last executing test programs: 9.449798528s ago: executing program 1 (id=783): pread64$auto(0xffffffffffffffff, 0x0, 0xf42c, 0x38) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r1, 0x4008af83, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) 8.987402218s ago: executing program 0 (id=784): unshare$auto(0x40000080) unshare$auto(0x40000080) msgrcv$auto(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x3) msgrcv$auto(0x0, &(0x7f0000000100)={0x831d, 0x35}, 0x4, 0x8, 0xffffffff) socket(0x2, 0x80002, 0x73) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0xe, 0x802b95}, 0x0) unshare$auto(0x40000080) r0 = memfd_create$auto(&(0x7f0000000000)='\x00', 0x6) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r0, 0x0, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x4) fallocate$auto(r2, 0x0, 0x10, 0xccbd5d) sysfs$auto(0x9, 0x2, 0x8) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/nullb/features\x00', 0x200, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000) sysfs$auto(0x2, 0x3b, 0x0) kexec_load$auto(0x7f, 0x4, &(0x7f0000000240)={@kbuf=&(0x7f0000000140)="ecf528bb1308ef495d73c9f02462cce864f04f90b5af517507df2c34a18f8f9e4e33812dcc7d4881ab69c57b7e57fd306eb1acdf9de9ad20b86f9fe64b5b8e9aaa4c58ed5933094ce654a3f397fe7e8244315df79abcffd9c359795d395446b05953ad1674b8e1f102bcf59d1d7999cd8616976e0173f41c04c4db63265d13beabd8288f98406df5292d0dd0af36f11ca702bab62e499f6c13bb293f6ff994bc1e02da428a16a4d321decb1049e248574b1e13ed53d0d4caed44d0a798ffdd15f6a45f4ffb4c51fcedae506155b72468d1a9e0c5c6861540d20da5b31f547cfdb601062ac6db", 0x2, 0xb385, 0x7}, 0x6) 7.982929279s ago: executing program 2 (id=785): socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) acct$auto(&(0x7f0000000080)='/dev/video63\x00') socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) mmap$auto(0x2000000000000000, 0x9, 0x4000000001df, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000100), 0x80001, 0x0) socket(0x11, 0x3, 0x9) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dri/card0\x00', 0x800, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f0000000440)={[0x1ff, 0x87, 0x8, 0x1, 0x948b, 0x5, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x400, 0x5d8, 0x1000000000000009, 0x7, 0x8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000008007, 0x800000000000004, 0x1000000000000bc3, 0x800, 0x3, 0xff, 0x10001, 0x2, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x80000000, 0x4, 0xe05a, 0x4]}, 0x0) 7.146609184s ago: executing program 1 (id=787): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/010/001\x00', 0x80d00, 0x0) mmap$auto(0x0, 0xb, 0x6, 0xeb1, 0x3ff, 0x8000) close_range$auto(0x2, 0x8, 0x0) mincore$auto(0x0, 0x1, 0x0) setsockopt$auto(0xffffffffffffffff, 0x10000000084, 0x6, 0x0, 0x0) unshare$auto(0x6b) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sda\x00', 0x34dcc2, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x12080, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyy7/power/runtime_suspended_time\x00', 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x6a) ptrace$auto(0x4, 0xffffffffffffffff, 0x8000000000000000, 0xfff) bind$auto(0xffffffffffffffff, 0x0, 0x6b) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') setns(r1, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) select$auto(0x8, &(0x7f0000000180)={[0x8, 0x1d5c, 0x1, 0xa, 0x5, 0x1, 0x9c94, 0xe3e, 0xbfc, 0x248f, 0x5, 0x100000001, 0x180000000, 0x1, 0x9, 0xe0b]}, 0x0, &(0x7f00000002c0)={[0xffffffffffffff8a, 0x8, 0x6, 0x1, 0x6, 0x1, 0x4, 0x6, 0x7fff, 0x1, 0x5, 0x1, 0x8, 0x7fffffff, 0x860, 0x6]}, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 7.098254588s ago: executing program 0 (id=788): mmap$auto(0x9, 0x2020009, 0x3, 0x11, 0xfffffffffffffffa, 0x6) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0xe, 0x802b95}, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x801, 0x84) r1 = getsockopt$auto(r0, 0x84, 0x82, 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/syz_tun/bc_forwarding\x00', 0xc2841, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) sendmsg$auto_NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000b00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x50, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_NAME={0x33, 0x2, '/sys/devices/platform/vidtv.0/i2c-0/new_device\x00'}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000020}, 0x4000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vidtv.0/i2c-0/new_device\x00', 0x4a001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000180)="12b3557dc0c32d7b7e2099c6", 0xc) read$auto(r3, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) 6.973245278s ago: executing program 2 (id=789): pread64$auto(0xffffffffffffffff, 0x0, 0xf42c, 0x38) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r1, 0x4008af83, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) setns(0xc9, 0x0) socket(0x1f, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x3b72, 0x0) r2 = prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280), 0x1) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto(r3, 0x802064b6, r3) io_uring_enter$auto(0xffffffffffffffff, 0x9, 0x820e, 0x8b, 0x0, 0x18) close_range$auto(0x2, 0x8, 0x0) read$auto_clk_summary_fops_(r2, &(0x7f0000000080)=""/60, 0x3c) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0xe363) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(r4, 0xb, &(0x7f0000000180)="91ac4b8b8dfdfc3c3bb9c875b8ec1912474043b9bdb2171fa5d8a760c1772479416021f7592bf65ab7ac349e29186b71bd0ccbd47aa974e26b9d914451b2933af717f20f6613d88c8d47d16ae688240077", 0x672) 4.904264772s ago: executing program 0 (id=791): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$auto(0x5, &(0x7f0000000040)=@bpf_attr_7={@prog_id=0x8, 0x9, 0x6}, 0xa) r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_CLEAR_HALT(r2, 0x4004550e, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) connect$auto(0x3, 0x0, 0x50) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000ece5872d4728753c14cb", @ANYRES16=r3, @ANYBLOB="01002cbd7000fbdbdf25020000000800010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), r4) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) execve$auto(&(0x7f00000002c0)='./file0\x00', 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xebd, r1, 0x5) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) fcntl$auto(0xff80000000000000, 0x406, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x8000000000, 0x202000a, 0x3, 0x1400000f8, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfded, 0x3) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) 4.877166644s ago: executing program 2 (id=792): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x23, 0x80805, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty45\x00', 0x100, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000140)="13") r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x80000, 0x0) fcntl$auto_F_OFD_SETLKW(r1, 0x26, 0x8000000000000001) ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0) 4.841108368s ago: executing program 1 (id=793): mprotect$auto(0x130c230000, 0xa588, 0x6) write$auto(0xffffffffffffffff, 0x0, 0x903) mprotect$auto(0x5, 0x7, 0x0) mremap$auto(0x110c231000, 0x0, 0x101, 0x3, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x7ffc, 0x0) semtimedop$auto(0x1, &(0x7f0000000000)={0x4, 0x0, 0x6}, 0x7, &(0x7f0000000040)={0x0, 0x3}) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) rename$auto(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000100)='./cgroup.cpu/cpuset.cpus\x00') ioctl$auto_RTC_IRQP_SET(r0, 0x4008700c, &(0x7f0000000640)=0xffffffffffffff5a) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a0100, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)=0x101, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) r2 = socket(0x29, 0x5, 0x0) fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(r2, &(0x7f0000000180)={{0x0, 0x2, &(0x7f0000000100)={0x0, 0x34000}, 0x0, 0x0, 0x2, 0xab}, 0x80670}, 0x3f7ffffe, 0xd9) write$auto_tty_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) sysfs$auto(0x2, 0x3b, 0x0) 4.754985343s ago: executing program 3 (id=794): unshare$auto(0x40000080) unshare$auto(0x40000080) msgrcv$auto(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x3) msgrcv$auto(0x0, &(0x7f0000000100)={0x831d, 0x35}, 0x4, 0x8, 0xffffffff) socket(0x2, 0x80002, 0x73) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0xe, 0x802b95}, 0x0) unshare$auto(0x40000080) r0 = memfd_create$auto(&(0x7f0000000000)='\x00', 0x6) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r0, 0x0, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x4) fallocate$auto(r2, 0x0, 0x10, 0xccbd5d) r3 = syz_genetlink_get_family_id$auto_nl80211(0x0, r1) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/nullb/features\x00', 0x200, 0x0) sendmsg$auto_NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000) bpf$auto(0x12, &(0x7f0000000040)=@link_detach, 0x26) sysfs$auto(0x2, 0x3b, 0x0) kexec_load$auto(0x7f, 0x4, &(0x7f0000000240)={@kbuf=&(0x7f0000000140)="ecf528bb1308ef495d73c9f02462cce864f04f90b5af517507df2c34a18f8f9e4e33812dcc7d4881ab69c57b7e57fd306eb1acdf9de9ad20b86f9fe64b5b8e9aaa4c58ed5933094ce654a3f397fe7e8244315df79abcffd9c359795d395446b05953ad1674b8e1f102bcf59d1d7999cd8616976e0173f41c04c4db63265d13beabd8288f98406df5292d0dd0af36f11ca702bab62e499f6c13bb293f6ff994bc1e02da428a16a4d321decb1049e248574b1e13ed53d0d4caed44d0a798ffdd15f6a45f4ffb4c51fcedae506155b72468d1a9e0c5c6861540d20da5b31f547cfdb601062ac6db", 0x2, 0xb385, 0x7}, 0x6) 3.924923215s ago: executing program 0 (id=795): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2a6300, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/members\x00', 0x0, 0x0) r0 = socket(0x28, 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r0) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd700002dcdf2503000000040008000400080014000180100010800c000b00080000000000000063696ca1884e5ce8f6e7ce43287cd6c54e7cf390d711237a1e6d3de514f3d1dad653a1"], 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) r3 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/config/target/dbroot\x00', 0xc0100, 0x0) sendfile$auto(r3, r0, 0x0, 0x400000000008) r4 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000300), r2) sendmsg$auto_IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xe9d25611236d11f3}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r4, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x8}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x40}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xe}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) sendmsg$auto_IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r4, 0x4, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xff}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0xf8}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x4}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0xfd}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3}, @IEEE802154_ATTR_DEST_SHORT_ADDR={0x6, 0xe, 0x101}, @IEEE802154_ATTR_COORD_REALIGN={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xb}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x44) sendmsg$auto_NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x38, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_FILS_DISCOVERY={0x24, 0x126, 0x0, 0x1, [@NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x3}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0xa}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x200680c0}, 0x881) r5 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd700000dcdf250200000004000800200001801c0010"], 0x38}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) clone$auto(0x20003b46, 0x10000008, 0x0, 0x0, 0x5) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(0xffffffffffffffff, 0x0, 0x40) mincore$auto(0x1000, 0x8001, 0x0) r7 = timerfd_create$auto(0x9, 0x0) timerfd_gettime$auto(r7, &(0x7f0000000080)={{0x1, 0xc8}, {0x7, 0x1}}) fcntl$auto(0x8000000000000001, 0x7, 0x8) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x8) lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', &(0x7f0000001140)='security.capability\x00\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf29\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x8a\n\xe8\x1c\x88\xd4\xa5\x96!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f', &(0x7f0000001340), 0x5, 0x2) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x304480, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) fcntl$auto(0x8000000000000001, 0x26, 0x8) close_range$auto(0x2, 0x8, 0x0) 3.843140088s ago: executing program 2 (id=796): mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) write$auto(r0, 0x0, 0x58c) mmap$auto(0x0, 0x1007, 0x2, 0x8000000008011, 0x3, 0x0) write$auto(0x3, 0x0, 0xfdef) r1 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3b) socket(0x27, 0x3, 0x3b) r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0xf7374674bd20009f) socket(0xa, 0x1, 0x84) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000040)=0x4) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r3, 0x0, 0x6, 0xffffffff) select$auto(0x10, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x4002008d, 0x1, 0x2, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001e, 0x7, 0xa, 0x9, 0x2, 0x6]}, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r5, 0x0, 0x20) writev$auto(r4, &(0x7f0000000200)={0x0, 0x3}, 0x3) bind$auto(0x3, 0x0, 0x9) close_range$auto(0x2, 0xa, 0x0) wait4$auto(r1, 0x0, 0x80000001, 0x0) r6 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cmdline\x00', 0x0, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(r6, &(0x7f0000000440)=""/4096, 0x1000) ioctl$auto_SG_SET_COMMAND_Q2(r2, 0x2271, &(0x7f0000000340)="bf75d1d12984cff4c47b7c72f06c2abed051862965aaa00f0028e21270fd7693a91bcaa45d51cdbd97d7cae9a1c36f289f294243b60723ec9528d9c684d645abd8058aebb2f4fd0101eccccfde2935d3ebc8931c37be95d7887abecb1d848f445f35e14fd51f27237211f9ec7fdac04edebde256fdba9aafff92277d7eb26321df4dcb46d32407ecfd9326321127e189dc6408aa2b4c38ca70901bdc1e2112965afe453c3faec92e86e1fc64c6eabdd9d750f317ddfb1ce55054d816a64bd69693a2a2583107720e8e63bf6eded524843c9c5af8d98ca82029e7d28c7a784b5d4bc68f3029e52157e48fd1d2ad3d9308e739f037") 3.802809014s ago: executing program 3 (id=797): socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) acct$auto(&(0x7f0000000080)='/dev/video63\x00') socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) mmap$auto(0x2000000000000000, 0x9, 0x4000000001df, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000100), 0x80001, 0x0) socket(0x11, 0x3, 0x9) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dri/card0\x00', 0x800, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f0000000440)={[0x1ff, 0x87, 0x8, 0x1, 0x948b, 0x5, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x400, 0x5d8, 0x1000000000000009, 0x7, 0x8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000008007, 0x800000000000004, 0x1000000000000bc3, 0x800, 0x3, 0xff, 0x10001, 0x2, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x80000000, 0x4, 0xe05a, 0x4]}, 0x0) 3.671587175s ago: executing program 1 (id=798): r0 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0x5, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x80, 0x6, 0x7}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) open(&(0x7f0000000100)='.