last executing test programs: 10m14.61001817s ago: executing program 0 (id=141): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = socket(0x1f, 0x6, 0x75) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/netfs/volumes\x00', 0x40080, 0x0) pread64$auto(r4, 0x0, 0x8100000041, 0x413e) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0x1) shmctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000000380)={{0xef0, 0x0, 0x0, 0x6, 0x0, 0x44801faf, 0x5}, 0x200, 0x6, 0x0, 0x8, @raw=0x400, @raw=0xc26, 0x3, 0x0, &(0x7f0000000500)="23e81525d0e95d98fff2299176848a856ed14a3416dcfa443a67d34d90bd2d45839bbf3daa2b30ce17bbcf0577bd55bd000fee8a2c4db1db7b9fa8f0efce46cf11a7ca9d5009e3643351a6457069b34a3d25d7ce43f3ba06449385a8b30f887c9d966c106928add129675e1fecbc7455c5841196d4f7e7cc82cf6ec46ca7b99ff861b5d0d155c05d1ada1a8f91cef212a3fea1d7f4c77bcec1e6c082b9b681d187dab07233", &(0x7f00000005c0)="a5c6f19581fb7e763a971f2b4c637075fca8256e72b56496646bee1e5a54eff9bc6b23278b78f395cd794874e7d25894bf09dcc9c778dc35bbc782c77e868a4eed237cc544d5dc6cc32893aea6ad74360f5362159624057727c4557a6d432f4736662240c2d7196fed2e5163e9027483e484f60466110cb353a912740e3201488d683781795c139fb5f60a88beee5fd816c6c289d396e08c72"}) keyctl$auto(0x1f, 0x1, r5, 0x0, 0x3fd) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) waitid$auto_P_PIDFD(0x3, r1, &(0x7f0000000040)={@siginfo_0_0={0x2, 0x4, 0x0, @_rt={0xffffffffffffffff, 0x0, @sival_ptr=&(0x7f0000000280)="79ca6170c72c9b5affac767c0127e58e38f3f407303ed544651fc514ea2bf3a8d8ec1b5efc99d62cbb8043d4582607afd440f400a4fdcd74a0d6cc759ee437d05a5a149e70f79615cb36ed421aea340b2fe64c6f0439d9294cee642b94067691cdb8738f2363b14d75159d50f1d2041552ec66151a9f701e52dbbc1da461754f08314b0d6bbb04733b1e75896aa1d04e8e80eeef31efb7c1d6d29923d10bb06fc202e8c6970da24c428b428a45a8146761b0799727aa98dee9a474d1ec2011619ef92795e56f01adc6944105d7bf5c917ab81c899a21ee50a5ef56db545f7c67b8077183bc65"}}}, 0x20f5, &(0x7f0000000440)={{0x0, 0x80}, {0x8, 0x3}, 0xc2, 0xfffffffffffffff1, 0x80000001, 0x9, 0x1, 0xffffffffffffffff, 0x101, 0x101, 0xfff, 0x0, 0x3, 0x9, 0x8, 0xfffffffffffffffa}) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) socket(0x1d, 0x3, 0x1) ptrace$auto(0x4206, 0x1, 0x100000000, 0xe855) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r6, r6, 0x0, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syzkaller1\x00'}) 10m11.597570094s ago: executing program 0 (id=145): syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) ioctl$auto_TIOCSWINSZ2(0xffffffffffffffff, 0x5414, 0x0) (async) r2 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="2a32c1d51d801defa0cdbc554fb4bdf03a581d2c04a779db2562445e39681589246e8e3aa7c9e32e9eb6961bf5e1d03168bba99bd022709fcdb55f38b79e0e6ea05c5bc359bb2237f560d22439afb50b2a600dea1c366581197ab675a26a78af131d56eb574df9c2bd1182be4bc63b2ae5a877cbbe3b826ab7a2c82443dface993cb6420576975ce8c93f772d8c34ef5adc21941845819c6112b232130e642cdead772084f358b5a02424637b228f13df1664bee557867c2d846ca827b4ba2a5", @ANYBLOB="a0fb0df13dfaa0d28dab744a50df8e3de9940b0dbae8bbb86dddc7c253b381df23ccf73038a3e6d3f7e3305b479573c2e629b8cd4c3d7fef669f69130a707b5def672446380aab2f186aac116eaa66b6acc6d0de3c2a3cf0fdb00343333a57b57c9520448ea52411bdaf6e227dd06c28ef66fbae86e314f6385778d801d5245d5d94c228e1a58cc37d88c7af552e3f888ab84b6a161d0f3fa14a72f6c0da752f6affe78ad9db48d4a761f96bebb30faf4558d529ec", @ANYRES16=r1, @ANYRESOCT=r1], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x5db, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) waitid$auto(0x3, r3, 0x0, 0x2, &(0x7f00000001c0)={{0x2, 0x3}, {0x7, 0xc}, 0xf5, 0x75, 0x8, 0x9c7, 0x6, 0x1, 0x3, 0x4, 0x1ca, 0x9, 0x2, 0x6, 0x80000001}) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) (async) ioctl$auto_PPPIOCSPASS(r4, 0x40107447, 0x0) (async) ioctl$auto_PPPIOCGIDLE32(r4, 0x8008743f, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x480, 0x0) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/netfilter/nf_conntrack_log_invalid\x00', 0x101202, 0x0) (async) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/team0/accept_dad\x00', 0x202, 0x0) sendfile$auto(r5, r6, 0x0, 0x10000) (async) mmap$auto(0x0, 0x400000, 0x7, 0x19b72, 0x5, 0x9000) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x5, &(0x7f0000000200)=@iter_create={r7, 0x7fff}, 0x1ff) 10m10.8386945s ago: executing program 0 (id=138): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) write$auto(r0, &(0x7f00000001c0)='9\xff\x15\xba\xa17=(q\x81\xff\xff\v\xb5^\xa1/\xb3\x8b\xf0[1A]\x92\xc0\xa6\xa5\x18KO}B0h\x99*S-0\x98\x81\xf3\x85\a\x86\xfc\xaf\xf1L\xb89\xc0H<+Dy\x886f\x15\x1ebY+>\xd2\xd7\xae \xe9\x03\x17;f\"\xbdU\x7f\x17&\x02\xee{y\xe8\xaf\x98\x86\xca*\x10\xd7\x18jI \xca\xd0\x95\xce\x12\x9a\x00\xdew\x8d \vt\xa2\xa9\xa7\a45\xb5G\xdb\x9b\x9dL|\x97r\xa4\x94\x02\xd9P\xd4[G\xe2S\xaa\x17\xa4\a\xce\x06\x1f\xa7=E?\x17z\xa1\\RRX\x0e\xfa:', 0xa) 10m10.466298326s ago: executing program 0 (id=143): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = socket(0x1f, 0x6, 0x75) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/netfs/volumes\x00', 0x40080, 0x0) pread64$auto(r4, 0x0, 0x8100000041, 0x413e) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0x1) shmctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000000380)={{0xef0, 0x0, 0x0, 0x6, 0x0, 0x44801faf, 0x5}, 0x200, 0x6, 0x0, 0x8, @raw=0x400, @raw=0xc26, 0x3, 0x0, &(0x7f0000000500)="23e81525d0e95d98fff2299176848a856ed14a3416dcfa443a67d34d90bd2d45839bbf3daa2b30ce17bbcf0577bd55bd000fee8a2c4db1db7b9fa8f0efce46cf11a7ca9d5009e3643351a6457069b34a3d25d7ce43f3ba06449385a8b30f887c9d966c106928add129675e1fecbc7455c5841196d4f7e7cc82cf6ec46ca7b99ff861b5d0d155c05d1ada1a8f91cef212a3fea1d7f4c77bcec1e6c082b9b681d187dab07233", &(0x7f00000005c0)="a5c6f19581fb7e763a971f2b4c637075fca8256e72b56496646bee1e5a54eff9bc6b23278b78f395cd794874e7d25894bf09dcc9c778dc35bbc782c77e868a4eed237cc544d5dc6cc32893aea6ad74360f5362159624057727c4557a6d432f4736662240c2d7196fed2e5163e9027483e484f60466110cb353a912740e3201488d683781795c139fb5f60a88beee5fd816c6c289d396e08c72"}) keyctl$auto(0x1f, 0x1, r5, 0x0, 0x3fd) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) waitid$auto_P_PIDFD(0x3, r1, &(0x7f0000000040)={@siginfo_0_0={0x2, 0x4, 0x0, @_rt={0xffffffffffffffff, 0x0, @sival_ptr=&(0x7f0000000280)="79ca6170c72c9b5affac767c0127e58e38f3f407303ed544651fc514ea2bf3a8d8ec1b5efc99d62cbb8043d4582607afd440f400a4fdcd74a0d6cc759ee437d05a5a149e70f79615cb36ed421aea340b2fe64c6f0439d9294cee642b94067691cdb8738f2363b14d75159d50f1d2041552ec66151a9f701e52dbbc1da461754f08314b0d6bbb04733b1e75896aa1d04e8e80eeef31efb7c1d6d29923d10bb06fc202e8c6970da24c428b428a45a8146761b0799727aa98dee9a474d1ec2011619ef92795e56f01adc6944105d7bf5c917ab81c899a21ee50a5ef56db545f7c67b8077183bc65"}}}, 0x20f5, &(0x7f0000000440)={{0x0, 0x80}, {0x8, 0x3}, 0xc2, 0xfffffffffffffff1, 0x80000001, 0x9, 0x1, 0xffffffffffffffff, 0x101, 0x101, 0xfff, 0x0, 0x3, 0x9, 0x8, 0xfffffffffffffffa}) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) socket(0x1d, 0x3, 0x1) ptrace$auto(0x4206, 0x1, 0x100000000, 0xe855) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r6, r6, 0x0, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x3) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syzkaller1\x00'}) 10m6.579152088s ago: executing program 0 (id=161): close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r0 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x80442, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r0, &(0x7f0000000540)='eI\f/', 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/burst\x00', 0x1eb842, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x82002, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x303, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x0) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000280)='/dev/etherd/discover\x00', 0x541, 