last executing test programs: 27m57.36232347s ago: executing program 0 (id=90): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) connect$auto(0x3, 0x0, 0x55) mmap$auto(0x0, 0x20009, 0xdf, 0x2000000eb1, 0x40000000000a5, 0x8000) openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000002e80)='/sys/kernel/debug/tracing/per_cpu/cpu0/stats\x00', 0x101040, 0x0) 27m56.893102897s ago: executing program 0 (id=94): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2a, 0x2, 0xb) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) pipe$auto(0x0) fcntl$auto(r0, 0x5, 0x6) r1 = socket(0x2, 0x5, 0x0) setsockopt$auto(r1, 0x0, 0x10, 0x0, 0x17) close_range$auto(0x2, 0x8, 0x0) 27m56.75870234s ago: executing program 0 (id=95): close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0182, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0x4090ae82, 0x0) 27m56.462108904s ago: executing program 0 (id=99): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) rename$auto(&(0x7f0000000480)='./file0\x00', 0x0) 27m56.249941409s ago: executing program 0 (id=101): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xa, 0x3, 0xc, 0x5, 0x0, 0x3, 0x6, 0x10000000000002, 0x6c8, 0x5, 0x20000000003, 0x5, 0xb0, 0x7, 0x10000002, 0x3, 0x5, 0x7, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, [0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x1fe, 0x40081) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xc20f0000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8) r1 = socket(0x10, 0x2, 0x0) bind$auto(r1, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) sendmsg$auto_NET_DM_CMD_STATS_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x8001}, 0x40080) 27m41.132445142s ago: executing program 32 (id=101): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xa, 0x3, 0xc, 0x5, 0x0, 0x3, 0x6, 0x10000000000002, 0x6c8, 0x5, 0x20000000003, 0x5, 0xb0, 0x7, 0x10000002, 0x3, 0x5, 0x7, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, [0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x1fe, 0x40081) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xc20f0000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8) r1 = socket(0x10, 0x2, 0x0) bind$auto(r1, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) sendmsg$auto_NET_DM_CMD_STATS_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x8001}, 0x40080) 3m2.619839883s ago: executing program 1 (id=4436): r0 = ioctl$auto_TUNGETIFF2(0xffffffffffffffff, 0x800454d2, &(0x7f0000000000)=0x7fffffff) sendmsg$auto_KSMBD_EVENT_TREE_CONNECT_REQUEST(r0, 0x0, 0x4014) r1 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = gettid() close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2, 0x1, 0x0) socket(0x2, 0x1, 0x106) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x201, 0x0) ioctl$auto_PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0xffffffffffffaee1, 0xfffffffffffffffe, 0x2, 0x7, 0xbfb, 0x79, 0x30, 0x3, 0x2}) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @loopback}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) ioperm$auto(0xffffffffffffffff, 0x389, 0xd) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:01.1/ata1/link1/dev1.0/power/control\x00', 0x32002, 0x0) write$auto(0x3, 0x0, 0xfffffdef) kill$auto(r2, 0x11) setsockopt$auto(r1, 0x6, 0xd, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x4) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) removexattr$auto(&(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000400)='/dev/mtdblock0\x00') 2m59.554062981s ago: executing program 1 (id=4444): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x4007, 0xb}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/cable#1\x00', 0x100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x161342, 0x100) pipe2$auto(0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0xe0180, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyu3\x00', 0x62902, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) 2m56.913140958s ago: executing program 1 (id=4450): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) waitid$auto_P_ALL(0x0, 0xe, &(0x7f0000000340)={@siginfo_0_0={0xe, 0x2, 0x1, @_sigsys={&(0x7f0000000240)="42b0c89670754d7c136b96b4a66c46a06b2ae30d2dc311827926354870ae18e520c9942cbb727ad9d1004e7ceee0f6528c08e4a11a907dedfe0538dbebd0a46638745a821ec33e749a9a2aefe289a8627446ad2bec1f96856715ac9d7759f01cb6f2daa5a180150a28620b407b9969", 0x2, 0x3}}}, 0x3e, &(0x7f00000003c0)={{0x9, 0xefd}, {0x4, 0x7}, 0x0, 0xfffffffffffffffb, 0x3ff, 0x8101, 0xc, 0xf3, 0x1, 0xd, 0x4, 0x5, 0xfffc, 0x8001, 0xc}) io_uring_setup$auto(0x6, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xae00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) sendto$auto(r0, &(0x7f0000000140)="c99b97a4a18833a72aff5c6edec12838e6c36aa3b8efa7e23eab4f993ce66256c3ee1fa1470cc34d0844ef66ea5db21196afca7b6062c22e25bd38ff3a8ffce75c51cd146c42cece3a3c2eb0447313f733c79892b36978f22e11d89e044a5b7bc7cdd5b31f", 0x0, 0x1e71, &(0x7f0000000000)=@can, 0x2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) 2m54.552239478s ago: executing program 1 (id=4454): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/sunrpc/parameters/tcp_max_slot_table_entries\x00', 0x88282, 0x0) sendfile$auto(r1, r1, 0x0, 0x71) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_QSTATS_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, r2, 0x301, 0x70bd29, 0x25dfdbfe, {}, [@NETDEV_A_QSTATS_SCOPE={0xc, 0x4, 0x1}]}, 0x20}}, 0x40000) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) mmap$auto(0x0, 0x4000005, 0xfffffffffffffe01, 0x8051, 0x3, 0x10000000008000) r3 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r3, &(0x7f0000000140)={{0x0, 0x3, 0x0, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000006c0)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x7}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2400000b756, 0x10001}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000080)={{@raw=0x1002, 0x6, 0xa, 0x7, "26d718b7d3ee69350e4ede7079dcb0c24c8aa1e3c7ee2e00308b8a7d74b0a707f7045e6d035b196ca83379bb", @inferred=0x0}, 0x7, 0xfffffffc, 0x82, @inferred, @enumerated={0x0, 0x6, "ad75b255b5cdd64a6b7a755de55f8e3b81e6c4e6fbf4f15a5ca5dc29f056113e9b60cd7bd82081ec90b01a6c1ae79b9fd0930da366e011ae30c0a636577776a6", 0x2003, 0xcac}, "18a801006a0900000000000000c4bd5359eeadc8357752b72fa176254d8797cdffd02555ac83a07983eeddcd24b626f54ad9d763dcdc9120af8b7c848ceb55a7"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000340)={{@raw=0x6, 0x308, 0xffff, 0x9, "cd9ac857d737bb20feeb0c005eb571a89986bbec6f001887a4d49e096afdf3bb0959c5432aadf71c2f91af00", @raw=0x4}, 0x9, 0xf, 0x1, @inferred=r5, @enumerated={0x7133, 0x5, "8e4ccd6746972c6ac28bdde69c5070d317980efcb9b3e8d7b8176a709302cefa4e7ad3920798a929a43f165472bdaab2c5d1c3f67faea7d8cf5430450d8da99c", 0xffffffff, 0xfffffff6}, "842e773e1652f754bc887e438da1a21b2bb21f22fdee260a7182c53b299693a64e7c248a610a2fc8edae9b434d3ad49e011705988084914add78fa45450688a7"}) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000001c0), r3) sendmsg$auto_BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TQ={0x5, 0x19, 0x9}, @BATADV_ATTR_TT_TTVN={0x5, 0x11, 0x2}, @BATADV_ATTR_TT_TTVN={0x5, 0x11, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4000) futex$auto(&(0x7f0000001d00)=0x4, 0x5, 0x7, 0x0, &(0x7f0000001d80)=0x3ff, 0x401) 2m53.448377462s ago: executing program 1 (id=4455): ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(0xffffffffffffffff, 0x5501, 0x0) ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) io_uring_setup$auto(0xf0, &(0x7f0000000180)={0x6, 0x18, 0xd64, 0xc852, 0x6, 0x7, r0, [0x1, 0x401, 0x1000], {0x7, 0x5, 0x1, 0x4, 0x95, 0xf4c, 0x7fff, 0xfffffffb, 0x65f29f6d}, {0x3, 0xadc, 0x10000, 0x0, 0x5, 0xffffffff, 0x1000, 0x54f, 0x5}}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r1 = socket(0xa, 0x3, 0xff) connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) write$auto_proc_mem_operations_base(0xffffffffffffffff, 0x0, 0x0) syz_clone3(0x0, 0x0) madvise$auto(0x1ffff000, 0x7, 0x100000000) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) futex_wake$auto(0x0, 0x5, 0x4, 0xa) 2m48.284537091s ago: executing program 1 (id=4461): mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0xffffffffffffffff, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x8000001, 0x0, 0x2000000000000003, 0x0, 0x24, 0x1}, 0x401}, 0x800, 0xa0000000) r1 = socket(0xa, 0x5, 0x84) sendto$auto(r1, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000080)={0x5, 0xfffffffb, [0xffffffff, 0x3ff, 0xc7, 0x80000001, 0x7]}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000001100), 0xa8000, 0x0) timerfd_create$auto_CLOCK_MONOTONIC(0x1, 0x6) gettid() madvise$auto(0x4, 0x6, 0x12a0) madvise$auto(0x0, 0x200007, 0x19) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000000)=""/133, 0x85) msgrcv$auto(0x0, 0x0, 0x4, 0x9, 0x3) msgctl$auto(0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000040), 0xffffffffffffffff) 2m33.034255289s ago: executing program 33 (id=4461): mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0xffffffffffffffff, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x8000001, 0x0, 0x2000000000000003, 0x0, 0x24, 0x1}, 0x401}, 0x800, 0xa0000000) r1 = socket(0xa, 0x5, 0x84) sendto$auto(r1, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000080)={0x5, 0xfffffffb, [0xffffffff, 0x3ff, 0xc7, 0x80000001, 0x7]}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000001100), 0xa8000, 0x0) timerfd_create$auto_CLOCK_MONOTONIC(0x1, 0x6) gettid() madvise$auto(0x4, 0x6, 0x12a0) madvise$auto(0x0, 0x200007, 0x19) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000000)=""/133, 0x85) msgrcv$auto(0x0, 0x0, 0x4, 0x9, 0x3) msgctl$auto(0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000040), 0xffffffffffffffff) 2m13.470519156s ago: executing program 2 (id=4537): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = eventfd$auto(0x4) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) r3 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000080), r0) sendmsg$auto_OVS_VPORT_CMD_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="040029bd7000ffdbdf2504000000080001009be4fd4b340003002f7379732f6b65726e656c2f74726163696e672f7065725f6370752f637075302f74726163655f706970655f72617700"], 0x50}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) ioctl$auto(r2, 0x4008af21, r1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/README\x00', 0x8481, 0x0) r5 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) pwritev$auto(r5, &(0x7f0000000180)={0x0, 0x2}, 0x3, 0x5, 0x5) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x29, 0x5, 0x0) r6 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) prctl$auto(0x44, 0x5, 0x0, 0x8, 0x863) open_by_handle_at$auto(r6, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) sendfile$auto(r4, r4, 0x0, 0x2) socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) 2m13.219588787s ago: executing program 2 (id=4538): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) eventfd$auto(0x0) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x11, 0x3, 0x9) close_range$auto(0x2, r0, 0x0) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x14, 0x0, 0x4) sendmmsg$auto(r0, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1060}, 0x5}, 0x7, 0x100) 2m12.89727204s ago: executing program 2 (id=4540): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x80000c}, 0x7, 0x20000000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x220, 0x0) mprotect$auto(0x200000000000, 0x806122, 0xc) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x10000, 0x0) sched_setscheduler$auto(0x0, 0x5, 0x0) mprotect$auto(0x5cb, 0x0, 0xe4b) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0xffffffffffffffff, 0x340000000000) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r1 = openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/gid_map\x00', 0x20002, 0x0) write$auto_proc_gid_map_operations_base(r1, 0x0, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "00800000ffefffffff0200000001"}, 0x55) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8002, 0x0) write$auto(0x3, 0x0, 0xffd8) 2m11.803247508s ago: executing program 2 (id=4542): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg1\x00', 0x180443, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x121d02, 0x0) socket(0x10, 0x2, 0x14) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x622340, 0x0) openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) pipe$auto(0x0) socketpair$auto(0x1e, 0x1, 0x4, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_TCFLSH2(r0, 0x40384708, 0x0) 2m11.259049805s ago: executing program 2 (id=4545): socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x4, 0xdf, 0x80000000000eb1, 0x3, 0x0) r0 = socket(0xa, 0x5, 0x0) getsockopt$auto(r0, 0x84, 0x12, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x2c, 0x3, 0x0) bind$auto(r1, &(0x7f0000000080)=@xdp={0x2c, 0xc, 0x0, 0x1c}, 0x6b) setsockopt$auto_SO_BROADCAST(r1, 0x5, 0x6, 0x0, 0x74) r2 = socket(0x80000000000000a, 0x2, 0x0) sendto$auto(r2, 0x0, 0x402, 0x101, &(0x7f0000000000)=@generic={0xa, "01e983638bffff4993021400"}, 0x17) socket(0x18, 0x3, 0x2) sendmmsg$auto(0x3, 0x0, 0x2, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) epoll_create$auto(0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) fcntl$auto(0x0, 0x408, 0x100000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x400, 0x7ff) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 2m9.793448774s ago: executing program 2 (id=4548): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x3) socket(0x2, 0x2, 0x88) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty28\x00', 0x201, 0x0) socket(0x2, 0x2, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40001, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_TCFLSH2(r1, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0xfff, 0x700, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) sendmmsg$auto(r2, 0x0, 0x1, 0x401) r3 = openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x143382, 0x0) preadv$auto(r3, &(0x7f0000000140)={0x0, 0x3}, 0x5, 0x1ff, 0x81) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0xffffffff, &(0x7f0000000000)=@generic={0x0, "e2e18340cba8fe8000"}, 0x1c) 1m54.855786313s ago: executing program 5 (id=4608): sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000000)=ANY=[@ANYRESOCT], 0x44}}, 0x4044000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff038}}) write$auto(0xffffffffffffffff, 0x0, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x801}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r2, 0x8946, 0x24) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat2$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x5, 0x4b, 0x4}, 0x8) mmap$auto(0x0, 0xaaf, 0x4000000000df, 0x40000000000eb1, r3, 0x8000) socket(0x2, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x70007fc) write$auto(r0, 0x0, 0x6) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) 1m54.43191375s ago: executing program 34 (id=4548): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x3) socket(0x2, 0x2, 0x88) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty28\x00', 0x201, 0x0) socket(0x2, 0x2, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40001, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_TCFLSH2(r1, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0xfff, 0x700, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) sendmmsg$auto(r2, 0x0, 0x1, 0x401) r3 = openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x143382, 0x0) preadv$auto(r3, &(0x7f0000000140)={0x0, 0x3}, 0x5, 0x1ff, 0x81) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0xffffffff, &(0x7f0000000000)=@generic={0x0, "e2e18340cba8fe8000"}, 0x1c) 1m53.162255743s ago: executing program 5 (id=4611): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/sunrpc/parameters/tcp_max_slot_table_entries\x00', 0x88282, 0x0) sendfile$auto(r2, r2, 0x0, 0x71) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r1) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40000) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) mmap$auto(0x0, 0x4000005, 0xfffffffffffffe01, 0x8051, 0x3, 0x10000000008000) r3 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r3, &(0x7f0000000140)={{0x0, 0x3, 0x0, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000006c0)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x7}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2400000b756, 0x10001}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000080)={{@raw=0x1002, 0x6, 0xa, 0x7, "26d718b7d3ee69350e4ede7079dcb0c24c8aa1e3c7ee2e00308b8a7d74b0a707f7045e6d035b196ca83379bb", @inferred=0x0}, 0x7, 0xfffffffc, 0x82, @inferred, @enumerated={0x0, 0x6, "ad75b255b5cdd64a6b7a755de55f8e3b81e6c4e6fbf4f15a5ca5dc29f056113e9b60cd7bd82081ec90b01a6c1ae79b9fd0930da366e011ae30c0a636577776a6", 0x2003, 0xcac}, "18a801006a0900000000000000c4bd5359eeadc8357752b72fa176254d8797cdffd02555ac83a07983eeddcd24b626f54ad9d763dcdc9120af8b7c848ceb55a7"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000340)={{@raw=0x6, 0x308, 0xffff, 0x9, "cd9ac857d737bb20feeb0c005eb571a89986bbec6f001887a4d49e096afdf3bb0959c5432aadf71c2f91af00", @raw=0x4}, 0x9, 0xf, 0x1, @inferred=r5, @enumerated={0x7133, 0x5, "8e4ccd6746972c6ac28bdde69c5070d317980efcb9b3e8d7b8176a709302cefa4e7ad3920798a929a43f165472bdaab2c5d1c3f67faea7d8cf5430450d8da99c", 0xffffffff, 0xfffffff6}, "842e773e1652f754bc887e438da1a21b2bb21f22fdee260a7182c53b299693a64e7c248a610a2fc8edae9b434d3ad49e011705988084914add78fa45450688a7"}) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000001c0), r3) sendmsg$auto_BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TQ={0x5, 0x19, 0x9}, @BATADV_ATTR_TT_TTVN={0x5, 0x11, 0x2}, @BATADV_ATTR_TT_TTVN={0x5, 0x11, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4000) futex$auto(&(0x7f0000001d00)=0x4, 0x5, 0x7, 0x0, &(0x7f0000001d80)=0x3ff, 0x401) 1m52.311950145s ago: executing program 5 (id=4613): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) write$auto(r0, 0x0, 0x2) getrlimit$auto(0x3, 0x0) fdatasync$auto(r0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xc8d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\xc6\x00\x89\te\x8d\a\xfb\\n\x89C:\x84D\x10u\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)=';') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) 1m47.680733513s ago: executing program 5 (id=4622): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x4, 0x100000000000034, 0x6) fsopen$auto(0x0, 0x1) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x22, 0x3, 0x0) ioctl$auto(0xffffffffffffffff, 0x40104d01, 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000002dc0)='/dev/adsp1\x00', 0x2401, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) readv$auto(0x3, 0x0, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{&(0x7f0000000040)="7247d54f73e9ac4e45aaa5e85f8850f65713538dfe58e39d7c38bc0a432cc91ff6f4", 0x9, &(0x7f0000000080)={&(0x7f00000003c0)="2a7eb014d44936273c5ed7d8988b405711642725d428e8800b5d7bd6fea30d6543c64c4965f0d8a31bdd92550ebe354df12d9e297268f7e0786720cd9d46ad15504a9e47c5103b4104adcefbbee6a2b45c70d771a0924f41315f82d6d15b87f410bc3be6fd2c6dd482c01076a98494a39b1215765fc5856651ae21a8a507fede5bcb8a0ac405478578b5798190f0a92a84d4002e7728c139f71e585cd22de2efce0f7a6e7764f54a2c62dd54941d0f5fe3ca8f3883447bbdb4a3f5fb13bc9be02cfc8ec1b7da", 0x3}, 0x8, 0x0, 0x9}}, 0x845, 0xef0) shmctl$auto_SHM_INFO(0x6, 0xe, 0x0) msync$auto(0x0, 0xe0, 0x6) 1m42.282333901s ago: executing program 5 (id=4630): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0x1, 0x3, 0x2) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x1e, 0x1, 0x0) r1 = socket(0x1d, 0x1, 0x6) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000300), r1) socket(0xa, 0x801, 0x84) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vbi0\x00', 0x80382, 0x0) vmsplice$auto(r0, &(0x7f0000000140)={&(0x7f00000000c0)="bc0e6c90aa18e7a675776ee36eb756c0601842e67a", 0x100000001}, 0x1ff, 0xf) 1m41.667577134s ago: executing program 5 (id=4633): select$auto(0x4, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x7, 0x2, 0x1, 0x948b, 0x1000000000000004, 0x15f4da0a, 0x39, 0x3, 0x2fffffffffffffe, 0x80000002, 0x7a142c64, 0x6d3c, 0x5, 0x80, 0xfb]}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/fs/ocfs2/loaded_cluster_plugins\x00', 0x800, 0x0) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cpu.max\x00', 0x20b02, 0x0) io_uring_register$auto_IORING_UNREGISTER_FILES(r0, 0x3, &(0x7f0000000080)="193f32b995f0ecb4ddf8cd83baeda5c352a745214ad880cc4c561670de2d13131c656d339507302cd18f379f551569932d17bb17195ecfc677eb23ac801128003ef54e78817f1a", 0x3) sendfile$auto(r0, r0, &(0x7f0000000000)=0x3, 0xad6) settimeofday$auto(&(0x7f00000001c0)={0x7, 0x3}, &(0x7f0000000240)={0x7, 0x3}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r2 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, 0x21ea, 0x7ff, 0x3, 0x0, 0x80000001, r2}, 0x6f4) write$auto(0xffffffffffffffff, 0x0, 0x6) unshare$auto(0x40000080) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000000)="b2", 0x1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) 1m26.396741024s ago: executing program 35 (id=4633): select$auto(0x4, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x7, 0x2, 0x1, 0x948b, 0x1000000000000004, 0x15f4da0a, 0x39, 0x3, 0x2fffffffffffffe, 0x80000002, 0x7a142c64, 0x6d3c, 0x5, 0x80, 0xfb]}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/fs/ocfs2/loaded_cluster_plugins\x00', 0x800, 0x0) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cpu.max\x00', 0x20b02, 0x0) io_uring_register$auto_IORING_UNREGISTER_FILES(r0, 0x3, &(0x7f0000000080)="193f32b995f0ecb4ddf8cd83baeda5c352a745214ad880cc4c561670de2d13131c656d339507302cd18f379f551569932d17bb17195ecfc677eb23ac801128003ef54e78817f1a", 0x3) sendfile$auto(r0, r0, &(0x7f0000000000)=0x3, 0xad6) settimeofday$auto(&(0x7f00000001c0)={0x7, 0x3}, &(0x7f0000000240)={0x7, 0x3}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r2 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, 0x21ea, 0x7ff, 0x3, 0x0, 0x80000001, r2}, 0x6f4) write$auto(0xffffffffffffffff, 0x0, 0x6) unshare$auto(0x40000080) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000000)="b2", 0x1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) 58.019862615s ago: executing program 3 (id=4714): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x8}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="1100", 0x2) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x5, 0xfffff05e, 0x0, 0x0, 0x80000001) r2 = gettid() futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) kill$auto(r2, 0x11) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC1\x00', 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8600, 0x0) fcntl$auto(0x3, 0x4, 0xa553) 56.121754918s ago: executing program 3 (id=4717): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2800, 0x0) r0 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(0x0, r1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, 0x0) read$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0x3, 0x402c542b, 0x38) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x30000881}, 0xc000810) wait4$auto(0xffffffffffffffff, 0x0, 0x0, 0x0) msgctl$auto_MSG_INFO(0x8, 0xc, 0x0) sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, 0x0, 0x891) 55.673983592s ago: executing program 3 (id=4719): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) write$auto(r3, &(0x7f0000000100)='d>*\xd2x\xc7\xbf\xff\x9a\xc01(\x00iM\x9c\bAa\x9e\xe98\xee\x15\xd3\xc5v\x99\f|\xe3\xbf\xd9\xf4C\x14A\xe6k\x105\xee\xc5\xaa$\x16\t?g\xb8b\x12\v*\xf9@B\xd0\xd2\x99{\x8b^\xff@\x83\x02Tvt\xc1_\x98\x9f\x16\xd5Is', 0x100000a3da) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mlockall$auto(0x800000000000005) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) 53.295962502s ago: executing program 4 (id=4726): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) waitid$auto_P_ALL(0x0, 0xe, &(0x7f0000000340)={@siginfo_0_0={0xe, 0x2, 0x1, @_sigsys={&(0x7f0000000240)="42b0c89670754d7c136b96b4a66c46a06b2ae30d2dc311827926354870ae18e520c9942cbb727ad9d1004e7ceee0f6528c08e4a11a907dedfe0538dbebd0a46638745a821ec33e749a9a2aefe289a8627446ad2bec1f96856715ac9d7759f01cb6f2daa5a180150a28620b407b9969", 0x2, 0x3}}}, 0x3e, &(0x7f00000003c0)={{0x9, 0xefd}, {0x4, 0x7}, 0x0, 0xfffffffffffffffb, 0x3ff, 0x8101, 0xc, 0xf3, 0x1, 0xd, 0x4, 0x5, 0xfffc, 0x8001, 0xc}) io_uring_setup$auto(0x6, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xae00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x4018aebd, r1) sendto$auto(r0, &(0x7f0000000140)="c99b97a4a18833a72aff5c6edec12838e6c36aa3b8efa7e23eab4f993ce66256c3ee1fa1470cc34d0844ef66ea5db21196afca7b6062c22e25bd38ff3a8ffce75c51cd146c42cece3a3c2eb0447313f733c79892b36978f22e11d89e044a5b7bc7cdd5b31f", 0x0, 0x1e71, &(0x7f0000000000)=@can, 0x2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) 51.725834805s ago: executing program 6 (id=4729): unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2a, 0x1, 0xffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/netfs/volumes\x00', 0x40080, 0x0) mmap$auto(0x0, 0x20009, 0xe, 0xeb1, 0x403, 0x8000) setresuid$auto(0x0, 0x7, 0x8080) capset$auto(0x0, 0x0) capset$auto(0x0, 0x0) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) sendmsg$auto_IPVS_CMD_ZERO(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)={0x1b8, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x1a3, 0x2, 0x0, 0x1, [@generic="1a99ec1c108cc41ca31099501ec119ce4b5086dfb04080eeb19cb87e98dccfb65dbd58ce66549f70212d8785218ed559266c8d2524ba8b74b00c910ddd6bb8fdc088021d5eef0cd1dc31777bac87bd923a25", @generic="2c29a1655b0019f6", @nested={0x123, 0xf2, 0x0, 0x1, [@generic="7b5db3bb84cef1dc3cca079149b7b424eb85eddf166c0dd11d03337e28763456bc7db91633edeb24a12032f4f17ef10403aeb8e7a16b5b55633b8492b86b7afdcd266c9df8cbaab53c59d8dd813dc2d38e212d90e8d79868a4777e480a571d96f7cb67ffc34b2e8272f7fb96cd31632717b2f05ee4492ea7438fc94ee328c915410539d63b5913f8535ff3c1218fdc8b431125ce30fc51e75d240fc05ada684ed0b6d3d03d8f2dea4899d919e1eae376b2941ad6d4e981e28d293dff8454b7ed44290d862ad12bab07d5a8a91f4b91744c0af2267422cd00e8c849708edaae2c47749ccb527d8395f46ef50e5a07e1", @nested={0x4, 0x37}, @typed={0x8, 0xdf, 0x0, 0x0, @u32=0x954f}, @nested={0x4, 0x13a}, @typed={0x8, 0xfc, 0x0, 0x0, @u32}, @nested={0x4, 0x3a}, @typed={0x14, 0x42, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @typed={0x4, 0x6c}, @generic="8fc64834e29e6f3ea074a500cc3a589005bcd564f307f0bc1a6d5ddc95"]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4048000) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0x1) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) waitid$auto_P_PIDFD(0x3, r0, &(0x7f0000000040)={@_si_pad}, 0x20f5, &(0x7f0000000440)={{0x0, 0x80}, {0x8, 0x3}, 0xc2, 0xfffffffffffffff1, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x101, 0x101, 0xfff, 0x3, 0x0, 0x7, 0xf0, 0xfffffffffffffffa}) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0xfffffffffffffff5, 0xd, 0x7) ptrace$auto(0x4206, 0x1, 0x100000000, 0xe855) madvise$auto(0x0, 0xffffffffffff0005, 0x3) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) 51.635883427s ago: executing program 4 (id=4730): socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x18, 0x3, 0x2) sendmmsg$auto(0x3, 0x0, 0x2, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) epoll_create$auto(0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) r0 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r0, 0x0, 0x8fb5) ioctl$auto(0xc8, 0x400454ce, 0xffffffffffffffff) fcntl$auto(0x0, 0x408, 0x100000) setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x3, 0xa, &(0x7f0000000080)='nlctrl\x00', 0x2) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/hung_task_check_interval_secs\x00', 0x88542, 0x0) 51.193323026s ago: executing program 3 (id=4731): close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) time$auto(&(0x7f0000000000)=0x101) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, 0x0, 0x6, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = waitid$auto(0x5, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)={{0x8, 0x80}, {0x2, 0x6}, 0x4, 0x5, 0x1, 0x3, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0x2055}) prctl$auto(0x5, 0x80000000, r1, 0x78, 0x8) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) preadv2$auto(r2, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6, "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"}, 0x6, 0x3, 0xff) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8800, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000040)=0x5) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000180)) mmap$auto(0x1, 0x40009, 0xdf, 0x13, 0xffffffffffffffff, 0x10001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) 48.795626704s ago: executing program 3 (id=4733): write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) io_uring_setup$auto(0xf0, &(0x7f0000000180)={0x6, 0x18, 0xd64, 0xc852, 0x6, 0x7, r0, [0x1, 0x401, 0x1000], {0x7, 0x5, 0x1, 0x4, 0x95, 0xf4c, 0x7fff, 0xfffffffb, 0x65f29f6d}, {0x3, 0xadc, 0x10000, 0x0, 0x5, 0xffffffff, 0x1000, 0x54f, 0x5}}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r1 = socket(0xa, 0x3, 0xff) connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) write$auto_proc_mem_operations_base(0xffffffffffffffff, 0x0, 0x0) syz_clone3(0x0, 0x0) madvise$auto(0x1ffff000, 0x7, 0x100000000) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) futex_wake$auto(0x0, 0x5, 0x4, 0xa) futex_wake$auto(&(0x7f0000000000)="facff2b53ab3522cb329b5a87bdbc091f5a6ad597f2789e870d64db4cf6503135f5a750abc973b65703b", 0xfffffffffffffff8, 0xfff, 0x7f) shmget$auto(0x8, 0x10563, 0x568d1af2) mmap$auto(0x0, 0x2000a, 0x10000000000e1, 0xeb2, 0x401, 0x8000) 48.763969153s ago: executing program 6 (id=4734): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/sunrpc/parameters/tcp_max_slot_table_entries\x00', 0x88282, 0x0) sendfile$auto(r2, r2, 0x0, 0x71) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r1) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40000) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) mmap$auto(0x0, 0x4000005, 0xfffffffffffffe01, 0x8051, 0x3, 0x10000000008000) r3 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r3, &(0x7f0000000140)={{0x0, 0x3, 0x0, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000006c0)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x7}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2400000b756, 0x10001}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000080)={{@raw=0x1002, 0x6, 0xa, 0x7, "26d718b7d3ee69350e4ede7079dcb0c24c8aa1e3c7ee2e00308b8a7d74b0a707f7045e6d035b196ca83379bb"}, 0x7, 0xfffffffc, 0x82, @inferred, @enumerated={0x0, 0x6, "ad75b255b5cdd64a6b7a755de55f8e3b81e6c4e6fbf4f15a5ca5dc29f056113e9b60cd7bd82081ec90b01a6c1ae79b9fd0930da366e011ae30c0a636577776a6", 0x2003, 0xcac}, "18a801006a0900000000000000c4bd5359eeadc8357752b72fa176254d8797cdffd02555ac83a07983eeddcd24b626f54ad9d763dcdc9120af8b7c848ceb55a7"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, 0x0) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000001c0), r3) sendmsg$auto_BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r5, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TQ={0x5, 0x19, 0x9}, @BATADV_ATTR_TT_TTVN={0x5, 0x11, 0x2}, @BATADV_ATTR_TT_TTVN={0x5, 0x11, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4000) futex$auto(&(0x7f0000001d00)=0x4, 0x5, 0x7, 0x0, &(0x7f0000001d80)=0x3ff, 0x401) 48.501720126s ago: executing program 4 (id=4735): write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/net/snmp\x00', 0x40, 0x0) pread64$auto(r4, 0x0, 0x80000000, 0x9fffffffd) pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x0f\xff\x00'/21, 0x100000002, 0x100000001) mq_notify$auto(0xffffffffffffffff, &(0x7f0000000180)={@sival_ptr=0x0, @inferred, 0x0, @_sigev_thread={0x0, 0x0}}) mq_timedsend$auto(r1, 0x0, 0x2, 0x9, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) 47.198547992s ago: executing program 6 (id=4737): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg1\x00', 0x180443, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x121d02, 0x0) socket(0x10, 0x2, 0x14) openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) eventfd$auto(0x3) pipe$auto(0x0) socketpair$auto(0x1e, 0x1, 0x4, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_TCFLSH2(r0, 0x40384708, 0x0) 46.318900462s ago: executing program 6 (id=4738): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2800, 0x0) r0 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(0x0, r1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, 0x0) read$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0x3, 0x402c542b, 0x38) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0xc000810) wait4$auto(0xffffffffffffffff, 0x0, 0x0, 0x0) msgctl$auto_MSG_INFO(0x8, 0xc, 0x0) sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, 0x0, 0x891) 45.725345998s ago: executing program 4 (id=4739): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) waitid$auto_P_ALL(0x0, 0xe, &(0x7f0000000340)={@siginfo_0_0={0xe, 0x2, 0x1, @_sigsys={&(0x7f0000000240)="42b0c89670754d7c136b96b4a66c46a06b2ae30d2dc311827926354870ae18e520c9942cbb727ad9d1004e7ceee0f6528c08e4a11a907dedfe0538dbebd0a46638745a821ec33e749a9a2aefe289a8627446ad2bec1f96856715ac9d7759f01cb6f2daa5a180150a28620b407b9969", 0x2, 0x3}}}, 0x3e, &(0x7f00000003c0)={{0x9, 0xefd}, {0x4, 0x7}, 0x0, 0xfffffffffffffffb, 0x3ff, 0x8101, 0xc, 0xf3, 0x1, 0xd, 0x4, 0x5, 0xfffc, 0x8001, 0xc}) io_uring_setup$auto(0x6, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xae00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x4018aebd, r1) sendto$auto(r0, &(0x7f0000000140)="c99b97a4a18833a72aff5c6edec12838e6c36aa3b8efa7e23eab4f993ce66256c3ee1fa1470cc34d0844ef66ea5db21196afca7b6062c22e25bd38ff3a8ffce75c51cd146c42cece3a3c2eb0447313f733c79892b36978f22e11d89e044a5b7bc7cdd5b31f", 0x0, 0x1e71, &(0x7f0000000000)=@can, 0x2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) 45.609712209s ago: executing program 6 (id=4740): write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/net/snmp\x00', 0x40, 0x0) pread64$auto(r4, 0x0, 0x80000000, 0x9fffffffd) pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x0f\xff\x00'/21, 0x100000002, 0x100000001) mq_notify$auto(0xffffffffffffffff, &(0x7f0000000180)={@sival_ptr=0x0, @inferred, 0x0, @_sigev_thread={0x0, 0x0}}) mq_timedsend$auto(r1, 0x0, 0x2, 0x9, 0x0) close_range$auto(0x2, 0x8, 0x0) 45.334947832s ago: executing program 3 (id=4741): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00@ ', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf251a000000180001801400020062617461647630000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40480c0}, 0x80) mmap$auto(0x0, 0x100, 0x4000000000df, 0x13, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) socket(0x2, 0x1, 0x106) connect$auto(0x3, 0x0, 0x54) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) syz_clone(0xba238800, 0x0, 0x34, 0x0, 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0xea) read$auto(0xffffffffffffffff, 0x0, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x20000003) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x804, 0x0) semget$auto(0x0, 0x13c, 0x1ff) semctl$auto(0x0, 0x9, 0x0, 0x2) 43.682559098s ago: executing program 4 (id=4743): r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001480)='/proc/thread-self/gid_map\x00', 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) sendmsg$auto_NCSI_CMD_PKG_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0xc, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="64060000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000400cc0f00000400060008000100", @ANYRES32=0x0, @ANYBLOB="0004000000000080"], 0xfffffffffffffdcc}, 0x1, 0x0, 0x0, 0x40040}, 0x44000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b4a, 0x9) socket(0x0, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000d00)={0x400, r4, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0xfffffffe}, @NL80211_ATTR_IE_RIC={0x3c8, 0xb2, "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"}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0x2}, @NL80211_ATTR_MLD_ADDR={0xc, 0x13a, "95182ae6f9f110e6"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xe}]}, 0x400}, 0x1, 0x0, 0x0, 0x4044010}, 0x8000) socket(0x1e, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/47, 0x2f) close_range$auto(0x2, 0x8, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x0) io_uring_enter$auto(r2, 0xf, 0x0, 0x2, &(0x7f00000014c0)="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", 0x94) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) 42.098547791s ago: executing program 6 (id=4744): mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) unshare$auto(0x40000080) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$auto_BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)=@link_detach={r0}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={0x0}, 0x1, 0x0, 0x0, 0x91}, 0x10) ioctl$auto_MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x2041, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f0000000040)={0x1, 0xffffffa9}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fcdbdf252100000008000300", @ANYRES32=r3], 0x28}}, 0x40480d0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7100f97bf53b7200000408000300", @ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) 41.390461173s ago: executing program 4 (id=4745): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x40480c0}, 0x80) mmap$auto(0x0, 0x100, 0x4000000000df, 0x13, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) socket(0x2, 0x1, 0x106) connect$auto(0x3, 0x0, 0x54) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) syz_clone(0xba238800, 0x0, 0x34, 0x0, 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0xea) read$auto(0xffffffffffffffff, 0x0, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x20000003) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x804, 0x0) semget$auto(0x0, 0x13c, 0x1ff) semctl$auto(0x0, 0x9, 0x0, 0x2) 29.867433342s ago: executing program 36 (id=4741): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00@ ', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf251a000000180001801400020062617461647630000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40480c0}, 0x80) mmap$auto(0x0, 0x100, 0x4000000000df, 0x13, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) socket(0x2, 0x1, 0x106) connect$auto(0x3, 0x0, 0x54) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) syz_clone(0xba238800, 0x0, 0x34, 0x0, 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0xea) read$auto(0xffffffffffffffff, 0x0, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x20000003) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x804, 0x0) semget$auto(0x0, 0x13c, 0x1ff) semctl$auto(0x0, 0x9, 0x0, 0x2) 26.942803815s ago: executing program 37 (id=4744): mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) unshare$auto(0x40000080) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$auto_BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)=@link_detach={r0}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={0x0}, 0x1, 0x0, 0x0, 0x91}, 0x10) ioctl$auto_MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x2041, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f0000000040)={0x1, 0xffffffa9}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fcdbdf252100000008000300", @ANYRES32=r3], 0x28}}, 0x40480d0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7100f97bf53b7200000408000300", @ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) 25.794167493s ago: executing program 38 (id=4745): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x40480c0}, 0x80) mmap$auto(0x0, 0x100, 0x4000000000df, 0x13, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) socket(0x2, 0x1, 0x106) connect$auto(0x3, 0x0, 0x54) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) syz_clone(0xba238800, 0x0, 0x34, 0x0, 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0xea) read$auto(0xffffffffffffffff, 0x0, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x20000003) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x804, 0x0) semget$auto(0x0, 0x13c, 0x1ff) semctl$auto(0x0, 0x9, 0x0, 0x2) 10.679726265s ago: executing program 8 (id=4774): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) waitid$auto_P_ALL(0x0, 0xe, &(0x7f0000000340)={@siginfo_0_0={0xe, 0x2, 0x1, @_sigsys={&(0x7f0000000240)="42b0c89670754d7c136b96b4a66c46a06b2ae30d2dc311827926354870ae18e520c9942cbb727ad9d1004e7ceee0f6528c08e4a11a907dedfe0538dbebd0a46638745a821ec33e749a9a2aefe289a8627446ad2bec1f96856715ac9d7759f01cb6f2daa5a180150a28620b407b9969", 0x2, 0x3}}}, 0x3e, &(0x7f00000003c0)={{0x9, 0xefd}, {0x4, 0x7}, 0x0, 0xfffffffffffffffb, 0x3ff, 0x8101, 0xc, 0xf3, 0x1, 0xd, 0x4, 0x5, 0xfffc, 0x8001, 0xc}) io_uring_setup$auto(0x6, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xae00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x4018aebd, r1) sendto$auto(r0, &(0x7f0000000140)="c99b97a4a18833a72aff5c6edec12838e6c36aa3b8efa7e23eab4f993ce66256c3ee1fa1470cc34d0844ef66ea5db21196afca7b6062c22e25bd38ff3a8ffce75c51cd146c42cece3a3c2eb0447313f733c79892b36978f22e11d89e044a5b7bc7cdd5b31f", 0x0, 0x1e71, &(0x7f0000000000)=@can, 0x2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) 9.13503929s ago: executing program 8 (id=4775): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/sunrpc/parameters/tcp_max_slot_table_entries\x00', 0x88282, 0x0) sendfile$auto(r2, r2, 0x0, 0x71) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r1) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, r3, 0x301, 0x70bd29, 0x25dfdbfe, {}, [@NETDEV_A_QSTATS_SCOPE={0xc, 0x4, 0x1}]}, 0x20}}, 0x40000) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) mmap$auto(0x0, 0x4000005, 0xfffffffffffffe01, 0x8051, 0x3, 0x10000000008000) r4 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0x3, 0x0, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f00000006c0)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x7}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2400000b756, 0x10001}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000340)={{@raw=0x6, 0x308, 0xffff, 0x9, "cd9ac857d737bb20feeb0c005eb571a89986bbec6f001887a4d49e096afdf3bb0959c5432aadf71c2f91af00", @raw=0x4}, 0x9, 0xf, 0x1, @inferred, @enumerated={0x7133, 0x5, "8e4ccd6746972c6ac28bdde69c5070d317980efcb9b3e8d7b8176a709302cefa4e7ad3920798a929a43f165472bdaab2c5d1c3f67faea7d8cf5430450d8da99c", 0xffffffff, 0xfffffff6}, "842e773e1652f754bc887e438da1a21b2bb21f22fdee260a7182c53b299693a64e7c248a610a2fc8edae9b434d3ad49e011705988084914add78fa45450688a7"}) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000001c0), r4) sendmsg$auto_BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TQ={0x5, 0x19, 0x9}, @BATADV_ATTR_TT_TTVN={0x5, 0x11, 0x2}, @BATADV_ATTR_TT_TTVN={0x5, 0x11, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4000) futex$auto(&(0x7f0000001d00)=0x4, 0x5, 0x7, 0x0, &(0x7f0000001d80)=0x3ff, 0x401) 8.975542625s ago: executing program 9 (id=4760): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x1e, 0x1, 0x0) socket(0x2, 0x1, 0x0) socket(0xa, 0x801, 0x84) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vbi0\x00', 0x80382, 0x0) vmsplice$auto(r0, &(0x7f0000000140)={&(0x7f00000000c0)="bc0e6c90aa18e7a675776ee36eb756c0601842e67a", 0x100000001}, 0x1ff, 0xf) 8.660171156s ago: executing program 7 (id=4776): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x121d02, 0x0) socket(0x10, 0x2, 0x14) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x622340, 0x0) openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) eventfd$auto(0x3) pipe$auto(0x0) socketpair$auto(0x1e, 0x1, 0x4, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_TCFLSH2(r0, 0x40384708, 0x0) 8.439476353s ago: executing program 9 (id=4777): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mlockall$auto(0x7) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/dummy0/addr_gen_mode\x00', 0x1, 0x0) pwrite64$auto(r0, 0x0, 0x0, 0x2000000000040007) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) tgkill$auto(0x0, 0x0, 0x11) readv$auto(0x3, 0x0, 0x7) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010031bd7000fddbdf250c00000018000380140003800300b0800c000200657468746f6f6c001800018014000200776c616e30"], 0x44}}, 0x24048084) 7.563678603s ago: executing program 8 (id=4778): socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x24048004) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/pagemap\x00', 0x309801, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) read$auto_proc_pid_maps_operations_internal(r2, &(0x7f0000000480)=""/4083, 0xff3) 6.815968901s ago: executing program 7 (id=4779): r0 = openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, 0x0, 0x341, 0x0) fcntl$auto_F_GETSIG(r0, 0xb, 0x29fb88a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) fchmodat$auto(r2, &(0x7f0000000080)='./cgroup\x00', 0x3) recvmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket(0xa, 0x2, 0x0) getsockopt$auto(r3, 0x1, 0x49, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mprotect$auto(0x200000000000, 0x806121, 0x4) gettimeofday$auto(&(0x7f0000000180)={0x7, 0x9}, 0x0) tkill$auto(0x1, 0x9) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) 5.880233213s ago: executing program 0 (id=4762): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mkdir$auto(0x0, 0x8001) mount$auto(0x0, 0x0, 0x0, 0x3, 0x0) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/pcrypt/pencrypt/serial_cpumask\x00', 0xa001, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile$auto(r1, r1, 0x0, 0x7fffe000) write$auto(r0, &(0x7f0000000040)=',\x00^\xa2\x02\x00\x05\x00\x00\x00\xd8l\x00\x00\x00\x00\x00\x00\xee\x0f_o\xc0\xee?