7333] RBP: 0000000000000000 R08: 00007fab77b0ff14 R09: 000000000000000c [ 173.661417][ T7333] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 173.661432][ T7333] R13: 00007fab77b0ff68 R14: 00007fab77b10010 R15: 0000000000000000 [ 173.661468][ T7333] [ 175.882384][ T7366] IPVS: length: 131 != 8 [ 175.932381][ T7366] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 176.384615][ T7368] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 176.780881][ T7374] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 176.836816][ T7374] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 176.936436][ T7374] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 176.956167][ T7374] page_type: f5(slab) [ 176.960326][ T7374] raw: 00fff00000000040 ffff8881404078c0 dead000000000122 0000000000000000 [ 176.978003][ T7374] raw: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 176.987242][ T7374] head: 00fff00000000040 ffff8881404078c0 dead000000000122 0000000000000000 [ 176.999368][ T7374] head: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 177.046550][ T7374] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 177.076170][ T7374] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 177.102079][ T7374] page dumped because: unmovable page [ 177.131035][ T7374] page_owner tracks the page as allocated [ 177.149049][ T7393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.300'. [ 177.176143][ T7374] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5215, tgid 5215 (udevadm), ts 35881486481, free_ts 29255332164 [ 177.231945][ T7374] post_alloc_hook+0x1af/0x220 [ 177.281930][ T7374] get_page_from_freelist+0xd0b/0x31a0 [ 177.287947][ T7374] __alloc_frozen_pages_noprof+0x25f/0x2440 [ 177.488078][ T7374] alloc_pages_mpol+0x1fb/0x550 [ 177.504351][ T7374] new_slab+0x2c3/0x430 [ 177.515855][ T7374] ___slab_alloc+0xe18/0x1c90 [ 177.561534][ T7374] __slab_alloc.constprop.0+0x63/0x110 [ 177.567083][ T7374] kmem_cache_alloc_lru_noprof+0x443/0x760 [ 177.616152][ T7374] alloc_inode+0xc3/0x240 [ 177.620611][ T7374] iget_locked+0x1d9/0x6d0 [ 177.625068][ T7374] kernfs_get_inode+0x46/0x470 [ 177.668365][ T7374] kernfs_iop_lookup+0x1a7/0x2d0 [ 177.698637][ T7374] __lookup_slow+0x251/0x460 [ 177.715081][ T7374] lookup_slow+0x50/0x70 [ 177.747067][ T7374] path_lookupat+0x5e9/0xc40 [ 177.769891][ T7374] filename_lookup+0x224/0x5f0 [ 177.774695][ T7374] page last free pid 1 tgid 1 stack trace: [ 177.844565][ T7374] __free_frozen_pages+0x7df/0x1160 [ 177.856952][ T7374] free_contig_range+0x183/0x4a0 [ 177.867349][ T7374] destroy_args+0xc30/0x12d0 [ 177.875556][ T7374] debug_vm_pgtable+0x1a2b/0x34c0 [ 177.911514][ T7374] do_one_initcall+0x123/0x680 [ 177.945877][ T7374] kernel_init_freeable+0x5c8/0x920 [ 177.952456][ T7374] kernel_init+0x1c/0x2b0 [ 177.961500][ T7374] ret_from_fork+0x983/0xb10 [ 177.971855][ T7374] ret_from_fork_asm+0x1a/0x30 [ 178.079365][ T7408] vhci_hcd: invalid port number 16 [ 178.437842][ T7416] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 178.460759][ T7416] FAULT_INJECTION: forcing a failure. [ 178.460759][ T7416] name fail_futex, interval 1, probability 0, space 0, times 0 [ 178.479478][ T7416] CPU: 0 UID: 0 PID: 7416 Comm: syz.3.305 Not tainted syzkaller #0 PREEMPT(full) [ 178.479515][ T7416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 178.479530][ T7416] Call