last executing test programs: 1m53.557328182s ago: executing program 3 (id=2968): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/conf/nlmon0/addr_gen_mode\x00', 0xa02, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x1a, 0x0, 0xfffffffffffffffc, 0x5}, 0x6}, 0x1, 0x401) r1 = socket(0xa, 0x5, 0x84) sendto$auto(r1, 0x0, 0x401, 0x6358c0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe800000ffffffff"}, 0x1c) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c00", @ANYRES8], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000000500)={0x400, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280), {0x29}, 0x0, 0x0, &(0x7f00000003c0)=""/193, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58) sendmsg$auto_NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000007a40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44018}, 0x4000004) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000340), 0x98002, 0x0) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x2081, 0x0) r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$auto_UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000040)={{0x7, 0x7, 0x600, 0xffff}, "66ac0801cefa303f5ce268d590eb0d4a4cada7272464294b9183169eef4c1f9a8fdcc8ecc66fdd10316f064ebd893007abb4c0bbc3b82e9b6d2924ad63d5e2bddb6aaf40cddc110d71771552c03de658", 0x40000007}) ioctl$auto_UI_DEV_CREATE(r5, 0x5501, 0x0) syz_genetlink_get_family_id$auto_cifs(&(0x7f0000000000), r3) ioctl$auto_SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000007a80)={0x3, r4, 0x1, "1f0c81eb99b1636d81577b7aa2724358"}) sendfile$auto(r0, 0xffffffffffffffff, 0x0, 0x400000080003) 1m52.594884343s ago: executing program 3 (id=2971): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x40146f2c, 0x0) select$auto(0x7, 0x0, &(0x7f0000000100)={[0x9, 0x5, 0x0, 0xfffffffffffffff6, 0x7, 0xfffffffffffdffff, 0xdffffffffffffff8, 0x2, 0x0, 0x10000005e58296f, 0x6, 0x7, 0x3, 0x200, 0x1, 0x9]}, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x80802, 0x0) r2 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) io_uring_setup$auto(0x8000, 0x0) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 1m51.770073691s ago: executing program 3 (id=2974): ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000100)={0x2, 0x80, 0xffff, 0x5, 0x0, 0xc694, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0}) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0xa, 0x3, 0x3a) setsockopt$auto(r0, 0x29, 0x3c, 0xffffffffffffffff, 0x1) r1 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(r1, &(0x7f00000000c0)={{0x0, 0x7, 0x0, 0x0, &(0x7f0000000280), 0x6, 0xa01}, 0x6}, 0x400, 0x200, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x22641, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2400, 0x0) sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) 1m50.740864007s ago: executing program 3 (id=2983): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x40146f2c, 0x0) select$auto(0x7, 0x0, &(0x7f0000000100)={[0x9, 0x5, 0x0, 0xfffffffffffffff6, 0x7, 0xfffffffffffdffff, 0xdffffffffffffff8, 0x2, 0x0, 0x10000005e58296f, 0x6, 0x7, 0x3, 0x200, 0x1, 0x9]}, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x80802, 0x0) r2 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) io_uring_setup$auto(0x8000, 0x0) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 1m50.417966176s ago: executing program 3 (id=2984): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x4000000, 0x0, 0x8000}, 0x40000) 1m50.229453549s ago: executing program 3 (id=2985): r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto_ftrace_subsystem_filter_fops_trace_events(r0, 0x0, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a0000000800", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) r1 = socket(0x21, 0x2, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x98, r3, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_RF_MODE={0x5, 0xb, 0xd}, @NFC_ATTR_SE_APDU={0x73, 0x19, "3724065ac6525574286eaa9aafd12bfd4d09660a2b46c4c1914843f6504dfa631f41bc629c4d2e23b02ab68c71cb0e00e187bd445534da348c220a3a5fd566ede39113ef5c594be340249d7b22cae58b39b8a0207d95ca465555949b33e7b896c759f53a2ef7637a765ac0a70482c7"}, @NFC_ATTR_DEVICE_POWERED={0x5}]}, 0x98}}, 0x24000000) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), r1) r5 = syz_clone(0x20011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x4206, r5, 0x0, 0x200005) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x128, r4, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL802154_ATTR_COORDINATOR={0xa8, 0x1e, 0x0, 0x1, [@nested={0x1c, 0x21, 0x0, 0x1, [@nested={0x4, 0x15b}, @typed={0xc, 0xa3, 0x0, 0x0, @u64=0x4}, @typed={0x8, 0x9e, 0x0, 0x0, @fd=r1}]}, @nested={0x87, 0x5c, 0x0, 0x1, [@typed={0x8, 0x147, 0x0, 0x0, @pid=r5}, @typed={0x8, 0xac, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0xa2, 0x0, 0x0, @uid}, @typed={0x32, 0x54, 0x0, 0x0, @binary="1c45cc3055ffd27756cdbff77c1a3347e718661e1573faa03fc9beaea4e106fd384359178025b658e5554d305e58"}, @generic="0dc2f56a07668a2782ddae717e9ffeb5dda32a9ee7dca75cf52fd90ee519b05c03ab96c3e1777e5f3a13bde1c46a0f3729fc83", @nested={0x4, 0x4c}]}]}, @NL802154_ATTR_WPAN_PHY_CAPS={0x62, 0x18, 0x0, 0x1, [@generic="8b3bfcea2b70414b5d857fd685c47f85b54ed3d7f39faceab6b481dbfc1168bb1416d3eab8a0795d1528c1ea0ea5f60a263ecb6918383327fc8b8ce5c481ac369f1da155f5bee93a7a4453acd3f832626890502cf189b659cb830a71d4d1"]}]}, 0x128}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) fsconfig$auto_EROFS_MOUNT_DAX_NEVER(r1, 0xf176, &(0x7f0000000000)='-$\\\xa9[:\x00', &(0x7f0000000100)="b9170c02eb25d0dc0a1236012964", 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv$auto(r6, &(0x7f00000001c0)={0x0, 0xf7}, 0x7) write$auto(r6, 0x0, 0x3) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) r8 = ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto_RNDGETENTCNT(r8, 0x80045200, &(0x7f00000004c0)=0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) madvise$auto(0x3, 0x6, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/loop2/hctx0/tags\x00', 0x169100, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) 1m35.024974822s ago: executing program 32 (id=2985): r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto_ftrace_subsystem_filter_fops_trace_events(r0, 0x0, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a0000000800", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) r1 = socket(0x21, 0x2, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x98, r3, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_RF_MODE={0x5, 0xb, 0xd}, @NFC_ATTR_SE_APDU={0x73, 0x19, "3724065ac6525574286eaa9aafd12bfd4d09660a2b46c4c1914843f6504dfa631f41bc629c4d2e23b02ab68c71cb0e00e187bd445534da348c220a3a5fd566ede39113ef5c594be340249d7b22cae58b39b8a0207d95ca465555949b33e7b896c759f53a2ef7637a765ac0a70482c7"}, @NFC_ATTR_DEVICE_POWERED={0x5}]}, 0x98}}, 0x24000000) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), r1) r5 = syz_clone(0x20011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x4206, r5, 0x0, 0x200005) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x128, r4, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL802154_ATTR_COORDINATOR={0xa8, 0x1e, 0x0, 0x1, [@nested={0x1c, 0x21, 0x0, 0x1, [@nested={0x4, 0x15b}, @typed={0xc, 0xa3, 0x0, 0x0, @u64=0x4}, @typed={0x8, 0x9e, 0x0, 0x0, @fd=r1}]}, @nested={0x87, 0x5c, 0x0, 0x1, [@typed={0x8, 0x147, 0x0, 0x0, @pid=r5}, @typed={0x8, 0xac, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0xa2, 0x0, 0x0, @uid}, @typed={0x32, 0x54, 0x0, 0x0, @binary="1c45cc3055ffd27756cdbff77c1a3347e718661e1573faa03fc9beaea4e106fd384359178025b658e5554d305e58"}, @generic="0dc2f56a07668a2782ddae717e9ffeb5dda32a9ee7dca75cf52fd90ee519b05c03ab96c3e1777e5f3a13bde1c46a0f3729fc83", @nested={0x4, 0x4c}]}]}, @NL802154_ATTR_WPAN_PHY_CAPS={0x62, 0x18, 0x0, 0x1, [@generic="8b3bfcea2b70414b5d857fd685c47f85b54ed3d7f39faceab6b481dbfc1168bb1416d3eab8a0795d1528c1ea0ea5f60a263ecb6918383327fc8b8ce5c481ac369f1da155f5bee93a7a4453acd3f832626890502cf189b659cb830a71d4d1"]}]}, 0x128}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) fsconfig$auto_EROFS_MOUNT_DAX_NEVER(r1, 0xf176, &(0x7f0000000000)='-$\\\xa9[:\x00', &(0x7f0000000100)="b9170c02eb25d0dc0a1236012964", 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv$auto(r6, &(0x7f00000001c0)={0x0, 0xf7}, 0x7) write$auto(r6, 0x0, 0x3) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) r8 = ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto_RNDGETENTCNT(r8, 0x80045200, &(0x7f00000004c0)=0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) madvise$auto(0x3, 0x6, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/loop2/hctx0/tags\x00', 0x169100, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) 1m9.458650517s ago: executing program 4 (id=3211): r0 = socket(0x2, 0x3, 0xa) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000326bd7000fedbdf25110000002000018014000200627269646765300000000000007d00000800030008000000"], 0x34}, 0x1, 0x0, 0x0, 0x20004804}, 0x10) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x5) rt_tgsigqueueinfo$auto_SIGCONT(0x0, 0xffffffffffffffff, 0x12, &(0x7f0000000200)={@siginfo_0_0={0x2, 0x6, 0x80000001, @_sigfault={0x0, @_perf={0x8, 0xfffff000, 0xc1d}}}}) r3 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x260000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r4) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002ec0)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x400c8d4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'hsr0\x00', 0x0}) msgctl$auto(0x9, 0x1, &(0x7f0000000380)={{0x80000000, 0x0, 0xee00, 0x101, 0x0, 0x2, 0x4}, &(0x7f00000002c0)=0x5, &(0x7f0000000340)=0x14, 0x200, 0x4, 0x3, 0x1, 0x0, 0x8000, 0x100, 0xfff, @raw=0x9ca, @raw=0xa}) r8 = timerfd_create$auto_CLOCK_BOOTTIME_ALARM(0x9, 0x10000) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, &(0x7f0000000400)={0x1, 0x0, 0x1, 0x8, 0x5, 0x0}) sendmsg$auto_MACSEC_CMD_DEL_RXSC(r0, &(0x7f0000001c40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001c00)={&(0x7f00000006c0)={0x150c, r5, 0xb04, 0x70bd28, 0x25dfdbff, {}, [@MACSEC_ATTR_OFFLOAD={0x103c, 0x9, 0x0, 0x1, [@typed={0x8, 0xfb, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0x8, 0x10d, 0x0, 0x0, @fd=r3}, @typed={0x14, 0x8d, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @nested={0x1014, 0xfc, 0x0, 0x1, [@nested={0x4, 0x7e}, @typed={0x8, 0x5b, 0x0, 0x0, @ipv4=@local}, @typed={0x1004, 0x12f, 0x0, 0x0, @binary="bc1df6440ddfc0724fda6919bc2efbeaf32c0553a7cfddc11b9647b46e62349ba4599cf89a7c7b68b3a8f4902cabbd101bc1beb39600ba6bfb07bfa4dd391f4c19b248cda56e551ed53edf0a3137ef5becfb1e181a978ff8a60ff6bccf66ecbb3dafb3d5baa8851c47dc763ee44aa929b8c8bd266ed081bc53b7e6a59d82d17bae43e9fd27709574ee054622ee3fe4d817a6bfa11ffbae26746e948192e17cf53b0e6de8477f4ae9f1dc2fa37d4cbaaf73786eccb28a1a171f6ff4c0fb70fa12bc5337c8db9d519f142d6eb80c28c9d84973e4e77359cedb5ff330bc6b584cff5b3ec71d5b8ca833db430f76e385a4954758f69ef374228d222fb8d34e4672f2df2312ff2dd3c757c788945010708b7cd0707093194390ea0ffebc028960796cfb0022859c1eacb05cf2bea660e87ec39acd3598be001861b38da53a5b61eaeda44a5809097f4c3501cf9166dbc5db31064b5992fe4b9ec7be20bd7f7b6947e193cba01b1727e96f7ed0b931673d90412f0525d01c229f23ff39a0f617c4807acbbda33c4c2e315f332a09a2fe4ecf711530f5f17f9d4b301d9024990df82fabcfc3e6404d353d7a23b1b2eb69e32de92b3a904aebcb571292db26c491fb000f9c48579bce3eff84da3abae27500267c2a645fd86badcebcaf00ef0a0a342d41c3477e91ce6fe131c6dd4b6277a7ef5841663628d66aecf03ac1acab586768c72b6f9699d117d0cefd3ba56b794e9b7ee3a7ffc15d2d3d051e7e7ed669e950b315a22d7dfd68d244bceb4a3ebbce8ac3df42fae326bc72e1db90c3ff0b2b3ac8a009a12894bb4f0eb15cf5649e5d442e1a2ca0c959ae3d8d9515a2dc937f5d984ffc906672bebeeea127397aad76543a0d981e48eaf5e80405c68427939bd9349accfdbf4d988b53cbf3cacca2d5d59c3c8a71393c079a2c67f2cfe7dc1e9be9235dfe9a5fd5bb216efd9b56d0fc531ba6eedc00d8dc2de48a1a6d8151569e6a99df0f4af271e79eee09190b0e3b25b9d85a6ec56c50fa533bc1df5865477cd4c0136287480021bcc2f623de49ee0c44e782e89e8d7c95559f5a5edd44f49d2b66af4e7da82153decd696429f81216db3f993b4823ec2eef3df1fca0dc736058d21b6fda5eaecc51338d368bff33c19927f989a1d7cc443238eca8b69708cee502a65f5570cff04d24eb06a685b0c1822196a7959db649723d692f44aa104f24522d2bcd9c200605162965b34d1efb2d08bf90aaaa03a8cded5e29c2da26e24f3b301ebb6697a544f7c36de510115f7402d064bcc065f93ee1712d262e8cc279e794947bb9893c9cfcf858aaacb84fa1357cf0fce6fe9c7a412b7c16c018dee7e64609f328c14bacb4434cd4bfe197ce70beaf2c6d9294e7d88e0031cf8fb6f0767b96bbf49db02d7d4564dea734b89105b505e12593303f4de68f30d67899dc08cdc336d3caf7b9065246c8c072ddc965f7f93a49ff33e6b9f42df625f922b32397350a872270092af8d472a102f08bbd32f3db882c6b7b52229741bf2c7484e1a68a5811b8fe0b0f844f1f5e8660104b38ce36c05cbf2a0ed1975f0eed77edf1b72f78ac6e8446ade3d5a892468f33cb51ee88fbd92524839400cf9c9dd210cf363d8e137c4865b9389de59164eac19235134478d87881d5bac379104ad9ff7da3f9f8770f74aa9bd7d5cc8372bbdda5875ded2af716d2b19fd5eb290a509e9dc5e362baa4ec3ea17aa6298d1452ec7f058ef4e810c65073396bdf709816329a6d7efcc4f8e660daa25ba206a52bf27be7b5d2c38eca171f4c2c40fc421ddcef035065b6e1b49f3ce93d602d2a933fcae4ce9b1201ae82d474d4981e5edc76a87541ecab309d21efd3ff3c314ab2fa0d925ca25b8276acca0a5039b91ed6b19f1fb93bdbaae92d717501e02fcc715c07ca4418d5a60d9e656e619314fbb1c7bf9ab57758133a8d9473fa8f7225c8b6872d005364db5dc138a984b21cf39f614e3b2c4d37c82b58b2ba1fff025d37fa0a59d8145a57ae805261ee34ed5f49ec68f28b831368259d6cdb614829d2cdfb96253997afc181b214ca1b80dcd2970e0ad155fa0d30fc2cfb1752220a2537595e2d708d656371d99ccb3d805070638e1c9dc0f48b8e55bd14e01e7bf1d00c1802ff2a3e62be37c7d108c8892fc91f12870f636e5b002bc71078f7d9f84be35259dfff3663525bf6cbb900fd790c117a86d4d8f65d5eae62c52049937ab62d4d3558a1ae7f401775b0ef04cfcce73a2876a34d51400baff3f12ee8f76d72afdc67a401decf0ce9371401a6d759c9a87a2acb0017e2cc6014f0ab362105f1c517beb9d4ff768bf9f481c2691f8994d9ec4dbc378776d5e487b90c1b26b40d7e5d934116b47aa2437d7b49fbdf2c77e218a095b2e9cc5862be04a1804cba4e6f942437294be0d393346e043a7036a1bfbfb2c69de50533082f95ea72adc76b05625ff95950d3335580c1fce7efbfdc36078f9bbc830aadc82a1139b0cee43b32f5c330e239cd040f2a78d75a2fc6cbd089bcfcf8a24dd669d29ea7d44bfceba6c59ae5fd8d6572d2dc66e56420e348ea81183c42badb5091fc7171e28d11cbf8918014c8c00723af219c3000ba2b90e8c8bbb35466a665a0f2180b910b74f7dab6102b7611df0a22cf401d6ee4398b4e9edfb709b7bf84ab26205162d302ed08735ef9671219904e3489c5435580e2686d8c00a5802f14ade9c780ff9b6a3b8fe67eaa5f9209ec81af910a45d5448bbe1d7c4d7df25e63cfb5f27c2a2bab9ed3eae2e5ad878fdaf6c82c663494476c162e2fdaae815e1b6028a76994ac96ff5846ecb21a02c062f540d91a9c8ea166cd549e8c479018fe8c073ae1fcea4df6d7406167b016dbb92e1b8bff6e9e2e2e279ae74eb3f5a2f3a17c05da20830193c666aef593a763cf897e9cba27b11d93f9b196efdf0abd619ecef4b9076e461ba148af88c9a71e4c292dc8aef133fd745a142f4109544f5ce1c302baacf18a38a9ebc7e5f2b725de2d72fbe095c1d4930a61c57499d1110bd1324838f667301ddda87edfee6d0a1a7a77df204edbdf14688e4737f0c471c7f31455d358bd0bad2f9ec62dae24c047895dd8cb50cb83a464058acbfb9f9db9e073dd7901b347f36725c27e2b4dfe489be4b7985484f45418feb5e2fc8f54f0efe774638839860d84d5e703d9240c580fe2ea11891d416feba603243a90d7a4eaaf4df540519b20c46195b440c1325c7c075136c12861300f77d513507c6f3d7733bc0c4c28ec9dc34cd1109994c936271080404b5625c052792d4cdb98da6bfe1f690f68ee1d23f659abef40b23e13e260cadba9c74b7c2231e46b0bd355e7773b67787dd66e306a1d44117ad6585e865a9b5cea72bd5bc165e7bf87408e8eb0cc19d02b92ac7b58a446c201ff43e4e83817ac58daaf1b9ff6e4c09ac9bd9b17ebe8c2ae60a7d7a5e8a30ff8f7e820e89044558d844ef475ea521a94558a6139a1696ad7c4c25d5b753101dddbaac08921904c5e3b3e969247ddcb35ebd2aa6ebb351a6c5671fdc777f71cf51520a22578acb8b8081bef7b10d58d830939ba41d663e9adf358d056695062b7437d59547bb993ca85dc5a3e41ae13a69f2502126f847b626cc7351af15d839ae0576606a399f0a1949502ccf2277f92f8af295ecf7914ede1557d063f2b474f9bfbcfacd739069d0955ea7794e5f28059b1ca1b1d41c6c5f6be23bc84999482e68d8402033bd516ac0596ca526cf8071cc9fada8c35bbe0eb0683c2705b7a66eb0f170d4d8641814926a52def9425cdbf61e2b2dcf21f1b9ef551634e7eae68b816e6c9df9ad9f5acd501ecd429ac644754c9e4ea4bf14718bcf7df3dcf44d2b934b7d33582ff2bab58cdbf20e9cbd2eee67cf2d15987b48f591c3e1126cc3840064c214ddc84f54c6ad98b0eafe7e167dc14b77a4b0575c3b64b8d413e84b24450c3181aa2b3b43198bdd6e0354c0255fc5ecc31f5bb461279448000bfd961a5e8c0e6ca08d8ff57c1e033d0d45912eed1464d7a06212a28a119d7b4f601a49f50be0c48e003312f504123096366d82740e57ef9cc7a573929194b0d4826b4b2b62dd26c5402ef2726cd9b9297ea11f12404b7be1087fe0349c8e39b63058cd052f10a5acd801105ab59fdefbd361341560d36765cee309e6d1cffd8ded5d80cd243427db89be6671b188348ba8a82be9f8e22305818b064dc3f1e31e6a383bda5da247f46356305747e5dc7fc57846048e483ed05ae92d727b17205e3eaca16d2cfb5097db26164aaf81223d2c095f5db1d380a0f8ae49c2410c22f1ea7dec987c5a4fcd0d989c4b82c35df5bd2d93da58a6482847978778ef33208e11228ac1586805d7e54f684a90b8b5dcbf4c53350567c1be4742f715489582bedca6f3391f6bffa32bf2a45171c29ad417a0add5992956f328ef78affa6aa746c1aa956809460388c96ff3493675afa20efc6d9b5c99d56e8b66fb65d41bff81532cb68582ba851afb21b930615bb0a1bf5fe3cfab0c0846ebb616782b29829360cd20e1003e4707cfaf88589e4b1e4cb5e2e89d6ed6084437e92a48ad89c1cdc3c710f42a1915d056ec4b5faa6928b29eec04db77f67593a2620698936eeb842634294785532092e86f8b87d54a0062ab1aa2bf985aba729985157b50d4791d13a78acdca4fdd2e40537b99e10e5ebdb82ee32936bafefed18f245bb976905242e8b0ef479bfe781b025d1454d141cd3b4010f280757dae532e350a0e71db2290435cb7f72a358a0dac09a4be0980712ce314c4849710bffa883e090a55d6831f4be5aa072ac3722e6bf8f47d687dfc16e70a6b44dc656f3d3a97978136819d38295ae9a9c93a52fe80d31969111935128219cafa5a5af73d9dabcacddc9b10bbf944ffa06f9a188a0eab1a8a6bbfc8f0f3413f38ffcb0ebd433219fd5f2fa0a7f11e4b7a95ab48733a5b972256a3406ed2e9613fa60a1e503720e7ede42f590b6be123ec2da34d94c2ccbc28625acef55a499a1afcc8ef85e2565d57c2d7fdb02bd7d6e3c0263430fff6d6f3956021b53f9183affd555eb946913f8bd41cb8f5f40930db7eaf624501d66c3185f665ca98ed4f37866c49514874c82b753f7079dcbd4dedd11d48c47968d49b30aef72bffa11e8b77cb3e38476e4aa0d0fb6aef197b912ec4541e5896c3b0dc685b93a0b3163e505f431b19b5e4d837ade69f2e91a852c34aa45aaea5852840471340e99b5e50416b878195e5962baeebcfe5ec15cb2936fa0d86e9d1ef2d9d68b0b2b159deee190762b2f7f2ae958531a27173965b5a854c88947eb09c789facf13e9d159c7ae54ff426bf6e903fa311d8066d25686c1bc4c0f53009778233ae85eeb8ef2b9c3fe4748ef3bb4af7d5baf5cb9c264b59c86204889f0e4af4a8661f9de0a8c936acfc046e1d5b48a450b55323f8d623bbacb5cdac4af4a64ba8b486bb94facf7137511251d45baa69cb2d0a1c99f3d06292582954b8dcc05a123bd7da9b1c9c55989853a6dde9e4c9b9044dc2aeb6bd7b5e58a60b91b3d15f58ff8eb399c242b24c1dc325ad7ce27d376cba9e7c61926dca4ed76e1d66ca39b9796b11ef4f8438c840e8f788d3af839a2b69a3844643557a86f5852daf9a44252f5cfcd900ea4fc047ba080f17eaf97363ebc00ea703e608ec79812ee0e71c0df33db9587df19026faabb5df06482dbf114a3957e7ff36341fa2f2a792880940cc56fa9886e062c676bbfe82ebd4356edebf41e7fdeedbfbc9fcfe8d9ed5c5539573e"}]}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r6}, @MACSEC_ATTR_OFFLOAD={0x228, 0x9, 0x0, 0x1, [@generic="5c206e2376361a6d41de36bdc942fd80d9217861eabaedaaeb7149117d2cc25fc0f76d38dfb6f5b47af371f3a182cfa29980662e38015bedc84a6d4b0d85f1", @nested={0x18, 0xbf, 0x0, 0x1, [@typed={0x14, 0xa, 0x0, 0x0, @ipv6=@private0}]}, @nested={0x4, 0x50}, @typed={0x5, 0xf3, 0x0, 0x0, @str='\x00'}, @generic="295a33554dedd45c52dcc8bfa3b25109a4c06449209141466029ed2c8b761df079c8324d554454c07934713c92ec9f4925c5b00c0c4eadb455a6b543e9864c25223c4a64840a1bb9138e83dbe26f510b2331053b0176cd3fd95d0720961ae1f81709bb6dbf7d35e8ce4e13c345b070616f77d1a27dac0d237ef626839c7d554f6a3dd3b79d983c07ef3e638a8957cc30a6", @nested={0x126, 0x15, 0x0, 0x1, [@typed={0x8, 0x123, 0x0, 0x0, @uid=r7}, @nested={0x4, 0x8}, @generic="e1582afa31caa24fa014d72982516719bef399905d3c2de2e0ae7d8b3de75e66a17fbc2d79730bee87281d356520d8b43faa3706f26dc0cbdcb7b8cd599ef901", @generic="4e45cefabd5d848425e34cf7f657eba4ec56c9806f5ba85f8e92f8e5e9bcc61ade926b316867e31f961c3cd92e9d7e214c9d4212f000b904ceef1f79eb4600f1e188d01f7414824ec8301a8a0658b3676e9ce15cf97e5ba67aa84f42709251375e8c0a1b562d25a74058384440110895d9df754435e309cae741f3c38d38e02b3251dfa61f57bc4a9da4d1cb14006f33b9e69ccb2604f8f194b4b2ed9f7e51b07e4e6e2434c681e1a8a75050de186be1966eed2a389c4fb0ec8f3287bc7117727e9a6ef718778a5532df6b1a4dda", @nested={0x4, 0x97}, @typed={0x4, 0x12b}]}, @typed={0x8, 0x34, 0x0, 0x0, @fd=r8}]}, @MACSEC_ATTR_SA_CONFIG={0x14b, 0x3, 0x0, 0x1, [@nested={0x8, 0x37, 0x0, 0x1, [@nested={0x4, 0x31}]}, @generic="36b2442fabb4b435304d41d13598a6f9b543495371a1406ddf699ff4ee8b77a01a1097d3e6c707293559057e27ca571f32375a32bf2aa0925ba8d65f75911bd8827d1ad9fbca138c15272fea73657b497ee1b77d7371fe67bb35f63a1803a1b8b9e4c40df543ad5bd7be5ec92c69eb", @nested={0xc5, 0x9d, 0x0, 0x1, [@typed={0x4, 0x4f}, @typed={0x8, 0x97, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x131, 0x0, 0x0, @pid=r9}, @typed={0xc, 0x41, 0x0, 0x0, @u64=0x1}, @nested={0x4, 0x136}, @generic="1348837acb6fedb00da380d119f374d622cf9b9cf5968ece8e50e42fd06c92131bd6af0a6e4ba9a39581de617eb9917af4ac8aa0a5e65c4c427cd1c9642d84c008a32f2754c3f5c4147db7bc80150b2196e9464dc2b63e128a332bdda86bf4b0fc49dc410e7ddf97e4b062014d9aaf4b2d043a5642d85b1691b872e993fd14bd99a1d7b03f52fd885f1a4d67b0c64146c3acd99f44", @typed={0x8, 0x157, 0x0, 0x0, @str='$^,\x00'}]}, @typed={0x8, 0x118, 0x0, 0x0, @fd=r3}]}, @MACSEC_ATTR_SA_CONFIG={0x12c, 0x3, 0x0, 0x1, [@typed={0x79, 0x10c, 0x0, 0x0, @binary="37d19a341bfe5906b5113dc8a46dcd553b2091ee0ab182452835e5390a7a5e209a33b794737f5d8fd2f0d7d7b86350eeb9333ebcdd3feadc17e405031a17294adab7e3ee367be72e2342bd8033f098d31415280465afd5df8fa20a8db43ef1edd2d4a5d7c41c9af817f87844acb9d1bdc273b7f20c"}, @nested={0xab, 0xaf, 0x0, 0x1, [@typed={0x7, 0x14d, 0x0, 0x0, @str='{+\x00'}, @generic="6462ad483d785a885d202ae04a8aae77a624d94c27fab672efda1d2b97a42e45ce50fb30a24f46cf5b043df2f2a755d709a91dbb97748026da66d3a16c823914d58cc3d79ba0dae987dcb1b6cc183644dc60c7ba56f2c54709f15dcdf04526ecb35e43f987bb827fb1001a29f0a0278651fb4c24a9f487a8ab328cf7d109f008512abdb5850bc4422b8a911a2b066324a26436581290a5382a9bd716f56b50"]}]}, @MACSEC_ATTR_SA_CONFIG={0x14, 0x3, 0x0, 0x1, [@typed={0x8, 0x150, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0xd1, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x150c}, 0x1, 0x0, 0x0, 0x40}, 0x20000804) r10 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) dup3$auto(0x8000000000000001, 0x5, 0x800080000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r10, 0xc1105517, &(0x7f0000000580)={{@inferred=r9, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f06010043eeb0b053030001ffff000e00000000000000000000fe00"}, 0x4, 0x966, 0x3, @inferred=r9, @integer={0x800000000000400e, 0x80002000080b752, 0x80000000}, "6cc1294d61a4f1ff285863c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) close_range$auto(0x2, 0x8, 0x0) 1m9.222757597s ago: executing program 4 (id=3212): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = socket(0x23, 0x2, 0x1000) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/033/001\x00', 0xa901, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c00"], 0x1ac}}, 0x40000) (async) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xffffffffffffffff, 0x8000) (async, rerun: 64) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dri/card1\x00', 0x791802, 0x0) (async, rerun: 64) ioctl$auto(r0, 0x9000643a, r1) openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f00000001c0), 0x81, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/tty/tty6/power/runtime_suspended_time\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/58, 0x3a) (async) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/platform/dummy_hcd.6/usb7/7-0:1.0/uevent\x00', 0x0, 0x0) read$auto(r4, &(0x7f0000000100)='\xcb%)\x00', 0x7) (async) read$auto(r0, 0x0, 0x80000000) (async) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x9}, 0x5) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)={0xfffffff9, 0x44, 0x4, 0x2, 0xffffffff, 0x8, "f76052b8a440305f2c1f16b27eaca87fa6d6d25c2fbf554183b9249ccc0b7ebb2308a9269d4981a4e6155cb7696a6267305d61052948c4966015506e5690bd50"}) (async) r6 = prctl$auto(0x4d, 0x2, 0x0, 0x0, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638929210, 0x0) (async) ioctl$auto_UDMABUF_CREATE(r6, 0x40187542, &(0x7f00000000c0)={0xffffffffffffffff, 0xfffffbff, 0x9}) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1a00", @ANYRES8=r6, @ANYRESOCT=r4, @ANYRES32=r3], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x102, &(0x7f0000000340)={0x0, 0xc30}, 0x1, 0x0, 0x0, 0x7fff}, 0x7}, 0x0, 0x0) (async) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000001940), 0x101000, 0x0) (async) socket(0x2, 0x801, 0x100) connect$auto(0x3, 0x0, 0x51) (async) setsockopt$auto(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)='\x98\x00', 0xb559) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/node/node0/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0xe8202, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) 1m8.726992973s ago: executing program 4 (id=3215): io_uring_setup$auto(0x401, 0x0) (async) io_uring_setup$auto(0x401, 0x0) mmap$auto(0x3, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) (async) read$auto(r0, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x54b043, 0x0) (async) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x54b043, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r2 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_REPORT_PMSR(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/smt/active\x00', 0x8800, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/smt/active\x00', 0x8800, 0x0) read$auto(r3, &(0x7f0000000180)='!]