0x0) write$auto(0x3, 0x0, 0xfdef) 10m6.358820757s ago: executing program 0 (id=163): mmap$auto(0x10000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) madvise$auto(0x18000, 0x200007, 0x8) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000600)='/dev/snd/controlC1\x00', 0x82200, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fddbdf2502000000240004002f7379732f6b65726e656c2f64656275672f7838362f696e69745f706b7275000800030000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4004085}, 0x80881) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000006c0)={{@raw=0x9, 0x2, 0x2, 0x1, "162629e6b2259bee9878f8e7b039aa20b33e487d34917b4a9acce903cb72dd4cd8dde6d41c914d63af7a9de9"}, 0x0, @integer=@value=[0x400000000006, 0x12d800000000000, 0x179, 0xfffffffffffff8ad, 0x5, 0x7, 0x4, 0x8, 0x80000000004, 0x7, 0x15b61f2, 0x7, 0x100000001, 0x3, 0x9, 0x5, 0x7f, 0x9f, 0x8, 0x9, 0xb1, 0x0, 0x3, 0x8, 0xffffffff, 0x10001, 0x1, 0x80000000, 0x8000, 0x9, 0x0, 0x80000000, 0xf, 0xfffffffffffffffe, 0x4, 0x1, 0x3, 0x0, 0x800, 0x3638, 0x3, 0x4f3, 0xc, 0x4, 0x7, 0x0, 0xe4, 0x5, 0x6, 0x81, 0x401, 0x400000000084, 0xa, 0xfffffffbfffffffd, 0x6, 0x800, 0xfffffffffffffffd, 0x7, 0x101, 0x82, 0xc9d, 0x3fe, 0x9, 0x8, 0x640c, 0x3, 0x1000, 0x6, 0x201, 0x0, 0xec31, 0x9, 0x1fd, 0x0, 0xfff0000000000000, 0x4, 0xbd2a, 0x903, 0x80007, 0x7fffffffffffffff, 0x5, 0x1, 0xfffffffffffffffe, 0x0, 0x7eda8566, 0x800000007, 0x8000000000000001, 0x9, 0x401, 0xfffffffffffffff7, 0x9, 0x14000000000000, 0x6, 0xfffffffffffffffe, 0x0, 0x1, 0x8000000000000001, 0x5, 0x1ff, 0xf057, 0x40, 0x5, 0x7, 0x2, 0x8, 0x8, 0x1f, 0x8001, 0xc13, 0x6, 0xbf5, 0x2, 0xff, 0x7, 0xf, 0xe0, 0x3, 0x8, 0x3, 0x80000000, 0x6, 0x2, 0x1, 0xa, 0x5, 0x2, 0x100, 0xffff], "54a5f1d1dd2f17b169e8263c3a740d6611142f4b3c69d0f6e967c91125d235ac53e1b00d9fddc53d8f56969329274a57d5f4213fb46616a4faa700873d91426befc561500a5391d522c480bd37f8e7f0050cedfc627c6702978a8f018ad9a7b04711dc3a5c6a755e7a506645ea28e2baa4a6786ca43b3d5d976157eb07c3cdb8"}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/pci_bus/0000:00/rescan\x00', 0xc2801, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) r3 = openat$auto_fops_init_pkru_pkeys(0xffffffffffffff9c, &(0x7f0000000040), 0x10100, 0x0) read$auto_fops_init_pkru_pkeys(r3, &(0x7f0000000080)=""/199, 0xc7) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b80ebd01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/uts\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/uts\x00') mmap$auto(0x0, 0x10008, 0x4000000000df, 0xeb1, 0x401, 0x8000) recvmmsg$auto(r6, 0x0, 0x7ffffff9, 0x70da, 0x0) setsockopt$auto(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x14) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event2\x00', 0x20881, 0x0) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fcdbdf25300e00001800018014000200776c616e"], 0x2c}, 0x1, 0x1000000}, 0x8094) sendmsg$auto_NFSD_CMD_VERSION_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000000) write$auto(r7, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) write$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000040)="205c7820027e0dc0023af10e9bfa1babfa203753ca9a20370a", 0x19) read$auto(r2, 0x0, 0x9) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/039/001\x00', 0x10000, 0x0) write$auto(r1, 0x0, 0x400) 9m51.067671274s ago: executing program 32 (id=163): mmap$auto(0x10000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) madvise$auto(0x18000, 0x200007, 0x8) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000600)='/dev/snd/controlC1\x00', 0x82200, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fddbdf2502000000240004002f7379732f6b65726e656c2f64656275672f7838362f696e69745f706b7275000800030000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4004085}, 0x80881) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000006c0)={{@raw=0x9, 0x2, 0x2, 0x1, "162629e6b2259bee9878f8e7b039aa20b33e487d34917b4a9acce903cb72dd4cd8dde6d41c914d63af7a9de9"}, 0x0, @integer=@value=[0x400000000006, 0x12d800000000000, 0x179, 0xfffffffffffff8ad, 0x5, 0x7, 0x4, 0x8, 0x80000000004, 0x7, 0x15b61f2, 0x7, 0x100000001, 0x3, 0x9, 0x5, 0x7f, 0x9f, 0x8, 0x9, 0xb1, 0x0, 0x3, 0x8, 0xffffffff, 0x10001, 0x1, 0x80000000, 0x8000, 0x9, 0x0, 0x80000000, 0xf, 0xfffffffffffffffe, 0x4, 0x1, 0x3, 0x0, 0x800, 0x3638, 0x3, 0x4f3, 0xc, 0x4, 0x7, 0x0, 0xe4, 0x5, 0x6, 0x81, 0x401, 0x400000000084, 0xa, 0xfffffffbfffffffd, 0x6, 0x800, 0xfffffffffffffffd, 0x7, 0x101, 0x82, 0xc9d, 0x3fe, 0x9, 0x8, 0x640c, 0x3, 0x1000, 0x6, 0x201, 0x0, 0xec31, 0x9, 0x1fd, 0x0, 0xfff0000000000000, 0x4, 0xbd2a, 0x903, 0x80007, 0x7fffffffffffffff, 0x5, 0x1, 0xfffffffffffffffe, 0x0, 0x7eda8566, 0x800000007, 0x8000000000000001, 0x9, 0x401, 0xfffffffffffffff7, 0x9, 0x14000000000000, 0x6, 0xfffffffffffffffe, 0x0, 0x1, 0x8000000000000001, 0x5, 0x1ff, 0xf057, 0x40, 0x5, 0x7, 0x2, 0x8, 0x8, 0x1f, 0x8001, 0xc13, 0x6, 0xbf5, 0x2, 0xff, 0x7, 0xf, 0xe0, 0x3, 0x8, 0x3, 0x80000000, 0x6, 0x2, 0x1, 0xa, 0x5, 0x2, 0x100, 0xffff], "54a5f1d1dd2f17b169e8263c3a740d6611142f4b3c69d0f6e967c91125d235ac53e1b00d9fddc53d8f56969329274a57d5f4213fb46616a4faa700873d91426befc561500a5391d522c480bd37f8e7f0050cedfc627c6702978a8f018ad9a7b04711dc3a5c6a755e7a506645ea28e2baa4a6786ca43b3d5d976157eb07c3cdb8"}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/pci_bus/0000:00/rescan\x00', 0xc2801, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) r3 = openat$auto_fops_init_pkru_pkeys(0xffffffffffffff9c, &(0x7f0000000040), 0x10100, 0x0) read$auto_fops_init_pkru_pkeys(r3, &(0x7f0000000080)=""/199, 0xc7) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b80ebd01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/uts\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/uts\x00') mmap$auto(0x0, 0x10008, 0x4000000000df, 0xeb1, 0x401, 0x8000) recvmmsg$auto(r6, 0x0, 0x7ffffff9, 0x70da, 0x0) setsockopt$auto(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x14) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event2\x00', 0x20881, 0x0) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fcdbdf25300e00001800018014000200776c616e"], 0x2c}, 0x1, 0x1000000}, 0x8094) sendmsg$auto_NFSD_CMD_VERSION_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000000) write$auto(r7, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) write$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000040)="205c7820027e0dc0023af10e9bfa1babfa203753ca9a20370a", 0x19) read$auto(r2, 0x0, 0x9) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/039/001\x00', 0x10000, 0x0) write$auto(r1, 0x0, 0x400) 2m46.26214987s ago: executing program 1 (id=1734): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0x23, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x2000002d77b7c9) mmap$auto(0x100000003, 0x400007, 0xdc, 0x11, 0xffffffffffffffff, 0x0) unshare$auto(0x40000080) statmount$auto(0x0, 0x0, 0x1fe, 0x5) mmap$auto(0x0, 0x9, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto(r1, 0x0, 0x80000000006) ioctl$auto_NS_GET_MNTNS_ID(r1, 0x8008b705, &(0x7f0000000040)) r2 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x6ce001, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 2m45.25034481s ago: executing program 1 (id=1740): mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/sg0\x00', 0x200, 0x0) mmap$auto(0x0, 0xa00006, 0x4, 0x19, 0x602, 0x300000000000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000) ioctl$auto_BLKTRACESTOP2(r0, 0x1275, 0x0) 2m45.095386919s ago: executing program 1 (id=1742): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/netfs/requests\x00', 0x8000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000400)=""/234, 0xea) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/radio_si470x_common/parameters/de\x00', 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) syz_clone(0xcc5ce6dcb1f3cb90, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x1d, 0x3, 0x6) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) ioctl$auto(r2, 0x41045508, r2) r3 = open(&(0x7f0000000080)='./file0\x00', 0x10840, 0x140) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x101000, 0x0) ioctl$auto_SOUND_MIXER_INFO2(r5, 0x805c4d65, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x509081, 0x0) ioctl$auto_FS_IOC_UNRESVSP(r2, 0x40305829, 0x7) r6 = getpid() process_vm_readv$auto(r6, 0x0, 0x1, 0x0, 0x6, 0x0) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000140), r3) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r3, 0x8000) adjtimex$auto(0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) read$auto(r1, 0x0, 0x20) r7 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev$auto(r7, &(0x7f0000000200)={0x0, 0x7}, 0x3) 2m44.192876987s ago: executing program 1 (id=1747): mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) fsopen$auto(&(0x7f0000000040)='[.