Trace: [ 178.479538][ T7416] [ 178.479547][ T7416] dump_stack_lvl+0x16c/0x1f0 [ 178.479576][ T7416] should_fail_ex+0x512/0x640 [ 178.479607][ T7416] get_futex_key+0x1d0/0x15f0 [ 178.479638][ T7416] ? __pfx_get_futex_key+0x10/0x10 [ 178.479667][ T7416] ? rcu_is_watching+0x12/0xc0 [ 178.479710][ T7416] futex_wait_setup+0x9d/0x570 [ 178.479755][ T7416] __futex_wait+0x193/0x2f0 [ 178.479792][ T7416] ? __pfx___futex_wait+0x10/0x10 [ 178.479826][ T7416] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 178.479863][ T7416] ? lockdep_hardirqs_on+0x7c/0x110 [ 178.479891][ T7416] ? __pfx_futex_wake_mark+0x10/0x10 [ 178.479931][ T7416] ? find_held_lock+0x2b/0x80 [ 178.479967][ T7416] ? futex_private_hash_put+0x160/0x1b0 [ 178.479996][ T7416] futex_wait+0xe8/0x380 [ 178.480027][ T7416] ? __pfx_futex_wait+0x10/0x10 [ 178.480065][ T7416] ? putname+0xf5/0x1a0 [ 178.480095][ T7416] do_futex+0x229/0x350 [ 178.480123][ T7416] ? __pfx_do_futex+0x10/0x10 [ 178.480167][ T7416] __x64_sys_futex+0x1e0/0x4c0 [ 178.480204][ T7416] ? __x64_sys_openat+0x174/0x210 [ 178.480236][ T7416] ? __pfx___x64_sys_futex+0x10/0x10 [ 178.480266][ T7416] ? xfd_validate_state+0x61/0x180 [ 178.480315][ T7416] do_syscall_64+0xcd/0xf80 [ 178.480342][ T7416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.480363][ T7416] RIP: 0033:0x7fd988d8f7c9 [ 178.480382][ T7416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.480404][ T7416] RSP: 002b:00007fd986ff60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 178.480419][ T7416] RAX: ffffffffffffffda RBX: 00007fd988fe5fa8 RCX: 00007fd988d8f7c9 [ 178.480428][ T7416] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd988fe5fa8 [ 178.480437][ T7416] RBP: 00007fd988fe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 178.480445][ T7416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.480453][ T7416] R13: 00007fd988fe6038 R14: 00007fffbd639560 R15: 00007fffbd639648 [ 178.480472][ T7416] [ 180.446245][ T7446] random: crng reseeded on system resumption [ 180.903705][ T7452] FAULT_INJECTION: forcing a failure. [ 180.903705][ T7452] name fail_futex, interval 1, probability 0, space 0, times 0 [ 180.979092][ T7452] CPU: 0 UID: 0 PID: 7452 Comm: syz.1.319 Not tainted syzkaller #0 PREEMPT(full) [ 180.979114][ T7452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 180.979122][ T7452] Call Trace: [ 180.979127][ T7452] [ 180.979133][ T7452] dump_stack_lvl+0x16c/0x1f0 [ 180.979151][ T7452] should_fail_ex+0x512/0x640 [ 180.979169][ T7452] get_futex_key+0x1d0/0x15f0 [ 180.979187][ T7452] ? __pfx_get_futex_key+0x10/0x10 [ 180.979205][ T7452] ? mmap_region+0x1ee/0x3f0 [ 180.979223][ T7452] ? __get_unmapped_area+0x267/0x440 [ 180.979251][ T7452] futex_wake+0xea/0x530 [ 180.979272][ T7452] ? __pfx_futex_wake+0x10/0x10 [ 180.979295][ T7452] ? up_write+0x282/0x4e0 [ 180.979315][ T7452] do_futex+0x1e3/0x350 [ 180.979332][ T7452] ? __pfx_do_futex+0x10/0x10 [ 180.979353][ T7452] __x64_sys_futex+0x1e0/0x4c0 [ 180.979371][ T7452] ? __pfx___x64_sys_futex+0x10/0x10 [ 180.979387][ T7452] ? ksys_mmap_pgoff+0x85/0x5c0 [ 180.979415][ T7452] ? xfd_validate_state+0x61/0x180 [ 180.979461][ T7452] do_syscall_64+0xcd/0xf80 [ 180.979487][ T7452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.979504][ T7452] RIP: 0033:0x7fb97018f7c9 [ 180.979516][ T7452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.979528][ T7452] RSP: 002b:00007fb970fcd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 180.979540][ T7452] RAX: ffffffffffffffda RBX: 00007fb9703e5fa8 RCX: 00007fb97018f7c9 [ 180.979549][ T7452] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb9703e5fac [ 180.979557][ T7452] RBP: 00007fb9703e5fa0 R08: 00007fb970fce000 R09: 0000000000000000 [ 180.979565][ T7452] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 180.979573][ T7452] R13: 00007fb9703e6038 R14: 00007ffda346a220 R15: 00007ffda346a308 [ 180.979591][ T7452] [ 182.536939][ T7479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.311'. [ 183.512698][ T7495] input: jJǸ-9%vJ86 as /devices/virtual/input/input12 [ 184.322807][ T7505] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 185.011938][ T7518] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 187.136831][ T5835] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 187.880034][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.330'. [ 191.765212][ T7629] random: crng reseeded on system resumption [ 192.409147][ T7627] kexec: Could not allocate control_code_buffer [ 193.122403][ T7646] netlink: 28 bytes leftover after parsing attributes in process `syz.3.349'. [ 194.285678][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.292278][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.514794][ T7680] FAULT_INJECTION: forcing a failure. [ 194.514794][ T7680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.536520][ T7680] CPU: 1 UID: 0 PID: 7680 Comm: syz.3.355 Not tainted syzkaller #0 PREEMPT(full) [ 194.536542][ T7680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 194.536550][ T7680] Call Trace: [ 194.536555][ T7680] [ 194.536560][ T7680] dump_stack_lvl+0x16c/0x1f0 [ 194.536579][ T7680] should_fail_ex+0x512/0x640 [ 194.536597][ T7680] _copy_from_user+0x2e/0xd0 [ 194.536612][ T7680] copy_msghdr_from_user+0x98/0x160 [ 194.536630][ T7680] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 194.536645][ T7680] ? preempt_schedule_thunk+0x16/0x30 [ 194.536670][ T7680] ? try_to_wake_up+0xa67/0x1860 [ 194.536692][ T7680] ___sys_sendmsg+0xfe/0x1d0 [ 194.536706][ T7680] ? find_held_lock+0x2b/0x80 [ 194.536725][ T7680] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.536740][ T7680] ? __lock_acquire+0x433/0x22f0 [ 194.536775][ T7680] __sys_sendmsg+0x16d/0x220 [ 194.536790][ T7680] ? __pfx___sys_sendmsg+0x10/0x10 [ 194.536805][ T7680] ? __x64_sys_futex+0x1e0/0x4c0 [ 194.536833][ T7680] do_syscall_64+0xcd/0xf80 [ 194.536847][ T7680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.536861][ T7680] RIP: 0033:0x7fd988d8f7c9 [ 194.536872][ T7680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.536884][ T7680] RSP: 002b:00007fd986ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.536897][ T7680] RAX: ffffffffffffffda RBX: 00007fd988fe5fa0 RCX: 00007fd988d8f7c9 [ 194.536909][ T7680] RDX: 0000000000000000 RSI: 0000200000000cc0 RDI: 0000000000000007 [ 194.536917][ T7680] RBP: 00007fd988e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 194.536925][ T7680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.536933][ T7680] R13: 00007fd988fe6038 R14: 00007fd988fe5fa0 R15: 00007fffbd639648 [ 194.536951][ T7680] [ 196.933114][ T7726] netlink: 28 bytes leftover after parsing attributes in process `syz.3.366'. [ 197.515850][ T7726] bond0: (slave