\x00', 0x7fff) memfd_create$auto(0x0, 0x2) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0x411, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0x411, 0x401, 0x8000) madvise$auto(0x5af, 0xfffffffffffeffff, 0x15) (async) madvise$auto(0x5af, 0xfffffffffffeffff, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x5, 0x2020009, 0x203, 0xeb1, r0, 0x8000) (async) mmap$auto(0x5, 0x2020009, 0x203, 0xeb1, r0, 0x8000) unshare$auto(0x40000080) timer_getoverrun$auto(0x5) rename$auto(0x0, &(0x7f0000000140)='./file0\x00') madvise$auto(0x0, 0xff7fffffffff0001, 0x15) (async) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) getcpu$auto(0x0, 0x0, 0x0) 1m7.258676011s ago: executing program 4 (id=3219): socket(0x2, 0x80802, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fb3d89cb809172a3320003008000400088"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000001980)=ANY=[@ANYBLOB=' ', @ANYRES16, @ANYBLOB="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", @ANYRES32], 0x920}, 0x1, 0x0, 0x0, 0xc080}, 0x1) socket(0x29, 0x4, 0xfffffffd) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x3, 0x100) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x802, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\xb0\xa1\xeeJ\xd8\xef\xc8t\x9d\x1e=J\x91W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7b#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbr\xb9\xc3\xacH!\xc1\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2?\x0e\x85\xaaIGu\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1bx#\x87\xa9\x10\x9b\xf8YD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*w\x13\x96\xd5\xd0\x877\x12\xbc\xa1\xd0h@|\xf9\xfa\x9b\x17\x94\xb9\xe7\xf3\x15\x05\x91\xe8\x98p\x7f:\xd7s\xd9wo\x82\xda\xec\x91\xb7\xd9;H\x8a\b\x00\x00\x00\x00\x00\x00\x00\x8aZ\x94\x14$X7\xaeW6=^I\x9fQ\r5c\x81\xca]\x97m\x89o\x8f\xd8}P>I\xd0\xb3\x88C\xd7', 0x100000a3d9) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) socket(0x2, 0x3, 0xa) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd5, 0x948b, 0x3, 0x15f4da0a, 0x4, 0x3, 0x62, 0x80000002, 0x7, 0x1, 0x9, 0x3, 0xfffffffffefffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x1000, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x8062, 0x80000001, 0x800, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0) r1 = openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x20400, 0x0) ioctl$auto_TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000140)=0xbc) select$auto(0x5, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000001ff, 0x4, 0xd, 0x9, 0x3, 0x3, 0x1000000015f4da0a, 0x4, 0x3, 0x62, 0x180000023, 0xe, 0x6d3e, 0xd, 0xd, 0xf]}, 0x0) r2 = openat$auto_stats_fops_(0xffffffffffffff9c, 0x0, 0x40002, 0x0) read$auto_stats_fops_(r2, 0x0, 0x0) unshare$auto(0x3) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x9b1, 0x400, 0x3, 0x9, 0x6, 0x8, 0x2000000004, 0x11ffffffffffb, 0xf6, 0x2, 0x6, 0x10, 0x80, 0x7ff, 0x8000, 0x81, 0x1, 0x202, 0x9, 0xbca7, 0x4, 0x0, 0x0, 0x0, 0x694, [0x2, 0x6, 0x8, 0x5, 0x0, 0x0, 0x20000000000, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffc01, 0x100, 0xfffffbfffffffffb, 0x0, 0x9, 0x2000000, 0xfffffffffffffffe, 0x9, 0x8, 0x0, 0x0, 0x0, 0x8000000000000000, 0xfffffffffffffffc, 0x1, 0x0, 0x7fffffff, 0x101, 0x0, 0x20000000000000, 0x0, 0x1000000000000200, 0x0, 0x400, 0x96, 0x5, 0x4, 0xe17, 0x0, 0x6]}, 0x1fe, 0x1) 1m5.313961795s ago: executing program 4 (id=3234): r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0c\x00', 0x40003, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_SW_PARAMS2(r0, 0xc0884113, &(0x7f0000000100)={0xf2, 0x1, 0x5, 0x1, 0x3, 0x6, 0x5855, 0xffffffff, 0x5, 0xffff, 0x6, 0x1, "915cef8eff9c31d51f31532c700e51a5bc6ca58adb5cf3aac5b717883dfa4c3010f44c4ab254def9252b04a0a532cb7254fab56a7072e0c6"}) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0xdd}) 1m5.046235441s ago: executing program 4 (id=3236): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi/drivers/st/try_direct_io\x00', 0x121000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) epoll_create$auto(0x3e) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1f, 0x5, 0x8000000000000000, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto(r0, 0x89f0, r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = pipe2$auto(0x0, 0x0) ioctl$auto_XFS_IOC_FREESP(r1, 0x4030580b, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1b0026bd7000fedbdf2503000000049e55d9e60003800c00558008000100", @ANYRES32=0x0, @ANYBLOB="12000100898771fdc19f1779048590822ad9000004000280"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r4, 0x110, 0x1, 0x0, 0x4) read$auto_rng_chrdev_ops_core(0xffffffffffffffff, &(0x7f0000000040)=""/4096, 0xfffffe82) 49.893211602s ago: executing program 33 (id=3236): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi/drivers/st/try_direct_io\x00', 0x121000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) epoll_create$auto(0x3e) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1f, 0x5, 0x8000000000000000, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto(r0, 0x89f0, r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = pipe2$auto(0x0, 0x0) ioctl$auto_XFS_IOC_FREESP(r1, 0x4030580b, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1b0026bd7000fedbdf2503000000049e55d9e60003800c00558008000100", @ANYRES32=0x0, @ANYBLOB="12000100898771fdc19f1779048590822ad9000004000280"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r4, 0x110, 0x1, 0x0, 0x4) read$auto_rng_chrdev_ops_core(0xffffffffffffffff, &(0x7f0000000040)=""/4096, 0xfffffe82) 46.836914545s ago: executing program 1 (id=3324): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto_F_NOTIFY(r1, 0x402, 0x9000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) shutdown$auto(0x200000003, 0x2) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x1, 0x84) setsockopt$auto(r3, 0x0, 0x60, 0x0, 0x6f7250c4) syz_genetlink_get_family_id$auto_ethtool(0x0, r3) socket(0x1d, 0x3, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) futex$auto(0x0, 0x5, 0x2, 0x0, 0x0, 0x7ffffffb) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) 45.501489653s ago: executing program 1 (id=3328): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000000), r0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020089, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket(0x2, 0x80802, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000002, 0x40000000000eb1, r0, 0x8000) socket(0x6, 0x2, 0xfffffffe) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffffff, &(0x7f0000000100)=""/169, 0xa9) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x1000}]}, 0x28}, 0x1, 0x1400000000000000, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) openat$auto_fops_x16_ro_(0xffffffffffffff9c, 0x0, 0x8040, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) mmap$auto(0xffffffffffffff01, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) mremap$auto(0x0, 0xe7, 0x3fd6, 0x3, 0x3fe) 43.822030802s ago: executing program 1 (id=3332): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000740)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x83) statmount$auto(0x0, 0x0, 0x3, 0xd) pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x11\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a) 43.646959558s ago: executing program 1 (id=3335): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/oom_adj\x00', 0x410981, 0x0) read$auto(r0, 0x0, 0x4) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) r2 = pipe$auto(0x0) select$auto(0x9, 0x0, 0x0, &(0x7f0000000040)={[0xc, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0x1]}, 0x0) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) r3 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r3, 0x0, 0x3) vmsplice$auto(0x2, &(0x7f00000000c0)={0x0, 0x7f}, 0x8000000000000001, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) mmap$auto(0x0, 0x2, 0x800000df, 0x9b72, 0xffffffffffffffff, 0x8000) adjtimex$auto(0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), r2) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), 0xffffffffffffffff) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/inject\x00', 0x0, 0x0) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r5, 0x107, 0x14, 0x0, 0x800004) ioctl$auto_VHOST_SET_MEM_TABLE(r4, 0x4001af84, 0x0) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, 0x0, 0x200, 0x0) socket(0xa, 0x1, 0x3a) 42.590156902s ago: executing program 1 (id=3338): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYBLOB], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x10001, &(0x7f0000000080)={&(0x7f0000000040), 0x1900}, 0x4, 0x0, 0x8, 0x7}, 0x7}, 0x5, 0x66a6, 0x0) 41.590921925s ago: executing program 1 (id=3343): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/03.0\x00', 0x181000, 0x0) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 26.440136626s ago: executing program 34 (id=3343): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/03.0\x00', 0x181000, 0x0) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 18.870351337s ago: executing program 5 (id=3438): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0xffffffffffffffff, 0x300000000000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) epoll_pwait2$auto(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, 0x8) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/netdevsim/netdevsim3/hwstats/l3/disable_ifindex\x00', 0x1242, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/neigh/batadv0/mcast_solicit\x00', 0x2000, 0x0) read$auto(r2, 0x0, 0x3ff) write$auto(r1, 0x0, 0x9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5) r4 = socket(0x2, 0x3, 0x100) close_range$auto(0x2, 0x8, 0x0) pipe$auto(&(0x7f0000000000)=0xffffffffffffffff) splice$auto(r5, 0x0, r4, 0x0, 0x7fffffffffffffff, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000e80)={0x1c, r7, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HWSIM_ATTR_RADIO_NAME={0x5, 0x11, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000084}, 0x10) sysfs$auto(0x2, 0x0, 0x0) getsockopt$auto(0xffffffffffffffff, 0x40000000113, 0x4, 0xfffffffffffffffc, 0x0) waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000140)={@_si_pad}, 0x5, 0x0) sendmsg$auto_TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1620}, 0x1, 0x0, 0x0, 0x1094}, 0x880) setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x1) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)="01", 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 18.017578749s ago: executing program 5 (id=3443): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) unshare$auto(0x40000080) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) select$auto(0xffffffff, &(0x7f0000000040)={[0x54, 0x10, 0x800000c8be, 0x8, 0x273a, 0x0, 0xb, 0x5, 0x5, 0x330, 0x7, 0x200cf, 0x45, 0xc, 0x5, 0xb98]}, 0x0, 0x0, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYBLOB="010025bd7000fcdbdf25020000002c00018028003c8008001b"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0xa00}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) read$auto(r2, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) write$auto(r1, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r3 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x1, 0x9, 0x7, 0x3b, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x9, 0x3, 0x40fffc, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1000000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7]}, 0x202, 0xd) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) r5 = io_uring_setup$auto(0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendto$auto(0x3, 0x0, 0x13, 0xfffffff8, &(0x7f0000000440)=@xdp={0x2c, 0xdd86, r6, 0x2f}, 0x22) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) ioctl$auto_XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000000380)={0x2, @raw=0xf, @raw=0x6, 0x3, 0x4, '\x00', {0x1, 0x9, 0x400, 0x0, 0xffffffffffffffff, 0x19a, 0xdb4, 0x327, {0x596, 0x3}, {0x28aa, 0xfffffb3f}, {0x9, 0x3}, 0x7, 0x7, 0x100, 0x1, 0x2510000, 0x8001, 0x8, 0x3, 0xff92, 0x4, '\x00', 0x0, 0x3, 0x0, 0xe502}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'veth0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000000480)={0x16b0, r4, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1164, 0x3, 0x0, 0x1, [@nested={0x1158, 0x92, 0x0, 0x1, [@generic="9af98a70c970ef7f203e4cdbb850c7ce5fe29072abe0aa7f82076c825784d4da24ec7d21348a9ca0302ec708e0b8bcf0a9359cb5e31305f2bd9bc353ea143437456e3bb4d25117766a6e63d8f83e8a3e1e84c85298135389f7817e53", @nested={0x4, 0x159}, @generic="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", @generic="acd0b5c60062aaf846f9f90b68257ad9e5e648497c9a93d2f2da5a42eff59e1035d317744f79e3f820283b3c1eebf3b772e72cd60757cc053a16cf49b5acbedd9e310a0c9e935f428caafa3373200051947e2c4950f3b4bdfda635a4e1c2e0f9024e9b2841feccac8ba906a25c3ed65503855ff1bf04283c40f1f17961f6560cee02ee931464d3547964c1937d03d42fdfda18f1df1bf0fb19991a8a91506660a81a930646e72f59b46445c54b", @generic="eda17aa89405e6195e7644704e429de5bfd3de7a931d04ba2d5a397edd3ec858a9bf2d9f6903878ef503e1f36c6b7a11224dd663d688be30763a8739e5798e286eee25005a2668"]}, @typed={0x8, 0x26, 0x0, 0x0, @fd=r3}]}, @ETHTOOL_A_FEATURES_WANTED={0x28b, 0x3, 0x0, 0x1, [@generic="871c3d12084e6a74b164d5bf45d1d5f124bbf9bb846b187d35d0d57a47de389568c08b06a57bf23994c5167b26447616ff47a48489db48", @typed={0x8, 0x92, 0x0, 0x0, @u32=0x3}, @nested={0x18, 0x87, 0x0, 0x1, [@nested={0x4, 0x92}, @nested={0x4, 0x9f}, @nested={0x4, 0x12}, @typed={0x5, 0xe9, 0x0, 0x0, @str='\x00'}]}, @typed={0x4, 0xf4}, @nested={0x18, 0xc9, 0x0, 0x1, [@typed={0xc, 0x135, 0x0, 0x0, @u64=0xf0f}, @typed={0x8, 0xa0, 0x0, 0x0, @fd=r0}]}, @generic="d6c956b1d3793f53f78ea76af4034cac629c8c81d352226d91c999c18085dc4e4d62888f717d0b9b68bcb4085d9c0947c7df93e12014372aac0940cfaeed1a6ed583c723910eec5dd7cbb6a69839ebd721d333c9004af47cd05b4417fbcb9be42bbaaa0124d70b13b8515e37cd47862e229be650926cb1aabcdc338fc8dde9b87d34c7bc098766be0392cd027bb157d435addd0663eb86e0371adf77d8842a477b3caf8aae3b6d630fe6c047e53c25e216", @typed={0x8, 0x23, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="97a5be273f947e19fa074e", @generic="588d56457c8bb7ddeb0c68cd4cbc5f437088058f3f55f1c1a8769e27f601106783233ff19c9814f448d97f4dd71d6c01db61d8a908e3b06b20c4638bc53a9dab2a373bd3d1fb63d749cf1b3e8c7e8c889b6c", @generic="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"]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_FEATURES_WANTED={0x238, 0x3, 0x0, 0x1, [@typed={0x6d, 0x58, 0x0, 0x0, @binary="5e55675c261166b319302ca000e2536829bea092d2f9267a1c460f4cd8d2400b7d2f6bc995b3f606b9a773edf017934d5e7c7826e6c65ff371fdb8e34e9e5eb0cec16d81037f61f94ce73c0e2044b20318272abe966a018d443422cef4007333a747ed35a4fe6ac355"}, @typed={0xab, 0x72, 0x0, 0x0, @binary="04e04c2990553193c46728f721168ddfd80c35c8ccd9da043048180a65353fcefb6ab637216389afd50b6964420a8d7e7e1285ea2a9868ba8888bc2934c126a135c755d540096f3a462840593737cae96edc1bf2c85d2ac0deb0488dc34b42a6dda0947408c952434d4069fd50b070f190ac0a1ad52271d8b9fc52fa6baedd46a5a4dd2ca07c05ba1a54ea7baca82e52eb32e7b89e7c231abed2c1a2edc93fe70ef1219cb7491e"}, @nested={0x118, 0x50, 0x0, 0x1, [@typed={0x8, 0x9f, 0x0, 0x0, @uid=r8}, @nested={0x4, 0x7f}, @typed={0xf3, 0x7d, 0x0, 0x0, @binary="f8dbc405e89d7bdb5477650e35ef6287a04326ed9d010e691fcaf2d01e136e935aae7b5c231a3f6ef0dea06bcdce5f5f610d0278d7fd879255dd31e853ef88f63b5eacf1321302e913a0f0b3e29178ae73c7fc38af88082967c93014d480823ededc4e3e3314364467d2ba7051720c45723b34808e6130372cc585a61ccfb6ac780bbd00a27ce978410b03b070514c9cf7a3071eed9fcf8dad575602c29b56b5ccea817d8b28a603f8cc3200eee3115a8b7aa5144866290fc5bc5e3f8413658d32d227ff00c22459d524e5619e26ac181a7613806c6689bc1cd44391e9ae7f061dac6ef146aadf7e25646c5f19b601"}, @typed={0x14, 0x12, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1000}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x16b0}, 0x1, 0x0, 0x0, 0x48001}, 0x20000000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) 15.360202454s ago: executing program 5 (id=3450): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, 0x0, 0x200080, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async\x00', 0x183941, 0x0) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(r1, 0x9210641f, 0xd) socket(0x10, 0x2, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x18bc00, 0x0) close_range$auto(0x0, r0, 0x0) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/current_tracer\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/nr4/broadcast\x00', 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x3) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101840, 0x0) socketpair$auto(0xb, 0xc, 0x1000, 0x0) r2 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r2, 0x0, 0xc3) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/nr0/flags\x00', 0xb02, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) 14.54785133s ago: executing program 5 (id=3456): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) r1 = prctl$auto(0x9, 0x1, 0x0, 0x10001, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001180), r1) mount_setattr$auto(r1, &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000000c0)={0x8, 0x2, 0x1ab3, @raw=0x7f}, 0x9c) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) clock_getres$auto(0x10000003, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x100000, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x42000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000300)={{@raw=0x6, 0x0, 0x8001, 0x2, "da14cf93e7670976d4df4660872c34e34ab92824711bacf3578dcec408cf5180d03a4d126edb3169db6d48ac"}, 0x1, @iec958={"28f6a86309b1e098a7dfa272f95c4c28615313f81f02a4eb", "77a2e9b1b0224a8ef0ac25ff0db0b6ec20c55cccbf4e9b253241777363b62fbe19f64f49f5ed0205399a691cb53e4086d6ec9dcbc5173fee439c2db7f3d5f2d4dd2a267a11e3c0cc771cdddef6bdb02a85cf5ea2ecc26fa3fe291d1e45404619547117c0d45a0de14bc3b9c22d705152efa9d2cfb220c6210dd7606723fb4d6d8ea3e197b19203c65d90e3c761870cbd392bea", 0x0, "e8134be5"}, "a8949c7d9c57acd66da4c5f111166031ad47ebfed172b36a28d7b0204e3a90e9a6c41064df45da18212d9c4e61a29b8146bd0c0284d89751eb5c58cb32c2abf739599063c9a0820f08f1c1b3645f00006dcd033a712822785eeb6a2c41b6d7c00f5e965c1d0000000000000000000000000400"}) ioctl$auto(r0, 0x8910, r0) r3 = openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000100), 0x8002, 0x0) getsockopt$auto_SO_PASSPIDFD(r3, 0x40, 0x4c, &(0x7f0000000140)='/dev/pts/ptmx\x00', &(0x7f0000000180)=0xd9e4) 10.741778618s ago: executing program 5 (id=3466): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x10, &(0x7f0000000000)={0x0, 0xd6c6}, 0x2, 0x0, 0xe, 0x4}, 0x3}, 0x200, 0xb07e) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r0 = socket(0x2, 0x80802, 0x0) r1 = memfd_create$auto(0x0, 0x4) statx$auto(r1, 0x0, 0x1000, 0xbdfc, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) setsockopt$auto(r0, 0x11, 0x67, 0x0, 0x8) socket(0x10, 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x57) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x10, &(0x7f0000000000)={0x0, 0xd6c6}, 0x2, 0x0, 0xe, 0x4}, 0x3}, 0x200, 0xb07e) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x22240, 0x155) (async) socket(0x2, 0x80802, 0x0) (async) memfd_create$auto(0x0, 0x4) (async) statx$auto(r1, 0x0, 0x1000, 0xbdfc, 0x0) (async) socket(0x18, 0xa, 0x1) (async) socket(0xa, 0x2, 0x0) (async) setsockopt$auto(r0, 0x11, 0x67, 0x0, 0x8) (async) socket(0x10, 0x2, 0x0) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x57) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) 10.296227323s ago: executing program 5 (id=3468): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80001, 0x73) r0 = socket(0x26, 0x1, 0x8008) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/03.0\x00', 0x181000, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000100), 0x404280, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0xfffffff9, 0x2, 0x5, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1fb}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x5, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) gettimeofday$auto(0xfffffffffffffffd, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, r0) madvise$auto(0x0, 0x200007, 0x19) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/net/snmp\x00', 0x40, 0x0) pread64$auto(r2, 0x0, 0x80000000, 0x9fffffffd) pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001) mq_notify$auto(0xffffffffffffffff, 0x0) 3.468339057s ago: executing program 2 (id=3492): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) mmap$auto(0x0, 0x2b06, 0xdf, 0xeb1, 0x401, 0x20008000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) getpriority$auto_PRIO_USER(0x2, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) pipe2$auto(0x0, 0x80) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x4, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfff) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r2, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) sendmsg$auto_IPVS_CMD_NEW_DEST(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4040884) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder1\x00', 0x0, 0x0) ioctl$auto_BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) ftruncate$auto(r3, 0x1) r4 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) ioctl$auto_FS_IOC_SETFLAGS(r3, 0x40086602, 0xe20) getcwd$auto(&(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x5) read$auto_state_fops_(r4, &(0x7f0000000180)=""/61, 0xfffffeeb) 3.135753957s ago: executing program 6 (id=3493): sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) ioctl$auto(0xc8, 0x800454e1, 0x5c8d) socket(0x2, 0x80802, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff038}}) write$auto(r0, 0x0, 0x6) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r0, 0x5c, &(0x7f0000000000)='\\9^\\#\'}!