\xce\xa3\x04\x95Hq\xf4\x00\x00\x00\x00\x00\x00\x006\xe0\xb1d)X6\x7f\xec\x94\xdal\xa1\xbb\x86\x9c\xc2\xef\x02\r9%\x06\xc5\'b%m_\x96A\"\xdd\xe40\xa7\xc3\x9ah\xf3B\xc2\xec\xf8\r\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a', 0x80000000000) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0xf0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r3) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r4, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_FD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.22891098s ago: executing program 7 (id=4780): socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sysfs$auto(0x2, 0x23, 0x0) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000080)=@isdn={0x22, 0x4, 0x0, 0x3, 0xf4}, 0x6d) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/sunrpc/parameters/pool_mode\x00', 0x181302, 0x0) sendfile$auto(r1, r1, 0x0, 0x43) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r2, 0x0, 0x3) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x1, 0x2020009, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) shutdown$auto(0x200000003, 0x2) 4.923903883s ago: executing program 9 (id=4781): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) waitid$auto_P_ALL(0x0, 0xe, &(0x7f0000000340)={@siginfo_0_0={0xe, 0x2, 0x1, @_sigsys={&(0x7f0000000240)="42b0c89670754d7c136b96b4a66c46a06b2ae30d2dc311827926354870ae18e520c9942cbb727ad9d1004e7ceee0f6528c08e4a11a907dedfe0538dbebd0a46638745a821ec33e749a9a2aefe289a8627446ad2bec1f96856715ac9d7759f01cb6f2daa5a180150a28620b407b9969", 0x2, 0x3}}}, 0x3e, &(0x7f00000003c0)={{0x9, 0xefd}, {0x4, 0x7}, 0x0, 0xfffffffffffffffb, 0x3ff, 0x8101, 0xc, 0xf3, 0x1, 0xd, 0x4, 0x5, 0xfffc, 0x8001, 0xc}) io_uring_setup$auto(0x6, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xae00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x4018aebd, r1) sendto$auto(r0, &(0x7f0000000140)="c99b97a4a18833a72aff5c6edec12838e6c36aa3b8efa7e23eab4f993ce66256c3ee1fa1470cc34d0844ef66ea5db21196afca7b6062c22e25bd38ff3a8ffce75c51cd146c42cece3a3c2eb0447313f733c79892b36978f22e11d89e044a5b7bc7cdd5b31f", 0x0, 0x1e71, &(0x7f0000000000)=@can, 0x2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) 3.439117191s ago: executing program 9 (id=4782): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_RXQ_OVFL(r0, 0x8, 0x28, &(0x7f0000000500)=',{\x00', &(0x7f0000000540)=0x5) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, 0x0, 0x0) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r2) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYBLOB="010329bd7000fc"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0x28000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/memory.numa_stat\x00', 0xe2080, 0x0) read$auto(r3, 0x0, 0x20) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x200007, 0x8) read$auto(0x3, 0x0, 0x8080) unshare$auto(0x40000080) ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.737230932s ago: executing program 8 (id=4783): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x80000c}, 0x7, 0x20000000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x220, 0x0) mprotect$auto(0x200000000000, 0x806122, 0xc) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x10000, 0x0) sched_setscheduler$auto(0x0, 0x5, 0x0) mprotect$auto(0x5cb, 0x0, 0xe4b) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0xffffffffffffffff, 0x340000000000) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r1 = openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/gid_map\x00', 0x20002, 0x0) write$auto_proc_gid_map_operations_base(r1, 0x0, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "00800000ffefffffff0200000001"}, 0x55) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8002, 0x0) write$auto(0x3, 0x0, 0xffd8) 2.527460642s ago: executing program 7 (id=4784): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x1e, 0x1, 0x0) socket(0x2, 0x1, 0x0) socket(0xa, 0x801, 0x84) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vbi0\x00', 0x80382, 0x0) vmsplice$auto(r0, &(0x7f0000000140)={&(0x7f00000000c0)="bc0e6c90aa18e7a675776ee36eb756c0601842e67a", 0x100000001}, 0x1ff, 0xf) 2.168879362s ago: executing program 7 (id=4785): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0x1, 0x3, 0x2) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r1 = socket(0x1e, 0x1, 0x0) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'veth0_to_bridge\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="2f212cbd7010ca705d", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8810) sendmsg$auto_ETHTOOL_MSG_MM_GET(r1, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x450000}, 0xc, &(0x7f0000000500)={0x0}}, 0x4040) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) socketpair$auto(0xfffffffc, 0x1, 0x8000000000000000, 0x0) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vbi0\x00', 0x80382, 0x0) vmsplice$auto(r0, &(0x7f0000000140)={&(0x7f00000000c0)="bc0e6c90aa18e7a675776ee36eb756c0601842e67a", 0x100000001}, 0x1ff, 0xf) ioctl$auto(r6, 0xc0045627, r1) 1.559186013s ago: executing program 7 (id=4786): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x4, 0x100000000000034, 0x6) fsopen$auto(0x0, 0x1) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x22, 0x3, 0x0) ioctl$auto(0xffffffffffffffff, 0x40104d01, 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000002dc0)='/dev/adsp1\x00', 0x2401, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) readv$auto(0x3, 0x0, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{&(0x7f0000000040)="7247d54f73e9ac4e45aaa5e85f8850f65713538dfe58e39d7c38bc0a432cc91ff6f4", 0x9, &(0x7f0000000080)={&(0x7f00000003c0)="2a7eb014d44936273c5ed7d8988b405711642725d428e8800b5d7bd6fea30d6543c64c4965f0d8a31bdd92550ebe354df12d9e297268f7e0786720cd9d46ad15504a9e47c5103b4104adcefbbee6a2b45c70d771a0924f41315f82d6d15b87f410bc3be6fd2c6dd482c01076a98494a39b1215765fc5856651ae21a8a507fede5bcb8a0ac405478578b5798190f0a92a84d4002e7728c139f71e585cd22de2efce0f7a6e7764f54a2c62dd54941d0f5fe3ca8f3883447bbdb4a3f5fb13bc9be02cfc8ec1b7da", 0x3}, 0x8, 0x0, 0x9}}, 0x845, 0xef0) shmctl$auto_SHM_INFO(0x6, 0xe, 0x0) msync$auto(0x0, 0xe0, 0x6) 1.289884832s ago: executing program 8 (id=4787): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) waitid$auto_P_ALL(0x0, 0xe, &(0x7f0000000340)={@siginfo_0_0={0xe, 0x2, 0x1, @_sigsys={&(0x7f0000000240)="42b0c89670754d7c136b96b4a66c46a06b2ae30d2dc311827926354870ae18e520c9942cbb727ad9d1004e7ceee0f6528c08e4a11a907dedfe0538dbebd0a46638745a821ec33e749a9a2aefe289a8627446ad2bec1f96856715ac9d7759f01cb6f2daa5a180150a28620b407b9969", 0x2, 0x3}}}, 0x3e, &(0x7f00000003c0)={{0x9, 0xefd}, {0x4, 0x7}, 0x0, 0xfffffffffffffffb, 0x3ff, 0x8101, 0xc, 0xf3, 0x1, 0xd, 0x4, 0x5, 0xfffc, 0x8001, 0xc}) io_uring_setup$auto(0x6, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xae00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x4018aebd, r1) sendto$auto(r0, &(0x7f0000000140)="c99b97a4a18833a72aff5c6edec12838e6c36aa3b8efa7e23eab4f993ce66256c3ee1fa1470cc34d0844ef66ea5db21196afca7b6062c22e25bd38ff3a8ffce75c51cd146c42cece3a3c2eb0447313f733c79892b36978f22e11d89e044a5b7bc7cdd5b31f", 0x0, 0x1e71, &(0x7f0000000000)=@can, 0x2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) 28.798931ms ago: executing program 8 (id=4788): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) socket(0x1d, 0x2, 0x6) r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1, 0xfd}, 0x6a) write$auto(0x3, 0x0, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$auto(0x3, 0x0, 0x8080) madvise$auto(0x0, 0x20499d, 0x9) socket(0x29, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x80800, 0x0) r2 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = wait4$auto(r2, 0x0, 0x80000001, 0x0) r4 = syz_open_procfs$namespace(r3, 0x0) ioctl$auto(0x3, 0xc0383e04, r4) 0s ago: executing program 9 (id=4789): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) ioctl$auto_BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000500)={0x40a, 0x3, 0x3ac, 0x8, {0x1, 0x4, 0xb, 0x3, 0x8, 0x4, 0x9, 0x2, 0xe, 0xa5, 0x1, 0x4, 0x0, 0xf, 0xff}}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000480)='/dev/radio13\x00', 0x802, 0x0) write$auto(0x3, 0x0, 0xfffffdef) keyctl$auto(0x1d, 0xffffffffffffffff, 0x8, 0x5, 0x8) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), r0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) kernel console output (not intermixed with test programs): [ 918.673921][T16088] get_futex_key+0x1d2/0x1620 [ 918.673955][T16088] ? __pfx_get_futex_key+0x10/0x10 [ 918.673986][T16088] ? putname+0xb1/0x110 [ 918.674013][T16088] ? kasan_save_stack+0x3f/0x50 [ 918.674052][T16088] ? kasan_save_stack+0x30/0x50 [ 918.674090][T16088] ? kasan_save_track+0x14/0x30 [ 918.674128][T16088] ? kasan_save_free_info+0x3b/0x70 [ 918.674159][T16088] ? __kasan_slab_free+0x5f/0x80 [ 918.674181][T16088] ? kmem_cache_free+0x124/0x6a0 [ 918.674218][T16088] futex_wake+0xea/0x530 [ 918.674258][T16088] ? __pfx_futex_wake+0x10/0x10 [ 918.674326][T16088] do_futex+0x32b/0x350 [ 918.674359][T16088] ? __pfx_do_futex+0x10/0x10 [ 918.674400][T16088] __x64_sys_futex+0x34f/0x4d0 [ 918.674437][T16088] ? __pfx___x64_sys_futex+0x10/0x10 [ 918.674482][T16088] do_syscall_64+0x106/0xf80 [ 918.674520][T16088] ? clear_bhb_loop+0x40/0x90 [ 918.674568][T16088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.674595][T16088] RIP: 0033:0x7f1c0779c799 [ 918.674615][T16088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.674639][T16088] RSP: 002b:00007f1c0859f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 918.674663][T16088] RAX: ffffffffffffffda RBX: 00007f1c07a16098 RCX: 00007f1c0779c799 [ 918.674679][T16088] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1c07a1609c [ 918.674695][T16088] RBP: 00007f1c07a16090 R08: 0000000000000000 R09: 0000000000000000 [ 918.674710][T16088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 918.674725][T16088] R13: 00007f1c07a16128 R14: 00007fffed8adf60 R15: 00007fffed8ae048 [ 918.674756][T16088] [ 928.417004][T16182] tipc: Started in network mode [ 928.511274][T16182] tipc: Node identity ffffffff, cluster identity 4711 [ 928.574896][T16182] tipc: Node number set to 4294967295 [ 930.517330][T16194] zswap: compressor G not available [ 930.706852][T16208] futex_wake_op: syz.2.3159 tries to shift op by -2048; fix this program [ 930.789179][T16208] futex_wake_op: syz.2.3159 tries to shift op by -2048; fix this program [ 933.291639][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 933.673831][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.781516][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807cf4e400: rx timeout, send abort [ 933.791159][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807cf4e400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 935.436525][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807cf4c800: rx timeout, send abort [ 935.445579][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807cf4c000: rx timeout, send abort [ 935.454943][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807cf4c800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 935.470133][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807cf4c000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 939.871071][T16266] __vm_enough_memory: pid: 16266, comm: syz.3.3172, bytes: 4398046511104 not enough memory for the allocation [ 945.439595][T13056] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 949.679663][T16365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3196'. [ 949.899017][T16366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3196'. [ 950.023527][T16366] Invalid ELF header magic: != ELF [ 954.243433][T16400] __vm_enough_memory: pid: 16400, comm: syz.3.3203, bytes: 4398046511104 not enough memory for the allocation [ 965.236376][T16488] sp0: Synchronizing with TNC [ 967.285190][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3228'. [ 967.354514][T16517] netlink: 354 bytes leftover after parsing attributes in process `syz.2.3228'. [ 970.846383][T16550] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3238'. [ 971.933005][T15791] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 972.242722][T13056] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 976.008751][T16615] FAULT_INJECTION: forcing a failure. [ 976.008751][T16615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 976.201239][T16609] netlink: 326 bytes leftover after parsing attributes in process `syz.3.3256'. [ 976.757818][T16615] CPU: 0 UID: 0 PID: 16615 Comm: syz.3.3256 Tainted: G L syzkaller #0 PREEMPT(full) [ 976.757861][T16615] Tainted: [L]=SOFTLOCKUP [ 976.757870][T16615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 976.757887][T16615] Call Trace: [ 976.757897][T16615] [ 976.757908][T16615] dump_stack_lvl+0x100/0x190 [ 976.757954][T16615] should_fail_ex.cold+0x5/0xa [ 976.757985][T16615] _copy_to_user+0x32/0xd0 [ 976.758020][T16615] poll_select_finish+0x32f/0x670 [ 976.758069][T16615] ? __pfx_poll_select_finish+0x10/0x10 [ 976.758120][T16615] ? ktime_get_ts64+0x2d2/0x3f0 [ 976.758150][T16615] ? read_tsc+0x9/0x20 [ 976.758179][T16615] ? ktime_get_ts64+0x256/0x3f0 [ 976.758211][T16615] kern_select+0x21b/0x270 [ 976.758256][T16615] ? __pfx_kern_select+0x10/0x10 [ 976.758308][T16615] __x64_sys_select+0xbd/0x160 [ 976.758331][T16615] ? do_syscall_64+0x95/0xf80 [ 976.758372][T16615] ? lockdep_hardirqs_on+0x78/0x100 [ 976.758409][T16615] do_syscall_64+0x106/0xf80 [ 976.758446][T16615] ? clear_bhb_loop+0x40/0x90 [ 976.758478][T16615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.758505][T16615] RIP: 0033:0x7f1c0779c799 [ 976.758526][T16615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 976.758558][T16615] RSP: 002b:00007f1c0859f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 976.758583][T16615] RAX: ffffffffffffffda RBX: 00007f1c07a16090 RCX: 00007f1c0779c799 [ 976.758600][T16615] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 0000000000000001 [ 976.758617][T16615] RBP: 00007f1c07832c99 R08: 00002000000001c0 R09: 0000000000000000 [ 976.758633][T16615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 976.758648][T16615] R13: 00007f1c07a16128 R14: 00007f1c07a16090 R15: 00007fffed8ae048 [ 976.758681][T16615] [ 983.256124][T16652] can: request_module (can-proto-5) failed. [ 994.484963][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.498699][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 996.889689][T13056] Bluetooth: hci4: unexpected event 0x0e length: 440 > 260 [ 996.890772][T13056] Bluetooth: hci4: unexpected event for opcode 0x0f00 [ 1000.960893][T13056] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1000.972320][T13056] Bluetooth: hci4: Injecting HCI hardware error event [ 1000.987286][T15791] Bluetooth: hci4: hardware error 0x00 [ 1002.589018][T16793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3295'. [ 1002.720273][T16796] netlink: 'syz.3.3295': attribute type 2 has an invalid length. [ 1002.768822][T16796] netlink: 'syz.3.3295': attribute type 3 has an invalid length. [ 1002.847969][T16796] netlink: 51505 bytes leftover after parsing attributes in process `syz.3.3295'. [ 1002.938714][T16796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3295'. [ 1003.038287][T15791] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1003.068769][T16801] net_ratelimit: 8 callbacks suppressed [ 1003.068790][T16801] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1006.502607][T16829] input: f¬ as /devices/virtual/input/input16 [ 1007.742411][T16836] binder: 16835:16836 ioctl c018620c 200000000040 returned -22 [ 1008.158872][T16834] can: request_module (can-proto-5) failed. [ 1008.371207][T16834] netlink: 186 bytes leftover after parsing attributes in process `syz.2.3312'. [ 1011.655926][T16865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3308'. [ 1013.867792][T16882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3315'. [ 1013.967122][T16882] netlink: 354 bytes leftover after parsing attributes in process `syz.4.3315'. [ 1014.782011][ T30] audit: type=1800 audit(2147502410.988:16): pid=16886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3316" name="dbroot" dev="configfs" ino=217439 res=0 errno=0 [ 1015.066283][T16886] zswap: compressor not available [ 1016.229774][T16904] netlink: 25 bytes leftover after parsing attributes in process `syz.4.3321'. [ 1020.397800][T16926] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1021.999659][T16942] random: crng reseeded on system resumption [ 1025.694877][T16979] sd 0:0:1:0: PR command failed: 1026 [ 1025.785918][T16979] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1025.867987][T16979] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1026.136030][T16979] can0: slcan on ttyS2. [ 1026.517208][T16978] can0 (unregistered): slcan off ttyS2. [ 1029.154653][T17009] FAULT_INJECTION: forcing a failure. [ 1029.154653][T17009] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1029.375674][T17009] CPU: 0 UID: 0 PID: 17009 Comm: syz.3.3339 Tainted: G L syzkaller #0 PREEMPT(full) [ 1029.375716][T17009] Tainted: [L]=SOFTLOCKUP [ 1029.375725][T17009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1029.375748][T17009] Call Trace: [ 1029.375756][T17009] [ 1029.375765][T17009] dump_stack_lvl+0x100/0x190 [ 1029.375808][T17009] should_fail_ex.cold+0x5/0xa [ 1029.375832][T17009] ? prepare_alloc_pages+0x16d/0x5f0 [ 1029.375865][T17009] should_fail_alloc_page+0xeb/0x140 [ 1029.375893][T17009] prepare_alloc_pages+0x1f0/0x5f0 [ 1029.375927][T17009] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1029.375981][T17009] ? kasan_save_stack+0x3f/0x50 [ 1029.376020][T17009] ? kasan_save_stack+0x30/0x50 [ 1029.376057][T17009] ? kasan_save_track+0x14/0x30 [ 1029.376095][T17009] ? __kasan_slab_alloc+0x89/0x90 [ 1029.376117][T17009] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1029.376155][T17009] ? ptlock_alloc+0x1f/0x70 [ 1029.376187][T17009] ? pte_alloc_one+0x82/0x3d0 [ 1029.376213][T17009] ? __pte_alloc+0x6d/0x3e0 [ 1029.376236][T17009] ? copy_page_range+0x3e51/0x6570 [ 1029.376267][T17009] ? dup_mmap+0xd25/0x2180 [ 1029.376294][T17009] ? copy_process+0x7523/0x7a40 [ 1029.376321][T17009] ? kernel_clone+0xfc/0x9a0 [ 1029.376348][T17009] ? __do_sys_clone+0xd9/0x120 [ 1029.376376][T17009] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1029.376422][T17009] ? look_up_lock_class+0x55/0x120 [ 1029.376466][T17009] ? __lock_acquire+0x4a5/0x2630 [ 1029.376502][T17009] ? look_up_lock_class+0x55/0x120 [ 1029.376537][T17009] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1029.376582][T17009] ? policy_nodemask+0xed/0x4f0 [ 1029.376611][T17009] alloc_pages_mpol+0x1fb/0x550 [ 1029.376639][T17009] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1029.376663][T17009] ? page_table_check_set+0x49a/0xa10 [ 1029.376695][T17009] alloc_pages_noprof+0x131/0x390 [ 1029.376723][T17009] pte_alloc_one+0x1c/0x3d0 [ 1029.376751][T17009] __pte_alloc+0x6d/0x3e0 [ 1029.376776][T17009] ? __pfx___pte_alloc+0x10/0x10 [ 1029.376800][T17009] ? __pfx___might_resched+0x10/0x10 [ 1029.376836][T17009] ? copy_page_range+0x1e9d/0x6570 [ 1029.376874][T17009] copy_page_range+0x3e51/0x6570 [ 1029.376941][T17009] ? __pfx_copy_page_range+0x10/0x10 [ 1029.376992][T17009] ? __pfx___might_resched+0x10/0x10 [ 1029.377041][T17009] ? up_write+0x290/0x4f0 [ 1029.377081][T17009] dup_mmap+0xd25/0x2180 [ 1029.377122][T17009] ? __pfx_dup_mmap+0x10/0x10 [ 1029.377149][T17009] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1029.377190][T17009] ? __lock_acquire+0x4a5/0x2630 [ 1029.377222][T17009] ? find_held_lock+0x2b/0x80 [ 1029.377244][T17009] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 1029.377297][T17009] copy_process+0x7523/0x7a40 [ 1029.377341][T17009] ? __pfx_copy_process+0x10/0x10 [ 1029.377370][T17009] ? find_held_lock+0x2b/0x80 [ 1029.377412][T17009] kernel_clone+0xfc/0x9a0 [ 1029.377440][T17009] ? __pfx_futex_wait+0x10/0x10 [ 1029.377482][T17009] ? __pfx_kernel_clone+0x10/0x10 [ 1029.377528][T17009] __do_sys_clone+0xd9/0x120 [ 1029.377558][T17009] ? __pfx___do_sys_clone+0x10/0x10 [ 1029.377587][T17009] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 1029.377746][T17009] do_syscall_64+0x106/0xf80 [ 1029.377782][T17009] ? clear_bhb_loop+0x40/0x90 [ 1029.377813][T17009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.377839][T17009] RIP: 0033:0x7f1c0779c799 [ 1029.377859][T17009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1029.377884][T17009] RSP: 002b:00007f1c085bffd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1029.377909][T17009] RAX: ffffffffffffffda RBX: 00007f1c07a15fa0 RCX: 00007f1c0779c799 [ 1029.377925][T17009] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1029.377940][T17009] RBP: 00007f1c07832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1029.377955][T17009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1029.377970][T17009] R13: 00007f1c07a16038 R14: 00007f1c07a15fa0 R15: 00007fffed8ae048 [ 1029.378026][T17009] [ 1034.200040][T17055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3349'. [ 1034.290152][T17057] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3350'. [ 1034.321730][T17055] netlink: 354 bytes leftover after parsing attributes in process `syz.3.3349'. [ 1035.185454][T17057] veth1_macvtap: left promiscuous mode [ 1038.172414][T17087] random: crng reseeded on system resumption [ 1038.326403][T17087] Restarting kernel threads ... [ 1038.461311][T17087] Done restarting kernel threads. [ 1043.437482][T15791] Bluetooth: hci3: unexpected event 0x1c length: 725 > 5 [ 1045.049219][T17146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3369'. [ 1045.220335][T17150] netlink: 'syz.3.3369': attribute type 1 has an invalid length. [ 1045.298982][T17150] netlink: 51505 bytes leftover after parsing attributes in process `syz.3.3369'. [ 1046.013774][T17154] XFS: Clearing xfsstats [ 1051.283091][T15791] Bluetooth: hci2: unexpected event 0x1c length: 725 > 5 [ 1054.020556][T17210] FAULT_INJECTION: forcing a failure. [ 1054.020556][T17210] name failslab, interval 1, probability 0, space 0, times 0 [ 1054.424428][T17210] CPU: 0 UID: 0 PID: 17210 Comm: syz.3.3385 Tainted: G L syzkaller #0 PREEMPT(full) [ 1054.424469][T17210] Tainted: [L]=SOFTLOCKUP [ 1054.424478][T17210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1054.424493][T17210] Call Trace: [ 1054.424502][T17210] [ 1054.424511][T17210] dump_stack_lvl+0x100/0x190 [ 1054.424555][T17210] should_fail_ex.cold+0x5/0xa [ 1054.424584][T17210] should_failslab+0xc2/0x120 [ 1054.424611][T17210] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1054.424645][T17210] ? sctp_auth_shkey_create+0x9e/0x210 [ 1054.424690][T17210] sctp_auth_shkey_create+0x9e/0x210 [ 1054.424732][T17210] sctp_endpoint_new+0x589/0xb20 [ 1054.424846][T17210] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 1054.424890][T17210] ? lockdep_init_map_type+0x5c/0x250 [ 1054.424930][T17210] sctp_init_sock+0xe2b/0x1300 [ 1054.424967][T17210] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 1054.425005][T17210] sctp_v6_init_sock+0x16/0x70 [ 1054.425040][T17210] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 1054.425077][T17210] inet6_create+0xb21/0x12b0 [ 1054.425117][T17210] ? inet6_create+0x7f/0x12b0 [ 1054.425157][T17210] __sock_create+0x339/0x860 [ 1054.425192][T17210] inet_ctl_sock_create+0x94/0x230 [ 1054.425220][T17210] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 1054.425247][T17210] ? timer_init_key+0x150/0x340 [ 1054.425279][T17210] ? __pfx_sctp_ctrlsock_init+0x10/0x10 [ 1054.425324][T17210] sctp_ctrlsock_init+0x40/0xd0 [ 1054.425358][T17210] ops_init+0x1e2/0x5f0 [ 1054.425401][T17210] setup_net+0x118/0x3a0 [ 1054.425447][T17210] ? __pfx_setup_net+0x10/0x10 [ 1054.425483][T17210] ? lockdep_init_map_type+0x5c/0x250 [ 1054.425518][T17210] ? mutex_init_lockep+0x110/0x150 [ 1054.425557][T17210] copy_net_ns+0x46f/0x7c0 [ 1054.425583][T17210] create_new_namespaces+0x3ea/0xac0 [ 1054.425617][T17210] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1054.425647][T17210] ksys_unshare+0x473/0xad0 [ 1054.425680][T17210] ? __pfx_ksys_unshare+0x10/0x10 [ 1054.425723][T17210] __x64_sys_unshare+0x31/0x40 [ 1054.425756][T17210] do_syscall_64+0x106/0xf80 [ 1054.425793][T17210] ? clear_bhb_loop+0x40/0x90 [ 1054.425823][T17210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.425849][T17210] RIP: 0033:0x7f1c0779c799 [ 1054.425870][T17210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1054.425894][T17210] RSP: 