\x00', 0x0, 0x57e) r2 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r3 = bpf$auto(0x0, &(0x7f0000000100)=@batch={0x6, 0x3, 0x0, 0x5f1, 0xc6, r2, 0xfffffffffffffeff, 0x8}, 0xf2) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/profiling\x00', 0x82002, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000080)="2dfc", 0x2) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x5, 0xfffffffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r7 = prctl$auto_PR_SET_VMA_ANON_NAME(0x4e17, 0x0, 0xffffffffffffffff, 0x2, 0x1) pwritev$auto(r7, &(0x7f0000000300)={&(0x7f0000000200)="18d55debebe924fb3be2e319ec91bf62babe31d31a686c61ce7fdbdc00d0bc8a36df3d7ce2556118a48097d5ecf24aed43d748b82ac03b609f2b1d3d16a0f6446fbb26c1b55c670d9283d0f9129cedf16448851be51c847d867618f0c6a0866a47e4802149909d9860c1e9038537cef1d7769bd6d6e346645f3e1886b204ba0357791edf6cf87e98313b5d8042d1df4c65d741cdad16dc4dd26879ca6575296eecfde64708454729fe09", 0xae6}, 0xffffffff7fffffff, 0x4, 0x80) ioctl$auto_VHOST_SET_FEATURES2(r6, 0x4008af00, &(0x7f0000000040)=0x3) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mremap$auto(0xfffffffffffffe01, 0x40000000100005, 0x843, 0x3, 0x2) mmap$auto(0x7ffc, 0x20009, 0x9, 0x13, r3, 0x8002) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), r1) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000030c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003080)={&(0x7f00000004c0)={0x2bac, r8, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_HE_CAPABILITY={0x29, 0x10d, "a064600c21fadc6195091e14d3342f32ff9dc6206c9d33edbd27c10d3860912d0bf4a4519b"}, @NL80211_ATTR_SCAN_FREQUENCIES={0x2396, 0x2c, 0x0, 0x1, [@nested={0x1268, 0x3b, 0x0, 0x1, [@typed={0x14, 0x4a, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0x4, 0x12d}, @nested={0x4, 0x10b}, @nested={0x4, 0x2a}, @generic="27d1c347758417c4f7083c15682200518cb2f87a8bbe63776b1cca346fbfed5ef713cc79c065ab0d3d62d013601d583eb40944994cd44cacaeba6cd9921878835608f09b3de267effe7982fb3259a2b8317bd56a36cdf04da36b2af31fcab2130907bfc0560c447a285b04620733301093b83e2e1a82a82dbeb808003327aa4851f6bee0ac601cb62edc3f011b833eecf0f91165ed0e399bd0ff0e1eabfaad3d6a82155b68440e8e9857d9d6bbc041d3a84195335f42bcdd55f37f6d0f19fb0ebc7b3ded652d4a2f31178374225fb9a275273c93871d6a7e2599566486fc969047a1494dd7f2ac746aaaacbcc9569888e0b5b75a1ad3592b5a31f8ca28dbd50438ca44f0635ecdbc71d3745573b50b8930644ea59dd69dbb458ede2908b20f4428d46a223ac71f02a38859e1d465035d1a1ed582d528733e910d5be3af4e0ebd86392429b6d152d323c7aa327a1983c067d62a3a2cdb7ac7b1e87c0733014b7a2ecc52ab4e7d32508cbbf1dcf7d9cd0a8c28e72bb8d5a476b585db4634e68095e7d586eb45f7cf7b9538826e765c969746383ec726f4891abfb79fc73688fad123caf73806f8cbadb9950d1106b11dfbcfb16918468595a3a1cd6729c08b584e9c9899c3c6c30374d3df77b156156a09b8543fee912a18d6626d5a5a2850e0efe6bec59be6cc937bf073bdfcfbbf4337f4a7ad6a48b353417e88bf7ff0f9889826a6d624f74dc117521c3f302ab909e0f8dd1be0fb50cf6c1cd9185d27f60a07c0b66fb5230ab656765e53e5e781269fad047695630a096624424a5fcf44705c28894f84e0c6a0c11c6fa47855fac8a72e5b341795a3c4496b776aa3b4ce6aaa922a1e9fbe44a072d0edfde5293453d72c2746dd69b1f49d6c56f0609ce538c51e59a1a79064e2e1d986983c638d24359f2b6ed3bf91a47e3502111587eedfec9f37d37ca98de3889441b3d221d8412b4cf8342d06f7466e19e3882cdcb9c426028e72bf248affbdfea5306e5df09beb07dac7b4456ff1c22cdce0aad8015ebc007734eb4eaee046b3a26e75dd673cd1e9f723b3aa2068637bfe9168f7a8fcaeb9090215ae5642eb99585e7b3f32cc31d9bcd93666b42b160ad2894e4a26c8c55b36cb800e457f00839f4d3abce0997f2efc49f6d38d89dcefccc3d9e27e116d40f6524d870f7f7311d0ff14b668cd5012e0e469583af1faf31439cd532afe0171734b9775625f361ce0cddd59c0589a0fe0d0bb755b00e501ae17069739787cac974a81a489b39826c537c4c69f4252e3f3db77cf03a273ef3469488a714bab6ec45425a51165c745df358c2e0aae47c3ca710057235594701148e7d46d5270f89fa482aa3847d2290ac08006a9c3514eeab92a95c901b542daec6555de8683c08ec60cac14ea87faaf4b57076f98a4f43f3e5adfd8c89ffe536aa4fed838609be0302aab75cd21f88910981a15a3cb602322489a44f9e3b900821e06978168ca737fa0f96a28fff68184e063b42f811a9a245cab261ce26edef9768a9dcf7f3df4982fc26608794fadc9bf9926b50515ee619a01db51fefbd050ef0d3f01f4f6e804dcb719514417324564865d0bf7de8d5446e744cf7b10353df4d463c719507e96f3c62cb176445494fe87bed82681222cad8baeefd8db7125070936fb6bdc3278bc3d6fc5bfe294adbf4253197a07a3dbeac86a5bd03fb083e95a98b54071e1692f44f79625826ef6721b27447f973f7c0e339fd6b329196b5c653f6fe1aaf0914a8f77abda3bdb164ff27a1325ae2f62859e51921f890cc4d245e65b38dcc8bbe7e8c2605ce0b1268b7d3f048559cf0d3721f2e3e70581b6ec51de3ba65ad2e346d39a01f889ea6fdf0fa28388439127c410eb2d54dbd72b5ce1c27130f84e86730a8b6cd085dc53d7ddc76eb87761a7434f2aca8478e116c06795d56f0e180410f143c6ea565a4b8f21da70dbb0d01e6b90e3305c17a0808f8a4f23662da90e628c6745531b5e6ffad46de2f615997469805008a142072e777c982b191dd36fb3bd0b2100a9da85db70d7870e4bc09cd1f72f6ab8d31c6100ea41548bed533a504c28a077b00c8edca9b333c521419ddf8b45dc97d499748eab94a3f016e2c02197e737fc7961de32fba89252d48668614e31eb9b0fa524a1c13d2682e9035407970318d8ffbe99f3dcf42e1e024dc9120b3d57d16e2999faf8cfaffc24fd52b87068c40cf1c502bc96142f8a9014fd7810d44f44d3754fc5be95254417099ed4d9fa732804262e32cb7a67666f36a9654bd32a6a23ef8151af16280999a88b53b81d4cc20d887930d60a61359330619f54eb2780ebd8795227a2433b4e2f7118d5b8e227de9b81e444bad13d015206b988a94ab33114d4fa97a4ed20ebaec937d089c9584e0bc6c79e329e40087f6e718e0e091dd0f9c9931a71cb7ef64f9c54eb497381ea1980e85ef5393318429922951ca3b0acee01624071cc8443b735630b3dbb20eb6998fc4c84bb2413438f4ccf86c0136d9e69e869f7136e854d42a6d113f0ce2fbc6467f4dab72d25c4ed1d72f3d3588983a7f38c92359f006c7d0e09a162d93f649cb5213d4e463ba10b8658461ced265d2168fc05f5da7a225e8cf0bcaf8b20e9c54240d1bbd474798f3c256b1afc34c8f9741927b2432e2a1e9128ac300b1c497bff91b39c81d9a7dfad459b045144c374ca0f11b1bb077677343956e3b06b5bb888f4ab2b86cc76f38103030dbefe09f863a6b6eac98c87c51144f579cf9085ebb2c2055d658293f119629a0d413964cc2e5d73a2ac580c8f5fb455f85f771c89eb6e8b4c7b4e14bb2c371ba58b226ba90b38825c67dc27a4268ada6fbf0e1ce8d5cf2267e21eb821b6b313defe281ae01595779ed8f783f74c57f18769edf37ad9bff0055f2e221e3ad53bccc4ea90bd4fa94965a5805f153a45126a8465175f50a6bf5756e19d4b0853e6393773b4f24749c52e6528fcc3a26e9043954e058f1d108e58ca60e384adbddb57be30448b877f6653a4d7c98127403e441abbcebbd6684746b490f73c29ce807d9e35b64474ce40b0c17e2c5f50150aa8f616467f0bdf3e9b42d005ef8809899bb626bb20761e1af042906b4acc7c762b11e42d3cc3dd0d1c590035ed11e46f609dbf12d79bc9ea0ff60d0de6aa37ae5d1bcab395a239bfa835ddb9ace44adcd6e438f16eb18eb1c69baabf2c90e51a428326a34feec509bf5db9e2e02dcfd48da1d3e3168079bd435390e7f0f2407d6b2d0aefe27e4833b8a65866f4865a610e5862b787954b8a6efcafcb76098349bdb7dd6b791b45e27c7ee71a82aa56e9c31772667a9fc273449b0e160156450f0725a00bb13ecc04e942a9b84893292ea3b034b7edf91524fcdd18a38955c1adaa867b95ac806237937869c5e6f31a1496cd9d63c147689ee746200d0646ca3159bd02d16b65b11d87ec628ab2b89632f7cf5438ae7b10d41916642f91df44b914bba0ebfd6047d9ee64bc1fa86f38977360dadda156eb8f504b841ec716bd147b7de73a11684f656be89dedba2c453cffa1de3f7ea4b4ea7ab0ac55eee53a2e8c413ff07a635cba3893119e413094f3d8418d1e06f6a4afd24ce57ff3252349a41e26bf95d886d722c5e68201528c4dbfa592d71e3ff1eae011b3e7c5a9dc53c08674eca3f5209805bd116af7ae2528d4e0228776b19ea14a59a58b400c84c5a8d1345b3c49c2295562542fcdb46a240d303f802046b66adde1c5a005a084b09790a4ae91ace91b832aff36dd5e918d72941738e555cac7dc14d87eff2c058598fce5fdb46807bff4c8e46c16592d0368cd72f519b52ae083b0e8262c2048dac746d4e455be0a689f79f9e8dc4fba9c7745002c727cc69b7ec62e3d47e8ad7db12f2e96b30a9e3244e142c14796963bb3b1332baee0a8ff26ea15fd3dd036ee3316e85e4a5de3502c4bb59bddf86fd5e5b2fc5f66987e4dfdc9fe5b6abda7bf05bd6ecae2e404c009d381d290d89583e66330fd5a5ec395cd2fd3cd2c3801ea688959277a57fe9a20bdcb5fcb1085b237f977e39d31a7e733af7d3dfbddc867acfa8372753bba5dff033c86b910e112677cb54adbb607057de64a44220d32d652172021ff69796f113547b92660019308fa472b44dc36581732f5764060a84f45500091542a384746c32e5b295616c89c0b635f9d76dc4c5b03dfe5c25c68342908d82333e5b914222c6931b9564eec8afcfec1dd6ae30646b71d833d9efd6523f3daacadd5b45a14e78c153061fd444a4f93f0de1ca8857965ef480812c8f0f8b6829f9160fe30eb8974c7b6d4022ebd874e96da5a32fc67917a477a22b18491859efac0ae726cb2b9e8a7caa3541a20e09b0f20ce73550b8ef149e84eed1101ce9e4265aac42f7e6b1d8df97274008b47c8d7cc2e42794acd13ba45063f12f477e9f247faece07a444dbe6e8fd1a1a939198a6819eb8da9e48330acdc5a85318d3b4b23628d29cb63684c97af5bf17ce4ef3e61f1535980c41d0d6302b3c2197de6eb2164743b15289ced2465897c2f67d77643f2cc82a0ec4f6f67ae1cbe9ad1669fa95fa031aeaf33ac9a2d8175656889f969e95097f5e7cd6ed13e06e67c2fab906ec785663146eefae1cf2c6ff93b2cbf02779d906eed668c4236e69540304c4759e5db9d4e5dd106a2351630bd6bab9c54bc4182e0d3afa1e8feaeca75926ba355e4c3d2766079579635be29c991b21177874af033e0f72f8f7820054a4e764e1abe00b8364e4f39e07e8aa0c235fa4c220ea9ea1993695a5e3061a71673a51235af7f6ec40069f0b2b5dc24c5f0d7508bc547e9a979a0b87b154fd75e1703fb6f6ddaf5602bb71408426041e9628b96aae7f75b599e3195849899c37bd50c6995608b74174c24e91de9b5ebbb9160841dc94ba8eb926697cbedcd3577b3d94cb2fe50cc86dc73098048c1833a4f1b4255b0651d17f9f355b9cd03d38d858a8962e25861cd3da1f4ced3d10fe0c45aef6ca41f9d9827bc2e5b8a1e71bff9cc80ea3bbee3539c488fe258ff83a0a48fe9be353136a02e4394620a6a3f39968ede810ed163ae490569f736ea39c67454490e38ea098993e3b7f5949ae11ca43e5fe62be15ed7bff628918cbc6b54dd3f546bc344791d2697574ca86e825645d48bad203e95748e5b1f2e615e1e2f640a7f6d68ace6ff3f47e41363396daa64ea97fffd31f9a392206b5ccf2f6fb7f92724c9e2c2e58352759f63f553620f87a4f1406e1676c6762c2a08f999250a43add898d7d9d6422a066aef5dfba963a584a77e09a9c6ec3950d4269d8f766f903e42669d8bfab0090c20e5dacef211769b3fa4e3d930817f458b0414be7fb77dc3eb7ab63cd926ea4a05f78295eb8cc7af7c53e1e035c63514e194e4064dd997700f73b6bd5fd0a30caf3efe169954074338495f66e0e6d4dbdec1e480cfa8c390f7c8d2a5c64b7cb7d6a7fe1c67687104c210949f1b4f788ec5872103941d486441d783bb504c3d4b385e7722fd9ba1259839466093d7ee2c3a8c62d92bed01e22848eea21f69232f431ddc2bd4b19b085f63303a22477996de19d18c03ff5c75611f49ed65da9ac2b0e37dd57abe2d4841e3c99af834d28b551eed96169709d3c6ffea592f0a2fd08a5b69a1b099b056e28817469ed7ab1bb91fcc81c19a3af50f6cc6f3533f8df2cce97674ed8e738badaf4092ec25681e1562461bb7549c0d45269c3e32ceb215ca239dd83954c4e6594b062b54264bd468eeac6e517ded4bcc459f89ccc82c", @generic="621a7d01b3e4220dc482433b43ac8cf8ff8251e9704999e9af7d7ddad92995abc5b70e54324cf3da21337304ed7086aa790dfd2cc26171662f3137420ca6e94fa593c38ee9c94e7c95670fed94cd2e905dfbc3a12b8be4cd6b7d01c21a828f44f7a213c27ce06437195151686e8d267a0815f24805e416984d39c4b62a318b72b4b3a9a73dbc5c8d01a8c424d0c2533d9fe82a57fd81b3042843b81fcc29d8fd8c6fec5c6c9581e73e80cdbd654effebb987d015a32fc34b34fe46dd1f8f2e1c58392b2585d2f50c9ebf97e560f84e", @typed={0x76, 0x29, 0x0, 0x0, @binary="26153f9b07810ab6a82b3ff88d4eb33c1205a9fadd1dc4bcc3e37d019c7f3125dd6d7e2cb5c4c5ea56d1f60194c9d6ee6676051901f37d5ed88a0d3ff54ac099be334d48639266c7f293c884afed7dc3dffefd20652ea96a446f8c181dc7a917fb5a5e4ef3680940649ac4dc3eb4524765f8"}, @nested={0x4, 0x156}, @generic="430b2da7f74fcae564d443344c64d59df84473c5c64ad65274a936dce09dce2045352596707e634cc7f4ab3769893d45f0b8ad7649d0f10c7f93e04851f402700821cb5f9d84cb7d95bbfa65bc1aa64b06b63ad7b85dee3e95de6f895de9f1eda96cdc168e396c1d0393f3855745c074fda900a95b39889be7f13ff9039a32a810dbcb7193a3582ff77b1f2b6b5ae8caf0256ea0cc403513bf8c390d6c1d3579853886656c5c93d3e4259678c3b4189ae5d49047abf00bec100190c941a603f7e5eb69f14c67fd99eca58b5386e49b6b5dc5d9827e462fd5cad689bbf6aeb113eb88cc82a49933727169cdd56b21a532b7e1157791e2870fa9"]}, @nested={0x2b, 0x8f, 0x0, 0x1, [@generic="3f220701887d307a5f853c0aaff8e1bf147e4d84c0b2273eff32a4092ad41b", @typed={0x8, 0x0, 0x0, 0x0, @u32=0x7}]}, @generic="ac95e42f405d403ad8babb5afb2847573f89d09f987fc6233eaf5661632778677e3429da4aadddea7bdacfa2ccf7c1dbc6587f142375f208d63e50349ce12d4a0e70f1ff705db352037644f774f3e8be286af5fb4d7bb49beba0dae3fca362e38a2611a3eeb2de8d29acca94a6cbb9", @generic="847970f20e368200c3962f5994bea1d3a7c8022dca72d175dee11ca04f612706fb4581044f1d341d95ee7c17b168c57fa3ec687c82aebd3fbd237e139cc19fa98f30af458f66219bcff2a38eab42ea4d5bf67ccc6b4888e31cd97f72ba531946262db51c7673e133148ae2a0bfbccb79def2ec03fd43c1666f01fc1064bfb047a32ddc", @nested={0xc, 0xe1, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @pid}]}, @generic="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"]}, @NL80211_ATTR_VHT_CAPABILITY={0x41, 0x9d, "c733523b9e9dbfad9ff31158d0fd310ce3b5bb7442b3dfb4da63b94f037867103c69315eb10ae170d8648da7f870955b8952a0a82d4710648c87c752d4"}, @NL80211_ATTR_IE_RIC={0x78f, 0xb2, "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"}]}, 0x2bac}, 0x1, 0x0, 0x0, 0xc0}, 0x4048000) r9 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/trace_options\x00', 0x2, 0x0) write$auto(r9, 0x0, 0x6) madvise$auto(0x0, 0x2003f2, 0x15) setsockopt$auto(0xffffffffffffffff, 0x100, 0x5, 0x0, 0x8001) r10 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r10, r10, 0x0, 0x3) 2.962952691s ago: executing program 2 (id=799): unshare$auto(0x40000080) r0 = eventfd$auto(0x1) close_range$auto(r0, r0, 0x3) unshare$auto(0x6b) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x34dcc2, 0x0) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x12080, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x2, 0x73) r2 = socket(0x2, 0x80002, 0x73) bind$auto(r2, 0x0, 0x6b) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') setns(r3, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) select$auto(0x8, &(0x7f0000000180)={[0x8, 0x1d5c, 0x1, 0xa, 0x5, 0x1, 0x9c94, 0xe3e, 0xbfc, 0x248f, 0x5, 0x100000001, 0x180000000, 0x1, 0x9, 0xe0b]}, &(0x7f0000000240)={[0x7, 0x0, 0x7, 0x8000000000000001, 0x0, 0x9c1a, 0x8, 0xfffffffffffffffa, 0x65d, 0x8, 0x100, 0x8000000000000000, 0x4, 0x7, 0x2]}, &(0x7f00000002c0)={[0xffffffffffffff8a, 0x8, 0x6, 0x1, 0x6, 0x1, 0x4, 0x6, 0x7fff, 0x1, 0x5, 0x1, 0x8, 0x7fffffff, 0x860, 0x6]}, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 2.77288913s ago: executing program 0 (id=800): clock_nanosleep$auto(0x200, 0x3, &(0x7f00000002c0)={0x9, 0x1}, &(0x7f0000000300)={0x9, 0x4}) mmap$auto(0x0, 0x40010a, 0x3, 0x9b72, 0xffffffffffffffff, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0xf42c, 0x38) r0 = socket(0xa, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000180)={{&(0x7f0000000040), 0xb8, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x9}, 0x1, 0x8008) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) lseek$auto(r2, 0x8a05, 0x1) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) cachestat$auto(r3, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) bpf$auto_BPF_OBJ_GET(0x7, &(0x7f0000000000)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x0, 0x8, 0xffffffffffffffff, @relative_fd, 0x7}, 0xf) r4 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) copy_file_range$auto(r4, 0x0, r4, 0x0, 0x2, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/nbd14/sched/write2_fifo_list\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), r0) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f00000003c0)={0x494, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x4f}, @NL80211_ATTR_WIPHY_SELF_MANAGED_REG={0x4}, @NL80211_ATTR_SAE_PWE={0x5, 0x12a, 0x20}, @NL80211_ATTR_IE_RIC={0x45f, 