\x00', &(0x7f0000000100)="daba5f9fbd8159bc23cd450f58c6a1d31b469c03c5556bca9d7b7bc8ba56d955952ccb9d2d718bf4da049646cd5637c8997dcf094c", 0x4) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) io_uring_setup$auto(0x8000, 0x0) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 2.712535929s ago: executing program 6 (id=3495): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000fddbdf252800030008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) 2.485587719s ago: executing program 6 (id=3497): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) mmap$auto(0x8000000000003, 0x4, 0x10000000010df, 0xeb2, 0x401, 0x8008000) ioctl$auto(0x3, 0x81484d11, 0x38) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mkdir$auto(&(0x7f00000001c0)='./file0\x00', 0x0) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./cgroup\x00') open(&(0x7f0000000100)='.\x00', 0x595002, 0x60c) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r1, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r4 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x200000, 0x0) write$auto_proc_uid_map_operations_base(r4, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x30, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000700", @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8103cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x22044014) madvise$auto(0x0, 0x200007, 0x19) socket(0x18, 0x2, 0x0) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x10000000000000, 0x11, 0xfffffffffffffffa, 0x8000) ioctl$auto(0x3, 0x89e0, 0x91) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) 2.462194963s ago: executing program 2 (id=3498): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/03.0\x00', 0x181000, 0x0) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) 1.941122285s ago: executing program 0 (id=3501): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x801, 0x84) socket(0x2, 0x1, 0x0) setsockopt$auto(0x1, 0x1, 0xa, &(0x7f0000000000)='\xe1', 0xbb) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto(0x1, 0x541b, 0x8) (fail_nth: 2) 1.424458283s ago: executing program 2 (id=3502): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x5, 0x0) fsconfig$auto_SHMEM_HUGE_DENY(r0, 0x7ff, &(0x7f0000000000)='B+\x00', &(0x7f00000000c0)="8b24754209d3be7367a28648dfd82cdcfa06f5a5ec19bcdac3bbc7c8d3c3284babbb94f2e6081740b37b3f319d6b41c953b5f8d0ed222cb450606edbe397b061e5c1093a9373ae93c223b57a39f13dd4e5dc7499b0876c279a851bd897", 0xffffffffffffffff) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/iomem\x00', 0x1c9a02, 0x0) pread64$auto(r1, 0x0, 0x100000001, 0x500) setsockopt$auto(0x3, 0x4, 0x14, 0x0, 0x80008) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/tunl0/napi_defer_hard_irqs\x00', 0x28b42, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x2, 0x5, 0x0) (async) fsconfig$auto_SHMEM_HUGE_DENY(r0, 0x7ff, &(0x7f0000000000)='B+\x00', &(0x7f00000000c0)="8b24754209d3be7367a28648dfd82cdcfa06f5a5ec19bcdac3bbc7c8d3c3284babbb94f2e6081740b37b3f319d6b41c953b5f8d0ed222cb450606edbe397b061e5c1093a9373ae93c223b57a39f13dd4e5dc7499b0876c279a851bd897", 0xffffffffffffffff) (async) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/iomem\x00', 0x1c9a02, 0x0) (async) pread64$auto(r1, 0x0, 0x100000001, 0x500) (async) setsockopt$auto(0x3, 0x4, 0x14, 0x0, 0x80008) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/tunl0/napi_defer_hard_irqs\x00', 0x28b42, 0x0) (async) 1.389164723s ago: executing program 6 (id=3503): sysfs$auto(0x2, 0xe, 0x0) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x40146f2c, 0x0) select$auto(0x7, 0x0, &(0x7f0000000100)={[0xb7, 0x5, 0x0, 0xfffffffffffffff6, 0x7, 0x3ff, 0xdffffffffffffff8, 0x2, 0x0, 0x10000005e58296f, 0x6, 0x7, 0x3, 0x200, 0x1, 0x9]}, 0x0, 0x0) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x20000, 0x0) ioctl$auto_EVIOCSREP(r1, 0x40084503, &(0x7f0000000080)=[0x80000001, 0x21]) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) keyctl$auto(0x2, 0xffffeffffffffffe, 0x107, 0x803, 0x800000000000c) r2 = socket(0x2b, 0x1, 0x0) socket(0x1d, 0x80000, 0xff) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) io_uring_setup$auto(0x8000, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/system/cpu/vulnerabilities/spectre_v2\x00', 0x40780, 0x0) read$auto(r3, 0x0, 0x400006) openat$auto_component_list_fops_(0xffffffffffffff9c, 0x0, 0x100, 0x0) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 1.302903571s ago: executing program 2 (id=3504): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/03.0\x00', 0x181000, 0x0) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.132384678s ago: executing program 0 (id=3505): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000340), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f000001f300), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r1], 0x1ac}}, 0x40000) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, 0x0) 970.993186ms ago: executing program 2 (id=3506): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000fddbdf25083f030008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) 953.563457ms ago: executing program 0 (id=3507): r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffffffffffd03, &(0x7f00000001c0)) 834.301256ms ago: executing program 0 (id=3508): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/fib_trie\x00', 0x0, 0x0) pread64$auto(r0, &(0x7f0000000540)='\x00eth1\x00\xe0,\x17\xa0\xf7\x89Pl\x84K?\x01\x84\xa1i\xe00\x81\x18\xad\x90I^\x99M\xe0W\x14\x11\xf4\xeb\x90\xba\v\xc5\x13*\xfe\x90\xb1\xa9O\xa5?\xaa\x8fTi\xd6\x88Q\xda\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf4\x00\x00\x00', 0x20000000003f, 0x7) 674.801378ms ago: executing program 2 (id=3509): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/conf/nlmon0/addr_gen_mode\x00', 0xa02, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x1a, 0x0, 0xfffffffffffffffc, 0x5}, 0x6}, 0x1, 0x401) r1 = socket(0xa, 0x5, 0x84) sendto$auto(r1, 0x0, 0x401, 0x6358c0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c00", @ANYRES8], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000000500)={0x400, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280), {0x29}, 0x0, 0x0, &(0x7f00000003c0)=""/193, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58) sendmsg$auto_NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000007a40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44018}, 0x4000004) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000340), 0x98002, 0x0) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x2081, 0x0) r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$auto_UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000040)={{0x7, 0x7, 0x600, 0xffff}, "66ac0801cefa303f5ce268d590eb0d4a4cada7272464294b9183169eef4c1f9a8fdcc8ecc66fdd10316f064ebd893007abb4c0bbc3b82e9b6d2924ad63d5e2bddb6aaf40cddc110d71771552c03de658", 0x40000007}) ioctl$auto_UI_DEV_CREATE(r5, 0x5501, 0x0) syz_genetlink_get_family_id$auto_cifs(&(0x7f0000000000), r3) ioctl$auto_SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000007a80)={0x3, r4, 0x1, "1f0c81eb99b1636d81577b7aa2724358"}) sendfile$auto(r0, 0xffffffffffffffff, 0x0, 0x400000080003) 669.334943ms ago: executing program 0 (id=3510): r0 = socket(0x2, 0x1, 0x100) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) r3 = openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) read$auto(r3, 0x0, 0x20) setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x9) ioctl$auto_TUNSETOFFLOAD(r1, 0x400454d0, 0x0) socket(0xa, 0x80000, 0x3) r4 = fcntl$auto(0x3, 0x4, 0xa553) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto(0x3, 0x541b, 0x38) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) execve$auto(&(0x7f00000001c0)=':,\x00', 0x0, 0x0) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/hsr0/disable_policy\x00', 0x40001, 0x0) write$auto(r5, &(0x7f0000000040)='\x00', 0x9) listen$auto(r0, 0x1ff) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'pim6reg1\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_VLAN(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r6, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_DAT_CACHE_IP4ADDRESS={0x8, 0x23, @rand_addr=0x64010102}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_DAT_CACHE_IP4ADDRESS={0x8, 0x23, @private=0xa010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x824}, 0x8004) socket(0x10, 0x2, 0x4) socket(0x2, 0x3, 0x4) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4001, @loopback}, 0x6b) 417.21773ms ago: executing program 6 (id=3511): sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x50) mbind$auto(0x0, 0xfa9d, 0x8001, &(0x7f0000000300)=0xc9e, 0x400, 0x1) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/sctp/assocs\x00', 0x101080, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x8000003, 0x0, 0x7, 0x0, 0x7, 0x201d55}, 0x2}, 0x800, 0x80000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x15, 0x0, 0xfb3) r0 = socket(0xa, 0x5, 0x84) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x10) sendto$auto(r0, 0x0, 0x401, 0x6358c0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) 86.614942ms ago: executing program 0 (id=3512): sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/ip_tables_names\x00', 0x0, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd6/sched/write1_next_rq\x00', 0x28042, 0x0) write$auto(0x3, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x2, 0x5) socket(0x2, 0x2, 0x0) bpf$auto(0x2, &(0x7f0000000100)=@query={@target_fd=r0, 0x2, 0x25, 0x5, 0x129, @count, 0x0, 0xce98, 0x80000001, 0x0, 0x5}, 0x80000000) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0xf8, 0x20000009}, 0x800009}, 0x7, 0x20000000) io_uring_setup$auto(0x8000, 0x0) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram3/trace/enable\x00', 0x2062, 0x0) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9 \xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x11\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = open(&(0x7f0000000040)='./file0\x00', 0x6041, 0x131) write$auto(r3, 0x0, 0xfffffdf1) mmap$auto(0x4, 0x20009, 0xe2, 0xeb3, 0x403, 0x8004) ioctl$auto_FS_IOC_SETFLAGS2(r3, 0x40086602, 0x0) mprotect$auto(0x0, 0x8000000000800001, 0x8) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 0s ago: executing program 6 (id=3513): mmap$auto(0x7, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x8000000000003, 0x4, 0x10000000010df, 0xeb2, 0x401, 0x8008000) ioctl$auto(0x3, 0x81484d11, 0x38) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mkdir$auto(&(0x7f00000001c0)='./file0\x00', 0x0) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./cgroup\x00') open(&(0x7f0000000100)='.\x00', 0x595002, 0x60c) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/tracing/trace_marker\x00', 0x43, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = prctl$auto(0xe, 0x1, 0x0, 0x800000000001, 0x8000000000000000) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r1, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r4 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x200000, 0x0) write$auto_proc_uid_map_operations_base(r4, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x30, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8103cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x22044014) madvise$auto(0x0, 0x200007, 0x19) socket(0x18, 0x2, 0x0) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x10000000000000, 0x11, 0xfffffffffffffffa, 0x8000) ioctl$auto_IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f0000000380)={@config_section=&(0x7f00000002c0)={"d5df2f990fbfeba6e186a1329a4b908faf61ed83d5872c536dead4149ca77324d897070533ab413f2b3a2058e5470d9217c81cdd075f81a646c0357eb4c30c2b", @padding1, @padding3}}) ioctl$auto(0x3, 0x89e0, 0x91) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) kernel console output (not intermixed with test programs): [ 786.460136][T18815] ? __pfx_genl_rcv_msg+0x10/0x10 [ 786.460160][T18815] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 786.460190][T18815] ? netlink_deliver_tap+0x1ae/0xcc0 [ 786.460224][T18815] genl_rcv+0x28/0x40 [ 786.460244][T18815] netlink_unicast+0x5aa/0x870 [ 786.460268][T18815] ? __pfx_netlink_unicast+0x10/0x10 [ 786.460297][T18815] netlink_sendmsg+0x8b0/0xda0 [ 786.460321][T18815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 786.460339][T18815] ? __import_iovec+0x1d2/0x640 [ 786.460366][T18815] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 786.460391][T18815] ____sys_sendmsg+0x9e1/0xb70 [ 786.460413][T18815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 786.460435][T18815] ? __pfx_____sys_sendmsg+0x10/0x10 [ 786.460463][T18815] ? __pfx_futex_wake_mark+0x10/0x10 [ 786.460496][T18815] ___sys_sendmsg+0x190/0x1e0 [ 786.460522][T18815] ? __pfx____sys_sendmsg+0x10/0x10 [ 786.460576][T18815] __sys_sendmsg+0x170/0x220 [ 786.460606][T18815] ? __pfx___sys_sendmsg+0x10/0x10 [ 786.460636][T18815] ? __x64_sys_futex+0x34f/0x4d0 [ 786.460676][T18815] do_syscall_64+0x106/0xf80 [ 786.460695][T18815] ? clear_bhb_loop+0x40/0x90 [ 786.460718][T18815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.460753][T18815] RIP: 0033:0x7fd2e099c819 [ 786.460772][T18815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.460790][T18815] RSP: 002b:00007fd2e17d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 786.460808][T18815] RAX: ffffffffffffffda RBX: 00007fd2e0c16090 RCX: 00007fd2e099c819 [ 786.460820][T18815] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 786.460832][T18815] RBP: 00007fd2e0a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 786.460843][T18815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 786.460854][T18815] R13: 00007fd2e0c16128 R14: 00007fd2e0c16090 R15: 00007ffc0c06fe38 [ 786.460879][T18815] [ 787.024099][T18835] netlink: 'syz.2.2677': attribute type 2 has an invalid length. [ 787.379594][T18832] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 787.412271][T18832] CPU: 0 UID: 0 PID: 18832 Comm: syz.3.2674 Tainted: G L syzkaller #0 PREEMPT(full) [ 787.412305][T18832] Tainted: [L]=SOFTLOCKUP [ 787.412312][T18832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 787.412323][T18832] Call Trace: [ 787.412330][T18832] [ 787.412339][T18832] dump_stack_lvl+0x100/0x190 [ 787.412373][T18832] sysfs_warn_dup.cold+0x1c/0x28 [ 787.412400][T18832] sysfs_do_create_link_sd+0x113/0x140 [ 787.412431][T18832] sysfs_create_link+0x61/0xc0 [ 787.412459][T18832] device_add+0x675/0x1950 [ 787.412487][T18832] ? __pfx_device_add+0x10/0x10 [ 787.412512][T18832] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 787.412541][T18832] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 787.412577][T18832] wiphy_register+0x1e5b/0x2d30 [ 787.412597][T18832] ? __rtnl_unlock+0xb9/0xf0 [ 787.412618][T18832] ? netdev_run_todo+0x750/0x12c0 [ 787.412643][T18832] ? __pfx_wiphy_register+0x10/0x10 [ 787.412665][T18832] ? __asan_memset+0x23/0x50 [ 787.412693][T18832] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 787.412723][T18832] ieee80211_register_hw+0x2cfd/0x4140 [ 787.412756][T18832] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 787.412778][T18832] ? __pfx___debug_object_init+0x10/0x10 [ 787.412803][T18832] ? find_held_lock+0x2b/0x80 [ 787.412823][T18832] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 787.412844][T18832] ? __hrtimer_setup+0x178/0x280 [ 787.412872][T18832] mac80211_hwsim_new_radio+0x2847/0x57d0 [ 787.412917][T18832] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 787.412946][T18832] hwsim_new_radio_nl+0xc1f/0x1340 [ 787.412970][T18832] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 787.413000][T18832] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 787.413025][T18832] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 787.413053][T18832] genl_family_rcv_msg_doit+0x214/0x300 [ 787.413080][T18832] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 787.413103][T18832] ? genl_get_cmd+0x3ef/0x720 [ 787.413130][T18832] ? bpf_lsm_capable+0x9/0x10 [ 787.413151][T18832] ? security_capable+0x80/0x260 [ 787.413173][T18832] ? ns_capable+0xd2/0xf0 [ 787.413194][T18832] genl_rcv_msg+0x560/0x800 [ 787.413220][T18832] ? __pfx_genl_rcv_msg+0x10/0x10 [ 787.413243][T18832] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 787.413273][T18832] netlink_rcv_skb+0x159/0x420 [ 787.413293][T18832] ? __pfx_genl_rcv_msg+0x10/0x10 [ 787.413317][T18832] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 787.413346][T18832] ? netlink_deliver_tap+0x1ae/0xcc0 [ 787.413381][T18832] genl_rcv+0x28/0x40 [ 787.413400][T18832] netlink_unicast+0x5aa/0x870 [ 787.413423][T18832] ? __pfx_netlink_unicast+0x10/0x10 [ 787.413452][T18832] netlink_sendmsg+0x8b0/0xda0 [ 787.413476][T18832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 787.413494][T18832] ? __import_iovec+0x1d2/0x640 [ 787.413521][T18832] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 787.413545][T18832] ____sys_sendmsg+0x9e1/0xb70 [ 787.413567][T18832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 787.413589][T18832] ? __pfx_____sys_sendmsg+0x10/0x10 [ 787.413622][T18832] ? __pfx_futex_wake_mark+0x10/0x10 [ 787.413655][T18832] ___sys_sendmsg+0x190/0x1e0 [ 787.413681][T18832] ? __pfx____sys_sendmsg+0x10/0x10 [ 787.413733][T18832] __sys_sendmsg+0x170/0x220 [ 787.413763][T18832] ? __pfx___sys_sendmsg+0x10/0x10 [ 787.413792][T18832] ? __x64_sys_futex+0x34f/0x4d0 [ 787.413831][T18832] do_syscall_64+0x106/0xf80 [ 787.413849][T18832] ? clear_bhb_loop+0x40/0x90 [ 787.413872][T18832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.413896][T18832] RIP: 0033:0x7fa865b9c819 [ 787.413915][T18832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.413932][T18832] RSP: 002b:00007fa866a6b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 787.413951][T18832] RAX: ffffffffffffffda RBX: 00007fa865e16090 RCX: 00007fa865b9c819 [ 787.413963][T18832] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 787.413974][T18832] RBP: 00007fa865c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 787.413985][T18832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 787.413997][T18832] R13: 00007fa865e16128 R14: 00007fa865e16090 R15: 00007fff2ac7d8b8 [ 787.414022][T18832] [ 788.508405][T18852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2681'. [ 789.398781][T18860] binder: 18829:18860 ioctl 40086602 e20 returned -22 [ 791.873736][T18923] FAULT_INJECTION: forcing a failure. [ 791.873736][T18923] name failslab, interval 1, probability 0, space 0, times 0 [ 791.949511][T18923] CPU: 0 UID: 0 PID: 18923 Comm: syz.2.2695 Tainted: G L syzkaller #0 PREEMPT(full) [ 791.949544][T18923] Tainted: [L]=SOFTLOCKUP [ 791.949551][T18923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 791.949562][T18923] Call Trace: [ 791.949569][T18923] [ 791.949576][T18923] dump_stack_lvl+0x100/0x190 [ 791.949609][T18923] should_fail_ex.cold+0x5/0xa [ 791.949632][T18923] ? tomoyo_realpath_from_path+0xb6/0x690 [ 791.949661][T18923] should_failslab+0xc2/0x120 [ 791.949683][T18923] __kmalloc_noprof+0xe0/0x850 [ 791.949717][T18923] tomoyo_realpath_from_path+0xb6/0x690 [ 791.949750][T18923] tomoyo_check_open_permission+0x2af/0x3c0 [ 791.949776][T18923] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 791.949821][T18923] ? do_raw_spin_lock+0x128/0x260 [ 791.949852][T18923] ? path_get+0x61/0x80 [ 791.949887][T18923] tomoyo_file_open+0x6b/0x90 [ 791.949907][T18923] security_file_open+0xb5/0x1e0 [ 791.949933][T18923] do_dentry_open+0x5aa/0x1660 [ 791.949963][T18923] ? security_inode_permission+0xbf/0x250 [ 791.949990][T18923] vfs_open+0x82/0x3f0 [ 791.950018][T18923] path_openat+0x208c/0x31a0 [ 791.950047][T18923] ? __pfx_path_openat+0x10/0x10 [ 791.950077][T18923] do_file_open+0x20e/0x430 [ 791.950100][T18923] ? __pfx_do_file_open+0x10/0x10 [ 791.950137][T18923] ? alloc_fd+0x476/0x790 [ 791.950159][T18923] ? do_getname+0x191/0x390 [ 791.950187][T18923] do_sys_openat2+0x10d/0x1e0 [ 791.950213][T18923] ? __pfx_do_sys_openat2+0x10/0x10 [ 791.950242][T18923] ? __fget_files+0x21f/0x3d0 [ 791.950265][T18923] __x64_sys_openat+0x12d/0x210 [ 791.950293][T18923] ? __pfx___x64_sys_openat+0x10/0x10 [ 791.950329][T18923] do_syscall_64+0x106/0xf80 [ 791.950348][T18923] ? clear_bhb_loop+0x40/0x90 [ 791.950371][T18923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.950391][T18923] RIP: 0033:0x7fd2e099c819 [ 791.950407][T18923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 791.950426][T18923] RSP: 002b:00007fd2e17f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 791.950445][T18923] RAX: ffffffffffffffda RBX: 00007fd2e0c15fa0 RCX: 00007fd2e099c819 [ 791.950458][T18923] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 791.950469][T18923] RBP: 00007fd2e0a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 791.950481][T18923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 791.950492][T18923] R13: 00007fd2e0c16038 R14: 00007fd2e0c15fa0 R15: 00007ffc0c06fe38 [ 791.950515][T18923] [ 791.950524][T18923] ERROR: Out of memory at tomoyo_realpath_from_path. [ 792.510698][T18926] snd_virmidi snd_virmidi.0: control 61678:131081:3:y:0 is already present [ 792.579635][T18929] FAULT_INJECTION: forcing a failure. [ 792.579635][T18929] name failslab, interval 1, probability 0, space 0, times 0 [ 792.628916][T18929] CPU: 0 UID: 0 PID: 18929 Comm: syz.1.2697 Tainted: G L syzkaller #0 PREEMPT(full) [ 792.628950][T18929] Tainted: [L]=SOFTLOCKUP [ 792.628957][T18929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 792.628976][T18929] Call Trace: [ 792.628983][T18929] [ 792.628991][T18929] dump_stack_lvl+0x100/0x190 [ 792.629024][T18929] should_fail_ex.cold+0x5/0xa [ 792.629047][T18929] should_failslab+0xc2/0x120 [ 792.629069][T18929] __kmalloc_cache_noprof+0x7a/0x6f0 [ 792.629095][T18929] ? alloc_fdtable+0xbd/0x2d0 [ 792.629112][T18929] ? find_held_lock+0x2b/0x80 [ 792.629131][T18929] ? dup_fd+0x924/0xd10 [ 792.629152][T18929] alloc_fdtable+0xbd/0x2d0 [ 792.629171][T18929] dup_fd+0x995/0xd10 [ 792.629193][T18929] ? apparmor_task_alloc+0x2c1/0x3b0 [ 792.629216][T18929] copy_process+0x268f/0x7a40 [ 792.629239][T18929] ? preempt_schedule_thunk+0x16/0x30 [ 792.629271][T18929] ? __pfx_copy_process+0x10/0x10 [ 792.629294][T18929] ? find_held_lock+0x2b/0x80 [ 792.629316][T18929] ? futex_private_hash_put+0x107/0x1c0 [ 792.629343][T18929] kernel_clone+0xfc/0x9a0 [ 792.629367][T18929] ? __pfx_kernel_clone+0x10/0x10 [ 792.629402][T18929] __do_sys_clone+0xd9/0x120 [ 792.629425][T18929] ? __pfx___do_sys_clone+0x10/0x10 [ 792.629466][T18929] do_syscall_64+0x106/0xf80 [ 792.629485][T18929] ? clear_bhb_loop+0x40/0x90 [ 792.629508][T18929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.629527][T18929] RIP: 0033:0x7fab9919c819 [ 792.629543][T18929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 792.629566][T18929] RSP: 002b:00007fab9a024fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 792.629584][T18929] RAX: ffffffffffffffda