002b:00007f1c0859f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1054.425919][T17210] RAX: ffffffffffffffda RBX: 00007f1c07a16090 RCX: 00007f1c0779c799 [ 1054.425936][T17210] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1054.425951][T17210] RBP: 00007f1c07832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1054.425966][T17210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1054.425982][T17210] R13: 00007f1c07a16128 R14: 00007f1c07a16090 R15: 00007fffed8ae048 [ 1054.426013][T17210] [ 1055.963797][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.972578][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1069.118602][T17306] : Can't lookup blockdev [ 1077.908870][T17379] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3425'. [ 1084.687573][T17438] random: crng reseeded on system resumption [ 1087.473547][T17469] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1087.549291][T17469] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1087.614723][T17469] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1089.518179][T15791] Bluetooth: hci3: command 0x0c1a tx timeout [ 1089.603159][T15791] Bluetooth: hci2: command 0x0c1a tx timeout [ 1089.681050][T15791] Bluetooth: hci1: command 0x0c1a tx timeout [ 1092.298980][T17525] can0: slcan on pty238. [ 1092.690032][T17522] can0 (unregistered): slcan off pty238. [ 1095.123106][T17547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3469'. [ 1106.748300][T17671] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1106.850996][T17671] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1106.907316][T17671] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1108.798988][T15791] Bluetooth: hci3: command 0x0c1a tx timeout [ 1108.880001][T15791] Bluetooth: hci2: command 0x0c1a tx timeout [ 1108.958514][T15791] Bluetooth: hci1: command 0x0c1a tx timeout [ 1112.837053][T17720] __vm_enough_memory: pid: 17720, comm: syz.1.3508, bytes: 4398046511104 not enough memory for the allocation [ 1117.362400][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1117.369350][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.339374][T15791] Bluetooth: hci2: unexpected event 0x32 length: 727 > 9 [ 1120.524643][T17786] __vm_enough_memory: pid: 17786, comm: syz.2.3522, bytes: 4398046511104 not enough memory for the allocation [ 1132.098914][T17888] hub 1-0:1.0: USB hub found [ 1132.180193][T17888] hub 1-0:1.0: 1 port detected [ 1134.784731][T17912] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3550'. [ 1135.815149][T17923] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3562'. [ 1138.731395][T17956] random: crng reseeded on system resumption [ 1147.560689][T18038] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1168.392014][T18197] netlink: zone id is out of range [ 1168.397384][T18197] netlink: zone id is out of range [ 1168.692962][T18201] netlink: zone id is out of range [ 1168.831423][T18197] netlink: zone id is out of range [ 1168.887140][T18201] netlink: zone id is out of range [ 1168.965735][T18197] netlink: zone id is out of range [ 1169.131039][T18201] netlink: zone id is out of range [ 1169.136525][T18201] netlink: zone id is out of range [ 1169.249131][T18197] netlink: zone id is out of range [ 1169.256147][T18197] netlink: zone id is out of range [ 1178.817280][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.843164][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.454632][T18270] FAULT_INJECTION: forcing a failure. [ 1179.454632][T18270] name failslab, interval 1, probability 0, space 0, times 0 [ 1180.121900][T18270] CPU: 0 UID: 0 PID: 18270 Comm: syz.3.3636 Tainted: G L syzkaller #0 PREEMPT(full) [ 1180.121944][T18270] Tainted: [L]=SOFTLOCKUP [ 1180.121953][T18270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1180.121969][T18270] Call Trace: [ 1180.121978][T18270] [ 1180.121987][T18270] dump_stack_lvl+0x100/0x190 [ 1180.122038][T18270] should_fail_ex.cold+0x5/0xa [ 1180.122074][T18270] should_failslab+0xc2/0x120 [ 1180.122103][T18270] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1180.122143][T18270] ? security_inode_alloc+0x3b/0x2c0 [ 1180.122171][T18270] ? lockdep_init_map_type+0x5c/0x250 [ 1180.122211][T18270] security_inode_alloc+0x3b/0x2c0 [ 1180.122237][T18270] inode_init_always_gfp+0xced/0x1040 [ 1180.122287][T18270] alloc_inode+0x8e/0x250 [ 1180.122322][T18270] new_inode+0x22/0x1c0 [ 1180.122359][T18270] hugetlbfs_get_inode+0x313/0x750 [ 1180.122419][T18270] hugetlb_file_setup+0x3cc/0x5b0 [ 1180.122450][T18270] newseg+0xabb/0xed0 [ 1180.122551][T18270] ? __pfx_newseg+0x10/0x10 [ 1180.122582][T18270] ? down_write+0x146/0x1f0 [ 1180.122607][T18270] ? ksys_write+0x190/0x250 [ 1180.122629][T18270] ? ksys_write+0x190/0x250 [ 1180.122656][T18270] ipcget+0xee/0xf50 [ 1180.122713][T18270] ? do_futex+0x192/0x350 [ 1180.122747][T18270] ? __pfx_do_futex+0x10/0x10 [ 1180.122784][T18270] ? __pfx_ipcget+0x10/0x10 [ 1180.122818][T18270] ? __x64_sys_futex+0x34f/0x4d0 [ 1180.122849][T18270] ? __x64_sys_futex+0x358/0x4d0 [ 1180.122886][T18270] __x64_sys_shmget+0x13b/0x1b0 [ 1180.122919][T18270] ? __pfx___x64_sys_shmget+0x10/0x10 [ 1180.122961][T18270] do_syscall_64+0x106/0xf80 [ 1180.122997][T18270] ? clear_bhb_loop+0x40/0x90 [ 1180.123028][T18270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.123053][T18270] RIP: 0033:0x7f1c0779c799 [ 1180.123082][T18270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1180.123112][T18270] RSP: 002b:00007f1c0857e028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 1180.123137][T18270] RAX: ffffffffffffffda RBX: 00007f1c07a16180 RCX: 00007f1c0779c799 [ 1180.123153][T18270] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 1180.123169][T18270] RBP: 00007f1c07832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1180.123185][T18270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1180.123201][T18270] R13: 00007f1c07a16218 R14: 00007f1c07a16180 R15: 00007fffed8ae048 [ 1180.123233][T18270] [ 1184.921378][T18309] vivid-007: ================= START STATUS ================= [ 1185.121917][T18309] vivid-007: Generate PTS: true [ 1185.201437][T18309] vivid-007: Generate SCR: true [ 1185.404294][T18309] tpg source WxH: 320x240 (Y'CbCr) [ 1185.471064][T18309] tpg field: 1 [ 1185.474688][T18309] tpg crop: (0,0)/320x240 [ 1185.696248][T18309] tpg compose: (0,0)/320x240 [ 1185.732298][T18309] tpg colorspace: 8 [ 1185.848192][T18309] tpg transfer function: 0/0 [ 1185.910913][T18309] tpg Y'CbCr encoding: 0/0 [ 1185.946873][T18326] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3648'. [ 1186.098731][T18309] tpg quantization: 0/0 [ 1186.126819][T18309] tpg RGB range: 0/2 [ 1186.212814][T18309] vivid-007: ================== END STATUS ================== [ 1189.872459][T18361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3656'. [ 1197.538687][T18404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3668'. [ 1197.698682][T18410] netlink: 'syz.3.3668': attribute type 1 has an invalid length. [ 1197.872470][T18410] netlink: 'syz.3.3668': attribute type 6 has an invalid length. [ 1198.824495][T18415] Invalid ELF header magic: != ELF [ 1199.008483][T18425] net_ratelimit: 16 callbacks suppressed [ 1199.008505][T18425] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1205.198934][T18458] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3682'. [ 1205.418715][T18458] vcan0: entered promiscuous mode [ 1215.475377][T18533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3698'. [ 1215.643202][T18534] netlink: 'syz.4.3698': attribute type 1 has an invalid length. [ 1215.797679][T18534] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3698'. [ 1217.327529][T18538] FAULT_INJECTION: forcing a failure. [ 1217.327529][T18538] name failslab, interval 1, probability 0, space 0, times 0 [ 1217.458451][T18538] CPU: 0 UID: 0 PID: 18538 Comm: syz.3.3701 Tainted: G L syzkaller #0 PREEMPT(full) [ 1217.458500][T18538] Tainted: [L]=SOFTLOCKUP [ 1217.458509][T18538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1217.458525][T18538] Call Trace: [ 1217.458534][T18538] [ 1217.458544][T18538] dump_stack_lvl+0x100/0x190 [ 1217.458589][T18538] should_fail_ex.cold+0x5/0xa [ 1217.458619][T18538] should_failslab+0xc2/0x120 [ 1217.458647][T18538] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1217.458682][T18538] ? alloc_fs_context+0x57/0xf40 [ 1217.458748][T18538] alloc_fs_context+0x57/0xf40 [ 1217.458783][T18538] mq_init_ns+0x16e/0x820 [ 1217.458814][T18538] copy_ipcs+0x3dd/0x7e0 [ 1217.458895][T18538] create_new_namespaces+0x20a/0xac0 [ 1217.458924][T18538] ? security_capable+0x80/0x260 [ 1217.458970][T18538] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1217.459004][T18538] ksys_unshare+0x473/0xad0 [ 1217.459041][T18538] ? __pfx_ksys_unshare+0x10/0x10 [ 1217.459107][T18538] __x64_sys_unshare+0x31/0x40 [ 1217.459140][T18538] do_syscall_64+0x106/0xf80 [ 1217.459186][T18538] ? clear_bhb_loop+0x40/0x90 [ 1217.459217][T18538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.459243][T18538] RIP: 0033:0x7f1c0779c799 [ 1217.459264][T18538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1217.459289][T18538] RSP: 002b:00007f1c085c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1217.459313][T18538] RAX: ffffffffffffffda RBX: 00007f1c07a15fa0 RCX: 00007f1c0779c799 [ 1217.459329][T18538] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 1217.459344][T18538] RBP: 00007f1c07832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1217.459360][T18538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1217.459375][T18538] R13: 00007f1c07a16038 R14: 00007f1c07a15fa0 R15: 00007fffed8ae048 [ 1217.459405][T18538] [ 1217.790857][T18538] FAULT_INJECTION: forcing a failure. [ 1217.790857][T18538] name failslab, interval 1, probability 0, space 0, times 0 [ 1217.804420][T18538] CPU: 0 UID: 0 PID: 18538 Comm: syz.3.3701 Tainted: G L syzkaller #0 PREEMPT(full) [ 1217.804461][T18538] Tainted: [L]=SOFTLOCKUP [ 1217.804583][T18538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1217.804600][T18538] Call Trace: [ 1217.804610][T18538] [ 1217.804621][T18538] dump_stack_lvl+0x100/0x190 [ 1217.804665][T18538] should_fail_ex.cold+0x5/0xa [ 1217.804693][T18538] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 1217.804725][T18538] should_failslab+0xc2/0x120 [ 1217.804752][T18538] __kmalloc_noprof+0xe0/0x850 [ 1217.804790][T18538] ? rcu_is_watching+0x12/0xc0 [ 1217.804835][T18538] genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 1217.804870][T18538] genl_family_rcv_msg_doit+0xc7/0x300 [ 1217.804900][T18538] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1217.804926][T18538] ? genl_get_cmd+0x3ef/0x720 [ 1217.804958][T18538] ? __dev_queue_xmit+0x5af/0x4800 [ 1217.804992][T18538] ? __radix_tree_lookup+0x217/0x2b0 [ 1217.805032][T18538] genl_rcv_msg+0x560/0x800 [ 1217.805069][T18538] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1217.805097][T18538] ? __pfx_ctrl_getfamily+0x10/0x10 [ 1217.805136][T18538] netlink_rcv_skb+0x159/0x420 [ 1217.805177][T18538] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1217.805204][T18538] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1217.805255][T18538] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1217.805296][T18538] genl_rcv+0x28/0x40 [ 1217.805318][T18538] netlink_unicast+0x5aa/0x870 [ 1217.805362][T18538] ? __pfx_netlink_unicast+0x10/0x10 [ 1217.805418][T18538] netlink_sendmsg+0x8b0/0xda0 [ 1217.805463][T18538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1217.805513][T18538] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1217.805561][T18538] __sys_sendto+0x468/0x4b0 [ 1217.805593][T18538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1217.805634][T18538] ? __pfx___sys_sendto+0x10/0x10 [ 1217.805677][T18538] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1217.805722][T18538] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1217.805786][T18538] __x64_sys_sendto+0xe0/0x1c0 [ 1217.805823][T18538] ? do_syscall_64+0x95/0xf80 [ 1217.805859][T18538] ? lockdep_hardirqs_on+0x78/0x100 [ 1217.805895][T18538] do_syscall_64+0x106/0xf80 [ 1217.805931][T18538] ? clear_bhb_loop+0x40/0x90 [ 1217.805961][T18538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.805990][T18538] RIP: 0033:0x7f1c0775cfce [ 1217.806011][T18538] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1217.806036][T18538] RSP: 002b:00007f1c085bee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1217.806061][T18538] RAX: ffffffffffffffda RBX: 00007f1c085c06c0 RCX: 00007f1c0775cfce [ 1217.806077][T18538] RDX: 000000000000001c RSI: 00007f1c085bf000 RDI: 0000000000000005 [ 1217.806093][T18538] RBP: 0000000000000000 R08: 00007f1c085bef04 R09: 000000000000000c [ 1217.806109][T18538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1217.806124][T18538] R13: 00007f1c085bef58 R14: 00007f1c085bf000 R15: 0000000000000000 [ 1217.806155][T18538] [ 1226.406332][T18609] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3716'. [ 1227.140269][T18620] FAULT_INJECTION: forcing a failure. [ 1227.140269][T18620] name failslab, interval 1, probability 0, space 0, times 0 [ 1227.260135][T18620] CPU: 0 UID: 0 PID: 18620 Comm: syz.3.3720 Tainted: G L syzkaller #0 PREEMPT(full) [ 1227.260175][T18620] Tainted: [L]=SOFTLOCKUP [ 1227.260184][T18620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1227.260200][T18620] Call Trace: [ 1227.260207][T18620] [ 1227.260217][T18620] dump_stack_lvl+0x100/0x190 [ 1227.260259][T18620] should_fail_ex.cold+0x5/0xa [ 1227.260288][T18620] should_failslab+0xc2/0x120 [ 1227.260317][T18620] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1227.260351][T18620] ? trace_pid_list_alloc+0x232/0x480 [ 1227.260390][T18620] ? lockdep_init_map_type+0x5c/0x250 [ 1227.260429][T18620] trace_pid_list_alloc+0x232/0x480 [ 1227.260472][T18620] trace_pid_write+0x110/0x460 [ 1227.260522][T18620] ? __pfx_trace_pid_write+0x10/0x10 [ 1227.260579][T18620] event_pid_write.isra.0+0x1e4/0x800 [ 1227.260624][T18620] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 1227.260675][T18620] vfs_write+0x2aa/0x1070 [ 1227.260700][T18620] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 1227.260727][T18620] ? __pfx_vfs_write+0x10/0x10 [ 1227.260749][T18620] ? __fget_files+0x215/0x3d0 [ 1227.260780][T18620] ? __fget_files+0x21f/0x3d0 [ 1227.260817][T18620] ksys_write+0x12a/0x250 [ 1227.260840][T18620] ? __pfx_ksys_write+0x10/0x10 [ 1227.260872][T18620] do_syscall_64+0x106/0xf80 [ 1227.260909][T18620] ? clear_bhb_loop+0x40/0x90 [ 1227.260939][T18620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.260965][T18620] RIP: 0033:0x7f1c0779c799 [ 1227.260986][T18620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1227.261011][T18620] RSP: 002b:00007f1c085c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1227.261035][T18620] RAX: ffffffffffffffda RBX: 00007f1c07a15fa0 RCX: 00007f1c0779c799 [ 1227.261052][T18620] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1227.261067][T18620] RBP: 00007f1c07832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1227.261082][T18620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1227.261097][T18620] R13: 00007f1c07a16038 R14: 00007f1c07a15fa0 R15: 00007fffed8ae048 [ 1227.261132][T18620] [ 1229.522634][ T30] audit: type=1804 audit(2147503652.709:17): pid=18641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3725" name="file0" dev="tmpfs" ino=5235 res=1 errno=0 [ 1229.916470][ T30] audit: type=1804 audit(2147503652.869:18): pid=18648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3725" name="file0" dev="tmpfs" ino=5235 res=1 errno=0 [ 1240.278631][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.285793][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1242.531162][T18756] ecryptfs_miscdev_response: (sizeof(*msg) + msg->data_len) = [1067213646]; data_size = [146]. Invalid packet. [ 1242.688689][T18756] ecryptfs_miscdev_write: Failed to deliver miscdev response to requesting operation; rc = [-22] [ 1265.452033][T18907] sd 0:0:1:0: PR command failed: 1026 [ 1265.457912][T18907] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1265.540782][T18907] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1268.653822][T18924] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1281.822183][T19039] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1283.013553][T19051] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3806'. [ 1283.148415][T19051] veth1_macvtap: left promiscuous mode [ 1288.640117][T19078] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1295.063804][T19149] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1301.682980][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.690660][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1329.508267][T19378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3873'. [ 1341.389655][T19476] netlink: zone id is out of range [ 1341.395017][T19476] netlink: zone id is out of range [ 1341.478900][T19476] netlink: zone id is out of range [ 1341.484796][T19476] netlink: zone id is out of range [ 1341.645662][T19478] netlink: zone id is out of range [ 1341.705652][T19476] netlink: zone id is out of range [ 1341.768366][T19478] netlink: zone id is out of range [ 1341.809388][T19476] netlink: zone id is out of range [ 1341.879688][T19478] netlink: zone id is out of range [ 1341.885379][T19478] netlink: zone id is out of range [ 1351.413641][T19547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3909'. [ 1359.755225][T19627] tipc: Started in network mode [ 1359.799491][T19627] tipc: Node identity ffffffff, cluster identity 4711 [ 1359.858405][T19627] tipc: Node number set to 4294967295 [ 1360.726752][T19642] net_ratelimit: 16 callbacks suppressed [ 1360.726775][T19642] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1363.124426][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1363.132266][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.417689][T19662] can0: slcan on ttyS2. [ 1363.809708][T19667] can0 (unregistered): slcan off ttyS2. [ 1367.770111][T19723] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3943'. [ 1373.259087][T19787] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3954'. [ 1373.412709][T19787] veth0_macvtap: left promiscuous mode [ 1373.738714][T19787] macvtap0: entered promiscuous mode [ 1373.808378][T19787] macvtap0: entered allmulticast mode [ 1376.579342][T19808] netlink: 306 bytes leftover after parsing attributes in process `syz.4.3958'. [ 1378.229279][T19811] futex_wake_op: syz.2.3959 tries to shift op by -2048; fix this program [ 1381.231313][T19850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3967'. [ 1381.329711][T19850] netlink: 354 bytes leftover after parsing attributes in process `syz.1.3967'. [ 1392.404369][T19941] Invalid ELF header magic: != ELF [ 1399.172453][T19999] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4002'. [ 1399.819332][T19999] veth0_macvtap: left promiscuous mode [ 1400.047799][T19999] macvtap0: entered promiscuous mode [ 1400.210590][T19999] macvtap0: entered allmulticast mode [ 1403.716245][T20030] Invalid ELF header magic: != ELF [ 1404.098983][T20038] sock: sock_set_timeout: `syz.3.4012' (pid 20038) tries to set negative timeout [ 1406.809288][T20039] futex_wake_op: syz.1.4010 tries to shift op by -2048; fix this program [ 1407.938972][T20070] vivid-007: ================= START STATUS ================= [ 1407.946786][T20070] vivid-007: Generate PTS: true [ 1408.111826][T20070] vivid-007: Generate SCR: true [ 1408.205343][T20070] tpg source WxH: 320x240 (Y'CbCr) [ 1408.299545][T20070] tpg field: 1 [ 1408.368407][T20070] tpg crop: (0,0)/320x240 [ 1408.409048][T20070] tpg compose: (0,0)/320x240 [ 1408.498661][T20070] tpg colorspace: 8 [ 1408.502801][T20070] tpg transfer function: 0/0 [ 1408.585801][T20070] tpg Y'CbCr encoding: 0/0 [ 1408.638954][T20070] tpg quantization: 0/0 [ 1408.673341][T20070] tpg RGB range: 0/2 [ 1408.677616][T20070] vivid-007: ================== END STATUS ================== [ 1410.189061][T20084] random: crng reseeded on system resumption [ 1418.203609][T20172] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4043'. [ 1420.882845][T20196] netlink: 25 bytes leftover after parsing attributes in process `syz.1.4050'. [ 1421.591474][T20205] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 1424.570689][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1424.578054][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.787860][T20241] netlink: 504 bytes leftover after parsing attributes in process `syz.4.4060'. [ 1428.365103][T20269] FAULT_INJECTION: forcing a failure. [ 1428.365103][T20269] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1428.776282][T20269] CPU: 0 UID: 0 PID: 20269 Comm: syz.3.4066 Tainted: G L syzkaller #0 PREEMPT(full) [ 1428.776321][T20269] Tainted: [L]=SOFTLOCKUP [ 1428.776329][T20269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1428.776345][T20269] Call Trace: [ 1428.776353][T20269] [ 1428.776363][T20269] dump_stack_lvl+0x100/0x190 [ 1428.776418][T20269] should_fail_ex.cold+0x5/0xa [ 1428.776443][T20269] ? prepare_alloc_pages+0x16d/0x5f0 [ 1428.776491][T20269] should_fail_alloc_page+0xeb/0x140 [ 1428.776520][T20269] prepare_alloc_pages+0x1f0/0x5f0 [ 1428.776552][T20269] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1428.776599][T20269] ? __pfx_css_rstat_updated+0x10/0x10 [ 1428.776629][T20269] ? find_held_lock+0x2b/0x80 [ 1428.776652][T20269] ? trace_ignore_this_task+0xbc/0x100 [ 1428.776689][T20269] ? trace_ignore_this_task+0xbc/0x100 [ 1428.776727][T20269] ? rcu_is_watching+0x12/0xc0 [ 1428.776765][T20269] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1428.776808][T20269] ? lru_gen_add_folio+0x20f/0x13e0 [ 1428.776853][T20269] ? lock_acquire+0x1cf/0x380 [ 1428.776884][T20269] ? find_held_lock+0x2b/0x80 [ 1428.776905][T20269] ? page_table_check_set+0x49a/0xa10 [ 1428.776928][T20269] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1428.776970][T20269] ? policy_nodemask+0xed/0x4f0 [ 1428.776998][T20269] alloc_pages_mpol+0x1fb/0x550 [ 1428.777024][T20269] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1428.777057][T20269] folio_alloc_mpol_noprof+0x36/0x340 [ 1428.777089][T20269] vma_alloc_folio_noprof+0xed/0x1d0 [ 1428.777119][T20269] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1428.777157][T20269] do_anonymous_page+0xb3a/0x1fb0 [ 1428.777200][T20269] __handle_mm_fault+0x1d42/0x2b60 [ 1428.777241][T20269] ? __pfx___handle_mm_fault+0x10/0x10 [ 1428.777276][T20269] ? pte_offset_map_lock+0x174/0x320 [ 1428.777300][T20269] ? find_held_lock+0x2b/0x80 [ 1428.777331][T20269] ? follow_page_pte+0x5b3/0x1400 [ 1428.777363][T20269] handle_mm_fault+0x36d/0xa20 [ 1428.777401][T20269] __get_user_pages+0xf9c/0x34d0 [ 1428.777438][T20269] ? __pfx___get_user_pages+0x10/0x10 [ 1428.777474][T20269] populate_vma_page_range+0x267/0x3f0 [ 1428.777504][T20269] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1428.777533][T20269] ? __pfx_find_vma_intersection+0x10/0x10 [ 1428.777572][T20269] __mm_populate+0x107/0x3a0 [ 1428.777602][T20269] ? __pfx___mm_populate+0x10/0x10 [ 1428.777632][T20269] ? up_write+0x406/0x4f0 [ 1428.777669][T20269] vm_mmap_pgoff+0x37f/0x470 [ 1428.777700][T20269] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1428.777728][T20269] ? do_futex+0x192/0x350 [ 1428.777760][T20269] ? __pfx_do_futex+0x10/0x10 [ 1428.777796][T20269] ksys_mmap_pgoff+0xe1/0x650 [ 