(%#\']#:-l/(\x00', 0x5) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x80202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) setresuid$auto(0x8, 0x8, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x57}, 0x1) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20a02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000040), 0xffffffffffffffff) write$auto_ocfs2_control_fops_stack_user(r2, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0xffffff4b) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r3, &(0x7f0000001680)="a7", 0xfffffc96) mmap$auto(0x0, 0x400008, 0x6, 0x9b73, 0xffffffffffffffff, 0x6) 2m43.234920491s ago: executing program 1 (id=1754): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.1/usb2/power/wakeup_active\x00', 0xa140, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/122, 0x7a) 2m43.035070287s ago: executing program 1 (id=1755): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x4ad83, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4040ae9e, &(0x7f0000000180)={0x2, 0x0, [{0x4, 0x200, 0x4}, {0x82, 0xb, 0x7fffffff}, {0x1, 0x7, 0xba}]}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.1/usb2/power/wakeup_active\x00', 0x442d41, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptywd\x00', 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x0, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000afd003a5394e965231da1bd312e7af6d67d09340d0a4bd7805e18ac78f35cb77d1029c69e7270148078c13a91f6dff64055ad11608f0fb"], 0x1ac}, 0x1, 0x0, 0x0, 0x22044840}, 0x4001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x4, 0x9}, 0x7}, 0x3, 0x8) mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0x0, 0x8000) io_uring_setup$auto(0x84, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x15, 0x3, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) socketpair$auto(0x1e, 0x3, 0x8, 0x0) io_uring_enter$auto(0x3, 0x5, 0xffffffff, 0x9, 0x0, 0x2) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) read$auto(0x3, 0x0, 0x7fffffff) ioctl$auto(0x3, 0x402c542b, 0x38) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, 0x0) 2m27.882982714s ago: executing program 33 (id=1755): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x4ad83, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4040ae9e, &(0x7f0000000180)={0x2, 0x0, [{0x4, 0x200, 0x4}, {0x82, 0xb, 0x7fffffff}, {0x1, 0x7, 0xba}]}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.1/usb2/power/wakeup_active\x00', 0x442d41, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptywd\x00', 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x0, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000afd003a5394e965231da1bd312e7af6d67d09340d0a4bd7805e18ac78f35cb77d1029c69e7270148078c13a91f6dff64055ad11608f0fb"], 0x1ac}, 0x1, 0x0, 0x0, 0x22044840}, 0x4001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x4, 0x9}, 0x7}, 0x3, 0x8) mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0x0, 0x8000) io_uring_setup$auto(0x84, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x15, 0x3, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) socketpair$auto(0x1e, 0x3, 0x8, 0x0) io_uring_enter$auto(0x3, 0x5, 0xffffffff, 0x9, 0x0, 0x2) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) read$auto(0x3, 0x0, 0x7fffffff) ioctl$auto(0x3, 0x402c542b, 0x38) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, 0x0) 2m23.867066896s ago: executing program 4 (id=1819): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x11, 0x3, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x80000, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/platform/i8042/serio0/input/input1/properties\x00', 0x8a041, 0x0) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x30, r2, 0x0) mmap$auto(0x400000000000, 0x9, 0x8, 0x800000000c812, 0x3, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x6041, 0x0) r3 = socket(0x5, 0xa, 0x3) mmap$auto(0x5, 0x98, 0x3, 0x8000eb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x42003, 0x0) close_range$auto(0x2, r5, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r6) ioctl$auto_KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x7, 0x0, [{0x4, 0x1000, 0x8}]}) ioctl$auto(r4, 0x1267, r4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) bpf$auto(0x7, 0x0, 0xa3) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={0x0, 0x49}, 0x4, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) r7 = prctl$auto_PR_SET_MM_END_CODE(0x5, 0x2, 0xffffffffffffffff, 0x107, 0x7) r8 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000140), r1) sendmsg$auto_NFC_CMD_GET_SE(r7, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="bf99c2de", @ANYRES16=r8, @ANYBLOB="000227bd7000fedbdf251a00000005001000030000000500100003000000"], 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x5) 2m23.277518923s ago: executing program 4 (id=1824): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x439000, 0x0) getrandom$auto(&(0x7f0000000000)='\x00', 0x3, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) statmount$auto(0x0, &(0x7f0000000400)={0x8, 0x1, 0x9, 0x3, 0xb, 0x940, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x3, 0x4, 0xb0, 0x7, 0x6, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0x1fe, 0x81) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m22.979530758s ago: executing program 4 (id=1825): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) read$auto(r0, &(0x7f0000000100)='nl80211\x00', 0xbe62) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000000000600010000000a0005000000000000000000b3fc010000000000000000000a0001000000000000000000060006000500000008000200", @ANYRES32=0x0, @ANYBLOB="080004000301"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x80, 0x0, 0x8) socket(0x2, 0x3, 0x6) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c014}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc5}, 0x1, 0x0, 0x5, 0x9}, 0x7}, 0x3, 0x0) 2m22.776532133s ago: executing program 4 (id=1827): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf250100000006000200"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) close_range$auto(0x2, 0x8, 0x0) 2m22.552251139s ago: executing program 4 (id=1828): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) msync$auto(0x5, 0x2, 0xe) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4830) r2 = socket(0x10, 0x2, 0x4) write$auto(r2, &(0x7f0000000000)='\x16\x00', 0x2fb) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) io_uring_setup$auto(0x7, &(0x7f0000000180)={0x1000, 0x38, 0x80000000, 0x5, 0xff, 0x0, r2, [0x0, 0xff], {0x9, 0x7, 0x26f8, 0x0, 0x0, 0x10, 0xe15b, 0x74, 0x2}, {0x4, 0x77ce, 0x121a, 0x1, 0x3, 0x5, 0x10, 0x80000000, 0xfffffffffffffffe}}) acct$auto(&(0x7f0000002380)='/sys/kernel/debug/dri/vkms/crtc-0/crc/data\x00') write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f) rename$auto(&(0x7f0000000480)='./file0\x00', 0x0) 2m21.958785594s ago: executing program 4 (id=1829): rmdir$auto(&(0x7f0000004840)='.