bond_slave_0): Releasing backup interface [ 197.828615][ T7737] FAULT_INJECTION: forcing a failure. [ 197.828615][ T7737] name failslab, interval 1, probability 0, space 0, times 0 [ 197.881060][ T7737] CPU: 1 UID: 0 PID: 7737 Comm: syz.1.367 Not tainted syzkaller #0 PREEMPT(full) [ 197.881082][ T7737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 197.881091][ T7737] Call Trace: [ 197.881095][ T7737] [ 197.881101][ T7737] dump_stack_lvl+0x16c/0x1f0 [ 197.881119][ T7737] should_fail_ex+0x512/0x640 [ 197.881133][ T7737] ? __kmalloc_cache_noprof+0x5f/0x800 [ 197.881152][ T7737] should_failslab+0xc2/0x120 [ 197.881167][ T7737] __kmalloc_cache_noprof+0x72/0x800 [ 197.881184][ T7737] ? sctp_auth_shkey_create+0x9e/0x210 [ 197.881207][ T7737] ? sctp_auth_shkey_create+0x9e/0x210 [ 197.881226][ T7737] sctp_auth_shkey_create+0x9e/0x210 [ 197.881247][ T7737] sctp_endpoint_new+0x589/0xb20 [ 197.881261][ T7737] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 197.881275][ T7737] ? lockdep_init_map_type+0x5c/0x270 [ 197.881292][ T7737] ? lockdep_init_map_type+0x5c/0x270 [ 197.881309][ T7737] sctp_init_sock+0xe2b/0x12f0 [ 197.881328][ T7737] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 197.881348][ T7737] sctp_v6_init_sock+0x16/0x70 [ 197.881366][ T7737] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 197.881385][ T7737] inet6_create+0xb30/0x12b0 [ 197.881407][ T7737] ? inet6_create+0x7f/0x12b0 [ 197.881428][ T7737] __sock_create+0x339/0x8a0 [ 197.881451][ T7737] __sys_socket+0x153/0x2d0 [ 197.881463][ T7737] ? __pfx___sys_socket+0x10/0x10 [ 197.881474][ T7737] ? xfd_validate_state+0x61/0x180 [ 197.881499][ T7737] __x64_sys_socket+0x72/0xb0 [ 197.881510][ T7737] ? lockdep_hardirqs_on+0x7c/0x110 [ 197.881523][ T7737] do_syscall_64+0xcd/0xf80 [ 197.881537][ T7737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.881550][ T7737] RIP: 0033:0x7fb97018f7c9 [ 197.881562][ T7737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.881574][ T7737] RSP: 002b:00007fb970fcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 197.881586][ T7737] RAX: ffffffffffffffda RBX: 00007fb9703e5fa0 RCX: 00007fb97018f7c9 [ 197.881595][ T7737] RDX: 0000000000000084 RSI: 0000000000000801 RDI: 000000000000000a [ 197.881603][ T7737] RBP: 00007fb970213f91 R08: 0000000000000000 R09: 0000000000000000 [ 197.881610][ T7737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.881618][ T7737] R13: 00007fb9703e6038 R14: 00007fb9703e5fa0 R15: 00007ffda346a308 [ 197.881637][ T7737] [ 199.237484][ T7753] FAULT_INJECTION: forcing a failure. [ 199.237484][ T7753] name fail_futex, interval 1, probability 0, space 0, times 0 [ 199.289111][ T7753] CPU: 0 UID: 0 PID: 7753 Comm: syz.3.370 Not tainted syzkaller #0 PREEMPT(full) [ 199.289132][ T7753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 199.289141][ T7753] Call Trace: [ 199.289146][ T7753] [ 199.289151][ T7753] dump_stack_lvl+0x16c/0x1f0 [ 199.289170][ T7753] should_fail_ex+0x512/0x640 [ 199.289184][ T7753] ? rcu_is_watching+0x12/0xc0 [ 199.289208][ T7753] get_futex_key+0x1d0/0x15f0 [ 199.289227][ T7753] ? __pfx_get_futex_key+0x10/0x10 [ 199.289247][ T7753] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.289263][ T7753] ? __lock_acquire+0x433/0x22f0 [ 199.289279][ T7753] futex_wake+0xea/0x530 [ 199.289299][ T7753] ? __pfx_futex_wake+0x10/0x10 [ 