1428.777821][T20269] ? __x64_sys_futex+0x34f/0x4d0 [ 1428.777851][T20269] ? __x64_sys_futex+0x358/0x4d0 [ 1428.777882][T20269] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1428.777911][T20269] ? xfd_validate_state+0x129/0x190 [ 1428.777952][T20269] __x64_sys_mmap+0x125/0x190 [ 1428.777991][T20269] do_syscall_64+0x106/0xf80 [ 1428.778028][T20269] ? clear_bhb_loop+0x40/0x90 [ 1428.778058][T20269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1428.778083][T20269] RIP: 0033:0x7f1c0779c799 [ 1428.778107][T20269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1428.778130][T20269] RSP: 002b:00007f1c0857e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1428.778154][T20269] RAX: ffffffffffffffda RBX: 00007f1c07a16180 RCX: 00007f1c0779c799 [ 1428.778170][T20269] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1428.778185][T20269] RBP: 00007f1c07832c99 R08: ffffffffffffffff R09: 0000000000000000 [ 1428.778200][T20269] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1428.778215][T20269] R13: 00007f1c07a16218 R14: 00007f1c07a16180 R15: 00007fffed8ae048 [ 1428.778245][T20269] [ 1434.769880][T20324] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1435.050325][T20326] smpboot: CPU 1 is now offline [ 1438.479018][T20336] futex_wake_op: syz.4.4080 tries to shift op by -2048; fix this program [ 1440.419555][T20373] netlink: 504 bytes leftover after parsing attributes in process `syz.1.4091'. [ 1462.966639][T20598] zram0: detected capacity change from 0 to 16 [ 1474.824310][T20689] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4159'. [ 1481.939688][T20739] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4168'. [ 1486.005067][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1486.018738][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1487.828407][T20752] futex_wake_op: syz.3.4170 tries to shift op by -2048; fix this program [ 1488.632041][T20774] tipc: Started in network mode [ 1488.637153][T20774] tipc: Node identity ee00, cluster identity 4711 [ 1488.824064][T20774] tipc: Node number set to 60928 [ 1490.302280][T20796] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4181'. [ 1490.372352][T20796] vcan0: entered promiscuous mode [ 1490.629930][T20806] ptrace attach of "./syz-executor exec"[5831] was attempted by ""[20806] [ 1494.028911][T20833] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4187'. [ 1494.213035][T20833] mac80211_hwsim hwsim5 ›: renamed from wlan0 (while UP) [ 1508.921806][T15791] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 1508.921841][T15791] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 1508.939060][T15791] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 1508.939149][T15791] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1522.339427][T21099] FAULT_INJECTION: forcing a failure. [ 1522.339427][T21099] name failslab, interval 1, probability 0, space 0, times 0 [ 1522.548819][T21099] CPU: 0 UID: 0 PID: 21099 Comm: syz.3.4246 Tainted: G L syzkaller #0 PREEMPT(full) [ 1522.548862][T21099] Tainted: [L]=SOFTLOCKUP [ 1522.548871][T21099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1522.548900][T21099] Call Trace: [ 1522.548909][T21099] [ 1522.548930][T21099] dump_stack_lvl+0x100/0x190 [ 1522.548975][T21099] should_fail_ex.cold+0x5/0xa [ 1522.549004][T21099] ? tomoyo_supervisor+0x65d/0x1340 [ 1522.549126][T21099] should_failslab+0xc2/0x120 [ 1522.549155][T21099] __kmalloc_noprof+0xe0/0x850 [ 1522.549201][T21099] tomoyo_supervisor+0x65d/0x1340 [ 1522.549245][T21099] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 1522.549293][T21099] ? tomoyo_realpath_from_path+0x19c/0x690 [ 1522.549338][T21099] ? tomoyo_realpath_from_path+0x19c/0x690 [ 1522.549373][T21099] ? kfree+0x1f6/0x6b0 [ 1522.549413][T21099] ? tomoyo_check_path_number_acl+0x1e6/0x2f0 [ 1522.549452][T21099] tomoyo_path_number_perm+0x445/0x580 [ 1522.549482][T21099] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1522.549513][T21099] ? rcu_read_unlock+0x17/0x60 [ 1522.549548][T21099] ? do_raw_spin_lock+0x128/0x260 [ 1522.549601][T21099] ? find_held_lock+0x2b/0x80 [ 1522.549624][T21099] ? __pfx_d_add+0x10/0x10 [ 1522.549654][T21099] ? d_alloc+0x176/0x1e0 [ 1522.549680][T21099] ? current_check_access_path+0x281/0x460 [ 1522.549720][T21099] ? simple_lookup+0x105/0x1d0 [ 1522.549764][T21099] tomoyo_path_mknod+0x164/0x190 [ 1522.549883][T21099] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 1522.549925][T21099] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1522.549974][T21099] security_path_mknod+0x161/0x300 [ 1522.550011][T21099] filename_mknodat+0x241/0x7f0 [ 1522.550043][T21099] ? __pfx_filename_mknodat+0x10/0x10 [ 1522.550070][T21099] ? strncpy_from_user+0x19d/0x2d0 [ 1522.550103][T21099] ? do_getname+0x191/0x390 [ 1522.550137][T21099] __x64_sys_mknod+0x8f/0xc0 [ 1522.550165][T21099] do_syscall_64+0x106/0xf80 [ 1522.550203][T21099] ? clear_bhb_loop+0x40/0x90 [ 1522.550235][T21099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1522.550280][T21099] RIP: 0033:0x7f1c0779c799 [ 1522.550308][T21099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1522.550333][T21099] RSP: 002b:00007f1c0859f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1522.550358][T21099] RAX: ffffffffffffffda RBX: 00007f1c07a16090 RCX: 00007f1c0779c799 [ 1522.550375][T21099] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 0000000000000000 [ 1522.550390][T21099] RBP: 00007f1c07832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1522.550406][T21099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1522.550421][T21099] R13: 00007f1c07a16128 R14: 00007f1c07a16090 R15: 00007fffed8ae048 [ 1522.550454][T21099] [ 1527.189568][T21108] FAULT_INJECTION: forcing a failure. [ 1527.189568][T21108] name failslab, interval 1, probability 0, space 0, times 0 [ 1527.402326][T21108] CPU: 0 UID: 0 PID: 21108 Comm: syz.3.4249 Tainted: G L syzkaller #0 PREEMPT(full) [ 1527.402370][T21108] Tainted: [L]=SOFTLOCKUP [ 1527.402379][T21108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1527.402394][T21108] Call Trace: [ 1527.402403][T21108] [ 1527.402413][T21108] dump_stack_lvl+0x100/0x190 [ 1527.402457][T21108] should_fail_ex.cold+0x5/0xa [ 1527.402488][T21108] should_failslab+0xc2/0x120 [ 1527.402515][T21108] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1527.402550][T21108] ? __do_sys_fanotify_init+0x5cf/0xe50 [ 1527.402623][T21108] ? get_mem_cgroup_from_mm+0x88/0x600 [ 1527.402662][T21108] ? get_mem_cgroup_from_mm+0x132/0x600 [ 1527.402705][T21108] __do_sys_fanotify_init+0x5cf/0xe50 [ 1527.402750][T21108] do_syscall_64+0x106/0xf80 [ 1527.402789][T21108] ? clear_bhb_loop+0x40/0x90 [ 1527.402821][T21108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1527.402848][T21108] RIP: 0033:0x7f1c0779c799 [ 1527.402869][T21108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1527.402895][T21108] RSP: 002b:00007f1c0859f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 1527.402920][T21108] RAX: ffffffffffffffda RBX: 00007f1c07a16090 RCX: 00007f1c0779c799 [ 1527.402936][T21108] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 1527.402953][T21108] RBP: 00007f1c07832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1527.402968][T21108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1527.402983][T21108] R13: 00007f1c07a16128 R14: 00007f1c07a16090 R15: 00007fffed8ae048 [ 1527.403015][T21108] [ 1535.638368][T21172] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 1541.186063][T21217] Invalid ELF header magic: != ELF [ 1544.618757][T21234] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4278'. [ 1545.395115][T21249] vivid-007: ================= START STATUS ================= [ 1545.459773][T21249] vivid-007: Generate PTS: true [ 1545.464978][T21249] vivid-007: Generate SCR: true [ 1545.568665][T21249] tpg source WxH: 320x240 (Y'CbCr) [ 1545.642404][T21249] tpg field: 1 [ 1545.678758][T21249] tpg crop: (0,0)/320x240 [ 1545.730868][T21249] tpg compose: (0,0)/320x240 [ 1545.778139][T21249] tpg colorspace: 8 [ 1545.828446][T21249] tpg transfer function: 0/0 [ 1545.884204][T21249] tpg Y'CbCr encoding: 0/0 [ 1545.929908][T21249] tpg quantization: 0/0 [ 1545.991452][T21249] tpg RGB range: 0/2 [ 1546.039153][T21249] vivid-007: ================== END STATUS ================== [ 1547.272115][T21264] Invalid ELF header magic: != ELF [ 1547.468830][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1547.475678][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1550.732807][ T30] audit: type=1804 audit(2147596720.944:19): pid=21298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4288" name="file0" dev="tmpfs" ino=6100 res=1 errno=0 [ 1550.948028][ T30] audit: type=1804 audit(2147596720.944:20): pid=21300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4288" name="file0" dev="tmpfs" ino=6100 res=1 errno=0 [ 1554.853985][T21343] vivid-007: ================= START STATUS ================= [ 1554.972468][T21343] vivid-007: Generate PTS: true [ 1555.035614][T21343] vivid-007: Generate SCR: true [ 1555.125758][T21343] tpg source WxH: 320x240 (Y'CbCr) [ 1555.202451][T21343] tpg field: 1 [ 1555.270262][T21343] tpg crop: (0,0)/320x240 [ 1555.308264][T21343] tpg compose: (0,0)/320x240 [ 1555.368429][T21343] tpg colorspace: 8 [ 1555.418241][T21343] tpg transfer function: 0/0 [ 1555.463049][T21343] tpg Y'CbCr encoding: 0/0 [ 1555.530430][T21343] tpg quantization: 0/0 [ 1555.586121][T21343] tpg RGB range: 0/2 [ 1555.610518][T21343] vivid-007: ================== END STATUS ================== [ 1555.779782][T21349] Invalid ELF header magic: != ELF [ 1565.919724][T21431] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[21431] [ 1576.741694][T21513] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 1578.393425][T21529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4338'. [ 1578.581317][T21532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4339'. [ 1588.216146][T21606] netlink: 25 bytes leftover after parsing attributes in process `syz.1.4357'. [ 1588.833801][T21598] kexec: Could not allocate control_code_buffer [ 1589.396742][T21622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4359'. [ 1592.561851][T21643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4364'. [ 1598.218547][T15791] block nbd2: Receive control failed (result -32) [ 1602.195513][T15791] Bluetooth: hci2: unexpected subevent 0x18 length: 123 > 19 [ 1602.204779][T15791] Bluetooth: hci2: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 1603.354455][T21756] Invalid ELF header magic: != ELF [ 1608.899091][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.906193][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.985682][T21818] futex_wake_op: syz.4.4407 tries to shift op by -2048; fix this program [ 1610.239441][T21818] futex_wake_op: syz.4.4407 tries to shift op by -2048; fix this program [ 1612.035315][T21834] tc_dump_action: action bad kind [ 1613.243302][T21843] ptrace attach of "./syz-executor exec"[5832] was attempted by "./syz-executor exec"[21843] [ 1614.033044][T21856] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4414'. [ 1614.705109][T21864] netlink: 'syz.4.4416': attribute type 1 has an invalid length. [ 1617.440120][T15791] block nbd3: Receive control failed (result -32) [ 1619.690313][T21906] Invalid ELF header magic: != ELF [ 1631.698860][T22018] FAULT_INJECTION: forcing a failure. [ 1631.698860][T22018] name failslab, interval 1, probability 0, space 0, times 0 [ 1631.830064][T22018] CPU: 0 UID: 0 PID: 22018 Comm: syz.3.4448 Tainted: G L syzkaller #0 PREEMPT(full) [ 1631.830104][T22018] Tainted: [L]=SOFTLOCKUP [ 1631.830113][T22018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1631.830129][T22018] Call Trace: [ 1631.830137][T22018] [ 1631.830146][T22018] dump_stack_lvl+0x100/0x190 [ 1631.830192][T22018] should_fail_ex.cold+0x5/0xa [ 1631.830229][T22018] should_failslab+0xc2/0x120 [ 1631.830258][T22018] __kmalloc_cache_node_noprof+0x7d/0x770 [ 1631.830301][T22018] ? blkg_alloc+0xbd/0xae0 [ 1631.830333][T22018] ? __xa_insert+0x20b/0x320 [ 1631.830362][T22018] blkg_alloc+0xbd/0xae0 [ 1631.830397][T22018] ? __alloc_disk_node+0x2d4/0x6b0 [ 1631.830493][T22018] blkcg_init_disk+0x51/0x580 [ 1631.830530][T22018] __alloc_disk_node+0x2f6/0x6b0 [ 1631.830561][T22018] __blk_alloc_disk+0xd2/0x170 [ 1631.830587][T22018] ? __pfx___blk_alloc_disk+0x10/0x10 [ 1631.830629][T22018] ? __pfx_idr_alloc+0x10/0x10 [ 1631.830665][T22018] ? lockdep_init_map_type+0x5c/0x250 [ 1631.830701][T22018] ? __raw_spin_lock_init+0x3a/0x110 [ 1631.830745][T22018] ? __pfx_hot_add_show+0x10/0x10 [ 1631.830818][T22018] zram_add+0x1bf/0x610 [ 1631.830852][T22018] ? __pfx_zram_add+0x10/0x10 [ 1631.830904][T22018] ? find_held_lock+0x2b/0x80 [ 1631.830926][T22018] ? sysfs_file_kobj+0xe4/0x290 [ 1631.830962][T22018] ? __pfx_hot_add_show+0x10/0x10 [ 1631.830996][T22018] hot_add_show+0x21/0x80 [ 1631.831032][T22018] class_attr_show+0x72/0xa0 [ 1631.831081][T22018] ? __pfx_class_attr_show+0x10/0x10 [ 1631.831111][T22018] sysfs_kf_seq_show+0x217/0x3a0 [ 1631.831157][T22018] seq_read_iter+0x32f/0x1270 [ 1631.831217][T22018] kernfs_fop_read_iter+0x46c/0x610 [ 1631.831246][T22018] ? rw_verify_area+0xce/0x6d0 [ 1631.831283][T22018] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 1631.831315][T22018] vfs_read+0x825/0xb30 [ 1631.831363][T22018] ? __pfx_vfs_read+0x10/0x10 [ 1631.831425][T22018] ksys_read+0x12a/0x250 [ 1631.831446][T22018] ? __pfx_ksys_read+0x10/0x10 [ 1631.831478][T22018] do_syscall_64+0x106/0xf80 [ 1631.831517][T22018] ? clear_bhb_loop+0x40/0x90 [ 1631.831548][T22018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1631.831574][T22018] RIP: 0033:0x7f1c0779c799 [ 1631.831595][T22018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1631.831620][T22018] RSP: 002b:00007f1c085c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1631.831645][T22018] RAX: ffffffffffffffda RBX: 00007f1c07a15fa0 RCX: 00007f1c0779c799 [ 1631.831662][T22018] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000007 [ 1631.831679][T22018] RBP: 00007f1c07832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1631.831694][T22018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1631.831711][T22018] R13: 00007f1c07a16038 R14: 00007f1c07a15fa0 R15: 00007fffed8ae048 [ 1631.831744][T22018] [ 1633.115735][T22018] zram: Error allocating disk structure for device 1 [ 1633.734978][T22027] Invalid ELF header magic: != ELF [ 1641.432234][T22077] Invalid ELF header magic: != ELF [ 1651.639692][T22171] program syz.3.4476 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1657.116100][T22218] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 1657.148463][T22221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4491'. [ 1657.213375][T22221] netlink: 354 bytes leftover after parsing attributes in process `syz.2.4491'. [ 1657.227550][T22218] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 1657.334262][T22218] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 1658.017348][T22235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4494'. [ 1658.159009][T22237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4494'. [ 1658.177653][T22238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1658.198897][T22238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1658.215007][T22238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1658.229770][T22238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1658.238354][T22238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1659.341201][T22236] chnl_net:caif_netlink_parms(): no params data found [ 1659.743091][T22236] bridge0: port 1(bridge_slave_0) entered blocking state [ 1659.760599][T22248] hub 1-0:1.0: USB hub found [ 1659.801112][T22236] bridge0: port 1(bridge_slave_0) entered disabled state [ 1659.821421][T22271] futex_wake_op: syz.4.4499 tries to shift op by -2048; fix this program [ 1659.842601][T22236] bridge_slave_0: entered allmulticast mode [ 1659.868154][T22271] futex_wake_op: syz.4.4499 tries to shift op by -2048; fix this program [ 1659.879986][T22236] bridge_slave_0: entered promiscuous mode [ 1659.903481][T22248] hub 1-0:1.0: 1 port detected [ 1659.912828][T22236] bridge0: port 2(bridge_slave_1) entered blocking state [ 1659.949961][T22236] bridge0: port 2(bridge_slave_1) entered disabled state [ 1659.992173][T22236] bridge_slave_1: entered allmulticast mode [ 1660.032652][T22236] bridge_slave_1: entered promiscuous mode [ 1660.181150][T22236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1660.247927][T22236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1660.280559][T22238] Bluetooth: hci0: command tx timeout [ 1660.415464][T22236] team0: Port device team_slave_0 added [ 1660.438373][T22236] team0: Port device team_slave_1 added [ 1660.523748][T22276] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4501'. [ 1660.750254][T22236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1660.769811][T22236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1660.869227][T22236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1660.965530][T22236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1660.986793][T22236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1661.081934][T22236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1661.352888][T22236] hsr_slave_0: entered promiscuous mode [ 1661.381801][T22236] hsr_slave_1: entered promiscuous mode [ 1661.722817][T22292] openvswitch: netlink: Multiple metadata blocks provided [ 1662.174085][T22236] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1662.293517][T22236] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1662.329102][T22236] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1662.360263][T22238] Bluetooth: hci0: command tx timeout [ 1662.395960][T22236] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1662.876766][T22236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1662.961544][T22236] 8021q: adding VLAN 0 to HW filter on device team0 [ 1663.026812][T22106] bridge0: port 1(bridge_slave_0) entered blocking state [ 1663.035742][T22106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1663.138381][T22106] bridge0: port 2(bridge_slave_1) entered blocking state [ 1663.146329][T22106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1664.019413][T22236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1664.441297][T22238] Bluetooth: hci0: command tx timeout [ 1665.127489][T22236] veth0_vlan: entered promiscuous mode [ 1665.219930][T22236] veth1_vlan: entered promiscuous mode [ 1665.420283][T22236] veth0_macvtap: entered promiscuous mode [ 1665.496716][T22236] veth1_macvtap: entered promiscuous mode [ 1665.570129][T22236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1665.645073][T22236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1665.719116][T22107] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1665.773300][T22107] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1665.828823][T22107] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1665.884464][T22107] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.162393][T22106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1666.227449][T22106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1666.372573][T22102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1666.416022][T22102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1666.525986][T22238] Bluetooth: hci0: command tx timeout [ 1667.485241][T22373] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1667.500200][T22369] Invalid ELF header magic: != ELF [ 1667.636531][T22372] FAULT_INJECTION: forcing a failure. [ 1667.636531][T22372] name failslab, interval 1, probability 0, space 0, times 0 [ 1667.720863][T22372] CPU: 0 UID: 0 PID: 22372 Comm: syz.3.4519 Tainted: G L syzkaller #0 PREEMPT(full) [ 1667.720905][T22372] Tainted: [L]=SOFTLOCKUP [ 1667.720914][T22372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1667.720930][T22372] Call Trace: [ 1667.720939][T22372] [ 1667.720948][T22372] dump_stack_lvl+0x100/0x190 [ 1667.720992][T22372] should_fail_ex.cold+0x5/0xa [ 1667.721024][T22372] should_failslab+0xc2/0x120 [ 1667.721050][T22372] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1667.721088][T22372] ? __kernfs_new_node+0xd2/0x960 [ 1667.721124][T22372] ? kstrdup+0xb3/0xe0 [ 1667.721167][T22372] __kernfs_new_node+0xd2/0x960 [ 1667.721201][T22372] ? __kernel_text_address+0xd/0x30 [ 1667.721242][T22372] ? arch_stack_walk+0xa6/0xf0 [ 1667.721267][T22372] ? __pfx___kernfs_new_node+0x10/0x10 [ 1667.721310][T22372] ? find_held_lock+0x2b/0x80 [ 1667.721333][T22372] ? kernfs_root+0xee/0x2a0 [ 1667.721367][T22372] ? kernfs_root+0xee/0x2a0 [ 1667.721408][T22372] kernfs_new_node+0x11b/0x1a0 [ 1667.721453][T22372] kernfs_create_dir_ns+0x4c/0x1a0 [ 1667.721480][T22372] sysfs_create_dir_ns+0x13a/0x2b0 [ 1667.721515][T22372] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1667.721549][T22372] ? find_held_lock+0x2b/0x80 [ 1667.721571][T22372] ? kobject_add_internal+0x25f/0x930 [ 1667.721596][T22372] ? kobject_add_internal+0x25f/0x930 [ 1667.721623][T22372] ? class_dir_child_ns_type+0xd/0x60 [ 1667.721735][T22372] kobject_add_internal+0x2c8/0x930 [ 1667.721765][T22372] kobject_add+0x16a/0x1e0 [ 1667.721790][T22372] ? __pfx_kobject_add+0x10/0x10 [ 1667.721819][T22372] ? kobject_put+0xb9/0x640 [ 1667.721868][T22372] device_add+0x294/0x1950 [ 1667.721902][T22372] ? __pfx_dev_set_name+0x10/0x10 [ 1667.721936][T22372] ? __pfx_device_add+0x10/0x10 [ 1667.721964][T22372] ? __pfx___might_resched+0x10/0x10 [ 1667.722012][T22372] __add_disk+0x518/0xe40 [ 1667.722042][T22372] add_disk_fwnode+0x118/0x5c0 [ 1667.722070][T22372] nbd_dev_add+0x77a/0xb10 [ 1667.722094][T22372] ? find_held_lock+0x2b/0x80 [ 1667.722118][T22372] ? __pfx_nbd_dev_add+0x10/0x10 [ 1667.722140][T22372] ? nbd_genl_connect+0x131a/0x1a40 [ 1667.722191][T22372] ? bpf_lsm_capable+0x9/0x10 [ 1667.722222][T22372] ? __radix_tree_lookup+0x217/0x2b0 [ 1667.722263][T22372] nbd_genl_connect+0xb8d/0x1a40 [ 1667.722290][T22372] ? rcu_is_watching+0x12/0xc0 [ 1667.722332][T22372] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1667.722360][T22372] ? __nla_parse+0x40/0x60 [ 1667.722401][T22372] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 1667.722432][T22372] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 1667.722467][T22372] genl_family_rcv_msg_doit+0x214/0x300 [ 1667.722499][T22372] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1667.722531][T22372] ? genl_get_cmd+0x3ef/0x720 [ 1667.722563][T22372] ? kasan_save_track+0x14/0x30 [ 1667.722603][T22372] ? __kasan_slab_alloc+0x89/0x90 [ 1667.722625][T22372] ? __radix_tree_lookup+0x217/0x2b0 [ 1667.722663][T22372] genl_rcv_msg+0x560/0x800 [ 1667.722692][T22372] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1667.722725][T22372] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1667.722756][T22372] ? __lock_acquire+0x4a5/0x2630 [ 1667.722793][T22372] netlink_rcv_skb+0x159/0x420 [ 1667.722833][T22372] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1667.722860][T22372] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1667.722912][T22372] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1667.722954][T22372] genl_rcv+0x28/0x40 [ 1667.722975][T22372] netlink_unicast+0x5aa/0x870 [ 1667.723019][T22372] ? __pfx_netlink_unicast+0x10/0x10 [ 1667.723069][T22372] netlink_sendmsg+0x8b0/0xda0 [ 