\x00') r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x80400, 0x0) ioctl$auto_SNDCTL_TMR_METRONOME(r0, 0x40045407, 0x0) 2m12.379257718s ago: executing program 3 (id=1852): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) write$auto(r3, &(0x7f0000000440)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x141400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000003e80)=""/238, 0xee) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto(r5, 0x92106401, r5) mmap$auto(0x3, 0x1000000040000b, 0x80000000, 0x9b70, 0xffffffffffffffff, 0x40002008000) socket(0xf, 0x3, 0x2) preadv$auto(r1, &(0x7f0000000140)={&(0x7f00000000c0)="293579062140d23bb49d2abd081f7392047a10cccc095fd021ce22b40555aecc873a7641f5ccae4aec0ed080cf7e9e8faa9e14ec7829e6f428404b3b3bad76d9f1200238c0ec9d2224704e46b7", 0x2}, 0x2, 0x1000, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0xf92b, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x40008000) r6 = epoll_create$auto(0x5806) r7 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/radio18\x00', 0x18a041, 0x0) epoll_ctl$auto(r6, 0x1, r7, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) gettid() 2m11.745634173s ago: executing program 3 (id=1855): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="01002dbd7000f9dbdf25010000000600020001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) close_range$auto(0x2, 0x8, 0x0) 2m11.464672136s ago: executing program 3 (id=1857): mmap$auto(0x0, 0x400005, 0xdf, 0x9b70, 0x2, 0x8000) r0 = socket(0x10, 0x6, 0x0) ioctl$auto(r0, 0x8911, 0x24) 2m11.257191208s ago: executing program 3 (id=1859): mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/input/event0\x00', 0xa0482, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f682, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) r2 = socket(0xa, 0x5, 0x84) setsockopt$auto(r2, 0x7, 0x3, &(0x7f0000000200)='^-\x12\x00', 0x750) sendto$auto(r2, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000700"}, 0x1c) ioctl$auto_EVIOCGEFFECTS(r0, 0x80044584, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) getsockopt$auto_SO_RXQ_OVFL(0xffffffffffffffff, 0x34, 0x28, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x4) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004680), 0xffffffffffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r3 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0x3, 0x9) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0xc058565d, r3) sendmsg$auto_KSMBD_EVENT_LOGOUT_REQUEST(r2, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1040}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000002e40), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) 2m9.90657477s ago: executing program 3 (id=1862): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) msync$auto(0x5, 0x2, 0xe) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4830) r2 = socket(0x10, 0x2, 0x4) write$auto(r2, &(0x7f0000000000)='\x16\x00', 0x2fb) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) io_uring_setup$auto(0x7, &(0x7f0000000180)={0x1000, 0x38, 0x80000000, 0x5, 0xff, 0x0, r2, [0x0, 0xff], {0x9, 0x7, 0x26f8, 0x0, 0x0, 0x10, 0xe15b, 0x74, 0x2}, {0x4, 0x77ce, 0x121a, 0x1, 0x3, 0x5, 0x10, 0x80000000, 0xfffffffffffffffe}}) acct$auto(&(0x7f0000002380)='/sys/kernel/debug/dri/vkms/crtc-0/crc/data\x00') write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f) rename$auto(&(0x7f0000000480)='./file0\x00', 0x0) 2m8.809631779s ago: executing program 3 (id=1865): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00', 0x0}) bpf$auto_BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=@bpf_attr_5={@target_ifindex=r1, 0xffffffffffffffff, 0x872, 0x0, r0, @relative_id=0x5, 0xfffffffffffffffd}, 0xf) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) open(0x0, 0x22240, 0x154) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xb5f0, 0x7352, 0x39, 0x65f, 0x80000001, 0x7, 0x3, 0x2, 0x7, 0x7, 0x0, 0x4, 0xb4, 0x3, 0x9, 0x10003, 0x80, 0x8, 0x0, 0x7, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, [0xc, 0x200000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0x5) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x7, @local}, 0x55) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1100"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x1f, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x5, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00'}) (async) bpf$auto_BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=@bpf_attr_5={@target_ifindex=r1, 0xffffffffffffffff, 0x872, 0x0, r0, @relative_id=0x5, 0xfffffffffffffffd}, 0xf) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) open(0x0, 0x22240, 0x154) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xb5f0, 0x7352, 0x39, 0x65f, 0x80000001, 0x7, 0x3, 0x2, 0x7, 0x7, 0x0, 0x4, 0xb4, 0x3, 0x9, 0x10003, 0x80, 0x8, 0x0, 0x7, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, [0xc, 0x200000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0x5) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x7, @local}, 0x55) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1100"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) socket(0x10, 0x2, 0x0) (async) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x1f, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) 2m5.935177751s ago: executing program 34 (id=1829): rmdir$auto(&(0x7f0000004840)='.\x00') r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x80400, 0x0) ioctl$auto_SNDCTL_TMR_METRONOME(r0, 0x40045407, 0x0) 1m53.472870906s ago: executing program 35 (id=1865): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00', 0x0}) bpf$auto_BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=@bpf_attr_5={@target_ifindex=r1, 0xffffffffffffffff, 0x872, 0x0, r0, @relative_id=0x5, 0xfffffffffffffffd}, 0xf) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) open(0x0, 0x22240, 0x154) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xb5f0, 0x7352, 0x39, 0x65f, 0x80000001, 0x7, 0x3, 0x2, 0x7, 0x7, 0x0, 0x4, 0xb4, 0x3, 0x9, 0x10003, 0x80, 0x8, 0x0, 0x7, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, [0xc, 0x200000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0x5) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x7, @local}, 0x55) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1100"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x1f, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x5, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00'}) (async) bpf$auto_BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=@bpf_attr_5={@target_ifindex=r1, 0xffffffffffffffff, 0x872, 0x0, r0, @relative_id=0x5, 0xfffffffffffffffd}, 0xf) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) open(0x0, 0x22240, 0x154) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xb5f0, 0x7352, 0x39, 0x65f, 0x80000001, 0x7, 0x3, 0x2, 0x7, 0x7, 0x0, 0x4, 0xb4, 0x3, 0x9, 0x10003, 0x80, 0x8, 0x0, 0x7, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, [0xc, 0x200000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0x5) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x7, @local}, 0x55) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1100"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) socket(0x10, 0x2, 0x0) (async) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x1f, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) 11.116680503s ago: executing program 2 (id=2305): mmap$auto(0x0, 0x20009, 0x44000000000df, 0xeb1, 0x401, 0x28000) io_uring_setup$auto(0x58, 0x0) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) r1 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r1, 0x29, 0x40, 0x0, 0x110) 10.92091908s ago: executing program 2 (id=2306): mmap$auto(0x0, 0x20009, 0x10000000000df, 0x20eb2, 