199.289327][ T7753] do_futex+0x1e3/0x350 [ 199.289344][ T7753] ? __pfx_do_futex+0x10/0x10 [ 199.289360][ T7753] ? fput+0x70/0xf0 [ 199.289375][ T7753] ? __sys_sendmsg+0x18c/0x220 [ 199.289391][ T7753] __x64_sys_futex+0x1e0/0x4c0 [ 199.289410][ T7753] ? __pfx___x64_sys_futex+0x10/0x10 [ 199.289442][ T7753] do_syscall_64+0xcd/0xf80 [ 199.289457][ T7753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.289472][ T7753] RIP: 0033:0x7fd988d8f7c9 [ 199.289484][ T7753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.289497][ T7753] RSP: 002b:00007fd986ff60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 199.289510][ T7753] RAX: ffffffffffffffda RBX: 00007fd988fe5fa8 RCX: 00007fd988d8f7c9 [ 199.289520][ T7753] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd988fe5fac [ 199.289528][ T7753] RBP: 00007fd988fe5fa0 R08: 00007fd989b3c000 R09: 0000000000000000 [ 199.289537][ T7753] R10: 0000000000000044 R11: 0000000000000246 R12: 0000000000000000 [ 199.289544][ T7753] R13: 00007fd988fe6038 R14: 00007fffbd639560 R15: 00007fffbd639648 [ 199.289562][ T7753] [ 201.609920][ T7788] netlink: 28 bytes leftover after parsing attributes in process `syz.0.376'. [ 201.642329][ T7792] sp0: Synchronizing with TNC [ 201.763949][ T7792] ptp ptp0: guarantee physical clock free running [ 202.180173][ T7785] FAULT_INJECTION: forcing a failure. [ 202.180173][ T7785] name fail_futex, interval 1, probability 0, space 0, times 0 [ 202.197386][ T7785] CPU: 0 UID: 0 PID: 7785 Comm: syz.3.377 Not tainted syzkaller #0 PREEMPT(full) [ 202.197418][ T7785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 202.197431][ T7785] Call Trace: [ 202.197439][ T7785] [ 202.197448][ T7785] dump_stack_lvl+0x16c/0x1f0 [ 202.197478][ T7785] should_fail_ex+0x512/0x640 [ 202.197507][ T7785] get_futex_key+0x293/0x15f0 [ 202.197541][ T7785] ? __pfx_get_futex_key+0x10/0x10 [ 202.197571][ T7785] ? __pfx___might_resched+0x10/0x10 [ 202.197613][ T7785] futex_wake+0xea/0x530 [ 202.197651][ T7785] ? __pfx_futex_wake+0x10/0x10 [ 202.197701][ T7785] do_futex+0x1e3/0x350 [ 202.197731][ T7785] ? __pfx_do_futex+0x10/0x10 [ 202.197758][ T7785] ? __might_fault+0xe3/0x190 [ 202.197798][ T7785] mm_release+0x24e/0x300 [ 202.197832][ T7785] do_exit+0x69e/0x2bd0 [ 202.197854][ T7785] ? __pfx___might_resched+0x10/0x10 [ 202.197894][ T7785] ? __pfx_do_exit+0x10/0x10 [ 202.197917][ T7785] ? do_raw_spin_lock+0x12c/0x2b0 [ 202.197946][ T7785] ? find_held_lock+0x2b/0x80 [ 202.197984][ T7785] do_group_exit+0xd3/0x2a0 [ 202.198010][ T7785] get_signal+0x2671/0x26d0 [ 202.198049][ T7785] ? task_work_add+0x1ee/0x380 [ 202.198078][ T7785] ? __pfx_get_signal+0x10/0x10 [ 202.198128][ T7785] arch_do_signal_or_restart+0x8f/0x7a0 [ 202.198159][ T7785] ? __pfx___fput_deferred+0x10/0x10 [ 202.198187][ T7785] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 202.198227][ T7785] ? fput+0xcf/0xf0 [ 202.198252][ T7785] ? do_readv+0x238/0x340 [ 202.198291][ T7785] exit_to_user_mode_loop+0x8c/0x540 [ 202.198327][ T7785] do_syscall_64+0x4ee/0xf80 [ 202.198353][ T7785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.198377][ T7785] RIP: 0033:0x7fd988d8f7c9 [ 202.198396][ T7785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.198417][ T7785] RSP: 002b:00007fd986ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 202.198440][ T7785] RAX: fffffffffffffe00 RBX: 