1667.723113][T22372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1667.723159][T22372] ? __import_iovec+0x1d2/0x640 [ 1667.723204][T22372] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1667.723268][T22372] ____sys_sendmsg+0x9e1/0xb70 [ 1667.723293][T22372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1667.723336][T22372] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1667.723367][T22372] ? try_to_wake_up+0x644/0x1a80 [ 1667.723398][T22372] ___sys_sendmsg+0x190/0x1e0 [ 1667.723428][T22372] ? __pfx____sys_sendmsg+0x10/0x10 [ 1667.723455][T22372] ? futex_private_hash_put+0x107/0x1c0 [ 1667.723520][T22372] __sys_sendmsg+0x170/0x220 [ 1667.723556][T22372] ? __pfx___sys_sendmsg+0x10/0x10 [ 1667.723598][T22372] ? __x64_sys_futex+0x34f/0x4d0 [ 1667.723648][T22372] do_syscall_64+0x106/0xf80 [ 1667.723685][T22372] ? clear_bhb_loop+0x40/0x90 [ 1667.723724][T22372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1667.723751][T22372] RIP: 0033:0x7f1c0779c799 [ 1667.723773][T22372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1667.723797][T22372] RSP: 002b:00007f1c085c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1667.723822][T22372] RAX: ffffffffffffffda RBX: 00007f1c07a15fa0 RCX: 00007f1c0779c799 [ 1667.723839][T22372] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000009 [ 1667.723855][T22372] RBP: 00007f1c07832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1667.723871][T22372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1667.723887][T22372] R13: 00007f1c07a16038 R14: 00007f1c07a15fa0 R15: 00007fffed8ae048 [ 1667.723919][T22372] [ 1669.276660][T22386] Invalid ELF header magic: != ELF [ 1669.932175][T22395] vivid-007: ================= START STATUS ================= [ 1669.953184][T22395] vivid-007: Generate PTS: true [ 1669.966394][T22395] vivid-007: Generate SCR: true [ 1669.980136][T22395] tpg source WxH: 320x240 (Y'CbCr) [ 1669.996993][T22395] tpg field: 1 [ 1670.007855][T22395] tpg crop: (0,0)/320x240 [ 1670.022994][T22395] tpg compose: (0,0)/320x240 [ 1670.033600][T22395] tpg colorspace: 8 [ 1670.037893][T22395] tpg transfer function: 0/0 [ 1670.063295][T22395] tpg Y'CbCr encoding: 0/0 [ 1670.073349][T22395] tpg quantization: 0/0 [ 1670.088352][T22395] tpg RGB range: 0/2 [ 1670.106299][T22395] vivid-007: ================== END STATUS ================== [ 1670.397877][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1670.405215][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1671.349758][T22405] futex_wake_op: syz.2.4525 tries to shift op by -2048; fix this program [ 1671.381906][T22405] futex_wake_op: syz.2.4525 tries to shift op by -2048; fix this program [ 1671.824441][T22372] kobject: kobject_add_internal failed for nbd4129 (error: -12 parent: block) [ 1671.962421][T22372] nbd: failed to add new device [ 1676.164997][T22447] zram0: detected capacity change from 16 to 0 [ 1678.969077][T22477] FAULT_INJECTION: forcing a failure. [ 1678.969077][T22477] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1679.109099][T22477] CPU: 0 UID: 0 PID: 22477 Comm: syz.3.4541 Tainted: G L syzkaller #0 PREEMPT(full) [ 1679.109141][T22477] Tainted: [L]=SOFTLOCKUP [ 1679.109150][T22477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1679.109167][T22477] Call Trace: [ 1679.109175][T22477] [ 1679.109184][T22477] dump_stack_lvl+0x100/0x190 [ 1679.109229][T22477] should_fail_ex.cold+0x5/0xa [ 1679.109254][T22477] ? __kernel_text_address+0xd/0x30 [ 1679.109297][T22477] get_futex_key+0x1d2/0x1620 [ 1679.109331][T22477] ? __pfx_get_futex_key+0x10/0x10 [ 1679.109362][T22477] ? putname+0xb1/0x110 [ 1679.109390][T22477] ? stack_trace_save+0x8e/0xc0 [ 1679.109413][T22477] ? __pfx_stack_trace_save+0x10/0x10 [ 1679.109441][T22477] futex_wait_setup+0x83/0x510 [ 1679.109490][T22477] __futex_wait+0x19f/0x300 [ 1679.109532][T22477] ? __pfx___futex_wait+0x10/0x10 [ 1679.109575][T22477] ? __pfx_futex_wake_mark+0x10/0x10 [ 1679.109618][T22477] ? futex_hash+0x2c5/0x380 [ 1679.109655][T22477] futex_wait+0xed/0x380 [ 1679.109694][T22477] ? __pfx_futex_wait+0x10/0x10 [ 1679.109739][T22477] ? putname+0xb1/0x110 [ 1679.109764][T22477] ? kmem_cache_free+0x124/0x6a0 [ 1679.109798][T22477] ? do_sys_openat2+0x1b4/0x1e0 [ 1679.109835][T22477] do_futex+0x1ef/0x350 [ 1679.109868][T22477] ? __pfx_do_futex+0x10/0x10 [ 1679.109899][T22477] ? __pfx_do_sys_openat2+0x10/0x10 [ 1679.109934][T22477] ? __fget_files+0x21f/0x3d0 [ 1679.109961][T22477] __x64_sys_futex+0x34f/0x4d0 [ 1679.110002][T22477] ? __x64_sys_openat+0x12d/0x210 [ 1679.110037][T22477] ? __pfx___x64_sys_futex+0x10/0x10 [ 1679.110086][T22477] do_syscall_64+0x106/0xf80 [ 1679.110125][T22477] ? clear_bhb_loop+0x40/0x90 [ 1679.110156][T22477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1679.110182][T22477] RIP: 0033:0x7f1c0779c799 [ 1679.110203][T22477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1679.110228][T22477] RSP: 002b:00007f1c0859f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1679.110251][T22477] RAX: ffffffffffffffda RBX: 00007f1c07a16098 RCX: 00007f1c0779c799 [ 1679.110268][T22477] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1c07a16098 [ 1679.110283][T22477] RBP: 00007f1c07a16090 R08: 0000000000000000 R09: 0000000000000000 [ 1679.110299][T22477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1679.110314][T22477] R13: 00007f1c07a16128 R14: 00007fffed8adf60 R15: 00007fffed8ae048 [ 1679.110345][T22477] [ 1682.610661][T22526] FAULT_INJECTION: forcing a failure. [ 1682.610661][T22526] name failslab, interval 1, probability 0, space 0, times 0 [ 1682.717739][T22526] CPU: 0 UID: 0 PID: 22526 Comm: syz.5.4552 Tainted: G L syzkaller #0 PREEMPT(full) [ 1682.717779][T22526] Tainted: [L]=SOFTLOCKUP [ 1682.717788][T22526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1682.717803][T22526] Call Trace: [ 1682.717812][T22526] [ 1682.717822][T22526] dump_stack_lvl+0x100/0x190 [ 1682.717871][T22526] should_fail_ex.cold+0x5/0xa [ 1682.717899][T22526] ? tomoyo_encode2+0xfb/0x3c0 [ 1682.717933][T22526] should_failslab+0xc2/0x120 [ 1682.717960][T22526] __kmalloc_noprof+0xe0/0x850 [ 1682.717997][T22526] ? d_absolute_path+0x136/0x1b0 [ 1682.718037][T22526] tomoyo_encode2+0xfb/0x3c0 [ 1682.718074][T22526] tomoyo_encode+0x29/0x50 [ 1682.718106][T22526] tomoyo_realpath_from_path+0x18c/0x690 [ 1682.718147][T22526] tomoyo_path_number_perm+0x23c/0x580 [ 1682.718174][T22526] ? tomoyo_path_number_perm+0x22e/0x580 [ 1682.718204][T22526] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1682.718235][T22526] ? rcu_read_unlock+0x17/0x60 [ 1682.718269][T22526] ? do_raw_spin_lock+0x128/0x260 [ 1682.718323][T22526] ? find_held_lock+0x2b/0x80 [ 1682.718347][T22526] ? __pfx_d_add+0x10/0x10 [ 1682.718378][T22526] ? d_alloc+0x176/0x1e0 [ 1682.718404][T22526] ? current_check_access_path+0x281/0x460 [ 1682.718439][T22526] ? __pfx_current_check_access_path+0x10/0x10 [ 1682.718473][T22526] ? simple_lookup+0x105/0x1d0 [ 1682.718518][T22526] tomoyo_path_mknod+0x164/0x190 [ 1682.718557][T22526] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 1682.718597][T22526] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1682.718645][T22526] security_path_mknod+0x161/0x300 [ 1682.718681][T22526] filename_mknodat+0x241/0x7f0 [ 1682.718713][T22526] ? __pfx_filename_mknodat+0x10/0x10 [ 1682.718741][T22526] ? strncpy_from_user+0x19d/0x2d0 [ 1682.718773][T22526] ? do_getname+0x191/0x390 [ 1682.718807][T22526] __x64_sys_mknod+0x8f/0xc0 [ 1682.718836][T22526] do_syscall_64+0x106/0xf80 [ 1682.718881][T22526] ? clear_bhb_loop+0x40/0x90 [ 1682.718912][T22526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1682.718938][T22526] RIP: 0033:0x7f54acb9c799 [ 1682.718959][T22526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1682.718984][T22526] RSP: 002b:00007f54adac7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1682.719008][T22526] RAX: ffffffffffffffda RBX: 00007f54ace15fa0 RCX: 00007f54acb9c799 [ 1682.719025][T22526] RDX: 0000000000000017 RSI: 0000000000000e6c RDI: 0000200000000080 [ 1682.719041][T22526] RBP: 00007f54acc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1682.719056][T22526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1682.719071][T22526] R13: 00007f54ace16038 R14: 00007f54ace15fa0 R15: 00007ffe2197e5f8 [ 1682.719103][T22526] [ 1682.719129][T22526] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1683.975656][T22547] Invalid ELF header magic: != ELF [ 1685.860297][T22573] zswap: compressor not available [ 1687.737932][T22611] netlink: 25 bytes leftover after parsing attributes in process `syz.4.4572'. [ 1688.928786][T22632] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1689.069556][T22632] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1689.150417][T22632] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1689.238125][T22632] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1689.325304][T22632] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1689.528828][T22632] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1689.872149][T22643] Invalid ELF header magic: != ELF [ 1690.935816][T22238] Bluetooth: hci3: command 0x0c1a tx timeout [ 1691.095000][T22238] Bluetooth: hci2: command 0x0c1a tx timeout [ 1691.175943][T22238] Bluetooth: hci1: command 0x0c1a tx timeout [ 1691.254727][T22238] Bluetooth: hci0: command 0x0c1a tx timeout [ 1691.438780][T22680] vivid-007: ================= START STATUS ================= [ 1691.512614][T22680] vivid-007: Generate PTS: true [ 1691.545513][T22680] vivid-007: Generate SCR: true [ 1691.551079][T22680] tpg source WxH: 320x240 (Y'CbCr) [ 1691.651282][T22680] tpg field: 1 [ 1691.663217][T22680] tpg crop: (0,0)/320x240 [ 1691.708979][T22680] tpg compose: (0,0)/320x240 [ 1691.751352][T22680] tpg colorspace: 8 [ 1691.775151][T22680] tpg transfer function: 0/0 [ 1691.819524][T22680] tpg Y'CbCr encoding: 0/0 [ 1691.859984][T22680] tpg quantization: 0/0 [ 1691.893612][T22680] tpg RGB range: 0/2 [ 1691.932558][T22680] vivid-007: ================== END STATUS ================== [ 1693.337114][T22238] Bluetooth: hci0: command 0x0c1a tx timeout [ 1694.256239][T22733] Invalid ELF header magic: != ELF [ 1695.435258][T22238] Bluetooth: hci0: command 0x0c1a tx timeout [ 1696.260024][T22119] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1696.272078][T22119] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1696.283101][T22119] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1696.291480][T22119] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1696.300204][T22119] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1697.477179][T22760] chnl_net:caif_netlink_parms(): no params data found [ 1698.085596][T22760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1698.148053][T22760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1698.155666][T22760] bridge_slave_0: entered allmulticast mode [ 1698.241592][T22760] bridge_slave_0: entered promiscuous mode [ 1698.299155][T22760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1698.343405][T22760] bridge0: port 2(bridge_slave_1) entered disabled state [ 1698.378284][T22238] Bluetooth: hci5: command tx timeout [ 1698.402670][T22760] bridge_slave_1: entered allmulticast mode [ 1698.444000][T22760] bridge_slave_1: entered promiscuous mode [ 1698.530415][T22800] Invalid ELF header magic: != ELF [ 1698.605155][T22760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1698.695368][T22760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1698.898951][T22760] team0: Port device team_slave_0 added [ 1698.961151][T22760] team0: Port device team_slave_1 added [ 1699.179594][T22760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1699.187311][T22760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1699.420953][T22760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1699.529776][T22760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1699.579414][T22760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1699.771487][T22760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1700.122050][T22760] hsr_slave_0: entered promiscuous mode [ 1700.166671][T22760] hsr_slave_1: entered promiscuous mode [ 1700.211734][T22760] debugfs: 'hsr0' already exists in 'hsr' [ 1700.259194][T22760] Cannot create hsr debugfs directory [ 1700.461835][T22238] Bluetooth: hci5: command tx timeout [ 1701.461796][T22760] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1701.559281][T22760] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1701.636020][T22760] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1701.734064][T22760] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1702.270295][T22760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1702.439415][T22760] 8021q: adding VLAN 0 to HW filter on device team0 [ 1702.541547][T22119] Bluetooth: hci5: command tx timeout [ 1702.549812][T22254] bridge0: port 1(bridge_slave_0) entered blocking state [ 1702.557679][T22254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1702.677390][T22254] bridge0: port 2(bridge_slave_1) entered blocking state [ 1702.684929][T22254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1703.834907][T22760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1703.844998][T22885] vivid-007: ================= START STATUS ================= [ 1703.895313][T22885] vivid-007: Generate PTS: true [ 1703.962059][T22885] vivid-007: Generate SCR: true [ 1703.967793][T22885] tpg source WxH: 320x240 (Y'CbCr) [ 1704.043750][T22885] tpg field: 1 [ 1704.047329][T22885] tpg crop: (0,0)/320x240 [ 1704.137178][T22885] tpg compose: (0,0)/320x240 [ 1704.169093][T22885] tpg colorspace: 8 [ 1704.214033][T22885] tpg transfer function: 0/0 [ 1704.219042][T22885] tpg Y'CbCr encoding: 0/0 [ 1704.283781][T22885] tpg quantization: 0/0 [ 1704.287987][T22885] tpg RGB range: 0/2 [ 1704.417393][T22885] vivid-007: ================== END STATUS ================== [ 1704.623795][T22119] Bluetooth: hci5: command tx timeout [ 1705.284685][T22760] veth0_vlan: entered promiscuous mode [ 1705.392675][T22760] veth1_vlan: entered promiscuous mode [ 1705.758301][T22760] veth0_macvtap: entered promiscuous mode [ 1705.819327][T22760] veth1_macvtap: entered promiscuous mode [ 1706.184993][T22760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1706.279062][T22760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1706.536078][T22254] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.591130][T22254] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.804972][T22254] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.854842][T22254] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1707.024619][T22939] FAULT_INJECTION: forcing a failure. [ 1707.024619][T22939] name failslab, interval 1, probability 0, space 0, times 0 [ 1707.207551][T22939] CPU: 0 UID: 0 PID: 22939 Comm: syz.3.4629 Tainted: G L syzkaller #0 PREEMPT(full) [ 1707.207592][T22939] Tainted: [L]=SOFTLOCKUP [ 1707.207601][T22939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1707.207616][T22939] Call Trace: [ 1707.207624][T22939] [ 1707.207634][T22939] dump_stack_lvl+0x100/0x190 [ 1707.207677][T22939] should_fail_ex.cold+0x5/0xa [ 1707.207705][T22939] should_failslab+0xc2/0x120 [ 1707.207731][T22939] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1707.207769][T22939] ? fcntl_getlk+0x84/0x8a0 [ 1707.207802][T22939] fcntl_getlk+0x84/0x8a0 [ 1707.207828][T22939] ? find_held_lock+0x2b/0x80 [ 1707.207850][T22939] ? __might_fault+0xc5/0x140 [ 1707.207886][T22939] ? __pfx_fcntl_getlk+0x10/0x10 [ 1707.207924][T22939] do_fcntl+0x10f0/0x1670 [ 1707.207957][T22939] ? __pfx_do_fcntl+0x10/0x10 [ 1707.207987][T22939] ? __fget_files+0x215/0x3d0 [ 1707.208023][T22939] ? tomoyo_file_fcntl+0x6c/0xc0 [ 1707.208067][T22939] __x64_sys_fcntl+0x163/0x200 [ 1707.208104][T22939] do_syscall_64+0x106/0xf80 [ 1707.208141][T22939] ? clear_bhb_loop+0x40/0x90 [ 1707.208171][T22939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1707.208197][T22939] RIP: 0033:0x7f1c0779c799 [ 1707.208217][T22939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1707.208242][T22939] RSP: 002b:00007f1c085c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 1707.208266][T22939] RAX: ffffffffffffffda RBX: 00007f1c07a15fa0 RCX: 00007f1c0779c799 [ 1707.208283][T22939] RDX: 0000000000008960 RSI: 0000000000000024 RDI: 0000000000000004 [ 1707.208298][T22939] RBP: 00007f1c07832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1707.208314][T22939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1707.208329][T22939] R13: 00007f1c07a16038 R14: 00007f1c07a15fa0 R15: 00007fffed8ae048 [ 1707.208360][T22939] [ 1707.839500][T22254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1707.883398][T22107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1707.929317][T22107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1707.968794][T22254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1708.409364][T22965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4632'. [ 1708.500135][T22968] netlink: 'syz.3.4632': attribute type 1 has an invalid length. [ 1708.650001][T22968] netlink: 51505 bytes leftover after parsing attributes in process `syz.3.4632'. [ 1710.294205][T22991] Invalid ELF header magic: != ELF [ 1710.817367][T23009] can: request_module (can-proto-4) failed. [ 1712.025053][T23019] bridge0: port 3(gretap0) entered blocking state [ 1712.047783][T23019] bridge0: port 3(gretap0) entered disabled state [ 1712.075075][T23019] gretap0: entered allmulticast mode [ 1712.096054][T23019] FAULT_INJECTION: forcing a failure. [ 1712.096054][T23019] name failslab, interval 1, probability 0, space 0, times 0 [ 1712.171705][T23019] CPU: 0 UID: 0 PID: 23019 Comm: syz.6.4640 Tainted: G L syzkaller #0 PREEMPT(full) [ 1712.171758][T23019] Tainted: [L]=SOFTLOCKUP [ 1712.171767][T23019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1712.171796][T23019] Call Trace: [ 1712.171806][T23019] [ 1712.171816][T23019] dump_stack_lvl+0x100/0x190 [ 1712.171863][T23019] should_fail_ex.cold+0x5/0xa [ 1712.172058][T23019] should_failslab+0xc2/0x120 [ 1712.172087][T23019] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1712.172131][T23019] ? __kernfs_new_node+0xd2/0x960 [ 1712.172178][T23019] __kernfs_new_node+0xd2/0x960 [ 1712.172222][T23019] ? __pfx___kernfs_new_node+0x10/0x10 [ 1712.172288][T23019] ? find_held_lock+0x2b/0x80 [ 1712.172314][T23019] ? kernfs_root+0xee/0x2a0 [ 1712.172351][T23019] ? kernfs_root+0xee/0x2a0 [ 1712.172397][T23019] kernfs_new_node+0x11b/0x1a0 [ 1712.172448][T23019] kernfs_create_link+0xcc/0x240 [ 1712.172484][T23019] sysfs_do_create_link_sd+0x90/0x140 [ 1712.172526][T23019] sysfs_create_link+0x61/0xc0 [ 1712.172567][T23019] __netdev_adjacent_dev_insert+0x43e/0xbf0 [ 1712.172616][T23019] ? __pfx___netdev_adjacent_dev_insert+0x10/0x10 [ 1712.172669][T23019] __netdev_upper_dev_link+0x3d8/0x7e0 [ 1712.172706][T23019] ? __pfx___netdev_upper_dev_link+0x10/0x10 [ 1712.172737][T23019] ? kernfs_root+0xf8/0x2a0 [ 1712.172778][T23019] ? kernfs_add_one+0x214/0x850 [ 1712.172830][T23019] netdev_master_upper_dev_link+0x9f/0xd0 [ 1712.172864][T23019] ? __pfx_netdev_master_upper_dev_link+0x10/0x10 [ 1712.172897][T23019] ? lockdep_rtnl_is_held+0x26/0x40 [ 1712.173017][T23019] ? netdev_is_rx_handler_busy+0x83/0x140 [ 1712.173067][T23019] br_add_if+0x9fd/0x1b40 [ 1712.173167][T23019] ? security_capable+0x80/0x260 [ 1712.173215][T23019] add_del_if+0x114/0x160 [ 1712.173253][T23019] br_dev_siocdevprivate+0x8ac/0x1650 [ 1712.173295][T23019] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 1712.173347][T23019] ? lock_acquire+0x1cf/0x380 [ 1712.173393][T23019] ? netdev_name_node_lookup+0x107/0x150 [ 1712.173427][T23019] ? __mutex_lock+0x26a/0x1b90 [ 1712.173476][T23019] dev_ifsioc+0xc1e/0x1e90 [ 1712.173545][T23019] ? __pfx_dev_ifsioc+0x10/0x10 [ 1712.173579][T23019] ? __pfx___mutex_lock+0x10/0x10 [ 1712.173632][T23019] ? dev_load+0x8e/0x240 [ 1712.173663][T23019] ? dev_load+0x8e/0x240 [ 1712.173704][T23019] dev_ioctl+0x70e/0x1070 [ 1712.173742][T23019] sock_ioctl+0x494/0x6b0 [ 1712.173773][T23019] ? __pfx_sock_ioctl+0x10/0x10 [ 1712.173802][T23019] ? hook_file_ioctl_common+0x146/0x410 [ 1712.173839][T23019] ? __fget_files+0x21f/0x3d0 [ 1712.173870][T23019] ? __pfx_sock_ioctl+0x10/0x10 [ 1712.173901][T23019] __x64_sys_ioctl+0x18e/0x210 [ 1712.173952][T23019] do_syscall_64+0x106/0xf80 [ 1712.173991][T23019] ? clear_bhb_loop+0x40/0x90 [ 1712.174033][T23019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1712.174062][T23019] RIP: 0033:0x7f49d279c799 [ 1712.174087][T23019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1712.174114][T23019] RSP: 002b:00007f49d3625028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1712.174140][T23019] RAX: ffffffffffffffda RBX: 00007f49d2a15fa0 RCX: 00007f49d279c799 [ 1712.174161][T23019] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 000000000000000a [ 1712.174179][T23019] RBP: 00007f49d2832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1712.174218][T23019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1712.174235][T23019] R13: 00007f49d2a16038 R14: 00007f49d2a15fa0 R15: 00007ffc3f4f8468 [ 1712.174285][T23019] [ 1713.490909][T23019] gretap0: left allmulticast mode [ 1715.940258][T23045] Invalid ELF header magic: != ELF [ 1724.228444][T22238] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1724.242817][T22238] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1724.255071][T22238] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1724.264432][T22238] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1724.274300][T22238] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1725.210009][T23131] chnl_net:caif_netlink_parms(): no params data found [ 1725.736290][T23131] bridge0: port 1(bridge_slave_0) entered blocking state [ 1725.852620][T23131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1725.911958][T23131] bridge_slave_0: entered allmulticast mode [ 1725.958189][T23131] bridge_slave_0: entered promiscuous mode [ 1726.045838][T23131] bridge0: port 2(bridge_slave_1) entered blocking state [ 1726.120354][T23131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1726.181294][T23131] bridge_slave_1: entered allmulticast mode [ 1726.266555][T23131] bridge_slave_1: entered promiscuous mode [ 1726.397132][T22238] Bluetooth: hci6: command tx timeout [ 1726.560450][T23131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1726.685402][T23131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1726.955564][T23131] team0: Port device team_slave_0 added [ 1727.094535][T23131] team0: Port device team_slave_1 added [ 1727.567855][T23131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1727.647639][T23131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1727.974600][T23131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1728.179138][T23131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1728.257976][T23131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1728.486004][T22238] Bluetooth: hci6: command tx timeout [ 1728.592546][T23131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1729.085222][T23131] hsr_slave_0: entered promiscuous mode [ 1729.133804][T23131] hsr_slave_1: entered promiscuous mode [ 1729.195393][T23131] debugfs: 'hsr0' already exists in 'hsr' [ 1729.243719][T23131] Cannot create hsr debugfs directory [ 1729.800076][T23148] FAULT_INJECTION: forcing a failure. [ 