0xb2, "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"}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x7}, @NL80211_ATTR_ROAM_SUPPORT={0x4}]}, 0x494}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000003540)='/proc/thread-self/setgroups\x00', 0x2, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) process_madvise$auto(r3, &(0x7f0000000280)={&(0x7f00000001c0)="3b09ee270fc98d46388c44645746b1d768e687cb59e8bd7bdcf0915302364792509e1b22568a7402922895eb9b1ab0aeef56f5f34a4d071f50b1681288ccb21a6bd5e152f7eccece580cfc7a9972e99bad5802d60f5c6ec5800718813b0ac3370794bc27cbaa2c6ba84914ea526702ebe14ebf223599e2443f04b0916129fd1113a69526a07d8320d3e69947acf12e67199de1c9a7ba", 0x4}, 0x1, 0x2, 0x3ff) 2.663698063s ago: executing program 3 (id=801): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xd4, 0x401, 0x8003) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x2, 0x0) r2 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) io_uring_setup$auto(0x2, 0x0) connect$auto(0x3, 0x0, 0x55) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x240202, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto(r0, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r3, 0x4048aecb, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) 2.156647742s ago: executing program 3 (id=802): r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0ro\x00', 0x0, 0x0) ioctl$auto_BLKPG2(r0, 0x1269, 0x0) 1.919844986s ago: executing program 3 (id=803): mmap$auto(0x9, 0x2020009, 0x3, 0x11, 0xfffffffffffffffa, 0x6) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0xe, 0x802b95}, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x801, 0x84) r1 = getsockopt$auto(r0, 0x84, 0x82, 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/syz_tun/bc_forwarding\x00', 0xc2841, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) sendmsg$auto_NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000b00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x54, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_NAME={0x33, 0x2, '/sys/devices/platform/vidtv.0/i2c-0/new_device\x00'}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_BEACON_HEAD={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000020}, 0x4000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vidtv.0/i2c-0/new_device\x00', 0x4a001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000180)="12b3557dc0c32d7b7e2099c6", 0xc) read$auto(r3, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) 868.466421ms ago: executing program 1 (id=804): r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x2a082, 0x0) mmap$auto(0x4000000000000, 0x2020009, 0x4000003, 0xeb1, r0, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/vlan1/accept_ra_mtu\x00', 0x20400, 0x0) read$auto(r1, 0x0, 0x1ff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) unshare$auto(0x40000080) rt_sigqueueinfo$auto(0x0, 0x20000009, 0x0) shmget$auto(0x8, 0x10569, 0x4fce) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) syz_clone3(&(0x7f0000000300)={0x1100, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) 347.523786ms ago: executing program 1 (id=805): pread64$auto(0xffffffffffffffff, 0x0, 0xf42c, 0x38) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x501401, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async, rerun: 64) unshare$auto(0x40000080) (async, rerun: 64) mmap$auto(0x7ffffffffffffffb, 0x810004, 0xf3, 0x8000000008011, 0x3, 0x81000000) r1 = openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) (async) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b, 0x0) (async) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000840)="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", 0x75) (async) ioctl$auto_VHOST_SET_MEM_TABLE(r2, 0x4008af83, 0x0) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) (async) r4 = socket(0x2, 0x1, 0x106) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@generic={0x10, "26300628afe90504fc2bbe91f2eb"}, 0x6a) (async) connect$auto(0x3, 0x0, 0x54) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280), 0x1) io_uring_enter$auto(0xffffffffffffffff, 0x9, 0x820e, 0x8b, 0x0, 0x18) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) (async, rerun: 64) r6 = epoll_create$auto(0x0) epoll_ctl$auto(r6, 0x1, r5, 0x0) (async) syz_clone3(&(0x7f00000006c0)={0xa8208000, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x1a}, &(0x7f0000000740)=""/240, 0xf0, &(0x7f0000000240)=""/72, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r6}}, 0x58) (async, rerun: 32) r7 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), r6) (async, rerun: 32) r8 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmsg$auto_IEEE802154_ASSOCIATE_RESP(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYRES64=r3, @ANYRES16=r7, @ANYBLOB="020026bd7000000000001300000006000e00fdff000016001f002f64650000050025000f000000050025000300000005002000000000e5c5131c84c2b2e0da13c4f7f7ea197372a19f0aa7c0b918d9947a3b8cbf3533bdf77dd8af5125d09bad815797e509b036a465ea43fee61098e30d3f2033791de55136676707956cb4cf631e1a27bfb37d1910d0147187410ed040c2c21a9a8535deb4d2776834c1fff864f8734e5cb3527bcac365effbeab307c52020c763cba5ed9e0074fbf11ea3c6a49db75804ccd14285d7046600000000000000000000000000000079dfae02f7a9bb004212b2b2", @ANYRES8=r8], 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x41000) (async) sendmsg$auto_IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYRES16=r7, @ANYBLOB="080028bd7000ffdbdf252e00000014003000403c6e0aa04e9bf01e190591b3a542e7"], 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 249.841123ms ago: executing program 2 (id=806): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, &(0x7f0000000040)=0x3f80000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101202, 0x0) r1 = syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f00000004c0)=0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200), {0x43}, &(0x7f0000000280)=""/147, 0x93, &(0x7f0000000340)=""/158, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) ioctl$auto_XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f0000000580)={r2, 0x0, 0x8, 0x4, 0x5, 0xffffffffffffffff, [0x3, 0x0, 0xb0ed, 0x7f, 0x4, 0x9ad]}) fcntl$auto(r0, 0xb, r1) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x5, 0x202000c, 0x5, 0x8000000000000011, 0xfffffffffffffffa, 0x7ffc) r3 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x60000080) unshare$auto(0x40000080) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0x8fea, 0x400000000018) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) rseq$auto(0x0, 0x20, 0x0, 0xe) msync$auto(0x110c230000, 0x200001, 0x6) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0xca940, 0x0) mq_timedsend$auto(r3, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, &(0x7f0000000180), 0x44101, 0x0) ioctl$auto_MON_IOCQ_RING_SIZE(r3, 0x9205, 0x0) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0x7ffff000) sysfs$auto(0x2, 0x3b, 0x0) sendfile$auto(r0, r0, 0x0, 0x8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400000000005) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) mmap$auto(0x0, 0x5, 0x6, 0xeb1, 0xffffffffffffffff, 0xd22400000) 165.914118ms ago: executing program 0 (id=807): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/010/001\x00', 0x80d00, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/virtio/drivers/virtio_snd/bind\x00', 0x48c002, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000080), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x8, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x0, 0x0) unshare$auto(0x5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x80, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) getpid() set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x24) close_range$auto(0x2, 0x8, 0x0) socket(0x25, 0xa, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) 0s ago: executing program 3 (id=808): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/010/001\x00', 0x80d00, 0x0) mmap$auto(0x0, 0xb, 0x6, 0xeb1, 0x3ff, 0x8000) close_range$auto(0x2, 0x8, 0x0) mincore$auto(0x0, 0x1, 0x0) setsockopt$auto(0xffffffffffffffff, 0x10000000084, 0x6, 0x0, 0x0) unshare$auto(0x6b) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sda\x00', 0x34dcc2, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x12080, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyy7/power/runtime_suspended_time\x00', 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x2, 0x73) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x6a) ptrace$auto(0x4, 0xffffffffffffffff, 0x8000000000000000, 0xfff) bind$auto(0xffffffffffffffff, 0x0, 0x6b) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') setns(r1, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) select$auto(0x8, &(0x7f0000000180)={[0x8, 0x1d5c, 0x1, 0xa, 0x5, 0x1, 0x9c94, 0xe3e, 0xbfc, 0x248f, 0x5, 0x100000001, 0x180000000, 0x1, 0x9, 0xe0b]}, 0x0, &(0x7f00000002c0)={[0xffffffffffffff8a, 0x8, 0x6, 0x1, 0x6, 0x1, 0x4, 0x6, 0x7fff, 0x1, 0x5, 0x1, 0x8, 0x7fffffff, 0x860, 0x6]}, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.157' (ED25519) to the list of known hosts. [ 92.499221][ T5618] cgroup: Unknown subsys name 'net' [ 92.588968][ T5618] cgroup: Unknown subsys name 'cpuset' [ 92.598457][ T5618] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.394300][ T5618] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.608413][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.621930][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.633833][ T5638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.642726][ T5638] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.652970][ T5638] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.654059][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.670712][ T5636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.687533][ T5636] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.700517][ T5636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.708413][ T5636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.746553][ T4946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.757190][ T4946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.765333][ T5638] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.767537][ T4946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.782175][ T5638] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.784997][ T4946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.796674][ T4946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.804621][ T5638] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.814430][ T5638] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.826056][ T5638] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.230141][ T29] cfg80211: failed to load regulatory.db [ 98.562707][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.570153][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.577553][ T5631] bridge_slave_0: entered allmulticast mode [ 98.585410][ T5631] bridge_slave_0: entered promiscuous mode [ 98.606128][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.613287][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.621174][ T5631] bridge_slave_1: entered allmulticast mode [ 98.628745][ T5631] bridge_slave_1: entered promiscuous mode [ 98.646978][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.654182][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.661536][ T5629] bridge_slave_0: entered allmulticast mode [ 98.669174][ T5629] bridge_slave_0: entered promiscuous mode [ 98.677939][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.685422][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.692656][ T5629] bridge_slave_1: entered allmulticast mode [ 98.700585][ T5629] bridge_slave_1: entered promiscuous mode [ 98.725653][ T5638] Bluetooth: hci0: command tx timeout [ 98.804947][ T5638] Bluetooth: hci1: command tx timeout [ 98.807471][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.831149][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.850323][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.870928][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.884722][ T5636] Bluetooth: hci2: command tx timeout [ 98.891073][ T5638] Bluetooth: hci3: command tx timeout [ 98.984189][ T5629] team0: Port device team_slave_0 added [ 98.990134][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.997626][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.004961][ T5639] bridge_slave_0: entered allmulticast mode [ 99.012563][ T5639] bridge_slave_0: entered promiscuous mode [ 99.022967][ T5631] team0: Port device team_slave_0 added [ 99.028853][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.036265][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.043504][ T5634] bridge_slave_0: entered allmulticast mode [ 99.051986][ T5634] bridge_slave_0: entered promiscuous mode [ 99.063030][ T5629] team0: Port device team_slave_1 added [ 99.069152][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.077219][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.084595][ T5639] bridge_slave_1: entered allmulticast mode [ 99.092085][ T5639] bridge_slave_1: entered promiscuous mode [ 99.101309][ T5631] team0: Port device team_slave_1 added [ 99.112198][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.119440][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.127302][ T5634] bridge_slave_1: entered allmulticast mode [ 99.136003][ T5634] bridge_slave_1: entered promiscuous mode [ 99.262222][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.273775][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.281935][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.308533][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.326407][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.337661][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.345110][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.379847][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.396387][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.407851][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.414919][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.441609][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.464036][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.473995][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.481400][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.507770][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.545398][ T5634] team0: Port device team_slave_0 added [ 99.585770][ T5639] team0: Port device team_slave_0 added [ 99.594900][ T5634] team0: Port device team_slave_1 added [ 99.627297][ T5639] team0: Port device team_slave_1 added [ 99.682045][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.689222][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.715243][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.746885][ T5629] hsr_slave_0: entered promiscuous mode [ 99.753672][ T5629] hsr_slave_1: entered promiscuous mode [ 99.773204][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.780335][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.806749][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.824643][ T5631] hsr_slave_0: entered promiscuous mode [ 99.831215][ T5631] hsr_slave_1: entered promiscuous mode [ 99.837790][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 99.843631][ T5631] Cannot create hsr debugfs directory [ 99.852702][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.859824][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.885808][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.920564][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.928001][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.954635][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.091761][ T5634] hsr_slave_0: entered promiscuous mode [ 100.098728][ T5634] hsr_slave_1: entered promiscuous mode [ 100.105312][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 100.111107][ T5634] Cannot create hsr debugfs directory [ 100.200814][ T5639] hsr_slave_0: entered promiscuous mode [ 100.207398][ T5639] hsr_slave_1: entered promiscuous mode [ 100.213592][ T5639] debugfs: 'hsr0' already exists in 'hsr' [ 100.219558][ T5639] Cannot create hsr debugfs directory [ 100.604389][ T5631] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.619797][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.638230][ T5631] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.650182][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.658675][ T5631] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.670727][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.684125][ T5631] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.696994][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.800460][ T5629] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.807476][ T5638] Bluetooth: hci0: command tx timeout [ 100.824151][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.843147][ T5629] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.854236][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.877241][ T5629] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.885261][ T5638] Bluetooth: hci1: command tx timeout [ 100.894878][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.920457][ T5629] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.932319][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.964628][ T5636] Bluetooth: hci2: command tx timeout [ 100.970368][ T5638] Bluetooth: hci3: command tx timeout [ 101.020463][ T5634] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.032412][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.042483][ T5634] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.054175][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.062331][ T5634] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.075378][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.083472][ T5634] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.093493][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.217545][ T5639] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.232127][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.241014][ T5639] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.252761][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.262242][ T5639] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.272707][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.281804][ T5639] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.292418][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.314132][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.379609][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.415003][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.422717][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.470225][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.477468][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.562130][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.580016][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.638834][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.647796][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.692645][ T3276] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.699935][ T3276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.716128][ T3276] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.723386][ T3276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.759682][ T3276] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.766950][ T3276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.784314][ T3276] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.791588][ T3276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.889161][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.971501][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.008846][ T3264] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.016110][ T3264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.054081][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.061817][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.757250][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.884832][ T5638] Bluetooth: hci0: command tx timeout [ 102.922823][ T5631] veth0_vlan: entered promiscuous mode [ 102.945120][ T5631] veth1_vlan: entered promiscuous mode [ 102.964924][ T5638] Bluetooth: hci1: command tx timeout [ 103.038795][ T5631] veth0_macvtap: entered promiscuous mode [ 103.056811][ T5638] Bluetooth: hci3: command tx timeout [ 103.062457][ T5636] Bluetooth: hci2: command tx timeout [ 103.096368][ T5631] veth1_macvtap: entered promiscuous mode [ 103.168698][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.203576][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.256308][ T3264] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.326816][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.375449][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.416824][ T3276] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.461980][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.483711][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.600665][ T3276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.620004][ T3276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.657189][ T5629] veth0_vlan: entered promiscuous mode [ 103.716702][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.732597][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.740924][ T5629] veth1_vlan: entered promiscuous mode [ 103.762938][ T5634] veth0_vlan: entered promiscuous mode [ 103.776706][ T5639] veth0_vlan: entered promiscuous mode [ 103.804582][ T1022] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.819196][ T5634] veth1_vlan: entered promiscuous mode [ 103.839884][ T5639] veth1_vlan: entered promiscuous mode [ 103.878956][ T5631] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 103.929984][ T5629] veth0_macvtap: entered promiscuous mode [ 103.962388][ T5629] veth1_macvtap: entered promiscuous mode [ 104.030845][ T5634] veth0_macvtap: entered promiscuous mode [ 104.047678][ T5639] veth0_macvtap: entered promiscuous mode [ 104.080345][ T5639] veth1_macvtap: entered promiscuous mode [ 104.096451][ T5634] veth1_macvtap: entered promiscuous mode [ 104.107952][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.156557][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.303788][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.365253][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.415821][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.587102][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.687403][ T1022] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.726760][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.967329][ T5636] Bluetooth: hci0: command tx timeout [ 105.018166][ T3276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.029529][ T3276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.044828][ T5636] Bluetooth: hci1: command tx timeout [ 105.124748][ T5638] Bluetooth: hci3: command tx timeout [ 105.130706][ T5636] Bluetooth: hci2: command tx timeout [ 105.232024][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.240127][ T3264] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.242632][ T3264] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.264263][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.368175][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.376402][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.414573][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.427070][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.537387][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.547888][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.585529][ T1022] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.615008][ T1022] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.638571][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.658753][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.681013][ T1022] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.740014][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.759179][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.073135][ T5801] Zero length message leads to an empty skb [ 106.176306][ T3264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.185423][ T1022] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.205563][ T3264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.931242][ T5867] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 111.657314][ T5869] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 111.678001][ T5869] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 111.733340][ T5869] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 111.759306][ T5869] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 111.782733][ T5869] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.830077][ T5869] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.869703][ T5869] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 111.898385][ T5869] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 111.933039][ T5869] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 111.969343][ T5869] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 111.996033][ T5869] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 112.023223][ T5869] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 113.044773][ T5636] Bluetooth: hci0: command 0x0c1a tx timeout [ 113.765105][ T5636] Bluetooth: hci1: command 0x0c1a tx timeout [ 113.924759][ T5636] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.014578][ T5636] Bluetooth: hci3: command 0x0c1a tx timeout [ 115.132781][ T5636] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.845763][ T5636] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.004644][ T5636] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.084857][ T5636] Bluetooth: hci3: command 0x0c1a tx timeout [ 117.204623][ T5636] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.924851][ T5636] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.085001][ T5636] Bluetooth: hci2: command 0x0c1a tx timeout [ 118.170539][ T5636] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.489819][ T5975] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 124.008335][ T6056] random: crng reseeded on system resumption [ 124.764027][ T6063] FAULT_INJECTION: forcing a failure. [ 124.764027][ T6063] name failslab, interval 1, probability 0, space 0, times 1 [ 124.777575][ T6063] CPU: 1 UID: 0 PID: 6063 Comm: syz.2.36 Not tainted syzkaller #0 PREEMPT(full) [ 124.777630][ T6063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.777657][ T6063] Call Trace: [ 124.777667][ T6063] [ 124.777679][ T6063] dump_stack_lvl+0x100/0x190 [ 124.777735][ T6063] should_fail_ex.cold+0x5/0xa [ 124.777780][ T6063] should_failslab+0xc2/0x120 [ 124.777828][ T6063] kmem_cache_alloc_noprof+0x91/0x6a0 [ 124.777891][ T6063] ? fasync_helper+0x3d/0xd0 [ 124.777947][ T6063] fasync_helper+0x3d/0xd0 [ 124.777995][ T6063] pipe_fasync+0xc7/0x200 [ 124.778052][ T6063] ? __pfx_pipe_fasync+0x10/0x10 [ 124.778105][ T6063] do_fcntl+0x4b7/0x1670 [ 124.778150][ T6063] ? __pfx_do_fcntl+0x10/0x10 [ 124.778191][ T6063] ? __fget_files+0x215/0x3d0 [ 124.778237][ T6063] ? tomoyo_file_fcntl+0xa5/0xc0 [ 124.778280][ T6063] __x64_sys_fcntl+0x163/0x200 [ 124.778328][ T6063] do_syscall_64+0x115/0x840 [ 124.778372][ T6063] ? clear_bhb_loop+0x40/0x90 [ 124.778413][ T6063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.778447][ T6063] RIP: 0033:0x7f370019e019 [ 124.778482][ T6063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.778515][ T6063] RSP: 002b:00007f37010d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 124.778551][ T6063] RAX: ffffffffffffffda RBX: 00007f3700426270 RCX: 00007f370019e019 [ 124.778573][ T6063] RDX: fffffffffffffffc RSI: 0000000000000004 RDI: ff80000000000000 [ 124.778594][ T6063] RBP: 00007f370023500c R08: 0000000000000000 R09: 0000000000000000 [ 124.778614][ T6063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.778633][ T6063] R13: 00007f3700426308 R14: 00007f3700426270 R15: 00007ffcb479a718 [ 124.778677][ T6063] [ 126.116600][ T6087] sg_write: data in/out 65758/28903 bytes for SCSI command 0x0-- guessing data in; [ 126.116600][ T6087] program syz.1.41 not setting count and/or reply_len properly [ 128.287998][ T30] audit: type=1800 audit(1785662296.456:2): pid=6109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.45" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 129.341316][ T6121] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 130.493081][ T6148] nbd: must specify a device to reconfigure [ 130.659619][ T6153] nbd: must specify a device to reconfigure [ 132.790273][ T6195] sg_write: data in/out 65758/28903 bytes for SCSI command 0x0-- guessing data in; [ 132.790273][ T6195] program syz.3.55 not setting count and/or reply_len properly [ 133.059230][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.067818][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.252778][ T6235] process 'syz.0.60' launched '/dev/fd/4' with NULL argv: empty string added [ 135.656269][ T6239] netlink: 36 bytes leftover after parsing attributes in process `syz.0.61'. [ 136.955171][ T6252] netlink: 28 bytes leftover after parsing attributes in process `syz.1.64'. [ 137.878116][ T6197] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 138.072742][ T6280] Bluetooth: hci2: unexpected event 0x05 length: 8 > 4 [ 139.924634][ T6280] Bluetooth: hci2: command 0x0c1a tx timeout [ 141.442393][ T6330] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 142.009011][ T6280] Bluetooth: hci2: command 0x0c1a tx timeout [ 152.768880][ T6492] netlink: 16 bytes leftover after parsing attributes in process `syz.2.95'. [ 155.570877][ T6539] FAULT_INJECTION: forcing a failure. [ 155.570877][ T6539] name fail_futex, interval 1, probability 0, space 0, times 1 [ 155.584093][ T6539] CPU: 1 UID: 0 PID: 6539 Comm: syz.1.103 Not tainted syzkaller #0 PREEMPT(full) [ 155.584136][ T6539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.584154][ T6539] Call Trace: [ 