RBX: 00007fab99415fa0 RCX: 00007fab9919c819 [ 792.629596][T18929] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 792.629607][T18929] RBP: 00007fab99232c91 R08: 0000000000000000 R09: 0000000000000000 [ 792.629618][T18929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 792.629629][T18929] R13: 00007fab99416038 R14: 00007fab99415fa0 R15: 00007ffee1029498 [ 792.629653][T18929] [ 793.319456][T18932] random: crng reseeded on system resumption [ 793.455295][T18935] tc_dump_action: action bad kind [ 794.402907][T18960] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 794.430946][T18960] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 794.880440][T18970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2708'. [ 795.564421][T18991] netlink: 'syz.1.2714': attribute type 2 has an invalid length. [ 795.629737][T18991] nbd: must specify at least one socket [ 796.841528][T19012] binder: 19002:19012 ioctl 40086602 e20 returned -22 [ 796.933416][T19016] FAULT_INJECTION: forcing a failure. [ 796.933416][T19016] name failslab, interval 1, probability 0, space 0, times 0 [ 796.997280][T19016] CPU: 0 UID: 0 PID: 19016 Comm: syz.0.2719 Tainted: G L syzkaller #0 PREEMPT(full) [ 796.997315][T19016] Tainted: [L]=SOFTLOCKUP [ 796.997322][T19016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 796.997333][T19016] Call Trace: [ 796.997340][T19016] [ 796.997348][T19016] dump_stack_lvl+0x100/0x190 [ 796.997380][T19016] should_fail_ex.cold+0x5/0xa [ 796.997403][T19016] should_failslab+0xc2/0x120 [ 796.997425][T19016] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 796.997455][T19016] ? ptlock_alloc+0x1f/0x70 [ 796.997486][T19016] ptlock_alloc+0x1f/0x70 [ 796.997511][T19016] pte_alloc_one+0x82/0x3d0 [ 796.997535][T19016] __pte_alloc+0x6d/0x3e0 [ 796.997555][T19016] ? __pfx___pte_alloc+0x10/0x10 [ 796.997574][T19016] ? __pfx___might_resched+0x10/0x10 [ 796.997602][T19016] ? copy_page_range+0x1ef8/0x6600 [ 796.997631][T19016] copy_page_range+0x3ec9/0x6600 [ 796.997681][T19016] ? __pfx_copy_page_range+0x10/0x10 [ 796.997721][T19016] ? __pfx___might_resched+0x10/0x10 [ 796.997758][T19016] ? up_write+0x290/0x4f0 [ 796.997788][T19016] dup_mmap+0xd25/0x2180 [ 796.997821][T19016] ? __pfx_dup_mmap+0x10/0x10 [ 796.997842][T19016] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 796.997878][T19016] ? __lock_acquire+0x4a5/0x2630 [ 796.997902][T19016] ? find_held_lock+0x2b/0x80 [ 796.997920][T19016] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 796.997970][T19016] copy_process+0x7523/0x7a40 [ 796.998005][T19016] ? __pfx_copy_process+0x10/0x10 [ 796.998029][T19016] ? find_held_lock+0x2b/0x80 [ 796.998058][T19016] kernel_clone+0xfc/0x9a0 [ 796.998080][T19016] ? __pfx_futex_wait+0x10/0x10 [ 796.998113][T19016] ? __pfx_kernel_clone+0x10/0x10 [ 796.998150][T19016] __do_sys_clone+0xd9/0x120 [ 796.998174][T19016] ? __pfx___do_sys_clone+0x10/0x10 [ 796.998217][T19016] do_syscall_64+0x106/0xf80 [ 796.998235][T19016] ? clear_bhb_loop+0x40/0x90 [ 796.998258][T19016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.998278][T19016] RIP: 0033:0x7f1d93b9c819 [ 796.998294][T19016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 796.998312][T19016] RSP: 002b:00007f1d94994fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 796.998331][T19016] RAX: ffffffffffffffda RBX: 00007f1d93e15fa0 RCX: 00007f1d93b9c819 [ 796.998343][T19016] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0100000000000000 [ 796.998354][T19016] RBP: 00007f1d93c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 796.998365][T19016] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 796.998376][T19016] R13: 00007f1d93e16038 R14: 00007f1d93e15fa0 R15: 00007ffc905cc728 [ 796.998399][T19016] [ 797.732752][T19014] tc_dump_action: action bad kind [ 798.216531][T19037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2724'. [ 798.809378][T19051] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 798.946541][T19052] smpboot: CPU 1 is now offline [ 800.285079][T19088] tc_dump_action: action bad kind [ 801.547016][T19109] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 801.620845][T19109] CPU: 0 UID: 0 PID: 19109 Comm: syz.0.2744 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.620880][T19109] Tainted: [L]=SOFTLOCKUP [ 801.620887][T19109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 801.620898][T19109] Call Trace: [ 801.620905][T19109] [ 801.620913][T19109] dump_stack_lvl+0x100/0x190 [ 801.620957][T19109] sysfs_warn_dup.cold+0x1c/0x28 [ 801.620985][T19109] sysfs_do_create_link_sd+0x113/0x140 [ 801.621016][T19109] sysfs_create_link+0x61/0xc0 [ 801.621044][T19109] device_add+0x675/0x1950 [ 801.621071][T19109] ? __pfx_device_add+0x10/0x10 [ 801.621096][T19109] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 801.621118][T19109] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 801.621154][T19109] wiphy_register+0x1e5b/0x2d30 [ 801.621174][T19109] ? __rtnl_unlock+0xb9/0xf0 [ 801.621195][T19109] ? netdev_run_todo+0x750/0x12c0 [ 801.621218][T19109] ? __pfx_wiphy_register+0x10/0x10 [ 801.621240][T19109] ? __asan_memset+0x23/0x50 [ 801.621269][T19109] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 801.621299][T19109] ieee80211_register_hw+0x2cfd/0x4140 [ 801.621332][T19109] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 801.621354][T19109] ? __pfx___debug_object_init+0x10/0x10 [ 801.621380][T19109] ? find_held_lock+0x2b/0x80 [ 801.621400][T19109] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 801.621420][T19109] ? __hrtimer_setup+0x178/0x280 [ 801.621450][T19109] mac80211_hwsim_new_radio+0x2847/0x57d0 [ 801.621487][T19109] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 801.621516][T19109] hwsim_new_radio_nl+0xc1f/0x1340 [ 801.621540][T19109] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 801.621576][T19109] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 801.621600][T19109] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 801.621629][T19109] genl_family_rcv_msg_doit+0x214/0x300 [ 801.621655][T19109] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 801.621678][T19109] ? genl_get_cmd+0x3ef/0x720 [ 801.621705][T19109] ? bpf_lsm_capable+0x9/0x10 [ 801.621725][T19109] ? security_capable+0x80/0x260 [ 801.621745][T19109] ? ns_capable+0xd2/0xf0 [ 801.621766][T19109] genl_rcv_msg+0x560/0x800 [ 801.621794][T19109] ? __pfx_genl_rcv_msg+0x10/0x10 [ 801.621818][T19109] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 801.621848][T19109] netlink_rcv_skb+0x159/0x420 [ 801.621868][T19109] ? __pfx_genl_rcv_msg+0x10/0x10 [ 801.621892][T19109] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 801.621922][T19109] ? netlink_deliver_tap+0x1ae/0xcc0 [ 801.621962][T19109] genl_rcv+0x28/0x40 [ 801.621982][T19109] netlink_unicast+0x5aa/0x870 [ 801.622006][T19109] ? __pfx_netlink_unicast+0x10/0x10 [ 801.622035][T19109] netlink_sendmsg+0x8b0/0xda0 [ 801.622059][T19109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 801.622077][T19109] ? __import_iovec+0x1d2/0x640 [ 801.622104][T19109] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 801.622128][T19109] ____sys_sendmsg+0x9e1/0xb70 [ 801.622150][T19109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 801.622172][T19109] ? __pfx_____sys_sendmsg+0x10/0x10 [ 801.622199][T19109] ? try_to_wake_up+0x644/0x1a80 [ 801.622229][T19109] ___sys_sendmsg+0x190/0x1e0 [ 801.622255][T19109] ? __pfx____sys_sendmsg+0x10/0x10 [ 801.622280][T19109] ? futex_private_hash_put+0x107/0x1c0 [ 801.622331][T19109] __sys_sendmsg+0x170/0x220 [ 801.622361][T19109] ? __pfx___sys_sendmsg+0x10/0x10 [ 801.622391][T19109] ? __x64_sys_futex+0x34f/0x4d0 [ 801.622431][T19109] do_syscall_64+0x106/0xf80 [ 801.622449][T19109] ? clear_bhb_loop+0x40/0x90 [ 801.622473][T19109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.622492][T19109] RIP: 0033:0x7f1d93b9c819 [ 801.622509][T19109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 801.622527][T19109] RSP: 002b:00007f1d94974028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 801.622546][T19109] RAX: ffffffffffffffda RBX: 00007f1d93e16090 RCX: 00007f1d93b9c819 [ 801.622558][T19109] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 801.622569][T19109] RBP: 00007f1d93c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 801.622580][T19109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 801.622591][T19109] R13: 00007f1d93e16128 R14: 00007f1d93e16090 R15: 00007ffc905cc728 [ 801.622615][T19109] [ 802.105086][T19116] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 802.113016][T19116] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 802.122320][T19116] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 802.129720][T19116] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 802.138623][T19116] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 802.146153][T19116] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 802.155553][T19116] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 802.163103][T19116] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 802.172231][T19116] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 802.179713][T19116] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 802.188477][T19116] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 802.195957][T19116] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 802.204835][T19116] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 802.212191][T19116] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 802.221911][T19116] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 802.229518][T19116] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 802.238367][T19116] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 802.245745][T19116] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 802.254605][T19116] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 802.262256][T19116] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 802.271391][T19116] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 802.279028][T19116] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 802.287990][T19116] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 802.295542][T19116] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 802.304324][T19116] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 802.311699][T19116] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 802.321268][T19116] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 802.328945][T19116] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 802.337874][T19116] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 802.345329][T19116] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 802.354210][T19116] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 802.361768][T19116] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 802.370815][T19116] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 802.378275][T19116] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 802.387213][T19116] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 802.394778][T19116] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 802.404041][T19116] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 802.411668][T19116] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 802.421418][T19116] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 802.428905][T19116] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 802.438054][T19116] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 802.445836][T19116] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 802.455127][T19116] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 802.462703][T19116] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 802.471702][T19116] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 802.518726][T19116] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 802.954356][T19131] tc_dump_action: action bad kind [ 803.353373][T19144] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2752'. [ 803.427688][T19136] netlink: 'syz.1.2751': attribute type 2 has an invalid length. [ 803.652283][T19144] input input37: cannot allocate more than FF_MAX_EFFECTS effects [ 804.167922][T19172] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2758'. [ 804.232963][T19173] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 804.335466][T19173] smpboot: CPU 1 is now offline [ 804.765910][T19181] tc_dump_action: action bad kind [ 805.743111][T19200] netlink: 'syz.2.2767': attribute type 2 has an invalid length. [ 806.795202][T19233] snd_virmidi snd_virmidi.0: control 61678:131081:3:y:0 is already present [ 807.113545][T19238] tc_dump_action: action bad kind [ 807.140507][T19239] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2774'. [ 807.156353][T19241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2776'. [ 807.502074][T19247] netlink: 'syz.2.2778': attribute type 2 has an invalid length. [ 807.841942][T19236] input input38: cannot allocate more than FF_MAX_EFFECTS effects [ 808.222876][T19278] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2782'. [ 808.326226][T19270] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2780'. [ 808.951131][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.957964][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.653521][T19300] netlink: 'syz.2.2789': attribute type 2 has an invalid length. [ 810.143456][T19317] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 810.193355][T19317] CPU: 0 UID: 0 PID: 19317 Comm: syz.3.2792 Tainted: G L syzkaller #0 PREEMPT(full) [ 810.193388][T19317] Tainted: [L]=SOFTLOCKUP [ 810.193395][T19317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 810.193406][T19317] Call Trace: [ 810.193413][T19317] [ 810.193420][T19317] dump_stack_lvl+0x100/0x190 [ 810.193455][T19317] sysfs_warn_dup.cold+0x1c/0x28 [ 810.193482][T19317] sysfs_do_create_link_sd+0x113/0x140 [ 810.193514][T19317] sysfs_create_link+0x61/0xc0 [ 810.193543][T19317] device_add+0x675/0x1950 [ 810.193571][T19317] ? __pfx_device_add+0x10/0x10 [ 810.193597][T19317] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 810.193626][T19317] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 810.193662][T19317] wiphy_register+0x1e5b/0x2d30 [ 810.193683][T19317] ? __rtnl_unlock+0xb9/0xf0 [ 810.193704][T19317] ? netdev_run_todo+0x750/0x12c0 [ 810.193728][T19317] ? __pfx_wiphy_register+0x10/0x10 [ 810.193751][T19317] ? __asan_memset+0x23/0x50 [ 810.193779][T19317] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 810.193809][T19317] ieee80211_register_hw+0x2cfd/0x4140 [ 810.193842][T19317] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 810.193864][T19317] ? __pfx___debug_object_init+0x10/0x10 [ 810.193890][T19317] ? find_held_lock+0x2b/0x80 [ 810.193911][T19317] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 810.193932][T19317] ? __hrtimer_setup+0x178/0x280 [ 810.193961][T19317] mac80211_hwsim_new_radio+0x2847/0x57d0 [ 810.193998][T19317] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 810.194033][T19317] hwsim_new_radio_nl+0xc1f/0x1340 [ 810.194058][T19317] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 810.194087][T19317] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 810.194112][T19317] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 810.194142][T19317] genl_family_rcv_msg_doit+0x214/0x300 [ 810.194175][T19317] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 810.194199][T19317] ? genl_get_cmd+0x3ef/0x720 [ 810.194226][T19317] ? bpf_lsm_capable+0x9/0x10 [ 810.194248][T19317] ? security_capable+0x80/0x260 [ 810.194269][T19317] ? ns_capable+0xd2/0xf0 [ 810.194291][T19317] genl_rcv_msg+0x560/0x800 [ 810.194317][T19317] ? __pfx_genl_rcv_msg+0x10/0x10 [ 810.194341][T19317] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 810.194371][T19317] netlink_rcv_skb+0x159/0x420 [ 810.194392][T19317] ? __pfx_genl_rcv_msg+0x10/0x10 [ 810.194417][T19317] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 810.194447][T19317] ? netlink_deliver_tap+0x1ae/0xcc0 [ 810.194482][T19317] genl_rcv+0x28/0x40 [ 810.194502][T19317] netlink_unicast+0x5aa/0x870 [ 810.194526][T19317] ? __pfx_netlink_unicast+0x10/0x10 [ 810.194555][T19317] netlink_sendmsg+0x8b0/0xda0 [ 810.194580][T19317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 810.194599][T19317] ? __import_iovec+0x1d2/0x640 [ 810.194627][T19317] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 810.194651][T19317] ____sys_sendmsg+0x9e1/0xb70 [ 810.194674][T19317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 810.194696][T19317] ? __pfx_____sys_sendmsg+0x10/0x10 [ 810.194724][T19317] ? try_to_wake_up+0x644/0x1a80 [ 810.194749][T19317] ___sys_sendmsg+0x190/0x1e0 [ 810.194776][T19317] ? __pfx____sys_sendmsg+0x10/0x10 [ 810.194801][T19317] ? futex_private_hash_put+0x107/0x1c0 [ 810.194852][T19317] __sys_sendmsg+0x170/0x220 [ 810.194884][T19317] ? __pfx___sys_sendmsg+0x10/0x10 [ 810.194915][T19317] ? __x64_sys_futex+0x34f/0x4d0 [ 810.194955][T19317] do_syscall_64+0x106/0xf80 [ 810.194973][T19317] ? clear_bhb_loop+0x40/0x90 [ 810.194997][T19317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.195017][T19317] RIP: 0033:0x7fa865b9c819 [ 810.195034][T19317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.195052][T19317] RSP: 002b:00007fa866a6b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 810.195072][T19317] RAX: ffffffffffffffda RBX: 00007fa865e16090 RCX: 00007fa865b9c819 [ 810.195084][T19317] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000005 [ 810.195095][T19317] RBP: 00007fa865c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 810.195106][T19317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 810.195117][T19317] R13: 00007fa865e16128 R14: 00007fa865e16090 R15: 00007fff2ac7d8b8 [ 810.195141][T19317] [ 811.053334][T19303] binder: 19302:19303 ioctl 40086602 e20 returned -22 [ 811.530438][T19336] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 812.260516][T16682] Bluetooth: hci3: unexpected event 0x23 length: 127 > 13 [ 812.623961][T19355] binder: 19332:19355 ioctl 40086602 e20 returned -22 [ 813.966978][T19390] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 814.791667][T19407] FAULT_INJECTION: forcing a failure. [ 814.791667][T19407] name failslab, interval 1, probability 0, space 0, times 0 [ 814.848728][T19407] CPU: 0 UID: 0 PID: 19407 Comm: syz.0.2810 Tainted: G L syzkaller #0 PREEMPT(full) [ 814.848761][T19407] Tainted: [L]=SOFTLOCKUP [ 814.848768][T19407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 814.848779][T19407] Call Trace: [ 814.848786][T19407] [ 814.848794][T19407] dump_stack_lvl+0x100/0x190 [ 814.848827][T19407] should_fail_ex.cold+0x5/0xa [ 814.848851][T19407] should_failslab+0xc2/0x120 [ 814.848873][T19407] __kmalloc_cache_noprof+0x7a/0x6f0 [ 814.848900][T19407] ? sctp_association_new+0xbb/0x2990 [ 814.848933][T19407] sctp_association_new+0xbb/0x2990 [ 814.848961][T19407] sctp_connect_new_asoc+0x1a8/0x770 [ 814.848988][T19407] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 814.849017][T19407] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 814.849041][T19407] sctp_sendmsg+0x171a/0x22b0 [ 814.849071][T19407] ? __pfx_sctp_sendmsg+0x10/0x10 [ 814.849100][T19407] ? aa_sk_perm+0x309/0xaa0 [ 814.849128][T19407] ? __pfx_aa_sk_perm+0x10/0x10 [ 814.849157][T19407] ? __might_fault+0xc5/0x140 [ 814.849191][T19407] ? __pfx_sctp_sendmsg+0x10/0x10 [ 814.849216][T19407] inet_sendmsg+0x11c/0x140 [ 814.849243][T19407] __sys_sendto+0x446/0x4b0 [ 814.849271][T19407] ? __pfx_inet_sendmsg+0x10/0x10 [ 814.849295][T19407] ? __pfx___sys_sendto+0x10/0x10 [ 814.849342][T19407] ? xfd_validate_state+0x129/0x190 [ 814.849375][T19407] __x64_sys_sendto+0xe0/0x1c0 [ 814.849402][T19407] ? do_syscall_64+0x95/0xf80 [ 814.849421][T19407] ? lockdep_hardirqs_on+0x78/0x100 [ 814.849440][T19407] do_syscall_64+0x106/0xf80 [ 814.849458][T19407] ? clear_bhb_loop+0x40/0x90 [ 814.849481][T19407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.849500][T19407] RIP: 0033:0x7f1d93b9c819 [ 814.849517][T19407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 814.849535][T19407] RSP: 002b:00007f1d94995028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 814.849554][T19407] RAX: ffffffffffffffda RBX: 00007f1d93e15fa0 RCX: 00007f1d93b9c819 [ 814.849567][T19407] RDX: 0000000000000401 RSI: 0000000000000000 RDI: 0000000000000005 [ 814.849578][T19407] RBP: 00007f1d94995090 R08: 0000200000000000 R09: 000000000000001c [ 814.849590][T19407] R10: 00000000006358c0 R11: 0000000000000246 R12: 0000000000000001 [ 814.849601][T19407] R13: 00007f1d93e16038 R14: 00007f1d93e15fa0 R15: 00007ffc905cc728 [ 814.849631][T19407] [ 815.623901][T19413] FAULT_INJECTION: forcing a failure. [ 815.623901][T19413] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 815.690424][T19413] CPU: 0 UID: 0 PID: 19413 Comm: syz.0.2812 Tainted: G L syzkaller #0 PREEMPT(full) [ 815.690464][T19413] Tainted: [L]=SOFTLOCKUP [ 815.690471][T19413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 815.690482][T19413] Call Trace: [ 815.690489][T19413] [ 815.690497][T19413] dump_stack_lvl+0x100/0x190 [ 815.690531][T19413] should_fail_ex.cold+0x5/0xa [ 815.690550][T19413] ? prepare_alloc_pages+0x16d/0x5f0 [ 815.690575][T19413] should_fail_alloc_page+0xeb/0x140 [ 815.690599][T19413] prepare_alloc_pages+0x1f0/0x5f0 [ 815.690626][T19413] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 815.690660][T19413] ? bpf_ksym_find+0x124/0x1c0 [ 815.690685][T19413] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 815.690707][T19413] ? is_bpf_text_address+0x94/0x1a0 [ 815.690738][T19413] ? kernel_text_address+0x8d/0x100 [ 815.690767][T19413] ? __kernel_text_address+0xd/0x30 [ 815.690796][T19413] ? unwind_get_return_address+0x59/0xa0 [ 815.690820][T19413] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 815.690863][T19413] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 815.690892][T19413] ? __lock_acquire+0x4a5/0x2630 [ 815.690921][T19413] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 815.690944][T19413] ? policy_nodemask+0xed/0x4f0 [ 815.690967][T19413] alloc_pages_mpol+0x1fb/0x550 [ 815.690990][T19413] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 815.691018][T19413] alloc_pages_noprof+0x136/0x390 [ 815.691041][T19413] __pmd_alloc+0x3b/0x950 [ 815.691067][T19413] __handle_mm_fault+0xa9e/0x2b60 [ 815.691098][T19413] ? mt_find+0x45e/0x8e0 [ 815.691120][T19413] ? __pfx___handle_mm_fault+0x10/0x10 [ 815.691146][T19413] ? __pfx_mt_find+0x10/0x10 [ 815.691179][T19413] ? find_vma+0xbf/0x140 [ 815.691198][T19413] ? __pfx_find_vma+0x10/0x10 [ 815.691220][T19413] handle_mm_fault+0x36d/0xa20 [ 815.691252][T19413] do_user_addr_fault+0x74c/0x12f0 [ 815.691278][T19413] exc_page_fault+0x6f/0xd0 [ 815.691297][T19413] asm_exc_page_fault+0x26/0x30 [ 815.691316][T19413] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 815.691343][T19413] Code: c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 93 04 00 66 66 2e 0f [ 815.691362][T19413] RSP: 0018:ffffc90004c179b0 EFLAGS: 00050206 [ 815.691378][T19413] RAX: 0000000000000020 RBX: 0000000000000003 RCX: 0000000000000003 [ 815.691390][T19413] RDX: 0000000000000001 RSI: ffff88805321e005 RDI: 0000000000000000 [ 815.691401][T19413] RBP: ffffc90004c17bc0 R08: 0000000000000000 R09: ffffed100a643c00 [ 815.691413][T19413] R10: ffff88805321e007 R11: 0000000000000000 R12: ffff88805321e005 [ 815.691425][T19413] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 815.691447][T19413] _copy_to_iter+0x4c5/0x1720 [ 815.691477][T19413] ? __pfx__copy_to_iter+0x10/0x10 [ 815.691500][T19413] ? snd_info_seq_show+0xd5/0x120 [ 815.691525][T19413] ? single_next+0xd/0x40 [ 815.691550][T19413] ? single_stop+0x9/0x10 [ 815.691574][T19413] ? traverse.part.0.constprop.0+0x2c5/0x650 [ 815.691613][T19413] seq_read_iter+0x691/0x1270 [ 815.691646][T19413] ? aa_file_perm+0x7f3/0x14d0 [ 815.691681][T19413] seq_read+0x33b/0x4c0 [ 815.691712][T19413] ? __pfx_seq_read+0x10/0x10 [ 815.691756][T19413] ? __pfx_seq_read+0x10/0x10 [ 815.691786][T19413] proc_reg_read+0x240/0x330 [ 815.691817][T19413] ? __pfx_proc_reg_read+0x10/0x10 [ 815.691856][T19413] vfs_read+0x1e4/0xb30 [ 815.691878][T19413] ? __pfx_vfs_read+0x10/0x10 [ 815.691894][T19413] ? find_held_lock+0x2b/0x80 [ 815.691912][T19413] ? __fget_files+0x215/0x3d0 [ 815.691931][T19413] ? __fget_files+0x215/0x3d0 [ 815.691953][T19413] ? __fget_files+0x21f/0x3d0 [ 815.691979][T19413] __x64_sys_pread64+0x1eb/0x250 [ 815.692000][T19413] ? __pfx___x64_sys_pread64+0x10/0x10 [ 815.692027][T19413] do_syscall_64+0x106/0xf80 [ 815.692045][T19413] ? clear_bhb_loop+0x40/0x90 [ 815.692068][T19413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.692088][T19413] RIP: 0033:0x7f1d93b9c819 [ 815.692109][T19413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 815.692127][T19413] RSP: 002b:00007f1d94995028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 815.692144][T19413] RAX: ffffffffffffffda RBX: 00007f1d93e15fa0 RCX: 00007f1d93b9c819 [ 815.692156][T19413] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 815.692166][T19413] RBP: 00007f1d94995090 R08: 0000000000000000 R09: 0000000000000000 [ 815.692177][T19413] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 815.692188][T19413] R13: 00007f1d93e16038 R14: 00007f1d93e15fa0 R15: 00007ffc905cc728 [ 815.692212][T19413] [ 816.672184][T19394] Bluetooth: hci4: command 0x0406 tx timeout [ 817.035345][T19416] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 817.279304][T19424] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 817.390423][T19426] smpboot: CPU 1 is now offline [ 817.586761][T19432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2818'. [ 818.193100][T19450] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2819'. [ 819.599391][ T30] audit: type=1804 audit(4294967709.867:35): pid=19468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2826" name=2F6E6577726F6F742F3134322F22050820 dev="tmpfs" ino=744 res=1 errno=0 [ 819.802919][ T30] audit: type=1800 audit(4294967709.907:36): pid=19468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2826" name=22050820 dev="tmpfs" ino=744 res=0 errno=0 [ 821.281008][T19514] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 821.326146][T19514] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 821.539202][T19519] FAULT_INJECTION: forcing a failure. [ 821.539202][T19519] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 821.614154][T19519] CPU: 0 UID: 0 PID: 19519 Comm: syz.2.2837 Tainted: G L syzkaller #0 PREEMPT(full) [ 821.614187][T19519] Tainted: [L]=SOFTLOCKUP [ 821.614194][T19519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 821.614205][T19519] Call Trace: [ 821.614213][T19519] [ 821.614220][T19519] dump_stack_lvl+0x100/0x190 [ 821.614254][T19519] should_fail_ex.cold+0x5/0xa [ 821.614283][T19519] ? prepare_alloc_pages+0x16d/0x5f0 [ 821.614309][T19519] should_fail_alloc_page+0xeb/0x140 [ 821.614334][T19519] prepare_alloc_pages+0x1f0/0x5f0 [ 821.614358][T19519] ? unwind_get_return_address+0x59/0xa0 [ 821.614383][T19519] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 821.614422][T19519] ? stack_trace_save+0x8e/0xc0 [ 821.614449][T19519] ? __pfx_stack_trace_save+0x10/0x10 [ 821.614470][T19519] ? stack_depot_save_flags+0x27/0x9d0 [ 821.614498][T19519] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 821.614525][T19519] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 821.614558][T19519] ? kasan_save_stack+0x30/0x50 [ 821.614576][T19519] ? __kasan_slab_alloc+0x89/0x90 [ 821.614594][T19519] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 821.614624][T19519] ? __pmd_alloc+0xbf/0x950 [ 821.614645][T19519] ? __handle_mm_fault+0xa9e/0x2b60 [ 821.614671][T19519] ? handle_mm_fault+0x36d/0xa20 [ 821.614696][T19519] ? do_user_addr_fault+0x74c/0x12f0 [ 821.614714][T19519] ? exc_page_fault+0x6f/0xd0 [ 821.614730][T19519] ? asm_exc_page_fault+0x26/0x30 [ 821.614748][T19519] ? rep_movs_alternative+0x11/0x90 [ 821.614775][T19519] ? __x64_sys_pread64+0x1eb/0x250 [ 821.614794][T19519] ? do_syscall_64+0x106/0xf80 [ 821.614812][T19519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.614843][T19519] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 821.614865][T19519] ? policy_nodemask+0xed/0x4f0 [ 821.614888][T19519] alloc_pages_mpol+0x1fb/0x550 [ 821.614911][T19519] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 821.614938][T19519] ? __pfx_filemap_map_pages+0x10/0x10 [ 821.614967][T19519] alloc_pages_noprof+0x136/0x390 [ 821.614990][T19519] pte_alloc_one+0x1c/0x3d0 [ 821.615013][T19519] __do_fault+0x359/0x550 [ 821.615034][T19519] ? __pfx_filemap_map_pages+0x10/0x10 [ 821.615063][T19519] do_fault+0x2db/0x18e0 [ 821.615086][T19519] ? __pmd_alloc+0x3fb/0x950 [ 821.615111][T19519] __handle_mm_fault+0x1815/0x2b60 [ 821.615142][T19519] ? mt_find+0x45e/0x8e0 [ 821.615164][T19519] ? __pfx___handle_mm_fault+0x10/0x10 [ 821.615190][T19519] ? __pfx_mt_find+0x10/0x10 [ 821.615223][T19519] ? find_vma+0xbf/0x140 [ 821.615242][T19519] ? __pfx_find_vma+0x10/0x10 [ 821.615264][T19519] handle_mm_fault+0x36d/0xa20 [ 821.615296][T19519] do_user_addr_fault+0x74c/0x12f0 [ 821.615321][T19519] exc_page_fault+0x6f/0xd0 [ 821.615340][T19519] asm_exc_page_fault+0x26/0x30 [ 821.615359][T19519] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 821.615394][T19519] Code: c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 93 04 00 66 66 2e 0f [ 821.615417][T19519] RSP: 0018:ffffc900053179b0 EFLAGS: 00050206 [ 821.615434][T19519] RAX: 0000000000000020 RBX: 0000000000000003 RCX: 0000000000000003 [ 821.615446][T19519] RDX: 0000000000000001 RSI: ffff88805841a005 RDI: 0000000000000000 [ 821.615457][T19519] RBP: ffffc90005317bc0 R08: 0000000000000000 R09: ffffed100b083400 [ 821.615469][T19519] R10: ffff88805841a007 R11: 0000000000000000 R12: ffff88805841a005 [ 821.615480][T19519] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 821.615503][T19519] _copy_to_iter+0x4c5/0x1720 [ 821.615532][T19519] ? __pfx__copy_to_iter+0x10/0x10 [ 821.615555][T19519] ? snd_info_seq_show+0xd5/0x120 [ 821.615579][T19519] ? single_next+0xd/0x40 [ 821.615604][T19519] ? single_stop+0x9/0x10 [ 821.615628][T19519] ? traverse.part.0.constprop.0+0x2c5/0x650 [ 821.615667][T19519] seq_read_iter+0x691/0x1270 [ 821.615700][T19519] ? aa_file_perm+0x7f3/0x14d0 [ 821.615734][T19519] seq_read+0x33b/0x4c0 [ 821.615765][T19519] ? __pfx_seq_read+0x10/0x10 [ 821.615810][T19519] ? __pfx_seq_read+0x10/0x10 [ 821.615875][T19519] proc_reg_read+0x240/0x330 [ 821.615908][T19519] ? __pfx_proc_reg_read+0x10/0x10 [ 821.615940][T19519] vfs_read+0x1e4/0xb30 [ 821.615963][T19519] ? __pfx_vfs_read+0x10/0x10 [ 821.615980][T19519] ? find_held_lock+0x2b/0x80 [ 821.615999][T19519] ? __fget_files+0x215/0x3d0 [ 821.616019][T19519] ? __fget_files+0x215/0x3d0 [ 821.616042][T19519] ? __fget_files+0x21f/0x3d0 [ 821.616069][T19519] __x64_sys_pread64+0x1eb/0x250 [ 821.616091][T19519] ? __pfx___x64_sys_pread64+0x10/0x10 [ 821.616119][T19519] do_syscall_64+0x106/0xf80 [ 821.616138][T19519] ? clear_bhb_loop+0x40/0x90 [ 821.616162][T19519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.616182][T19519] RIP: 0033:0x7fd2e099c819 [ 821.616200][T19519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 821.616219][T19519] RSP: 002b:00007fd2e17f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 821.616237][T19519] RAX: ffffffffffffffda RBX: 00007fd2e0c15fa0 RCX: 00007fd2e099c819 [ 821.616250][T19519] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 821.616262][T19519] RBP: 00007fd2e17f5090 R08: 0000000000000000 R09: 0000000000000000 [ 821.616274][T19519] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 821.616285][T19519] R13: 00007fd2e0c16038 R14: 00007fd2e0c15fa0 R15: 00007ffc0c06fe38 [ 821.616309][T19519] [ 822.382538][T19522] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 822.689817][T19533] FAULT_INJECTION: forcing a failure. [ 822.689817][T19533] name failslab, interval 1, probability 0, space 0, times 0 [ 822.703503][T19533] CPU: 0 UID: 0 PID: 19533 Comm: syz.0.2841 Tainted: G L syzkaller #0 PREEMPT(full) [ 822.703534][T19533] Tainted: [L]=SOFTLOCKUP [ 822.703541][T19533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 822.703552][T19533] Call Trace: [ 822.703559][T19533] [ 822.703567][T19533] dump_stack_lvl+0x100/0x190 [ 822.703601][T19533] should_fail_ex.cold+0x5/0xa [ 822.703629][T19533] should_failslab+0xc2/0x120 [ 822.703651][T19533] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 822.703679][T19533] ? ptlock_alloc+0x1f/0x70 [ 822.703710][T19533] ptlock_alloc+0x1f/0x70 [ 822.703736][T19533] pte_alloc_one+0x82/0x3d0 [ 822.703760][T19533] __pte_alloc+0x6d/0x3e0 [ 822.703781][T19533] ? __pfx___pte_alloc+0x10/0x10 [ 822.703801][T19533] ? __pfx___might_resched+0x10/0x10 [ 822.703829][T19533] ? copy_page_range+0x1ef8/0x6600 [ 822.703867][T19533] copy_page_range+0x3ec9/0x6600 [ 822.703918][T19533] ? __pfx_copy_page_range+0x10/0x10 [ 822.703952][T19533] ? __pfx___might_resched+0x10/0x10 [ 822.703988][T19533] ? up_write+0x290/0x4f0 [ 822.704018][T19533] dup_mmap+0xd25/0x2180 [ 822.704050][T19533] ? __pfx_dup_mmap+0x10/0x10 [ 822.704071][T19533] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 822.704105][T19533] ? __lock_acquire+0x4a5/0x2630 [ 822.704131][T19533] ? find_held_lock+0x2b/0x80 [ 822.704148][T19533] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 822.704190][T19533] copy_process+0x7523/0x7a40 [ 822.704223][T19533] ? __pfx_copy_process+0x10/0x10 [ 822.704248][T19533] ? find_held_lock+0x2b/0x80 [ 822.704275][T19533] kernel_clone+0xfc/0x9a0 [ 822.704296][T19533] ? __pfx_futex_wait+0x10/0x10 [ 822.704327][T19533] ? __pfx_kernel_clone+0x10/0x10 [ 822.704362][T19533] __do_sys_clone+0xd9/0x120 [ 822.704385][T19533] ? __pfx___do_sys_clone+0x10/0x10 [ 822.704426][T19533] do_syscall_64+0x106/0xf80 [ 822.704444][T19533] ? clear_bhb_loop+0x40/0x90 [ 822.704467][T19533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.704486][T19533] RIP: 0033:0x7f1d93b9c819 [ 822.704503][T19533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 822.704520][T19533] RSP: 002b:00007f1d94994fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 822.704539][T19533] RAX: ffffffffffffffda RBX: 00007f1d93e15fa0 RCX: 00007f1d93b9c819 [ 822.704551][T19533] RDX: 0000000000000000 RSI: 000000000000f400 RDI: 0000000000000000 [ 822.704561][T19533] RBP: 00007f1d93c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 822.704572][T19533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 822.704583][T19533] R13: 00007f1d93e16038 R14: 00007f1d93e15fa0 R15: 00007ffc905cc728 [ 822.704607][T19533] [ 823.325645][T19541] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2844'. [ 823.545484][T19537] input input39: cannot allocate more than FF_MAX_EFFECTS effects [ 824.886216][T19577] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 825.172634][T19574] binder: 19569:19574 ioctl c00c620f 2000000001c0 returned -22 [ 825.905160][T19596] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2859'. [ 826.164768][T19596] input input41: cannot allocate more than FF_MAX_EFFECTS effects [ 826.738263][T19619] FAULT_INJECTION: forcing a failure. [ 826.738263][T19619] name failslab, interval 1, probability 0, space 0, times 0 [ 826.780134][T19619] CPU: 0 UID: 0 PID: 19619 Comm: syz.0.2863 Tainted: G L syzkaller #0 PREEMPT(full) [ 826.780166][T19619] Tainted: [L]=SOFTLOCKUP [ 826.780173][T19619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 826.780184][T19619] Call Trace: [ 826.780191][T19619] [ 826.780198][T19619] dump_stack_lvl+0x100/0x190 [ 826.780233][T19619] should_fail_ex.cold+0x5/0xa [ 826.780255][T19619] ? tomoyo_realpath_from_path+0xb6/0x690 [ 826.780284][T19619] should_failslab+0xc2/0x120 [ 826.780306][T19619] __kmalloc_noprof+0xe0/0x850 [ 826.780341][T19619] tomoyo_realpath_from_path+0xb6/0x690 [ 826.780374][T19619] tomoyo_path_number_perm+0x23c/0x580 [ 826.780397][T19619] ? tomoyo_path_number_perm+0x22e/0x580 [ 826.780422][T19619] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 826.780468][T19619] ? find_held_lock+0x2b/0x80 [ 826.780487][T19619] ? __fget_files+0x215/0x3d0 [ 826.780505][T19619] ? hook_file_ioctl_common+0x146/0x410 [ 826.780534][T19619] ? __fget_files+0x21f/0x3d0 [ 826.780556][T19619] security_file_ioctl+0xd3/0x230 [ 826.780582][T19619] __x64_sys_ioctl+0xb7/0x210 [ 826.780614][T19619] do_syscall_64+0x106/0xf80 [ 826.780651][T19619] ? clear_bhb_loop+0x40/0x90 [ 826.780675][T19619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.780694][T19619] RIP: 0033:0x7f1d93b9c819 [ 826.780711][T19619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.780729][T19619] RSP: 002b:00007f1d94995028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 826.780748][T19619] RAX: ffffffffffffffda RBX: 00007f1d93e15fa0 RCX: 00007f1d93b9c819 [ 826.780760][T19619] RDX: 00002000000000c0 RSI: 0000000040107447 RDI: 0000000000000005 [ 826.780772][T19619] RBP: 00007f1d94995090 R08: 0000000000000000 R09: 0000000000000000 [ 826.780783][T19619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 826.780794][T19619] R13: 00007f1d93e16038 R14: 00007f1d93e15fa0 R15: 00007ffc905cc728 [ 826.780817][T19619] [ 826.780825][T19619] ERROR: Out of memory at tomoyo_realpath_from_path. [ 827.389946][T19626] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 827.415892][T19626] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 828.271228][T19655] binder: 19642:19655 ioctl 40086602 e20 returned -22 [ 828.426500][T19663] FAULT_INJECTION: forcing a failure. [ 828.426500][T19663] name failslab, interval 1, probability 0, space 0, times 0 [ 828.494363][T19663] CPU: 0 UID: 0 PID: 19663 Comm: syz.0.2873 Tainted: G L syzkaller #0 PREEMPT(full) [ 828.494396][T19663] Tainted: [L]=SOFTLOCKUP [ 828.494403][T19663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 828.494415][T19663] Call Trace: [ 828.494421][T19663] [ 828.494429][T19663] dump_stack_lvl+0x100/0x190 [ 828.494463][T19663] should_fail_ex.cold+0x5/0xa [ 828.494486][T19663] should_failslab+0xc2/0x120 [ 828.494508][T19663] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 828.494545][T19663] ? ptlock_alloc+0x1f/0x70 [ 828.494575][T19663] ptlock_alloc+0x1f/0x70 [ 828.494601][T19663] pte_alloc_one+0x82/0x3d0 [ 828.494624][T19663] __pte_alloc+0x6d/0x3e0 [ 828.494644][T19663] ? __pfx___pte_alloc+0x10/0x10 [ 828.494664][T19663] ? __pfx___might_resched+0x10/0x10 [ 828.494692][T19663] ? copy_page_range+0x1ef8/0x6600 [ 828.494722][T19663] copy_page_range+0x3ec9/0x6600 [ 828.494772][T19663] ? __pfx_copy_page_range+0x10/0x10 [ 828.494812][T19663] ? __pfx___might_resched+0x10/0x10 [ 828.494849][T19663] ? up_write+0x290/0x4f0 [ 828.494879][T19663] dup_mmap+0xd25/0x2180 [ 828.494911][T19663] ? __pfx_dup_mmap+0x10/0x10 [ 828.494933][T19663] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 828.494968][T19663] ? __lock_acquire+0x4a5/0x2630 [ 828.494994][T19663] ? find_held_lock+0x2b/0x80 [ 828.495012][T19663] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 828.495054][T19663] copy_process+0x7523/0x7a40 [ 828.495088][T19663] ? __pfx_copy_process+0x10/0x10 [ 828.495112][T19663] ? preempt_schedule_common+0x42/0xc0 [ 828.495145][T19663] ? futex_private_hash_put+0x107/0x1c0 [ 828.495173][T19663] kernel_clone+0xfc/0x9a0 [ 828.495197][T19663] ? __pfx_kernel_clone+0x10/0x10 [ 828.495232][T19663] __do_sys_clone+0xd9/0x120 [ 828.495255][T19663] ? __pfx___do_sys_clone+0x10/0x10 [ 828.495297][T19663] do_syscall_64+0x106/0xf80 [ 828.495321][T19663] ? clear_bhb_loop+0x40/0x90 [ 828.495344][T19663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.495364][T19663] RIP: 0033:0x7f1d93b9c819 [ 828.495381][T19663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 828.495399][T19663] RSP: 002b:00007f1d94994fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 828.495418][T19663] RAX: ffffffffffffffda RBX: 00007f1d93e15fa0 RCX: 00007f1d93b9c819 [ 828.495430][T19663] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000000 [ 828.495441][T19663] RBP: 00007f1d93c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 828.495452][T19663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 828.495463][T19663] R13: 00007f1d93e16038 R14: 00007f1d93e15fa0 R15: 00007ffc905cc728 [ 828.495487][T19663] [ 829.571450][T19681] NFSD: Failed to start, no listeners configured. [ 830.554512][T19717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2884'. [ 831.211548][T19740] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 832.279368][T19766] binder: 19750:19766 ioctl 40086602 e20 returned -22 [ 833.397562][T19799] snd_virmidi snd_virmidi.0: control 61678:131081:3:y:0 is already present [ 834.011308][T19820] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 835.097120][T19835] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 835.125455][T19835] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 835.182680][T19835] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 835.223965][T19835] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 835.253864][T19835] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 835.275532][T19833] zswap: compressor not available [ 835.286626][T19835] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 835.313389][T19838] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 835.331475][T19835] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 835.369501][T19835] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 835.382090][T19838] CPU: 0 UID: 0 PID: 19838 Comm: syz.3.2904 Tainted: G L syzkaller #0 PREEMPT(full) [ 835.382123][T19838] Tainted: [L]=SOFTLOCKUP [ 835.382131][T19838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 835.382142][T19838] Call Trace: [ 835.382149][T19838] [ 835.382157][T19838] dump_stack_lvl+0x100/0x190 [ 835.382192][T19838] sysfs_warn_dup.cold+0x1c/0x28 [ 835.382219][T19838] sysfs_do_create_link_sd+0x113/0x140 [ 835.382249][T19838] sysfs_create_link+0x61/0xc0 [ 835.382277][T19838] device_add+0x675/0x1950 [ 835.382306][T19838] ? __pfx_device_add+0x10/0x10 [ 835.382330][T19838] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 835.382353][T19838] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 835.382389][T19838] wiphy_register+0x1e5b/0x2d30 [ 835.382409][T19838] ? __rtnl_unlock+0xb9/0xf0 [ 835.382430][T19838] ? netdev_run_todo+0x750/0x12c0 [ 835.382453][T19838] ? __pfx_wiphy_register+0x10/0x10 [ 835.382476][T19838] ? __asan_memset+0x23/0x50 [ 835.382504][T19838] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 835.382534][T19838] ieee80211_register_hw+0x2cfd/0x4140 [ 835.382567][T19838] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 835.382588][T19838] ? __pfx___debug_object_init+0x10/0x10 [ 835.382608][T19838] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 835.382643][T19838] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 835.382664][T19838] ? __hrtimer_setup+0x178/0x280 [ 835.382692][T19838] mac80211_hwsim_new_radio+0x2847/0x57d0 [ 835.382732][T19838] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 835.382761][T19838] hwsim_new_radio_nl+0xc1f/0x1340 [ 835.382785][T19838] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 835.382813][T19838] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 835.382847][T19838] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 835.382875][T19838] genl_family_rcv_msg_doit+0x214/0x300 [ 835.382902][T19838] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 835.382928][T19838] ? genl_get_cmd+0x3ef/0x720 [ 835.382955][T19838] ? bpf_lsm_capable+0x9/0x10 [ 835.382976][T19838] ? security_capable+0x80/0x260 [ 835.382996][T19838] ? ns_capable+0xd2/0xf0 [ 835.383017][T19838] genl_rcv_msg+0x560/0x800 [ 835.383042][T19838] ? __pfx_genl_rcv_msg+0x10/0x10 [ 835.383066][T19838] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 835.383103][T19838] netlink_rcv_skb+0x159/0x420 [ 835.383123][T19838] ? __pfx_genl_rcv_msg+0x10/0x10 [ 835.383146][T19838] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 835.383176][T19838] ? netlink_deliver_tap+0x1ae/0xcc0 [ 835.383213][T19838] genl_rcv+0x28/0x40 [ 835.383232][T19838] netlink_unicast+0x5aa/0x870 [ 835.383257][T19838] ? __pfx_netlink_unicast+0x10/0x10 [ 835.383275][T19838] ? __pfx___might_resched+0x10/0x10 [ 835.383303][T19838] ? __lock_acquire+0x4a5/0x2630 [ 835.383335][T19838] netlink_sendmsg+0x8b0/0xda0 [ 835.383359][T19838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 835.383377][T19838] ? __import_iovec+0x1d2/0x640 [ 835.383404][T19838] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 835.383428][T19838] ____sys_sendmsg+0x9e1/0xb70 [ 835.383450][T19838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 835.383472][T19838] ? __pfx_____sys_sendmsg+0x10/0x10 [ 835.383499][T19838] ? try_to_wake_up+0x644/0x1a80 [ 835.383524][T19838] ___sys_sendmsg+0x190/0x1e0 [ 835.383549][T19838] ? __pfx____sys_sendmsg+0x10/0x10 [ 835.383574][T19838] ? futex_private_hash_put+0x107/0x1c0 [ 835.383629][T19838] __sys_sendmsg+0x170/0x220 [ 835.383660][T19838] ? __pfx___sys_sendmsg+0x10/0x10 [ 835.383689][T19838] ? __x64_sys_futex+0x34f/0x4d0 [ 835.383729][T19838] do_syscall_64+0x106/0xf80 [ 835.383747][T19838] ? clear_bhb_loop+0x40/0x90 [ 835.383770][T19838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.383790][T19838] RIP: 0033:0x7fa865b9c819 [ 835.383808][T19838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.383826][T19838] RSP: 002b:00007fa866a6b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 835.383852][T19838] RAX: ffffffffffffffda RBX: 00007fa865e16090 RCX: 00007fa865b9c819 [ 835.383865][T19838] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000009 [ 835.383876][T19838] RBP: 00007fa865c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 835.383887][T19838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.383898][T19838] R13: 00007fa865e16128 R14: 00007fa865e16090 R15: 00007fff2ac7d8b8 [ 835.383922][T19838] [ 835.985438][T19846] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2907'. [ 836.286298][T19835] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 836.293735][T19835] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 836.321425][T19835] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 836.866149][T19873] futex_wake_op: syz.1.2913 tries to shift op by -2048; fix this program [ 836.914979][T19873] futex_wake_op: syz.1.2913 tries to shift op by -2048; fix this program [ 836.955108][T19873] 0x000000000001-0x000000020000 : "" [ 837.002077][T19873] ftl_cs: FTL header corrupt! [ 837.111780][T19369] Bluetooth: hci4: command 0x0406 tx timeout [ 837.188858][T19369] Bluetooth: hci3: command 0x0c1a