last executing test programs: 6m6.014196713s ago: executing program 0 (id=1477): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x80140, 0x0) read$auto(r1, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x805, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto(0x3, 0x40045532, 0x38) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D0c\x00', 0x80600, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, r2) mmap$auto(0x2, 0x1, 0x4000000000df, 0x78, r2, 0x300000000000) socket(0x1d, 0x3, 0x1) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xb, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x3624239c, 0xfffff5b2, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) 6m4.053152734s ago: executing program 0 (id=1483): r0 = socket(0x2, 0x80002, 0x73) r1 = socket(0x28, 0x2, 0x20) mmap$auto(0x0, 0x4020005, 0x10df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101a40, 0x0) ioctl$auto(r2, 0x4b3d, 0xffffffffffffffff) ioctl$auto(r2, 0x10, r0) close_range$auto(r2, 0x8, 0xb990) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) sendmsg$auto_ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000a00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x28040) get_robust_list$auto(0x0, 0x0, 0x0) get_mempolicy$auto(&(0x7f0000000000)=0x200207, &(0x7f00000000c0)=0xfff, 0x9, 0x101, 0x64eebbfc) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) write$auto(0x3, 0x0, 0xfdef) socket(0x2, 0x9, 0xffff8001) fsconfig$auto(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x14, 0xfffffffffffffffa, 0x1) sysfs$auto(0x2, 0xd, 0x0) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) fsconfig$auto_FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000300)='\v\'\bn\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x1e7\xbb\xedO#\x14mC\x97\x06\xd9bZ\xddL\'\x03\x00\xff\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\xc6\xc0\x8b\xc0CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xed<\x86[c4%\xa3\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6\b\xe5\xaaJ+\x02\x9b#\xa9\x9b\x17\x82\xd7\xee\xd1\xbf2\x03\x00\x00\x00\x00\x00\x00\x00B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\x00\x00\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\xb2\x1d\xb3\xef#\xcb}b\x90\xafR\xf5\x8cg\x95A\x89\x8d\x9a\xfcV\x9bm\xd4\x82\x7f9\x12\x98\x1c\x8e\x1f\xdc\xe5Y\x7f\xe8\xe1g%\xb8\xf9b!\xc8\xa0\xf7\x06\xbb\xdf\x1d\xfb\x00\x979\x8e\xd0AP\xbf\x1fM\x1fd~\xeeS^8v\x80\x1b\xb1I\xb1\xa4\x89\xc7\x9d\xf2P\x04\x99N{\x9a\xfa\xf3\xcb\xc3Bx\xb5\xb8*\xa0-\xda\x84\xc5S\xe2\xc6\x92/\xed\xc2\xceK\xad\x00\x00*)Hh\x8d\x06cQ\xf1\x9d\xad\r}\x15e\x18\x06\xe3\xd2\xe4Q', &(0x7f0000000280), 0x5) read$auto_udf_dir_operations_udfdecl(r4, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0x40000, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r5, 0x0, 0x2) lseek$auto(r3, 0x8000000000000edd, 0x4) set_mempolicy$auto(0x6, 0x0, 0x21) mmap$auto(0x0, 0x810005, 0xffb, 0x8000000008011, 0x3, 0x0) 6m3.552517405s ago: executing program 0 (id=1485): r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy4/netdev:wlan0/aqm\x00', 0x40000, 0x0) sendmsg$auto(r0, &(0x7f00000002c0)={&(0x7f0000000040)="7119b8553313e6d064f4b45a7a22dcf4988d3b405026fa8d9a8e637b162215b24caf924e5770663ce2574103011b1c601154c2ace0395700ec9aa97afd7e5758ea5d723116c10d2c9f26e25c479368b6e78a0e86d7649e1cb077bbb3a30eb3afcc0939f610636041eba9fbae083f6b3ae65b2357ac06792e", 0x8, &(0x7f0000000180)={&(0x7f00000000c0)="9a8dd3a52725db3f7c5f4f1f9f5aef6e63450ad9f59d4215ff9b1f2e1e6dde6fc192d6f0184d9f59a3faa122274cc8acb587ead9c11b720dfc79e5def66f9e837c1aafd3068c0a569e417102e6e18bce191bdef533ceaf4b47fdf32bb4d9e9079cdde7d799e9623e05626f7423ec6b842f9dbbeeab15cee6293f4fad3fc718737b29cf77f914152673742ec8d818d765765287dafb8d27d1394f552790a378eaad4aa0a0881dd6c64516c9c3b16b619ddf29ab36b3b703", 0x10}, 0x4, &(0x7f00000001c0)="6ecb61dbc107e42430a327fd40ed861cae1283c6f5e32c2332e805a1bd5e3c7444db760bf4570b6c167bbaf634cd5461b71d2d93a5b2f54becefd385035935a8f8c2bf6482b0d273d3269a239c6f46ef1a8ed1e36e862f274ba32fbcfd260cc21bfe072e7647a009303f3fa48a16c6bd82591828b530e7284410b86917904d22807082197f3c7a85afda867ee55b3addf2f819652165d91a520bab6420407cf98bc16939116384092a874f1389c13700955d8e2d6426d6ad2a589836e894523f84d66046d82b9e949768ddbe2b773787e157f1e6f7d07e4e2758b25b34c8c492cfbabe3c9db4a5", 0x0, 0x9}, 0x80) fstat$auto(r0, &(0x7f0000000300)={0x7, 0x46ec7d4d, 0x3ff, 0x8, 0xee00, 0x0, 0x0, 0x2, 0x4, 0x8, 0x7, 0x7, 0x523, 0x7, 0x2, 0xffffffffffffffca, 0xffff}) msgctl$auto(0xfffffffc, 0x2, &(0x7f0000000440)={{0x6, 0xee01, 0xee01, 0x316e, 0x20000, 0x7f, 0x4}, &(0x7f00000003c0)=0x9, &(0x7f0000000400)=0x5, 0x800, 0x2, 0x4, 0x40, 0xfffffffffffffffe, 0x2, 0x10, 0x1, @raw=0x9, @inferred=0x0}) msgctl$auto_MSG_INFO(0x7ff, 0xc, &(0x7f0000000540)={{0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x4, 0x250, 0xfff7}, &(0x7f00000004c0)=0x3, &(0x7f0000000500), 0x10001, 0x0, 0x0, 0x2, 0x40, 0x9, 0x4, 0x1, @raw=0xf, @inferred=0xffffffffffffffff}) keyctl$auto(0x0, r1, r2, r4, 0x6ca) poll$auto(&(0x7f00000005c0)={r0, 0x10, 0xf}, 0x8, 0x3) ioctl$auto_BTRFS_IOC_DEVICES_READY(r6, 0x90009427, &(0x7f0000000600)={@inferred=r0, "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"}) pread64$auto(r0, &(0x7f0000001600)='\x00', 0xffffffffffffffff, 0xa0000) getsockopt$auto_SO_INCOMING_CPU(r6, 0x2, 0x31, &(0x7f0000001640)='\')--:}.-\x00', &(0x7f0000001680)=0x6) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001700), r6) sendmsg$auto_NL80211_CMD_REMOVE_LINK(r6, &(0x7f0000002c40)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002c00)={&(0x7f0000001740)={0x1488, r7, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0x29, 0x6, "dc35a813ef0c8d6ff0ec5848e1f218630c5aff8a6bab7668cde2cd355f29143ad3b74aae2c"}, @NL80211_ATTR_BSS_BASIC_RATES={0x5, 0x24, "05"}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x4b1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x1}, @NL80211_ATTR_KEY={0x1430, 0x50, 0x0, 0x1, [@generic="283630f0b7284b750137ac3cf034967e33729b565f9a94f63afd5dbce549d66d8b6895210f6291c00fc6b3638cf809d3c03dd40a23c9e423b882b71ea0d99c7f893b08d9e155b0657ee944547bd41d66f66af4b5009165acbdb48bd15599e839b04cde4adf5c107071ec5c7d6284e61fc855993ab6ea1950e58d4134fba943823af7b4cd7b42a9ed694a1f4c72b4e519ad7ffaa9e44c3fd8c2b6d0", @typed={0x8, 0x13b, 0x0, 0x0, @u32=0x100}, @nested={0x12b9, 0xe7, 0x0, 0x1, [@generic="e0e9a51f7842bbdd678e80d53db1f25ec63c617bba62b6ff185b8773a23a1420654160cb3c7056753c4ea809ce860a7aae3d20b00eb90cb55269414ac13b0d3f13a5e6f37c", @typed={0x8, 0x12, 0x0, 0x0, @pid=r5}, @typed={0x4, 0x7d}, @generic="3a77f11e62b6eb7b46e09e941109156195bfe8bf1203c0cb893df63aee78b72e19c3719bae11c5126c1f8d65d1abb520a0b43f8c26dd5a61ed057fe1ece30777b0cb962f66ce44c080ebe6297bf48834efa5dd94e3bae41f738d3d7c714b2ad96610dad234be6f9d8fadead4d64ac6e3b82bd8f9b6e5ff9c178f4afbc197bc6a587c0264b738a4241f9197de3d21d3b8340b1c14fb21f4a31cef21cfa6d08bff8f0d968ab0c0066e79936820edb57b02d1caeb875fd45775f2d584bc9bc6680c3c4bfaca0021f1ef3b5818e9c58fd9532c6627a49e2664e7683a287bf5e4226af2a357a61783dc4c9bcb0520a21ec4b95136a23ea6bb", @generic="f27ae3bd8b230648c58d536b3d3c6e84b00cf32155ff772b99a10659356d352a735c7485b0511e3c9ac6263ae384f39651931dd74c1acf9cea016729782cc85361c094189d47de56d1a4f6b472535b989a42701682623bea4b22f6cafac57fbedda8cb735261149c85c6ecf6747af4e627f1ca747b1fea163b1afd9b18e1282046cc8bae73ca4f1fc104b94e674b7d855be3c6cfdffdb3d44d3102f61ce461d8ab62ec77265b83051355fb710b926690786d83548df0545429484d74c910ecfcbbc764c93137b5f9869866c909c2c1bf1222f77081df", @nested={0x4, 0xbd}, @generic="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", @generic="b4285d48aa04b7c4bf7a3ba3003ae1981bd5e6a4e5b9bbe2af1a0d3d625e611137000f32452a01c741229bb06f005cb4d4e1f825804bd8fa2610cf099143e58948d7dd7970fce19559a9b9e9a4704dadc0f2e93827e4fbc5ff076f1d853179f669eae35e1da9e0b0b48db168d9edff61fbad4dbe21eb99384d5d2a04e115af8841bcc28800942b6a4f0ca85ea6ef0e951e2fafcb"]}, @typed={0x33, 0xf2, 0x0, 0x0, @binary="82b726f7dede41280f67dc0becb31fcb88a22c54dc2fee04dcd76ed1ccaed7e88c412bad61aad09c6529cdb91e3caa"}, @generic="e55ac6fb4b02767af59774cb3166d355a45f73c9caebccdae4a995173f20b5df92a38bbbb7b73ffb4672f27a75acac258b68d5da839d0d55b0cd323ed3d30dc0620647bde035cd830783dfbd52f38604bd1c8f63257ccd1d0c771f1de79866c2fd179f4342f0b197d44d4b4a75430fb376a53b9f303f140e389913efc46949571413ca79befcb5fa32bedaa8314316dc763c952bc93ffc76ff"]}]}, 0x1488}, 0x1, 0x0, 0x0, 0x8090}, 0x4010) r8 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002c80), r6) write$auto_i2cdev_fops_i2c_dev(r6, &(0x7f0000002cc0)="2484132821396beac2a6019bb343c2903dfbd0755d3a4bef311b42755d9afdcc71c12e445c798541f33eb5ef5af1974a8eaef95074a0fa74aa0daeafa4f360b6b7efe4fb8c28fc2be5061dc5d9d67c3eb802db495b180787b058dbedbc798d8255c491ff3fc530914418c09ffaafdadbe860bcc919bda530845fd4389bed93d720572f76e23e2099a041a6e9aa27", 0x8e) r9 = openat$auto(r6, &(0x7f0000002d80)='./file0\x00', 0x1, 0x4) arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x2) ioctl$auto_FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000002dc0)='/dev/snd/midiC2D1\x00', 0x2000, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r9, &(0x7f0000002e00)=""/51, 0x33) read$auto_proc_tid_children_operations_internal(r6, &(0x7f0000002e40)=""/101, 0x65) r10 = syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000002f00), r6) sendmsg$auto_NLBL_MGMT_C_PROTOCOLS(r9, &(0x7f0000002fc0)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f40)={0x1c, r10, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r11 = socketcall$auto_SYS_ACCEPT(0x5, &(0x7f0000003000)=0x5) r12 = getpgid(r3) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(r11, &(0x7f0000003380)={&(0x7f0000003040), 0xc, &(0x7f0000003340)={&(0x7f0000003080)={0x2b4, r8, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x6}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x2}, @NL802154_ATTR_PEER={0x267, 0x28, 0x0, 0x1, [@nested={0x13, 0xa3, 0x0, 0x1, [@generic="5a5118f375452dd6ec8aad", @nested={0x4, 0xf2}]}, @generic="2d5e5f2c13a91fc4d1b83dec7560a2df0e477ba4adf0a4556978af0d9ff08622075235d6eb7e3984", @nested={0x8, 0x48, 0x0, 0x1, [@nested={0x4, 0x34}]}, @generic="495eaa952c15e056a3e29a242a73a81a183a7f337d415d9e9b6ef845f0e9476064b370d4501c68710ca6e3c89ee5a5fb087b3ccb02f6f91f5c4f63bed352afef96f601a0ec00cb293ecdaa3354d87a7c21de18a42bccea", @generic="422fabfa1397d8c10fa5dff447992dcfde851f1ab7571bb55a62c7b0dc30256c75957812b939f9bea64444fac65557f4738c72323102c1629fa8b6d753c675e7b46ebd4b1ea3447ee61c2614166481bd6f5d04180801bde6d6fce5c5d08539f15968ea22026891f85b8055686bb76fbe2fb40eb80801669951530d017e759f67109f8b93644ceb532f44600fc9690944c837d695aa241926186e882be507e37bb1a8ba503ee92b4a36b3b6160537b5dc7945aec3e4537f6d8358ead7d82dc15fa2871adc1cb7109e6f1826c0a2f53c18c94b9361cd1b299a4952924498967adef79a9352853acdd8", @nested={0xd0, 0x3f, 0x0, 0x1, [@generic="5e7e00230c052fe9dde1afabc3b5daebbd59e0ae0a10e4bebab4e2dc5f39fb37f6518e6d9a2268a407a9d9682bf4052e652800d50c0f1f18d130b5584e15fe056b32b13e97e5c7f22bd5487f42e02855904dd573cc4a5b951332ba572e8a3f91c5395cd45a33066849ee7b040306c8789f354dce908902c4edc9038fe4a8c62187697d4b45fe5a76346226de0dff46a39b1cd0a242df66798f1aeda5cd311d093f7df09bbceb9660741ce7ddf39ed39128ae9d995f54", @generic="d9af642080cd8d5d0860c86de69c43242aab", @nested={0x4, 0x76}]}, @typed={0x8, 0xe9, 0x0, 0x0, @pid=r12}, @generic="2345d42689f80532"]}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0xb}, @NL802154_ATTR_WPAN_PHY_NAME={0x16, 0x2, '/dev/snd/midiC2D1\x00'}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x4}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x44000}, 0x70) r13 = socket(0x1a, 0xa, 0x7) r14 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003400), r13) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_SET(r9, &(0x7f0000003500)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000034c0)={&(0x7f0000003440)={0x48, r14, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_TSCONFIG_HWTSTAMP_PROVIDER={0x34, 0x2, 0x0, 0x1, [@ETHTOOL_A_TS_HWTSTAMP_PROVIDER_QUALIFIER={0x8, 0x2, 0x9}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x8, 0x1, 0x2d}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_QUALIFIER={0x8, 0x2, 0x6}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x8, 0x1, 0x7}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4050}, 0x880) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r6, &(0x7f0000003800)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x6000822}, 0xc, &(0x7f00000037c0)={&(0x7f0000003580)={0x21c, r7, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_TID_CONFIG={0x208, 0x11d, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x114, 0xd, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x7}, @NL80211_TXRATE_GI={0x5, 0x4, 0x6}, @NL80211_TXRATE_HE={0x9d, 0x5, "804f8a3101b61da3f29377e587e5700f2e0910b06376fa30d6ded79ac247d0b67fd5ad6f21afa86d00d7ca0362f25ab1bb79c4702f2fdc6279e7dc95952d8a33caab404ca41aa4894a483fe8b78a0b30cb5c12480b23e357763c85047f8c0b8bfffa21b87c6e2a8508fcfb7aef02c6aa12ab7c9d7fa97086adbe5f99cdb4a184b61ca288405a99f2dea1ab15c94221e7f8fc0e7220267c2e28"}, @NL80211_TXRATE_VHT={0x5d, 0x3, "0d11df577f647068d5baa769d53be5ae4b66157dcf1ec3ddb07ca3123b78712f81af74fed31eeb4bd60dad0db30d6a426a3c5983a5899e229e8f4ad0a5bf0f5ed1456cdaaa1863ac06d7e4ec537f49eb6596865ba46bee3f96"}]}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xb2f3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1f4ef2b}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x21}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0xd}]}, {0xb8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, "844074a91ab3d1b1925909963cd2d38beb3cabdc34255f1d14"}, @NL80211_TXRATE_VHT={0x59, 0x3, "34e7d4333f32f4803ac33e9b32732f7bc00f365d9e1cf2c5ff45f829471b96d37210b3a29a1cb482f03cb53dc12ad0f9f83872ea21ef6025c1446b9e2e71695c85b3bc4902689ad4a1fa22f00d41db4e10838d7ea8"}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x7}, @NL80211_TXRATE_HT={0x1f, 0x2, "0f7e96c5e97a5afeb09fa894aeefacb4bc58b537353f4dd33b9550"}]}]}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x90}, 0x20004800) shmget$auto(0xb14a, 0x8, 0x4) 6m3.400144355s ago: executing program 0 (id=1486): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0c\x00', 0x101001, 0x0) (async) unshare$auto(0x40000080) (async, rerun: 64) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async, rerun: 32) r1 = socket(0x21, 0x2, 0xa) (rerun: 32) getsockopt$auto(r1, 0x110, 0xff, 0xffffffffffffffff, 0x0) r2 = openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) preadv2$auto(r2, &(0x7f0000000080)={0x0, 0x80000003}, 0x20000006, 0xffffffffffffffff, 0x4000c1ac, 0x3) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) listen$auto(r0, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) (async) close_range$auto(0xffffffffffffffff, 0xa, 0x0) (async) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8002) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x0, 0x0) ioctl$auto_BLKPG2(r3, 0x1269, 0x0) ioctl$auto_MEMGETINFO(r3, 0x80204d01, 0x0) (async) r4 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x40200, 0x0) (async) mmap$auto(0x0, 0x402000b, 0x4af, 0xeb1, 0x401, 0x8000) (async) read$auto(0x3, 0x0, 0xfffffdef) (async) syz_genetlink_get_family_id$auto_seg6(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) getsockopt$auto_SO_SNDBUF(r4, 0x73, 0x7, &(0x7f0000000100)='SEG\x85\x00', &(0x7f0000000140)=0x9d9) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) mbind$auto(0x1c0000, 0x800097, 0x1, 0x0, 0x3, 0x1) (async) mbind$auto(0x0, 0x800605, 0x1, &(0x7f0000000500)=0xffff, 0xa, 0x3) madvise$auto(0x1, 0x1, 0x7f) 6m2.542827382s ago: executing program 0 (id=1488): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x4) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) mmap$auto(0x800000, 0x202000d, 0x4, 0x15, r0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sysfs$auto(0x2, 0x23, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r1, 0x0, 0x90) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x8, 0x2020009, 0x5, 0xebd, r2, 0x8000) r3 = socket(0x10, 0x3, 0x6) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r4, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x7}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x40}, @NETDEV_A_PAGE_POOL_ID={0x2, 0x20, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc}, @NETDEV_A_PAGE_POOL_ID={0x0, 0x1, 0xfd}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nullb0/queue/virt_boundary_mask\x00', 0x101000, 0x0) socket(0xb, 0xa, 0xd9) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) 6m0.146181866s ago: executing program 0 (id=1495): openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000200)='/proc/meminfo\x00', 0x2800, 0x0) sendfile$auto(0x2, 0x3, &(0x7f0000000040)=0x80, 0xc3e0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8\x11\x00`\x00\x00\x00\x04!\x02\xba\xae\xb8-\x14\xe4\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf6\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9\xc5\x93\x1dD\x811\xb9_\xdd*j\xfd\xeb\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;\x9e\x83\x120\x81\x11\x9a?g`sFh\x00\x00\xda,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xdex\xd8\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/228, 0xfdef, 0x2) socket(0x29, 0x2, 0x0) select$auto(0x4, 0x0, 0x0, &(0x7f00000000c0)={[0x1ff, 0x8000000000007, 0x0, 0x8fd3, 0xfffffffffffff800, 0x803, 0x8, 0x80, 0x8020000003, 0xde, 0x7a1, 0x81, 0xfffffffffffffffe, 0x1, 0x4, 0x770]}, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/vulnerabilities/gather_data_sampling\x00', 0xc2700, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/4096, 0x1000) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000f40), 0x2100, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x77) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080)) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/platform/vivid.0/cec7/power/runtime_status\x00', 0x5e30523b26a2a748, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0) ioctl$auto(r3, 0x4b62, r2) close_range$auto(r3, 0x8, 0xfffffffe) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000100)='7\x00\\\xa0\x04\xdb\xc3\x8cnI\x9c\t\xbck\x17\xfe_9\xdf\v\x9d\xf7\xa9+n\xf19\x8ba\xe38\xf7u~\r\x91p\x90x\xd9y\xef\x06\xafs\x90\xf0\xf9\xc3\'r\xac\x8d\\\xccM\xe3\x05\x87\x8c\x1beu\xa6\xab\xb2}\xb6\xb8\xa1\xb4\x98\x0f\x9b(8\xb9\xcb\x88\x0e\x99\x81f&\xe4\xe1\xf1\xe0iS\x93\xea\xa1\xb8\xa6T\xf4G\xb0m\xe5!\xa3\xda\x83\xc1\b\xb3\xce\x1bq\x03\xf7\t\x8f', 0x81) pipe2$auto(0x0, 0x80) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$auto_KVM_GET_EMULATED_CPUID(r5, 0xc008ae09, &(0x7f0000000140)={0x5}) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xc00caee0, r2) close_range$auto(0x2, 0xa, 0x0) setsockopt$auto_SO_OOBINLINE(r4, 0x0, 0xa, &(0x7f0000000040)='-\x02@^$\x00', 0xffff0001) 5m44.116578577s ago: executing program 32 (id=1495): openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000200)='/proc/meminfo\x00', 0x2800, 0x0) sendfile$auto(0x2, 0x3, &(0x7f0000000040)=0x80, 0xc3e0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8\x11\x00`\x00\x00\x00\x04!\x02\xba\xae\xb8-\x14\xe4\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf6\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9\xc5\x93\x1dD\x811\xb9_\xdd*j\xfd\xeb\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;\x9e\x83\x120\x81\x11\x9a?g`sFh\x00\x00\xda,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xdex\xd8\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/228, 0xfdef, 0x2) socket(0x29, 0x2, 0x0) select$auto(0x4, 0x0, 0x0, &(0x7f00000000c0)={[0x1ff, 0x8000000000007, 0x0, 0x8fd3, 0xfffffffffffff800, 0x803, 0x8, 0x80, 0x8020000003, 0xde, 0x7a1, 0x81, 0xfffffffffffffffe, 0x1, 0x4, 0x770]}, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/vulnerabilities/gather_data_sampling\x00', 0xc2700, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/4096, 0x1000) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000f40), 0x2100, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x77) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080)) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/platform/vivid.0/cec7/power/runtime_status\x00', 0x5e30523b26a2a748, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0) ioctl$auto(r3, 0x4b62, r2) close_range$auto(r3, 0x8, 0xfffffffe) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000100)='7\x00\\\xa0\x04\xdb\xc3\x8cnI\x9c\t\xbck\x17\xfe_9\xdf\v\x9d\xf7\xa9+n\xf19\x8ba\xe38\xf7u~\r\x91p\x90x\xd9y\xef\x06\xafs\x90\xf0\xf9\xc3\'r\xac\x8d\\\xccM\xe3\x05\x87\x8c\x1beu\xa6\xab\xb2}\xb6\xb8\xa1\xb4\x98\x0f\x9b(8\xb9\xcb\x88\x0e\x99\x81f&\xe4\xe1\xf1\xe0iS\x93\xea\xa1\xb8\xa6T\xf4G\xb0m\xe5!\xa3\xda\x83\xc1\b\xb3\xce\x1bq\x03\xf7\t\x8f', 0x81) pipe2$auto(0x0, 0x80) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$auto_KVM_GET_EMULATED_CPUID(r5, 0xc008ae09, &(0x7f0000000140)={0x5}) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xc00caee0, r2) close_range$auto(0x2, 0xa, 0x0) setsockopt$auto_SO_OOBINLINE(r4, 0x0, 0xa, &(0x7f0000000040)='-\x02@^$\x00', 0xffff0001) 2m30.675298593s ago: executing program 3 (id=2032): openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/5u\x00', 0xa00, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xb00, 0x0) pread64$auto(r0, 0x0, 0x594c, 0x9fffffffd) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) getpid() madvise$auto(0x0, 0x400053, 0x9) 2m29.512038557s ago: executing program 3 (id=2035): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x100000003, 0x400007, 0xdc, 0x11, 0xffffffffffffffff, 0x0) unshare$auto(0x40000080) statmount$auto(0x0, 0x0, 0x1fe, 0x5) mmap$auto(0x0, 0x9, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto(r0, 0x0, 0x80000000006) r1 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$auto_LOOP_CTL_GET_FREE(r1, 0x4c82, 0x0) epoll_create$auto(0x4) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x18a041, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r2) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000200dc, 0x16, 0x404, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x10f, 0x83, 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x6) signalfd$auto(r0, 0x0, 0x8) 2m27.154585056s ago: executing program 3 (id=2039): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x0, 0x5, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20048840}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0xa, 0x10, 0x7131, 0xfbc, 0x0, 0x0, 0x0, 0x4, 0x26, 0xc, 0x40005, 0x9, 0x0, 0x2, 0x5b71, 0x0, 0xfffffffffffffffc}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000d40)='/sys/devices/pci0000:00/0000:00:00.0/driver_override\x00', 0x4a401, 0x0) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim1/trap_flow_action_cookie\x00', 0x402, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/usb_storage/parameters/delay_use\x00', 0x181942, 0x0) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x1f40) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), r0) writev$auto(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x5}, 0xa) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x4001, 0x401b7, 0x7352, 0x2d, 0x8000, 0x2001ffde, 0x1, 0x2, 0x4, 0x9, 0x3, 0x5, 0x4000008, 0x3002, 0x9, 0xb, 0x80010002, 0x80, 0xd8f9, 0x0, 0x7, 0x2, 0x203, 0x3fc, 0x84, 0x0, 0x0, 0x9, 0x4, 0x0, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x335c, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe3]}, 0x80000001, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ram8\x00', 0x100, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfc, &(0x7f0000000100)={0x0, 0xfc6}, 0x2, 0x0, 0x7, 0x3}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2, 0x10) 2m25.801779423s ago: executing program 3 (id=2044): mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES8=r0, @ANYRES16=r0], 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0xc0) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r2, &(0x7f00000000c0)="632d1bfe595046ab5c40bd6163307acb6d16baef6176e669a216aae1954ccafdd80500ffffffffdfff1a0e00fffffffe0000000000000000", 0x38) ioctl$auto_PPPIOCSACTIVE(r1, 0x40107446, &(0x7f00000000c0)={0x38, &(0x7f0000000040)={0x4, 0x41, 0xd, @inferred=r1}}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0) write$auto(r3, &(0x7f0000000180)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6', 0x5) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.threads\x00', 0x0, 0x0) preadv$auto(0x3, 0x0, 0x3, 0xf8, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) readv$auto(0x3, 0x0, 0x1) io_uring_setup$auto(0x59, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clock_adjtime$auto(0x354d, 0x0) syz_clone3(&(0x7f0000000100)={0x2100000, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000600)='/dev/snd/controlC1\x00', 0x82200, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f00000006c0)={{@raw=0x9, 0xfffffffe, 0x2, 0x1, "162629e6b2259bee9878f8e7b039aa20b33e487d34917b4a9acce903cb72dd4cd8dde6d41c914d63af7a9de9"}, 0x0, @integer=@value=[0x400000000006, 0x12d800000000000, 0x179, 0xfffffffffffff8ad, 0x5, 0x7, 0x4, 0x8, 0x80000000004, 0x7, 0x15b61f2, 0x7, 0x100000001, 0x3, 0x9, 0x5, 0x7f, 0x9f, 0x8, 0x9, 0xb1, 0x0, 0x3, 0x8, 0xffffffff, 0x10001, 0x1, 0x80000000, 0x8000, 0x9, 0x0, 0x80000000, 0xf, 0xfffffffffffffffe, 0x4, 0x1, 0x3, 0x0, 0x800, 0x3638, 0x3, 0x4f3, 0xc, 0x4, 0x7, 0x0, 0xe4, 0x5, 0x6, 0x81, 0x401, 0x400000000084, 0xa, 0xfffffffbfffffffd, 0x6, 0x800, 0xfffffffffffffffd, 0x7, 0x101, 0x82, 0xc9d, 0x3fe, 0x9, 0x8, 0x640c, 0x3, 0x1000, 0x6, 0x201, 0x3, 0xec31, 0x9, 0x1fd, 0x0, 0xfff0000000000000, 0x4, 0xbd2a, 0x903, 0x80007, 0x7fffffffffffffff, 0x5, 0x1, 0xfffffffffffffffe, 0x0, 0x7eda8566, 0x800000007, 0x8000000000000001, 0x9, 0x401, 0xfffffffffffffff7, 0x9, 0x14000000000000, 0x6, 0xfffffffffffffffe, 0x0, 0x1, 0x8000000000000001, 0x5, 0x1ff, 0xf057, 0x40, 0x5, 0x7, 0x2, 0x8, 0x8, 0x2001f, 0x8001, 0xc13, 0x6, 0xbf5, 0x2, 0xff, 0x7, 0xf, 0xe0, 0x3, 0x8, 0x3, 0x80000000, 0x6, 0x2, 0x1, 0xa, 0x5, 0x2, 0x100, 0xffff], "54a5f1d1dd2f17b169e8263c3a740d6611142f4b3c69d0f6e967c91125d235ac53e1b00d9fddc53d8f56969329274a57d5f4213fb46616a4faa700873d91426befc561500a5391d522c480bd37f8e7f0050cedfc627c6702978a8f018ad9a7b04711dc3a5c6a755e7a506645ea28e2baa4a6786ca43b3d5d976157eb07c3cdb8"}) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) rt_sigsuspend$auto(0x0, 0x8) 2m24.770335358s ago: executing program 3 (id=2048): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x4) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) mmap$auto(0x800000, 0x202000d, 0x4, 0x15, r0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sysfs$auto(0x2, 0x23, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r1, 0x0, 0x90) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x8, 0x2020009, 0x5, 0xebd, r2, 0x8000) socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) socket(0xb, 0xa, 0xd9) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r3 = socket(0xa, 0x1, 0x84) bind$auto(r3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) 2m23.331032129s ago: executing program 3 (id=2054): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x50080, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x0) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) setsockopt$auto_SO_RCVTIMEO_OLD(r0, 0x7, 0x14, &(0x7f00000000c0)='/dev/audio\x00', 0x5) socket(0xa, 0x1, 0x1) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) shmctl$auto_IPC_SET(0x4, 0x1, &(0x7f0000000300)={{0x80, 0xee00, 0xee00, 0xca69, 0x8, 0x9, 0x5}, 0xd21, 0x5, 0x8000000000000000, 0x2c2d, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000280)="4f0d6915e9ca04000002000000", &(0x7f0000000200)="e3ac9b01ee8d985b677531eeeee5cb5bf774d2df4d9ae6dccbc98def20b72c7c2826a585ba3a8d67815abade214708a4ade77c6faa2f2889ca3e7989f32645dd597a3ae1b46e8d8c7e03ae6b8aaa49f6bf64cc5fa9"}) process_mrelease$auto(0xffffffffffffffff, 0xa) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) add_key$auto_KEY_SPEC_USER_KEYRING(&(0x7f00000002c0)='\\\n', &(0x7f0000000440)='\x14\xf9a\x80\xa5\x95t;x\x0eN@*\x0fLzU?