155.584164][ T6539] [ 155.584175][ T6539] dump_stack_lvl+0x100/0x190 [ 155.584221][ T6539] should_fail_ex.cold+0x5/0xa [ 155.584260][ T6539] get_futex_key+0x1d2/0x14f0 [ 155.584300][ T6539] ? __pfx_get_futex_key+0x10/0x10 [ 155.584341][ T6539] ? __pfx_futex_hash+0x10/0x10 [ 155.584386][ T6539] futex_wake+0xf4/0x5e0 [ 155.584428][ T6539] ? futex_wait+0x11e/0x370 [ 155.584477][ T6539] ? __pfx_futex_wake+0x10/0x10 [ 155.584526][ T6539] ? find_held_lock+0x2b/0x80 [ 155.584567][ T6539] ? clockevents_program_event+0x23e/0x820 [ 155.584606][ T6539] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 155.584663][ T6539] do_futex+0x2b2/0x440 [ 155.584703][ T6539] ? __pfx_do_futex+0x10/0x10 [ 155.584753][ T6539] __x64_sys_futex+0x34f/0x4d0 [ 155.584798][ T6539] ? __pfx___x64_sys_futex+0x10/0x10 [ 155.584852][ T6539] do_syscall_64+0x115/0x840 [ 155.584896][ T6539] ? clear_bhb_loop+0x40/0x90 [ 155.584940][ T6539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.584976][ T6539] RIP: 0033:0x7f8df1b9e019 [ 155.585003][ T6539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.585035][ T6539] RSP: 002b:00007f8df2b000e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 155.585067][ T6539] RAX: ffffffffffffffda RBX: 00007f8df1e25fa8 RCX: 00007f8df1b9e019 [ 155.585089][ T6539] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8df1e25fac [ 155.585111][ T6539] RBP: 00007f8df1e25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 155.585130][ T6539] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 155.585150][ T6539] R13: 00007f8df1e26038 R14: 00007ffee94d7850 R15: 00007ffee94d7938 [ 155.585193][ T6539] [ 157.434256][ T6550] netlink: 28 bytes leftover after parsing attributes in process `syz.1.104'. [ 157.450454][ T6553] FAULT_INJECTION: forcing a failure. [ 157.450454][ T6553] name failslab, interval 1, probability 0, space 0, times 0 [ 157.467230][ T6553] CPU: 0 UID: 0 PID: 6553 Comm: syz.2.105 Not tainted syzkaller #0 PREEMPT(full) [ 157.467274][ T6553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.467293][ T6553] Call Trace: [ 157.467304][ T6553] [ 157.467318][ T6553] dump_stack_lvl+0x100/0x190 [ 157.467363][ T6553] should_fail_ex.cold+0x5/0xa [ 157.467403][ T6553] should_failslab+0xc2/0x120 [ 157.467454][ T6553] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 157.467498][ T6553] ? start_dirop+0x79/0xb0 [ 157.467560][ T6553] ? alloc_inode+0x68/0x250 [ 157.467620][ T6553] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 157.467669][ T6553] alloc_inode+0x68/0x250 [ 157.467717][ T6553] new_inode+0x22/0x1c0 [ 157.467768][ T6553] debugfs_create_symlink+0xd1/0x220 [ 157.467823][ T6553] drm_debugfs_clients_add+0x199/0x210 [ 157.467875][ T6553] drm_file_alloc+0x5c6/0xb40 [ 157.467929][ T6553] drm_open_helper+0x1fc/0x540 [ 157.467977][ T6553] drm_open+0x1a0/0x3e0 [ 157.468024][ T6553] ? __pfx_drm_open+0x10/0x10 [ 157.468072][ T6553] drm_stub_open+0x20f/0x380 [ 157.468124][ T6553] ? __pfx_drm_stub_open+0x10/0x10 [ 157.468174][ T6553] chrdev_open+0x234/0x6a0 [ 157.468211][ T6553] ? __pfx_apparmor_file_open+0x10/0x10 [ 157.468254][ T6553] ? __pfx_chrdev_open+0x10/0x10 [ 157.468294][ T6553] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 157.468340][ T6553] do_dentry_open+0x6ab/0x14d0 [ 157.468376][ T6553] ? __pfx_chrdev_open+0x10/0x10 [ 157.468422][ T6553] vfs_open+0x82/0x3f0 [ 157.468473][ T6553] path_openat+0x2873/0x4280 [ 157.468530][ T6553] ? __pfx_path_openat+0x10/0x10 [ 157.468727][ T6553] do_file_open+0x20e/0x430 [ 157.468779][ T6553] ? __pfx_do_file_open+0x10/0x10 [ 157.468859][ T6553] ? alloc_fd+0x471/0x7a0 [ 157.468898][ T6553] ? do_getname+0x191/0x390 [ 157.468948][ T6553] do_sys_openat2+0x10f/0x1e0 [ 157.468993][ T6553] ? __pfx_do_sys_openat2+0x10/0x10 [ 157.469042][ T6553] ? __fget_files+0x21f/0x3d0 [ 157.469082][ T6553] __x64_sys_openat+0x12d/0x210 [ 157.469138][ T6553] ? __pfx___x64_sys_openat+0x10/0x10 [ 157.469225][ T6553] do_syscall_64+0x115/0x840 [ 157.469271][ T6553] ? clear_bhb_loop+0x40/0x90 [ 157.469311][ T6553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.469347][ T6553] RIP: 0033:0x7f370019e019 [ 157.469375][ T6553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.469406][ T6553] RSP: 002b:00007f370113b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 157.469435][ T6553] RAX: ffffffffffffffda RBX: 00007f3700425fa0 RCX: 00007f370019e019 [ 157.469456][ T6553] RDX: 0000000000028900 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 157.469480][ T6553] RBP: 00007f370023500c R08: 0000000000000000 R09: 0000000000000000 [ 157.469501][ T6553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.469523][ T6553] R13: 00007f3700426038 R14: 00007f3700425fa0 R15: 00007ffcb479a718 [ 157.469568][ T6553] [ 157.470264][ T6553] debugfs: out of free dentries, can not create symlink 'device' [ 157.655548][ T6560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.104'. [ 158.181974][ T6560] syz.1.104 (6560) used greatest stack depth: 18944 bytes left [ 161.140798][ T6605] netlink: 25 bytes leftover after parsing attributes in process `syz.1.113'. [ 164.282292][ T6646] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 164.850816][ T6661] usb usb3: usbfs: process 6661 (syz.0.121) did not claim interface 0 before use [ 164.902511][ T6661] nfs4: Unknown parameter '/dev/bus/usb/013/001' [ 166.606028][ T6685] nbd: must specify a device to reconfigure [ 168.642272][ T6708] netlink: 25 bytes leftover after parsing attributes in process `syz.2.128'. [ 168.664948][ T6709] netlink: 16 bytes leftover after parsing attributes in process `syz.0.130'. [ 168.920124][ T6712] aoe: can't write to that file. [ 170.586376][ T6726] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 171.075162][ T6745] usb usb3: usbfs: process 6745 (syz.2.134) did not claim interface 0 before use [ 171.119267][ T6745] nfs4: Unknown parameter '/dev/bus/usb/013/001' [ 173.489795][ T6776] i2c i2c-0: new_device: Can't parse I2C address [ 175.450689][ T6798] netlink: 25 bytes leftover after parsing attributes in process `syz.3.143'. [ 175.829721][ T6801] aoe: can't write to that file. [ 177.275993][ T6814] netlink: 36 bytes leftover after parsing attributes in process `syz.2.145'. [ 179.670551][ T6840] nbd: must specify a device to reconfigure [ 179.719655][ T6859] i2c i2c-0: new_device: Can't parse I2C address [ 181.487152][ T6877] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 183.624749][ T6902] netlink: 504 bytes leftover after parsing attributes in process `syz.2.157'. [ 186.710462][ T6939] i2c i2c-0: new_device: Can't parse I2C address [ 188.850088][ T6994] nbd: must specify a device to reconfigure [ 188.925487][ T6996] netlink: 504 bytes leftover after parsing attributes in process `syz.0.171'. [ 191.069409][ T7033] nbd: must specify a device to reconfigure [ 192.921166][ T7058] i2c i2c-0: new_device: Can't parse I2C address [ 194.490156][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.498739][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.681395][ T7148] aoe: can't write to that file. [ 202.725064][ T7205] i2c i2c-0: new_device: Can't parse I2C address [ 204.538939][ T7221] aoe: can't write to that file. [ 209.021733][ T7298] i2c i2c-0: new_device: Can't parse I2C address [ 209.300444][ T7304] nbd: must specify a device to reconfigure [ 213.946204][ T7373] aoe: can't write to that file. [ 215.422333][ T7390] i2c i2c-0: new_device: Can't parse I2C address [ 215.717764][ T7400] i2c i2c-0: new_device: Can't parse I2C address [ 221.514660][ T7487] i2c i2c-0: new_device: Can't parse I2C address [ 221.586679][ T6197] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 223.577061][ T6280] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 223.685150][ T6197] Bluetooth: hci1: command 0x0c1a tx timeout [ 223.691398][ T6178] Bluetooth: hci3: unexpected event 0x05 length: 8 > 4 [ 225.606210][ T6280] Bluetooth: hci3: command 0x0c1a tx timeout [ 225.767032][ T6280] Bluetooth: hci1: command 0x0c1a tx timeout [ 227.688040][ T6178] Bluetooth: hci3: command 0x0c1a tx timeout [ 227.699013][ T7583] i2c i2c-0: new_device: Can't parse I2C address [ 227.791821][ T7587] i2c i2c-0: new_device: Can't parse I2C address [ 227.958673][ T7591] nbd: must specify a device to reconfigure [ 229.847611][ T7614] aoe: can't write to that file. [ 231.909895][ T7646] aoe: can't write to that file. [ 233.719292][ T6178] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 233.748710][ T7677] i2c i2c-0: new_device: Can't parse I2C address [ 235.470886][ T7698] i2c i2c-0: new_device: Can't parse I2C address [ 235.656936][ T6178] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 235.765128][ T6197] Bluetooth: hci2: command 0x0c1a tx timeout [ 237.684481][ T6197] Bluetooth: hci3: command 0x0c1a tx timeout [ 237.844900][ T7741] aoe: can't write to that file. [ 237.846426][ T6197] Bluetooth: hci2: command 0x0c1a tx timeout [ 237.885854][ T7743] nbd: must specify a device to reconfigure [ 239.463890][ T7766] i2c i2c-0: new_device: Can't parse I2C address [ 239.764594][ T6280] Bluetooth: hci3: command 0x0c1a tx timeout [ 241.226344][ T7800] i2c i2c-0: new_device: Can't parse I2C address [ 242.892601][ T7810] binder: 7809:7810 unknown command 7 [ 242.913537][ T7810] binder: 7809:7810 ioctl c0306201 0 returned -22 [ 247.629844][ T7895] futex_wake_op: syz.0.298 tries to shift op by -2048; fix this program [ 247.639344][ T7895] futex_wake_op: syz.0.298 tries to shift op by -2048; fix this program [ 248.999377][ T6178] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 249.110561][ T6280] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 250.779133][ T6280] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 250.980834][ T7947] nbd: must specify a device to reconfigure [ 251.044539][ T6280] Bluetooth: hci1: command 0x0c1a tx timeout [ 252.584096][ T7969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.310'. [ 252.681413][ T7974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.310'. [ 252.804787][ T6197] Bluetooth: hci3: command 0x0c1a tx timeout [ 253.128490][ T6178] Bluetooth: hci1: command 0x0c1a tx timeout [ 254.773567][ T6178] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 254.781686][ T6178] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 254.795483][ T6178] CPU: 0 UID: 0 PID: 6178 Comm: kworker/u11:0 Not tainted syzkaller #0 PREEMPT(full) [ 254.795541][ T6178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 254.795583][ T6178] Workqueue: hci3 hci_rx_work [ 254.795639][ T6178] Call Trace: [ 254.795651][ T6178] [ 254.795663][ T6178] dump_stack_lvl+0x100/0x190 [ 254.795707][ T6178] sysfs_warn_dup.cold+0x1c/0x28 [ 254.795761][ T6178] sysfs_create_dir_ns+0x24b/0x2b0 [ 254.795816][ T6178] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 254.795867][ T6178] ? find_held_lock+0x2b/0x80 [ 254.795912][ T6178] ? kobject_add_internal+0x25f/0x930 [ 254.795947][ T6178] ? kobject_add_internal+0x25f/0x930 [ 254.795985][ T6178] ? do_raw_spin_unlock+0x145/0x1e0 [ 254.796029][ T6178] kobject_add_internal+0x2c8/0x930 [ 254.796072][ T6178] kobject_add+0x16a/0x1e0 [ 254.796106][ T6178] ? __pfx_kobject_add+0x10/0x10 [ 254.796139][ T6178] ? class_to_subsys+0x10f/0x150 [ 254.796181][ T6178] ? kobject_put+0xb9/0x640 [ 254.796233][ T6178] ? _raw_spin_unlock+0x28/0x50 [ 254.796282][ T6178] device_add+0x294/0x1970 [ 254.796315][ T6178] ? __pfx_dev_set_name+0x10/0x10 [ 254.796355][ T6178] ? __pfx_device_add+0x10/0x10 [ 254.796389][ T6178] ? mgmt_send_event_skb+0x2fb/0x460 [ 254.796446][ T6178] hci_conn_add_sysfs+0x1a3/0x260 [ 254.796508][ T6178] le_conn_complete_evt+0x11eb/0x1f60 [ 254.796567][ T6178] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 254.796609][ T6178] ? __pfx_bt_warn+0x10/0x10 [ 254.796640][ T6178] ? hci_event_packet+0x186/0xcd0 [ 254.796692][ T6178] hci_le_conn_complete_evt+0x23c/0x3a0 [ 254.796740][ T6178] ? skb_pull_data+0x15f/0x1e0 [ 254.796782][ T6178] hci_le_meta_evt+0x34a/0x5f0 [ 254.796829][ T6178] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 254.796881][ T6178] hci_event_packet+0x51c/0xcd0 [ 254.796926][ T6178] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 254.796975][ T6178] ? __pfx_hci_event_packet+0x10/0x10 [ 254.797023][ T6178] ? kcov_remote_start+0x384/0x670 [ 254.797074][ T6178] ? lockdep_hardirqs_on+0x78/0x100 [ 254.797130][ T6178] hci_rx_work+0x451/0xfc0 [ 254.797181][ T6178] process_one_work+0xa23/0x1940 [ 254.797251][ T6178] ? __pfx_process_one_work+0x10/0x10 [ 254.797317][ T6178] ? __pfx_hci_rx_work+0x10/0x10 [ 254.797363][ T6178] worker_thread+0x5ef/0xe50 [ 254.797431][ T6178] ? kthread+0x13a/0x450 [ 254.797476][ T6178] ? __pfx_worker_thread+0x10/0x10 [ 254.797533][ T6178] kthread+0x370/0x450 [ 254.797578][ T6178] ? __pfx_kthread+0x10/0x10 [ 254.797628][ T6178] ret_from_fork+0x72b/0xd50 [ 254.797674][ T6178] ? __pfx_ret_from_fork+0x10/0x10 [ 254.797720][ T6178] ? __switch_to+0x800/0x10f0 [ 254.797774][ T6178] ? __switch_to_asm+0x39/0x70 [ 254.797822][ T6178] ? __pfx_kthread+0x10/0x10 [ 254.797872][ T6178] ret_from_fork_asm+0x1a/0x30 [ 254.797941][ T6178] [ 254.798251][ T6178] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 255.103417][ T6178] Bluetooth: hci3: failed to register connection device [ 255.141326][ T6178] Bluetooth: hci3: command 0x0c1a tx timeout [ 255.247232][ T6178] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 255.368421][ T8010] nbd: must specify a device to reconfigure [ 255.933817][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.943051][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.721246][ T8020] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5639] was attempted by ""[8020] [ 257.204937][ T6178] Bluetooth: hci3: command 0x0c1a tx timeout [ 257.477210][ T8043] nbd: must specify a device to reconfigure [ 259.285074][ T6280] Bluetooth: hci3: command 0x0c1a tx timeout [ 263.030446][ T6280] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 263.143075][ T6280] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 263.400052][ T8113] nbd: must specify a device to reconfigure [ 265.044744][ T6178] Bluetooth: hci1: command 0x0c1a tx timeout [ 267.127526][ T6280] Bluetooth: hci1: command 0x0c1a tx timeout [ 267.742596][ T6178] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 269.774753][ T6178] Bluetooth: hci1: command 0x0c1a tx timeout [ 271.844589][ T6280] Bluetooth: hci1: command 0x0c1a tx timeout [ 273.750372][ T8260] aoe: can't write to that file. [ 273.888882][ T30] audit: type=1800 audit(1785662442.056:3): pid=8258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.356" name="dbroot" dev="configfs" ino=37199 res=0 errno=0 [ 275.846873][ T8295] nbd: must specify a device to reconfigure [ 277.722068][ T6280] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 277.837810][ T6280] Bluetooth: hci2: unexpected event 0x04 length: 8 < 10 [ 279.766737][ T6178] Bluetooth: hci2: command 0x0c1a tx timeout [ 281.844504][ T6280] Bluetooth: hci2: command 0x0c1a tx timeout [ 283.716569][ T6280] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 283.843273][ T6280] Bluetooth: hci3: unexpected event 0x04 length: 8 < 10 [ 