tx timeout [ 837.348725][T19369] Bluetooth: hci2: command 0x0c1a tx timeout [ 837.580243][T19893] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 838.078958][T19911] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2921'. [ 838.237337][T19908] binder: 19896:19908 ioctl 40086602 e20 returned -22 [ 838.308657][T19369] Bluetooth: hci0: command 0x0c1a tx timeout [ 838.377278][T19913] input input42: cannot allocate more than FF_MAX_EFFECTS effects [ 838.736759][T19927] tc_dump_action: action bad kind [ 839.191020][T19369] Bluetooth: hci4: command 0x0406 tx timeout [ 839.239455][T19939] vivid-007: ================= START STATUS ================= [ 839.269637][T19369] Bluetooth: hci3: command 0x0c1a tx timeout [ 839.282958][T19939] vivid-007: Generate PTS: true [ 839.320797][T19939] vivid-007: Generate SCR: true [ 839.345340][T19939] tpg source WxH: 320x240 (Y'CbCr) [ 839.372381][T19939] tpg field: 1 [ 839.375895][T19939] tpg crop: (0,0)/320x240 [ 839.412751][T19939] tpg compose: (0,0)/320x240 [ 839.417411][T19939] tpg colorspace: 8 [ 839.430276][T19369] Bluetooth: hci2: command 0x0c1a tx timeout [ 839.473021][T19939] tpg transfer function: 0/0 [ 839.477667][T19939] tpg Y'CbCr encoding: 0/0 [ 839.519490][T19939] tpg quantization: 0/0 [ 839.523864][T19939] tpg RGB range: 0/2 [ 839.551921][T19939] vivid-007: ================== END STATUS ================== [ 839.775135][T19952] bond0: option miimon: invalid value () [ 839.825033][T19952] bond0: option miimon: allowed values 0 - 2147483647 [ 840.389111][T19369] Bluetooth: hci0: command 0x0c1a tx timeout [ 840.619975][T19970] binder: 19960:19970 ioctl 40086602 e20 returned -22 [ 841.348990][T19369] Bluetooth: hci3: command 0x0c1a tx timeout [ 841.510167][T19369] Bluetooth: hci2: command 0x0c1a tx timeout [ 842.473417][T19369] Bluetooth: hci0: command 0x0c1a tx timeout [ 842.493063][T20028] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2945'. [ 842.917432][T20028] input input43: cannot allocate more than FF_MAX_EFFECTS effects [ 843.910156][T20069] snd_virmidi snd_virmidi.0: control 61678:131081:3:y:0 is already present [ 845.192409][T20097] netlink: 'syz.0.2963': attribute type 2 has an invalid length. [ 845.497326][T20103] i2c i2c-0: new_device: Can't parse I2C address [ 846.043073][T20118] NFSD: Failed to start, no listeners configured. [ 846.690154][T20115] NFSD: Failed to start, no listeners configured. [ 847.208319][T20131] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2968'. [ 847.555423][T20129] input input44: cannot allocate more than FF_MAX_EFFECTS effects [ 848.443192][T20145] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 848.625193][T20150] smpboot: CPU 1 is now offline [ 849.052477][T20172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2976'. [ 849.101473][T20164] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2976'. [ 849.289645][T20182] FAULT_INJECTION: forcing a failure. [ 849.289645][T20182] name failslab, interval 1, probability 0, space 0, times 0 [ 849.345569][T20182] CPU: 0 UID: 0 PID: 20182 Comm: syz.1.2980 Tainted: G L syzkaller #0 PREEMPT(full) [ 849.345601][T20182] Tainted: [L]=SOFTLOCKUP [ 849.345608][T20182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 849.345619][T20182] Call Trace: [ 849.345627][T20182] [ 849.345634][T20182] dump_stack_lvl+0x100/0x190 [ 849.345677][T20182] should_fail_ex.cold+0x5/0xa [ 849.345774][T20182] ? tomoyo_encode2+0xfb/0x3c0 [ 849.345821][T20182] should_failslab+0xc2/0x120 [ 849.345844][T20182] __kmalloc_noprof+0xe0/0x850 [ 849.345874][T20182] ? d_absolute_path+0x136/0x1b0 [ 849.345905][T20182] tomoyo_encode2+0xfb/0x3c0 [ 849.345936][T20182] tomoyo_encode+0x29/0x50 [ 849.345962][T20182] tomoyo_realpath_from_path+0x18c/0x690 [ 849.345996][T20182] tomoyo_path_number_perm+0x23c/0x580 [ 849.346020][T20182] ? tomoyo_path_number_perm+0x22e/0x580 [ 849.346045][T20182] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 849.346103][T20182] ? find_held_lock+0x2b/0x80 [ 849.346128][T20182] ? __fget_files+0x215/0x3d0 [ 849.346146][T20182] ? hook_file_ioctl_common+0x146/0x410 [ 849.346181][T20182] ? __fget_files+0x21f/0x3d0 [ 849.346204][T20182] security_file_ioctl+0xd3/0x230 [ 849.346230][T20182] __x64_sys_ioctl+0xb7/0x210 [ 849.346260][T20182] do_syscall_64+0x106/0xf80 [ 849.346280][T20182] ? clear_bhb_loop+0x40/0x90 [ 849.346303][T20182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.346323][T20182] RIP: 0033:0x7fab9919c819 [ 849.346340][T20182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.346358][T20182] RSP: 002b:00007fab9a025028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 849.346377][T20182] RAX: ffffffffffffffda RBX: 00007fab99415fa0 RCX: 00007fab9919c819 [ 849.346390][T20182] RDX: 0000200000000180 RSI: 000000004024700a RDI: 0000000000000003 [ 849.346402][T20182] RBP: 00007fab9a025090 R08: 0000000000000000 R09: 0000000000000000 [ 849.346414][T20182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 849.346425][T20182] R13: 00007fab99416038 R14: 00007fab99415fa0 R15: 00007ffee1029498 [ 849.346449][T20182] [ 849.569451][T20182] ERROR: Out of memory at tomoyo_realpath_from_path. [ 850.194085][T20197] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 850.495379][T20214] FAULT_INJECTION: forcing a failure. [ 850.495379][T20214] name failslab, interval 1, probability 0, space 0, times 0 [ 850.525427][T20214] CPU: 1 UID: 0 PID: 20214 Comm: syz.0.2987 Tainted: G L syzkaller #0 PREEMPT(full) [ 850.525472][T20214] Tainted: [L]=SOFTLOCKUP [ 850.525483][T20214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 850.525498][T20214] Call Trace: [ 850.525508][T20214] [ 850.525519][T20214] dump_stack_lvl+0x100/0x190 [ 850.525569][T20214] should_fail_ex.cold+0x5/0xa [ 850.525603][T20214] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 850.525633][T20214] should_failslab+0xc2/0x120 [ 850.525662][T20214] __kmalloc_noprof+0xe0/0x850 [ 850.525711][T20214] kernfs_fop_write_iter+0x26a/0x5f0 [ 850.525747][T20214] vfs_write+0x6ac/0x1070 [ 850.525776][T20214] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 850.525812][T20214] ? __pfx_vfs_write+0x10/0x10 [ 850.525865][T20214] ksys_write+0x12a/0x250 [ 850.525896][T20214] ? __pfx_ksys_write+0x10/0x10 [ 850.525938][T20214] do_syscall_64+0x106/0xf80 [ 850.525968][T20214] ? clear_bhb_loop+0x40/0x90 [ 850.526005][T20214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.526050][T20214] RIP: 0033:0x7f1d93b9c819 [ 850.526077][T20214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 850.526107][T20214] RSP: 002b:00007f1d94995028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 850.526137][T20214] RAX: ffffffffffffffda RBX: 00007f1d93e15fa0 RCX: 00007f1d93b9c819 [ 850.526157][T20214] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000003 [ 850.526175][T20214] RBP: 00007f1d94995090 R08: 0000000000000000 R09: 0000000000000000 [ 850.526192][T20214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 850.526210][T20214] R13: 00007f1d93e16038 R14: 00007f1d93e15fa0 R15: 00007ffc905cc728 [ 850.526252][T20214] [ 851.036727][T20223] netlink: 'syz.0.2989': attribute type 2 has an invalid length. [ 851.479662][T20241] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2994'. [ 851.696986][T20248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2995'. [ 852.459807][T20238] input input45: cannot allocate more than FF_MAX_EFFECTS effects [ 853.376964][T20271] netlink: 'syz.2.3001': attribute type 2 has an invalid length. [ 853.990990][T20289] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 854.687294][T20297] smpboot: CPU 1 is now offline [ 855.361539][T20314] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3009'. [ 855.459565][T20321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3011'. [ 855.699886][T20310] input input46: cannot allocate more than FF_MAX_EFFECTS effects [ 858.270318][T20379] NFSD: Failed to start, no listeners configured. [ 858.398698][T20387] netlink: 'syz.1.3025': attribute type 2 has an invalid length. [ 858.821150][T20398] netlink: 'syz.1.3028': attribute type 11 has an invalid length. [ 859.233049][T20417] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3031'. [ 859.243460][T20418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3032'. [ 860.838560][T20461] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3042'. [ 861.154370][T20461] input input47: cannot allocate more than FF_MAX_EFFECTS effects [ 861.559814][T20478] tc_dump_action: action bad kind [ 862.052390][T20482] Invalid ELF header magic: != ELF [ 862.093139][T20484] netlink: 'syz.1.3049': attribute type 2 has an invalid length. [ 862.409936][T20488] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 862.504058][T20496] smpboot: CPU 1 is now offline [ 862.532538][T20498] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 863.651124][T20520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3058'. [ 863.692052][T20520] tc_dump_action: action bad kind [ 864.249059][T20526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3061'. [ 864.652191][T20540] FAULT_INJECTION: forcing a failure. [ 864.652191][T20540] name failslab, interval 1, probability 0, space 0, times 0 [ 864.727401][T20540] CPU: 0 UID: 0 PID: 20540 Comm: syz.2.3065 Tainted: G L syzkaller #0 PREEMPT(full) [ 864.727434][T20540] Tainted: [L]=SOFTLOCKUP [ 864.727441][T20540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 864.727452][T20540] Call Trace: [ 864.727461][T20540] [ 864.727469][T20540] dump_stack_lvl+0x100/0x190 [ 864.727503][T20540] should_fail_ex.cold+0x5/0xa [ 864.727528][T20540] should_failslab+0xc2/0x120 [ 864.727550][T20540] __kmalloc_cache_noprof+0x7a/0x6f0 [ 864.727577][T20540] ? acpi_evaluate_object+0xf5/0xe00 [ 864.727605][T20540] acpi_evaluate_object+0xf5/0xe00 [ 864.727630][T20540] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 864.727657][T20540] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 864.727690][T20540] ? __lock_acquire+0x4a5/0x2630 [ 864.727725][T20540] acpi_evaluate_integer+0xdf/0x220 [ 864.727757][T20540] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 864.727806][T20540] find_child_checks+0xd9/0x230 [ 864.727827][T20540] ? __pfx_find_child_checks+0x10/0x10 [ 864.727847][T20540] ? mark_held_locks+0x40/0x70 [ 864.727872][T20540] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 864.727905][T20540] check_one_child+0x172/0x3a0 [ 864.727924][T20540] ? __pfx_check_one_child+0x10/0x10 [ 864.727944][T20540] acpi_dev_for_one_check+0x97/0xd0 [ 864.727963][T20540] ? __pfx_acpi_dev_for_one_check+0x10/0x10 [ 864.727981][T20540] device_for_each_child+0x11e/0x1a0 [ 864.728013][T20540] ? __pfx_device_for_each_child+0x10/0x10 [ 864.728050][T20540] ? __pfx_check_one_child+0x10/0x10 [ 864.728070][T20540] acpi_dev_for_each_child+0x88/0xc0 [ 864.728101][T20540] ? __pfx_acpi_dev_for_each_child+0x10/0x10 [ 864.728133][T20540] ? __pfx_check_one_child+0x10/0x10 [ 864.728158][T20540] acpi_find_child_device+0xb5/0x100 [ 864.728179][T20540] ? __pfx_acpi_find_child_device+0x10/0x10 [ 864.728202][T20540] ? acpi_pci_find_companion+0xae/0x2f0 [ 864.728233][T20540] acpi_pci_find_companion+0x1cc/0x2f0 [ 864.728263][T20540] pci_set_acpi_fwnode+0x86/0xc0 [ 864.728290][T20540] pci_setup_device+0x494/0x2500 [ 864.728324][T20540] ? __pfx_pci_setup_device+0x10/0x10 [ 864.728363][T20540] ? lockdep_init_map_type+0x5c/0x250 [ 864.728390][T20540] ? __raw_spin_lock_init+0x3a/0x110 [ 864.728423][T20540] pci_scan_single_device+0x1ac/0x240 [ 864.728453][T20540] ? __pfx_pci_scan_single_device+0x10/0x10 [ 864.728488][T20540] ? trace_contention_end+0x140/0x180 [ 864.728517][T20540] ? __mutex_lock+0x26a/0x1b90 [ 864.728540][T20540] pci_scan_slot+0x1c9/0x7c0 [ 864.728573][T20540] ? __pfx_pci_scan_slot+0x10/0x10 [ 864.728610][T20540] pci_scan_child_bus_extend+0x6b/0x7b0 [ 864.728640][T20540] ? pci_find_next_bus+0x60/0xb0 [ 864.728664][T20540] pci_rescan_bus+0x18/0x40 [ 864.728694][T20540] rescan_store+0xfb/0x130 [ 864.728723][T20540] ? __pfx_rescan_store+0x10/0x10 [ 864.728752][T20540] ? sysfs_file_kobj+0xe4/0x290 [ 864.728793][T20540] ? __pfx_rescan_store+0x10/0x10 [ 864.728822][T20540] bus_attr_store+0x74/0xb0 [ 864.728850][T20540] ? __pfx_bus_attr_store+0x10/0x10 [ 864.728876][T20540] sysfs_kf_write+0xf2/0x150 [ 864.728904][T20540] kernfs_fop_write_iter+0x3e0/0x5f0 [ 864.728925][T20540] ? __pfx_sysfs_kf_write+0x10/0x10 [ 864.728953][T20540] vfs_write+0x6ac/0x1070 [ 864.728973][T20540] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 864.728998][T20540] ? __pfx_vfs_write+0x10/0x10 [ 864.729033][T20540] ksys_write+0x12a/0x250 [ 864.729051][T20540] ? __pfx_ksys_write+0x10/0x10 [ 864.729078][T20540] do_syscall_64+0x106/0xf80 [ 864.729096][T20540] ? clear_bhb_loop+0x40/0x90 [ 864.729120][T20540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.729140][T20540] RIP: 0033:0x7fd2e099c819 [ 864.729157][T20540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 864.729175][T20540] RSP: 002b:00007fd2e17f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 864.729194][T20540] RAX: ffffffffffffffda RBX: 00007fd2e0c15fa0 RCX: 00007fd2e099c819 [ 864.729211][T20540] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000003 [ 864.729227][T20540] RBP: 00007fd2e17f5090 R08: 0000000000000000 R09: 0000000000000000 [ 864.729238][T20540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 864.729249][T20540] R13: 00007fd2e0c16038 R14: 00007fd2e0c15fa0 R15: 00007ffc0c06fe38 [ 864.729274][T20540] [ 865.229504][T20530] netlink: 'syz.1.3062': attribute type 2 has an invalid length. [ 865.791499][T19394] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 865.802586][T19394] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 865.818826][T19394] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 865.832256][T19394] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 865.843203][T19394] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 865.910409][T20559] binder: 20550:20559 ioctl 40086602 e20 returned -22 [ 866.145336][T20540] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 866.507262][T20553] chnl_net:caif_netlink_parms(): no params data found [ 866.747772][T20570] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3070'. [ 867.050893][T20575] input input48: cannot allocate more than FF_MAX_EFFECTS effects [ 867.124304][T20553] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.152234][T20553] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.178065][T20553] bridge_slave_0: entered allmulticast mode [ 867.209197][T20553] bridge_slave_0: entered promiscuous mode [ 867.248062][T20553] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.272333][T20553] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.297273][T20553] bridge_slave_1: entered allmulticast mode [ 867.325384][T20553] bridge_slave_1: entered promiscuous mode [ 867.463146][T20553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 867.533316][T20553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 867.615176][T20592] FAULT_INJECTION: forcing a failure. [ 867.615176][T20592] name failslab, interval 1, probability 0, space 0, times 0 [ 867.661941][T20553] team0: Port device team_slave_0 added [ 867.667862][T20592] CPU: 0 UID: 0 PID: 20592 Comm: syz.0.3075 Tainted: G L syzkaller #0 PREEMPT(full) [ 867.667894][T20592] Tainted: [L]=SOFTLOCKUP [ 867.667901][T20592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 867.667912][T20592] Call Trace: [ 867.667919][T20592] [ 867.667928][T20592] dump_stack_lvl+0x100/0x190 [ 867.667961][T20592] should_fail_ex.cold+0x5/0xa [ 867.667984][T20592] should_failslab+0xc2/0x120 [ 867.668006][T20592] __kmalloc_cache_noprof+0x7a/0x6f0 [ 867.668033][T20592] ? allocate_file_region_entries+0x1a0/0x620 [ 867.668067][T20592] allocate_file_region_entries+0x1a0/0x620 [ 867.668101][T20592] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 867.668138][T20592] region_chg+0x85/0x140 [ 867.668167][T20592] __vma_reservation_common+0x376/0x720 [ 867.668200][T20592] ? __pfx___vma_reservation_common+0x10/0x10 [ 867.668233][T20592] ? __pfx___might_resched+0x10/0x10 [ 867.668266][T20592] hugetlb_no_page+0xb2b/0x1970 [ 867.668298][T20592] hugetlb_fault+0x5df/0x1450 [ 867.668326][T20592] ? __pfx_hugetlb_fault+0x10/0x10 [ 867.668359][T20592] ? find_vma+0xbf/0x140 [ 867.668378][T20592] ? __pfx_find_vma+0x10/0x10 [ 867.668400][T20592] handle_mm_fault+0x5f1/0xa20 [ 867.668431][T20592] do_user_addr_fault+0x74c/0x12f0 [ 867.668462][T20592] exc_page_fault+0x6f/0xd0 [ 867.668482][T20592] asm_exc_page_fault+0x26/0x30 [ 867.668501][T20592] RIP: 0010:__put_user_4+0xd/0x20 [ 867.668519][T20592] Code: 66 89 01 31 c9 0f 01 ca e9 c0 d0 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 97 d0 03 00 0f 1f 80 00 00 00 00 90 90 90 [ 867.668537][T20592] RSP: 0018:ffffc90004297e58 EFLAGS: 00050202 [ 867.668553][T20592] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000007 [ 867.668565][T20592] RDX: 0000000000000000 RSI: ffffffff82563841 RDI: ffff88803135a45c [ 867.668576][T20592] RBP: 0000000000000002 R08: 0000000000000001 R09: 00000000000001c7 [ 867.668587][T20592] R10: 0000000000000200 R11: 0000000000000000 R12: 1ffff92000852fce [ 867.668599][T20592] R13: 0000000000000007 R14: 0000000000000000 R15: dffffc0000000000 [ 867.668617][T20592] ? __might_fault+0x111/0x140 [ 867.668650][T20592] __do_sys_prctl+0xd67/0x2330 [ 867.668680][T20592] ? __pfx___do_sys_prctl+0x10/0x10 [ 867.668715][T20592] do_syscall_64+0x106/0xf80 [ 867.668732][T20592] ? clear_bhb_loop+0x40/0x90 [ 867.668756][T20592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.668783][T20592] RIP: 0033:0x7f1d93b9c819 [ 867.668798][T20592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.668816][T20592] RSP: 002b:00007f1d94995028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 867.668833][T20592] RAX: ffffffffffffffda RBX: 00007f1d93e15fa0 RCX: 00007f1d93b9c819 [ 867.668844][T20592] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000002 [ 867.668855][T20592] RBP: 00007f1d93c32c91 R08: 0000000000000001 R09: 0000000000000000 [ 867.668866][T20592] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 867.668877][T20592] R13: 00007f1d93e16038 R14: 00007f1d93e15fa0 R15: 00007ffc905cc728 [ 867.668901][T20592] [ 868.072181][T20553] team0: Port device team_slave_1 added [ 868.099843][T20553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 868.106914][T20553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.133305][T20553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 868.146120][T20553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 868.153441][T20553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.180278][T20553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 868.222556][T20553] hsr_slave_0: entered promiscuous mode [ 868.229665][T20553] hsr_slave_1: entered promiscuous mode [ 868.235898][T20553] debugfs: 'hsr0' already exists in 'hsr' [ 868.241780][T20553] Cannot create hsr debugfs directory [ 868.332722][T19394] Bluetooth: hci1: command tx timeout [ 868.631861][T20553] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 868.657683][T20553] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 868.691688][T20553] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 868.717925][T20553] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 868.803615][T20604] snd_virmidi snd_virmidi.0: control 61678:131081:3:y:0 is already present [ 869.031678][T20553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 869.129816][T20553] 8021q: adding VLAN 0 to HW filter on device team0 [ 869.162378][T19637] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.169571][T19637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 869.233397][T19637] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.240909][T19637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 869.370318][T20553] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 869.865975][T20553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 870.396354][T19394] Bluetooth: hci1: command tx timeout [ 870.403254][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.420627][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.593136][T20643] binder: 20638:20643 ioctl 40086602 e20 returned -22 [ 870.684299][T20553] veth0_vlan: entered promiscuous mode [ 870.731912][T20553] veth1_vlan: entered promiscuous mode [ 870.834750][T20553] veth0_macvtap: entered promiscuous mode [ 870.874908][T20553] veth1_macvtap: entered promiscuous mode [ 870.935980][T20553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 870.984761][T20553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 871.094341][T19374] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.122233][T19374] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.171442][T20665] binder: 20660:20665 ioctl 40086602 e20 returned -22 [ 871.194875][T19374] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.232912][T19374] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.646146][T19370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 871.681183][T19370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.803401][T19370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 871.851789][T19370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.332316][T20682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3096'. [ 872.357986][T20682] tc_dump_action: action bad kind [ 872.469660][T19394] Bluetooth: hci1: command tx timeout [ 872.964698][T20692] netlink: 'syz.1.3099': attribute type 2 has an invalid length. [ 873.451085][T20702] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3102'. [ 873.640781][T20703] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 873.989852][T20700] input input49: cannot allocate more than FF_MAX_EFFECTS effects [ 874.221662][T20725] tc_dump_action: action bad kind [ 874.549047][T19394] Bluetooth: hci1: command tx timeout [ 874.951065][T20739] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3112'. [ 875.029638][T20735] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3109'. [ 875.236748][T20743] input input50: cannot allocate more than FF_MAX_EFFECTS effects [ 875.631593][T20730] input input51: cannot allocate more than FF_MAX_EFFECTS effects [ 875.847748][T20764] nvme_fabrics: missing parameter 'transport=%s' [ 875.881405][T20764] nvme_fabrics: missing parameter 'nqn=%s' [ 876.032440][T20763] nvme_fabrics: missing parameter 'transport=%s' [ 876.052182][T20763] nvme_fabrics: missing parameter 'nqn=%s' [ 876.317517][T20779] snd_virmidi snd_virmidi.0: control 61678:131081:3:y:0 is already present [ 877.976125][T20818] tc_dump_action: action bad kind [ 879.434446][T20835] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 879.618351][T20836] smpboot: CPU 1 is now offline [ 880.899777][T20866] snd_virmidi snd_virmidi.0: control 61678:131081:3:y:0 is already present [ 881.117969][T20870] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3139'. [ 881.350339][T20874] input input53: cannot allocate more than FF_MAX_EFFECTS effects [ 881.382373][T20881] tc_dump_action: action bad kind [ 881.738045][T20889] netlink: 334 bytes leftover after parsing attributes in process `syz.2.3146'. [ 881.749913][T20887] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 881.779617][T20889] netlink: 334 bytes leftover after parsing