1729.800076][T23148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1730.193972][T23148] CPU: 0 UID: 0 PID: 23148 Comm: syz.3.4665 Tainted: G L syzkaller #0 PREEMPT(full) [ 1730.194015][T23148] Tainted: [L]=SOFTLOCKUP [ 1730.194024][T23148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1730.194040][T23148] Call Trace: [ 1730.194049][T23148] [ 1730.194059][T23148] dump_stack_lvl+0x100/0x190 [ 1730.194103][T23148] should_fail_ex.cold+0x5/0xa [ 1730.194135][T23148] strncpy_from_user+0x3b/0x2d0 [ 1730.194171][T23148] do_getname+0x78/0x390 [ 1730.194208][T23148] do_sys_openat2+0xc5/0x1e0 [ 1730.194243][T23148] ? __pfx_do_sys_openat2+0x10/0x10 [ 1730.194279][T23148] ? __pfx_restore_altstack+0x10/0x10 [ 1730.194323][T23148] __x64_sys_open+0xfe/0x1d0 [ 1730.194357][T23148] ? __pfx___x64_sys_open+0x10/0x10 [ 1730.194410][T23148] do_syscall_64+0x106/0xf80 [ 1730.194455][T23148] ? clear_bhb_loop+0x40/0x90 [ 1730.194487][T23148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1730.194515][T23148] RIP: 0033:0x7f1c0779c799 [ 1730.194535][T23148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1730.194561][T23148] RSP: 002b:00007f1c0859f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1730.194586][T23148] RAX: ffffffffffffffda RBX: 00007f1c07a16090 RCX: 00007f1c0779c799 [ 1730.194604][T23148] RDX: 0000000000000075 RSI: 0000000000022040 RDI: 0000000000000000 [ 1730.194619][T23148] RBP: 00007f1c07832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1730.194802][T23148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1730.194818][T23148] R13: 00007f1c07a16128 R14: 00007f1c07a16090 R15: 00007fffed8ae048 [ 1730.194851][T23148] [ 1730.978367][T22238] Bluetooth: hci6: command tx timeout [ 1731.861766][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1731.878110][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1732.414734][T23131] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1732.629688][T23131] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1732.765250][T23131] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1732.882723][T23131] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1733.036214][T22119] Bluetooth: hci6: command tx timeout [ 1733.455616][T23131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1733.568026][T23131] 8021q: adding VLAN 0 to HW filter on device team0 [ 1733.641783][T22107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1733.651745][T22107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1733.840392][T22107] bridge0: port 2(bridge_slave_1) entered blocking state [ 1733.850638][T22107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1734.050071][T23189] block2mtd: illegal erase size [ 1734.064469][T23131] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1735.211789][T23131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1736.499679][T23131] veth0_vlan: entered promiscuous mode [ 1736.591501][T23216] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4676'. [ 1736.786372][T23216] bridge0: port 2(bridge_slave_1) entered disabled state [ 1736.797569][T23216] bridge0: port 1(bridge_slave_0) entered disabled state [ 1736.840690][T22119] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 1736.887603][T23216] bridge0: entered promiscuous mode [ 1736.944668][T23131] veth1_vlan: entered promiscuous mode [ 1737.467057][T23131] veth0_macvtap: entered promiscuous mode [ 1737.567729][T23131] veth1_macvtap: entered promiscuous mode [ 1737.730397][T23222] vhci_hcd vhci_hcd.2: invalid port number 135 [ 1737.767780][T23222] vhci_hcd vhci_hcd.2: invalid port number 135 [ 1737.801831][T23131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1737.903229][T23131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1737.980417][T22254] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1738.007243][T22254] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1738.063687][T22254] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1738.110795][T22254] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1739.017175][T22792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1739.071972][T22792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1739.236599][T22106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1739.274515][T22106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1740.337940][T23250] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1740.509259][T23252] FAULT_INJECTION: forcing a failure. [ 1740.509259][T23252] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1740.592769][T23252] CPU: 0 UID: 0 PID: 23252 Comm: syz.7.4682 Tainted: G L syzkaller #0 PREEMPT(full) [ 1740.592812][T23252] Tainted: [L]=SOFTLOCKUP [ 1740.592821][T23252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1740.592838][T23252] Call Trace: [ 1740.592847][T23252] [ 1740.592856][T23252] dump_stack_lvl+0x100/0x190 [ 1740.592902][T23252] should_fail_ex.cold+0x5/0xa [ 1740.592927][T23252] ? prepare_alloc_pages+0x16d/0x5f0 [ 1740.592961][T23252] should_fail_alloc_page+0xeb/0x140 [ 1740.592990][T23252] prepare_alloc_pages+0x1f0/0x5f0 [ 1740.593026][T23252] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1740.593092][T23252] ? stack_trace_save+0x8e/0xc0 [ 1740.593119][T23252] ? __pfx_stack_trace_save+0x10/0x10 [ 1740.593145][T23252] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1740.593186][T23252] ? stack_depot_save_flags+0x27/0x9d0 [ 1740.593226][T23252] ? kasan_save_stack+0x3f/0x50 [ 1740.593265][T23252] ? kasan_save_stack+0x30/0x50 [ 1740.593304][T23252] ? kasan_save_track+0x14/0x30 [ 1740.593343][T23252] ? __kasan_kmalloc+0xaa/0xb0 [ 1740.593385][T23252] ? do_file_open+0x20e/0x430 [ 1740.593410][T23252] ? do_sys_openat2+0x10d/0x1e0 [ 1740.593442][T23252] ? __x64_sys_openat+0x12d/0x210 [ 1740.593492][T23252] ? do_syscall_64+0x106/0xf80 [ 1740.593556][T23252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1740.593590][T23252] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1740.593640][T23252] ? policy_nodemask+0xed/0x4f0 [ 1740.593670][T23252] alloc_pages_mpol+0x1fb/0x550 [ 1740.593699][T23252] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1740.593735][T23252] alloc_pages_noprof+0x131/0x390 [ 1740.593764][T23252] get_zeroed_page_noprof+0x18/0xb0 [ 1740.593793][T23252] mon_alloc_buff+0xce/0x1b0 [ 1740.593912][T23252] ? kasan_save_track+0x14/0x30 [ 1740.593956][T23252] mon_bin_open+0x207/0x470 [ 1740.594005][T23252] ? __pfx_mon_bin_open+0x10/0x10 [ 1740.594036][T23252] chrdev_open+0x234/0x6a0 [ 1740.594072][T23252] ? __pfx_chrdev_open+0x10/0x10 [ 1740.594104][T23252] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1740.594140][T23252] do_dentry_open+0x6d8/0x1660 [ 1740.594166][T23252] ? __pfx_chrdev_open+0x10/0x10 [ 1740.594209][T23252] vfs_open+0x82/0x3f0 [ 1740.594247][T23252] path_openat+0x208c/0x31a0 [ 1740.594288][T23252] ? __pfx_path_openat+0x10/0x10 [ 1740.594330][T23252] do_file_open+0x20e/0x430 [ 1740.594363][T23252] ? __pfx_do_file_open+0x10/0x10 [ 1740.594596][T23252] ? alloc_fd+0x476/0x790 [ 1740.594632][T23252] ? do_getname+0x191/0x390 [ 1740.594671][T23252] do_sys_openat2+0x10d/0x1e0 [ 1740.594714][T23252] ? __pfx_do_sys_openat2+0x10/0x10 [ 1740.594754][T23252] ? __fget_files+0x21f/0x3d0 [ 1740.594787][T23252] __x64_sys_openat+0x12d/0x210 [ 1740.594827][T23252] ? __pfx___x64_sys_openat+0x10/0x10 [ 1740.594876][T23252] do_syscall_64+0x106/0xf80 [ 1740.594917][T23252] ? clear_bhb_loop+0x40/0x90 [ 1740.594962][T23252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1740.594993][T23252] RIP: 0033:0x7f990579c799 [ 1740.595024][T23252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1740.595118][T23252] RSP: 002b:00007f990668d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1740.595151][T23252] RAX: ffffffffffffffda RBX: 00007f9905a16090 RCX: 00007f990579c799 [ 1740.595169][T23252] RDX: 0000000000002040 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1740.595193][T23252] RBP: 00007f9905832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1740.595210][T23252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1740.595226][T23252] R13: 00007f9905a16128 R14: 00007f9905a16090 R15: 00007fffe5e62188 [ 1740.595266][T23252] [ 1741.464281][T23260] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4684'. [ 1741.484726][T23260] netlink: 354 bytes leftover after parsing attributes in process `syz.6.4684'. [ 1741.985519][T23267] Console: switching to colour VGA+ 80x25 [ 1743.934799][T23288] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4691'. [ 1747.289560][T23347] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 1747.356564][T23347] FAULT_INJECTION: forcing a failure. [ 1747.356564][T23347] name failslab, interval 1, probability 0, space 0, times 0 [ 1747.433181][T23347] CPU: 0 UID: 0 PID: 23347 Comm: syz.7.4702 Tainted: G L syzkaller #0 PREEMPT(full) [ 1747.433222][T23347] Tainted: [L]=SOFTLOCKUP [ 1747.433230][T23347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1747.433246][T23347] Call Trace: [ 1747.433253][T23347] [ 1747.433263][T23347] dump_stack_lvl+0x100/0x190 [ 1747.433305][T23347] should_fail_ex.cold+0x5/0xa [ 1747.433335][T23347] should_failslab+0xc2/0x120 [ 1747.433361][T23347] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1747.433399][T23347] ? seq_open+0x55/0x170 [ 1747.433435][T23347] ? __pfx_tracing_trace_options_show+0x10/0x10 [ 1747.433469][T23347] seq_open+0x55/0x170 [ 1747.433501][T23347] ? __pfx_tracing_trace_options_show+0x10/0x10 [ 1747.433541][T23347] single_open+0xfc/0x1d0 [ 1747.433577][T23347] tracing_trace_options_open+0xb0/0x100 [ 1747.433621][T23347] do_dentry_open+0x6d8/0x1660 [ 1747.433646][T23347] ? __pfx_tracing_trace_options_open+0x10/0x10 [ 1747.433695][T23347] vfs_open+0x82/0x3f0 [ 1747.433729][T23347] path_openat+0x208c/0x31a0 [ 1747.433764][T23347] ? __pfx_path_openat+0x10/0x10 [ 1747.433801][T23347] do_file_open+0x20e/0x430 [ 1747.433829][T23347] ? __pfx_do_file_open+0x10/0x10 [ 1747.433875][T23347] ? alloc_fd+0x476/0x790 [ 1747.433902][T23347] ? do_getname+0x191/0x390 [ 1747.433944][T23347] do_sys_openat2+0x10d/0x1e0 [ 1747.433982][T23347] ? __pfx_do_sys_openat2+0x10/0x10 [ 1747.434017][T23347] ? __fget_files+0x21f/0x3d0 [ 1747.434047][T23347] __x64_sys_openat+0x12d/0x210 [ 1747.434081][T23347] ? __pfx___x64_sys_openat+0x10/0x10 [ 1747.434127][T23347] do_syscall_64+0x106/0xf80 [ 1747.434164][T23347] ? clear_bhb_loop+0x40/0x90 [ 1747.434200][T23347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1747.434226][T23347] RIP: 0033:0x7f990579c799 [ 1747.434246][T23347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1747.434271][T23347] RSP: 002b:00007f99066ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1747.434295][T23347] RAX: ffffffffffffffda RBX: 00007f9905a15fa0 RCX: 00007f990579c799 [ 1747.434311][T23347] RDX: 0000000000040081 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 1747.434327][T23347] RBP: 00007f9905832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1747.434342][T23347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1747.434357][T23347] R13: 00007f9905a16038 R14: 00007f9905a15fa0 R15: 00007fffe5e62188 [ 1747.434388][T23347] [ 1747.736542][T23353] mkiss: ax0: crc mode is auto. [ 1754.295346][T22119] Bluetooth: hci6: unexpected event 0x17 length: 440 > 6 [ 1756.395777][T23476] netlink: 17 bytes leftover after parsing attributes in process `syz.7.4724'. [ 1768.223825][T23607] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4744'. [ 1768.542531][T23607] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4744'. [ 1769.132402][T23617] FAULT_INJECTION: forcing a failure. [ 1769.132402][T23617] name failslab, interval 1, probability 0, space 0, times 0 [ 1769.237300][T23617] CPU: 0 UID: 0 PID: 23617 Comm: syz.7.4746 Tainted: G L syzkaller #0 PREEMPT(full) [ 1769.237343][T23617] Tainted: [L]=SOFTLOCKUP [ 1769.237360][T23617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1769.237375][T23617] Call Trace: [ 1769.237384][T23617] [ 1769.237393][T23617] dump_stack_lvl+0x100/0x190 [ 1769.237438][T23617] should_fail_ex.cold+0x5/0xa [ 1769.237470][T23617] should_failslab+0xc2/0x120 [ 1769.237498][T23617] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 1769.237542][T23617] ? kstrdup_const+0x63/0x80 [ 1769.237571][T23617] kstrdup+0x51/0xe0 [ 1769.237614][T23617] kstrdup_const+0x63/0x80 [ 1769.237636][T23617] kvasprintf_const+0x10f/0x1a0 [ 1769.237745][T23617] kobject_set_name_vargs+0x5a/0x140 [ 1769.237775][T23617] dev_set_name+0xc7/0x100 [ 1769.237813][T23617] ? __pfx_dev_set_name+0x10/0x10 [ 1769.237864][T23617] ? __pfx___might_resched+0x10/0x10 [ 1769.237916][T23617] __add_disk+0x414/0xe40 [ 1769.237947][T23617] add_disk_fwnode+0x118/0x5c0 [ 1769.238138][T23617] nbd_dev_add+0x77a/0xb10 [ 1769.238173][T23617] ? find_held_lock+0x2b/0x80 [ 1769.238199][T23617] ? __pfx_nbd_dev_add+0x10/0x10 [ 1769.238224][T23617] ? nbd_genl_connect+0x131a/0x1a40 [ 1769.238271][T23617] ? bpf_lsm_capable+0x9/0x10 [ 1769.238302][T23617] ? __radix_tree_lookup+0x217/0x2b0 [ 1769.238348][T23617] nbd_genl_connect+0xb8d/0x1a40 [ 1769.238383][T23617] ? rcu_is_watching+0x12/0xc0 [ 1769.238437][T23617] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1769.238468][T23617] ? __nla_parse+0x40/0x60 [ 1769.238512][T23617] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 1769.238548][T23617] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 1769.238587][T23617] genl_family_rcv_msg_doit+0x214/0x300 [ 1769.238620][T23617] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1769.238649][T23617] ? genl_get_cmd+0x3ef/0x720 [ 1769.238684][T23617] ? __dev_queue_xmit+0x5af/0x4800 [ 1769.238717][T23617] ? __radix_tree_lookup+0x217/0x2b0 [ 1769.238761][T23617] genl_rcv_msg+0x560/0x800 [ 1769.238795][T23617] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1769.238825][T23617] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1769.238866][T23617] netlink_rcv_skb+0x159/0x420 [ 1769.238911][T23617] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1769.239287][T23617] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1769.239369][T23617] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1769.239416][T23617] genl_rcv+0x28/0x40 [ 1769.239441][T23617] netlink_unicast+0x5aa/0x870 [ 1769.239487][T23617] ? __pfx_netlink_unicast+0x10/0x10 [ 1769.239540][T23617] netlink_sendmsg+0x8b0/0xda0 [ 1769.239586][T23617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1769.239629][T23617] ? __import_iovec+0x1d2/0x640 [ 1769.239676][T23617] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1769.239729][T23617] ____sys_sendmsg+0x9e1/0xb70 [ 1769.239755][T23617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1769.239799][T23617] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1769.239832][T23617] ? try_to_wake_up+0x644/0x1a80 [ 1769.239864][T23617] ___sys_sendmsg+0x190/0x1e0 [ 1769.239895][T23617] ? __pfx____sys_sendmsg+0x10/0x10 [ 1769.239925][T23617] ? futex_private_hash_put+0x107/0x1c0 [ 1769.240000][T23617] __sys_sendmsg+0x170/0x220 [ 1769.240039][T23617] ? __pfx___sys_sendmsg+0x10/0x10 [ 1769.240088][T23617] ? __x64_sys_futex+0x34f/0x4d0 [ 1769.240150][T23617] do_syscall_64+0x106/0xf80 [ 1769.240277][T23617] ? clear_bhb_loop+0x40/0x90 [ 1769.240312][T23617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1769.240340][T23617] RIP: 0033:0x7f990579c799 [ 1769.240363][T23617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1769.240388][T23617] RSP: 002b:00007f99066ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1769.240412][T23617] RAX: ffffffffffffffda RBX: 00007f9905a15fa0 RCX: 00007f990579c799 [ 1769.240429][T23617] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000009 [ 1769.240446][T23617] RBP: 00007f9905832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1769.240462][T23617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1769.240479][T23617] R13: 00007f9905a16038 R14: 00007f9905a15fa0 R15: 00007fffe5e62188 [ 1769.240514][T23617] [ 1770.382637][T23617] nbd: failed to add new device [ 1775.095501][T23662] Invalid ELF header magic: != ELF [ 1775.120584][T23662] FAULT_INJECTION: forcing a failure. [ 1775.120584][T23662] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1775.137750][T23662] CPU: 0 UID: 0 PID: 23662 Comm: syz.7.4752 Tainted: G L syzkaller #0 PREEMPT(full) [ 1775.137791][T23662] Tainted: [L]=SOFTLOCKUP [ 1775.137800][T23662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1775.137815][T23662] Call Trace: [ 1775.137823][T23662] [ 1775.137832][T23662] dump_stack_lvl+0x100/0x190 [ 1775.137878][T23662] should_fail_ex.cold+0x5/0xa [ 1775.137907][T23662] get_futex_key+0x1d2/0x1620 [ 1775.137941][T23662] ? __pfx_get_futex_key+0x10/0x10 [ 1775.137974][T23662] ? find_held_lock+0x2b/0x80 [ 1775.137998][T23662] ? file_tty_write.isra.0+0x5ea/0x890 [ 1775.138139][T23662] ? file_tty_write.isra.0+0x5ea/0x890 [ 1775.138187][T23662] futex_wake+0xea/0x530 [ 1775.138226][T23662] ? file_tty_write.isra.0+0x5ef/0x890 [ 1775.138264][T23662] ? __pfx_futex_wake+0x10/0x10 [ 1775.138306][T23662] ? vfs_write+0x15d/0x1070 [ 1775.138330][T23662] ? __pfx_tty_write+0x10/0x10 [ 1775.138371][T23662] do_futex+0x32b/0x350 [ 1775.138404][T23662] ? __pfx_do_futex+0x10/0x10 [ 1775.138445][T23662] __x64_sys_futex+0x34f/0x4d0 [ 1775.138480][T23662] ? fput+0x79/0x100 [ 1775.138508][T23662] ? __pfx___x64_sys_futex+0x10/0x10 [ 1775.138540][T23662] ? ksys_write+0x1ac/0x250 [ 1775.138562][T23662] ? __pfx_ksys_write+0x10/0x10 [ 1775.138593][T23662] do_syscall_64+0x106/0xf80 [ 1775.138630][T23662] ? clear_bhb_loop+0x40/0x90 [ 1775.138659][T23662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1775.138687][T23662] RIP: 0033:0x7f990579c799 [ 1775.138707][T23662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1775.138732][T23662] RSP: 002b:00007f99066ae0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1775.138755][T23662] RAX: ffffffffffffffda RBX: 00007f9905a15fa8 RCX: 00007f990579c799 [ 1775.138771][T23662] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9905a15fac [ 1775.138787][T23662] RBP: 00007f9905a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1775.138802][T23662] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1775.138817][T23662] R13: 00007f9905a16038 R14: 00007fffe5e620a0 R15: 00007fffe5e62188 [ 1775.138849][T23662] [ 1780.349799][T22238] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1780.365818][T22238] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1780.382386][T22238] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1780.392518][T22238] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1780.402256][T22238] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1780.663988][T23671] chnl_net:caif_netlink_parms(): no params data found [ 1780.770748][T23671] bridge0: port 1(bridge_slave_0) entered blocking state [ 1780.779353][T23671] bridge0: port 1(bridge_slave_0) entered disabled state [ 1780.787215][T23671] bridge_slave_0: entered allmulticast mode [ 1780.796184][T23671] bridge_slave_0: entered promiscuous mode [ 1780.806130][T23671] bridge0: port 2(bridge_slave_1) entered blocking state [ 1780.817831][T23671] bridge0: port 2(bridge_slave_1) entered disabled state [ 1780.841416][T23671] bridge_slave_1: entered allmulticast mode [ 1780.857857][T23671] bridge_slave_1: entered promiscuous mode [ 1780.902513][T23671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1780.918494][T23671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1780.968360][T23671] team0: Port device team_slave_0 added [ 1780.985226][T23671] team0: Port device team_slave_1 added [ 1781.018230][T23671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1781.026358][T23671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1781.067827][T23671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1781.099742][T23671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1781.107783][T23671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1781.186233][T23671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1781.322365][T23671] hsr_slave_0: entered promiscuous mode [ 1781.340819][T23671] hsr_slave_1: entered promiscuous mode [ 1781.359569][T23671] debugfs: 'hsr0' already exists in 'hsr' [ 1781.366773][T23671] Cannot create hsr debugfs directory [ 1781.978676][T23671] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1782.017084][T23671] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1782.042745][T23671] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1782.083318][T23671] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1782.421054][T22238] Bluetooth: hci7: command tx timeout [ 1782.568090][T23671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1782.649051][T23671] 8021q: adding VLAN 0 to HW filter on device team0 [ 1782.703432][T22792] bridge0: port 1(bridge_slave_0) entered blocking state [ 1782.714446][T22792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1782.787691][T22792] bridge0: port 2(bridge_slave_1) entered blocking state [ 1782.795630][T22792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1783.729793][T22238] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1783.750097][T22238] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1783.772768][T22238] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1783.788525][T22238] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1783.798105][T22238] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1784.019540][T23671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1784.502197][T22238] Bluetooth: hci7: command tx timeout [ 1785.010193][T23709] chnl_net:caif_netlink_parms(): no params data found [ 1785.077972][T22119] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1785.103322][T22119] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1785.116963][T22119] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1785.128563][T22119] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1785.157506][T22119] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1785.654494][T23709] bridge0: port 1(bridge_slave_0) entered blocking state [ 1785.667779][T23709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1785.680785][T23709] bridge_slave_0: entered allmulticast mode [ 1785.697275][T23709] bridge_slave_0: entered promiscuous mode [ 1785.755669][T23709] bridge0: port 2(bridge_slave_1) entered blocking state [ 1785.780917][T23709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1785.794301][T23709] bridge_slave_1: entered allmulticast mode [ 1785.810941][T23709] bridge_slave_1: entered promiscuous mode [ 1785.862722][T22119] Bluetooth: hci8: command tx timeout [ 1786.021105][T23671] veth0_vlan: entered promiscuous mode [ 1786.058847][T23709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1786.143351][T23671] veth1_vlan: entered promiscuous mode [ 1786.204604][T23709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1786.323561][T23722] chnl_net:caif_netlink_parms(): no params data found [ 1786.350561][T23709] team0: Port device team_slave_0 added [ 1786.406189][T23709] team0: Port device team_slave_1 added [ 1786.460808][T23671] veth0_macvtap: entered promiscuous mode [ 1786.531567][T23671] veth1_macvtap: entered promiscuous mode [ 1786.575144][T23709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1786.588602][T22119] Bluetooth: hci7: command tx timeout [ 