0x401, 0x80048001) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) close_range$auto(r0, r0, 0x0) pipe$auto(0x0) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) 9.950445391s ago: executing program 6 (id=2310): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000fc0), r0) r2 = fcntl$auto_F_GETOWN(r0, 0x9, 0x3) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000002900)=ANY=[@ANYBLOB="f8160000", @ANYRES16=r1, @ANYBLOB="1d0428bd7000ffdbdf25030000002800018018001a800d002f00eeeabdac6767fd8292000000040026800c003e00b20a0000000000006d0101805b819d2e3eff693a9678cb419da58f871687cc365554f44a8f55501516273e17b8117643195217d552d844af8e573b83a482f2c5f55d3413e0064c584df0da96a1c41a5590997f4d232226639b37f3129401a6a41feed7fd7529456dbe7e58026bfd22dc9a0d97179de85f9f21007d4153dd3b166113c8c966ab635755deefaa8d624eec6430596add4317c249b22afa592d647cb8b78027cd012146ebf0fc3beb7b061b5ebb0ade0afbc7e4409094c9d94c91e40c5a3ecd25484c3d0039003e50e8f53746711c59a2de76aaca74159d80e0cad22953225490dd3d8bd9412356b66ca56fb046926f0aab27799275c6794490cc836b65063800000004001c80e3304c74c435f9f36c3d1617fed8b63d73835472591776d0d6d5b8b3dd0e2468ea6d75dcc7a7aadd32199eef6ee91668a4dc262815659c0308281772fe200747c973e38b223571845432dfe63b3cb4d0dad7e87efca3da87b80d9f99a9c15af200000007010180200018800800fb00060000000400b6800c0040005b4e0000000000000400f280b2004e8008002600ba3f66b79edf756e24e3bed8df03be649ee61659ebaea7c93a8d1bd9b0ef7e340cf4055b0b582e8a5d12e00112ea4795ff64c1fe5fcfd9f71e4ace8d6613", @ANYRES32=0xee01, @ANYBLOB="0800a200", @ANYRES32=r0, @ANYBLOB="0400360008000900", @ANYRES32=r0, @ANYBLOB="0400e8004486c4c5f894c2d7a45d4d9c2c71911b9d8deab694b890df0804291512cc3f49c484d0603f23303472aafff7abda06a3f06556117ea12ec5d67d1a2ee00d53574dfc1ceaaa9549b46bc502c63afff562788b3a0f68205b38e3f04f5a903e41e92af6e39638d6e7fb87380795ddf6fc5914ba22c8759717c4893e94b85f1f811e7d286d5a5a957c457ed0342ce04b00000800bf00", @ANYRES32=0x0, @ANYBLOB="bffb563d466f9a86698d52475aa00bb0208ad50b5118610800dc00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="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"], 0x16f8}, 0x1, 0x0, 0x0, 0x40400c1}, 0x4014) r3 = semctl$auto_GETPID(0x0, 0x400, 0xb, 0x4) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r4, 0x4, 0x7) ptrace$auto_PTRACE_GET_SYSCALL_INFO(0x420e, r4, 0x90b8, 0x6) r5 = openat$auto_ftrace_formats_fops_trace_printk(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/printk_formats\x00', 0x400400, 0x0) shmctl$auto(0x2, 0x9, &(0x7f00000001c0)={{0x401, 0x0, 0xffffffffffffffff, 0x145, 0x7, 0x5, 0x8}, 0xfffffffb, 0x4, 0x4, 0xa4fe, @inferred, @raw=0x3, 0x5, 0x0, &(0x7f0000000100)="40f0774538b6b2db1719e78f0e1b703cb1a839859927a92bc36ac36286b41f21a0550051bfeb20cc034fc08f74efd96e14a385392ab8dd3214d0f6595f0bdb01df83b1d38ff16add06a4abceb0664a11", &(0x7f0000000180)="552507d572a3e4efa08ba6d02e27"}) r7 = gettid() r8 = getpid() rt_tgsigqueueinfo$auto(r8, r7, 0x21, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x9, 0xcce3, @_sigfault={0x0, @_trapno=0x3}}}) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000007100)=ANY=[@ANYBLOB='l$\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="08009d00", @ANYRES32=r4, @ANYBLOB="0800ca00ffffffffb101018004007b000800980029aa526898c241638f966f248f5aaca71021e4343dfad22e269f14a940957ac3de0eb65ed243d9908670a6ee69ea", @ANYRES32=r5, @ANYBLOB="b64434aab7749b80f50c240fdd6875db198d288c6ce2778ee0dc813dfab7584dacfbe7febd7e6cad76fa313be36b41c3fc9dde9ca83e0d4c1e140800c300", @ANYRES32=r6, @ANYBLOB="ce00448008005000e000000208006700", @ANYRES32=r8, @ANYBLOB="548806228579f03004eccbb0c3fc598686a48fb2250960a60db1df6e065d6cddd4bd3f606e987cf8f0f6da3df77f6017013438360747ceb4d1fafb7f3a2803d87dcd1f121e3baf8845d82ad59f6c27eb8ca9e8b6b70474b01a2b2f693dfedf9e2ee50b27774526bcfdfc0bc9e897ce7badc7b81f2f2c20dd7286cbfc19e72ca0b6eaa25b5db3066c9ea0a8b870011a01c413fbbefc8ce8edf9ad046a668eb3994572f9f756d0d5d9ddf0f151340c7567c3d4d89327ac04000c80000008003300", @ANYRES32=r0, @ANYBLOB="0800c800", @ANYRES32=r0, @ANYBLOB="551aeff5948b028664be1c2880642c72aef86275745c1370e6cf08366120e63af28e82bed4049278b2da0e5956ae4a938e0ced5bcd802fc073b4c2b8a37dc8d61b4557d8b7d88f619e8b6dee0a9271c0bec1c4ba614871d87e79da3957afcf5546ad4d62980ff8d2d2e9f8d5bdc4f47ef4d6a3efb321041da5751cd11cdc44000000"], 0x246c}, 0x1, 0x0, 0x0, 0x10}, 0x4) r9 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = socket(0x2d, 0x2, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), r10) mmap$auto(0x0, 0x2020009, 0x3, 0x11, r9, 0x8000) set_mempolicy$auto(0x2005, &(0x7f0000000080)=0x87e, 0x4) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r11 = fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) clone$auto(0x20003b46, 0x7, 0x0, 0x0, 0x2) ioctl$auto(0x3, 0xff04, 0x0) bpf$auto_BPF_MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)=@token_create={0x1, r11}, 0x6) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) 8.818086805s ago: executing program 2 (id=2315): r0 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004680), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004980)={&(0x7f00000006c0)={0x14, r0, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x400488a1}, 0xc000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) select$auto(0x8, &(0x7f0000000340)={[0x7, 0x6, 0xfffc000000000000, 0x6, 0x1, 0x5, 0x8, 0x1ff, 0x9, 0x1, 0x5, 0x81, 0x5, 0x7fff, 0x8]}, 0x0, &(0x7f00000004c0)={[0xe3c6, 0x8, 0x20000000002, 0x8, 0x7, 0x3ff, 0x3, 0xa, 0x0, 0x9, 0x6, 0x1, 0x7a, 0x8, 0x66960ada, 0xffff]}, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/shm\x00', 0x1, 0x0) socket(0x2, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x1000000000009489, 0x3, 0x15f4da0a, 0x1, 0x7, 0x7, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000540)="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", 0x6}, 0xa, 0x100000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) select$auto(0xa, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x7, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x9) 6.820041682s ago: executing program 6 (id=2318): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf25010000000600020001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c00"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) close_range$auto(0x2, 0x8, 0x0) 6.256874627s ago: executing program 6 (id=2321): setresuid$auto(0x8, 0x8, 0x0) r0 = setfsuid$auto(0xee00) setreuid$auto(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x20, r2, 0x9, 0x70bd27, 0x25dfdbfb, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r3}, @NET_SHAPER_A_HANDLE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) msgsnd$auto(0x2, &(0x7f0000000300)={0x4, 0x9}, 0x65, 0xfffffffd) fsconfig$auto(r1, 0x2, &(0x7f0000000180)='\x00', &(0x7f0000000580)="10ab6b39a25e5d9c4947936e05c1ebf9895356b0a5fc915241b26bebe1bf3648ecb6260c4d40bcaaf9620450e0f236d9cf2e9bfa15663032904f14a0bfebeb6f41d8f77bd0bca982dfe6b49e308e606721133b53711ed21bb9e1e32f4be7a7c60b1e11a84523b8f0f030b169292f0b65a26107a850d0b970a474f1e71b47e5ca3b8343ea7d7b90f3557fd5f312dc8058", 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_VENDOR(r5, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="050727d57000fbdbdf256700000005002b0140"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r1) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x4) mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x3, &(0x7f0000000440)={{0x8, 0x6}, {0x8, 0xc5e}, 0x100000011, 0x3, 0x5, 0xf9, 0xfffffffffffffffc, 0x5, 0x6274, 0x9, 0x0, 0xb, 0x35d, 0x439c, 0x9, 0x7}) unshare$auto(0x40000080) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex=r7, 0x3, 0x81, @uprobe_multi={0x3, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x96) 4.67213605s ago: executing program 6 (id=2328): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r1 = socket(0xa, 0x5, 