\xae\xdb\xa0\xd0\x84\xf4\x03[\x12YI:\x1a\x14\x7f\x06\xa6\xb6r1\b\xa2\x97\xce\xfe!\x98\xd4\x00*aEH\x91C@\xdf\x1e\xc91\x9dP\xe64\xe7\xc6\xb8X\x88\x02\x9a\xf4K\x93\x8av\xb1\b-*\xddC\x1d\xb5\xd1\xca\x9e2\xd7\x9e\xce\xcc\xedV\xb5\xd7F\x93\xbaKp+\x1a\xf8\xc4S\x8fU\xf2M/\xe4\x18\xb6=]1\x0eQ\x03%W\xb9?\xe4\xcew\xa9\xa2\x1cGtu\xedp\xb5s\xec\\\xc8~\x8a\x95\x0f\xa4k\xe4\xd5\xb5\xc2Tz\xb7H\x97\x15\xb3]\xdd}\x7fn\x84\x13hQ\xac\x93\xfeF\x81\x03\x0eg\xc5\xf0\v\xc3\x82\x9bus\xc6y\xecSxM\x18f\xa2b\xd4\xcb\xc1\x85OS>\x8f\b\xa8f\xdc\xc2\xa1\x8f\x182\tx\xac\x03\x0f\x8c\xc6V\xe2\x05\x9a\x80{\a\xcam\x97O\x1bV\xb3\x1f\xaf\t^w\xaf\xdeY\xf5\xa4G\x83\x05@_\xcc\xb2\xc0~\xeb\xc2\x7f\a\xc2\xdf+\x03\xec\xd1X\'\xf8\f6\"\xa0^wOTL\xb6\x8f\x12@\xda\xca\xe0', 0x0, 0x4, 0xfffffffffffffffc) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x4a42, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/038/001\x00', 0x468142, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 2m8.079978636s ago: executing program 33 (id=2054): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x50080, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x0) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) setsockopt$auto_SO_RCVTIMEO_OLD(r0, 0x7, 0x14, &(0x7f00000000c0)='/dev/audio\x00', 0x5) socket(0xa, 0x1, 0x1) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) shmctl$auto_IPC_SET(0x4, 0x1, &(0x7f0000000300)={{0x80, 0xee00, 0xee00, 0xca69, 0x8, 0x9, 0x5}, 0xd21, 0x5, 0x8000000000000000, 0x2c2d, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000280)="4f0d6915e9ca04000002000000", &(0x7f0000000200)="e3ac9b01ee8d985b677531eeeee5cb5bf774d2df4d9ae6dccbc98def20b72c7c2826a585ba3a8d67815abade214708a4ade77c6faa2f2889ca3e7989f32645dd597a3ae1b46e8d8c7e03ae6b8aaa49f6bf64cc5fa9"}) process_mrelease$auto(0xffffffffffffffff, 0xa) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) add_key$auto_KEY_SPEC_USER_KEYRING(&(0x7f00000002c0)='\\\n', &(0x7f0000000440)='\x14\xf9a\x80\xa5\x95t;x\x0eN@*\x0fLzU?\xae\xdb\xa0\xd0\x84\xf4\x03[\x12YI:\x1a\x14\x7f\x06\xa6\xb6r1\b\xa2\x97\xce\xfe!\x98\xd4\x00*aEH\x91C@\xdf\x1e\xc91\x9dP\xe64\xe7\xc6\xb8X\x88\x02\x9a\xf4K\x93\x8av\xb1\b-*\xddC\x1d\xb5\xd1\xca\x9e2\xd7\x9e\xce\xcc\xedV\xb5\xd7F\x93\xbaKp+\x1a\xf8\xc4S\x8fU\xf2M/\xe4\x18\xb6=]1\x0eQ\x03%W\xb9?\xe4\xcew\xa9\xa2\x1cGtu\xedp\xb5s\xec\\\xc8~\x8a\x95\x0f\xa4k\xe4\xd5\xb5\xc2Tz\xb7H\x97\x15\xb3]\xdd}\x7fn\x84\x13hQ\xac\x93\xfeF\x81\x03\x0eg\xc5\xf0\v\xc3\x82\x9bus\xc6y\xecSxM\x18f\xa2b\xd4\xcb\xc1\x85OS>\x8f\b\xa8f\xdc\xc2\xa1\x8f\x182\tx\xac\x03\x0f\x8c\xc6V\xe2\x05\x9a\x80{\a\xcam\x97O\x1bV\xb3\x1f\xaf\t^w\xaf\xdeY\xf5\xa4G\x83\x05@_\xcc\xb2\xc0~\xeb\xc2\x7f\a\xc2\xdf+\x03\xec\xd1X\'\xf8\f6\"\xa0^wOTL\xb6\x8f\x12@\xda\xca\xe0', 0x0, 0x4, 0xfffffffffffffffc) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x4a42, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/038/001\x00', 0x468142, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 1m45.611913098s ago: executing program 2 (id=2156): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x4) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) mmap$auto(0x800000, 0x202000d, 0x4, 0x15, r0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r1, 0x0, 0x90) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x8, 0x2020009, 0x5, 0xebd, r2, 0x8000) socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) socket(0xb, 0xa, 0xd9) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r3 = socket(0xa, 0x1, 0x84) bind$auto(r3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) 1m44.425525381s ago: executing program 2 (id=2157): openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/5u\x00', 0xa00, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_eff\x00', 0xb00, 0x0) pread64$auto(r0, 0x0, 0x594c, 0x9fffffffd) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000001240), 0x0) ioctl$auto_TUNSETOWNER(r1, 0x400454cc, &(0x7f0000000040)=0x5) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0xf, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) capset$auto(0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'xfrm0\x00'}) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, r4, 0xb3eaee9e9ed11725, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x41000}, 0x64810) shmctl$auto_IPC_INFO(0x44, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) r5 = socket(0x10, 0x2, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) write$auto(r5, &(0x7f0000000000)='-\x00', 0x2fb) socket(0xa, 0x5, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setreuid$auto(0x9, 0x1) 1m43.271425147s ago: executing program 2 (id=2158): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x44302, 0x0) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x201, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x104, 0x6, 0x3}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) statmount$auto(0x0, &(0x7f0000000400)={0x8, 0x1, 0x9, 0x3, 0xb, 0x940, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x3, 0x4, 0xb0, 0x7, 0xe, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x1fe, 0x81) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x80440, 0x0) ioctl$auto_MON_IOCX_GET(r1, 0x40189206, 0x0) ioctl$auto_MON_IOCQ_RING_SIZE(r1, 0x9205, 0x0) close_range$auto(0x2, 0x8, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x1098c7) ioctl$auto_PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x7, 0xbfb, 0x79, 0x30, 0x3, 0x2}) r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/5u\x00', 0xa00, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_eff\x00', 0xb00, 0x0) pread64$auto(r3, 0x0, 0x594c, 0x9fffffffd) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x423462bc, 0x40810004, 0xffb, 0x8000000008011, r3, 0xd) tee$auto(r2, r2, 0x4, 0x3) keyctl$auto(0x5, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) getpid() madvise$auto(0x0, 0x400053, 0x9) 1m42.081051192s ago: executing program 2 (id=2160): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x100000003, 0x400007, 0xdc, 0x11, 0xffffffffffffffff, 0x0) unshare$auto(0x40000080) statmount$auto(0x0, 0x0, 0x1fe, 0x5) mmap$auto(0x0, 0x9, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto(r0, 0x0, 0x80000000006) r1 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$auto_LOOP_CTL_GET_FREE(r1, 0x4c82, 0x0) epoll_create$auto(0x4) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x18a041, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r2 = socket(0x29, 0x2, 0x0) getsockopt$auto(r2, 0x119, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000200dc, 0x16, 0x404, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x10f, 0x83, 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x6) signalfd$auto(r0, 0x0, 0x8) 1m39.962622202s ago: executing program 2 (id=2164): ioperm$auto(0x7, 0x6, 0x2) fremovexattr$auto(0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x405, 0x8000) socket(0x1e, 0x3, 0x73) r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x61, 0x100001000000003, 0x9b72, 0x2, 0x8000) socket(0xa, 0x801, 0x106) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TRIP(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040), 0xc, &(0x7f00000011c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="020027bd7000fddbdf250200000008001100080000000800110066c10000"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) close_range$auto(0x2, 0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x80201, 0x0) ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, 0x0) getsockopt$auto_SO_SNDLOWAT(r0, 0x0, 0x13, 0x0, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x0, 0x0, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8000000000000000, 0x8000) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) r2 = open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80400, 0xb5d1af1605322ddc) r3 = open_by_handle_at$auto(r2, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) socket(0x1d, 0x2, 0x6) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) sendfile$auto(r3, r2, 0x0, 0x2) ioctl$auto_SNDCTL_SEQ_GETINCOUNT(r2, 0x80045105, &(0x7f00000001c0)="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") open(0x0, 0x4041, 0x1a1) socket(0x18, 0x3, 0x2) connect$auto(0x3, &(0x7f00000000c0)=@hci={0x1f, 0x2}, 0x1d) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/mpls/conf/wg0/input\x00', 0x141241, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram12/queue/io_poll_delay\x00', 0x80000, 0x0) read$auto(r5, 0x0, 0x45b9) write$auto(r4, 0x0, 0x3) 1m39.133695948s ago: executing program 2 (id=2167): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket(0xa, 0x5, 0x84) openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x101b00, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x21004, 0x8, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xfffffffffffffffe) r0 = socket(0xa, 0x5, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x23) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) read$auto(r1, 0x0, 0x7) mmap$auto(0xef, 0x1000, 0x0, 0x16, r0, 0x5) capset$auto(&(0x7f0000000080)={0xb}, &(0x7f00000000c0)={0x200, 0x1c, 0x2cefd486}) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000040)={0x0, 0x9}, 0x8) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd12/mq/0/nr_tags\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000100)=""/4096, 0x1000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) unshare$auto(0x40000080) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x3, 0x0, 0xffd8) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x30403, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) bind$auto(0x3, &(0x7f0000000080)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, 0x6a) 1m23.844605851s ago: executing program 34 (id=2167): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket(0xa, 0x5, 0x84) openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x101b00, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x21004, 0x8, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xfffffffffffffffe) r0 = socket(0xa, 0x5, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x23) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) read$auto(r1, 0x0, 0x7) mmap$auto(0xef, 0x1000, 0x0, 0x16, r0, 0x5) capset$auto(&(0x7f0000000080)={0xb}, &(0x7f00000000c0)={0x200, 0x1c, 0x2cefd486}) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000040)={0x0, 0x9}, 0x8) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd12/mq/0/nr_tags\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000100)=""/4096, 0x1000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) unshare$auto(0x40000080) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x3, 0x0, 0xffd8) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x30403, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) bind$auto(0x3, &(0x7f0000000080)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, 0x6a) 36.796564846s ago: executing program 5 (id=2270): clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4000000) setfsuid$auto(0x0) r0 = openat$auto_trace_options_fops_trace(0xffffffffffffff9c, 0x0, 0x200, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x80) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8f3b7a51b8063981, 0x0) ioctl$auto(r1, 0x8, r0) write$auto_proc_reg_file_ops_compat_inode(r1, 0x0, 0x0) ioctl$auto(0xc8, 0x400454ce, 0x5c8d) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x1ff, 0x0) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dri/renderD128\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x178ab487) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x3658c0, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/radio2\x00', 0x0, 0x0) 34.100323351s ago: executing program 5 (id=2274): socket$nl_generic(0x10, 0x3, 0x10) getpid() mmap$auto(0x0, 0x420009, 0xfff, 0xeb1, 0x401, 0x7ffd) r0 = bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x19, 0x4, 0x4, 0x880b, 0x8, 0xd, 0x66b, 0x4, 0x7ff}, 0x6f4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x8000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0xa, 0x1, 0xfffffeff) r5 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) pread64$auto(r5, 0x0, 0x2, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\x97U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x100000040eb1, r3, 0x300000000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181500, 0x0) ioctl$auto_BLKALIGNOFF(r2, 0x127a, 0x0) sched_setattr$auto(r1, 0x0, 0x3) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) fanotify_mark$auto(0xffffffffffffffff, 0x9, 0x1000000009, r0, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IPVS_CMD_GET_DAEMON(r6, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x40000) writev$auto(0xffffffffffffffff, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) gettid() r7 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4) flock$auto(r7, 0x1) open(&(0x7f0000000040)='./file0\x00', 0x4242, 0x2e4) 32.817534513s ago: executing program 5 (id=2276): add_key$auto_KEY_SPEC_REQKEY_AUTH_KEY(0x0, 0x0, 0x0, 0x8, 0xfffffffffffffff9) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b4b", 0xfdef) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r1, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) msgctl$auto_MSG_INFO(0x5, 0xc, &(0x7f0000000280)={{0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x287f, 0x2, 0x3}, 0x0, 0x0, 0x7fffffff, 0x9, 0xb, 0xffffffff, 0xfffffffffffffffe, 0x1, 0xfc2, 0x26f, @inferred, @raw=0x9}) setresgid$auto(0x0, 0xffffffffffffffff, r2) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) io_uring_register$auto(0x2, 0x9, 0x0, 0x0) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x101000, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000000c0)={"58f99464", 0x8, 0x6, 0x1, 0x3, 0x5, "4bb69ec4b3f4c14539898e4c5682f5", "347f00", "a630df9d", "a0ed9959", ["cd9196b8fe1a8a7eb90401a9", "2f9c30017721de33c560b95a", "d3fe6c55a78d6932211c9b69", "ea334f1f1e5e27a1320d6edb"]}) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000048c0)='/dev/dsp1\x00', 0x20000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000180)="6da6b940dfe114cacac8b7cca871a393aaf922f69708e077a3ff54d760f973198c7f36202c9afdaf7bc2eb57e0") close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="1b0026bd7000fddbdf250300000004000800100003800c000a000700000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="710326bd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0) select$auto(0x4, 0x0, &(0x7f0000000100)={[0x9, 0x7, 0xfffffffffffffff9, 0x9, 0x7ff, 0x3, 0x6, 0x2, 0x9, 0xffff, 0x1ff, 0xd, 0x3, 0x200000201, 0x7, 0x6]}, 0x0, 0x0) socket(0x1d, 0x2, 0x6) r5 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6a) 31.494251649s ago: executing program 5 (id=2278): socket(0x10, 0x2, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) ioctl$auto(r0, 0xc0184d03, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) keyctl$auto(0xa, 0x1, 0x2, 0x5, 0x3) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x300) socket(0x25, 0x1, 0x5) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7020f8dbdf2501000000eefe0200", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB="08000700000000004b8fa55f70a1ec5113aa2db73464fbbaa1116465285aef44ef341c0b76fb15d24d9dbfd447f3379a70e19c1b1ad5b5bb33018d36851b92f33a7b1afc4f282fbbbfefa1111c97b0e09b8069f4b1d39d570a39bd80e779f973eaebe39e63b0ae31eb0b0e5b101e791162e8182e3dbaf66361c8fc274c532626201f6ead368b695b58bf0a9c70cc3149ffc14247286dca2801f4c0299997d9c83bf1fdf597778571d987d573ff8c4ae1ef98b7a66f5335de94699387c60308b5225dd8f287dc0fcaa87cf53f2e608ca40b171065068d2ca4483b9b74"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) 30.942814994s ago: executing program 5 (id=2280): setitimer$auto(0x1, &(0x7f0000000000)={{0x802, 0x1000007f}, {0x800100004, 0x3}}, 0x0) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_TIMEOUT_REASON={0x8, 0xf8, 0x40}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x45}, @NL80211_ATTR_MLO_LINKS={0xc, 0x138, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_ATTR_TWT_RESPONDER={0x4}]}]}]}, 0x30}}, 0xc08c) setitimer$auto(0x9, &(0x7f0000000140)={{0x3, 0x1}, {0xfffffffffffffffc, 0x8}}, &(0x7f0000000180)={{0x7, 0x230d}, {0x5, 0x148}}) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000001380)={{&(0x7f00000001c0)="42fec9aa31b66eeefac2fa60d1fb88f54548003b7ea1b730954eea5613ea2c991197cef4c972974fea195fa735dbb4db8ec7a87ccbadb565a60147deda00070bda661a4609c0f74ac8a88ece34d6d2bcf939e269344cb881230882297ea4c46c226ba9ea15a2606931f3ccd936c6a05812020b164d3aeeb7e41766971de14b88f5f56336d15125a9f0978f7fc4d549287e298b9a8bfc85342989420cc78565af54dee0e32c67345f26d2e064c3bd11d3ca12be459dedb7991764b77f153773c429f4841305070206a95e84f6a4dbd0426d314120d800132ff91749e5bbfce96473b60945982a3a5fc60885eaf0c24404343b18d1af8d7c451d3ce3d22f60ac9ed10cbd63feb07c74f4fbb3e467c761e25e626056d02a4e5105d457db53022bc771bbcbbbcf522788bbc76c33802a3475225fca29b3075ccbeb1b123cd5e1eea6bd226cb24c1adcd0833571a40bd0f15c5b3960255061069275ba3760bb07322c8ceb62c4c40d326bc493a1dafc33bc56b7432b63cb25384aed509799dc119932afe0c435a4ceebc1c4833aaa201e1d82bd632a6f64bba84464c316467abd94c4e792f3b9acc5af052854d45a9036db563e9d1bd17d22f53e0ec810f5540fc5de835739ed5d3c8c6842457b0ea9681648baa98a8ee61eedfb01be401e8071bff115baf5a47e0d883e5c11a2b5688d0fd0deb2a5b26edbbd55952163d67b5998253c341b4543cf4a477f4e7f97c77c326c4cb7870e9d497e08a1e5733d1e912ab4a91622d7d52764448aef0a562a9ab1f0d44a6623b0e15a9ef23f784fb28987f8e263ea53ea472748fd7b8afeec97427906c72154e6cf7c6270a105e1059b50345a24e491dcbe500154701b085c43fc78748c27e0667b3ec7baaeeab5c429ccceee8637f5d5627522644df7cd7590ed28fa585c8fe2593391c30b6215ab2829f7e8d8a9332f5c0570ecf3924b1c4c798dfecafc27056547d30daa7d52ff55a3fdc1e7873174de8b2731dba147bbf568d8e08e6d87274bf3707fa9dd99f0f5f00b3e1ee05ce00cc8de92913d05f3c9993e1aa05581a00442b2c89f1d693acd3d64afbe95d119a23be327768627938d2d6237fb7ab932fa6862ab37cd94cf3a405c61d1ca8d15a04f286626dc1818eed497e5ea37fad7e8575d5bd4d4c65213fe24a6dd90ff4deb4121a6782a6912f68ebb34fa3599e0678c4484e04db95f98361485c42a20046244705d23866da8667eae96bb7ab4bc2a0f55d6ab4b6e0b880a6d333f48f6328d03f98e26e26adff99eef2db9afebfc312e613e7689cdaf6337aa4a670aa9aabf2ab6c634b06ee59c84843148fdfa9536ee7a2a24544d524f790678608fc03537d00b66af857986bbab5a40ed4b5357ac297977c9747d58552817b8a5c41255130cb8f4ba53fdb70d77ae6f688d451788502da2a9d7b8c3888e81d10d5a024650096b069cfaaea016247b01ca9012f40fe049ab386bdb37596bb0ba71e8d7f5bf62aba7274577fde683fa06ec60b1ac029b51e6a7455c8ad8dfe952db8fb5086027b36ffe893d5361e4dcd74c8ffedb0a40d6420a4ea6c2aa1bcbf04f4078692bae0c9203771535920482cb0dd2c869836ae556d160a5fed31b27c5b89250dc206f9a45e0017509bd79dfb89a63f8d88c2bf639077694f466f28152180c9a32237a2bdcc8757564f1dd3e726cbbf07826219a58cc15b50935d0dfa915dadab8e53743eb462db0914fc8ed939f40f53c73ff8bb951644aa2538a99e078e220b5cccf8dc66f96ea0e467e236f1534a66b89a4d0c457cffe26e1046086199cbca11df83c2134f4f4053c158c4bce3460678e23171683eff9034314e66389fc04f17f3612244c7f26d09f314c3e28f81022e930e25484c0356ceef2c218e64840bd74e02ee224ac39262416fa8aa75d30ba4b13ef528d67c40b91c6939b6c1ea9a116ee684cc931e233ef0d53c66a087373d18d5a436098474f76ee6654969ae768b8abd10c32ea7993d26b0112fcb36a39337eca6f1aa6548908e120bc4999b1e419aed26e6370888a8322267b88b2ec02bf68fe0b2981d40d9a0663029d8cc053bc977fbdde39be1c87e4669a24c99604c83b0dee36b438389cbcfc2ddb967383406c8db19cbc43434142b8529064de52e42d0d03503c454d46f1c88a7abedf66953f6b0474c5b59baa6536a9841331f290972361758147447e438decdb8e699838998ac79cfd75b5af9d55d3aedc53b01af8addb99cad87cf9b7e9f1023a4e232fa1259ca7827742e49c612aa62b60c80ea282d8badc6fc1b4a5e707e5aaa481c4b6198b4c3b08db2f0dc75e2b7f12b8815f9aa0b7a4683b9f9fc7c4af41fd32d57d348189d8952dd370f552b44746ea04099278518f745173bcbddda2b2bbcb60e7eec8f958fab66ee5b96c4c4774bc24f0f0dcbd093333a64e1275bc011b17b1ccfb02833eb766121dd170d565f543bda2ee511d83379138afaa1f2d74a6b7746380edf0acbdf6b17b759691d46e00af36a6942730b1aa36c295d05e2b9702cd0f0ad678c5a0372a846435456b3606883098371a29cfea6b8a0f4b845ecc172ad383698e2513970c6cd62d2dd0cadd97c453dc2ce6a0c93f497eceb6cf921f80a7bf1c7283d91ffa1c27ff26a9a6d7c8ff657c6ca6a8584744227ac762cc7dc04ac3b6cdafe2acd640f1b53c451232a5dbcd9d7a453f4bef1671515a2f7091ee9484e720de74086debdef0bdc064e763b7d1b942be44841f9589db9af405bbca33ecb6258ab699686d47653ad26d07de4f3a7b30bd638c7c0180258af6e88aaa8c3dba0d9f3d2340f9157c7e2f74eca50b0f5b9bcb8e2d557871680abcceaeef8faf213b96170afc39c2a7d297adda363fd29b944436c6d7d238be3042b888ae81a50a05b0bb34cd5c3e1d824b2d566acb1b33574dd33a3d8d8701c105bef39e07ed7670d94657cfd22433151a63945337c1b91ec75eaf53099ab1c3a0530a4a2575ef996f2ae10bf79c0f329522764d8dab0f58b8d11f10c2a7a1bd050f3c173404d942214153be7deea68df8555d15e4ac393814f360ef632dcc44a6dd4bcb30a2699af0fbeee944ea1f2dade08b8a9c701db2f95a6ebf57dce12a0be493888854793bba01282080c02f06fbbc135d4d0ba793954b6a3e50752c0fde5331bef7db86b739989399435faba49dae6aea452df45e76dbdcc308bec5be7b624a69da8d993331f8629e4acb25b050a7d3b8810700b0b0e88bc6ba16655a8e620dc12408ccf38efaa4ab913e8406a5fedc789f5e621338e36183e0d2fa1f9d63de2266ce9f720fb3e6580ffe5c67b6497c968c590bfaa86b7e0779f152a7bbd2d7f8d425b266dcbd102ac9a02c8631a10241f0ba9d204a1a60a4a0c7fb3ac998ef86576423d5f9effca474f8ec0df40c986caf6b1e03120cadddcdc9720559108030984d3a5e4bab00cdc6915a9d0f83750f1f0cce4f3ab93a376712a0eebfcd60324ab9e2a08b18548ae656028ad1e2ad92ee05c01fe413496d43fb8792d3787d5e2103d856754221ab3006b1722110f90c8b9555ccf68488a90a94b9db152e9dff6e2c4dd2d27e48c7a1f97b862263c5023b93cf5778b518f827266619b50b7107a4382d8b664950f90e1f5137c795415dfba03889561b76a62bb6c97aef30a969b5596c02515b245a995c502a938a08e932c1696a013c095ec97808193664390b45ad94a212b368b8ca21c3e954960916cb6fbaf69ca295e26387d06e3fb94f84e7fabf4ddb7fe7bce3be4a46672002baa28bbb71a9342d8a2b76b9f2cce7aa9f5a26dcf8496adb7f0200de8d68ee64b7f1526c02bdfaff09687754fbf01acd9a840fa63e791cc431d476453610361beede59129a72aa2917318813089a0ef9e197c847e26138d1c75cea8980e8308d610a5a3ced4ad63185d8fd4b57506cdc29aff42f46c7e56dcc932ac267bba1b93a6f8bde472d413da0a38224866ab5ec4e57b4cf8959a1d699b8572c61d6c969bf124ccbc2d7d188a16e3a2e2f8bf853393882577122eab4ba05d75b6629591aef96aab7e2de2d1e2c185e1bcb8cdef4e276cbf59b6364db542aef2859c00a1cba13465e448a9e7a22cf2f7b514c62572e1e976248f1414d2621e88d766d1c32efe24a0ef7303d03c78ededde8aa4543688941fecb248f8c3d8887dd703c497e37f965208563c871557054a89a5f3fe638dda4b848bfce25c8aa94fe859cf35cbe54212ff059dac165f9cfb10fceffbc7252022f0b8a6e4f9d0f1e950815327aa84cb5cc5aee0e159f90ceefe391686025af45b987994ba3f716339a5adac57bfc367e446aff021cd5df341982341cd403f3522c6a5f81cb24f6a60df5681748da5317d4b39ca30f19943fea00d953278bc3eba24004f97cb8a720ac50408404dece8e4f4df6aa94bf4fbfb27195c758891ce47d8a6127f4c02693e43d2f52e0307645236e507b5c037a9009dd653211c1f240d2c58ddb978842206742e78ebf53ce5720b96468e779dcea627ca61785e8494f4c5f5354989c24de087173b32f752af3ac00082eee56b590a014d57555c3e48d073338cb803c76343efc306956b2a8979b55eb55b088507b033d3fec7843b8146e0b704196a42444161830d1ba5ffe0e73d83fb8f87a13c81162f0bfd2d5ce29ae15c4c98d18a06f5b57d1f52052771b47768298540c6f6b2e8b75a860ff0bdcbdbe87c433f04c256a29b84f0bb25d05ed9f148898fdac0aaea70362f8dfa39afa36eb6e6a6b041dc0d33167b532e6ffd8ed17367f55b6f277fcbc1dadb4d3fed41732647728ea11276d124f01c815fb2baacb9fc798424a1a4ff31ba037e546cf7c0f2614145ba7f1dfa6cff1240dbe03a996167d06c37150f33a3ac7f8d626c943a41923ec5038518cd6c1071c9300312b8d7281b0fb40aa954f6895a641208e0f64e3821845ddea611ef230680a42d292d1b3ee4f6bf1858b5f889774490be08c96387bd270def1705972dc5b8ec60c9f4873092583012cc05e733a44a0fdda9867cbf68102f1394eab6ef6cb3aefae11de351efe6d4809bb97b82efef630640744a761ffa06ef1cb7fd266b5213acc169849292dc0fd35382975c25db48c10770d6326a81c4213c3d97e0a45956ff4e844010dfb39f4", 0x6c8, &(0x7f00000012c0)={0x0, 0x3}, 