283.916703][ T6280] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 284.040182][ T6280] Bluetooth: hci0: unexpected event 0x04 length: 8 < 10 [ 285.564294][ T30] audit: type=1800 audit(1785662453.726:4): pid=8429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.374" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 285.764711][ T6178] Bluetooth: hci3: command 0x0c1a tx timeout [ 286.006551][ T6197] Bluetooth: hci0: command 0x0c1a tx timeout [ 287.844808][ T6197] Bluetooth: hci3: command 0x0c1a tx timeout [ 288.086970][ T6280] Bluetooth: hci0: command 0x0c1a tx timeout [ 288.272068][ T8476] FAULT_INJECTION: forcing a failure. [ 288.272068][ T8476] name fail_futex, interval 1, probability 0, space 0, times 0 [ 288.322653][ T8476] CPU: 1 UID: 0 PID: 8476 Comm: syz.1.381 Tainted: G L syzkaller #0 PREEMPT(full) [ 288.322708][ T8476] Tainted: [L]=SOFTLOCKUP [ 288.322721][ T8476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 288.322749][ T8476] Call Trace: [ 288.322760][ T8476] [ 288.322773][ T8476] dump_stack_lvl+0x100/0x190 [ 288.322820][ T8476] should_fail_ex.cold+0x5/0xa [ 288.322861][ T8476] get_futex_key+0x1d2/0x14f0 [ 288.322901][ T8476] ? __pfx_get_futex_key+0x10/0x10 [ 288.322936][ T8476] ? destroy_inode+0x139/0x1c0 [ 288.322980][ T8476] ? evict+0x599/0xad0 [ 288.323029][ T8476] futex_wake+0xf4/0x5e0 [ 288.323080][ T8476] ? __pfx_futex_wake+0x10/0x10 [ 288.323149][ T8476] do_futex+0x2b2/0x440 [ 288.323195][ T8476] ? __pfx_do_futex+0x10/0x10 [ 288.323231][ T8476] ? __sys_socketpair+0x493/0x5b0 [ 288.323277][ T8476] ? do_raw_spin_unlock+0x145/0x1e0 [ 288.323320][ T8476] __x64_sys_futex+0x34f/0x4d0 [ 288.323358][ T8476] ? __sys_socket+0xac/0x260 [ 288.323396][ T8476] ? __pfx___x64_sys_futex+0x10/0x10 [ 288.323452][ T8476] do_syscall_64+0x115/0x840 [ 288.323499][ T8476] ? clear_bhb_loop+0x40/0x90 [ 288.323542][ T8476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.323579][ T8476] RIP: 0033:0x7f8df1b9e019 [ 288.323607][ T8476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.323641][ T8476] RSP: 002b:00007f8df2adf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 288.323674][ T8476] RAX: ffffffffffffffda RBX: 00007f8df1e26098 RCX: 00007f8df1b9e019 [ 288.323697][ T8476] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8df1e2609c [ 288.323717][ T8476] RBP: 00007f8df1e26090 R08: 0000000000000001 R09: 0000000000000000 [ 288.323747][ T8476] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 288.323768][ T8476] R13: 00007f8df1e26128 R14: 00007ffee94d7850 R15: 00007ffee94d7938 [ 288.323813][ T8476] [ 289.013498][ T6178] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 289.126106][ T6280] Bluetooth: hci0: unexpected event 0x04 length: 8 < 10 [ 290.786763][ T30] audit: type=1800 audit(1785662458.946:5): pid=8519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.387" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 291.045933][ T6178] Bluetooth: hci0: command 0x0c1a tx timeout [ 293.124890][ T6178] Bluetooth: hci0: command 0x0c1a tx timeout [ 298.447786][ T6280] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 298.554985][ T6178] Bluetooth: hci0: unexpected event 0x04 length: 8 < 10 [ 300.484758][ T6178] Bluetooth: hci0: command 0x0c1a tx timeout [ 302.564732][ T6178] Bluetooth: hci0: command 0x0c1a tx timeout [ 303.548081][ T8719] netlink: 334 bytes leftover after parsing attributes in process `syz.2.418'. [ 308.368946][ T8803] i2c i2c-0: new_device: Can't parse I2C address [ 308.430565][ T8806] FAULT_INJECTION: forcing a failure. [ 308.430565][ T8806] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 308.477975][ T8806] CPU: 0 UID: 0 PID: 8806 Comm: syz.0.432 Tainted: G L syzkaller #0 PREEMPT(full) [ 308.478022][ T8806] Tainted: [L]=SOFTLOCKUP [ 308.478033][ T8806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 308.478049][ T8806] Call Trace: [ 308.478058][ T8806] [ 308.478069][ T8806] dump_stack_lvl+0x100/0x190 [ 308.478110][ T8806] should_fail_ex.cold+0x5/0xa [ 308.478146][ T8806] _copy_to_user+0x32/0xd0 [ 308.478199][ T8806] keyctl_capabilities+0x5a/0x160 [ 308.478242][ T8806] __do_sys_keyctl+0x427/0x5a0 [ 308.478282][ T8806] do_syscall_64+0x115/0x840 [ 308.478334][ T8806] ? clear_bhb_loop+0x40/0x90 [ 308.478375][ T8806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.478412][ T8806] RIP: 0033:0x7fa0a479e019 [ 308.478438][ T8806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.478469][ T8806] RSP: 002b:00007fa0a2972028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 308.478500][ T8806] RAX: ffffffffffffffda RBX: 00007fa0a4a26360 RCX: 00007fa0a479e019 [ 308.478521][ T8806] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 308.478540][ T8806] RBP: 00007fa0a2972090 R08: 00000000000003ff R09: 0000000000000000 [ 308.478559][ T8806] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 308.478583][ T8806] R13: 00007fa0a4a263f8 R14: 00007fa0a4a26360 R15: 00007ffc7d620288 [ 308.478624][ T8806] [ 314.651494][ T8906] i2c i2c-0: new_device: Can't parse I2C address [ 316.320546][ T8917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.450'. [ 316.439907][ T8917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.450'. [ 317.368379][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.376016][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.900397][ T30] audit: type=1800 audit(1785728025.065:6): pid=8981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.459" name="dbroot" dev="configfs" ino=44873 res=0 errno=0 [ 321.948502][ T9006] netlink: zone id is out of range [ 321.961343][ T9006] netlink: zone id is out of range [ 321.972355][ T9006] netlink: zone id is out of range [ 321.984193][ T9006] netlink: zone id is out of range [ 322.010796][ T9006] netlink: zone id is out of range [ 322.029346][ T9006] netlink: zone id is out of range [ 322.034825][ T9006] netlink: zone id is out of range [ 322.040016][ T9006] netlink: zone id is out of range [ 322.045268][ T9006] netlink: zone id is out of range [ 322.050456][ T9006] netlink: zone id is out of range [ 324.709557][ T6280] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 324.803619][ T6280] Bluetooth: hci2: unexpected event 0x04 length: 8 < 10 [ 324.815928][ T9047] aoe: can't write to that file. [ 326.725124][ T6178] Bluetooth: hci2: command 0x0c1a tx timeout [ 326.839564][ T9084] FAULT_INJECTION: forcing a failure. [ 326.839564][ T9084] name failslab, interval 1, probability 0, space 0, times 0 [ 326.854313][ T9084] CPU: 1 UID: 0 PID: 9084 Comm: syz.0.474 Tainted: G L syzkaller #0 PREEMPT(full) [ 326.854366][ T9084] Tainted: [L]=SOFTLOCKUP [ 326.854377][ T9084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 326.854403][ T9084] Call Trace: [ 326.854413][ T9084] [ 326.854425][ T9084] dump_stack_lvl+0x100/0x190 [ 326.854467][ T9084] should_fail_ex.cold+0x5/0xa [ 326.854506][ T9084] should_failslab+0xc2/0x120 [ 326.854554][ T9084] kmem_cache_alloc_noprof+0x91/0x6a0 [ 326.854599][ T9084] ? create_new_namespaces+0x30/0xac0 [ 326.854643][ T9084] create_new_namespaces+0x30/0xac0 [ 326.854678][ T9084] ? bpf_lsm_capable+0x9/0x10 [ 326.854714][ T9084] ? security_capable+0x80/0x260 [ 326.854755][ T9084] unshare_nsproxy_namespaces+0xf2/0x220 [ 326.854795][ T9084] ksys_unshare+0x438/0xab0 [ 326.854841][ T9084] ? __pfx_ksys_unshare+0x10/0x10 [ 326.854898][ T9084] __x64_sys_unshare+0x31/0x40 [ 326.854941][ T9084] do_syscall_64+0x115/0x840 [ 326.854985][ T9084] ? clear_bhb_loop+0x40/0x90 [ 326.855025][ T9084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.855060][ T9084] RIP: 0033:0x7fa0a479e019 [ 326.855087][ T9084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.855117][ T9084] RSP: 002b:00007fa0a29f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 326.855147][ T9084] RAX: ffffffffffffffda RBX: 00007fa0a4a25fa0 RCX: 00007fa0a479e019 [ 326.855168][ T9084] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 326.855188][ T9084] RBP: 00007fa0a483500c R08: 0000000000000000 R09: 0000000000000000 [ 326.855208][ T9084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.855227][ T9084] R13: 00007fa0a4a26038 R14: 00007fa0a4a25fa0 R15: 00007ffc7d620288 [ 326.855268][ T9084] [ 327.670850][ T9093] netlink: 'syz.0.475': attribute type 2 has an invalid length. [ 328.621592][ T9117] aoe: can't write to that file. [ 328.805036][ T6280] Bluetooth: hci2: command 0x0c1a tx timeout [ 333.355848][ T9184] aoe: can't write to that file. [ 333.404141][ T30] audit: type=1800 audit(1785728038.565:7): pid=9191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.487" name="features" dev="configfs" ino=48137 res=0 errno=0 [ 334.767868][ T9200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.493'. [ 335.543337][ T9223] ACPI: Can not change Invalid GPE/Fixed Event status [ 336.074202][ T9228] ACPI: Can not change Invalid GPE/Fixed Event status [ 340.676452][ T6280] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 340.792798][ T6178] Bluetooth: hci2: unexpected event 0x04 length: 8 < 10 [ 342.576834][ T9315] ima: policy update failed [ 342.595790][ T30] audit: type=1802 audit(1785728047.765:8): pid=9315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.511" res=0 errno=0 [ 342.724712][ T6178] Bluetooth: hci2: command 0x0c1a tx timeout [ 344.804634][ T6280] Bluetooth: hci2: command 0x0c1a tx timeout [ 348.471629][ T9393] FAULT_INJECTION: forcing a failure. [ 348.471629][ T9393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.490369][ T9393] CPU: 1 UID: 0 PID: 9393 Comm: syz.0.522 Tainted: G L syzkaller #0 PREEMPT(full) [ 348.490419][ T9393] Tainted: [L]=SOFTLOCKUP [ 348.490433][ T9393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 348.490461][ T9393] Call Trace: [ 348.490502][ T9393] [ 348.490514][ T9393] dump_stack_lvl+0x100/0x190 [ 348.490652][ T9393] should_fail_ex.cold+0x5/0xa [ 348.490710][ T9393] _copy_from_user+0x2e/0xd0 [ 348.490849][ T9393] __sys_bpf+0x2f5/0x4e80 [ 348.490921][ T9393] ? __pfx___sys_bpf+0x10/0x10 [ 348.490954][ T9393] ? __pfx_futex_hash+0x10/0x10 [ 348.490994][ T9393] ? tomoyo_path_number_perm+0x28f/0x580 [ 348.491104][ T9393] ? futex_wait+0x11e/0x370 [ 348.491148][ T9393] ? __pfx_futex_wait+0x10/0x10 [ 348.491200][ T9393] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 348.491258][ T9393] ? do_vfs_ioctl+0x226/0x13e0 [ 348.491350][ T9393] ? __x64_sys_futex+0x34f/0x4d0 [ 348.491383][ T9393] ? __x64_sys_futex+0x358/0x4d0 [ 348.491425][ T9393] ? xfd_validate_state+0x129/0x190 [ 348.491485][ T9393] ? __x64_sys_bpf+0xce/0x140 [ 348.491520][ T9393] __x64_sys_bpf+0xce/0x140 [ 348.491558][ T9393] ? do_syscall_64+0x90/0x840 [ 348.491696][ T9393] do_syscall_64+0x115/0x840 [ 348.491739][ T9393] ? clear_bhb_loop+0x40/0x90 [ 348.491791][ T9393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.491825][ T9393] RIP: 0033:0x7fa0a479e019 [ 348.491858][ T9393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.491892][ T9393] RSP: 002b:00007fa0a29f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 348.491963][ T9393] RAX: ffffffffffffffda RBX: 00007fa0a4a25fa0 RCX: 00007fa0a479e019 [ 348.491984][ T9393] RDX: 00000000000006f4 RSI: 0000000000000000 RDI: 0000000000000000 [ 348.492003][ T9393] RBP: 00007fa0a483500c R08: 0000000000000000 R09: 0000000000000000 [ 348.492022][ T9393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.492049][ T9393] R13: 00007fa0a4a26038 R14: 00007fa0a4a25fa0 R15: 00007ffc7d620288 [ 348.492089][ T9393] [ 352.346904][ T9453] i2c i2c-0: new_device: Can't parse I2C address [ 353.138820][ T6204] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.229444][ T6280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 353.245382][ T6280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 353.259028][ T6280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 353.276227][ T6280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 353.286880][ T6280] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 353.466581][ T6204] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.888846][ T6204] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.033125][ T6204] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.729010][ T6204] bridge_slave_1: left allmulticast mode [ 354.737422][ T6204] bridge_slave_1: left promiscuous mode [ 354.754889][ T6204] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.796033][ T6204] bridge_slave_0: left allmulticast mode [ 354.801807][ T6204] bridge_slave_0: left promiscuous mode [ 354.809709][ T6204] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.323518][ T6204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.354079][ T6204] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.365609][ T6280] Bluetooth: hci1: command tx timeout [ 355.374988][ T6204] bond0 (unregistering): Released all slaves [ 355.756319][ T5291] 8021q: adding VLAN 0 to HW filter on device eth1 [ 356.197061][ T6204] hsr_slave_0: left promiscuous mode [ 356.208004][ T6204] hsr_slave_1: left promiscuous mode [ 356.214140][ T6204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.222415][ T6204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.233886][ T6204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.243246][ T6204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.269545][ T6204] veth1_macvtap: left promiscuous mode [ 356.278722][ T6204] veth0_macvtap: left promiscuous mode [ 356.284552][ T6204] veth1_vlan: left promiscuous mode [ 356.290121][ T6204] veth0_vlan: left promiscuous mode [ 356.693979][ T6204] team0 (unregistering): Port device team_slave_1 removed [ 356.722623][ T6204] team0 (unregistering): Port device team_slave_0 removed [ 357.070178][ T9457] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.087078][ T9457] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.103121][ T9457] bridge_slave_0: entered allmulticast mode [ 357.115879][ T9457] bridge_slave_0: entered promiscuous mode [ 357.186801][ T9457] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.199469][ T9457] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.212358][ T9457] bridge_slave_1: entered allmulticast mode [ 357.225152][ T9457] bridge_slave_1: entered promiscuous mode [ 357.402291][ T9457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.447649][ T6280] Bluetooth: hci1: command tx timeout [ 357.458935][ T9457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.709619][ T9526] ubi0: attaching mtd0 [ 357.868221][ T9526] ubi0: scanning is finished [ 357.880760][ T9526] ubi0: empty MTD device detected [ 358.154758][ T9457] team0: Port device team_slave_0 added [ 358.345857][ T9457] team0: Port device team_slave_1 added [ 358.407072][ T9526] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 358.435770][ T9526] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 358.456598][ T9526] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 358.476257][ T9526] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 358.495661][ T9526] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 358.537241][ T9526] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 358.548025][ T9526] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2118714775 [ 358.564055][ T9457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.574045][ T9457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.600237][ T9526] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 358.611487][ T9457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.632901][ T9540] ubi0: background thread "ubi_bgt0d" started, PID 9540 [ 358.641442][ T9534] ubi0: detaching mtd0 [ 358.658451][ T5291] 8021q: adding VLAN 0 to HW filter on device eth2 [ 358.707914][ T9457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.716093][ T9534] ubi0: mtd0 is detached [ 358.728280][ T9457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.784504][ T9457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.134907][ T9457] hsr_slave_0: entered promiscuous mode [ 359.141802][ T9457] hsr_slave_1: entered promiscuous mode [ 359.158626][ T9457] debugfs: 'hsr0' already exists in 'hsr' [ 359.170325][ T9457] Cannot create hsr debugfs directory [ 359.524505][ T6280] Bluetooth: hci1: command tx timeout [ 360.935450][ T5291] 8021q: adding VLAN 0 to HW filter on device eth3 [ 361.604958][ T6280] Bluetooth: hci1: command tx timeout [ 362.493934][ T6280] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 362.577999][ T6280] Bluetooth: hci2: unexpected event 0x07 length: 8 < 255 [ 363.247611][ T9457] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 363.261666][ T9457] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 363.274296][ T9457] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 363.321392][ T9457] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 363.426743][ T9457] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 363.452000][ T9457] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 363.485633][ T9457] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 363.502495][ T9457] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 363.857402][ T9457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.918154][ T9457] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.960916][ T6204] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.968216][ T6204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.011886][ T6184] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.019192][ T6184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.566362][ T6178] Bluetooth: hci2: command 0x0c1a tx timeout [ 364.758730][ T6440] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.406670][ T6197] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 365.423573][ T6197] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 365.439960][ T6197] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 365.449580][ T6197] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 365.458311][ T6197] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 365.654159][ T6440] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.062491][ T6440] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.431627][ T6440] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.645798][ T6280] Bluetooth: hci2: command 0x0c1a tx timeout [ 367.047542][ T6440] bridge_slave_1: left allmulticast mode [ 367.065855][ T6440] bridge_slave_1: left promiscuous mode [ 367.104780][ T6440] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.183979][ T6440] bridge_slave_0: left allmulticast mode [ 367.203130][ T6440] bridge_slave_0: left promiscuous mode [ 367.224837][ T6440] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.530705][ T6178] Bluetooth: hci0: command tx timeout [ 367.987599][ T6440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.013314][ T6440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.036818][ T6440] bond0 (unregistering): Released all slaves [ 368.105536][ T5291] 8021q: adding VLAN 0 to HW filter on device eth1 [ 368.580498][ T9457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.855270][ T6440] hsr_slave_0: left promiscuous mode [ 368.876608][ T6440] hsr_slave_1: left promiscuous mode [ 368.892787][ T6440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.917137][ T6440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.935542][ T6440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.947925][ T6440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.967512][ T6440] veth1_macvtap: left promiscuous mode [ 368.973866][ T6440] veth0_macvtap: left promiscuous mode [ 368.982980][ T6440] veth1_vlan: left promiscuous mode [ 368.991288][ T6440] veth0_vlan: left promiscuous mode [ 369.586353][ T6440] team0 (unregistering): Port device team_slave_1 removed [ 369.605176][ T6178] Bluetooth: hci0: command tx timeout [ 369.627533][ T6440] team0 (unregistering): Port device team_slave_0 removed [ 369.848572][ T5291] 8021q: adding VLAN 0 to HW filter on device eth2 [ 370.643193][ T9457] veth0_vlan: entered promiscuous mode [ 371.209209][ T9457] veth1_vlan: entered promiscuous mode [ 371.424828][ T9660] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.433025][ T9660] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.459094][ T9660] bridge_slave_0: entered allmulticast mode [ 371.475710][ T9660] bridge_slave_0: entered promiscuous mode [ 371.501415][ T5291] 8021q: adding VLAN 0 to HW filter on device eth3 [ 371.679736][ T9660] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.685906][ T6178] Bluetooth: hci0: command tx timeout [ 371.696393][ T9660] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.715997][ T9660] bridge_slave_1: entered allmulticast mode [ 371.737987][ T9660] bridge_slave_1: entered promiscuous mode [ 372.021003][ T9660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.197979][ T9660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.536538][ T9660] team0: Port device team_slave_0 added [ 372.787297][ T9660] team0: Port device team_slave_1 added [ 373.284223][ T9660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.291640][ T9660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.322864][ T9660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.417800][ T9660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.426858][ T9660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.454304][ T9660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.491808][ T5291] 8021q: adding VLAN 0 to HW filter on device eth4 [ 373.636023][ T9660] hsr_slave_0: entered promiscuous mode [ 373.651441][ T9660] hsr_slave_1: entered promiscuous mode [ 373.663881][ T9457] veth0_macvtap: entered promiscuous mode [ 373.725270][ T9457] veth1_macvtap: entered promiscuous mode [ 373.764788][ T6178] Bluetooth: hci0: command tx timeout [ 373.885407][ T9457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.998460][ T9457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.319307][ T6184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.437987][ T6177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.446454][ T6192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.477940][ T6177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.530226][ T6440] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.551574][ T6440] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.644912][ T6440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.653590][ T6440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.719560][ T9660] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 376.740782][ T9660] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 377.074867][ T9660] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 377.139349][ T9660] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 377.164005][ T9660] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 377.208940][ T9660] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 377.391161][ T9660] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 377.406350][ T9660] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 378.318795][ T9660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.413323][ T9660] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.481626][ T6185] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.488904][ T6185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.550015][ T6185] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.557307][ T6185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.817365][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.823893][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.217921][ T6178] Bluetooth: hci2: unexpected event 0x05 length: 8 > 4 [ 382.560873][ T9989] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 383.609534][ T9660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.946117][ T9660] veth0_vlan: entered promiscuous mode [ 384.183910][ T9660] veth1_vlan: entered promiscuous mode [ 384.506637][T10031] i2c i2c-0: new_device: Can't parse I2C address [ 385.358236][ T9660] veth0_macvtap: entered promiscuous mode [ 385.377976][ T9660] veth1_macvtap: entered promiscuous mode [ 385.664283][ T9660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.730586][ T9660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.181496][ T6440] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.206724][ T6440] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.217047][ T6440] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.574555][ T6276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.747630][ T6204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.787598][ T6204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.507460][ T6203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.523433][ T6203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.871166][T10131] i2c i2c-0: new_device: Can't parse I2C address [ 403.020068][T10306] FAULT_INJECTION: forcing a failure. [ 403.020068][T10306] name fail_futex, interval 1, probability 0, space 0, times 0 [ 403.033364][T10306] CPU: 0 UID: 0 PID: 10306 Comm: syz.0.608 Tainted: G L syzkaller #0 PREEMPT(full) [ 403.033413][T10306] Tainted: [L]=SOFTLOCKUP [ 403.033425][T10306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 403.033443][T10306] Call Trace: [ 403.033453][T10306] [ 403.033465][T10306] dump_stack_lvl+0x100/0x190 [ 403.033523][T10306] should_fail_ex.cold+0x5/0xa [ 403.033561][T10306] get_futex_key+0x295/0x14f0 [ 403.033600][T10306] ? __pfx_get_futex_key+0x10/0x10 [ 403.033633][T10306] ? lock_acquire+0x1b9/0x370 [ 403.033737][T10306] futex_wake+0xf4/0x5e0 [ 403.033786][T10306] ? __pfx_futex_wake+0x10/0x10 [ 403.033834][T10306] ? find_held_lock+0x2b/0x80 [ 403.033876][T10306] ? exit_mm_release+0x19/0x30 [ 403.033938][T10306] do_futex+0x2b2/0x440 [ 403.033977][T10306] ? __pfx_do_futex+0x10/0x10 [ 403.034011][T10306] ? __might_fault+0xc5/0x140 [ 403.034074][T10306] mm_release+0x24a/0x2f0 [ 403.034111][T10306] do_exit+0x707/0x2ae0 [ 403.034163][T10306] ? __pfx_do_exit+0x10/0x10 [ 403.034209][T10306] ? do_raw_spin_lock+0x128/0x260 [ 403.034243][T10306] ? find_held_lock+0x2b/0x80 [ 403.034282][T10306] ? get_signal+0x7e0/0x21e0 [ 403.034333][T10306] do_group_exit+0xd5/0x2a0 [ 403.034383][T10306] get_signal+0x1ec7/0x21e0 [ 403.034434][T10306] ? __pfx_get_signal+0x10/0x10 [ 403.034472][T10306] ? do_futex+0x190/0x440 [ 403.034521][T10306] arch_do_signal_or_restart+0x91/0x7a0 [ 403.034572][T10306] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 403.034639][T10306] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 403.034696][T10306] exit_to_user_mode_loop+0x139/0x6f0 [ 403.034741][T10306] ? rcu_is_watching+0x12/0xc0 [ 403.034797][T10306] do_syscall_64+0x652/0x840 [ 403.034839][T10306] ? clear_bhb_loop+0x40/0x90 [ 403.034878][T10306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.034911][T10306] RIP: 0033:0x7f4add39e019 [ 403.034937][T10306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.034966][T10306] RSP: 002b:00007f4ade2690e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 403.034996][T10306] RAX: fffffffffffffe00 RBX: 00007f4add625fa8 RCX: 00007f4add39e019 [ 403.035013][T10306] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4add625fa8 [ 403.035031][T10306] RBP: 00007f4add625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 403.035049][T10306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.035067][T10306] R13: 00007f4add626038 R14: 00007ffd4463c340 R15: 00007ffd4463c428 [ 403.035107][T10306] [ 403.579925][ T30] audit: type=1800 audit(1785728108.745:9): pid=10313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.611" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 404.184490][T10329] FAULT_INJECTION: forcing a failure. [ 404.184490][T10329] name failslab, interval 1, probability 0, space 0, times 0 [ 404.197804][T10329] CPU: 1 UID: 0 PID: 10329 Comm: syz.2.614 Tainted: G L syzkaller #0 PREEMPT(full) [ 404.197851][T10329] Tainted: [L]=SOFTLOCKUP [ 404.197863][T10329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 404.197880][T10329] Call Trace: [ 404.197890][T10329] [ 404.197901][T10329] dump_stack_lvl+0x100/0x190 [ 404.197944][T10329] should_fail_ex.cold+0x5/0xa [ 404.197981][T10329] should_failslab+0xc2/0x120 [ 404.198063][T10329] __kmalloc_cache_noprof+0x91/0x6c0 [ 404.198101][T10329] ? usb_control_msg+0xbc/0x4b0 [ 404.198268][T10329] usb_control_msg+0xbc/0x4b0 [ 404.198310][T10329] ? __pfx_usb_control_msg+0x10/0x10 [ 404.198351][T10329] ? __lock_acquire+0x49f/0x1a40 [ 404.198410][T10329] hub_ext_port_status+0x152/0x600 [ 404.198461][T10329] hub_activate+0x6e5/0x1c40 [ 404.198522][T10329] ? __pfx_hub_activate+0x10/0x10 [ 404.198561][T10329] ? find_held_lock+0x2b/0x80 [ 404.198600][T10329] ? psi_trigger_create+0x110/0xc90 [ 404.198644][T10329] ? dec_usb_memory_use_count+0x130/0x410 [ 404.198714][T10329] ? usb_generic_driver_resume+0x70/0xa0 [ 404.198756][T10329] ? hcd_bus_resume+0x37b/0x810 [ 404.198796][T10329] hub_resume+0xb0/0x400 [ 404.198842][T10329] ? __pfx_hub_resume+0x10/0x10 [ 404.198886][T10329] ? __pfx_hcd_bus_resume+0x10/0x10 [ 404.198933][T10329] usb_resume_interface.isra.0+0x2ce/0x3d0 [ 404.198993][T10329] usb_resume_both+0x53a/0x7f0 [ 404.199045][T10329] ? do_dentry_open+0x6ab/0x14d0 [ 404.199078][T10329] ? __pfx_usb_resume_both+0x10/0x10 [ 404.199126][T10329] ? __rpm_callback+0x272/0x620 [ 404.199263][T10329] ? __pfx_usb_runtime_resume+0x10/0x10 [ 404.199293][T10329] ? rcu_is_watching+0x12/0xc0 [ 404.199334][T10329] ? __pfx_usb_runtime_resume+0x10/0x10 [ 404.199367][T10329] __rpm_callback+0xc8/0x620 [ 404.199411][T10329] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 404.199459][T10329] ? __pfx_usb_runtime_resume+0x10/0x10 [ 404.199501][T10329] rpm_callback+0x16a/0x1b0 [ 404.199545][T10329] ? __pfx_usb_runtime_resume+0x10/0x10 [ 404.199578][T10329] rpm_resume+0xd13/0x1320 [ 404.199619][T10329] ? usbdev_open+0x171/0x870 [ 404.199647][T10329] ? klist_put+0xcb/0x1d0 [ 404.199745][T10329] ? __pfx_rpm_resume+0x10/0x10 [ 404.199788][T10329] ? do_raw_spin_lock+0x128/0x260 [ 404.199823][T10329] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 404.199862][T10329] ? _raw_spin_lock_irqsave+0x52/0x60 [ 404.199929][T10329] __pm_runtime_resume+0xb6/0x170 [ 404.199979][T10329] usb_autoresume_device+0x23/0xe0 [ 404.200013][T10329] usbdev_open+0x228/0x870 [ 