00007fd988fe5fa0 RCX: 00007fd988d8f7c9 [ 202.198454][ T7785] RDX: 0000000000000009 RSI: 0000200000003080 RDI: 0000000000000003 [ 202.198467][ T7785] RBP: 00007fd988e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 202.198480][ T7785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.198492][ T7785] R13: 00007fd988fe6038 R14: 00007fd988fe5fa0 R15: 00007fffbd639648 [ 202.198527][ T7785] [ 204.522343][ T7849] sp0: Synchronizing with TNC [ 204.679477][ T7853] ptp ptp0: guarantee physical clock free running [ 205.212728][ T7858] usb usb3: usbfs: process 7858 (syz.3.392) did not claim interface 2 before use [ 205.651207][ T7863] FAULT_INJECTION: forcing a failure. [ 205.651207][ T7863] name failslab, interval 1, probability 0, space 0, times 0 [ 205.699561][ T7863] CPU: 0 UID: 0 PID: 7863 Comm: syz.1.394 Not tainted syzkaller #0 PREEMPT(full) [ 205.699594][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 205.699607][ T7863] Call Trace: [ 205.699615][ T7863] [ 205.699625][ T7863] dump_stack_lvl+0x16c/0x1f0 [ 205.699657][ T7863] should_fail_ex+0x512/0x640 [ 205.699681][ T7863] ? kmem_cache_alloc_noprof+0x62/0x760 [ 205.699717][ T7863] should_failslab+0xc2/0x120 [ 205.699743][ T7863] kmem_cache_alloc_noprof+0x75/0x760 [ 205.699775][ T7863] ? alloc_empty_file+0x55/0x1e0 [ 205.699807][ T7863] ? alloc_empty_file+0x55/0x1e0 [ 205.699830][ T7863] alloc_empty_file+0x55/0x1e0 [ 205.699860][ T7863] alloc_file_pseudo+0x13a/0x230 [ 205.699891][ T7863] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 205.699920][ T7863] ? alloc_fd+0x471/0x7d0 [ 205.699955][ T7863] sock_alloc_file+0x50/0x210 [ 205.699988][ T7863] __sys_socket+0x1c6/0x2d0 [ 205.700009][ T7863] ? __pfx___sys_socket+0x10/0x10 [ 205.700023][ T7863] ? xfd_validate_state+0x61/0x180 [ 205.700047][ T7863] __x64_sys_socket+0x72/0xb0 [ 205.700058][ T7863] ? lockdep_hardirqs_on+0x7c/0x110 [ 205.700072][ T7863] do_syscall_64+0xcd/0xf80 [ 205.700087][ T7863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.700101][ T7863] RIP: 0033:0x7fb97018f7c9 [ 205.700113][ T7863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.700126][ T7863] RSP: 002b:00007fb970fcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 205.700140][ T7863] RAX: ffffffffffffffda RBX: 00007fb9703e5fa0 RCX: 00007fb97018f7c9 [ 205.700149][ T7863] RDX: 0000000000000084 RSI: 0000000000000801 RDI: 000000000000000a [ 205.700157][ T7863] RBP: 00007fb970213f91 R08: 0000000000000000 R09: 0000000000000000 [ 205.700165][ T7863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.700173][ T7863] R13: 00007fb9703e6038 R14: 00007fb9703e5fa0 R15: 00007ffda346a308 [ 205.700192][ T7863] [ 205.701085][ T7863] VFS_BUG_ON_INODE(inode_state_read_once(inode) & I_CLEAR) encountered for inode ffff88805c138c40 [ 205.701085][ T7863] fs sockfs mode 140777 opflags 0xc flags 0x0 state 0x300 count 0 [ 206.046681][ T7863] ------------[ cut here ]------------ [ 206.052195][ T7863] kernel BUG at fs/inode.c:1971! [ 206.096581][ T7863] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 206.102841][ T7863] CPU: 1 UID: 0 PID: 7863 Comm: syz.1.394 Not tainted syzkaller #0 PREEMPT(full) [ 206.112020][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 206.122063][ T7863] RIP: 0010:iput.part.0+0xb3b/0x1190 [ 206.127345][ T7863] Code: 4b 68 ff ff 90 0f 0b e8 73 fa 7c ff 90 0f 0b 90 e9 d3 f8 ff ff e8 65 fa 