0x84) io_uring_setup$auto(0x401, 0x0) getsockopt$auto(r1, 0x84, 0x18, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0x400000000fff, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = socket(0xa, 0x3, 0x3a) close$auto(r2) io_uring_setup$auto(0x7a527d95, 0x0) io_uring_register$auto(r2, 0x8, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = open(0x0, 0x4603, 0x56) getdents$auto(r3, 0x0, 0x400018) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/dev_snmp6/veth1_to_bond\x00', 0x2082, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x801, 0x4f46, 0x6) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000200)='/proc/uptime\x00', 0x2800, 0x0) sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="1200", @ANYBLOB], 0x1ac}}, 0x40000) ioctl$auto_TUNGETVNETHDRSZ2(0xffffffffffffffff, 0x800454d7, 0x0) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) 4.649145763s ago: executing program 2 (id=2330): unshare$auto(0x40000080) (async) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/lockd/parameters/nlm_grace_period\x00', 0x8001, 0x0) write$auto(r2, &(0x7f0000000180)='7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,X\xb9\x0e\x11\xfb\x00\x00\x00\x00&!\x8f-\xfb\xea=\xc0\\\xec\xe7D\xe5V\xf1b\xa0\x9a\xa1\x88\xb4\x96\xf5\\\xad4\t\xca\x03\xe4\x15\v]\x00'/67, 0x81) socket(0x2c, 0x1, 0x0) (async) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) mremap$auto(0x1, 0x4, 0x6f46, 0x7, 0x1001ff002) (async) mremap$auto(0x1, 0x4, 0x6f46, 0x7, 0x1001ff002) fsopen$auto(0x0, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x100) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) mmap$auto(0x7, 0xfffffffffffffffb, 0xffffffff, 0x78, r4, 0x300000000004) (async) mmap$auto(0x7, 0xfffffffffffffffb, 0xffffffff, 0x78, r4, 0x300000000004) socket(0x1d, 0x7, 0xfffffffb) (async) r5 = socket(0x1d, 0x7, 0xfffffffb) getsockopt$auto(r5, 0x65, 0x6, 0xffffffffffffffff, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r6, r6, 0x0, 0x3) (async) sendfile$auto(r6, r6, 0x0, 0x3) fadvise64$auto_POSIX_FADV_NORMAL(r1, 0x1, 0xb, 0x0) (async) fadvise64$auto_POSIX_FADV_NORMAL(r1, 0x1, 0xb, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xb, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x3624239c, 0xfffff5b2, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) (async) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xb, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x3624239c, 0xfffff5b2, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) 3.718464339s ago: executing program 2 (id=2336): r0 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000680)='/sys/module/tcp_vegas/parameters/beta\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) (async) write$auto(r0, &(0x7f0000000440)='\x00\x00s\xa6\xc2\x1d\a\r\x05`\xa6\xfef\xa3\x00\x00q,h\xa2\x99;\xd9S\xbb\x81\xaa2\xa4oJ\x15\xd0\xc8\'h\x8d\x9f&\x00\x00\x00\x00\x8eB\x9e%h\xf4\xa5\xfdt{\x82t\xc9\xf9\xf8\xe6\xee}`\xd9\xd8\n\xee\x7f\xbb\x04\x17\xca\x1f~\xaf<\xe7f[*\x02\t\x8f\'t\xbe\xd1\x94\x17\x82\x9c\xb2\xb7\xda\xb0\xc1s\xbeR\x82\x14\xe3Oi\xda3V\t\xe3\xa4d@\xe9\x823P\x9cS\xb3\xe5nz\x99?\xb8\xcb\xcd\x88)\xf9:\x16UB\x15\x1a9\xe05%{X\x1a\\-\xad\xce\x91;\f\xc6\xf43\xcd\x92N\xf9\x97\xcf\x8d\xd1l\xfb\x9d\xa8 \xf3\x99+\x0f\x9eX\xc4\x8a\xf3\x86\x8b \xe6j\xa1\x0e\xf7\xf7\x12\r\xcc\xf2m\xf5\x84\x9b\xf5\rp\x8c\xc9X\xd6u0\xd2\x97f|\b\x17\'F\x1b\xb9\xe9f\xfbo\x9d\xb2\xc0\x8b|j\x00;\xb6\xee\xeb<#`\xa34\"cD\xcd\xea\a\b\xb2o\x93\xbd\xdc\xd4\xe7\xfaca\xf3\x9eW\xf2\xc9\x8e\xeb^^T\x8d\xf3\tk\x03\xacs\xd0!\xbd\xc3G\x8f\xdf\x93\x1a\f\x98\f\xab(\xf8m\xa2\x1e\x81\xfd\x82\x9a\x92\x97\x1f\xb8^\x9e\xfc\xb0\x7fx$\xc7\xb2\x9cW\xc0\xdd\x16\x16\xaf\xb2@\x81:\x99\xf8\x8b\xe9!\xd2X\xf1~\xbb\x13\xae(\xcf\xf7\x05\xc1q0\xdf\xe3\xae\xd8\x82G\xb9->\x83mH\xbdA\x89\xc4\x8f\xcd\x7f\x84\xec\xe1\x96\xd6\xbd\xc4li\x0e\x1fk\x11;$\x16\xb6\x9c\xea\xc5;\xc4:\xe3\x17;\xd1\xbc\x95\x05-n\xd9\xa4 \x8b\b\x88\xaf]\xee?b4|U\xca\xfa|n\xe7\xde+\xc3\x13\x1f\xc1\xec\xe7\x8e\xb5&\xa0\x85sT\x14ZRh{\xa6#\x9e:j\xdf\xcfKC\xfd\xa9\xf98\xe8[_\x05\xa9\x95mW\xe7]\x9d\r\a\x9bME\x00\xb7\x8e/\xa5\xa5\xcb\x8cXJ\t`PT\xb4v]`5\xbc\x8c.\xdf_\xf0\xeb\xa6\x90IH\x1eZ\a\x11\x17\x8f\xe9\xa6\x99@\x1dE?\x94/\v.\xe1T\x97\xd7\xc0\x16dTEE\xf2\x83\x8f\xeb\x9fj\xf6\xda\xb1\xfd\xdb\x92N\xad\xa43cF\x19\xf3Z\xe9\xf7\xabk\x8ar\xd5\x0e\xd3\x7f(G\x867`#\x12\x9fR82v(Q\x1dQ\x00bFO\x97N\xd2Q\xd0uq\x83\xae\x85\x9ee\xf8=.\\\xd7&\a\xaadzUP\x8f\x9dy\xbb\xe3?\xe4\xb8\xd5\x8f\xf0\x13\xb8\x93\x00'/608, 0x100400a3db) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x0, 0x0) (async) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r3, 0x110, 0x5, 0x0, 0x104) (async) ioctl$auto_TCFLSH2(r2, 0x5453, 0x0) (async) timerfd_settime$auto(r2, 0xf5, &(0x7f0000000000)={{0x200, 0xd}, {0x8, 0x4}}, &(0x7f0000000040)={{0xfffffffffffffffc, 0xf421}, {0x4, 0x100}}) (async) statmount$auto(&(0x7f0000000080)={0xddc, @raw=0x3, 0x1, 0x7, 0xc93}, &(0x7f00000000c0)={0x4, 0xffffffa3, 0x9, 0xfffffff9, 0x6, 0x9, 0x4, 0x7ff, 0x80, 0x3, 0x0, 0x0, 0x31d9, 0x1, 0xe, 0x5, 0x1, 0x80000001, 0xffffffff, 0x200, 0xead, 0x7ff, 0xff, 0x3, 0xffff, 0x401, 0x8, 0x1, 0xfff, 0x9, 0x8000, [0xb6, 0x8, 0xbfbd, 0x7f, 0x1c, 0x8000, 0x401, 0xcf4, 0x7, 0x7, 0x4, 0x10, 0x3, 0x7, 0x7, 0xf, 0xd2e, 0xdab, 0x0, 0x2, 0x3, 0x3680, 0x81, 0x100, 0x7, 0xa6, 0x3, 0x8, 0x8, 0x315, 0x1ff, 0xd2, 0x7ff, 0x7, 0x80000001, 0x7, 0x94a, 0x2, 0x3fff800, 0x7, 0x7f, 0xffffffffffff43a9, 0x1], "545f3391b2ce907078"}, 0x7, 0x4) 3.599042556s ago: executing program 2 (id=2337): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = socket(0x1f, 0x6, 0x75) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/netfs/volumes\x00', 0x40080, 0x0) pread64$auto(r4, 0x0, 0x8100000041, 0x413e) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0x1) shmctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000000380)={{0xef0, 0x0, 0x0, 0x6, 0x0, 0x44801faf, 0x5}, 0x200, 0x6, 0x0, 0x8, @raw=0x400, @raw=0xc26, 0x3, 0x0, &(0x7f0000000500)="23e81525d0e95d98fff2299176848a856ed14a3416dcfa443a67d34d90bd2d45839bbf3daa2b30ce17bbcf0577bd55bd000fee8a2c4db1db7b9fa8f0efce46cf11a7ca9d5009e3643351a6457069b34a3d25d7ce43f3ba06449385a8b30f887c9d966c106928add129675e1fecbc7455c5841196d4f7e7cc82cf6ec46ca7b99ff861b5d0d155c05d1ada1a8f91cef212a3fea1d7f4c77bcec1e6c082b9b681d1", &(0x7f00000005c0)="a5c6f19581fb7e763a971f2b4c637075fca8256e72b56496646bee1e5a54eff9bc6b23278b78f395cd794874e7d25894bf09dcc9c778dc35bbc782c77e868a4eed237cc544d5dc6cc32893aea6ad74360f5362159624057727c4557a6d432f4736662240c2d7196fed2e5163e9027483e484f60466110cb353a912740e3201488d683781795c139fb5f60a88beee5fd816c6c289d396e08c72"}) keyctl$auto(0x1f, 0x1, r5, 0x0, 0x3fd) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) waitid$auto_P_PIDFD(0x3, r1, &(0x7f0000000040)={@siginfo_0_0={0x2, 0x4, 0x0, @_rt={0xffffffffffffffff, 0x0, @sival_ptr=&(0x7f0000000280)="79ca6170c72c9b5affac767c0127e58e38f3f407303ed544651fc514ea2bf3a8d8ec1b5efc99d62cbb8043d4582607afd440f400a4fdcd74a0d6cc759ee437d05a5a149e70f79615cb36ed421aea340b2fe64c6f0439d9294cee642b94067691cdb8738f2363b14d75159d50f1d2041552ec66151a9f701e52dbbc1da461754f08314b0d6bbb04733b1e75896aa1d04e8e80eeef31efb7c1d6d29923d10bb06fc202e8c6970da24c428b428a45a8146761b0799727aa98dee9a474d1ec2011619ef92795e56f01adc6944105d7bf5c917ab81c899a21ee50a5ef56db545f7c67b8077183bc65"}}}, 0x20f5, &(0x7f0000000440)={{0x0, 0x80}, {0x8, 0x3}, 0xc2, 0xfffffffffffffff1, 0x80000001, 0x9, 0x1, 0xffffffffffffffff, 0x101, 0x101, 0xfff, 0x0, 0x3, 0x9, 0x8, 0xfffffffffffffffa}) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) socket(0x1d, 0x3, 0x1) ptrace$auto(0x4206, 0x1, 0x100000000, 0xe855) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r6, r6, 0x0, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syzkaller1\x00'}) 2.226691639s ago: executing program 7 (id=2341): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) rt_sigqueueinfo$auto(0x0, 