404.200044][T10329] ? do_raw_spin_lock+0x128/0x260 [ 404.200078][T10329] ? __pfx_usbdev_open+0x10/0x10 [ 404.200106][T10329] ? chrdev_open+0x589/0x6a0 [ 404.200136][T10329] ? chrdev_open+0x589/0x6a0 [ 404.200174][T10329] ? __pfx_usbdev_open+0x10/0x10 [ 404.200204][T10329] chrdev_open+0x234/0x6a0 [ 404.200237][T10329] ? __pfx_chrdev_open+0x10/0x10 [ 404.200273][T10329] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 404.200358][T10329] do_dentry_open+0x6ab/0x14d0 [ 404.200390][T10329] ? __pfx_chrdev_open+0x10/0x10 [ 404.200431][T10329] vfs_open+0x82/0x3f0 [ 404.200483][T10329] path_openat+0x2873/0x4280 [ 404.200534][T10329] ? __pfx_path_openat+0x10/0x10 [ 404.200579][T10329] do_file_open+0x20e/0x430 [ 404.200615][T10329] ? __pfx_do_file_open+0x10/0x10 [ 404.200675][T10329] ? alloc_fd+0x471/0x7a0 [ 404.200709][T10329] ? do_getname+0x191/0x390 [ 404.200751][T10329] do_sys_openat2+0x10f/0x1e0 [ 404.200791][T10329] ? __pfx_do_sys_openat2+0x10/0x10 [ 404.200836][T10329] ? __fget_files+0x21f/0x3d0 [ 404.200873][T10329] __x64_sys_openat+0x12d/0x210 [ 404.200917][T10329] ? __pfx___x64_sys_openat+0x10/0x10 [ 404.200972][T10329] do_syscall_64+0x115/0x840 [ 404.201015][T10329] ? clear_bhb_loop+0x40/0x90 [ 404.201073][T10329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.201107][T10329] RIP: 0033:0x7f0b50b9e019 [ 404.201134][T10329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.201165][T10329] RSP: 002b:00007f0b51adf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 404.201197][T10329] RAX: ffffffffffffffda RBX: 00007f0b50e25fa0 RCX: 00007f0b50b9e019 [ 404.201219][T10329] RDX: 0000000000020882 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 404.201238][T10329] RBP: 00007f0b50c3500c R08: 0000000000000000 R09: 0000000000000000 [ 404.201258][T10329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.201277][T10329] R13: 00007f0b50e26038 R14: 00007f0b50e25fa0 R15: 00007fff62e4fe78 [ 404.201321][T10329] [ 404.202663][T10329] hub 37-0:1.0: hub_ext_port_status failed (err = -12) [ 406.534946][T10349] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 413.246291][T10451] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 413.321084][T10451] netlink: 'syz.1.632': attribute type 11 has an invalid length. [ 417.019284][T10527] aoe: can't write to that file. [ 423.111351][T10616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.657'. [ 423.635977][T10627] netlink: 504 bytes leftover after parsing attributes in process `syz.3.660'. [ 424.378376][T10642] ======================================================= [ 424.378376][T10642] WARNING: The mand mount option has been deprecated and [ 424.378376][T10642] and is ignored by this kernel. Remove the mand [ 424.378376][T10642] option from the mount to silence this warning. [ 424.378376][T10642] ======================================================= [ 427.987710][T10682] zswap: compressor not available [ 428.242173][T10707] i2c i2c-0: new_device: Can't parse I2C address [ 428.417387][T10710] nbd: must specify a device to reconfigure [ 429.889545][T10729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.675'. [ 432.232699][ T30] audit: type=1800 audit(1785728137.395:10): pid=10782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.681" name="features" dev="configfs" ino=64024 res=0 errno=0 [ 432.277314][ T6178] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 432.301068][ T6280] Bluetooth: hci0: unexpected event 0x05 length: 8 > 4 [ 433.869716][T10793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.685'. [ 434.134571][T10801] nbd: must specify a device to reconfigure [ 434.326584][ T6178] Bluetooth: hci0: command 0x2016 tx timeout [ 436.408913][ T6178] Bluetooth: hci0: command 0x2016 tx timeout [ 438.731807][T10872] i2c i2c-0: new_device: Can't parse I2C address [ 440.252808][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.260259][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.437567][T10877] nbd: must specify a device to reconfigure [ 449.012859][T11006] netlink: 28 bytes leftover after parsing attributes in process `syz.3.716'. [ 449.131615][T11012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.716'. [ 449.619949][ T30] audit: type=1800 audit(1785728154.785:11): pid=11030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.719" name="features" dev="configfs" ino=66343 res=0 errno=0 [ 453.554068][ T30] audit: type=1800 audit(1785728158.715:12): pid=11090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.728" name="dbroot" dev="configfs" ino=67311 res=0 errno=0 [ 453.714270][ T30] audit: type=1800 audit(1785728158.875:13): pid=11093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.727" name="features" dev="configfs" ino=67339 res=0 errno=0 [ 455.435478][ T6280] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 455.783259][ T6280] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 455.791611][ T6280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 455.801495][ T6280] CPU: 0 UID: 0 PID: 6280 Comm: kworker/u11:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 455.801546][ T6280] Tainted: [L]=SOFTLOCKUP [ 455.801557][ T6280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 455.801608][ T6280] Workqueue: hci3 hci_rx_work [ 455.801746][ T6280] Call Trace: [ 455.801758][ T6280] [ 455.801771][ T6280] dump_stack_lvl+0x100/0x190 [ 455.801816][ T6280] sysfs_warn_dup.cold+0x1c/0x28 [ 455.801880][ T6280] sysfs_create_dir_ns+0x24b/0x2b0 [ 455.801999][ T6280] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 455.802051][ T6280] ? find_held_lock+0x2b/0x80 [ 455.802096][ T6280] ? kobject_add_internal+0x25f/0x930 [ 455.802131][ T6280] ? kobject_add_internal+0x25f/0x930 [ 455.802169][ T6280] ? do_raw_spin_unlock+0x145/0x1e0 [ 455.802212][ T6280] kobject_add_internal+0x2c8/0x930 [ 455.802254][ T6280] kobject_add+0x16a/0x1e0 [ 455.802288][ T6280] ? __pfx_kobject_add+0x10/0x10 [ 455.802320][ T6280] ? class_to_subsys+0x10f/0x150 [ 455.802399][ T6280] ? kobject_put+0xb9/0x640 [ 455.802450][ T6280] ? _raw_spin_unlock+0x28/0x50 [ 455.802500][ T6280] device_add+0x294/0x1970 [ 455.802552][ T6280] ? __pfx_dev_set_name+0x10/0x10 [ 455.802620][ T6280] ? __pfx_device_add+0x10/0x10 [ 455.802655][ T6280] ? mgmt_send_event_skb+0x2fb/0x460 [ 455.802751][ T6280] hci_conn_add_sysfs+0x1a3/0x260 [ 455.802862][ T6280] le_conn_complete_evt+0x11eb/0x1f60 [ 455.802962][ T6280] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 455.803005][ T6280] ? __pfx_bt_warn+0x10/0x10 [ 455.803043][ T6280] ? hci_event_packet+0x186/0xcd0 [ 455.803097][ T6280] hci_le_conn_complete_evt+0x23c/0x3a0 [ 455.803146][ T6280] ? skb_pull_data+0x15f/0x1e0 [ 455.803249][ T6280] hci_le_meta_evt+0x34a/0x5f0 [ 455.803349][ T6280] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 455.803400][ T6280] hci_event_packet+0x51c/0xcd0 [ 455.803444][ T6280] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 455.803492][ T6280] ? __pfx_hci_event_packet+0x10/0x10 [ 455.803539][ T6280] ? kcov_remote_start+0x384/0x670 [ 455.803589][ T6280] ? lockdep_hardirqs_on+0x78/0x100 [ 455.803683][ T6280] hci_rx_work+0x451/0xfc0 [ 455.803734][ T6280] process_one_work+0xa23/0x1940 [ 455.803806][ T6280] ? __pfx_process_one_work+0x10/0x10 [ 455.803870][ T6280] ? __pfx_hci_rx_work+0x10/0x10 [ 455.803916][ T6280] worker_thread+0x5ef/0xe50 [ 455.803977][ T6280] ? __pfx_worker_thread+0x10/0x10 [ 455.804030][ T6280] ? kthread+0x13a/0x450 [ 455.804073][ T6280] ? __pfx_worker_thread+0x10/0x10 [ 455.804121][ T6280] kthread+0x370/0x450 [ 455.804166][ T6280] ? __pfx_kthread+0x10/0x10 [ 455.804215][ T6280] ret_from_fork+0x72b/0xd50 [ 455.804259][ T6280] ? __pfx_ret_from_fork+0x10/0x10 [ 455.804303][ T6280] ? rcu_is_watching+0x12/0xc0 [ 455.804343][ T6280] ? __switch_to+0x800/0x10f0 [ 455.804393][ T6280] ? __switch_to_asm+0x39/0x70 [ 455.804438][ T6280] ? __pfx_kthread+0x10/0x10 [ 455.804487][ T6280] ret_from_fork_asm+0x1a/0x30 [ 455.804552][ T6280] [ 456.098963][ T6280] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 456.113080][ T6280] Bluetooth: hci3: failed to register connection device [ 456.120575][ T6280] Bluetooth: hci3: unexpected event 0x05 length: 8 > 4 [ 457.448065][ T6280] Bluetooth: hci3: command 0x0c1a tx timeout [ 457.573012][ T6280] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 457.637998][ T6280] Bluetooth: hci0: unexpected event 0x05 length: 8 > 4 [ 457.790919][T11154] futex_wake_op: syz.1.737 tries to shift op by -2048; fix this program [ 457.832814][T11154] 0x000000000000-0x000000020000 : "" [ 457.917904][T11154] ftl_cs: FTL header not found. [ 458.456730][T11165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.739'. [ 459.525163][ T6280] Bluetooth: hci3: command 0x0c1a tx timeout [ 459.604997][ T6197] Bluetooth: hci0: command 0x2016 tx timeout [ 461.604515][ T6280] Bluetooth: hci3: command 0x0c1a tx timeout [ 461.685472][ T6178] Bluetooth: hci0: command 0x2016 tx timeout [ 463.684512][ T6197] Bluetooth: hci3: command 0x0c1a tx timeout [ 464.334817][T11260] futex_wake_op: syz.2.752 tries to shift op by -2048; fix this program [ 464.374032][T11260] 0x000000000000-0x000000020000 : "" [ 464.422550][T11260] ftl_cs: FTL header not found. [ 466.207516][ T30] audit: type=1800 audit(1785728171.375:14): pid=11290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.754" name="features" dev="configfs" ino=69402 res=0 errno=0 [ 470.266017][T11343] futex_wake_op: syz.0.763 tries to shift op by -2048; fix this program [ 470.362233][T11343] 0x000000000000-0x000000020000 : "" [ 470.437400][T11343] ftl_cs: FTL header not found. [ 471.946726][ T30] audit: type=1800 audit(1785728177.115:15): pid=11375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.767" name="features" dev="configfs" ino=70861 res=0 errno=0 [ 473.586270][ T30] audit: type=1800 audit(1785728178.745:16): pid=11389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.773" name="version" dev="configfs" ino=70605 res=0 errno=0 [ 476.102972][T11433] futex_wake_op: syz.3.777 tries to shift op by -2048; fix this program [ 476.149203][T11433] 0x000000000000-0x000000020000 : "" [ 476.191973][T11433] ftl_cs: FTL header not found. [ 477.593910][ T30] audit: type=1800 audit(1785728182.755:17): pid=11450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.780" name="features" dev="configfs" ino=72012 res=0 errno=0 [ 478.164898][ T6197] Bluetooth: hci1: command 0x0406 tx timeout [ 478.823408][ T30] audit: type=1800 audit(1785728183.985:18): pid=11474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.784" name="features" dev="configfs" ino=72128 res=0 errno=0 [ 480.563253][T11503] i2c i2c-0: new_device: Can't parse I2C address [ 482.765285][ T30] audit: type=1800 audit(1785728187.925:19): pid=11531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.794" name="features" dev="configfs" ino=72505 res=0 errno=0 [ 483.482954][ T30] audit: type=1800 audit(1785728188.645:20): pid=11546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.795" name="members" dev="configfs" ino=72906 res=0 errno=0 [ 483.663809][ T30] audit: type=1800 audit(1785728188.825:21): pid=11540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.795" name="dbroot" dev="configfs" ino=72921 res=0 errno=0 [ 483.707667][T11540] net_ratelimit: 48 callbacks suppressed [ 483.707690][T11540] openvswitch: netlink: IPv4 tunnel dst address is zero [ 485.846813][T11580] i2c i2c-0: new_device: Can't parse I2C address [ 487.390776][T11608] BUG: unable to handle page fault for address: ffffc9001a91dfe8 [ 487.398665][T11608] #PF: supervisor write access in kernel mode [ 487.404775][T11608] #PF: error_code(0x0002) - not-present page [ 487.410815][T11608] PGD 13fe40067 P4D 13fe40067 PUD 1cae7067 PMD 35de8067 PTE 0 [ 487.418403][T11608] Oops: Oops: 0002 [#1] SMP KASAN PTI [ 487.423844][T11608] CPU: 1 UID: 0 PID: 11608 Comm: syz.2.806 Tainted: G L syzkaller #0 PREEMPT(full) [ 487.434750][T11608] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 487.439108][T11608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 487.449210][T11608] RIP: 0010:write_comp_data+0x75/0x90 [ 487.454641][T11608] Code: 00 8b bf fc 16 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 bd 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 c3 cc [ 487.474300][T11608] RSP: 0018:ffffc9000de4fe78 EFLAGS: 00050257 [ 487.480425][T11608] RAX: ffffc9001a91e000 RBX: 0000000000000000 RCX: ffffffff82458a75 [ 487.488426][T11608] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 487.496429][T11608] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 487.504425][T11608] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 487.512418][T11608] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 487.520413][T11608] FS: 00007f0b51a3a6c0(0000) GS:ffff888123edf000(0000) knlGS:0000000000000000 [ 487.529372][T11608] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 487.535990][T11608] CR2: ffffc9001a91dfe8 CR3: 000000005964a000 CR4: 00000000003526f0 [ 487.544002][T11608] Call Trace: [ 487.547329][T11608] [ 487.550274][T11608] rseq_register+0x115/0x350 [ 487.554947][T11608] __x64_sys_rseq+0x1b8/0x2e0 [ 487.559683][T11608] do_syscall_64+0x115/0x840 [ 487.564323][T11608] ? clear_bhb_loop+0x40/0x90 [ 487.569045][T11608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.574966][T11608] RIP: 0033:0x7f0b50b9e019 [ 487.579415][T11608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.599059][T11608] RSP: 002b:00007f0b51a3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000014e [ 487.607512][T11608] RAX: ffffffffffffffda RBX: 00007f0b50e26450 RCX: 00007f0b50b9e019 [ 487.615519][T11608] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 487.623544][T11608] RBP: 00007f0b50c3500c R08: 0000000000000000 R09: 0000000000000000 [ 487.631552][T11608] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000000 [ 487.639550][T11608] R13: 00007f0b50e264e8 R14: 00007f0b50e26450 R15: 00007fff62e4fe78 [ 487.647558][T11608] [ 487.650626][T11608] Modules linked in: [ 487.654575][T11608] CR2: ffffc9001a91dfe8 [ 487.658762][T11608] ---[ end trace 0000000000000000 ]--- [ 487.664239][T11608] RIP: 0010:write_comp_data+0x75/0x90 [ 487.669668][T11608] Code: 00 8b bf fc 16 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 bd 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 c3 cc [ 487.689305][T11608] RSP: 0018:ffffc9000de4fe78 EFLAGS: 00050257 [ 487.695405][T11608] RAX: ffffc9001a91e000 RBX: 0000000000000000 RCX: ffffffff82458a75 [ 487.703420][T11608] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 487.711423][T11608] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 487.719422][T11608] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 487.727420][T11608] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 487.735414][T11608] FS: 00007f0b51a3a6c0(0000) GS:ffff888123edf000(0000) knlGS:0000000000000000 [ 487.744382][T11608] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 487.751015][T11608] CR2: ffffc9001a91dfe8 CR3: 000000005964a000 CR4: 00000000003526f0 [ 487.759094][T11608] Kernel panic - not syncing: Fatal exception [ 487.765813][T11608] Kernel Offset: disabled [ 487.770175][T11608] Rebooting in 86400 seconds..