attributes in process `syz.2.3146'. [ 882.625400][T20923] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 883.410822][T20937] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 883.828054][T20953] FAULT_INJECTION: forcing a failure. [ 883.828054][T20953] name failslab, interval 1, probability 0, space 0, times 0 [ 883.843708][T20953] CPU: 1 UID: 0 PID: 20953 Comm: syz.1.3162 Tainted: G L syzkaller #0 PREEMPT(full) [ 883.843750][T20953] Tainted: [L]=SOFTLOCKUP [ 883.843759][T20953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 883.843774][T20953] Call Trace: [ 883.843783][T20953] [ 883.843793][T20953] dump_stack_lvl+0x100/0x190 [ 883.843842][T20953] should_fail_ex.cold+0x5/0xa [ 883.843889][T20953] should_failslab+0xc2/0x120 [ 883.843921][T20953] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 883.843961][T20953] ? alloc_empty_file+0x55/0x1c0 [ 883.844004][T20953] alloc_empty_file+0x55/0x1c0 [ 883.844042][T20953] alloc_file_pseudo+0x13a/0x230 [ 883.844082][T20953] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 883.844129][T20953] __shmem_file_setup+0x221/0x490 [ 883.844173][T20953] ? __pfx___shmem_file_setup+0x10/0x10 [ 883.844221][T20953] ? vm_area_alloc+0x1f/0x160 [ 883.844266][T20953] shmem_zero_setup+0x96/0x1b0 [ 883.844298][T20953] __mmap_region+0x2198/0x29e0 [ 883.844350][T20953] ? __pfx___mmap_region+0x10/0x10 [ 883.844402][T20953] ? set_next_entity+0x11e/0x9c0 [ 883.844451][T20953] ? __lock_acquire+0x4a5/0x2630 [ 883.844488][T20953] ? update_cfs_rq_load_avg+0x51/0x550 [ 883.844541][T20953] ? find_held_lock+0x2b/0x80 [ 883.844569][T20953] ? finish_task_switch.isra.0+0x200/0xb80 [ 883.844603][T20953] ? finish_task_switch.isra.0+0x200/0xb80 [ 883.844651][T20953] ? trace_sched_exit_tp+0x13a/0x180 [ 883.844689][T20953] ? __schedule+0x1000/0x6120 [ 883.844788][T20953] ? rcu_is_watching+0x12/0xc0 [ 883.844834][T20953] ? cap_capable+0x107/0x460 [ 883.844882][T20953] mmap_region+0x180/0x3e0 [ 883.844935][T20953] do_mmap+0xc63/0x12f0 [ 883.844977][T20953] ? __pfx_do_mmap+0x10/0x10 [ 883.845013][T20953] ? __pfx_down_write_killable+0x10/0x10 [ 883.845056][T20953] vm_mmap_pgoff+0x29e/0x470 [ 883.845099][T20953] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 883.845140][T20953] ? do_futex+0x192/0x350 [ 883.845179][T20953] ? __pfx_do_futex+0x10/0x10 [ 883.845226][T20953] ksys_mmap_pgoff+0xe1/0x650 [ 883.845260][T20953] ? __x64_sys_futex+0x34f/0x4d0 [ 883.845298][T20953] ? __x64_sys_futex+0x358/0x4d0 [ 883.845336][T20953] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 883.845368][T20953] ? xfd_validate_state+0x129/0x190 [ 883.845419][T20953] __x64_sys_mmap+0x125/0x190 [ 883.845467][T20953] do_syscall_64+0x106/0xf80 [ 883.845495][T20953] ? clear_bhb_loop+0x40/0x90 [ 883.845531][T20953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.845563][T20953] RIP: 0033:0x7fab9919c819 [ 883.845589][T20953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 883.845617][T20953] RSP: 002b:00007fab9a025028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 883.845642][T20953] RAX: ffffffffffffffda RBX: 00007fab99415fa0 RCX: 00007fab9919c819 [ 883.845659][T20953] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 883.845673][T20953] RBP: 00007fab99232c91 R08: fffffffffffffffa R09: 0000000000008000 [ 883.845688][T20953] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 883.845703][T20953] R13: 00007fab99416038 R14: 00007fab99415fa0 R15: 00007ffee1029498 [ 883.845750][T20953] [ 884.269096][T20960] FAULT_INJECTION: forcing a failure. [ 884.269096][T20960] name fail_futex, interval 1, probability 0, space 0, times 0 [ 884.290273][T20960] CPU: 0 UID: 0 PID: 20960 Comm: syz.2.3165 Tainted: G L syzkaller #0 PREEMPT(full) [ 884.290331][T20960] Tainted: [L]=SOFTLOCKUP [ 884.290344][T20960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 884.290363][T20960] Call Trace: [ 884.290375][T20960] [ 884.290388][T20960] dump_stack_lvl+0x100/0x190 [ 884.290444][T20960] should_fail_ex.cold+0x5/0xa [ 884.290483][T20960] get_futex_key+0x1d2/0x1620 [ 884.290529][T20960] ? __pfx_get_futex_key+0x10/0x10 [ 884.290584][T20960] futex_wait_setup+0x83/0x510 [ 884.290646][T20960] __futex_wait+0x19f/0x300 [ 884.290698][T20960] ? __pfx___futex_wait+0x10/0x10 [ 884.290754][T20960] ? __pfx_futex_wake_mark+0x10/0x10 [ 884.290809][T20960] ? futex_hash+0x2c5/0x380 [ 884.290860][T20960] futex_wait+0xed/0x380 [ 884.290918][T20960] ? __pfx_futex_wait+0x10/0x10 [ 884.290976][T20960] ? ksys_write+0x190/0x250 [ 884.291019][T20960] do_futex+0x1ef/0x350 [ 884.291062][T20960] ? __pfx_do_futex+0x10/0x10 [ 884.291115][T20960] __x64_sys_futex+0x34f/0x4d0 [ 884.291160][T20960] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 884.291205][T20960] ? __pfx___x64_sys_futex+0x10/0x10 [ 884.291264][T20960] do_syscall_64+0x106/0xf80 [ 884.291296][T20960] ? clear_bhb_loop+0x40/0x90 [ 884.291335][T20960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.291368][T20960] RIP: 0033:0x7fd2e099c819 [ 884.291396][T20960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.291427][T20960] RSP: 002b:00007fd2e17f50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 884.291459][T20960] RAX: ffffffffffffffda RBX: 00007fd2e0c15fa8 RCX: 00007fd2e099c819 [ 884.291480][T20960] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd2e0c15fa8 [ 884.291500][T20960] RBP: 00007fd2e0c15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 884.291520][T20960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 884.291539][T20960] R13: 00007fd2e0c16038 R14: 00007ffc0c06fd50 R15: 00007ffc0c06fe38 [ 884.291580][T20960] [ 884.821221][T20966] netlink: 'syz.4.3166': attribute type 2 has an invalid length. [ 884.841278][T20969] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 885.020133][T20986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3169'. [ 886.313934][T21023] tc_dump_action: action bad kind [ 887.823261][T21050] binder: 21046:21050 ioctl 40086602 e20 returned -22 [ 888.185471][T21070] snd_virmidi snd_virmidi.0: control 61678:131081:3:y:0 is already present [ 888.461950][T21077] tc_dump_action: action bad kind [ 889.084815][T21093] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 889.138982][T21097] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 889.333360][T21103] snd_virmidi snd_virmidi.0: control 61678:131081:3:y:0 is already present [ 889.545566][T21108] tc_dump_action: action bad kind [ 889.642172][T21110] usb usb15: usbfs: process 21110 (syz.0.3200) did not claim interface 0 before use [ 890.041281][T21120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3203'. [ 890.288233][T21127] smpboot: CPU 1 is now offline [ 890.800267][T21135] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3208'. [ 891.103561][T21154] snd_virmidi snd_virmidi.0: control 61678:131081:3:y:0 is already present [ 891.537845][T21132] input input54: cannot allocate more than FF_MAX_EFFECTS effects [ 891.799156][T21169] FAULT_INJECTION: forcing a failure. [ 891.799156][T21169] name failslab, interval 1, probability 0, space 0, times 0 [ 891.857248][T21169] CPU: 0 UID: 0 PID: 21169 Comm: syz.2.3214 Tainted: G L syzkaller #0 PREEMPT(full) [ 891.857281][T21169] Tainted: [L]=SOFTLOCKUP [ 891.857288][T21169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 891.857300][T21169] Call Trace: [ 891.857307][T21169] [ 891.857315][T21169] dump_stack_lvl+0x100/0x190 [ 891.857348][T21169] should_fail_ex.cold+0x5/0xa [ 891.857372][T21169] should_failslab+0xc2/0x120 [ 891.857394][T21169] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 891.857423][T21169] ? security_file_alloc+0x34/0x2c0 [ 891.857449][T21169] ? trace_kmem_cache_alloc+0xf3/0x120 [ 891.857474][T21169] security_file_alloc+0x34/0x2c0 [ 891.857499][T21169] init_file+0x95/0x480 [ 891.857522][T21169] alloc_empty_file_noaccount+0x3d/0xd0 [ 891.857549][T21169] alloc_file_pseudo_noaccount+0x13a/0x230 [ 891.857577][T21169] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 891.857606][T21169] ? iput+0x3a/0x40 [ 891.857631][T21169] bdev_file_open_by_dev+0x13a/0x210 [ 891.857662][T21169] blkdev_bszset+0x170/0x240 [ 891.857689][T21169] ? __pfx_blkdev_bszset+0x10/0x10 [ 891.857718][T21169] ? find_held_lock+0x2b/0x80 [ 891.857736][T21169] ? __fget_files+0x215/0x3d0 [ 891.857753][T21169] ? hook_file_ioctl_common+0x146/0x410 [ 891.857779][T21169] blkdev_ioctl+0x513/0x6f0 [ 891.857807][T21169] ? __pfx_blkdev_ioctl+0x10/0x10 [ 891.857838][T21169] ? __pfx_blkdev_ioctl+0x10/0x10 [ 891.857867][T21169] __x64_sys_ioctl+0x18e/0x210 [ 891.857897][T21169] do_syscall_64+0x106/0xf80 [ 891.857915][T21169] ? clear_bhb_loop+0x40/0x90 [ 891.857938][T21169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.857958][T21169] RIP: 0033:0x7fd2e099c819 [ 891.857983][T21169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.858001][T21169] RSP: 002b:00007fd2e17f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 891.858019][T21169] RAX: ffffffffffffffda RBX: 00007fd2e0c15fa0 RCX: 00007fd2e099c819 [ 891.858032][T21169] RDX: 00002000000000c0 RSI: 0000000040081271 RDI: 0000000000000005 [ 891.858043][T21169] RBP: 00007fd2e0a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 891.858055][T21169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 891.858066][T21169] R13: 00007fd2e0c16038 R14: 00007fd2e0c15fa0 R15: 00007ffc0c06fe38 [ 891.858089][T21169] [ 893.917518][T21214] nbd: illegal input index -1073741824 [ 894.136784][ T30] audit: type=1800 audit(4294967784.407:37): pid=21222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3225" name="members" dev="configfs" ino=92288 res=0 errno=0 [ 894.863604][T21240] vhci_hcd: not connected 4 [ 895.382029][T21252] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3233'. [ 895.681361][T21260] phram: not enough arguments [ 895.686243][T21260] phram: not enough arguments [ 895.745040][T21251] input input55: cannot allocate more than FF_MAX_EFFECTS effects [ 895.765748][T21260] phram: not enough arguments [ 895.833330][T21260] phram: not enough arguments [ 895.838421][T21260] phram: not enough arguments [ 895.892538][T21257] sp0: Synchronizing with TNC [ 895.920417][T21260] phram: not enough arguments [ 895.952632][T21260] phram: not enough arguments [ 896.006893][T21260] phram: not enough arguments [ 896.051568][T21260] phram: not enough arguments [ 896.086461][T21260] phram: not enough arguments [ 896.127135][T21260] phram: not enough arguments [ 896.181128][T21260] phram: not enough arguments [ 896.226805][T21260] phram: not enough arguments [ 896.232182][T21257] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3236'. [ 896.245301][T21276] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(3.0.1), cmd(2) [ 896.268372][T21260] phram: not enough arguments [ 896.316374][T21260] phram: not enough arguments [ 896.361371][T21260] phram: not enough arguments [ 896.397773][T21260] phram: not enough arguments [ 896.443040][T21260] phram: not enough arguments [ 896.479784][T21260] phram: not enough arguments [ 896.675407][T21288] tc_dump_action: action bad kind [ 896.824219][T21285] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3240'. [ 896.905720][T21295] snd_virmidi snd_virmidi.0: control 61678:131081:3:y:0 is already present [ 897.135235][T21300] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 897.230357][T21303] smpboot: CPU 1 is now offline [ 897.237745][T21284] input input56: cannot allocate more than FF_MAX_EFFECTS effects [ 898.501101][T21326] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 898.890740][T21336] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 899.062397][T21338] smpboot: CPU 1 is now offline [ 900.059459][T21354] bond0: invalid ARP target specified [ 900.359466][T21364] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 902.848933][T21417] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 902.940243][T21413] smpboot: CPU 1 is now offline [ 902.964585][T21418] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3276'. [ 903.197698][T21418] input input57: cannot allocate more than FF_MAX_EFFECTS effects [ 903.206174][T21424] tc_dump_action: action bad kind [ 907.463389][T21481] NFSD: Failed to start, no listeners configured. [ 908.200983][T21495] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 909.734429][T21534] bond0: Unable to set down delay as MII monitoring is disabled [ 909.785945][T21526] NFSD: Failed to start, no listeners configured. [ 910.221501][T21541] nbd: must specify a size in bytes for the device [ 910.594221][T19394] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 910.967101][T19369] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 910.977280][T19369] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 910.986377][T19369] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 910.996226][T19369] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 911.004015][T19369] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 911.171732][T21558] snd_virmidi snd_virmidi.0: control 61678:131081:3:y:0 is already present [ 911.240229][T21557] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3311'. [ 911.502422][T21559] input input59: cannot allocate more than FF_MAX_EFFECTS effects [ 911.541469][T21562] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 911.644806][T21568] smpboot: CPU 1 is now offline [ 911.716712][T21566] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 911.814559][T21572] smpboot: CPU 1 is now offline [ 911.915179][T21574] snd_virmidi snd_virmidi.0: control 61678:131081:3:y:0 is already present [ 912.117329][T21551] chnl_net:caif_netlink_parms(): no params data found [ 912.451145][T21551] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.479068][T21551] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.503379][T21551] bridge_slave_0: entered allmulticast mode [ 912.541371][T21551] bridge_slave_0: entered promiscuous mode [ 912.583859][T21551] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.605056][T21551] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.614503][T21551] bridge_slave_1: entered allmulticast mode [ 912.624406][T21551] bridge_slave_1: entered promiscuous mode [ 912.775736][T21551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 912.796953][T21594] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3320'. [ 912.835357][T21551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 913.046172][T21551] team0: Port device team_slave_0 added [ 913.075596][T21551] team0: Port device team_slave_1 added [ 913.108900][T19369] Bluetooth: hci5: command tx timeout [ 913.136696][T21594] input input60: cannot allocate more than FF_MAX_EFFECTS effects [ 913.212009][T21551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 913.229691][T21551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 913.300379][T21551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 913.367488][T21551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 913.378787][T21551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 913.414873][T21551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 913.446098][T21605] tc_dump_action: action bad kind [ 913.648995][T21551] hsr_slave_0: entered promiscuous mode [ 913.656515][T21551] hsr_slave_1: entered promiscuous mode [ 913.699490][T21551] debugfs: 'hsr0' already exists in 'hsr' [ 913.705865][T21551] Cannot create hsr debugfs directory [ 913.741767][T21610] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3323'. [ 913.932434][T21616] input input61: cannot allocate more than FF_MAX_EFFECTS effects [ 914.790533][T21627] netlink: 62 bytes leftover after parsing attributes in process `syz.0.3326'. [ 914.816860][T21551] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 914.865413][T21551] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 914.935355][T21551] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 915.019917][T21551] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 915.189244][T19369] Bluetooth: hci5: command tx timeout [ 915.646096][T21551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 915.724936][T21551] 8021q: adding VLAN 0 to HW filter on device team0 [ 915.772853][T19370] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.780321][T19370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 915.863395][T19370] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.870837][T19370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 916.595384][T21551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 916.980500][T21673] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 917.272428][T19369] Bluetooth: hci5: command tx timeout [ 917.340330][T21683] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3336'. [ 917.551260][T21551] veth0_vlan: entered promiscuous mode [ 917.644402][T21551] veth1_vlan: entered promiscuous mode [ 917.667081][T21681] input input62: cannot allocate more than FF_MAX_EFFECTS effects [ 917.800778][T21551] veth0_macvtap: entered promiscuous mode [ 917.844384][T21551] veth1_macvtap: entered promiscuous mode [ 917.934654][T21551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 917.987667][T21551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 918.036070][T19370] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.070980][T19370] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.112827][T21704] tc_dump_action: action bad kind [ 918.136486][T19370] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.169357][T19370] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.344839][T19370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 918.382563][T19370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 918.566262][T19374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 918.594235][T19374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.351718][T19369] Bluetooth: hci5: command tx timeout [ 919.403048][T21721] size and base must be multiples of 4 kiB [ 919.495788][T21721] CPU: 0 UID: 0 PID: 21721 Comm: syz.5.3310 Tainted: G L syzkaller #0 PREEMPT(full) [ 919.495822][T21721] Tainted: [L]=SOFTLOCKUP [ 919.495829][T21721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 919.495840][T21721] Call Trace: [ 919.495847][T21721] [ 919.495855][T21721] dump_stack_lvl+0x100/0x190 [ 919.495887][T21721] mtrr_add.cold+0x74/0x87 [ 919.495908][T21721] mtrr_ioctl+0x25a/0xcf0 [ 919.495936][T21721] ? __pfx_mtrr_ioctl+0x10/0x10 [ 919.495965][T21721] ? find_held_lock+0x2b/0x80 [ 919.495989][T21721] ? __fget_files+0x21f/0x3d0 [ 919.496009][T21721] ? __pfx_mtrr_ioctl+0x10/0x10 [ 919.496039][T21721] proc_reg_unlocked_ioctl+0x229/0x320 [ 919.496069][T21721] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 919.496101][T21721] __x64_sys_ioctl+0x18e/0x210 [ 919.496130][T21721] do_syscall_64+0x106/0xf80 [ 919.496149][T21721] ? clear_bhb_loop+0x40/0x90 [ 919.496172][T21721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.496191][T21721] RIP: 0033:0x7fb855b9c819 [ 919.496208][T21721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 919.496226][T21721] RSP: 002b:00007fb856a25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 919.496244][T21721] RAX: ffffffffffffffda RBX: 00007fb855e16090 RCX: 00007fb855b9c819 [ 919.496256][T21721] RDX: 0000000000000005 RSI: 00000000400c4d01 RDI: 0000000000000005 [ 919.496267][T21721] RBP: 00007fb855c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 919.496278][T21721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 919.496289][T21721] R13: 00007fb855e16128 R14: 00007fb855e16090 R15: 00007ffc13cf6528 [ 919.496313][T21721] [ 920.348617][T21739] snd_virmidi snd_virmidi.0: control 61678:131081:3:y:0 is already present [ 920.430566][T21740] binder: 21725:21740 ioctl 40086602 e20 returned -22 [ 920.534114][T21742] snd_virmidi snd_virmidi.0: control 61678:131081:3:y:0 is already present [ 920.972096][T21753] nbd: must specify a size in bytes for the device [ 921.056971][T21755] snd_virmidi snd_virmidi.0: control 61678:131081:3:y:0 is already present [ 923.762959][T21818] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3370'. [ 924.003851][T21821] input input63: cannot allocate more than FF_MAX_EFFECTS effects [ 924.769614][T21834] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 924.923543][T21837] smpboot: CPU 1 is now offline [ 926.031992][T21858] snd_virmidi snd_virmidi.0: control 61678:131081:3:y:0 is already present [ 927.976527][ T30] audit: type=1804 audit(4294967818.237:38): pid=21889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3387" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 930.604766][T21938] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 931.833904][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.840564][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.058819][T21972] vivid-010: ================= START STATUS ================= [ 932.101811][T21972] vivid-010: ================== END STATUS ================== [ 933.125255][T21995] snd_virmidi snd_virmidi.0: control 61678:131081:3:y:0 is already present [ 933.507836][T22002] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3415'. [ 933.791953][T22002] input input64: cannot allocate more than FF_MAX_EFFECTS effects [ 933.906193][T22013] FAULT_INJECTION: forcing a failure. [ 933.906193][T22013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 934.048041][T22013] CPU: 0 UID: 0 PID: 22013 Comm: syz.0.3418 Tainted: G L syzkaller #0 PREEMPT(full) [ 934.048074][T22013] Tainted: [L]=SOFTLOCKUP [ 934.048081][T22013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 934.048092][T22013] Call Trace: [ 934.048098][T22013] [ 934.048106][T22013] dump_stack_lvl+0x100/0x190 [ 934.048139][T22013] should_fail_ex.cold+0x5/0xa [ 934.048163][T22013] _copy_from_user+0x2e/0xd0 [ 934.048190][T22013] copy_mount_options+0x76/0x190 [ 934.048219][T22013] __x64_sys_mount+0x1ab/0x310 [ 934.048243][T22013] ? __pfx___x64_sys_mount+0x10/0x10 [ 934.048273][T22013] do_syscall_64+0x106/0xf80 [ 934.048292][T22013] ? clear_bhb_loop+0x40/0x90 [ 934.048315][T22013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.048335][T22013] RIP: 0033:0x7f1d93b9c819 [ 934.048351][T22013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 934.048370][T22013] RSP: 002b:00007f1d94974028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 934.048388][T22013] RAX: ffffffffffffffda RBX: 00007f1d93e16090 RCX: 00007f1d93b9c819 [ 934.048400][T22013] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000200000000180 [ 934.048412][T22013] RBP: 00007f1d93c32c91 R08: 0000200000000280 R09: 0000000000000000 [ 934.048429][T22013] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 934.048440][T22013] R13: 00007f1d93e16128 R14: 00007f1d93e16090 R15: 00007ffc905cc728 [ 934.048463][T22013] [ 934.888690][T19394] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 934.924725][T19394] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 934.960072][T19394] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 935.003438][T19394] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 935.022735][T19394] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 935.586431][T22023] program syz.2.3420 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 935.900658][T22030] chnl_net:caif_netlink_parms(): no params data found [ 