7c ff 48 c7 c6 e0 78 a0 8b 48 89 df e8 26 68 ff ff 90 <0f> 0b e8 4e fa 7c ff 48 c7 c6 40 79 a0 8b 48 89 df e8 0f 68 ff ff [ 206.147113][ T7863] RSP: 0018:ffffc9000e4efdc8 EFLAGS: 00010296 [ 206.153168][ T7863] RAX: 000000000000009f RBX: ffff88805c138c40 RCX: ffffc9000c679000 [ 206.161131][ T7863] RDX: 0000000000000000 RSI: ffffffff819bd739 RDI: 0000000000000005 [ 206.169094][ T7863] RBP: 0000000000000200 R08: 0000000000000005 R09: 0000000000000000 [ 206.177050][ T7863] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000000 [ 206.185009][ T7863] R13: ffffffff9086aa34 R14: ffff88805c138d10 R15: dffffc0000000000 [ 206.192971][ T7863] FS: 00007fb970fcd6c0(0000) GS:ffff888124a85000(0000) knlGS:0000000000000000 [ 206.201891][ T7863] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 206.208465][ T7863] CR2: 0000001b314f2ff8 CR3: 0000000056c62000 CR4: 00000000003526f0 [ 206.216429][ T7863] Call Trace: [ 206.219701][ T7863] [ 206.222616][ T7863] iput+0x35/0x40 [ 206.226248][ T7863] __sock_release+0x20b/0x270 [ 206.230928][ T7863] __sys_socket+0x23a/0x2d0 [ 206.235424][ T7863] ? __pfx___sys_socket+0x10/0x10 [ 206.240433][ T7863] ? xfd_validate_state+0x61/0x180 [ 206.245541][ T7863] __x64_sys_socket+0x72/0xb0 [ 206.250202][ T7863] ? lockdep_hardirqs_on+0x7c/0x110 [ 206.255385][ T7863] do_syscall_64+0xcd/0xf80 [ 206.259879][ T7863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.265758][ T7863] RIP: 0033:0x7fb97018f7c9 [ 206.270153][ T7863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.289748][ T7863] RSP: 002b:00007fb970fcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 206.298150][ T7863] RAX: ffffffffffffffda RBX: 00007fb9703e5fa0 RCX: 00007fb97018f7c9 [ 206.306114][ T7863] RDX: 0000000000000084 RSI: 0000000000000801 RDI: 000000000000000a [ 206.314080][ T7863] RBP: 00007fb970213f91 R08: 0000000000000000 R09: 0000000000000000 [ 206.322042][ T7863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.329999][ T7863] R13: 00007fb9703e6038 R14: 00007fb9703e5fa0 R15: 00007ffda346a308 [ 206.337963][ T7863] [ 206.340966][ T7863] Modules linked in: [ 206.345385][ T7863] ---[ end trace 0000000000000000 ]--- [ 206.598585][ T7863] RIP: 0010:iput.part.0+0xb3b/0x1190 [ 206.636804][ T7863] Code: 4b 68 ff ff 90 0f 0b e8 73 fa 7c ff 90 0f 0b 90 e9 d3 f8 ff ff e8 65 fa 7c ff 48 c7 c6 e0 78 a0 8b 48 89 df e8 26 68 ff ff 90 <0f> 0b e8 4e fa 7c ff 48 c7 c6 40 79 a0 8b 48 89 df e8 0f 68 ff ff [ 206.717904][ T7863] RSP: 0018:ffffc9000e4efdc8 EFLAGS: 00010296 [ 206.729952][ T7863] RAX: 000000000000009f RBX: ffff88805c138c40 RCX: ffffc9000c679000 [ 206.766689][ T7863] RDX: 0000000000000000 RSI: ffffffff819bd739 RDI: 0000000000000005 [ 206.783948][ T7863] RBP: 0000000000000200 R08: 0000000000000005 R09: 0000000000000000 [ 206.831979][ T7863] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000000 [ 206.856058][ T7863] R13: ffffffff9086aa34 R14: ffff88805c138d10 R15: dffffc0000000000 [ 206.886865][ T7863] FS: 00007fb970fcd6c0(0000) GS:ffff888124a85000(0000) knlGS:0000000000000000 [ 206.907084][ T7863] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 206.920941][ T7863] CR2: 0000001b317dfffc CR3: 0000000056c62000 CR4: 00000000003526f0 [ 206.936303][ T7863] Kernel panic - not syncing: Fatal exception [ 206.942529][ T7863] Kernel Offset: disabled [ 206.946840][ T7863] Rebooting in 86400 seconds..