0x9, &(0x7f0000001300)="482a874b65633079386472e0b428b04510966e62503eaec1779ed700559aa2368c170439f5b461a3b2fbfeb16f5835041dd6edeb8909f1a0151f8e14a4e723ac4616b7454b", 0xf55c, 0xffffffff}, 0xa00}, 0x7, 0x1) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 28.993356309s ago: executing program 5 (id=2281): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x3, 0xfff, 0x9b72, 0xffffffffffffffff, 0x0) mbind$auto(0xd, 0x2091d2, 0x4, 0x0, 0x6, 0x2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) unshare$auto(0x40000080) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) rt_sigsuspend$auto(&(0x7f00000000c0)={0x4}, 0x8) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0x3, 0x80004509, 0x10000000000402) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8000002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0xfffff000}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/clear_refs\x00', 0x101001, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/tty/ptybd/dev\x00', 0x2440, 0x0) read$auto(r1, 0x0, 0x2) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) 13.789362274s ago: executing program 35 (id=2281): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x3, 0xfff, 0x9b72, 0xffffffffffffffff, 0x0) mbind$auto(0xd, 0x2091d2, 0x4, 0x0, 0x6, 0x2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) unshare$auto(0x40000080) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) rt_sigsuspend$auto(&(0x7f00000000c0)={0x4}, 0x8) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0x3, 0x80004509, 0x10000000000402) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8000002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0xfffff000}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/clear_refs\x00', 0x101001, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/tty/ptybd/dev\x00', 0x2440, 0x0) read$auto(r1, 0x0, 0x2) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) 12.058544147s ago: executing program 6 (id=2314): r0 = socket(0x3, 0xa, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0xd2) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x2}, 0x52) r2 = socket(0x2, 0x802, 0x1) setsockopt$auto_SO_WIFI_STATUS(r2, 0x0, 0x30, &(0x7f0000000080)='\xef', 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xe2, 0xeb1, 0x401, 0x8000) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x2, 0x0, 0x0, 0x40) socket(0xb, 0x3, 0x3b) getsockopt$auto(r0, 0x29, 0x20, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/pagemap\x00', 0x44000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000180), r1) mmap$auto(0x0, 0x10000, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x11, 0x80003, 0x300) sysfs$auto(0x2, 0x44, 0x0) setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9) sendto$auto(r4, 0x0, 0x13, 0xc, &(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x3, {{0x42, 0x4}, 0x2}}, 0x1e) 11.080137366s ago: executing program 6 (id=2316): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) ftruncate$auto(0x0, 0x8800700) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x0, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) r2 = io_uring_setup$auto(0x8000, 0x0) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) shmctl$auto_IPC_SET(0x8, 0x1, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r1, &(0x7f0000000700)={&(0x7f0000000240), 0xc, &(0x7f00000006c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="e34240fa", @ANYRES16=0x0, @ANYBLOB="000425bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x24008140}, 0x2404c044) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x64c1, 0x8000001f, 0x400000000, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xfc\x04\x00\x00)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) fallocate$auto(r2, 0x80, 0xf, 0x6ad5) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:01.3/numa_node\x00', 0x63102, 0x0) sendfile$auto(r3, r3, 0x0, 0x1) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x0, 0xffffffffffff0004, 0x14) 8.254488531s ago: executing program 4 (id=2318): openat$auto_page_owner_stack_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000140), 0x121140, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000880)='/dev/input/event0\x00', 0x40100, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) ioctl$auto_EVIOCGMASK(r0, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x9}) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop11\x00', 0x2723c3, 0x0) getrlimit$auto(0x3, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) socket(0x25, 0x1, 0x84) mmap$auto(0x0, 0x240009, 0xdf, 0x8000009b72, 0x7, 0x28000) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) write$auto(0x3, 0x0, 0xffd8) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x3, 0x2, 0x3, 0x1) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x8, 0x3, 0x2, 0x4) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x401, 0x200000000000000, 0xfffffffffffffff8, 0x0) setrlimit$auto(0xc, &(0x7f0000000040)={0x5, 0x2}) socket(0xa, 0x2, 0x80000007) mmap$auto(0x0, 0x9, 0x3ff57696, 0x7ff, 0x2, 0x8000000000008000) ioprio_set$auto(0x0, 0x0, 0x7) getsockopt$auto(r0, 0x20001, 0x1c, 0x0, 0x0) ioctl$auto(0x3, 0xae41, r1) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/admmidi2\x00', 0x88042, 0x0) ioprio_set$auto(0x1, 0x0, 0x0) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0x400000000006) read$auto(r2, 0x0, 0x20) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20800, 0x0) 7.608241947s ago: executing program 1 (id=2320): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x100000003, 0x400007, 0xdc, 0x11, 0xffffffffffffffff, 0x0) unshare$auto(0x40000080) statmount$auto(0x0, 0x0, 0x1fe, 0x5) mmap$auto(0x0, 0x9, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto(r0, 0x0, 0x80000000006) r1 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x18a041, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r2 = socket(0x29, 0x2, 0x0) getsockopt$auto(r2, 0x119, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000200dc, 0x16, 0x404, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x10f, 0x83, 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x6) signalfd$auto(r0, 0x0, 0x8) 7.527915188s ago: executing program 6 (id=2321): r0 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x20000045}, 0x24000044) ioctl$auto_SNDRV_PCM_IOCTL_TSTAMP(0xffffffffffffffff, 0x40044102, &(0x7f0000000200)=0x5) write$auto(r0, &(0x7f0000000100)='\x00', 0xfffffffffffffffa) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/vhci_hcd.12/usb33/33-0:1.0/ep_81/type\x00', 0x1ca80, 0x0) mbind$auto(0x0, 0x100000008, 0x2100000000, 0x0, 0x6, 0xfffffffe) madvise$auto(0x110c230000, 0x8031ca, 0x9) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/admmidi2\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x1ac}}, 0x40000) io_uring_setup$auto(0x6, 0x0) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0xf, 0x0, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x5c}) sendmmsg$auto(r1, &(0x7f0000000300)={{&(0x7f0000000000), 0x4, &(0x7f0000000100)={&(0x7f0000000200), 0x4}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x0, 0x100) bpf$auto(0x7fffffe, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x5, 0x9, 0x3, 0x80, 0x8, 0x4, 0x1, 0x7, 0x8, 0x401, 0x1, 0xe2, 0x4, 0xd}, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r3, 0x0, 0x24000000) write$auto(r4, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r4, &(0x7f00000005c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020005, 0x7, 0xeb5, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x2, 0x37) 6.988183794s ago: executing program 4 (id=2322): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket(0xa, 0x5, 0x84) openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x101b00, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = clone$auto(0x21004, 0x8, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xfffffffffffffffe) r1 = socket(0xa, 0x5, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x23) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) read$auto(r2, 0x0, 0x7) mmap$auto(0xef, 0x1000, 0x0, 0x16, r1, 0x5) capset$auto(&(0x7f0000000080)={0xb, r0}, &(0x7f00000000c0)={0x200, 0x3, 0x2cefd486}) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000040)={0x0, 0x9}, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) unshare$auto(0x40000080) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x3, 0x0, 0xffd8) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x30403, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) bind$auto(0x3, &(0x7f0000000080)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, 0x6a) 4.733054394s ago: executing program 1 (id=2323): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) mmap$auto(0x800000, 0x202000d, 0x4, 0x15, r0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r1, 0x0, 0x90) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x8, 0x2020009, 0x5, 0xebd, r2, 0x8000) socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) socket(0xb, 0xa, 0xd9) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r3 = socket(0xa, 0x1, 0x84) bind$auto(r3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) 4.614774349s ago: executing program 6 (id=2324): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x100000003, 0x400007, 0xdc, 0x11, 0xffffffffffffffff, 0x0) unshare$auto(0x40000080) statmount$auto(0x0, 0x0, 0x1fe, 0x5) mmap$auto(0x0, 0x9, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto(r0, 0x0, 0x80000000006) ioctl$auto_LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$auto_LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x18a041, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r1 = socket(0x29, 0x2, 0x0) getsockopt$auto(r1, 0x119, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000200dc, 0x16, 0x404, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x10f, 0x83, 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x6) signalfd$auto(r0, 0x0, 0x8) 3.689299742s ago: executing program 4 (id=2325): socket(0xa, 0x5, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 64) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty20\x00', 0x109401, 0x0) (async, rerun: 64) unlink$auto(0x0) (async) close_range$auto(0x2, 0xa, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xd2, 0x0, 0x567) (async) fanotify_init$auto(0x65, 0x2) (async) pipe$auto(0x0) (async) dup2$auto(0x5, 0x4) (async) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) (async) write$auto(0x6, 0x0, 0x100000001) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) ioctl$auto_FIOASYNC(r0, 0x5452, 0xc9c6) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TCSBRKP2(0xffffffffffffffff, 0x5425, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(0xffffffffffffffff, 0x0, 0x4000000) (async, rerun: 64) read$auto(r1, 0x0, 0x1ff) (async, rerun: 64) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) (async) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0xe2}, 0x3) (async) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0xffffffffffffffff, 0x29, 0x13, 0x0, 0x0) (async) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000240)=""/122, 0x7a) (async) read$auto_proc_single_file_operations_base(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) 3.014664382s ago: executing program 4 (id=2326): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x7, 0x1, 0x9, 0x7, 0xc, 0x940, 0x1ffde, 0x7, 0x6, 0x3ff, 0x9, 0x1, 0x2, 0x7, 0x9, 0x8, 0x8, 0x407, 0x5, 0x7, 0x8000, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x47c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe3a]}, 0x400, 0x81) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='p\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xb, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='*'], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) read$auto(0x3, 0x0, 0x110) 2.65777822s ago: executing program 4 (id=2327): socket(0x10, 0x2, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) ioctl$auto(r0, 0xc0184d03, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) keyctl$auto(0xa, 0x1, 0x2, 0x5, 0x3) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x300) socket(0x25, 0x1, 0x5) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7020f8dbdf2501000000eefe0200", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB="08000700000000004b8fa55f70a1ec5113aa2db73464fbbaa1116465285aef44ef341c0b76fb15d24d9dbfd447f3379a70e19c1b1ad5b5bb33018d36851b92f33a7b1afc4f282fbbbfefa1111c97b0e09b8069f4b1d39d570a39bd80e779f973eaebe39e63b0ae31eb0b0e5b101e791162e8182e3dbaf66361c8fc274c532626201f6ead368b695b58bf0a9c70cc3149ffc14247286dca2801f4c0299997d9c83bf1fdf597778571d987d573ff8c4ae1ef98b7a66f5335de94699387c60308b5225dd8f287dc0fcaa87cf53f2e608ca40b171065068d2ca4483b9b74"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) 2.598381274s ago: executing program 1 (id=2328): socket(0x10, 0x2, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r0, 0xc0184d03, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) keyctl$auto(0xa, 0x1, 0x2, 0x5, 0x3) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x300) socket(0x25, 0x1, 0x5) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7020f8dbdf2501000000eefe0200", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB="08000700000000004b8fa55f70a1ec5113aa2db73464fbbaa1116465285aef44ef341c0b76fb15d24d9dbfd447f3379a70e19c1b1ad5b5bb33018d36851b92f33a7b1afc4f282fbbbfefa1111c97b0e09b8069f4b1d39d570a39bd80e779f973eaebe39e63b0ae31eb0b0e5b101e791162e8182e3dbaf66361c8fc274c532626201f6ead368b695b58bf0a9c70cc3149ffc14247286dca2801f4c0299997d9c83bf1fdf597778571d987d573ff8c4ae1ef98b7a66f5335de94699387c60308b5225dd8f287dc0fcaa87cf53f2e608ca40b171065068d2ca4483b9b74"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) 2.297734581s ago: executing program 6 (id=2329): r0 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x20000045}, 0x24000044) ioctl$auto_SNDRV_PCM_IOCTL_TSTAMP(0xffffffffffffffff, 0x40044102, &(0x7f0000000200)=0x5) write$auto(r0, &(0x7f0000000100)='\x00', 0xfffffffffffffffa) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/vhci_hcd.12/usb33/33-0:1.0/ep_81/type\x00', 0x1ca80, 0x0) mbind$auto(0x0, 0x100000008, 0x2100000000, 0x0, 0x6, 0xfffffffe) madvise$auto(0x110c230000, 0x8031ca, 0x9) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/admmidi2\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x1ac}}, 0x40000) io_uring_setup$auto(0x6, 0x0) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0xf, 0x0, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x5c}) sendmmsg$auto(r1, &(0x7f0000000300)={{&(0x7f0000000000), 0x4, &(0x7f0000000100)={&(0x7f0000000200), 0x4}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x0, 0x100) bpf$auto(0x7fffffe, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x5, 0x9, 0x3, 0x80, 0x8, 0x4, 0x1, 0x7, 0x8, 0x401, 0x1, 0xe2, 0x4, 0xd}, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r3, 0x0, 0x24000000) write$auto(r4, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r4, &(0x7f00000005c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020005, 0x7, 0xeb5, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x2, 0x37) 2.170695238s ago: executing program 4 (id=2330): ioctl$auto(0xc8, 0x400454cb, 0x5c8d) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r0, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="1b0026bd7400fddbdf2503000000040008005400038004000f800400110008001e00", @ANYRES32=0x0, @ANYBLOB="3e00ba809bdd3500e6006e4f74b952aa5712f88a7a8fb419c8806810e9132c14bc81998b9330fea5b928ceda31c689e030e397a640b5db26e4077700000000001200010089877148000000000000000000000000040002"], 0x84}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) r2 = socket(0x11, 0x2, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x1, 0xa, 0x8}) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, 0x0, 0x4, 0x0, 0x5, 0x1000}, 0x5}, 0x2, 0x100fe) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) mmap$auto(0x9, 0x128009, 0x9, 0x15, 0x401, 0x4) io_uring_setup$auto(0x4, 0x0) r3 = socket(0x2b, 0x2, 0x7) getsockopt$auto(r3, 0x6b, 0x2, 0xfffffffffffffffe, 0x0) ioctl$auto_SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, 0x0) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone$auto(0x4, 0x9, 0x0, 0x0, 0x8000000007) r4 = socket(0x15, 0xa, 0x5b3) setsockopt$auto_SO_MARK(r4, 0x0, 0x24, 0x0, 0x5) syz_genetlink_get_family_id$auto_mac802154_hwsim(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x20000, 0x400008, 0xc, 0x9b72, 0x2, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram5/queue/discard_granularity\x00', 0x0, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/ram11/events_poll_msecs\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f00000000c0)='-7', 0x2) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000020c0)=""/4096, 0x1000) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) 2.131258514s ago: executing program 1 (id=2331): ioperm$auto(0x7, 0x6, 0x2) fremovexattr$auto(0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x405, 0x8000) socket(0x1e, 0x3, 0x73) r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x61, 0x100001000000003, 0x9b72, 0x2, 0x8000) socket(0xa, 0x801, 0x106) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TRIP(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040), 0xc, &(0x7f00000011c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="020027bd7000fddbdf250200000008001100080000000800110066c10000"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) close_range$auto(0x2, 0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x80201, 0x0) ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, 0x0) getsockopt$auto_SO_SNDLOWAT(r0, 0x0, 0x13, 0x0, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x0, 0x0, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8000000000000000, 0x8000) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) r2 = open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80400, 0xb5d1af1605322ddc) r3 = open_by_handle_at$auto(r2, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) socket(0x1d, 0x2, 0x6) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) sendfile$auto(r3, r2, 0x0, 0x2) ioctl$auto_SNDCTL_SEQ_GETINCOUNT(r2, 0x80045105, &(0x7f00000001c0)="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") open(0x0, 0x4041, 0x1a1) socket(0x18, 0x3, 0x2) connect$auto(0x3, &(0x7f00000000c0)=@hci={0x1f, 0x2}, 0x1d) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/mpls/conf/wg0/input\x00', 0x141241, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram12/queue/io_poll_delay\x00', 0x80000, 0x0) read$auto(r5, 0x0, 0x45b9) write$auto(r4, 0x0, 0x3) 956.531113ms ago: executing program 1 (id=2332): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) socket(0x28, 0x5, 0x0) socket(0x2, 0x5, 0x0) sysfs$auto(0x2, 0x0, 0x0) epoll_create$auto(0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) epoll_ctl$auto(0x5, 0x3, r0, 0x0) setresuid$auto(0x2, 0xffffffffffffffff, 0x200) 324.371488ms ago: executing program 6 (id=2333): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x100000003, 0x400007, 0xdc, 0x11, 0xffffffffffffffff, 0x0) unshare$auto(0x40000080) statmount$auto(0x0, 0x0, 0x1fe, 0x5) mmap$auto(0x0, 0x9, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto(r0, 0x0, 0x80000000006) ioctl$auto_LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$auto_LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x18a041, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r1 = socket(0x29, 0x2, 0x0) getsockopt$auto(r1, 0x119, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000200dc, 0x16, 0x404, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x10f, 0x83, 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x6) signalfd$auto(r0, 0x0, 0x8) 0s ago: executing program 1 (id=2334): r0 = socket(0x10, 0x2, 0x0) (async) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x200}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @HSR_A_IF2_AGE={0x8, 0x4, 0xf}, @HSR_A_IF1_AGE={0x8, 0x3, 0x5}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x400d0) (async) r1 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) r2 = io_uring_setup$auto(0x86, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r2) (async) sendmsg$auto_NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000841}, 0x4004004) (async) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/oom_adj\x00', 0x48402, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x80903, 0x0) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(0x3, 0x0, 0xfffffdef) (async) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0xffffffffffffffff, 0x300000020000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000200), r2) socket(0xa, 0x5, 0x0) (async) mmap$auto(0x0, 0x400008, 0xde, 0x9b72, 0x2, 0x8000) (async) bind$auto(0x3, &(0x7f0000000080), 0x6b) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) ioctl$auto_PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000300)=0x6) (async) setsockopt$auto(0x3, 0x10000000084, 0xc, 0x0, 0x4) (async) listen$auto(0x3, 0x81) (async) sendmsg$auto_IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x7}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xaaaba978e63e307e}, 0x40000) (async) sendmsg$auto_IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r4, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SRC_PAN_ID={0x6, 0xd, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x2b}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x4}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x2}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000001}, 0x1) (async) sendmsg$auto_IEEE802154_START_REQ(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x34, r4, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x6}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x10040014}, 0x8040) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) kernel console output (not intermixed with test programs): ng attributes in process `syz.1.1669'. [ 592.070754][T13689] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input45 [ 593.640234][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 593.835934][T13723] FAULT_INJECTION: forcing a failure. [ 593.835934][T13723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 593.849207][T13723] CPU: 0 UID: 0 PID: 13723 Comm: syz.2.1674 Tainted: G U L syzkaller #0 PREEMPT(full) [ 593.849247][T13723] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 593.849256][T13723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 593.849271][T13723] Call Trace: [ 593.849280][T13723] [ 593.849290][T13723] dump_stack_lvl+0x100/0x190 [ 593.849336][T13723] should_fail_ex.cold+0x5/0xa [ 593.849363][T13723] strncpy_from_user+0x3b/0x2d0 [ 593.849404][T13723] do_getname+0x78/0x390 [ 593.849434][T13723] __x64_sys_mkdir+0x57/0x90 [ 593.849459][T13723] do_syscall_64+0x106/0xf80 [ 593.849486][T13723] ? clear_bhb_loop+0x40/0x90 [ 593.849515][T13723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.849540][T13723] RIP: 0033:0x7f6a50f9c799 [ 593.849558][T13723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.849582][T13723] RSP: 002b:00007f6a51f42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 593.849604][T13723] RAX: ffffffffffffffda RBX: 00007f6a51215fa0 RCX: 00007f6a50f9c799 [ 593.849619][T13723] RDX: 0000000000000000 RSI: 00000000000000a3 RDI: 0000200000000040 [ 593.849634][T13723] RBP: 00007f6a51f42090 R08: 0000000000000000 R09: 0000000000000000 [ 593.849648][T13723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.849662][T13723] R13: 00007f6a51216038 R14: 00007f6a51215fa0 R15: 00007ffd4eb37988 [ 593.849692][T13723] [ 596.762180][T13766] FAULT_INJECTION: forcing a failure. [ 596.762180][T13766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 596.809565][T13766] CPU: 1 UID: 0 PID: 13766 Comm: syz.2.1684 Tainted: G U L syzkaller #0 PREEMPT(full) [ 596.809618][T13766] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 596.809632][T13766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 596.809650][T13766] Call Trace: [ 596.809659][T13766] [ 596.809670][T13766] dump_stack_lvl+0x100/0x190 [ 596.809721][T13766] should_fail_ex.cold+0x5/0xa [ 596.809759][T13766] _copy_to_user+0x32/0xd0 [ 596.809812][T13766] simple_read_from_buffer+0xcb/0x170 [ 596.809864][T13766] proc_fail_nth_read+0x1af/0x230 [ 596.809901][T13766] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 596.809940][T13766] ? rw_verify_area+0xce/0x6d0 [ 596.809982][T13766] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 596.810016][T13766] vfs_read+0x1e4/0xb30 [ 596.810066][T13766] ? __pfx_vfs_read+0x10/0x10 [ 596.810116][T13766] ? __fget_files+0x215/0x3d0 [ 596.810173][T13766] ? __fget_files+0x21f/0x3d0 [ 596.810233][T13766] ksys_read+0x12a/0x250 [ 596.810282][T13766] ? __pfx_ksys_read+0x10/0x10 [ 596.810340][T13766] do_syscall_64+0x106/0xf80 [ 596.810383][T13766] ? clear_bhb_loop+0x40/0x90 [ 596.810423][T13766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.810457][T13766] RIP: 0033:0x7f6a50f5cfce [ 596.810484][T13766] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 596.810515][T13766] RSP: 002b:00007f6a51f41fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 596.810545][T13766] RAX: ffffffffffffffda RBX: 00007f6a51f426c0 RCX: 00007f6a50f5cfce [ 596.810566][T13766] RDX: 000000000000000f RSI: 00007f6a51f420a0 RDI: 0000000000000005 [ 596.810585][T13766] RBP: 00007f6a51f42090 R08: 0000000000000000 R09: 0000000000000000 [ 596.810605][T13766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.810624][T13766] R13: 00007f6a51216038 R14: 00007f6a51215fa0 R15: 00007ffd4eb37988 [ 596.810666][T13766] [ 597.357361][T13766] Process accounting paused [ 598.314521][T13784] zswap: compressor not available [ 599.036981][T13802] FAULT_INJECTION: forcing a failure. [ 599.036981][T13802] name failslab, interval 1, probability 0, space 0, times 0 [ 599.062826][T13802] CPU: 0 UID: 0 PID: 13802 Comm: syz.2.1691 Tainted: G U L syzkaller #0 PREEMPT(full) [ 599.062892][T13802] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 599.062905][T13802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 599.062925][T13802] Call Trace: [ 599.062936][T13802] [ 599.062949][T13802] dump_stack_lvl+0x100/0x190 [ 599.063007][T13802] should_fail_ex.cold+0x5/0xa [ 599.063047][T13802] should_failslab+0xc2/0x120 [ 599.063080][T13802] __kmalloc_cache_noprof+0x7a/0x6f0 [ 599.063124][T13802] ? register_netdevice+0x50c/0x2210 [ 599.063169][T13802] ? lockdep_init_map_type+0x5c/0x250 [ 599.063224][T13802] register_netdevice+0x50c/0x2210 [ 599.063275][T13802] ? __pfx_register_netdevice+0x10/0x10 [ 599.063319][T13802] ? alloc_netdev_mqs+0x1163/0x14f0 [ 599.063370][T13802] internal_dev_create+0x2d3/0x520 [ 599.063417][T13802] ovs_vport_add+0x147/0x4d0 [ 599.063459][T13802] new_vport+0x16/0x1d0 [ 599.063512][T13802] ovs_dp_cmd_new+0x65d/0xdf0 [ 599.063578][T13802] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 599.063642][T13802] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 599.063695][T13802] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 599.063757][T13802] genl_family_rcv_msg_doit+0x214/0x300 [ 599.063814][T13802] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 599.063865][T13802] ? genl_get_cmd+0x3ef/0x720 [ 599.063932][T13802] ? bpf_lsm_capable+0x9/0x10 [ 599.063966][T13802] ? security_capable+0x80/0x260 [ 599.064015][T13802] ? ns_capable+0xd2/0xf0 [ 599.064052][T13802] genl_rcv_msg+0x560/0x800 [ 599.064106][T13802] ? __pfx_genl_rcv_msg+0x10/0x10 [ 599.064157][T13802] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 599.064229][T13802] netlink_rcv_skb+0x159/0x420 [ 599.064274][T13802] ? __pfx_genl_rcv_msg+0x10/0x10 [ 599.064325][T13802] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 599.064385][T13802] ? netlink_deliver_tap+0x1ae/0xcc0 [ 599.064433][T13802] genl_rcv+0x28/0x40 [ 599.064475][T13802] netlink_unicast+0x5aa/0x870 [ 599.064524][T13802] ? __pfx_netlink_unicast+0x10/0x10 [ 599.064585][T13802] netlink_sendmsg+0x8b0/0xda0 [ 599.064636][T13802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 599.064679][T13802] ? __import_iovec+0x1d2/0x640 [ 599.064741][T13802] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 599.064793][T13802] ____sys_sendmsg+0xa54/0xc30 [ 599.064848][T13802] ? __pfx_____sys_sendmsg+0x10/0x10 [ 599.064963][T13802] ? try_to_wake_up+0x644/0x1a80 [ 599.065008][T13802] ___sys_sendmsg+0x190/0x1e0 [ 599.065064][T13802] ? __pfx____sys_sendmsg+0x10/0x10 [ 599.065115][T13802] ? futex_private_hash_put+0x107/0x1c0 [ 599.065206][T13802] __sys_sendmsg+0x170/0x220 [ 599.065246][T13802] ? __pfx___sys_sendmsg+0x10/0x10 [ 599.065286][T13802] ? __x64_sys_futex+0x34f/0x4d0 [ 599.065357][T13802] do_syscall_64+0x106/0xf80 [ 599.065396][T13802] ? clear_bhb_loop+0x40/0x90 [ 599.065439][T13802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.065474][T13802] RIP: 0033:0x7f6a50f9c799 [ 599.065503][T13802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.065538][T13802] RSP: 002b:00007f6a51f42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 599.065571][T13802] RAX: ffffffffffffffda RBX: 00007f6a51215fa0 RCX: 00007f6a50f9c799 [ 599.065595][T13802] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000009 [ 599.065615][T13802] RBP: 00007f6a51032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 599.065635][T13802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.065656][T13802] R13: 00007f6a51216038 R14: 00007f6a51215fa0 R15: 00007ffd4eb37988 [ 599.065701][T13802] [ 599.481345][T13802] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1691'. [ 600.121757][T13811] netlink: 'syz.2.1693': attribute type 10 has an invalid length. [ 600.142236][T13811] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1693'. [ 600.440261][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 600.642697][T13823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1697'. [ 600.667106][T13823] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1697'. [ 600.973762][T13830] netlink: 'syz.3.1698': attribute type 10 has an invalid length. [ 600.973799][T13830] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1698'. [ 601.495212][T13840] netlink: 'syz.3.1701': attribute type 4 has an invalid length. [ 601.580713][T13840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1701'. [ 601.904271][T13840] FAULT_INJECTION: forcing a failure. [ 601.904271][T13840] name failslab, interval 1, probability 0, space 0, times 0 [ 602.052588][T13840] CPU: 0 UID: 0 PID: 13840 Comm: syz.3.1701 Tainted: G U L syzkaller #0 PREEMPT(full) [ 602.052649][T13840] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 602.052659][T13840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 602.052675][T13840] Call Trace: [ 602.052683][T13840] [ 602.052693][T13840] dump_stack_lvl+0x100/0x190 [ 602.052736][T13840] should_fail_ex.cold+0x5/0xa [ 602.052764][T13840] should_failslab+0xc2/0x120 [ 602.052788][T13840] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 602.052825][T13840] ? key_alloc+0xc0f/0x1310 [ 602.052846][T13840] ? __lock_acquire+0x4a5/0x2630 [ 602.052882][T13840] key_alloc+0xc0f/0x1310 [ 602.052915][T13840] ? __pfx_key_alloc+0x10/0x10 [ 602.052941][T13840] ? __asan_memcpy+0x3c/0x60 [ 602.052982][T13840] keyring_alloc+0x44/0xc0 [ 602.053011][T13840] keyctl_get_persistent+0x779/0x8b0 [ 602.053042][T13840] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 602.053073][T13840] ? __x64_sys_futex+0x34f/0x4d0 [ 602.053105][T13840] ? __x64_sys_futex+0x358/0x4d0 [ 602.053141][T13840] ? xfd_validate_state+0x129/0x190 [ 602.053184][T13840] __do_sys_keyctl+0x3b2/0x5a0 [ 602.053221][T13840] do_syscall_64+0x106/0xf80 [ 602.053249][T13840] ? clear_bhb_loop+0x40/0x90 [ 602.053279][T13840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.053305][T13840] RIP: 0033:0x7ff59419c799 [ 602.053325][T13840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.053349][T13840] RSP: 002b:00007ff5923f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 602.053373][T13840] RAX: ffffffffffffffda RBX: 00007ff594415fa0 RCX: 00007ff59419c799 [ 602.053389][T13840] RDX: 7fffffffffffffff RSI: 000000000000ee00 RDI: 0000000000000016 [ 602.053405][T13840] RBP: 00007ff594232bd9 R08: 000000000000000c R09: 0000000000000000 [ 602.053419][T13840] R10: 00000000000099a7 R11: 0000000000000246 R12: 0000000000000000 [ 602.053434][T13840] R13: 00007ff594416038 R14: 00007ff594415fa0 R15: 00007ffda5a209c8 [ 602.053465][T13840] [ 604.347990][T13875] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input47 [ 604.792269][T13876] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input48 [ 605.048670][T13882] netlink: 'syz.3.1710': attribute type 10 has an invalid length. [ 605.048736][T13882] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1710'. [ 609.935553][T13935] netlink: 'syz.4.1720': attribute type 10 has an invalid length. [ 609.951019][T13935] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1720'. [ 610.057150][T13937] FAULT_INJECTION: forcing a failure. [ 610.057150][T13937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 610.071716][T13937] CPU: 0 UID: 0 PID: 13937 Comm: syz.2.1721 Tainted: G U L syzkaller #0 PREEMPT(full) [ 610.071773][T13937] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 610.071786][T13937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 610.071806][T13937] Call Trace: [ 610.071817][T13937] [ 610.071830][T13937] dump_stack_lvl+0x100/0x190 [ 610.071889][T13937] should_fail_ex.cold+0x5/0xa [ 610.071931][T13937] core_sys_select+0x9b9/0xbb0 [ 610.072021][T13937] ? __pfx_core_sys_select+0x10/0x10 [ 610.072126][T13937] ? ktime_get_ts64+0x2d2/0x3f0 [ 610.072167][T13937] ? read_tsc+0x9/0x20 [ 610.072203][T13937] ? ktime_get_ts64+0x256/0x3f0 [ 610.072246][T13937] kern_select+0x20c/0x270 [ 610.072309][T13937] ? __pfx_kern_select+0x10/0x10 [ 610.072381][T13937] __x64_sys_select+0xbd/0x160 [ 610.072434][T13937] ? do_syscall_64+0x95/0xf80 [ 610.072474][T13937] ? lockdep_hardirqs_on+0x78/0x100 [ 610.072514][T13937] do_syscall_64+0x106/0xf80 [ 610.072551][T13937] ? clear_bhb_loop+0x40/0x90 [ 610.072591][T13937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.072625][T13937] RIP: 0033:0x7f6a50f9c799 [ 610.072653][T13937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.072689][T13937] RSP: 002b:00007f6a51f42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 610.072724][T13937] RAX: ffffffffffffffda RBX: 00007f6a51215fa0 RCX: 00007f6a50f9c799 [ 610.072747][T13937] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 0000000000000001 [ 610.072768][T13937] RBP: 00007f6a51032bd9 R08: 00002000000001c0 R09: 0000000000000000 [ 610.072790][T13937] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 610.072811][T13937] R13: 00007f6a51216038 R14: 00007f6a51215fa0 R15: 00007ffd4eb37988 [ 610.072856][T13937] [ 612.971416][ T51] Bluetooth: hci5: unexpected event 0x3e length: 508 > 260 [ 612.971471][ T51] Bluetooth: hci5: unexpected subevent 0x02 length: 507 > 260 [ 612.986592][ T51] Bluetooth: hci5: Dropping invalid advertising data [ 612.994084][ T51] Bluetooth: hci5: unknown advertising packet type: 0xe9 [ 615.560424][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 616.606695][T14020] netlink: 'syz.4.1742': attribute type 10 has an invalid length. [ 616.606730][T14020] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1742'. [ 617.833318][T14033] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 618.363963][T14025] zswap: compressor not available [ 619.419294][ T51] Bluetooth: hci1: Unexpected cc 0x7c89 with no status [ 620.806445][T14055] FAULT_INJECTION: forcing a failure. [ 620.806445][T14055] name failslab, interval 1, probability 0, space 0, times 0 [ 620.840922][T14055] CPU: 1 UID: 0 PID: 14055 Comm: syz.2.1745 Tainted: G U L syzkaller #0 PREEMPT(full) [ 620.840980][T14055] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 620.840994][T14055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 620.841015][T14055] Call Trace: [ 620.841026][T14055] [ 620.841039][T14055] dump_stack_lvl+0x100/0x190 [ 620.841097][T14055] should_fail_ex.cold+0x5/0xa [ 620.841138][T14055] ? sk_prot_alloc+0x10b/0x2a0 [ 620.841184][T14055] should_failslab+0xc2/0x120 [ 620.841228][T14055] __kmalloc_noprof+0xe0/0x850 [ 620.841289][T14055] sk_prot_alloc+0x10b/0x2a0 [ 620.841341][T14055] sk_alloc+0x36/0xe80 [ 620.841377][T14055] __netlink_create+0x5e/0x2c0 [ 620.841409][T14055] ? __wake_up+0x3f/0x60 [ 620.841451][T14055] netlink_create+0x293/0x610 [ 620.841490][T14055] ? __pfx_genl_bind+0x10/0x10 [ 620.841535][T14055] ? __pfx_genl_unbind+0x10/0x10 [ 620.841579][T14055] ? __pfx_genl_release+0x10/0x10 [ 620.841631][T14055] __sock_create+0x339/0x860 [ 620.841690][T14055] __sys_socket+0x14d/0x260 [ 620.841745][T14055] ? __pfx___sys_socket+0x10/0x10 [ 620.841802][T14055] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 620.841855][T14055] __x64_sys_socket+0x72/0xb0 [ 620.841907][T14055] ? lockdep_hardirqs_on+0x78/0x100 [ 620.841948][T14055] do_syscall_64+0x106/0xf80 [ 620.841987][T14055] ? clear_bhb_loop+0x40/0x90 [ 620.842031][T14055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.842068][T14055] RIP: 0033:0x7f6a50f9c799 [ 620.842097][T14055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.842132][T14055] RSP: 002b:00007f6a51edf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 620.842166][T14055] RAX: ffffffffffffffda RBX: 00007f6a51216270 RCX: 00007f6a50f9c799 [ 620.842189][T14055] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 620.842218][T14055] RBP: 00007f6a51032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 620.842239][T14055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.842259][T14055] R13: 00007f6a51216308 R14: 00007f6a51216270 R15: 00007ffd4eb37988 [ 620.842303][T14055] [ 623.947999][T14076] Invalid ELF header magic: != ELF [ 624.758565][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.765106][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.792328][T14096] hub 1-0:1.0: USB hub found [ 624.826564][T14096] hub 1-0:1.0: 1 port detected [ 625.365336][T14108] could not allocate digest TFM handle  [ 626.439148][T14128] HfR: entered promiscuous mode [ 626.479531][T14130] HfR: entered promiscuous mode [ 626.652284][T14125] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input49 [ 627.243511][T14137] FAULT_INJECTION: forcing a failure. [ 627.243511][T14137] name fail_futex, interval 1, probability 0, space 0, times 0 [ 627.300219][T14137] CPU: 1 UID: 0 PID: 14137 Comm: syz.2.1765 Tainted: G U L syzkaller #0 PREEMPT(full) [ 627.300272][T14137] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 627.300285][T14137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 627.300305][T14137] Call Trace: [ 627.300316][T14137] [ 627.300328][T14137] dump_stack_lvl+0x100/0x190 [ 627.300382][T14137] should_fail_ex.cold+0x5/0xa [ 627.300421][T14137] get_futex_key+0x1d2/0x1620 [ 627.300466][T14137] ? __pfx_get_futex_key+0x10/0x10 [ 627.300520][T14137] futex_wait_setup+0x81/0x500 [ 627.300582][T14137] __futex_wait+0x19f/0x300 [ 627.300636][T14137] ? __pfx___futex_wait+0x10/0x10 [ 627.300693][T14137] ? __pfx_futex_wake_mark+0x10/0x10 [ 627.300749][T14137] ? __hrtimer_setup+0x178/0x280 [ 627.300797][T14137] ? ktime_add_safe+0x60/0x70 [ 627.300845][T14137] futex_wait+0xed/0x380 [ 627.300896][T14137] ? __pfx_futex_wait+0x10/0x10 [ 627.300943][T14137] ? __lock_acquire+0x4a5/0x2630 [ 627.300996][T14137] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 627.301055][T14137] do_futex+0x1ef/0x350 [ 627.301098][T14137] ? __pfx_do_futex+0x10/0x10 [ 627.301139][T14137] ? ktime_get+0x200/0x300 [ 627.301171][T14137] ? lockdep_hardirqs_on+0x78/0x100 [ 627.301213][T14137] ? read_tsc+0x9/0x20 [ 627.301253][T14137] __x64_sys_futex+0x34f/0x4d0 [ 627.301299][T14137] ? __pfx___x64_sys_futex+0x10/0x10 [ 627.301357][T14137] do_syscall_64+0x106/0xf80 [ 627.301394][T14137] ? clear_bhb_loop+0x40/0x90 [ 627.301433][T14137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.301466][T14137] RIP: 0033:0x7f6a50f9c799 [ 627.301492][T14137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.301523][T14137] RSP: 002b:00007ffd4eb37ae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 627.301552][T14137] RAX: ffffffffffffffda RBX: 00000000000991ef RCX: 00007f6a50f9c799 [ 627.301573][T14137] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6a51215fac [ 627.301591][T14137] RBP: 0000000000000032 R08: 0000000000000000 R09: 0000000000000000 [ 627.301609][T14137] R10: 00007ffd4eb37bf0 R11: 0000000000000246 R12: 00007ffd4eb37c10 [ 627.301628][T14137] R13: 00007f6a51215fac R14: 0000000000099221 R15: 00007ffd4eb37bf0 [ 627.301668][T14137] [ 628.317457][T14150] netlink: 'syz.1.1767': attribute type 10 has an invalid length. [ 628.344274][T14150] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1767'. [ 628.657513][T14155] netlink: 'syz.1.1768': attribute type 10 has an invalid length. [ 628.684938][T14132] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input50 [ 628.716170][T14155] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1768'. [ 628.972930][T14156] netlink: 93 bytes leftover after parsing attributes in process `syz.2.1765'. [ 629.033831][T14131] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input51 [ 629.105542][T14141] netlink: 93 bytes leftover after parsing attributes in process `syz.2.1765'. [ 629.972800][T14139] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input52 [ 631.027174][T14102] Process accounting resumed [ 633.142930][T14210] netlink: 'syz.4.1780': attribute type 10 has an invalid length. [ 633.142967][T14210] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1780'. [ 633.887757][T14204] random: crng reseeded on system resumption [ 636.306680][T14250] openvswitch: HfR: Dropping previously announced user features [ 637.373630][T14266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1795'. [ 641.790684][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 642.208846][T14308] FAULT_INJECTION: forcing a failure. [ 642.208846][T14308] name failslab, interval 1, probability 0, space 0, times 0 [ 642.222009][T14308] CPU: 0 UID: 0 PID: 14308 Comm: syz.3.1803 Tainted: G U L syzkaller #0 PREEMPT(full) [ 642.222055][T14308] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 642.222066][T14308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 642.222083][T14308] Call Trace: [ 642.222091][T14308] [ 642.222102][T14308] dump_stack_lvl+0x100/0x190 [ 642.222148][T14308] should_fail_ex.cold+0x5/0xa [ 642.222180][T14308] should_failslab+0xc2/0x120 [ 642.222207][T14308] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 642.222245][T14308] ? __send_signal_locked+0x155/0x12d0 [ 642.222294][T14308] __send_signal_locked+0x155/0x12d0 [ 642.222342][T14308] do_notify_parent+0xd73/0xf90 [ 642.222386][T14308] ? __pfx_do_notify_parent+0x10/0x10 [ 642.222427][T14308] ? do_raw_spin_lock+0x128/0x260 [ 642.222477][T14308] ? __wake_up+0x3f/0x60 [ 642.222510][T14308] ? release_task+0xc29/0x1ab0 [ 642.222552][T14308] release_task+0x1560/0x1ab0 [ 642.222598][T14308] ? __pfx_release_task+0x10/0x10 [ 642.222633][T14308] ? do_raw_spin_lock+0x128/0x260 [ 642.222674][T14308] ? find_held_lock+0x2b/0x80 [ 642.222697][T14308] ? __wake_up+0x3f/0x60 [ 642.222725][T14308] ? __wake_up+0x3f/0x60 [ 642.222758][T14308] ? rcu_is_watching+0x12/0xc0 [ 642.222803][T14308] do_exit+0x12a7/0x2aa0 [ 642.222844][T14308] ? __pfx_do_exit+0x10/0x10 [ 642.222878][T14308] ? do_raw_spin_lock+0x128/0x260 [ 642.222917][T14308] ? find_held_lock+0x2b/0x80 [ 642.222940][T14308] ? get_signal+0x7e0/0x21e0 [ 642.222971][T14308] do_group_exit+0xd5/0x2a0 [ 642.223010][T14308] get_signal+0x1ec7/0x21e0 [ 642.223049][T14308] ? __pfx_get_signal+0x10/0x10 [ 642.223078][T14308] ? do_futex+0x192/0x350 [ 642.223118][T14308] arch_do_signal_or_restart+0x91/0x770 [ 642.223154][T14308] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 642.223197][T14308] ? __pfx___x64_sys_futex+0x10/0x10 [ 642.223240][T14308] exit_to_user_mode_loop+0x86/0x4a0 [ 642.223278][T14308] do_syscall_64+0x668/0xf80 [ 642.223309][T14308] ? clear_bhb_loop+0x40/0x90 [ 642.223343][T14308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.223371][T14308] RIP: 0033:0x7ff59419c799 [ 642.223393][T14308] Code: Unable to access opcode bytes at 0x7ff59419c76f. [ 642.223405][T14308] RSP: 002b:00007ff5923f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 642.223431][T14308] RAX: fffffffffffffe00 RBX: 00007ff594415fa8 RCX: 00007ff59419c799 [ 642.223449][T14308] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff594415fa8 [ 642.223474][T14308] RBP: 00007ff594415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 642.223490][T14308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 642.223506][T14308] R13: 00007ff594416038 R14: 00007ffda5a208e0 R15: 00007ffda5a209c8 [ 642.223542][T14308] [ 643.282679][T14322] random: crng reseeded on system resumption [ 643.322149][T14324] netlink: 'syz.1.1807': attribute type 10 has an invalid length. [ 643.330037][T14324] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1807'. [ 644.360959][T14342] FAULT_INJECTION: forcing a failure. [ 644.360959][T14342] name failslab, interval 1, probability 0, space 0, times 0 [ 644.468357][T14342] CPU: 0 UID: 0 PID: 14342 Comm: syz.3.1811 Tainted: G U L syzkaller #0 PREEMPT(full) [ 644.468401][T14342] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 644.468410][T14342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 644.468426][T14342] Call Trace: [ 644.468433][T14342] [ 644.468443][T14342] dump_stack_lvl+0x100/0x190 [ 644.468485][T14342] should_fail_ex.cold+0x5/0xa [ 644.468513][T14342] should_failslab+0xc2/0x120 [ 644.468537][T14342] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 644.468576][T14342] ? __proc_create+0x2cb/0x8c0 [ 644.468621][T14342] __proc_create+0x2cb/0x8c0 [ 644.468660][T14342] ? __pfx___proc_create+0x10/0x10 [ 644.468703][T14342] ? _raw_write_unlock+0x28/0x50 [ 644.468729][T14342] ? proc_register+0x559/0x8a0 [ 644.468771][T14342] proc_create_reg+0x75/0x170 [ 644.468814][T14342] proc_create_data+0x86/0x110 [ 644.468853][T14342] ? __pfx_proc_create_data+0x10/0x10 [ 644.468894][T14342] ? cache_register_net+0x137/0x5e0 [ 644.468926][T14342] ? cache_register_net+0x137/0x5e0 [ 644.468963][T14342] cache_register_net+0x25a/0x5e0 [ 644.468997][T14342] nfsd_idmap_init+0xb6/0x250 [ 644.469024][T14342] ? __pfx_nfsd_net_init+0x10/0x10 [ 644.469062][T14342] nfsd_net_init+0x69/0x3d0 [ 644.469099][T14342] ? __pfx_nfsd_net_init+0x10/0x10 [ 644.469136][T14342] ops_init+0x1e2/0x5f0 [ 644.469169][T14342] setup_net+0x118/0x3a0 [ 644.469200][T14342] ? __pfx_setup_net+0x10/0x10 [ 644.469228][T14342] ? lockdep_init_map_type+0x5c/0x250 [ 644.469263][T14342] ? mutex_init_lockep+0x110/0x150 [ 644.469324][T14342] copy_net_ns+0x46f/0x7c0 [ 644.469361][T14342] create_new_namespaces+0x3ea/0xac0 [ 644.469395][T14342] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 644.469424][T14342] ksys_unshare+0x473/0xad0 [ 644.469457][T14342] ? __pfx_ksys_unshare+0x10/0x10 [ 644.469500][T14342] __x64_sys_unshare+0x31/0x40 [ 644.469530][T14342] do_syscall_64+0x106/0xf80 [ 644.469559][T14342] ? clear_bhb_loop+0x40/0x90 [ 644.469589][T14342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.469615][T14342] RIP: 0033:0x7ff59419c799 [ 644.469636][T14342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 644.469660][T14342] RSP: 002b:00007ff5923d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 644.469684][T14342] RAX: ffffffffffffffda RBX: 00007ff594416090 RCX: 00007ff59419c799 [ 644.469700][T14342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 644.469715][T14342] RBP: 00007ff594232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 644.469730][T14342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 644.469745][T14342] R13: 00007ff594416128 R14: 00007ff594416090 R15: 00007ffda5a209c8 [ 644.469777][T14342] [ 647.310764][T11730] Bluetooth: hci5: command 0x0406 tx timeout [ 647.624619][T14378] random: crng reseeded on system resumption [ 648.151360][T14390] FAULT_INJECTION: forcing a failure. [ 648.151360][T14390] name failslab, interval 1, probability 0, space 0, times 0 [ 648.255805][T14390] CPU: 1 UID: 0 PID: 14390 Comm: syz.3.1823 Tainted: G U L syzkaller #0 PREEMPT(full) [ 648.255856][T14390] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 648.255868][T14390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 648.255886][T14390] Call Trace: [ 648.255895][T14390] [ 648.255906][T14390] dump_stack_lvl+0x100/0x190 [ 648.255956][T14390] should_fail_ex.cold+0x5/0xa [ 648.255989][T14390] should_failslab+0xc2/0x120 [ 648.256017][T14390] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 648.256059][T14390] ? __proc_create+0x2cb/0x8c0 [ 648.256109][T14390] __proc_create+0x2cb/0x8c0 [ 648.256153][T14390] ? __pfx___proc_create+0x10/0x10 [ 648.256201][T14390] ? _raw_write_unlock+0x28/0x50 [ 648.256232][T14390] ? proc_register+0x559/0x8a0 [ 648.256279][T14390] proc_create_reg+0x75/0x170 [ 648.256338][T14390] proc_create_data+0x86/0x110 [ 648.256397][T14390] ? __pfx_proc_create_data+0x10/0x10 [ 648.256444][T14390] ? cache_register_net+0x137/0x5e0 [ 648.256480][T14390] ? cache_register_net+0x137/0x5e0 [ 648.256524][T14390] cache_register_net+0x25a/0x5e0 [ 648.256564][T14390] nfsd_idmap_init+0x16e/0x250 [ 648.256595][T14390] ? __pfx_nfsd_net_init+0x10/0x10 [ 648.256637][T14390] nfsd_net_init+0x69/0x3d0 [ 648.256680][T14390] ? __pfx_nfsd_net_init+0x10/0x10 [ 648.256722][T14390] ops_init+0x1e2/0x5f0 [ 648.256760][T14390] setup_net+0x118/0x3a0 [ 648.256794][T14390] ? __pfx_setup_net+0x10/0x10 [ 648.256827][T14390] ? lockdep_init_map_type+0x5c/0x250 [ 648.256866][T14390] ? mutex_init_lockep+0x110/0x150 [ 648.256910][T14390] copy_net_ns+0x46f/0x7c0 [ 648.256952][T14390] create_new_namespaces+0x3ea/0xac0 [ 648.256989][T14390] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 648.257022][T14390] ksys_unshare+0x473/0xad0 [ 648.257067][T14390] ? __pfx_ksys_unshare+0x10/0x10 [ 648.257118][T14390] __x64_sys_unshare+0x31/0x40 [ 648.257153][T14390] do_syscall_64+0x106/0xf80 [ 648.257185][T14390] ? clear_bhb_loop+0x40/0x90 [ 648.257221][T14390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.257250][T14390] RIP: 0033:0x7ff59419c799 [ 648.257274][T14390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.257307][T14390] RSP: 002b:00007ff5923b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 648.257335][T14390] RAX: ffffffffffffffda RBX: 00007ff594416180 RCX: 00007ff59419c799 [ 648.257354][T14390] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 648.257371][T14390] RBP: 00007ff594232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 648.257388][T14390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 648.257404][T14390] R13: 00007ff594416218 R14: 00007ff594416180 R15: 00007ffda5a209c8 [ 648.257442][T14390] [ 650.162012][T14419] netlink: 'syz.4.1831': attribute type 10 has an invalid length. [ 650.162048][T14419] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1831'. [ 650.613521][T14423] random: crng reseeded on system resumption [ 651.379520][T14432] zswap: compressor not available [ 652.573164][T14456] FAULT_INJECTION: forcing a failure. [ 652.573164][T14456] name failslab, interval 1, probability 0, space 0, times 0 [ 652.591435][T14456] CPU: 0 UID: 0 PID: 14456 Comm: syz.4.1839 Tainted: G U L syzkaller #0 PREEMPT(full) [ 652.591490][T14456] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 652.591504][T14456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 652.591524][T14456] Call Trace: [ 652.591534][T14456] [ 652.591547][T14456] dump_stack_lvl+0x100/0x190 [ 652.591604][T14456] should_fail_ex.cold+0x5/0xa [ 