0x4, &(0x7f0000000000)={@siginfo_0_0={0x1ff, 0x15, 0x7e73, @_timer={0x0, 0x80000001, @sival_int=0x2, 0x2}}}) r2 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000440), 0x12}, 0x5, &(0x7f0000000180), 0x5, 0xe}, 0x5}, 0x2, 0x100) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r5 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) poll$auto(&(0x7f0000000180)={r5, 0xfff7, 0x9816}, 0x7f, 0x9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$auto(r6, 0x4004af61, 0xe) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="130026bd7000fcdbdf7d7990100008000300", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 1.962564835s ago: executing program 7 (id=2343): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf25010000000600020001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) close_range$auto(0x2, 0x8, 0x0) 1.7464864s ago: executing program 7 (id=2345): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4000) 1.608783033s ago: executing program 7 (id=2347): unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) socket(0x2, 0x1, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/kvm/parameters/nx_huge_pages\x00', 0x496482, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) close_range$auto(0x0, 0xe903, 0x2) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) setsockopt$auto(0x2, 0x1, 0x50, &(0x7f0000000080)='\x00', 0x20040) read$auto(0xffffffffffffffff, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x9, 0x0}) write$auto(r1, 0x0, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000080), r2) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio17\x00', 0x486800, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x902, 0x0) mmap$auto(0x7fffffffe000, 0x81, 0xffffffffffffa3a6, 0x8011, 0x3, 0x8000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x2, 0x6, 0x0) ioctl$auto_SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000200)="538b2f525e17429845091e0af7da403c56eaa6f80b80de3866dbf18d049307def4e2becf58bc80eccb7cf4264c2051d48b9e9366e07e691f93161a7afbaedd1e5653be34b2ba4594cb045fb918676c92bf2f0e59566c5f5cac2cd65d9f26a74c18737b1e66395f4a71bbb60ed6d9ebec9220c0efff4c2be998cf1b3b0aefedb898978058171f2dc17cd27cf0ad91d248b57d07b5c926969969829452c20c152fef25ed370010764dad0b89939f95ce4434bb959e23f94fa8684353") socket$nl_generic(0x10, 0x3, 0x10) 1.357087525s ago: executing program 6 (id=2349): sendmsg$auto_MACSEC_CMD_GET_TXSC(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000009280)=ANY=[@ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250000000034250280252540806e8b4465ff8653a00d421cacd6c15435c8365542d7501f9cea4effe2624d9511f69f45aed074da3f1ea0d8cd330171375bba25776a9272f623c41610a816ae85088af8ef210f0d2451e91a18a7d2375fcb90ea268961f7918a0f22369c3b490ffc61b836fcf0769aa29baa380516f65b6a69af044f7afa89208e5ca8eaaea72cb3e7f7f9d5fef0b5c51238ea024b0f4b04c41ff8b295745867d6f54dfb8785560bd8b31b502d4c9380c48bb34158b0db4b476f"], 0x4fc0}, 0x1, 0x0, 0x0, 0x20000020}, 0x44000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r0, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0xa3d9) 1.282021265s ago: executing program 5 (id=2350): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454dd, 0x3) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x21) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x88402, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) write$auto(0x3, 0x0, 0xffd6) recvfrom$auto(0x3, 0x0, 0x0, 0xfffff4b4, 0x0, 0xfffffffffffffffd) 1.083748635s ago: executing program 6 (id=2352): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) (async) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) write$auto(r0, 0x0, 0x2) (async) write$auto(r0, 0x0, 0x2) getrlimit$auto(0x3, 0x0) fdatasync$auto(r0) (async) fdatasync$auto(r0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000240)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xc8d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\xc6\x00\x89\te\x8d\a\xfb\\n\x89C:\x84D\x10u\xb4\x9a\xb4\x14\x1dU\x9d\x8b\xa4\xb2\xd1\x13\x81\xd5\x95\xf4C\xe1\xe1]\x81\x02\xd5U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xe7+L\xe4\x87F\xc7\xb4C\xa5\x06\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\bE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae.\x95k\x00\x00\x00\x00\x00\x00\x00', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) (async) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x81, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000840)="13") r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r3, 0x0, 0x4048800) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x4, 0x0) ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{0x8, 0x6}, {0x3, 0x2, 0x8000}, {0x3, 0x1, 0x7}, {0x800, 0x7, 0x7c}, {0x7, 0x7f, 0x8000000000000000}, {0x5, 0x93b, 0x3}, {0x7a0, 0x9, 0xa58}]}) (async) ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{0x8, 0x6}, {0x3, 0x2, 0x8000}, {0x3, 0x1, 0x7}, {0x800, 0x7, 0x7c}, {0x7, 0x7f, 0x8000000000000000}, {0x5, 0x93b, 0x3}, {0x7a0, 0x9, 0xa58}]}) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) (async) madvise$auto(0x0, 0x2000000080000001, 0x3) 946.781537ms ago: executing program 5 (id=2353): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) (async) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x200084c, 0x0, 0x9, 0x0, 0x3, 0x10b}, 0x4}, 0xffffffff, 0xc5c) sysfs$auto(0x3, 0x7, 0x3) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/input/event2\x00', 0x400, 0x0) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) io_uring_register$auto_IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x9) unshare$auto(0x2) (async) unshare$auto(0x2) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) pipe2$auto(0x0, 0x80) ioctl$auto_EVIOCSKEYCODE(r1, 0x40084504, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000180), 0x7112}, 0x8) 742.402739ms ago: executing program 5 (id=2354): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf25010000000600020001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) close_range$auto(0x2, 0x8, 0x0) 434.062887ms ago: executing program 5 (id=2355): mmap$auto(0x0, 0x20009, 0x44000000000df, 0xeb1, 0x401, 0x28000) io_uring_setup$auto(0x58, &(0x7f0000000080)={0x6, 0x5, 0xfff7fffe, 0x6, 0x7fff, 0x0, 0xffffffffffffffff, [0x4, 0x4, 0x200002], {0x0, 0x125, 0x4, 0x2de, 0x500, 0x5, 0x100, 0x6, 0xab}, {0xfff7ffff, 0x2, 0x52, 0x7b, 0x8, 0xc, 0x76c5, 0x1, 0x8002000000000000}}) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, 0x0, 0x6, 0x0) r1 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r1, 0x29, 0x40, 0x0, 0x110) 346.503336ms ago: executing program 7 (id=2356): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x4000) 268.562437ms ago: executing program 5 (id=2357): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) mmap$auto(0x0, 0x2, 0x800000df, 0x9b72, 0xffffffffffffffff, 0x8000) adjtimex$auto(0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0) r1 = memfd_create$auto(&(0x7f0000000480)='\x00\"/N\xcaZFzd\xefE\xfc\x89\xe6\x93T\x8d\xe1\xb2N\x93\xdb\b\xf3+\x82\xfd\xc6\x16\x8d\xcd\x9a\f\xe0\xce2\xda\xe8\xa1et\x88\x83\xaf\x1f\x1c\xd4\x97\xe5\x1f3\x10w\xf6p#v:c\xcc\x04S\xe0y$\x1779\xd7\xd5\xa9Y\xedC\xa4\x86;pL:\x17\xc6l\x89\xff\xea\xf8\xc2p}\xeaV\xda\xe0\x8b\xbd\x1d\xd6o\x12\x9eh\"&\xaa\x92o\xa4-\xe3I>\x00\x00\x00\x00\x00\x00\x00\x00', 0x8cb) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r2, 0x400454a4, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendfile$auto(r1, 0x3, 0x0, 0x7ffff000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0x4a901, 0x0) openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8c02, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x3a1, 0x20009, 0xdc, 0xeb1, 0x401, 0x8000) mbind$auto(0xfffffffffffff000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/erspan0/queues/tx-0/xps_cpus\x00', 