936.823846][T22030] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.843723][T22030] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.872212][T22030] bridge_slave_0: entered allmulticast mode [ 936.897465][T22030] bridge_slave_0: entered promiscuous mode [ 936.993613][T22030] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.019228][T22030] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.037015][T22030] bridge_slave_1: entered allmulticast mode [ 937.050680][T22030] bridge_slave_1: entered promiscuous mode [ 937.109020][T19394] Bluetooth: hci6: command tx timeout [ 937.183854][T22030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 937.275300][T22030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 937.420963][T22030] team0: Port device team_slave_0 added [ 937.460341][T22030] team0: Port device team_slave_1 added [ 937.610094][T22030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 937.638804][T22030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.752622][T22030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 937.811893][T22069] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 937.831156][T22030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 937.866461][T22030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.866498][T22030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 938.350785][T22030] hsr_slave_0: entered promiscuous mode [ 938.395874][T22030] hsr_slave_1: entered promiscuous mode [ 938.450593][T22030] debugfs: 'hsr0' already exists in 'hsr' [ 938.468645][T22030] Cannot create hsr debugfs directory [ 939.192600][T19394] Bluetooth: hci6: command tx timeout [ 939.632706][T22030] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 939.648965][T22101] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3434'. [ 939.658776][T22030] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 939.704016][T22030] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 939.760515][T22101] veth1_macvtap: left promiscuous mode [ 939.814247][T22030] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 940.038373][T22030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 940.153171][T22105] smpboot: CPU 1 is now offline [ 940.331428][T22030] 8021q: adding VLAN 0 to HW filter on device team0 [ 940.504911][T19398] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.512449][T19398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 940.667422][T19398] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.674762][T19398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 941.273255][T19394] Bluetooth: hci6: command tx timeout [ 941.737904][T22030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 942.725812][T22030] veth0_vlan: entered promiscuous mode [ 942.795426][T22030] veth1_vlan: entered promiscuous mode [ 943.056270][T22150] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 943.085181][T22030] veth0_macvtap: entered promiscuous mode [ 943.153014][T22155] smpboot: CPU 1 is now offline [ 943.223942][T22030] veth1_macvtap: entered promiscuous mode [ 943.349680][T19394] Bluetooth: hci6: command tx timeout [ 943.495882][T22030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 943.555231][T22161] NFSD: Failed to start, no listeners configured. [ 943.641468][T22030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 943.795701][T19374] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.838778][T19374] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.944138][T19374] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.972270][T19374] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.656980][T19398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 944.723748][T19398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 944.858648][T19374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 944.918114][T19374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 945.027109][T22180] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.16.0), cmd(12) [ 947.079053][T22214] FAULT_INJECTION: forcing a failure. [ 947.079053][T22214] name failslab, interval 1, probability 0, space 0, times 0 [ 947.144679][T22214] CPU: 0 UID: 0 PID: 22214 Comm: syz.0.3457 Tainted: G L syzkaller #0 PREEMPT(full) [ 947.144712][T22214] Tainted: [L]=SOFTLOCKUP [ 947.144719][T22214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 947.144731][T22214] Call Trace: [ 947.144738][T22214] [ 947.144746][T22214] dump_stack_lvl+0x100/0x190 [ 947.144785][T22214] should_fail_ex.cold+0x5/0xa [ 947.144809][T22214] should_failslab+0xc2/0x120 [ 947.144831][T22214] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 947.144863][T22214] ? zswap_store+0xc42/0x29d0 [ 947.144893][T22214] zswap_store+0xc42/0x29d0 [ 947.144921][T22214] ? __pfx___up_read+0x10/0x10 [ 947.144949][T22214] ? rmap_walk_anon+0x561/0x870 [ 947.144977][T22214] ? __pfx_zswap_store+0x10/0x10 [ 947.145001][T22214] ? do_raw_spin_lock+0x128/0x260 [ 947.145029][T22214] ? find_held_lock+0x2b/0x80 [ 947.145047][T22214] ? folio_free_swap+0x3d9/0xb50 [ 947.145067][T22214] ? folio_free_swap+0x3d9/0xb50 [ 947.145089][T22214] ? do_raw_spin_unlock+0x145/0x1e0 [ 947.145121][T22214] ? _raw_spin_unlock+0x28/0x50 [ 947.145150][T22214] ? folio_free_swap+0x39/0xb50 [ 947.145170][T22214] ? __pfx_try_to_unmap+0x10/0x10 [ 947.145200][T22214] swap_writeout+0x49d/0x12b0 [ 947.145232][T22214] shrink_folio_list+0x5c4a/0x6000 [ 947.145270][T22214] ? __pfx_shrink_folio_list+0x10/0x10 [ 947.145297][T22214] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 947.145320][T22214] ? is_bpf_text_address+0x94/0x1a0 [ 947.145352][T22214] ? stack_trace_save+0x8e/0xc0 [ 947.145370][T22214] ? __kernel_text_address+0xd/0x30 [ 947.145406][T22214] ? __pfx_css_rstat_updated+0x10/0x10 [ 947.145431][T22214] ? rcu_is_watching+0x12/0xc0 [ 947.145487][T22214] reclaim_folio_list+0xdc/0x600 [ 947.145526][T22214] ? __pfx_reclaim_folio_list+0x10/0x10 [ 947.145562][T22214] ? lru_gen_update_size+0x431/0xe40 [ 947.145594][T22214] ? lru_gen_del_folio+0x382/0x5f0 [ 947.145622][T22214] reclaim_pages+0x428/0x5e0 [ 947.145653][T22214] ? __pfx_reclaim_pages+0x10/0x10 [ 947.145680][T22214] ? find_held_lock+0x2b/0x80 [ 947.145700][T22214] ? madvise_cold_or_pageout_pte_range+0xb49/0x2720 [ 947.145730][T22214] madvise_cold_or_pageout_pte_range+0x1635/0x2720 [ 947.145765][T22214] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 947.145797][T22214] ? css_rstat_updated+0x1ce/0x5a0 [ 947.145819][T22214] ? walk_pgd_range+0x1084/0x1dd0 [ 947.145850][T22214] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 947.145877][T22214] walk_pgd_range+0xc1a/0x1dd0 [ 947.145923][T22214] ? __pfx_walk_pgd_range+0x10/0x10 [ 947.145956][T22214] ? folios_put_refs+0x66d/0x840 [ 947.145989][T22214] __walk_page_range+0x163/0x820 [ 947.146019][T22214] walk_page_range_vma_unsafe+0x209/0x8f0 [ 947.146042][T22214] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 947.146066][T22214] ? find_held_lock+0x2b/0x80 [ 947.146084][T22214] ? mlock_drain_local+0x254/0x4e0 [ 947.146113][T22214] ? mlock_drain_local+0x254/0x4e0 [ 947.146146][T22214] walk_page_range_vma+0x63/0x90 [ 947.146167][T22214] madvise_pageout+0x259/0x540 [ 947.146191][T22214] ? __pfx_madvise_pageout+0x10/0x10 [ 947.146226][T22214] ? mtree_range_walk+0x6ce/0xcd0 [ 947.146256][T22214] madvise_vma_behavior+0x3e6/0x3050 [ 947.146282][T22214] ? mt_find+0x687/0x8e0 [ 947.146301][T22214] ? mt_find+0x687/0x8e0 [ 947.146320][T22214] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 947.146347][T22214] ? mt_find+0x45e/0x8e0 [ 947.146369][T22214] ? __pfx_mt_find+0x10/0x10 [ 947.146394][T22214] ? find_vma_prev+0xd8/0x150 [ 947.146415][T22214] ? futex_unqueue+0x133/0x2c0 [ 947.146444][T22214] ? find_vma+0xbf/0x140 [ 947.146464][T22214] ? __pfx_find_vma+0x10/0x10 [ 947.146482][T22214] ? __futex_wait+0x256/0x300 [ 947.146522][T22214] madvise_walk_vmas+0x2fe/0xa90 [ 947.146551][T22214] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 947.146581][T22214] madvise_do_behavior+0x1ea/0x510 [ 947.146608][T22214] ? __pfx_madvise_do_behavior+0x10/0x10 [ 947.146633][T22214] ? down_read+0x13b/0x460 [ 947.146665][T22214] do_madvise+0x195/0x240 [ 947.146689][T22214] ? __pfx_do_madvise+0x10/0x10 [ 947.146712][T22214] ? do_futex+0x192/0x350 [ 947.146762][T22214] __x64_sys_madvise+0xa9/0x110 [ 947.146786][T22214] ? lockdep_hardirqs_on+0x78/0x100 [ 947.146805][T22214] do_syscall_64+0x106/0xf80 [ 947.146823][T22214] ? clear_bhb_loop+0x40/0x90 [ 947.146847][T22214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.146868][T22214] RIP: 0033:0x7f1d93b9c819 [ 947.146885][T22214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 947.146904][T22214] RSP: 002b:00007f1d94974028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 947.146923][T22214] RAX: ffffffffffffffda RBX: 00007f1d93e16090 RCX: 00007f1d93b9c819 [ 947.146936][T22214] RDX: 0000000000000015 RSI: ffffffffffff0001 RDI: 0000000000000000 [ 947.146947][T22214] RBP: 00007f1d93c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 947.146959][T22214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 947.146970][T22214] R13: 00007f1d93e16128 R14: 00007f1d93e16090 R15: 00007ffc905cc728 [ 947.146994][T22214] [ 948.301991][T22219] mtrr: base(0x1000000) is not aligned on a size(0x0000) boundary [ 949.741463][T22241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3464'. [ 951.431872][T22272] tipc: Started in network mode [ 951.437124][T22272] tipc: Node identity ee00, cluster identity 4711 [ 951.581166][T22272] tipc: Node number set to 60928 [ 952.400839][T22276] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3471'. [ 952.549297][T22278] sd 0:0:1:0: PR command failed: 1026 [ 952.592518][T22278] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 952.677899][T22278] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 952.859465][T22293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3475'. [ 953.828354][T22312] NFSD: Failed to start, no listeners configured. [ 955.079811][T22331] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 955.097842][T22335] binder: 22319:22335 ioctl 40086602 e20 returned -22 [ 955.149028][T22331] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 955.232767][T22331] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 955.298654][T22331] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 955.355868][T22331] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 955.454898][T22331] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 955.546654][T22331] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 955.613850][T22331] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 955.706967][T22331] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 955.754623][T22331] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 955.777005][T22331] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 955.793718][T22331] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 956.086534][T22352] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3485'. [ 956.491906][T22359] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 956.656327][T22356] smpboot: CPU 1 is now offline [ 957.109174][T19394] Bluetooth: hci3: command 0x0c1a tx timeout [ 957.189311][T19394] Bluetooth: hci2: command 0x0c1a tx timeout [ 957.268927][T19394] Bluetooth: hci0: command 0x0c1a tx timeout [ 957.352699][T19394] Bluetooth: hci1: command 0x0c1a tx timeout [ 957.590171][T19394] Bluetooth: hci5: command 0x0c1a tx timeout [ 957.636226][T22382] binder: 22372:22382 ioctl 40086602 e20 returned -22 [ 957.830462][T19394] Bluetooth: hci6: command 0x0c1a tx timeout [ 957.885777][T22387] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3495'. [ 958.184681][T22396] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 958.596341][T22406] FAULT_INJECTION: forcing a failure. [ 958.596341][T22406] name failslab, interval 1, probability 0, space 0, times 0 [ 958.645052][T22406] CPU: 0 UID: 0 PID: 22406 Comm: syz.0.3501 Tainted: G L syzkaller #0 PREEMPT(full) [ 958.645085][T22406] Tainted: [L]=SOFTLOCKUP [ 958.645092][T22406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 958.645103][T22406] Call Trace: [ 958.645111][T22406] [ 958.645119][T22406] dump_stack_lvl+0x100/0x190 [ 958.645153][T22406] should_fail_ex.cold+0x5/0xa [ 958.645175][T22406] ? tomoyo_encode2+0xfb/0x3c0 [ 958.645201][T22406] should_failslab+0xc2/0x120 [ 958.645223][T22406] __kmalloc_noprof+0xe0/0x850 [ 958.645258][T22406] tomoyo_encode2+0xfb/0x3c0 [ 958.645288][T22406] tomoyo_encode+0x29/0x50 [ 958.645314][T22406] tomoyo_realpath_from_path+0x18c/0x690 [ 958.645348][T22406] tomoyo_path_number_perm+0x23c/0x580 [ 958.645372][T22406] ? tomoyo_path_number_perm+0x22e/0x580 [ 958.645397][T22406] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 958.645429][T22406] ? rcu_read_lock_any_held+0x6a/0xa0 [ 958.645478][T22406] ? hook_file_ioctl_common+0x146/0x410 [ 958.645513][T22406] security_file_ioctl+0xd3/0x230 [ 958.645538][T22406] __x64_sys_ioctl+0xb7/0x210 [ 958.645569][T22406] do_syscall_64+0x106/0xf80 [ 958.645588][T22406] ? clear_bhb_loop+0x40/0x90 [ 958.645612][T22406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.645632][T22406] RIP: 0033:0x7f1d93b9c819 [ 958.645648][T22406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 958.645667][T22406] RSP: 002b:00007f1d94995028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 958.645685][T22406] RAX: ffffffffffffffda RBX: 00007f1d93e15fa0 RCX: 00007f1d93b9c819 [ 958.645698][T22406] RDX: 0000000000000008 RSI: 000000000000541b RDI: 0000000000000001 [ 958.645709][T22406] RBP: 00007f1d94995090 R08: 0000000000000000 R09: 0000000000000000 [ 958.645720][T22406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 958.645732][T22406] R13: 00007f1d93e16038 R14: 00007f1d93e15fa0 R15: 00007ffc905cc728 [ 958.645755][T22406] [ 958.645776][T22406] ERROR: Out of memory at tomoyo_realpath_from_path. [ 959.431430][T19394] Bluetooth: hci1: command 0x0c1a tx timeout [ 959.555746][T22425] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 959.639848][T22429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3506'. [ 959.684832][T19394] Bluetooth: hci5: command 0x0c1a tx timeout [ 959.909875][T19394] Bluetooth: hci6: command 0x0c1a tx timeout [ 960.060446][T22437] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3509'. [ 960.625110][T22435] input input65: cannot allocate more than FF_MAX_EFFECTS effects [ 960.628692][ T31] INFO: task kworker/u10:3:19372 blocked for more than 143 seconds. [ 960.668659][ T31] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 960.738525][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 960.800754][ T31] task:kworker/u10:3 state:D stack:27240 pid:19372 tgid:19372 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 960.887990][ T31] Workqueue: netns cleanup_net [ 960.918859][ T31] Call Trace: [ 960.922211][ T31] [ 960.925166][ T31] __schedule+0xfee/0x6120 [ 960.951770][ T31] ? __lock_acquire+0x4a5/0x2630 [ 960.962278][T22457] NFSD: Failed to start, no listeners configured. [ 960.978741][ T31] ? __pfx___schedule+0x10/0x10 [ 960.983730][ T31] ? find_held_lock+0x2b/0x80 [ 961.019210][ T31] ? schedule+0x2bf/0x390 [ 961.034590][ T31] schedule+0xdd/0x390 [ 961.058527][ T31] schedule_timeout+0x1b2/0x280 [ 961.085470][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 961.180461][ T31] ? mark_held_locks+0x40/0x70 [ 961.185300][ T31] __wait_for_common+0x2e7/0x4c0 [ 961.257554][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 961.300781][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 961.306335][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 961.363613][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 961.379228][ T31] __flush_workqueue+0x3f7/0x1200 [ 961.384411][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 961.431607][ T31] ? net_generic+0xea/0x2a0 [ 961.436579][ T31] ? rxrpc_discard_prealloc+0x752/0x9c0 [ 961.482334][ T31] ? rxrpc_release_calls_on_socket+0x384/0x4e0 [ 961.511070][T19394] Bluetooth: hci1: command 0x0c1a tx timeout [ 961.533396][ T31] rxrpc_release+0x2a7/0x6a0 [ 961.538252][ T31] sock_release+0x91/0x1c0 [ 961.543113][ T31] afs_close_socket+0x21b/0x3e0 [ 961.581008][ T31] ? afs_wait_for_servers+0xec/0x220 [ 961.586651][ T31] ? __pfx_afs_close_socket+0x10/0x10 [ 961.618508][ T31] ? __timer_delete_sync+0x151/0x1c0 [ 961.624241][ T31] ? __timer_delete_sync+0x10f/0x1c0 [ 961.655628][ T31] ? __pfx_afs_net_exit+0x10/0x10 [ 961.668808][ T31] afs_net_exit+0x93/0x150 [ 961.673286][ T31] ops_undo_list+0x2ee/0xab0 [ 961.677888][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 961.692241][ T31] ? cleanup_net+0x332/0x920 [ 961.696873][ T31] ? idr_destroy+0x62/0x2e0 [ 961.706178][ T31] cleanup_net+0x499/0x920 [ 961.710968][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 961.715947][ T31] ? rcu_is_watching+0x12/0xc0 [ 961.721386][ T31] process_one_work+0xa23/0x19a0 [ 961.726627][ T31] ? __pfx_process_one_work+0x10/0x10 [ 961.732558][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 961.737623][ T31] worker_thread+0x5ef/0xe50 [ 961.742526][ T31] ? __pfx_worker_thread+0x10/0x10 [ 961.747857][ T31] ? kthread+0x13a/0x450 [ 961.756591][ T31] ? __pfx_worker_thread+0x10/0x10 [ 961.762023][ T31] kthread+0x370/0x450 [ 961.766111][ T31] ? __pfx_kthread+0x10/0x10 [ 961.771152][ T31] ret_from_fork+0x754/0xd80 [ 961.775838][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 961.781367][ T31] ? __switch_to+0x7b4/0x1120 [ 961.786074][ T31] ? __pfx_kthread+0x10/0x10 [ 961.791283][ T31] ret_from_fork_asm+0x1a/0x30 [ 961.796095][ T31] [ 961.910703][ T31] [ 961.910703][ T31] Showing all locks held in the system: [ 961.942543][ T31] 4 locks held by kworker/0:1/10: [ 961.947685][ T31] 1 lock held by khungtaskd/31: [ 961.989799][T19394] Bluetooth: hci6: command 0x0c1a tx timeout [ 962.008629][ T31] #0: ffffffff8e7e7760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 962.038522][ T31] 1 lock held by syz.2.2511/18006: [ 962.043779][ T31] 3 locks held by kworker/u10:2/19370: [ 962.088535][ T31] #0: ffff88813fea4148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 962.122941][ T31] #1: ffffc900054cfd08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 962.163499][ T31] #2: ffffffff906168a8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 962.208571][ T31] 3 locks held by kworker/u10:3/19372: [ 962.214164][ T31] #0: ffff88801c6b6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 962.265813][ T31] #1: ffffc90000bb7d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 962.298540][ T31] #2: ffffffff905fe050 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 962.308102][ T31] 1 lock held by syz.2.2829/19480: [ 962.339136][ T31] #0: ffff88805d657ac8 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 962.375616][ T31] 1 lock held by syz.3.2861/19612: [ 962.380993][ T31] #0: ffff88805d42d288 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 962.392077][ T31] 1 lock held by syz.3.2985/20207: [ 962.397277][ T31] #0: ffff888055350208 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 962.408273][ T31] 1 lock held by syz.4.3236/21256: [ 962.413649][ T31] #0: ffff888042af9ec8 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 962.424748][ T31] 2 locks held by syz-executor/21551: [ 962.430396][ T31] #0: ffffffff906168a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 962.443886][ T31] #1: ffffffff8e7f32b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 962.454933][ T31] 1 lock held by syz.1.3343/21723: [ 962.460873][ T31] #0: ffffffff905fe050 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 962.473045][ T31] 1 lock held by syz.5.3468/22262: [ 962.478691][ T31] #0: ffffffff905fe050 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 962.488826][ T31] 1 lock held by syz.0.3512/22452: [ 962.494205][ T31] #0: ffffffff906168a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 962.504281][ T31] 1 lock held by syz.6.3513/22451: [ 962.509636][ T31] #0: ffffffff905fe050 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 962.519463][ T31] 5 locks held by syz.6.3513/22457: [ 962.524694][ T31] #0: ffffffff906c2bd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 962.533238][ T31] #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 962.543637][ T31] #2: ffffffff8e67edf0 (cpu_hotplug_lock){++++}-{0:0}, at: kmem_cache_destroy+0x4b/0x180 [ 962.567688][ T31] #3: ffffffff8e9784e8 (slab_mutex){+.+.}-{4:4}, at: kmem_cache_destroy+0x59/0x180 [ 962.580828][ T31] #4: ffffffff8e7f3180 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 962.607385][ T31] [ 962.631822][ T31] ============================================= [ 962.631822][ T31] [ 962.673007][ T31] NMI backtrace for cpu 0 [ 962.673028][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 962.673055][ T31] Tainted: [L]=SOFTLOCKUP [ 962.673062][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 962.673073][ T31] Call Trace: [ 962.673080][ T31] [ 962.673088][ T31] dump_stack_lvl+0x100/0x190 [ 962.673128][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 962.673161][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 962.673190][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 962.673219][ T31] sys_info+0x141/0x190 [ 962.673241][ T31] watchdog+0xd25/0x1050 [ 962.673268][ T31] ? __pfx_watchdog+0x10/0x10 [ 962.673287][ T31] ? __kthread_parkme+0x18c/0x230 [ 962.673312][ T31] ? kthread+0x13a/0x450 [ 962.673337][ T31] ? __pfx_watchdog+0x10/0x10 [ 962.673354][ T31] kthread+0x370/0x450 [ 962.673379][ T31] ? __pfx_kthread+0x10/0x10 [ 962.673406][ T31] ret_from_fork+0x754/0xd80 [ 962.673437][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 962.673475][ T31] ? __switch_to+0x7b4/0x1120 [ 962.673496][ T31] ? __pfx_kthread+0x10/0x10 [ 962.673523][ T31] ret_from_fork_asm+0x1a/0x30 [ 962.673554][ T31] [ 962.836785][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 962.843679][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 962.854703][ T31] Tainted: [L]=SOFTLOCKUP [ 962.859035][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 962.869085][ T31] Call Trace: [ 962.872359][ T31] [ 962.875283][ T31] dump_stack_lvl+0x100/0x190 [ 962.880058][ T31] vpanic+0x552/0x970 [ 962.884043][ T31] ? __pfx_vpanic+0x10/0x10 [ 962.888638][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 962.894803][ T31] panic+0xd1/0xe0 [ 962.898525][ T31] ? __pfx_panic+0x10/0x10 [ 962.903030][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 962.909364][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 962.915568][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 962.921723][ T31] ? watchdog.cold+0x198/0x1ca [ 962.926503][ T31] ? watchdog+0xd35/0x1050 [ 962.930999][ T31] watchdog.cold+0x1a9/0x1ca [ 962.935600][ T31] ? __pfx_watchdog+0x10/0x10 [ 962.940276][ T31] ? __kthread_parkme+0x18c/0x230 [ 962.945522][ T31] ? kthread+0x13a/0x450 [ 962.949788][ T31] ? __pfx_watchdog+0x10/0x10 [ 962.954550][ T31] kthread+0x370/0x450 [ 962.958626][ T31] ? __pfx_kthread+0x10/0x10 [ 962.963223][ T31] ret_from_fork+0x754/0xd80 [ 962.967838][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 962.972972][ T31] ? __switch_to+0x7b4/0x1120 [ 962.977664][ T31] ? __pfx_kthread+0x10/0x10 [ 962.982448][ T31] ret_from_fork_asm+0x1a/0x30 [ 962.987310][ T31] [ 962.990388][ T31] Kernel Offset: disabled [ 962.994802][ T31] Rebooting in 86400 seconds..