652.591642][T14456] ? ops_init+0x77/0x5f0 [ 652.591681][T14456] should_failslab+0xc2/0x120 [ 652.591716][T14456] __kmalloc_noprof+0xe0/0x850 [ 652.591776][T14456] ? nf_register_net_hook+0xe2/0x170 [ 652.591827][T14456] ops_init+0x77/0x5f0 [ 652.591872][T14456] setup_net+0x118/0x3a0 [ 652.591914][T14456] ? __pfx_setup_net+0x10/0x10 [ 652.591953][T14456] ? lockdep_init_map_type+0x5c/0x250 [ 652.592000][T14456] ? mutex_init_lockep+0x110/0x150 [ 652.592054][T14456] copy_net_ns+0x46f/0x7c0 [ 652.592105][T14456] create_new_namespaces+0x3ea/0xac0 [ 652.592150][T14456] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 652.592190][T14456] ksys_unshare+0x473/0xad0 [ 652.592235][T14456] ? __pfx_ksys_unshare+0x10/0x10 [ 652.592294][T14456] __x64_sys_unshare+0x31/0x40 [ 652.592336][T14456] do_syscall_64+0x106/0xf80 [ 652.592374][T14456] ? clear_bhb_loop+0x40/0x90 [ 652.592417][T14456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.592451][T14456] RIP: 0033:0x7f4094f9c799 [ 652.592478][T14456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 652.592513][T14456] RSP: 002b:00007f4095daf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 652.592547][T14456] RAX: ffffffffffffffda RBX: 00007f4095216180 RCX: 00007f4094f9c799 [ 652.592569][T14456] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 652.592590][T14456] RBP: 00007f4095032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 652.592611][T14456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 652.592632][T14456] R13: 00007f4095216218 R14: 00007f4095216180 R15: 00007ffdfe39ae88 [ 652.592678][T14456] [ 654.410537][T14474] netlink: 'syz.3.1843': attribute type 10 has an invalid length. [ 654.410634][T14474] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1843'. [ 657.747238][T14516] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input53 [ 658.975586][T14530] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input54 [ 659.167991][T14540] FAULT_INJECTION: forcing a failure. [ 659.167991][T14540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 659.190205][T14540] CPU: 0 UID: 0 PID: 14540 Comm: syz.4.1860 Tainted: G U L syzkaller #0 PREEMPT(full) [ 659.190261][T14540] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 659.190274][T14540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 659.190294][T14540] Call Trace: [ 659.190304][T14540] [ 659.190317][T14540] dump_stack_lvl+0x100/0x190 [ 659.190374][T14540] should_fail_ex.cold+0x5/0xa [ 659.190412][T14540] _copy_to_user+0x32/0xd0 [ 659.190471][T14540] msr_io+0x3c4/0x480 [ 659.190504][T14540] ? __pfx_do_get_feature_msr+0x10/0x10 [ 659.190552][T14540] ? __pfx_msr_io+0x10/0x10 [ 659.190600][T14540] kvm_arch_dev_ioctl+0x487/0x770 [ 659.190639][T14540] ? __pfx_kvm_arch_dev_ioctl+0x10/0x10 [ 659.190686][T14540] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 659.190747][T14540] ? do_vfs_ioctl+0x226/0x13e0 [ 659.190798][T14540] kvm_dev_ioctl+0x73a/0x1a50 [ 659.190842][T14540] ? find_held_lock+0x2b/0x80 [ 659.190872][T14540] ? __fget_files+0x215/0x3d0 [ 659.190924][T14540] ? hook_file_ioctl_common+0x146/0x410 [ 659.190977][T14540] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 659.191024][T14540] ? __fget_files+0x21f/0x3d0 [ 659.191085][T14540] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 659.191127][T14540] __x64_sys_ioctl+0x18e/0x210 [ 659.191187][T14540] do_syscall_64+0x106/0xf80 [ 659.191226][T14540] ? clear_bhb_loop+0x40/0x90 [ 659.191269][T14540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.191303][T14540] RIP: 0033:0x7f4094f9c799 [ 659.191330][T14540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.191366][T14540] RSP: 002b:00007f4095df1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 659.191401][T14540] RAX: ffffffffffffffda RBX: 00007f4095215fa0 RCX: 00007f4094f9c799 [ 659.191424][T14540] RDX: 0000200000000040 RSI: 00000000c008ae88 RDI: 0000000000000008 [ 659.191446][T14540] RBP: 00007f4095032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 659.191466][T14540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 659.191485][T14540] R13: 00007f4095216038 R14: 00007f4095215fa0 R15: 00007ffdfe39ae88 [ 659.191530][T14540] [ 663.133296][T14566] Process accounting paused [ 663.416460][T14587] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input55 [ 664.125285][T14593] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input56 [ 666.277093][T14629] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1880'. [ 666.293880][T14629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.376344][T14629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 667.540539][T14645] openvswitch: HfR: Dropping previously announced user features [ 667.686010][T14647] openvswitch: HfR: Dropping previously announced user features [ 668.112688][T14660] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 668.685808][T14671] mkiss: ax0: crc mode is auto. [ 668.872708][T14679] netlink: 'syz.3.1889': attribute type 10 has an invalid length. [ 668.872744][T14679] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1889'. [ 669.680983][T14691] random: crng reseeded on system resumption [ 670.487425][T14706] openvswitch: HfR: Dropping previously announced user features [ 671.421218][T14726] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input57 [ 672.354458][T14732] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input58 [ 674.459039][T14757] netlink: 'syz.1.1908': attribute type 10 has an invalid length. [ 674.467331][T14757] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1908'. [ 676.536658][T14797] openvswitch: HfR: Dropping previously announced user features [ 679.325341][T14845] openvswitch: HfR: Dropping previously announced user features [ 680.421159][T14867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1933'. [ 681.290223][ T30] audit: type=1800 audit(4294967423.690:18): pid=14872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1939" name="dbroot" dev="configfs" ino=261156 res=0 errno=0 [ 681.869113][T14882] netlink: 'syz.4.1940': attribute type 10 has an invalid length. [ 681.869147][T14882] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1940'. [ 684.354429][T14927] raw_sendmsg: syz.2.1950 forgot to set AF_INET. Fix it! [ 684.845538][T14933] HfR: entered promiscuous mode [ 685.213324][T14939] netlink: 'syz.3.1955': attribute type 10 has an invalid length. [ 685.213360][T14939] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1955'. [ 686.250687][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.257082][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.591910][T14957] FAULT_INJECTION: forcing a failure. [ 686.591910][T14957] name failslab, interval 1, probability 0, space 0, times 0 [ 686.740266][T14957] CPU: 1 UID: 0 PID: 14957 Comm: syz.3.1958 Tainted: G U L syzkaller #0 PREEMPT(full) [ 686.740322][T14957] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 686.740334][T14957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 686.740355][T14957] Call Trace: [ 686.740367][T14957] [ 686.740380][T14957] dump_stack_lvl+0x100/0x190 [ 686.740446][T14957] should_fail_ex.cold+0x5/0xa [ 686.740485][T14957] ? ops_init+0x77/0x5f0 [ 686.740524][T14957] should_failslab+0xc2/0x120 [ 686.740556][T14957] __kmalloc_noprof+0xe0/0x850 [ 686.740605][T14957] ? nf_register_net_hook+0xe2/0x170 [ 686.740653][T14957] ops_init+0x77/0x5f0 [ 686.740699][T14957] setup_net+0x118/0x3a0 [ 686.740742][T14957] ? __pfx_setup_net+0x10/0x10 [ 686.740781][T14957] ? lockdep_init_map_type+0x5c/0x250 [ 686.740829][T14957] ? mutex_init_lockep+0x110/0x150 [ 686.740882][T14957] copy_net_ns+0x46f/0x7c0 [ 686.740932][T14957] create_new_namespaces+0x3ea/0xac0 [ 686.740989][T14957] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 686.741031][T14957] ksys_unshare+0x473/0xad0 [ 686.741079][T14957] ? __pfx_ksys_unshare+0x10/0x10 [ 686.741139][T14957] __x64_sys_unshare+0x31/0x40 [ 686.741182][T14957] do_syscall_64+0x106/0xf80 [ 686.741222][T14957] ? clear_bhb_loop+0x40/0x90 [ 686.741265][T14957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.741300][T14957] RIP: 0033:0x7ff59419c799 [ 686.741329][T14957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.741363][T14957] RSP: 002b:00007ff5923b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 686.741397][T14957] RAX: ffffffffffffffda RBX: 00007ff594416180 RCX: 00007ff59419c799 [ 686.741420][T14957] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 686.741441][T14957] RBP: 00007ff594232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 686.741462][T14957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 686.741483][T14957] R13: 00007ff594416218 R14: 00007ff594416180 R15: 00007ffda5a209c8 [ 686.741527][T14957] [ 689.239335][T14972] netlink: 4128 bytes leftover after parsing attributes in process `syz.3.1960'. [ 689.988259][T14992] vhci_hcd vhci_hcd.1: invalid port number 255 [ 690.018239][T14992] vhci_hcd vhci_hcd.1: default hub control req: 600d v002b i00ff l1 [ 690.894306][T15004] openvswitch: HfR: Dropping previously announced user features [ 691.119060][T15008] FAULT_INJECTION: forcing a failure. [ 691.119060][T15008] name failslab, interval 1, probability 0, space 0, times 0 [ 691.211089][T15008] CPU: 1 UID: 0 PID: 15008 Comm: syz.2.1969 Tainted: G U L syzkaller #0 PREEMPT(full) [ 691.211145][T15008] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 691.211158][T15008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 691.211178][T15008] Call Trace: [ 691.211188][T15008] [ 691.211201][T15008] dump_stack_lvl+0x100/0x190 [ 691.211259][T15008] should_fail_ex.cold+0x5/0xa [ 691.211299][T15008] should_failslab+0xc2/0x120 [ 691.211333][T15008] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 691.211384][T15008] ? __proc_create+0x2cb/0x8c0 [ 691.211444][T15008] __proc_create+0x2cb/0x8c0 [ 691.211502][T15008] ? __pfx___proc_create+0x10/0x10 [ 691.211564][T15008] ? _raw_write_unlock+0x28/0x50 [ 691.211609][T15008] proc_create_reg+0x75/0x170 [ 691.211669][T15008] proc_create_data+0x86/0x110 [ 691.211726][T15008] ? __pfx_proc_create_data+0x10/0x10 [ 691.211781][T15008] ? cache_register_net+0x137/0x5e0 [ 691.211825][T15008] ? cache_register_net+0x137/0x5e0 [ 691.211878][T15008] cache_register_net+0x1e0/0x5e0 [ 691.211926][T15008] nfsd_idmap_init+0xb6/0x250 [ 691.211965][T15008] ? __pfx_nfsd_net_init+0x10/0x10 [ 691.212028][T15008] nfsd_net_init+0x69/0x3d0 [ 691.212080][T15008] ? __pfx_nfsd_net_init+0x10/0x10 [ 691.212131][T15008] ops_init+0x1e2/0x5f0 [ 691.212178][T15008] setup_net+0x118/0x3a0 [ 691.212221][T15008] ? __pfx_setup_net+0x10/0x10 [ 691.212260][T15008] ? lockdep_init_map_type+0x5c/0x250 [ 691.212308][T15008] ? mutex_init_lockep+0x110/0x150 [ 691.212363][T15008] copy_net_ns+0x46f/0x7c0 [ 691.212414][T15008] create_new_namespaces+0x3ea/0xac0 [ 691.212460][T15008] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 691.212508][T15008] ksys_unshare+0x473/0xad0 [ 691.212563][T15008] ? __pfx_ksys_unshare+0x10/0x10 [ 691.212622][T15008] __x64_sys_unshare+0x31/0x40 [ 691.212664][T15008] do_syscall_64+0x106/0xf80 [ 691.212701][T15008] ? clear_bhb_loop+0x40/0x90 [ 691.212842][T15008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.212889][T15008] RIP: 0033:0x7f6a50f9c799 [ 691.212921][T15008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.212956][T15008] RSP: 002b:00007f6a51f21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 691.212990][T15008] RAX: ffffffffffffffda RBX: 00007f6a51216090 RCX: 00007f6a50f9c799 [ 691.213012][T15008] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 691.213031][T15008] RBP: 00007f6a51032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 691.213051][T15008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 691.213071][T15008] R13: 00007f6a51216128 R14: 00007f6a51216090 R15: 00007ffd4eb37988 [ 691.213116][T15008] [ 693.288730][T15029] Process accounting resumed [ 695.260591][T15066] openvswitch: HfR: Dropping previously announced user features [ 696.081586][T15075] netlink: 'syz.3.1983': attribute type 10 has an invalid length. [ 696.081793][T15075] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1983'. [ 700.471065][T15127] random: crng reseeded on system resumption [ 700.903821][T15135] netlink: 'syz.1.1994': attribute type 10 has an invalid length. [ 700.958992][T15135] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1994'. [ 700.979043][T15122] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input59 [ 701.393909][T15142] openvswitch: HfR: Dropping previously announced user features [ 701.620408][T15125] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input60 [ 705.021922][T15173] random: crng reseeded on system resumption [ 706.263337][T15196] netlink: 'syz.2.2006': attribute type 23 has an invalid length. [ 707.106325][T15204] HfR: entered promiscuous mode [ 708.098919][T15226] netlink: 'syz.3.2011': attribute type 10 has an invalid length. [ 708.098986][T15226] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2011'. [ 709.077793][T15239] netlink: 'syz.4.2012': attribute type 10 has an invalid length. [ 709.077830][T15239] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2012'. [ 710.736618][T15264] openvswitch: HfR: Dropping previously announced user features [ 713.786307][T15315] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input61 [ 713.925411][T15318] openvswitch: HfR: Dropping previously announced user features [ 714.360358][T15326] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input62 [ 717.621361][T15359] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2037'. [ 718.162163][T15363] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2039'. [ 718.535165][T15363] hsr_slave_0 (unregistering): left promiscuous mode [ 718.712309][T15372] openvswitch: HfR: Dropping previously announced user features [ 719.401764][T15370] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2040'. [ 724.432459][T15465] Process accounting paused [ 725.635040][T15489] openvswitch: HfR: Dropping previously announced user features [ 725.712979][T15491] openvswitch: HfR: Dropping previously announced user features [ 725.740571][T15491] FAULT_INJECTION: forcing a failure. [ 725.740571][T15491] name fail_futex, interval 1, probability 0, space 0, times 0 [ 725.813495][T15491] CPU: 1 UID: 0 PID: 15491 Comm: syz.2.2067 Tainted: G U L syzkaller #0 PREEMPT(full) [ 725.813552][T15491] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 725.813566][T15491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 725.813586][T15491] Call Trace: [ 725.813597][T15491] [ 725.813610][T15491] dump_stack_lvl+0x100/0x190 [ 725.813666][T15491] should_fail_ex.cold+0x5/0xa [ 725.813706][T15491] get_futex_key+0x1d2/0x1620 [ 725.813753][T15491] ? __pfx_get_futex_key+0x10/0x10 [ 725.813797][T15491] ? __pfx____sys_sendmsg+0x10/0x10 [ 725.813857][T15491] futex_wake+0xea/0x530 [ 725.813911][T15491] ? __pfx_futex_wake+0x10/0x10 [ 725.813981][T15491] do_futex+0x32b/0x350 [ 725.814026][T15491] ? __pfx_do_futex+0x10/0x10 [ 725.814068][T15491] ? fput+0x79/0x100 [ 725.814104][T15491] ? __sys_sendmsg+0x18f/0x220 [ 725.814147][T15491] __x64_sys_futex+0x34f/0x4d0 [ 725.814198][T15491] ? __pfx___x64_sys_futex+0x10/0x10 [ 725.814269][T15491] do_syscall_64+0x106/0xf80 [ 725.814308][T15491] ? clear_bhb_loop+0x40/0x90 [ 725.814352][T15491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.814388][T15491] RIP: 0033:0x7f6a50f9c799 [ 725.814416][T15491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 725.814450][T15491] RSP: 002b:00007f6a51f420e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 725.814483][T15491] RAX: ffffffffffffffda RBX: 00007f6a51215fa8 RCX: 00007f6a50f9c799 [ 725.814507][T15491] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6a51215fac [ 725.814528][T15491] RBP: 00007f6a51215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 725.814548][T15491] R10: 0000000000000034 R11: 0000000000000246 R12: 0000000000000000 [ 725.814568][T15491] R13: 00007f6a51216038 R14: 00007ffd4eb378a0 R15: 00007ffd4eb37988 [ 725.814611][T15491] [ 727.532411][T15516] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2074'. [ 727.587262][T15516] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2074'. [ 727.874757][T15524] random: crng reseeded on system resumption [ 728.466806][T15533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2079'. [ 728.506692][T15533] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.537844][T15533] bridge_slave_1 (unregistering): left allmulticast mode [ 728.566012][T15533] bridge_slave_1 (unregistering): left promiscuous mode [ 728.597929][T15533] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.061772][T15542] FAULT_INJECTION: forcing a failure. [ 729.061772][T15542] name failslab, interval 1, probability 0, space 0, times 0 [ 729.110438][T15542] CPU: 1 UID: 0 PID: 15542 Comm: syz.2.2080 Tainted: G U L syzkaller #0 PREEMPT(full) [ 729.110507][T15542] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 729.110522][T15542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 729.110543][T15542] Call Trace: [ 729.110554][T15542] [ 729.110567][T15542] dump_stack_lvl+0x100/0x190 [ 729.110629][T15542] should_fail_ex.cold+0x5/0xa [ 729.110670][T15542] ? ops_init+0x77/0x5f0 [ 729.110712][T15542] should_failslab+0xc2/0x120 [ 729.110748][T15542] __kmalloc_noprof+0xe0/0x850 [ 729.110809][T15542] ops_init+0x77/0x5f0 [ 729.110856][T15542] setup_net+0x118/0x3a0 [ 729.110900][T15542] ? __pfx_setup_net+0x10/0x10 [ 729.110952][T15542] ? lockdep_init_map_type+0x5c/0x250 [ 729.111007][T15542] ? mutex_init_lockep+0x110/0x150 [ 729.111064][T15542] copy_net_ns+0x46f/0x7c0 [ 729.111117][T15542] create_new_namespaces+0x3ea/0xac0 [ 729.111166][T15542] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 729.111209][T15542] ksys_unshare+0x473/0xad0 [ 729.111255][T15542] ? __pfx_ksys_unshare+0x10/0x10 [ 729.111315][T15542] __x64_sys_unshare+0x31/0x40 [ 729.111359][T15542] do_syscall_64+0x106/0xf80 [ 729.111398][T15542] ? clear_bhb_loop+0x40/0x90 [ 729.111443][T15542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.111481][T15542] RIP: 0033:0x7f6a50f9c799 [ 729.111509][T15542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 729.111543][T15542] RSP: 002b:00007f6a51f21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 729.111574][T15542] RAX: ffffffffffffffda RBX: 00007f6a51216090 RCX: 00007f6a50f9c799 [ 729.111623][T15542] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 729.111645][T15542] RBP: 00007f6a51032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 729.111667][T15542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 729.111688][T15542] R13: 00007f6a51216128 R14: 00007f6a51216090 R15: 00007ffd4eb37988 [ 729.111731][T15542] [ 729.386595][T15543] FAULT_INJECTION: forcing a failure. [ 729.386595][T15543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 729.400614][T15543] CPU: 1 UID: 0 PID: 15543 Comm: syz.4.2082 Tainted: G U L syzkaller #0 PREEMPT(full) [ 729.400678][T15543] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 729.400690][T15543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 729.400708][T15543] Call Trace: [ 729.400718][T15543] [ 729.400730][T15543] dump_stack_lvl+0x100/0x190 [ 729.400785][T15543] should_fail_ex.cold+0x5/0xa [ 729.400822][T15543] _copy_from_user+0x2e/0xd0 [ 729.400874][T15543] kstrtouint_from_user+0xd6/0x1d0 [ 729.400915][T15543] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 729.400953][T15543] ? __lock_acquire+0x4a5/0x2630 [ 729.401000][T15543] ? lock_acquire+0x1cf/0x380 [ 729.401050][T15543] proc_fail_nth_write+0x83/0x220 [ 729.401087][T15543] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 729.401135][T15543] vfs_write+0x2aa/0x1070 [ 729.401185][T15543] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 729.401226][T15543] ? __pfx_vfs_write+0x10/0x10 [ 729.401274][T15543] ? __fget_files+0x215/0x3d0 [ 729.401333][T15543] ? __fget_files+0x21f/0x3d0 [ 729.401394][T15543] ksys_write+0x12a/0x250 [ 729.401443][T15543] ? __pfx_ksys_write+0x10/0x10 [ 729.401504][T15543] do_syscall_64+0x106/0xf80 [ 729.401541][T15543] ? clear_bhb_loop+0x40/0x90 [ 729.401582][T15543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.401616][T15543] RIP: 0033:0x7f4094f5cfce [ 729.401644][T15543] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 729.401685][T15543] RSP: 002b:00007f4095df0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 729.401715][T15543] RAX: ffffffffffffffda RBX: 00007f4095df16c0 RCX: 00007f4094f5cfce [ 729.401736][T15543] RDX: 0000000000000001 RSI: 00007f4095df10a0 RDI: 0000000000000004 [ 729.401755][T15543] RBP: 00007f4095df1090 R08: 0000000000000000 R09: 0000000000000000 [ 729.401774][T15543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.401791][T15543] R13: 00007f4095216038 R14: 00007f4095215fa0 R15: 00007ffdfe39ae88 [ 729.401833][T15543] [ 730.330651][T15560] ======================================================= [ 730.330651][T15560] WARNING: The mand mount option has been deprecated and [ 730.330651][T15560] and is ignored by this kernel. Remove the mand [ 730.330651][T15560] option from the mount to silence this warning. [ 730.330651][T15560] ======================================================= [ 731.038916][T15554] delete_channel: no stack [ 731.048112][T15556] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 731.061875][T15556] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 731.078536][T15556] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 731.085526][T15556] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 731.094574][T15556] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 731.843354][T15577] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2088'. [ 732.089429][T15591] netlink: 'syz.1.2092': attribute type 10 has an invalid length. [ 732.097539][T15591] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2092'. [ 732.352472][T15391] Bluetooth: hci3: command 0x0c1a tx timeout [ 733.081220][T15391] Bluetooth: hci1: command 0x0c1a tx timeout [ 733.155679][T15391] Bluetooth: hci5: command 0x0406 tx timeout [ 733.162022][T15391] Bluetooth: hci2: command 0x0c1a tx timeout [ 733.232794][T15614] openvswitch: HfR: Dropping previously announced user features [ 733.242150][T15614] FAULT_INJECTION: forcing a failure. [ 733.242150][T15614] name failslab, interval 1, probability 0, space 0, times 0 [ 733.274232][T15614] CPU: 1 UID: 0 PID: 15614 Comm: syz.4.2097 Tainted: G U L syzkaller #0 PREEMPT(full) [ 733.274289][T15614] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 733.274303][T15614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 733.274323][T15614] Call Trace: [ 733.274336][T15614] [ 733.274348][T15614] dump_stack_lvl+0x100/0x190 [ 733.274406][T15614] should_fail_ex.cold+0x5/0xa [ 733.274448][T15614] should_failslab+0xc2/0x120 [ 733.274482][T15614] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 733.274531][T15614] ? skb_clone+0x190/0x400 [ 733.274589][T15614] skb_clone+0x190/0x400 [ 733.274632][T15614] netlink_deliver_tap+0xaed/0xcc0 [ 733.274685][T15614] netlink_unicast+0x70c/0x870 [ 733.274734][T15614] ? __pfx_netlink_unicast+0x10/0x10 [ 733.274777][T15614] ? __alloc_skb+0x5b7/0x710 [ 733.274814][T15614] ? genl_rcv_msg+0x4be/0x800 [ 733.274875][T15614] netlink_ack+0x655/0xb80 [ 733.274929][T15614] netlink_rcv_skb+0x333/0x420 [ 733.274974][T15614] ? __pfx_genl_rcv_msg+0x10/0x10 [ 733.275026][T15614] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 733.275088][T15614] ? netlink_deliver_tap+0x1ae/0xcc0 [ 733.275136][T15614] genl_rcv+0x28/0x40 [ 733.275179][T15614] netlink_unicast+0x5aa/0x870 [ 733.275228][T15614] ? __pfx_netlink_unicast+0x10/0x10 [ 733.275288][T15614] netlink_sendmsg+0x8b0/0xda0 [ 733.275339][T15614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 733.275380][T15614] ? __import_iovec+0x1d2/0x640 [ 733.275441][T15614] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 733.275494][T15614] ____sys_sendmsg+0xa54/0xc30 [ 733.275546][T15614] ? __pfx_____sys_sendmsg+0x10/0x10 [ 733.275628][T15614] ? try_to_wake_up+0x644/0x1a80 [ 733.275672][T15614] ___sys_sendmsg+0x190/0x1e0 [ 733.275732][T15614] ? __pfx____sys_sendmsg+0x10/0x10 [ 733.275785][T15614] ? futex_private_hash_put+0x107/0x1c0 [ 733.275876][T15614] __sys_sendmsg+0x170/0x220 [ 733.275919][T15614] ? __pfx___sys_sendmsg+0x10/0x10 [ 733.275958][T15614] ? __x64_sys_futex+0x34f/0x4d0 [ 733.276029][T15614] do_syscall_64+0x106/0xf80 [ 733.276069][T15614] ? clear_bhb_loop+0x40/0x90 [ 733.276112][T15614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.276154][T15614] RIP: 0033:0x7f4094f9c799 [ 733.276182][T15614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.276216][T15614] RSP: 002b:00007f4095df1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 733.276249][T15614] RAX: ffffffffffffffda RBX: 00007f4095215fa0 RCX: 00007f4094f9c799 [ 733.276273][T15614] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000009 [ 733.276294][T15614] RBP: 00007f4095032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 733.276315][T15614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 733.276335][T15614] R13: 00007f4095216038 R14: 00007f4095215fa0 R15: 00007ffdfe39ae88 [ 733.276380][T15614] [ 735.040358][T15629] openvswitch: HfR: Dropping previously announced user features [ 735.230462][T15627] Bluetooth: hci5: command 0x0406 tx timeout [ 736.867574][T15650] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 736.910232][T15385] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 737.124951][T15650] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 737.230169][T15650] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 737.479322][T15655] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 1: bad block bitmap checksum [ 738.114547][T15627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 