1786.611178][T23709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1786.665134][T23709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1786.714556][T23709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1786.737195][T23709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1786.809426][T23709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1786.961448][T23722] bridge0: port 1(bridge_slave_0) entered blocking state [ 1786.987928][T23722] bridge0: port 1(bridge_slave_0) entered disabled state [ 1787.005722][T23722] bridge_slave_0: entered allmulticast mode [ 1787.029571][T23722] bridge_slave_0: entered promiscuous mode [ 1787.120011][T23722] bridge0: port 2(bridge_slave_1) entered blocking state [ 1787.154471][T23722] bridge0: port 2(bridge_slave_1) entered disabled state [ 1787.171612][T23722] bridge_slave_1: entered allmulticast mode [ 1787.204371][T23722] bridge_slave_1: entered promiscuous mode [ 1787.225024][T22119] Bluetooth: hci9: command tx timeout [ 1787.271847][T23709] hsr_slave_0: entered promiscuous mode [ 1787.283835][T23709] hsr_slave_1: entered promiscuous mode [ 1787.299315][T23709] debugfs: 'hsr0' already exists in 'hsr' [ 1787.320599][T23709] Cannot create hsr debugfs directory [ 1787.339075][T23671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1787.454642][T23671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1787.577545][T23722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1787.618640][T23722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1787.762091][T22107] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1787.808407][T23722] team0: Port device team_slave_0 added [ 1787.858439][T22793] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1787.877304][T22793] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1787.897555][T23722] team0: Port device team_slave_1 added [ 1787.944435][T22119] Bluetooth: hci8: command tx timeout [ 1788.056694][T22793] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.199874][T23722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1788.257171][T23722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1788.385145][T23722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1788.520502][T23722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1788.547853][T23722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1788.625931][T23722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1788.669449][T22119] Bluetooth: hci7: command tx timeout [ 1789.030522][T23722] hsr_slave_0: entered promiscuous mode [ 1789.046942][T23722] hsr_slave_1: entered promiscuous mode [ 1789.066583][T23722] debugfs: 'hsr0' already exists in 'hsr' [ 1789.075222][T23722] Cannot create hsr debugfs directory [ 1789.094667][T22107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1789.130430][T22107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1789.305454][T22119] Bluetooth: hci9: command tx timeout [ 1789.331200][T22107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1789.377303][T22107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1789.431159][T23709] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1789.512247][T23709] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1789.617226][T23709] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1789.676504][T23709] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1790.028904][T22119] Bluetooth: hci8: command tx timeout [ 1791.367928][T23709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1791.387475][T22119] Bluetooth: hci9: command tx timeout [ 1791.451655][T23709] 8021q: adding VLAN 0 to HW filter on device team0 [ 1791.607712][T22106] bridge0: port 1(bridge_slave_0) entered blocking state [ 1791.616814][T22106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1791.794232][T22106] bridge0: port 2(bridge_slave_1) entered blocking state [ 1791.803709][T22106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1792.106636][T22119] Bluetooth: hci8: command tx timeout [ 1793.019118][T23722] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1793.132982][T23722] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1793.236784][T23722] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1793.340018][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1793.355131][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.408401][T23722] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1793.466450][T22119] Bluetooth: hci9: command tx timeout [ 1793.645324][T23709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1794.249882][T23722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1794.486621][T23722] 8021q: adding VLAN 0 to HW filter on device team0 [ 1794.819472][T22107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1794.829660][T22107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1794.944501][T22107] bridge0: port 2(bridge_slave_1) entered blocking state [ 1794.953092][T22107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1795.110481][T23809] bond0: invalid ARP target specified [ 1795.169856][T23814] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4768'. [ 1795.362580][T23809] FAULT_INJECTION: forcing a failure. [ 1795.362580][T23809] name failslab, interval 1, probability 0, space 0, times 0 [ 1795.482924][T23809] CPU: 0 UID: 0 PID: 23809 Comm: syz.7.4768 Tainted: G L syzkaller #0 PREEMPT(full) [ 1795.482966][T23809] Tainted: [L]=SOFTLOCKUP [ 1795.482976][T23809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1795.482992][T23809] Call Trace: [ 1795.483001][T23809] [ 1795.483011][T23809] dump_stack_lvl+0x100/0x190 [ 1795.483058][T23809] should_fail_ex.cold+0x5/0xa [ 1795.483090][T23809] should_failslab+0xc2/0x120 [ 1795.483118][T23809] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1795.483154][T23809] ? bpf_prog_alloc_no_stats+0x15f/0x640 [ 1795.483242][T23809] bpf_prog_alloc_no_stats+0x15f/0x640 [ 1795.483292][T23809] bpf_prog_alloc+0x3b/0x200 [ 1795.483332][T23809] bpf_prog_create_from_user+0xb4/0x2f0 [ 1795.483435][T23809] ? __pfx_seccomp_check_filter+0x10/0x10 [ 1795.483474][T23809] do_seccomp+0x7f7/0x2740 [ 1795.483547][T23809] ? __pfx_do_seccomp+0x10/0x10 [ 1795.483580][T23809] ? __x64_sys_openat+0x12d/0x210 [ 1795.483616][T23809] ? xfd_validate_state+0x129/0x190 [ 1795.483664][T23809] do_syscall_64+0x106/0xf80 [ 1795.483706][T23809] ? clear_bhb_loop+0x40/0x90 [ 1795.483738][T23809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1795.483765][T23809] RIP: 0033:0x7f990579c799 [ 1795.483789][T23809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1795.483816][T23809] RSP: 002b:00007f99066ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1795.483842][T23809] RAX: ffffffffffffffda RBX: 00007f9905a15fa0 RCX: 00007f990579c799 [ 1795.483859][T23809] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000000000000001 [ 1795.483875][T23809] RBP: 00007f9905832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1795.483891][T23809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1795.483907][T23809] R13: 00007f9905a16038 R14: 00007f9905a15fa0 R15: 00007fffe5e62188 [ 1795.483950][T23809] [ 1796.872588][T23814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1796.886534][T23814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1796.910441][T23814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1796.927499][T23814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1797.114493][T23709] veth0_vlan: entered promiscuous mode [ 1797.244109][T23709] veth1_vlan: entered promiscuous mode [ 1797.510141][T23709] veth0_macvtap: entered promiscuous mode [ 1797.582656][T23709] veth1_macvtap: entered promiscuous mode [ 1797.816035][T23709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1797.970423][T23709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1798.107461][T22102] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.157298][T22102] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.245452][T23722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1798.395076][T22102] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.463705][T22102] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1799.648593][T22793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1799.725149][T22793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1799.750476][T23722] veth0_vlan: entered promiscuous mode [ 1800.235076][T23722] veth1_vlan: entered promiscuous mode [ 1800.345814][T22792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1800.444489][T22792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1800.595257][T23722] veth0_macvtap: entered promiscuous mode [ 1800.756397][T23722] veth1_macvtap: entered promiscuous mode [ 1801.075754][T23722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1801.172771][T23722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1801.422190][T22106] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1801.554413][T22107] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1801.810050][T22107] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1801.946428][T22107] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1803.310898][T22106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1803.420483][T22106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1803.809683][T22102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1803.885778][T22102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1805.860914][T23928] zswap: compressor not available [ 1809.958253][ T31] INFO: task syz.1.4461:22088 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1810.011633][ T31] Tainted: G L syzkaller #0 [ 1810.126044][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1810.210908][ T31] task:syz.1.4461 state:D stack:27024 pid:22088 tgid:22086 ppid:5831 task_flags:0x400140 flags:0x00080002 [ 1810.316016][ T31] Call Trace: [ 1810.319741][ T31] [ 1810.385610][ T31] __schedule+0xfee/0x6120 [ 1810.390669][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1810.468424][ T31] ? __pfx___schedule+0x10/0x10 [ 1810.521015][ T31] ? find_held_lock+0x2b/0x80 [ 1810.552287][ T31] ? schedule+0x2bf/0x390 [ 1810.617362][ T31] schedule+0xdd/0x390 [ 1810.622238][ T31] schedule_timeout+0x1b2/0x280 [ 1810.704075][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1810.749593][ T31] ? mark_held_locks+0x40/0x70 [ 1810.783920][ T31] __wait_for_common+0x2e7/0x4c0 [ 1810.835227][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1810.872570][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1810.923980][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1810.985436][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 1811.098075][ T31] __flush_workqueue+0x3f7/0x1200 [ 1811.244337][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1811.250431][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 1811.332838][ T31] ? reacquire_held_locks+0xce/0x1e0 [ 1811.390605][ T31] ? release_sock+0x21/0x220 [ 1811.434728][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 1811.440484][ T31] ? __local_bh_enable_ip+0x9e/0x120 [ 1811.511582][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 1811.552274][ T31] rds_tcp_listen_stop+0x104/0x160 [ 1811.574523][ T31] rds_tcp_exit_net+0xe0/0x870 [ 1811.579818][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 1811.665026][ T31] ? __pfx___might_resched+0x10/0x10 [ 1811.670869][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 1811.746055][ T31] ops_undo_list+0x2ee/0xab0 [ 1811.750839][ T31] ? kfree+0x1c0/0x6b0 [ 1811.800954][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 1811.819873][ T31] ? ops_init+0x2fa/0x5f0 [ 1811.846955][ T31] setup_net+0x1fa/0x3a0 [ 1811.851672][ T31] ? __pfx_setup_net+0x10/0x10 [ 1811.891854][ T31] ? lockdep_init_map_type+0x5c/0x250 [ 1811.897872][ T31] ? mutex_init_lockep+0x110/0x150 [ 1811.913493][ T31] copy_net_ns+0x46f/0x7c0 [ 1811.924996][ T31] create_new_namespaces+0x3ea/0xac0 [ 1811.931002][ T31] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1811.956636][ T31] ksys_unshare+0x473/0xad0 [ 1811.962211][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 1811.984743][ T31] __x64_sys_unshare+0x31/0x40 [ 1812.005272][ T31] do_syscall_64+0x106/0xf80 [ 1812.010881][ T31] ? clear_bhb_loop+0x40/0x90 [ 1812.040142][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1812.052695][ T31] RIP: 0033:0x7fa5ae39c799 [ 1812.065278][ T31] RSP: 002b:00007fa5af32f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1812.074302][ T31] RAX: ffffffffffffffda RBX: 00007fa5ae615fa0 RCX: 00007fa5ae39c799 [ 1812.104566][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1812.136036][ T31] RBP: 00007fa5ae432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1812.157567][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1812.184841][ T31] R13: 00007fa5ae616038 R14: 00007fa5ae615fa0 R15: 00007fffb852cfe8 [ 1812.193966][ T31] [ 1812.234060][ T31] INFO: task kworker/u11:3:22113 blocked for more than 145 seconds. [ 1812.356022][T24008] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1812.364264][T24008] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1812.434510][ T31] Tainted: G L syzkaller #0 [ 1812.485228][T24008] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1812.491941][T24008] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1812.510208][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1812.575463][T24008] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1812.582411][T24008] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1812.592736][ T31] task:kworker/u11:3 state:D stack:26888 pid:22113 tgid:22113 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1812.675216][ T31] Workqueue: netns cleanup_net [ 1812.681049][ T31] Call Trace: [ 1812.711498][ T31] [ 1812.732002][ T31] __schedule+0xfee/0x6120 [ 1812.755125][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1812.761135][ T31] ? __pfx___schedule+0x10/0x10 [ 1812.795081][ T31] ? find_held_lock+0x2b/0x80 [ 1812.802175][ T31] ? schedule+0x2bf/0x390 [ 1812.825169][ T31] schedule+0xdd/0x390 [ 1812.829683][ T31] schedule_timeout+0x1b2/0x280 [ 1812.875372][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1812.881816][ T31] ? mark_held_locks+0x40/0x70 [ 1812.905148][ T31] __wait_for_common+0x2e7/0x4c0 [ 1812.910645][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1812.958966][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1812.975752][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1812.981640][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 1813.028674][ T31] __flush_workqueue+0x3f7/0x1200 [ 1813.033992][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1813.055245][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1813.060658][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 1813.085214][ T31] ? reacquire_held_locks+0xce/0x1e0 [ 1813.091720][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 1813.116993][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 1813.139684][ T31] rds_tcp_listen_stop+0x104/0x160 [ 1813.167383][ T31] rds_tcp_exit_net+0xe0/0x870 [ 1813.174906][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 1813.205400][ T31] ? __pfx___might_resched+0x10/0x10 [ 1813.211426][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 1813.233891][ T31] ops_undo_list+0x2ee/0xab0 [ 1813.244260][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 1813.265595][ T31] ? cleanup_net+0x332/0x920 [ 1813.271570][ T31] ? idr_destroy+0x62/0x2e0 [ 1813.287923][ T31] cleanup_net+0x499/0x920 [ 1813.294685][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 1813.329580][ T31] ? rcu_is_watching+0x12/0xc0 [ 1813.345682][ T31] process_one_work+0xa23/0x19a0 [ 1813.371325][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1813.385774][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 1813.393030][ T31] worker_thread+0x5ef/0xe50 [ 1813.419391][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1813.435993][ T31] ? kthread+0x13a/0x450 [ 1813.441801][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1813.462890][ T31] kthread+0x370/0x450 [ 1813.487329][ T31] ? __pfx_kthread+0x10/0x10 [ 1813.494810][ T31] ret_from_fork+0x754/0xd80 [ 1813.514431][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1813.553438][ T31] ? __switch_to+0x7b4/0x1120 [ 1813.574323][ T31] ? __pfx_kthread+0x10/0x10 [ 1813.595465][ T31] ret_from_fork_asm+0x1a/0x30 [ 1813.601329][ T31] [ 1813.745601][T24008] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1813.755639][ T31] [ 1813.755639][ T31] Showing all locks held in the system: [ 1813.764677][ T31] 1 lock held by khungtaskd/31: [ 1813.845305][ T31] #0: ffffffff8e7e7660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1813.885670][ T31] 1 lock held by syz.1.4461/22088: [ 1813.891472][ T31] #0: ffffffff905fbd90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1813.961478][ T31] 3 locks held by kworker/u11:3/22113: [ 1813.985904][ T31] #0: ffff88801c6ae948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 1814.015935][ T31] #1: ffffc90003217d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 1814.063725][ T31] #2: ffffffff905fbd90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1814.095774][ T31] 2 locks held by kworker/u11:5/22254: [ 1814.101743][ T31] #0: ffff88801ef4b148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 1814.159484][ T31] #1: ffffc90004607d08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 1814.206450][ T31] 1 lock held by syz.2.4548/22513: [ 1814.211795][ T31] #0: ffffffff905fbd90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1814.268712][ T31] 1 lock held by syz.5.4633/22967: [ 1814.274319][ T31] #0: ffffffff905fbd90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1814.345185][ T31] 1 lock held by syz.3.4741/23578: [ 1814.357485][ T31] #0: ffffffff905fbd90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1814.387652][ T31] 1 lock held by syz.6.4744/23605: [ 1814.393999][ T31] #0: ffffffff905fbd90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1814.433468][ T31] 1 lock held by syz.4.4745/23615: [ 1814.442710][T22119] Bluetooth: hci2: command 0x0c1a tx timeout [ 1814.453266][T22238] Bluetooth: hci3: command 0x0c1a tx timeout [ 1814.481584][ T31] #0: ffffffff905fbd90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1814.521561][T22103] Bluetooth: hci0: command 0x0c1a tx timeout [ 1814.527985][T22119] Bluetooth: hci1: command 0x0c1a tx timeout [ 1814.537787][ T31] 1 lock held by syz.4.4745/23626: [ 1814.546172][ T31] #0: ffffffff905fbd90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1814.576162][ T31] 1 lock held by syz.0.4762/23918: [ 1814.582271][ T31] #0: ffffffff905fbd90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1814.596465][T22103] Bluetooth: hci5: command 0x0c1a tx timeout [ 1814.626062][ T31] 1 lock held by syz.7.4786/23973: [ 1814.631941][ T31] #0: ffffffff8e6e9610 ((pm_chain_head).rwsem){++++}-{4:4}, at: blocking_notifier_chain_unregister+0x60/0xc0 [ 1814.670307][ T31] 6 locks held by syz.9.4789/24008: [ 1814.686254][ T31] #0: ffffffff8f52c788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 1814.707989][ T31] #1: ffffffff8e6a4148 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x56/0x70 [ 1814.737005][ T31] #2: ffffffff8e6e9610 ((pm_chain_head).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain_robust+0xa8/0x160 [ 1814.767269][ T31] #3: ffff88803dcb0ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_suspend_dev+0x315/0x540 [ 1814.787604][ T31] #4: ffff88803dcb00c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x141/0xb20 [ 1814.817725][ T31] #5: ffffffff8e7f3278 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1814.846832][ T31] 1 lock held by syz.8.4788/24009: [ 1814.852618][ T31] #0: ffffffff8e6e9610 ((pm_chain_head).rwsem){++++}-{4:4}, at: blocking_notifier_chain_unregister+0x60/0xc0 [ 1814.888904][ T31] 2 locks held by dhcpcd/24043: [ 1814.893822][ T31] #0: ffff88803bbc8260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 1814.927889][ T31] #1: ffffffff8e7f3278 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1814.964863][ T31] 1 lock held by dhcpcd/24044: [ 1814.976248][ T31] #0: ffff88803bbba260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 1815.100584][ T31] [ 1815.103106][ T31] ============================================= [ 1815.103106][ T31] [ 1815.114581][T24008] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1815.141533][T24008] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1815.156463][ T31] NMI backtrace for cpu 0 [ 1815.156486][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1815.156521][ T31] Tainted: [L]=SOFTLOCKUP [ 1815.156529][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1815.156544][ T31] Call Trace: [ 1815.156553][ T31] [ 1815.156562][ T31] dump_stack_lvl+0x100/0x190 [ 1815.156605][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1815.156644][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1815.156682][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1815.156714][ T31] sys_info+0x141/0x190 [ 1815.156737][ T31] watchdog+0xd25/0x1050 [ 1815.156768][ T31] ? __pfx_watchdog+0x10/0x10 [ 1815.156792][ T31] ? __kthread_parkme+0x18c/0x230 [ 1815.156823][ T31] ? kthread+0x13a/0x450 [ 1815.156853][ T31] ? __pfx_watchdog+0x10/0x10 [ 1815.156875][ T31] kthread+0x370/0x450 [ 1815.156906][ T31] ? __pfx_kthread+0x10/0x10 [ 1815.156947][ T31] ret_from_fork+0x754/0xd80 [ 1815.156985][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1815.157022][ T31] ? __switch_to+0x7b4/0x1120 [ 1815.157050][ T31] ? __pfx_kthread+0x10/0x10 [ 1815.157083][ T31] ret_from_fork_asm+0x1a/0x30 [ 1815.157123][ T31] [ 1815.347490][T24008] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1815.355976][T24008] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 1815.364867][T24008] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 1815.390536][T24008] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 1815.678340][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1815.686622][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1815.701327][ T31] Tainted: [L]=SOFTLOCKUP [ 1815.706568][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1815.719245][ T31] Call Trace: [ 1815.723083][ T31] [ 1815.726511][ T31] dump_stack_lvl+0x100/0x190 [ 1815.731622][ T31] vpanic+0x552/0x970 [ 1815.735840][ T31] ? __pfx_vpanic+0x10/0x10 [ 1815.740819][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1815.747583][ T31] panic+0xd1/0xe0 [ 1815.751942][ T31] ? __pfx_panic+0x10/0x10 [ 1815.756964][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1815.763529][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1815.770462][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1815.777692][ T31] ? watchdog.cold+0x198/0x1ca [ 1815.782939][ T31] ? watchdog+0xd35/0x1050 [ 1815.787934][ T31] watchdog.cold+0x1a9/0x1ca [ 1815.793363][ T31] ? __pfx_watchdog+0x10/0x10 [ 1815.799128][ T31] ? __kthread_parkme+0x18c/0x230 [ 1815.804545][ T31] ? kthread+0x13a/0x450 [ 1815.809432][ T31] ? __pfx_watchdog+0x10/0x10 [ 1815.814612][ T31] kthread+0x370/0x450 [ 1815.819471][ T31] ? __pfx_kthread+0x10/0x10 [ 1815.824521][ T31] ret_from_fork+0x754/0xd80 [ 1815.829184][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1815.834444][ T31] ? __switch_to+0x7b4/0x1120 [ 1815.839627][ T31] ? __pfx_kthread+0x10/0x10 [ 1815.844510][ T31] ret_from_fork_asm+0x1a/0x30 [ 1815.849804][ T31] [ 1815.853068][ T31] Kernel Offset: disabled [ 1815.857692][ T31] Rebooting in 86400 seconds..