738.124939][T15627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 738.136156][T15627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 738.150245][T15627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 738.170298][T15627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 738.992464][T15678] FAULT_INJECTION: forcing a failure. [ 738.992464][T15678] name failslab, interval 1, probability 0, space 0, times 0 [ 739.124752][T15678] CPU: 1 UID: 0 PID: 15678 Comm: syz.2.2111 Tainted: G U L syzkaller #0 PREEMPT(full) [ 739.124812][T15678] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 739.124826][T15678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 739.124846][T15678] Call Trace: [ 739.124857][T15678] [ 739.124870][T15678] dump_stack_lvl+0x100/0x190 [ 739.124929][T15678] should_fail_ex.cold+0x5/0xa [ 739.124970][T15678] should_failslab+0xc2/0x120 [ 739.125005][T15678] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 739.125056][T15678] ? __proc_create+0x2cb/0x8c0 [ 739.125119][T15678] __proc_create+0x2cb/0x8c0 [ 739.125196][T15678] ? __pfx___proc_create+0x10/0x10 [ 739.125259][T15678] ? _raw_write_unlock+0x28/0x50 [ 739.125297][T15678] ? proc_register+0x559/0x8a0 [ 739.125359][T15678] proc_create_reg+0x75/0x170 [ 739.125419][T15678] proc_create_data+0x86/0x110 [ 739.125474][T15678] ? __pfx_proc_create_data+0x10/0x10 [ 739.125531][T15678] ? cache_register_net+0x137/0x5e0 [ 739.125576][T15678] ? cache_register_net+0x137/0x5e0 [ 739.125630][T15678] cache_register_net+0x2d6/0x5e0 [ 739.125679][T15678] nfsd_idmap_init+0xb6/0x250 [ 739.125718][T15678] ? __pfx_nfsd_net_init+0x10/0x10 [ 739.125769][T15678] nfsd_net_init+0x69/0x3d0 [ 739.125821][T15678] ? __pfx_nfsd_net_init+0x10/0x10 [ 739.125872][T15678] ops_init+0x1e2/0x5f0 [ 739.125920][T15678] setup_net+0x118/0x3a0 [ 739.125964][T15678] ? __pfx_setup_net+0x10/0x10 [ 739.126004][T15678] ? lockdep_init_map_type+0x5c/0x250 [ 739.126052][T15678] ? mutex_init_lockep+0x110/0x150 [ 739.126107][T15678] copy_net_ns+0x46f/0x7c0 [ 739.126159][T15678] create_new_namespaces+0x3ea/0xac0 [ 739.126215][T15678] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 739.126259][T15678] ksys_unshare+0x473/0xad0 [ 739.126307][T15678] ? __pfx_ksys_unshare+0x10/0x10 [ 739.126368][T15678] __x64_sys_unshare+0x31/0x40 [ 739.126412][T15678] do_syscall_64+0x106/0xf80 [ 739.126452][T15678] ? clear_bhb_loop+0x40/0x90 [ 739.126495][T15678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.126533][T15678] RIP: 0033:0x7f6a50f9c799 [ 739.126562][T15678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 739.126599][T15678] RSP: 002b:00007f6a51f21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 739.126633][T15678] RAX: ffffffffffffffda RBX: 00007f6a51216090 RCX: 00007f6a50f9c799 [ 739.126656][T15678] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 739.126676][T15678] RBP: 00007f6a51032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 739.126697][T15678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 739.126718][T15678] R13: 00007f6a51216128 R14: 00007f6a51216090 R15: 00007ffd4eb37988 [ 739.126763][T15678] [ 740.252804][T15669] chnl_net:caif_netlink_parms(): no params data found [ 740.270849][T15385] Bluetooth: hci0: command tx timeout [ 741.388517][T15669] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.430460][T15669] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.448058][T15669] bridge_slave_0: entered allmulticast mode [ 741.463946][T15669] bridge_slave_0: entered promiscuous mode [ 741.488443][T15669] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.521016][T15669] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.550433][T15669] bridge_slave_1: entered allmulticast mode [ 741.558669][T15669] bridge_slave_1: entered promiscuous mode [ 742.067787][T15669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.294698][T15669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 742.350221][T15385] Bluetooth: hci0: command tx timeout [ 742.589630][T15669] team0: Port device team_slave_0 added [ 742.624515][T15669] team0: Port device team_slave_1 added [ 742.812419][T15730] futex_wake_op: syz.2.2120 tries to shift op by -2048; fix this program [ 742.868479][T15669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.880077][T15669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 742.922157][T15729] 0x000000000001-0x000000020000 : "" [ 742.934251][T15729] ftl_cs: FTL header corrupt! [ 742.959443][T15669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.108527][T15669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.128124][T15669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.218190][T15669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.988127][T15669] hsr_slave_0: entered promiscuous mode [ 744.029546][T15669] hsr_slave_1: entered promiscuous mode [ 744.044790][T15669] debugfs: 'hsr0' already exists in 'hsr' [ 744.051113][T15669] Cannot create hsr debugfs directory [ 744.430983][T15385] Bluetooth: hci0: command tx timeout [ 744.856061][T15749] openvswitch: HfR: Dropping previously announced user features [ 745.137219][T15669] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 745.169898][T15669] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 745.204622][T15669] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 745.252541][T15669] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 745.890414][T15669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.248164][T15669] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.340407][T15396] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.347883][T15396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 746.429334][T15388] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.436711][T15388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 746.510455][T15385] Bluetooth: hci0: command tx timeout [ 747.635544][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.642779][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.019039][T15669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.125306][T15790] random: crng reseeded on system resumption [ 749.571969][T15385] Bluetooth: hci2: unexpected event 0x3e length: 508 > 260 [ 749.572015][T15385] Bluetooth: hci2: unexpected subevent 0x02 length: 507 > 260 [ 749.586861][T15385] Bluetooth: hci2: Dropping invalid advertising data [ 749.594241][T15385] Bluetooth: hci2: unknown advertising packet type: 0xe9 [ 749.923539][T15669] veth0_vlan: entered promiscuous mode [ 750.040464][T15669] veth1_vlan: entered promiscuous mode [ 750.211410][T15669] veth0_macvtap: entered promiscuous mode [ 750.280734][T15669] veth1_macvtap: entered promiscuous mode [ 750.377765][T15818] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2133'. [ 750.463303][T15669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 750.576251][T15669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 750.621369][T15393] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.667238][T15393] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.667322][T15393] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.667361][T15393] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.667619][T15821] openvswitch: HfR: Dropping previously announced user features [ 750.980764][T15393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.989272][T15393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.140228][T15824] openvswitch: HfR: Dropping previously announced user features [ 751.154648][T15395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.182452][T15395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.190946][T15857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2143'. [ 754.518028][T15385] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 754.846711][T15871] Process accounting resumed [ 756.093282][T15887] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2148'. [ 756.501741][T15886] FAULT_INJECTION: forcing a failure. [ 756.501741][T15886] name failslab, interval 1, probability 0, space 0, times 0 [ 756.626161][T15886] CPU: 0 UID: 0 PID: 15886 Comm: syz.5.2150 Tainted: G U L syzkaller #0 PREEMPT(full) [ 756.626220][T15886] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 756.626233][T15886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 756.626254][T15886] Call Trace: [ 756.626267][T15886] [ 756.626281][T15886] dump_stack_lvl+0x100/0x190 [ 756.626341][T15886] should_fail_ex.cold+0x5/0xa [ 756.626382][T15886] should_failslab+0xc2/0x120 [ 756.626416][T15886] __kmalloc_cache_noprof+0x7a/0x6f0 [ 756.626460][T15886] ? kobject_uevent_env+0x263/0x18b0 [ 756.626522][T15886] ? kobject_init_and_add+0x129/0x180 [ 756.626579][T15886] kobject_uevent_env+0x263/0x18b0 [ 756.626644][T15886] rpc_sysfs_client_setup+0x233/0x310 [ 756.626687][T15886] ? __pfx_rpc_sysfs_client_setup+0x10/0x10 [ 756.626740][T15886] rpc_new_client+0x924/0x1360 [ 756.626802][T15886] rpc_create_xprt+0xd9/0x440 [ 756.626856][T15886] rpc_create+0x46e/0x7f0 [ 756.626914][T15886] ? __pfx_rpc_create+0x10/0x10 [ 756.627014][T15886] ? rcu_is_watching+0x12/0xc0 [ 756.627070][T15886] ? trace_contention_end+0x140/0x180 [ 756.627138][T15886] rpcb_create_local_net+0x11b/0x310 [ 756.627188][T15886] ? __pfx_rpcb_create_local_net+0x10/0x10 [ 756.627257][T15886] ? rpcb_create_local+0x1da/0x270 [ 756.627303][T15886] ? rpcb_create_local+0x1da/0x270 [ 756.627359][T15886] rpcb_create_local+0x22d/0x270 [ 756.627409][T15886] svc_bind+0x1e8/0x260 [ 756.627462][T15886] nfsd_create_serv+0x2da/0x4a0 [ 756.627520][T15886] ? __pfx_nfsd_create_serv+0x10/0x10 [ 756.627568][T15886] ? net_generic+0xea/0x2a0 [ 756.627623][T15886] nfsd_svc+0x148/0x840 [ 756.627676][T15886] nfsd_nl_threads_set_doit+0x5b7/0xc60 [ 756.627744][T15886] genl_family_rcv_msg_doit+0x214/0x300 [ 756.627802][T15886] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 756.627856][T15886] ? genl_get_cmd+0x3ef/0x720 [ 756.627915][T15886] ? bpf_lsm_capable+0x9/0x10 [ 756.627950][T15886] ? security_capable+0x80/0x260 [ 756.628005][T15886] genl_rcv_msg+0x560/0x800 [ 756.628062][T15886] ? __pfx_genl_rcv_msg+0x10/0x10 [ 756.628116][T15886] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 756.628192][T15886] netlink_rcv_skb+0x159/0x420 [ 756.628238][T15886] ? __pfx_genl_rcv_msg+0x10/0x10 [ 756.628292][T15886] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 756.628356][T15886] ? netlink_deliver_tap+0x1ae/0xcc0 [ 756.628406][T15886] genl_rcv+0x28/0x40 [ 756.628452][T15886] netlink_unicast+0x5aa/0x870 [ 756.628514][T15886] ? __pfx_netlink_unicast+0x10/0x10 [ 756.628577][T15886] netlink_sendmsg+0x8b0/0xda0 [ 756.628632][T15886] ? __pfx_netlink_sendmsg+0x10/0x10 [ 756.628676][T15886] ? __import_iovec+0x1d2/0x640 [ 756.628737][T15886] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 756.628791][T15886] ____sys_sendmsg+0xa54/0xc30 [ 756.628848][T15886] ? __pfx_____sys_sendmsg+0x10/0x10 [ 756.628907][T15886] ? try_to_wake_up+0x644/0x1a80 [ 756.628952][T15886] ___sys_sendmsg+0x190/0x1e0 [ 756.629008][T15886] ? __pfx____sys_sendmsg+0x10/0x10 [ 756.629062][T15886] ? futex_private_hash_put+0x107/0x1c0 [ 756.629155][T15886] __sys_sendmsg+0x170/0x220 [ 756.629197][T15886] ? __pfx___sys_sendmsg+0x10/0x10 [ 756.629238][T15886] ? __x64_sys_futex+0x34f/0x4d0 [ 756.629310][T15886] do_syscall_64+0x106/0xf80 [ 756.629350][T15886] ? clear_bhb_loop+0x40/0x90 [ 756.629394][T15886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.629431][T15886] RIP: 0033:0x7ff862d9c799 [ 756.629463][T15886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 756.629508][T15886] RSP: 002b:00007ff863c4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 756.629543][T15886] RAX: ffffffffffffffda RBX: 00007ff863016090 RCX: 00007ff862d9c799 [ 756.629568][T15886] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 000000000000000a [ 756.629589][T15886] RBP: 00007ff862e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 756.629610][T15886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 756.629627][T15886] R13: 00007ff863016128 R14: 00007ff863016090 R15: 00007ffc19e52cf8 [ 756.629667][T15886] [ 757.132551][T15886] NFSD: Failed to start, no listeners configured. [ 757.789549][T15903] openvswitch: HfR: Dropping previously announced user features [ 758.483040][T15908] hub 1-0:1.0: USB hub found [ 758.499915][T15908] hub 1-0:1.0: 1 port detected [ 759.314296][T15385] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 764.120694][T15963] netlink: 86 bytes leftover after parsing attributes in process `syz.4.2162'. [ 764.121479][T15963] netlink: 86 bytes leftover after parsing attributes in process `syz.4.2162'. [ 764.122248][T15963] netlink: 86 bytes leftover after parsing attributes in process `syz.4.2162'. [ 764.123249][T15963] netlink: 86 bytes leftover after parsing attributes in process `syz.4.2162'. [ 765.251197][T15976] random: crng reseeded on system resumption [ 765.993852][T15986] FAULT_INJECTION: forcing a failure. [ 765.993852][T15986] name failslab, interval 1, probability 0, space 0, times 0 [ 766.080445][T15986] CPU: 0 UID: 0 PID: 15986 Comm: syz.2.2167 Tainted: G U L syzkaller #0 PREEMPT(full) [ 766.080501][T15986] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 766.080515][T15986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 766.080533][T15986] Call Trace: [ 766.080543][T15986] [ 766.080556][T15986] dump_stack_lvl+0x100/0x190 [ 766.080608][T15986] should_fail_ex.cold+0x5/0xa [ 766.080643][T15986] should_failslab+0xc2/0x120 [ 766.080672][T15986] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 766.080714][T15986] ? skb_clone+0x190/0x400 [ 766.080754][T15986] skb_clone+0x190/0x400 [ 766.080788][T15986] netlink_broadcast_filtered+0xb6a/0xf50 [ 766.080846][T15986] ? __alloc_skb+0x5b7/0x710 [ 766.080876][T15986] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 766.080912][T15986] ? netlink_has_listeners+0x20f/0x430 [ 766.080946][T15986] ? netlink_has_listeners+0x20f/0x430 [ 766.080985][T15986] netlink_broadcast+0x39/0x50 [ 766.081021][T15986] kobject_uevent_env+0xcdd/0x18b0 [ 766.081082][T15986] nfs_netns_sysfs_setup+0x173/0x200 [ 766.081123][T15986] nfs_net_init+0x10a/0x340 [ 766.081161][T15986] ? __pfx_nfs_net_init+0x10/0x10 [ 766.081195][T15986] ops_init+0x1e2/0x5f0 [ 766.081233][T15986] setup_net+0x118/0x3a0 [ 766.081269][T15986] ? __pfx_setup_net+0x10/0x10 [ 766.081301][T15986] ? lockdep_init_map_type+0x5c/0x250 [ 766.081341][T15986] ? mutex_init_lockep+0x110/0x150 [ 766.081386][T15986] copy_net_ns+0x46f/0x7c0 [ 766.081427][T15986] create_new_namespaces+0x3ea/0xac0 [ 766.081465][T15986] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 766.081504][T15986] ksys_unshare+0x473/0xad0 [ 766.081543][T15986] ? __pfx_ksys_unshare+0x10/0x10 [ 766.081592][T15986] __x64_sys_unshare+0x31/0x40 [ 766.081627][T15986] do_syscall_64+0x106/0xf80 [ 766.081659][T15986] ? clear_bhb_loop+0x40/0x90 [ 766.081694][T15986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.081724][T15986] RIP: 0033:0x7f6a50f9c799 [ 766.081750][T15986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.081781][T15986] RSP: 002b:00007f6a51f21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 766.081819][T15986] RAX: ffffffffffffffda RBX: 00007f6a51216090 RCX: 00007f6a50f9c799 [ 766.081840][T15986] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 766.081858][T15986] RBP: 00007f6a51032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 766.081876][T15986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 766.081894][T15986] R13: 00007f6a51216128 R14: 00007f6a51216090 R15: 00007ffd4eb37988 [ 766.081932][T15986] [ 769.944797][T16017] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2171'. [ 770.139877][T16019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2172'. [ 771.070809][T15385] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 771.240151][T15627] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 771.563748][T16032] FAULT_INJECTION: forcing a failure. [ 771.563748][T16032] name failslab, interval 1, probability 0, space 0, times 0 [ 771.622846][T16032] CPU: 1 UID: 0 PID: 16032 Comm: syz.5.2175 Tainted: G U L syzkaller #0 PREEMPT(full) [ 771.622905][T16032] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 771.622919][T16032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 771.622941][T16032] Call Trace: [ 771.622953][T16032] [ 771.622967][T16032] dump_stack_lvl+0x100/0x190 [ 771.623026][T16032] should_fail_ex.cold+0x5/0xa [ 771.623067][T16032] should_failslab+0xc2/0x120 [ 771.623102][T16032] __kmalloc_cache_noprof+0x7a/0x6f0 [ 771.623147][T16032] ? device_add+0xd3a/0x1950 [ 771.623211][T16032] device_add+0xd3a/0x1950 [ 771.623265][T16032] ? dev_set_name+0xc7/0x100 [ 771.623308][T16032] ? __pfx_dev_set_name+0x10/0x10 [ 771.623350][T16032] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 771.623410][T16032] ? __pfx_device_add+0x10/0x10 [ 771.623465][T16032] ? lockdep_init_map_type+0x5c/0x250 [ 771.623512][T16032] ? __init_waitqueue_head+0xca/0x150 [ 771.623575][T16032] netdev_register_kobject+0x1a9/0x3d0 [ 771.623632][T16032] register_netdevice+0x12e0/0x2210 [ 771.623686][T16032] ? __pfx_register_netdevice+0x10/0x10 [ 771.623743][T16032] internal_dev_create+0x2d3/0x520 [ 771.623791][T16032] ovs_vport_add+0x147/0x4d0 [ 771.623832][T16032] new_vport+0x16/0x1d0 [ 771.623890][T16032] ovs_dp_cmd_new+0x65d/0xdf0 [ 771.623958][T16032] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 771.624026][T16032] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 771.624080][T16032] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 771.624143][T16032] genl_family_rcv_msg_doit+0x214/0x300 [ 771.624199][T16032] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 771.624251][T16032] ? genl_get_cmd+0x3ef/0x720 [ 771.624310][T16032] ? bpf_lsm_capable+0x9/0x10 [ 771.624352][T16032] ? security_capable+0x80/0x260 [ 771.624402][T16032] ? ns_capable+0xd2/0xf0 [ 771.624441][T16032] genl_rcv_msg+0x560/0x800 [ 771.624497][T16032] ? __pfx_genl_rcv_msg+0x10/0x10 [ 771.624549][T16032] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 771.624621][T16032] netlink_rcv_skb+0x159/0x420 [ 771.624666][T16032] ? __pfx_genl_rcv_msg+0x10/0x10 [ 771.624718][T16032] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 771.624781][T16032] ? netlink_deliver_tap+0x1ae/0xcc0 [ 771.624830][T16032] genl_rcv+0x28/0x40 [ 771.624875][T16032] netlink_unicast+0x5aa/0x870 [ 771.624926][T16032] ? __pfx_netlink_unicast+0x10/0x10 [ 771.624989][T16032] netlink_sendmsg+0x8b0/0xda0 [ 771.625042][T16032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 771.625085][T16032] ? __import_iovec+0x1d2/0x640 [ 771.625148][T16032] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 771.625202][T16032] ____sys_sendmsg+0xa54/0xc30 [ 771.625258][T16032] ? __pfx_____sys_sendmsg+0x10/0x10 [ 771.625316][T16032] ? try_to_wake_up+0x644/0x1a80 [ 771.625372][T16032] ___sys_sendmsg+0x190/0x1e0 [ 771.625430][T16032] ? __pfx____sys_sendmsg+0x10/0x10 [ 771.625484][T16032] ? futex_private_hash_put+0x107/0x1c0 [ 771.625577][T16032] __sys_sendmsg+0x170/0x220 [ 771.625620][T16032] ? __pfx___sys_sendmsg+0x10/0x10 [ 771.625659][T16032] ? __x64_sys_futex+0x34f/0x4d0 [ 771.625732][T16032] do_syscall_64+0x106/0xf80 [ 771.625771][T16032] ? clear_bhb_loop+0x40/0x90 [ 771.625816][T16032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.625853][T16032] RIP: 0033:0x7ff862d9c799 [ 771.625885][T16032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.625921][T16032] RSP: 002b:00007ff863c6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 771.625955][T16032] RAX: ffffffffffffffda RBX: 00007ff863015fa0 RCX: 00007ff862d9c799 [ 771.625980][T16032] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000008 [ 771.626000][T16032] RBP: 00007ff862e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 771.626024][T16032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 771.626045][T16032] R13: 00007ff863016038 R14: 00007ff863015fa0 R15: 00007ffc19e52cf8 [ 771.626092][T16032] [ 773.249447][T16037] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 776.186328][T16068] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2182'. [ 776.190812][T16067] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2190'. [ 777.006326][T16075] netlink: 86 bytes leftover after parsing attributes in process `syz.5.2183'. [ 777.050657][T16075] netlink: 86 bytes leftover after parsing attributes in process `syz.5.2183'. [ 777.073768][T16075] netlink: 86 bytes leftover after parsing attributes in process `syz.5.2183'. [ 777.117643][T16075] netlink: 86 bytes leftover after parsing attributes in process `syz.5.2183'. [ 777.141522][T16073] random: crng reseeded on system resumption [ 778.941402][T16090] openvswitch: HfR: Dropping previously announced user features [ 779.010399][T16090] FAULT_INJECTION: forcing a failure. [ 779.010399][T16090] name failslab, interval 1, probability 0, space 0, times 0 [ 779.060641][T16090] CPU: 1 UID: 0 PID: 16090 Comm: syz.4.2186 Tainted: G U L syzkaller #0 PREEMPT(full) [ 779.060703][T16090] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 779.060717][T16090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 779.060739][T16090] Call Trace: [ 779.060751][T16090] [ 779.060765][T16090] dump_stack_lvl+0x100/0x190 [ 779.060833][T16090] should_fail_ex.cold+0x5/0xa [ 779.060875][T16090] should_failslab+0xc2/0x120 [ 779.060912][T16090] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 779.060965][T16090] ? skb_clone+0x190/0x400 [ 779.061013][T16090] skb_clone+0x190/0x400 [ 779.061055][T16090] netlink_deliver_tap+0xaed/0xcc0 [ 779.061108][T16090] netlink_unicast+0x70c/0x870 [ 779.061160][T16090] ? __pfx_netlink_unicast+0x10/0x10 [ 779.061203][T16090] ? __alloc_skb+0x5b7/0x710 [ 779.061240][T16090] ? genl_rcv_msg+0x4be/0x800 [ 779.061301][T16090] netlink_ack+0x655/0xb80 [ 779.061366][T16090] netlink_rcv_skb+0x333/0x420 [ 779.061411][T16090] ? __pfx_genl_rcv_msg+0x10/0x10 [ 779.061463][T16090] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 779.061527][T16090] ? netlink_deliver_tap+0x1ae/0xcc0 [ 779.061575][T16090] genl_rcv+0x28/0x40 [ 779.061620][T16090] netlink_unicast+0x5aa/0x870 [ 779.061675][T16090] ? __pfx_netlink_unicast+0x10/0x10 [ 779.061736][T16090] netlink_sendmsg+0x8b0/0xda0 [ 779.061796][T16090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 779.061839][T16090] ? __import_iovec+0x1d2/0x640 [ 779.061903][T16090] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 779.061956][T16090] ____sys_sendmsg+0xa54/0xc30 [ 779.062010][T16090] ? __pfx_____sys_sendmsg+0x10/0x10 [ 779.062068][T16090] ? try_to_wake_up+0x644/0x1a80 [ 779.062112][T16090] ___sys_sendmsg+0x190/0x1e0 [ 779.062169][T16090] ? __pfx____sys_sendmsg+0x10/0x10 [ 779.062223][T16090] ? futex_private_hash_put+0x107/0x1c0 [ 779.062315][T16090] __sys_sendmsg+0x170/0x220 [ 779.062357][T16090] ? __pfx___sys_sendmsg+0x10/0x10 [ 779.062398][T16090] ? __x64_sys_futex+0x34f/0x4d0 [ 779.062468][T16090] do_syscall_64+0x106/0xf80 [ 779.062509][T16090] ? clear_bhb_loop+0x40/0x90 [ 779.062554][T16090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.062592][T16090] RIP: 0033:0x7f4094f9c799 [ 779.062621][T16090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.062657][T16090] RSP: 002b:00007f4095df1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 779.062692][T16090] RAX: ffffffffffffffda RBX: 00007f4095215fa0 RCX: 00007f4094f9c799 [ 779.062717][T16090] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000009 [ 779.062739][T16090] RBP: 00007f4095032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 779.062759][T16090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.062789][T16090] R13: 00007f4095216038 R14: 00007f4095215fa0 R15: 00007ffdfe39ae88 [ 779.062837][T16090] [ 779.884946][T16096] FAULT_INJECTION: forcing a failure. [ 779.884946][T16096] name failslab, interval 1, probability 0, space 0, times 0 [ 779.937443][T16096] CPU: 1 UID: 0 PID: 16096 Comm: syz.5.2187 Tainted: G U L syzkaller #0 PREEMPT(full) [ 779.937503][T16096] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 779.937517][T16096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 779.937539][T16096] Call Trace: [ 779.937550][T16096] [ 779.937564][T16096] dump_stack_lvl+0x100/0x190 [ 779.937624][T16096] should_fail_ex.cold+0x5/0xa [ 779.937666][T16096] ? sk_prot_alloc+0x10b/0x2a0 [ 779.937727][T16096] should_failslab+0xc2/0x120 [ 779.937763][T16096] __kmalloc_noprof+0xe0/0x850 [ 779.937824][T16096] sk_prot_alloc+0x10b/0x2a0 [ 779.937875][T16096] sk_alloc+0x36/0xe80 [ 779.937912][T16096] packet_create+0x127/0x8e0 [ 779.937968][T16096] __sock_create+0x339/0x860 [ 779.938028][T16096] __sys_socket+0x14d/0x260 [ 779.938082][T16096] ? __pfx___sys_socket+0x10/0x10 [ 779.938147][T16096] __x64_sys_socket+0x72/0xb0 [ 779.938199][T16096] ? lockdep_hardirqs_on+0x78/0x100 [ 779.938239][T16096] do_syscall_64+0x106/0xf80 [ 779.938278][T16096] ? clear_bhb_loop+0x40/0x90 [ 779.938323][T16096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.938359][T16096] RIP: 0033:0x7ff862d9c799 [ 779.938391][T16096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.938427][T16096] RSP: 002b:00007ff863c4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 779.938461][T16096] RAX: ffffffffffffffda RBX: 00007ff863016090 RCX: 00007ff862d9c799 [ 779.938485][T16096] RDX: 0000000000000004 RSI: 0000000000000003 RDI: 0000000000000011 [ 779.938506][T16096] RBP: 00007ff862e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 779.938527][T16096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.938548][T16096] R13: 00007ff863016128 R14: 00007ff863016090 R15: 00007ffc19e52cf8 [ 779.938592][T16096] [ 781.847185][T15385] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 781.859690][T15385] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 781.880960][T15385] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 781.898261][T15385] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 781.914115][T15385] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 783.552520][T16117] chnl_net:caif_netlink_parms(): no params data found [ 783.950191][T15385] Bluetooth: hci4: command tx timeout [ 784.039260][T16141] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input63 [ 784.223591][T16117] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.253338][T16117] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.280783][T16117] bridge_slave_0: entered allmulticast mode [ 784.314794][T16117] bridge_slave_0: entered promiscuous mode [ 784.353017][T16117] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.384092][T16117] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.424139][T16117] bridge_slave_1: entered allmulticast mode [ 784.452447][T16117] bridge_slave_1: entered promiscuous mode [ 784.538542][T16137] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input64 [ 784.594126][T16146] FAULT_INJECTION: forcing a failure. [ 784.594126][T16146] name failslab, interval 1, probability 0, space 0, times 0 [ 784.630630][T16117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 784.640051][T16146] CPU: 1 UID: 0 PID: 16146 Comm: syz.4.2201 Tainted: G U L syzkaller #0 PREEMPT(full) [ 784.640109][T16146] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 784.640124][T16146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 784.640144][T16146] Call Trace: [ 784.640156][T16146] [ 784.640170][T16146] dump_stack_lvl+0x100/0x190 [ 784.640228][T16146] should_fail_ex.cold+0x5/0xa [ 784.640268][T16146] should_failslab+0xc2/0x120 [ 784.640304][T16146] __kvmalloc_node_noprof+0xfa/0xa00 [ 784.640368][T16146] ? alloc_netdev_mqs+0xaf4/0x14f0 [ 784.640409][T16146] ? __pfx_do_setup+0x10/0x10 [ 784.640450][T16146] ? lockdep_init_map_type+0x5c/0x250 [ 784.640501][T16146] ? __pfx_do_setup+0x10/0x10 [ 784.640541][T16146] alloc_netdev_mqs+0xaf4/0x14f0 [ 784.640582][T16146] ? ovs_vport_alloc+0x288/0x3b0 [ 784.640626][T16146] internal_dev_create+0x8a/0x520 [ 784.640664][T16146] ovs_vport_add+0x147/0x4d0 [ 784.640698][T16146] new_vport+0x16/0x1d0 [ 784.640741][T16146] ovs_dp_cmd_new+0x65d/0xdf0 [ 784.640796][T16146] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 784.640850][T16146] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 784.640895][T16146] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 784.640946][T16146] genl_family_rcv_msg_doit+0x214/0x300 [ 784.640992][T16146] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 784.641035][T16146] ? genl_get_cmd+0x3ef/0x720 [ 784.641082][T16146] ? bpf_lsm_capable+0x9/0x10 [ 784.641110][T16146] ? security_capable+0x80/0x260 [ 784.641149][T16146] ? ns_capable+0xd2/0xf0 [ 784.641180][T16146] genl_rcv_msg+0x560/0x800 [ 784.641225][T16146] ? __pfx_genl_rcv_msg+0x10/0x10 [ 784.641268][T16146] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 784.641327][T16146] netlink_rcv_skb+0x159/0x420 [ 784.641371][T16146] ? __pfx_genl_rcv_msg+0x10/0x10 [ 784.641415][T16146] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 784.641467][T16146] ? netlink_deliver_tap+0x1ae/0xcc0 [ 784.641507][T16146] genl_rcv+0x28/0x40 [ 784.641546][T16146] netlink_unicast+0x5aa/0x870 [ 784.641588][T16146] ? __pfx_netlink_unicast+0x10/0x10 [ 784.641640][T16146] netlink_sendmsg+0x8b0/0xda0 [ 784.641683][T16146] ? __pfx_netlink_sendmsg+0x10/0x10 [ 784.641718][T16146] ? __import_iovec+0x1d2/0x640 [ 784.641769][T16146] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 784.641813][T16146] ____sys_sendmsg+0xa54/0xc30 [ 784.641859][T16146] ? __pfx_____sys_sendmsg+0x10/0x10 [ 784.641907][T16146] ? try_to_wake_up+0x644/0x1a80 [ 784.641943][T16146] ___sys_sendmsg+0x190/0x1e0 [ 784.641990][T16146] ? __pfx____sys_sendmsg+0x10/0x10 [ 784.642034][T16146] ? futex_private_hash_put+0x107/0x1c0 [ 784.642107][T16146] __sys_sendmsg+0x170/0x220 [ 784.642142][T16146] ? __pfx___sys_sendmsg+0x10/0x10 [ 784.642175][T16146] ? __x64_sys_futex+0x34f/0x4d0 [ 784.642233][T16146] do_syscall_64+0x106/0xf80 [ 784.642266][T16146] ? clear_bhb_loop+0x40/0x90 [ 784.642307][T16146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.642339][T16146] RIP: 0033:0x7f4094f9c799 [ 784.642371][T16146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.642401][T16146] RSP: 002b:00007f4095df1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 784.642430][T16146] RAX: ffffffffffffffda RBX: 00007f4095215fa0 RCX: 00007f4094f9c799 [ 784.642450][T16146] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000009 [ 784.642468][T16146] RBP: 00007f4095032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 784.642487][T16146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 784.642505][T16146] R13: 00007f4095216038 R14: 00007f4095215fa0 R15: 00007ffdfe39ae88 [ 784.642543][T16146] [ 785.020374][T16117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.064372][T16117] team0: Port device team_slave_0 added [ 785.073949][T16117] team0: Port device team_slave_1 added [ 785.115120][T16117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 785.122186][T16117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 785.148418][T16117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 785.161899][T16117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 785.168908][T16117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 785.196368][T16117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 785.247009][T16117] hsr_slave_0: entered promiscuous mode [ 785.253897][T16117] hsr_slave_1: entered promiscuous mode [ 785.260273][T16117] debugfs: 'hsr0' already exists in 'hsr' [ 785.266022][T16117] Cannot create hsr debugfs directory [ 786.034236][T15385] Bluetooth: hci4: command tx timeout [ 787.674314][T16117] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 787.729641][T16117] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 787.992305][T16117] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 788.083885][T16117] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 788.112422][T15385] Bluetooth: hci4: command tx timeout [ 789.429260][T16117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.754232][T16117] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.857087][T15396] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.864471][T15396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.959348][T15384] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.966724][T15384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.192196][T15385] Bluetooth: hci4: command tx timeout [ 791.029574][T16117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.296553][T16117] veth0_vlan: entered promiscuous mode [ 792.390346][T16117] veth1_vlan: entered promiscuous mode [ 792.525036][T16117] veth0_macvtap: entered promiscuous mode [ 792.583338][T16117] veth1_macvtap: entered promiscuous mode [ 792.668815][T16117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 792.730960][T16117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 792.776880][T15392] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.817413][T15392] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.859764][T15392] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.914093][T15392] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.218573][T15395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.271218][T15395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.438777][T15766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.438810][T15766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.479430][T16206] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input65 [ 793.683272][T16211] openvswitch: HfR: Dropping previously announced user features [ 794.162908][T16209] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input66 [ 796.613550][T16232] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input67 [ 797.441131][T16235] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input68 [ 797.553491][T16252] MTRR 1 not used [ 799.141451][T16259] random: crng reseeded on system resumption [ 800.522493][T16280] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2222'. [ 801.794727][T16295] FAULT_INJECTION: forcing a failure. [ 801.794727][T16295] name failslab, interval 1, probability 0, space 0, times 0 [ 801.870378][T16295] CPU: 1 UID: 0 PID: 16295 Comm: syz.6.2226 Tainted: G U L syzkaller #0 PREEMPT(full) [ 801.870436][T16295] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 801.870450][T16295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 801.870471][T16295] Call Trace: [ 801.870482][T16295] [ 801.870497][T16295] dump_stack_lvl+0x100/0x190 [ 801.870556][T16295] should_fail_ex.cold+0x5/0xa [ 801.870597][T16295] should_failslab+0xc2/0x120 [ 801.870634][T16295] __kmalloc_cache_noprof+0x7a/0x6f0 [ 801.870680][T16295] ? __hw_addr_add_ex+0x352/0x7e0 [ 801.870730][T16295] ? trace_contention_end+0x140/0x180 [ 801.870785][T16295] __hw_addr_add_ex+0x352/0x7e0 [ 801.870831][T16295] ? stack_depot_init+0x38/0x80 [ 801.870894][T16295] ? __pfx___hw_addr_add_ex+0x10/0x10 [ 801.870945][T16295] ? __mutex_unlock_slowpath+0x15c/0x790 [ 801.870999][T16295] dev_addr_init+0x161/0x250 [ 801.871055][T16295] ? __pfx_dev_addr_init+0x10/0x10 [ 801.871117][T16295] ? __pfx_do_setup+0x10/0x10 [ 801.871158][T16295] ? __pfx_do_setup+0x10/0x10 [ 801.871194][T16295] alloc_netdev_mqs+0x363/0x14f0 [ 801.871244][T16295] ? ovs_vport_alloc+0x288/0x3b0 [ 801.871290][T16295] internal_dev_create+0x8a/0x520 [ 801.871336][T16295] ovs_vport_add+0x147/0x4d0 [ 801.871385][T16295] new_vport+0x16/0x1d0 [ 801.871438][T16295] ovs_dp_cmd_new+0x65d/0xdf0 [ 801.871506][T16295] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 801.871570][T16295] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 801.871624][T16295] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 801.871687][T16295] genl_family_rcv_msg_doit+0x214/0x300 [ 801.871744][T16295] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 801.871796][T16295] ? genl_get_cmd+0x3ef/0x720 [ 801.871854][T16295] ? bpf_lsm_capable+0x9/0x10 [ 801.871888][T16295] ? security_capable+0x80/0x260 [ 801.871935][T16295] ? ns_capable+0xd2/0xf0 [ 801.871973][T16295] genl_rcv_msg+0x560/0x800 [ 801.872029][T16295] ? __pfx_genl_rcv_msg+0x10/0x10 [ 801.872081][T16295] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 801.872152][T16295] netlink_rcv_skb+0x159/0x420 [ 801.872197][T16295] ? __pfx_genl_rcv_msg+0x10/0x10 [ 801.872257][T16295] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 801.872320][T16295] ? netlink_deliver_tap+0x1ae/0xcc0 [ 801.872370][T16295] genl_rcv+0x28/0x40 [ 801.872415][T16295] netlink_unicast+0x5aa/0x870 [ 801.872467][T16295] ? __pfx_netlink_unicast+0x10/0x10 [ 801.872529][T16295] netlink_sendmsg+0x8b0/0xda0 [ 801.872581][T16295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 801.872623][T16295] ? __import_iovec+0x1d2/0x640 [ 801.872684][T16295] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 801.872739][T16295] ____sys_sendmsg+0xa54/0xc30 [ 801.872795][T16295] ? __pfx_____sys_sendmsg+0x10/0x10 [ 801.872854][T16295] ? __pfx_futex_wake_mark+0x10/0x10 [ 801.872912][T16295] ___sys_sendmsg+0x190/0x1e0 [ 801.872967][T16295] ? __pfx____sys_sendmsg+0x10/0x10 [ 801.873071][T16295] __sys_sendmsg+0x170/0x220 [ 801.873114][T16295] ? __pfx___sys_sendmsg+0x10/0x10 [ 801.873154][T16295] ? __x64_sys_futex+0x34f/0x4d0 [ 801.873234][T16295] do_syscall_64+0x106/0xf80 [ 801.873273][T16295] ? clear_bhb_loop+0x40/0x90 [ 801.873318][T16295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.873354][T16295] RIP: 0033:0x7fa94b39c799 [ 801.873383][T16295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 801.873417][T16295] RSP: 002b:00007fa94c325028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 801.873451][T16295] RAX: ffffffffffffffda RBX: 00007fa94b615fa0 RCX: 00007fa94b39c799 [ 801.873474][T16295] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000009 [ 801.873495][T16295] RBP: 00007fa94b432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 801.873523][T16295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 801.873544][T16295] R13: 00007fa94b616038 R14: 00007fa94b615fa0 R15: 00007ffffb9f6cf8 [ 801.873591][T16295] [ 804.343953][T16309] netlink: 'syz.6.2228': attribute type 10 has an invalid length. [ 804.343991][T16309] netlink: 330 bytes leftover after parsing attributes in process `syz.6.2228'. [ 804.685366][T16313] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input69 [ 805.732964][T16320] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input70 [ 806.937691][T16343] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input71 [ 807.908528][T16344] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input72 [ 809.091291][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.097650][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.470168][T16360] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2239'. [ 812.157430][T16383] random: crng reseeded on system resumption [ 812.168145][T16384] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input73 [ 812.658107][T16387] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input74 [ 812.830727][T15385] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 813.794373][T16404] netlink: 'syz.1.2248': attribute type 10 has an invalid length. [ 813.817687][T16404] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2248'. [ 815.078202][T16414] openvswitch: HfR: Dropping previously announced user features [ 816.910174][T15385] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 818.785519][T16444] openvswitch: HfR: Dropping previously announced user features [ 818.932146][T15627] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 818.959135][T15627] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 818.968650][T15627] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 818.990287][T15627] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 819.000424][T15627] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 820.544857][T16462] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input75 [ 820.691267][T16449] chnl_net:caif_netlink_parms(): no params data found [ 821.027704][T16471] netlink: 'syz.6.2269': attribute type 10 has an invalid length. [ 821.027746][T16471] netlink: 330 bytes leftover after parsing attributes in process `syz.6.2269'. [ 821.247914][T15627] Bluetooth: hci6: command tx timeout [ 821.485828][T16466] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input76 [ 822.056392][T16449] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.125205][T16449] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.170429][T16449] bridge_slave_0: entered allmulticast mode [ 822.178983][T16449] bridge_slave_0: entered promiscuous mode [ 822.221301][T16449] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.300172][T16449] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.307638][T16449] bridge_slave_1: entered allmulticast mode [ 822.453077][T16449] bridge_slave_1: entered promiscuous mode [ 823.313443][T15627] Bluetooth: hci6: command tx timeout [ 823.469176][T16449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 823.480905][T16483] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input77 [ 823.666840][T16449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.186075][T16486] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input78 [ 824.238957][T16449] team0: Port device team_slave_0 added [ 824.304801][T16449] team0: Port device team_slave_1 added [ 824.541631][T16449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 824.560123][T16449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 824.653099][T16449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 824.751940][T16449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 824.773347][T16449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 824.884803][T16449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 825.394538][T15627] Bluetooth: hci6: command tx timeout [ 825.451327][T16449] hsr_slave_0: entered promiscuous mode [ 825.458587][T16449] hsr_slave_1: entered promiscuous mode [ 825.553469][T16449] debugfs: 'hsr0' already exists in 'hsr' [ 825.559285][T16449] Cannot create hsr debugfs directory [ 825.728015][T16496] random: crng reseeded on system resumption [ 826.879636][T16449] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.184978][T16449] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.243068][T16503] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 827.256961][T16503] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 827.296043][T16503] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 827.318042][T16503] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 827.422847][T16503] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 827.475620][T15627] Bluetooth: hci6: command tx timeout [ 827.521506][T16503] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 827.598525][T16503] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 827.658619][T16503] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 827.724087][T16449] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.747506][T16503] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 827.765111][T16503] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 827.792147][T16503] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 827.851357][T16503] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 828.042066][T16449] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.784409][T16449] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 828.813614][T16449] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 828.857331][T16449] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 828.912458][T16449] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 829.310887][T15627] Bluetooth: hci5: command 0x0406 tx timeout [ 829.317083][T15627] Bluetooth: hci1: command 0x0c1a tx timeout [ 829.323914][T15385] Bluetooth: hci3: command 0x0c1a tx timeout [ 829.391120][T15385] Bluetooth: hci0: command 0x0c1a tx timeout [ 829.630406][T15385] Bluetooth: hci4: command 0x0c1a tx timeout [ 829.791867][T15385] Bluetooth: hci6: command 0x0c1a tx timeout [ 829.826232][T16449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 830.407615][T16449] 8021q: adding VLAN 0 to HW filter on device team0 [ 830.679177][T16539] random: crng reseeded on system resumption [ 830.742699][T15384] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.750070][T15384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 830.882129][T15384] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.889341][T15384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 831.134453][T16449] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 831.210424][T16449] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 831.471984][T15627] Bluetooth: hci0: command 0x0c1a tx timeout [ 831.711582][T15627] Bluetooth: hci4: command 0x0c1a tx timeout [ 831.874077][T15627] Bluetooth: hci6: command 0x0c1a tx timeout [ 832.327414][T16449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 832.542430][T16558] netlink: 'syz.5.2276': attribute type 10 has an invalid length. [ 832.542470][T16558] netlink: 330 bytes leftover after parsing attributes in process `syz.5.2276'. [ 832.731557][T16449] veth0_vlan: entered promiscuous mode [ 832.981033][T15385] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 833.156423][T16449] veth1_vlan: entered promiscuous mode [ 833.404153][T16449] veth0_macvtap: entered promiscuous mode [ 833.446033][T16449] veth1_macvtap: entered promiscuous mode [ 833.546568][T16449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 833.558356][T15385] Bluetooth: hci0: command 0x0c1a tx timeout [ 833.639911][T16567] HfR: entered promiscuous mode [ 833.703353][T16449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 833.790199][T15385] Bluetooth: hci4: command 0x0c1a tx timeout [ 833.814984][T16513] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.832422][T16513] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.883114][T16513] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.906318][T16513] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.950613][T15385] Bluetooth: hci6: command 0x0c1a tx timeout [ 834.153579][T16570] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input79 [ 835.018553][T16575] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input80 [ 835.377021][T16513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.426264][T16513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.916497][T16586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.944246][T16586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.319764][T16620] netlink: 'syz.6.2284': attribute type 10 has an invalid length. [ 838.319798][T16620] netlink: 330 bytes leftover after parsing attributes in process `syz.6.2284'. [ 840.586067][T16642] netlink: 'syz.1.2288': attribute type 10 has an invalid length. [ 840.586108][T16642] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2288'. [ 843.226568][T16659] FAULT_INJECTION: forcing a failure. [ 843.226568][T16659] name failslab, interval 1, probability 0, space 0, times 0 [ 843.299119][T16659] CPU: 1 UID: 0 PID: 16659 Comm: syz.4.2294 Tainted: G U L syzkaller #0 PREEMPT(full) [ 843.299177][T16659] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 843.299191][T16659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 843.299212][T16659] Call Trace: [ 843.299223][T16659] [ 843.299239][T16659] dump_stack_lvl+0x100/0x190 [ 843.299301][T16659] should_fail_ex.cold+0x5/0xa [ 843.299342][T16659] ? __alloc_empty_sheaf+0x35/0x50 [ 843.299384][T16659] should_failslab+0xc2/0x120 [ 843.299419][T16659] __kmalloc_noprof+0xe0/0x850 [ 843.299466][T16659] ? __pcs_replace_empty_main+0x12d/0x600 [ 843.299517][T16659] ? __pcs_replace_empty_main+0x12d/0x600 [ 843.299573][T16659] __alloc_empty_sheaf+0x35/0x50 [ 843.299616][T16659] __pcs_replace_empty_main+0x3ec/0x600 [ 843.299671][T16659] __kmalloc_cache_noprof+0x493/0x6f0 [ 843.299713][T16659] ? ovs_flow_tbl_init+0x8b/0x600 [ 843.299776][T16659] ovs_flow_tbl_init+0x8b/0x600 [ 843.299834][T16659] ovs_dp_cmd_new+0x251/0xdf0 [ 843.299924][T16659] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 843.300003][T16659] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 843.300058][T16659] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 843.300119][T16659] genl_family_rcv_msg_doit+0x214/0x300 [ 843.300175][T16659] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 843.300227][T16659] ? genl_get_cmd+0x3ef/0x720 [ 843.300282][T16659] ? bpf_lsm_capable+0x9/0x10 [ 843.300315][T16659] ? security_capable+0x80/0x260 [ 843.300360][T16659] ? ns_capable+0xd2/0xf0 [ 843.300396][T16659] genl_rcv_msg+0x560/0x800 [ 843.300451][T16659] ? __pfx_genl_rcv_msg+0x10/0x10 [ 843.300502][T16659] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 843.300576][T16659] netlink_rcv_skb+0x159/0x420 [ 843.300622][T16659] ? __pfx_genl_rcv_msg+0x10/0x10 [ 843.300677][T16659] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 843.300741][T16659] ? netlink_deliver_tap+0x1ae/0xcc0 [ 843.300789][T16659] genl_rcv+0x28/0x40 [ 843.300834][T16659] netlink_unicast+0x5aa/0x870 [ 843.300884][T16659] ? __pfx_netlink_unicast+0x10/0x10 [ 843.300952][T16659] netlink_sendmsg+0x8b0/0xda0 [ 843.301014][T16659] ? __pfx_netlink_sendmsg+0x10/0x10 [ 843.301057][T16659] ? __import_iovec+0x1d2/0x640 [ 843.301118][T16659] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 843.301171][T16659] ____sys_sendmsg+0xa54/0xc30 [ 843.301227][T16659] ? __pfx_____sys_sendmsg+0x10/0x10 [ 843.301288][T16659] ? __pfx_futex_wake_mark+0x10/0x10 [ 843.301351][T16659] ___sys_sendmsg+0x190/0x1e0 [ 843.301406][T16659] ? __pfx____sys_sendmsg+0x10/0x10 [ 843.301512][T16659] __sys_sendmsg+0x170/0x220 [ 843.301556][T16659] ? __pfx___sys_sendmsg+0x10/0x10 [ 843.301598][T16659] ? __x64_sys_futex+0x34f/0x4d0 [ 843.301670][T16659] do_syscall_64+0x106/0xf80 [ 843.301711][T16659] ? clear_bhb_loop+0x40/0x90 [ 843.301756][T16659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.301796][T16659] RIP: 0033:0x7f4094f9c799 [ 843.301827][T16659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 843.301866][T16659] RSP: 002b:00007f4095df1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 843.301901][T16659] RAX: ffffffffffffffda RBX: 00007f4095215fa0 RCX: 00007f4094f9c799 [ 843.301924][T16659] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000008 [ 843.301945][T16659] RBP: 00007f4095032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 843.301967][T16659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 843.301999][T16659] R13: 00007f4095216038 R14: 00007f4095215fa0 R15: 00007ffdfe39ae88 [ 843.302046][T16659] [ 844.367917][T16661] random: crng reseeded on system resumption [ 844.452400][T16659] openvswitch: HfR: Dropping previously announced user features [ 848.485002][T16709] HfR: entered promiscuous mode [ 848.724006][T16715] FAULT_INJECTION: forcing a failure. [ 848.724006][T16715] name failslab, interval 1, probability 0, space 0, times 0 [ 848.754922][T16715] CPU: 1 UID: 0 PID: 16715 Comm: syz.1.2306 Tainted: G U L syzkaller #0 PREEMPT(full) [ 848.754982][T16715] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 848.754997][T16715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 848.755019][T16715] Call Trace: [ 848.755032][T16715] [ 848.755046][T16715] dump_stack_lvl+0x100/0x190 [ 848.755106][T16715] should_fail_ex.cold+0x5/0xa [ 848.755148][T16715] should_failslab+0xc2/0x120 [ 848.755183][T16715] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 848.755234][T16715] ? __kernfs_new_node+0xd2/0x960 [ 848.755291][T16715] __kernfs_new_node+0xd2/0x960 [ 848.755338][T16715] ? kernfs_add_one+0x583/0x850 [ 848.755392][T16715] ? __pfx___kernfs_new_node+0x10/0x10 [ 848.755451][T16715] ? find_held_lock+0x2b/0x80 [ 848.755484][T16715] ? kernfs_root+0xee/0x2a0 [ 848.755536][T16715] ? kernfs_root+0xee/0x2a0 [ 848.755591][T16715] kernfs_new_node+0x11b/0x1a0 [ 848.755651][T16715] __kernfs_create_file+0x53/0x350 [ 848.755694][T16715] sysfs_add_file_mode_ns+0x207/0x3c0 [ 848.755750][T16715] sysfs_create_file_ns+0x145/0x1e0 [ 848.755794][T16715] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 848.755840][T16715] ? __pfx___up_read+0x10/0x10 [ 848.755896][T16715] ? acpi_device_notify+0x464/0x500 [ 848.755945][T16715] ? kobject_put+0xb9/0x640 [ 848.755996][T16715] device_create_file+0xf2/0x1d0 [ 848.756038][T16715] device_add+0x2cb/0x1950 [ 848.756093][T16715] ? __pfx_dev_set_name+0x10/0x10 [ 848.756129][T16715] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 848.756188][T16715] ? __pfx_device_add+0x10/0x10 [ 848.756243][T16715] ? lockdep_init_map_type+0x5c/0x250 [ 848.756292][T16715] ? __init_waitqueue_head+0xca/0x150 [ 848.756356][T16715] netdev_register_kobject+0x1a9/0x3d0 [ 848.756411][T16715] register_netdevice+0x12e0/0x2210 [ 848.756463][T16715] ? __pfx_register_netdevice+0x10/0x10 [ 848.756530][T16715] internal_dev_create+0x2d3/0x520 [ 848.756577][T16715] ovs_vport_add+0x147/0x4d0 [ 848.756619][T16715] new_vport+0x16/0x1d0 [ 848.756672][T16715] ovs_dp_cmd_new+0x65d/0xdf0 [ 848.756739][T16715] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 848.756806][T16715] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 848.756862][T16715] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 848.756924][T16715] genl_family_rcv_msg_doit+0x214/0x300 [ 848.756981][T16715] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 848.757033][T16715] ? genl_get_cmd+0x3ef/0x720 [ 848.757090][T16715] ? bpf_lsm_capable+0x9/0x10 [ 848.757125][T16715] ? security_capable+0x80/0x260 [ 848.757174][T16715] ? ns_capable+0xd2/0xf0 [ 848.757212][T16715] genl_rcv_msg+0x560/0x800 [ 848.757269][T16715] ? __pfx_genl_rcv_msg+0x10/0x10 [ 848.757322][T16715] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 848.757395][T16715] netlink_rcv_skb+0x159/0x420 [ 848.757440][T16715] ? __pfx_genl_rcv_msg+0x10/0x10 [ 848.757493][T16715] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 848.757564][T16715] ? netlink_deliver_tap+0x1ae/0xcc0 [ 848.757615][T16715] genl_rcv+0x28/0x40 [ 848.757660][T16715] netlink_unicast+0x5aa/0x870 [ 848.757712][T16715] ? __pfx_netlink_unicast+0x10/0x10 [ 848.757776][T16715] netlink_sendmsg+0x8b0/0xda0 [ 848.757830][T16715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 848.757873][T16715] ? __import_iovec+0x1d2/0x640 [ 848.757934][T16715] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 848.757989][T16715] ____sys_sendmsg+0xa54/0xc30 [ 848.758046][T16715] ? __pfx_____sys_sendmsg+0x10/0x10 [ 848.758107][T16715] ? __pfx_futex_wake_mark+0x10/0x10 [ 848.758171][T16715] ___sys_sendmsg+0x190/0x1e0 [ 848.758228][T16715] ? __pfx____sys_sendmsg+0x10/0x10 [ 848.758337][T16715] __sys_sendmsg+0x170/0x220 [ 848.758380][T16715] ? __pfx___sys_sendmsg+0x10/0x10 [ 848.758420][T16715] ? __x64_sys_futex+0x34f/0x4d0 [ 848.758493][T16715] do_syscall_64+0x106/0xf80 [ 848.758542][T16715] ? clear_bhb_loop+0x40/0x90 [ 848.758587][T16715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.758624][T16715] RIP: 0033:0x7efdf519c799 [ 848.758656][T16715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 848.758692][T16715] RSP: 002b:00007efdf6072028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 848.758726][T16715] RAX: ffffffffffffffda RBX: 00007efdf5415fa0 RCX: 00007efdf519c799 [ 848.758750][T16715] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000008 [ 848.758772][T16715] RBP: 00007efdf5232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 848.758792][T16715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 848.758814][T16715] R13: 00007efdf5416038 R14: 00007efdf5415fa0 R15: 00007ffdad390bf8 [ 848.758860][T16715] [ 851.645579][T15627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 851.647657][T15627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 851.710329][T15627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 851.714920][T15627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 851.715974][T15627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 851.914856][T16747] netlink: 'syz.6.2313': attribute type 10 has an invalid length. [ 851.914892][T16747] netlink: 330 bytes leftover after parsing attributes in process `syz.6.2313'. [ 853.519412][T16748] chnl_net:caif_netlink_parms(): no params data found [ 853.874009][T15385] Bluetooth: hci2: command tx timeout [ 854.500590][T16748] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.544952][T16748] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.672164][T16748] bridge_slave_0: entered allmulticast mode [ 854.740384][T16748] bridge_slave_0: entered promiscuous mode [ 855.120371][T16748] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.166001][T16748] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.214834][T16748] bridge_slave_1: entered allmulticast mode [ 855.257115][T16748] bridge_slave_1: entered promiscuous mode [ 855.932786][T16748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 855.951636][T15627] Bluetooth: hci2: command tx timeout [ 856.010312][T16748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.204759][T16748] team0: Port device team_slave_0 added [ 856.226907][T16748] team0: Port device team_slave_1 added [ 856.416631][T16748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 856.440127][T16748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.510206][T16748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 856.555000][T16748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 856.586022][T16748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.690940][T16748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 856.995204][T16780] HfR: entered promiscuous mode [ 857.056859][T16748] hsr_slave_0: entered promiscuous mode [ 857.095066][T16748] hsr_slave_1: entered promiscuous mode [ 857.120793][T16748] debugfs: 'hsr0' already exists in 'hsr' [ 857.137050][T16748] Cannot create hsr debugfs directory [ 857.230504][T15385] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 857.622311][T16785] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input81 [ 858.030519][T15385] Bluetooth: hci2: command tx timeout [ 858.065690][T16787] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input82 [ 858.595923][T16793] FAULT_INJECTION: forcing a failure. [ 858.595923][T16793] name failslab, interval 1, probability 0, space 0, times 0 [ 858.724963][T16793] CPU: 1 UID: 0 PID: 16793 Comm: syz.4.2322 Tainted: G U L syzkaller #0 PREEMPT(full) [ 858.725020][T16793] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 858.725034][T16793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 858.725055][T16793] Call Trace: [ 858.725067][T16793] [ 858.725080][T16793] dump_stack_lvl+0x100/0x190 [ 858.725140][T16793] should_fail_ex.cold+0x5/0xa [ 858.725180][T16793] ? cache_create_net+0xa2/0x1f0 [ 858.725219][T16793] should_failslab+0xc2/0x120 [ 858.725254][T16793] __kmalloc_noprof+0xe0/0x850 [ 858.725315][T16793] cache_create_net+0xa2/0x1f0 [ 858.725356][T16793] ? __pfx_nfsd_net_init+0x10/0x10 [ 858.725409][T16793] nfsd_idmap_init+0x62/0x250 [ 858.725447][T16793] ? __pfx_nfsd_net_init+0x10/0x10 [ 858.725498][T16793] nfsd_net_init+0x69/0x3d0 [ 858.725551][T16793] ? __pfx_nfsd_net_init+0x10/0x10 [ 858.725604][T16793] ops_init+0x1e2/0x5f0 [ 858.725652][T16793] setup_net+0x118/0x3a0 [ 858.725696][T16793] ? __pfx_setup_net+0x10/0x10 [ 858.725737][T16793] ? lockdep_init_map_type+0x5c/0x250 [ 858.725798][T16793] ? mutex_init_lockep+0x110/0x150 [ 858.725854][T16793] copy_net_ns+0x46f/0x7c0 [ 858.725905][T16793] create_new_namespaces+0x3ea/0xac0 [ 858.725953][T16793] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 858.725995][T16793] ksys_unshare+0x473/0xad0 [ 858.726042][T16793] ? __pfx_ksys_unshare+0x10/0x10 [ 858.726102][T16793] __x64_sys_unshare+0x31/0x40 [ 858.726145][T16793] do_syscall_64+0x106/0xf80 [ 858.726184][T16793] ? clear_bhb_loop+0x40/0x90 [ 858.726228][T16793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.726264][T16793] RIP: 0033:0x7f4094f9c799 [ 858.726294][T16793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 858.726328][T16793] RSP: 002b:00007f4095dd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 858.726363][T16793] RAX: ffffffffffffffda RBX: 00007f4095216090 RCX: 00007f4094f9c799 [ 858.726387][T16793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 858.726408][T16793] RBP: 00007f4095032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 858.726429][T16793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 858.726449][T16793] R13: 00007f4095216128 R14: 00007f4095216090 R15: 00007ffdfe39ae88 [ 858.726496][T16793] [ 859.790150][T16748] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 859.902761][T16748] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 860.009360][T16748] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 860.111231][T15385] Bluetooth: hci2: command tx timeout [ 860.307988][T16748] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 861.616469][T16748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 861.993729][T16748] 8021q: adding VLAN 0 to HW filter on device team0 [ 862.077907][T15395] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.085188][T15395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 862.167575][T15392] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.174793][T15392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 862.450478][T16830] openvswitch: HfR: Dropping previously announced user features [ 862.490872][T16832] openvswitch: HfR: Dropping previously announced user features [ 862.788575][T16835] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input83 [ 862.963393][T16843] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input84 [ 863.273321][T16840] random: crng reseeded on system resumption [ 863.313335][T16748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 864.907589][T16748] veth0_vlan: entered promiscuous mode [ 864.971327][T16748] veth1_vlan: entered promiscuous mode [ 865.164097][T16748] veth0_macvtap: entered promiscuous mode [ 865.395133][ T31] INFO: task kworker/u10:2:15389 blocked for more than 143 seconds. [ 865.416956][ T31] Tainted: G U L syzkaller #0 [ 865.424029][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 865.452403][ T31] task:kworker/u10:2 state:D stack:27704 pid:15389 tgid:15389 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 865.476651][T16748] veth1_macvtap: entered promiscuous mode [ 865.509168][ T31] Workqueue: netns cleanup_net [ 865.528873][ T31] Call Trace: [ 865.539067][ T31] [ 865.548950][ T31] __schedule+0xfee/0x60e0 [ 865.562522][ T31] ? __lock_acquire+0x4a5/0x2630 [ 865.584215][ T31] ? __pfx___schedule+0x10/0x10 [ 865.589180][ T31] ? find_held_lock+0x2b/0x80 [ 865.617207][ T31] ? schedule+0x2bf/0x390 [ 865.637867][ T31] schedule+0xdd/0x390 [ 865.656741][ T31] schedule_timeout+0x1b2/0x280 [ 865.673776][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 865.702364][ T31] ? mark_held_locks+0x40/0x70 [ 865.719045][ T31] __wait_for_common+0x2e7/0x4c0 [ 865.732435][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 865.752199][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 865.757862][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 865.786504][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 865.803704][ T31] __flush_workqueue+0x3f7/0x1200 [ 865.826895][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 865.844894][ T31] ? net_generic+0xea/0x2a0 [ 865.849582][ T31] ? rxrpc_discard_prealloc+0x752/0x9c0 [ 865.881939][ T31] ? rxrpc_release_calls_on_socket+0x384/0x4e0 [ 865.888238][ T31] rxrpc_release+0x2a7/0x6a0 [ 865.918232][ T31] sock_release+0x91/0x1c0 [ 865.933574][ T31] afs_close_socket+0x21b/0x3e0 [ 865.949082][ T31] ? afs_wait_for_servers+0xec/0x220 [ 865.971913][ T31] ? __pfx_afs_close_socket+0x10/0x10 [ 865.977409][ T31] ? __timer_delete_sync+0x151/0x1c0 [ 866.006127][ T31] ? __timer_delete_sync+0x10f/0x1c0 [ 866.034683][ T31] ? __pfx_afs_net_exit+0x10/0x10 [ 866.062638][ T31] afs_net_exit+0x93/0x150 [ 866.075453][ T31] ops_undo_list+0x2ee/0xab0 [ 866.097711][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 866.117092][ T31] ? cleanup_net+0x332/0x920 [ 866.132507][ T31] ? idr_destroy+0x62/0x2e0 [ 866.137196][ T31] cleanup_net+0x499/0x920 [ 866.157297][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 866.170534][ T31] ? rcu_is_watching+0x12/0xc0 [ 866.194491][ T31] process_one_work+0x9d7/0x1920 [ 866.210670][ T31] ? __pfx_process_one_work+0x10/0x10 [ 866.216174][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 866.258061][ T31] worker_thread+0x5da/0xe40 [ 866.283571][ T31] ? __pfx_worker_thread+0x10/0x10 [ 866.311742][ T31] ? kthread+0x13a/0x450 [ 866.316119][ T31] ? __pfx_worker_thread+0x10/0x10 [ 866.340244][ T31] kthread+0x370/0x450 [ 866.344425][ T31] ? __pfx_kthread+0x10/0x10 [ 866.349135][ T31] ret_from_fork+0x754/0xd80 [ 866.384666][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 866.399344][ T31] ? __switch_to+0x7b4/0x1120 [ 866.406677][T16748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 866.426551][ T31] ? __pfx_kthread+0x10/0x10 [ 866.436804][ T31] ret_from_fork_asm+0x1a/0x30 [ 866.465074][ T31] [ 866.477826][T16748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 866.493607][ T31] [ 866.493607][ T31] Showing all locks held in the system: [ 866.533128][ T31] 1 lock held by khungtaskd/31: [ 866.540335][ T31] #0: ffffffff8e7e9220 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 866.641838][ T31] 1 lock held by udevd/5194: [ 866.646540][ T31] 2 locks held by getty/5584: [ 866.671323][ T31] #0: ffff8880390810a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 866.698799][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 866.748687][ T31] 2 locks held by syz-executor/5813: [ 866.767308][ T31] 6 locks held by kworker/u10:0/15384: [ 866.820047][ T31] 3 locks held by kworker/u10:2/15389: [ 866.825779][ T31] #0: ffff88801c6ae948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 866.911774][ T31] #1: ffffc900048afd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 866.976204][ T31] #2: ffffffff905fa5f0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 867.015516][ T31] 3 locks held by kworker/u10:3/15392: [ 867.033409][ T31] #0: ffff888039007948 ((wq_completion)udp_tunnel_nic){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 867.077617][ T31] #1: ffffc90003d67d08 ((work_completion)(&utn->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 867.103989][ T31] #2: ffffffff90612f28 (rtnl_mutex){+.+.}-{4:4}, at: udp_tunnel_nic_device_sync_work+0x27/0xa50 [ 867.137531][ T31] 3 locks held by kworker/u10:5/15395: [ 867.158577][ T31] #0: ffff88813fea4148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 867.191391][ T31] #1: ffffc90000bb7d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 867.230806][ T31] #2: ffffffff90612f28 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 867.260827][ T31] 1 lock held by syz.3.2054/15436: [ 867.266128][ T31] #0: ffffffff905fa5f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 867.320080][ T31] 1 lock held by syz.2.2167/15984: [ 867.325463][ T31] #0: ffffffff905fa5f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 867.378363][ T31] 3 locks held by kworker/u10:8/16513: [ 867.397109][ T31] #0: ffff888034039148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 867.440587][ T31] #1: ffffc9000215fd08 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 867.483052][ T31] #2: ffffffff90612f28 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11f/0x1360 [ 867.537961][ T31] 3 locks held by kworker/u10:9/16586: [ 867.556364][ T31] 1 lock held by syz.5.2281/16590: [ 867.570853][ T31] #0: ffffffff905fa5f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 867.601001][ T31] 1 lock held by syz-executor/16748: [ 867.606391][ T31] #0: ffffffff90612f28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380 [ 867.662094][ T31] 1 lock held by syz.4.2330/16849: [ 867.667291][ T31] #0: ffffffff8e7f4e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 867.705315][ T31] 3 locks held by syz.6.2333/16865: [ 867.727729][ T31] #0: ffffffff905fa5f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 867.765366][ T31] #1: ffffffff90612f28 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 867.793022][ T31] #2: ffffffff8e7f4e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 867.825222][ T31] 2 locks held by syz.1.2334/16870: [ 867.850685][ T31] #0: ffffffff905fa5f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 867.881851][ T31] #1: ffffffff90612f28 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 867.920453][ T31] 2 locks held by syz.1.2334/16871: [ 867.935262][ T31] #0: ffffffff905fa5f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 867.966643][ T31] #1: ffffffff90612f28 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 867.994299][ T31] [ 867.996706][ T31] ============================================= [ 867.996706][ T31] [ 868.038858][ T31] NMI backtrace for cpu 0 [ 868.038889][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 868.038937][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 868.038951][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 868.038969][ T31] Call Trace: [ 868.038981][ T31] [ 868.038995][ T31] dump_stack_lvl+0x100/0x190 [ 868.039050][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 868.039105][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 868.039155][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 868.039211][ T31] sys_info+0x141/0x190 [ 868.039254][ T31] watchdog+0xd25/0x1050 [ 868.039298][ T31] ? __pfx_watchdog+0x10/0x10 [ 868.039331][ T31] ? __kthread_parkme+0x18c/0x230 [ 868.039373][ T31] ? kthread+0x13a/0x450 [ 868.039414][ T31] ? __pfx_watchdog+0x10/0x10 [ 868.039444][ T31] kthread+0x370/0x450 [ 868.039485][ T31] ? __pfx_kthread+0x10/0x10 [ 868.039532][ T31] ret_from_fork+0x754/0xd80 [ 868.039584][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 868.039637][ T31] ? __switch_to+0x7b4/0x1120 [ 868.039674][ T31] ? __pfx_kthread+0x10/0x10 [ 868.039721][ T31] ret_from_fork_asm+0x1a/0x30 [ 868.039785][ T31] [ 868.039797][ T31] Sending NMI from CPU 0 to CPUs 1: [ 868.185329][ C1] NMI backtrace for cpu 1 [ 868.185357][ C1] CPU: 1 UID: 0 PID: 5183 Comm: klogd Tainted: G U L syzkaller #0 PREEMPT(full) [ 868.185396][ C1] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 868.185406][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 868.185423][ C1] RIP: 0010:lock_release+0x188/0x320 [ 868.185461][ C1] Code: 84 99 01 00 00 90 48 c7 c7 1c 4f e5 8d e8 60 cc a8 09 b8 ff ff ff ff 65 0f c1 05 cb 1e 29 12 83 f8 01 0f 85 3d 01 00 00 9c 58 c4 02 0f 85 28 01 00 00 41 f7 c6 00 02 00 00 0f 85 de 00 00 00 [ 868.185485][ C1] RSP: 0018:ffffc90000a08990 EFLAGS: 00000046 [ 868.185506][ C1] RAX: 0000000000000046 RBX: ffffffff8e7e9220 RCX: ffffc90000a0899c [ 868.185523][ C1] RDX: 0000000000000001 RSI: ffffffff8de54f1c RDI: ffffffff8c1af0a0 [ 868.185539][ C1] RBP: ffffffff81b7adde R08: 0000000000000001 R09: 0000000000000007 [ 868.185555][ C1] R10: 0000000000000200 R11: 0000000000085789 R12: ffff8880369d9e40 [ 868.185572][ C1] R13: ffffc90000a08a48 R14: 0000000000000202 R15: 0000000000000002 [ 868.185589][ C1] FS: 00007f5c65bd6c80(0000) GS:ffff88812444e000(0000) knlGS:0000000000000000 [ 868.185614][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 868.185631][ C1] CR2: 00007f4095d47e20 CR3: 00000000284a8000 CR4: 00000000003526f0 [ 868.185647][ C1] Call Trace: [ 868.185655][ C1] [ 868.185668][ C1] unwind_next_frame+0x3c3/0x1ea0 [ 868.185695][ C1] ? alloc_skb_with_frags+0xe0/0x810 [ 868.185728][ C1] ? debug_object_activate+0x331/0x490 [ 868.185768][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 868.185795][ C1] arch_stack_walk+0x94/0xf0 [ 868.185822][ C1] ? sock_alloc_send_pskb+0x801/0x980 [ 868.185848][ C1] ? rcu_core+0x5a2/0x10d0 [ 868.185881][ C1] stack_trace_save+0x8e/0xc0 [ 868.185903][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 868.185929][ C1] ? __lock_acquire+0x4a5/0x2630 [ 868.185961][ C1] kasan_save_stack+0x30/0x50 [ 868.185998][ C1] ? kasan_save_stack+0x30/0x50 [ 868.186033][ C1] ? kasan_save_track+0x14/0x30 [ 868.186069][ C1] ? kasan_save_free_info+0x3b/0x70 [ 868.186098][ C1] ? __kasan_slab_free+0x5f/0x80 [ 868.186134][ C1] ? kmem_cache_free+0x124/0x6a0 [ 868.186164][ C1] ? rcu_core+0x5a2/0x10d0 [ 868.186195][ C1] ? handle_softirqs+0x1eb/0x9e0 [ 868.186220][ C1] ? do_softirq+0xac/0xe0 [ 868.186243][ C1] ? __local_bh_enable_ip+0xf8/0x120 [ 868.186268][ C1] ? __alloc_skb+0x5db/0x710 [ 868.186291][ C1] ? alloc_skb_with_frags+0xe0/0x810 [ 868.186347][ C1] kasan_save_track+0x14/0x30 [ 868.186383][ C1] kasan_save_free_info+0x3b/0x70 [ 868.186412][ C1] __kasan_slab_free+0x5f/0x80 [ 868.186451][ C1] kmem_cache_free+0x124/0x6a0 [ 868.186481][ C1] ? rcu_core+0x59d/0x10d0 [ 868.186515][ C1] ? rcu_core+0x59d/0x10d0 [ 868.186547][ C1] rcu_core+0x5a2/0x10d0 [ 868.186580][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 868.186610][ C1] ? __pfx_rcu_core+0x10/0x10 [ 868.186646][ C1] ? rcu_is_watching+0x12/0xc0 [ 868.186685][ C1] handle_softirqs+0x1eb/0x9e0 [ 868.186714][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 868.186738][ C1] ? irqtime_account_irq+0x176/0x2d0 [ 868.186775][ C1] ? __alloc_skb+0x5b7/0x710 [ 868.186800][ C1] do_softirq+0xac/0xe0 [ 868.186824][ C1] [ 868.186832][ C1] [ 868.186841][ C1] __local_bh_enable_ip+0xf8/0x120 [ 868.186867][ C1] __alloc_skb+0x5db/0x710 [ 868.186891][ C1] ? __alloc_skb+0x5b7/0x710 [ 868.186917][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 868.186948][ C1] alloc_skb_with_frags+0xe0/0x810 [ 868.186985][ C1] sock_alloc_send_pskb+0x801/0x980 [ 868.187016][ C1] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 868.187041][ C1] ? find_held_lock+0x2b/0x80 [ 868.187079][ C1] ? sock_def_readable+0x1d2/0x630 [ 868.187103][ C1] ? sock_def_readable+0x1d2/0x630 [ 868.187132][ C1] unix_dgram_sendmsg+0x3c7/0x1820 [ 868.187176][ C1] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 868.187206][ C1] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 868.187237][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 868.187277][ C1] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 868.187313][ C1] __sys_sendto+0x4aa/0x520 [ 868.187340][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 868.187371][ C1] ? do_syslog+0x18c/0x6d0 [ 868.187414][ C1] ? xfd_validate_state+0x129/0x190 [ 868.187455][ C1] __x64_sys_sendto+0xe0/0x1c0 [ 868.187479][ C1] ? do_syscall_64+0x95/0xf80 [ 868.187507][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 868.187535][ C1] do_syscall_64+0x106/0xf80 [ 868.187562][ C1] ? clear_bhb_loop+0x40/0x90 [ 868.187592][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.187618][ C1] RIP: 0033:0x7f5c65d26407 [ 868.187638][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 868.187662][ C1] RSP: 002b:00007ffc7843c3e0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 868.187686][ C1] RAX: ffffffffffffffda RBX: 00007f5c65bd6c80 RCX: 00007f5c65d26407 [ 868.187703][ C1] RDX: 000000000000005c RSI: 00007ffc7843c520 RDI: 0000000000000003 [ 868.187719][ C1] RBP: 00007ffc7843c950 R08: 0000000000000000 R09: 0000000000000000 [ 868.187735][ C1] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffc7843c968 [ 868.187752][ C1] R13: 00007ffc7843c520 R14: 0000000000000041 R15: 00007ffc7843c520 [ 868.187786][ C1] [ 869.540646][T15392] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.562004][T15392] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.592449][T15392] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.620116][T15392] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.246056][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 870.253000][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 870.263751][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 870.268990][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 870.279095][ T31] Call Trace: [ 870.282419][ T31] [ 870.285390][ T31] dump_stack_lvl+0x100/0x190 [ 870.290315][ T31] vpanic+0x552/0x970 [ 870.294433][ T31] ? __pfx_vpanic+0x10/0x10 [ 870.298992][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 870.305231][ T31] panic+0xd1/0xe0 [ 870.309097][ T31] ? __pfx_panic+0x10/0x10 [ 870.313575][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 870.319820][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 870.326066][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 870.332312][ T31] ? watchdog.cold+0x198/0x1ca [ 870.337147][ T31] ? watchdog+0xd35/0x1050 [ 870.341627][ T31] watchdog.cold+0x1a9/0x1ca [ 870.346296][ T31] ? __pfx_watchdog+0x10/0x10 [ 870.351029][ T31] ? __kthread_parkme+0x18c/0x230 [ 870.356124][ T31] ? kthread+0x13a/0x450 [ 870.360427][ T31] ? __pfx_watchdog+0x10/0x10 [ 870.365150][ T31] kthread+0x370/0x450 [ 870.369287][ T31] ? __pfx_kthread+0x10/0x10 [ 870.373944][ T31] ret_from_fork+0x754/0xd80 [ 870.378611][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 870.383804][ T31] ? __switch_to+0x7b4/0x1120 [ 870.388539][ T31] ? __pfx_kthread+0x10/0x10 [ 870.393200][ T31] ret_from_fork_asm+0x1a/0x30 [ 870.398039][ T31] [ 870.401694][ T31] Kernel Offset: disabled [ 870.406090][ T31] Rebooting in 86400 seconds..