0x8382, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0xb267, 0x759, 0x5, 0x81, 0x1ffde, 0x7, 0xfffffffffffffffd, 0x8, 0x9, 0x80003, 0x4, 0x200000000005, 0x384, 0x9, 0x400000000000b14, 0x10006, 0x4000083, 0x7, 0x0, 0xe, 0x21ff9, 0x200, 0x0, 0x84, 0x0, 0x0, 0x3, 0x0, 0xac79, [0x0, 0x7, 0x0, 0x25c3, 0x0, 0x0, 0x2000000000, 0x5, 0x0, 0x0, 0x3, 0x3, 0x1, 0x0, 0x80000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x40000000000004ac, 0x100000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x196fc46e, 0x2, 0xffffffffffffdfff, 0x3, 0x80000001, 0x0, 0x40000000000, 0x4, 0x0, 0x101, 0x0, 0x0, 0xffffffffffdffffd]}, 0x1fa, 0x11) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x28002, 0x0) openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/format\x00', 0x40, 0x0) close_range$auto(0x2, 0x8, 0x0) 195.451413ms ago: executing program 7 (id=2358): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async, rerun: 64) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async, rerun: 64) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async, rerun: 32) getcwd$auto(0x0, 0xffffffffffffffff) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) unshare$auto(0x40000080) write$auto(0xca, &(0x7f00000000c0)='\x04>\x01\x01\x00J:\xdd\xfc\xb6\xc6\x0f\xaf\xe3\x0f\xd1V\xb1yz\\\xa6\xed\ag+\xa3p(\xe2\x1b\xdc7\x1b\xc4TM}\xce\x90\xfa9\x957\xec\xd8\xe0TC\x86\xad\xe1G\xc7\xd4\x96\x12h\x84;Y\xe2\x03i\xa1)`\n\xc3\xfeR\x06\x03\xf5/@\xf0\'\xb9\xdf\xe1\xef\v\x19B\xc0\xe2\xac\xa5^\x01D\xef\xaf#\xbc\xa5\xf9J\xdc\xc3),=1\b\x05\x9d\x82\xd4\'\xe8\xfe\xfd\x9a\x9f\x00\x00\x00\x00\x00\x00\x00\x00', 0x7f) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x9, 0x0, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'macsec0\x00'}) (async, rerun: 64) inotify_init1$auto(0x3000000000000) (async) socket(0x10, 0x2, 0x0) (async) statmount$auto(0x0, &(0x7f0000000180)={0x7d4, 0x1, 0x7, 0x2081, 0x3f, 0x7ffc, 0x1ffde, 0x8001, 0x2, 0x4, 0x9, 0x2, 0x5, 0x8, 0x3004, 0x9, 0x6, 0x10002, 0x80, 0x400, 0x80000001, 0x7, 0x40001ffc, 0x8203, 0x400, 0x2, 0x1, 0x0, 0x7, 0x5, 0x2, [0x7249, 0xa9f, 0x0, 0x1ff, 0x100000001, 0xda18, 0x2, 0x0, 0x0, 0x1, 0xffffffff, 0x1000000, 0xfffc, 0x40000000000, 0x3, 0x400000000000, 0x80000000000000, 0x0, 0xffffffffff7ffffc, 0x5, 0x8, 0x100000000, 0xfff, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x4, 0x0, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x401, 0xfffffffffffffffc, 0x400000000000002, 0xfffffffffffffffc, 0x3, 0xfffffffffffffff6, 0x6, 0x7, 0x4]}, 0x1fe, 0x8) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) socket(0xa, 0x3, 0x3b) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) io_uring_setup$auto(0x59, &(0x7f0000000940)={0x7fffffff, 0x0, 0x8, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x0, 0x0, 0xfffffffd], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x85, 0x8, 0x17f, 0x2}, {0x2000ff, 0x1, 0x4, 0x5, 0x3, 0x40, 0x4, 0x3, 0x100000004}}) (async, rerun: 32) io_uring_register$auto(0x2, 0x1d, 0x0, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x37, 0x2, 0x1) (async) openat$auto_bridges_fops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/vkms/encoder-0/bridges\x00', 0x200c40, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) (async) close_range$auto(0x2, 0xa, 0x39b6) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1b0026bd7000fddbdf250300f700040008000c000380080015800400098012000100898771f1c19f17790485908286dd000004000280"], 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x400c880) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x0) 0s ago: executing program 5 (id=2359): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = socket(0x1f, 0x6, 0x75) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/netfs/volumes\x00', 0x40080, 0x0) pread64$auto(r4, 0x0, 0x8100000041, 0x413e) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0x1) shmctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000000380)={{0xef0, 0x0, 0x0, 0x6, 0x0, 0x44801faf, 0x5}, 0x200, 0x6, 0x0, 0x8, @raw=0x400, @raw=0xc26, 0x3, 0x0, &(0x7f0000000500)="23e81525d0e95d98fff2299176848a856ed14a3416dcfa443a67d34d90bd2d45839bbf3daa2b30ce17bbcf0577bd55bd000fee8a2c4db1db7b9fa8f0efce46cf11a7ca9d5009e3643351a6457069b34a3d25d7ce43f3ba06449385a8b30f887c9d966c106928add129675e1fecbc7455c5841196d4f7e7cc82cf6ec46ca7b99ff861b5d0d155c05d1ada1a8f91cef212a3fea1d7f4c77bcec1e6c082b9b681d1", &(0x7f00000005c0)="a5c6f19581fb7e763a971f2b4c637075fca8256e72b56496646bee1e5a54eff9bc6b23278b78f395cd794874e7d25894bf09dcc9c778dc35bbc782c77e868a4eed237cc544d5dc6cc32893aea6ad74360f5362159624057727c4557a6d432f4736662240c2d7196fed2e5163e9027483e484f60466110cb353a912740e3201488d683781795c139fb5f60a88beee5fd816c6c289d396e08c72"}) keyctl$auto(0x1f, 0x1, r5, 0x0, 0x3fd) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) waitid$auto_P_PIDFD(0x3, r1, &(0x7f0000000040)={@siginfo_0_0={0x2, 0x4, 0x0, @_rt={0xffffffffffffffff, 0x0, @sival_ptr=&(0x7f0000000280)="79ca6170c72c9b5affac767c0127e58e38f3f407303ed544651fc514ea2bf3a8d8ec1b5efc99d62cbb8043d4582607afd440f400a4fdcd74a0d6cc759ee437d05a5a149e70f79615cb36ed421aea340b2fe64c6f0439d9294cee642b94067691cdb8738f2363b14d75159d50f1d2041552ec66151a9f701e52dbbc1da461754f08314b0d6bbb04733b1e75896aa1d04e8e80eeef31efb7c1d6d29923d10bb06fc202e8c6970da24c428b428a45a8146761b0799727aa98dee9a474d1ec2011619ef92795e56f01adc6944105d7bf5c917ab81c899a21ee50a5ef56db545f7c67b8077183bc65"}}}, 0x20f5, &(0x7f0000000440)={{0x0, 0x80}, {0x8, 0x3}, 0xc2, 0xfffffffffffffff1, 0x80000001, 0x9, 0x1, 0xffffffffffffffff, 0x101, 0x101, 0xfff, 0x0, 0x3, 0x9, 0x8, 0xfffffffffffffffa}) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) socket(0x1d, 0x3, 0x1) ptrace$auto(0x4206, 0x1, 0x100000000, 0xe855) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r6, r6, 0x0, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syzkaller1\x00'}) kernel console output (not intermixed with test programs): h: 507 > 260 [ 526.485340][ T5835] Bluetooth: hci2: Dropping invalid advertising data [ 526.493613][ T5835] Bluetooth: hci2: unknown advertising packet type: 0xe9 [ 526.493637][ T5835] Bluetooth: hci2: Dropping invalid advertising data [ 526.509485][ T5835] Bluetooth: hci2: Malformed LE Event: 0x02 [ 526.731438][T13134] FAULT_INJECTION: forcing a failure. [ 526.731438][T13134] name fail_futex, interval 1, probability 0, space 0, times 0 [ 526.789101][T13134] CPU: 0 UID: 0 PID: 13134 Comm: syz.3.1491 Tainted: G L syzkaller #0 PREEMPT(full) [ 526.789136][T13134] Tainted: [L]=SOFTLOCKUP [ 526.789141][T13134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 526.789150][T13134] Call Trace: [ 526.789156][T13134] [ 526.789162][T13134] dump_stack_lvl+0x100/0x190 [ 526.789189][T13134] should_fail_ex.cold+0x5/0xa [ 526.789206][T13134] get_futex_key+0x1d2/0x1620 [ 526.789226][T13134] ? __pfx_get_futex_key+0x10/0x10 [ 526.789241][T13134] ? lock_acquire+0x1cf/0x380 [ 526.789266][T13134] futex_wake+0xea/0x530 [ 526.789288][T13134] ? __pfx_futex_wake+0x10/0x10 [ 526.789308][T13134] ? exit_mm_release+0x19/0x30 [ 526.789330][T13134] do_futex+0x32b/0x350 [ 526.789349][T13134] ? __pfx_do_futex+0x10/0x10 [ 526.789365][T13134] ? __might_fault+0xc5/0x140 [ 526.789389][T13134] mm_release+0x24a/0x2f0 [ 526.789404][T13134] do_exit+0x704/0x2b60 [ 526.789425][T13134] ? __pfx_do_exit+0x10/0x10 [ 526.789443][T13134] ? do_raw_spin_lock+0x128/0x260 [ 526.789462][T13134] ? find_held_lock+0x2b/0x80 [ 526.789475][T13134] ? get_signal+0x7e0/0x21e0 [ 526.789492][T13134] do_group_exit+0xd5/0x2a0 [ 526.789511][T13134] get_signal+0x1ec7/0x21e0 [ 526.789530][T13134] ? vfs_write+0x911/0x1070 [ 526.789554][T13134] ? __pfx_get_signal+0x10/0x10 [ 526.789569][T13134] ? do_futex+0x192/0x350 [ 526.789589][T13134] arch_do_signal_or_restart+0x91/0x770 [ 526.789607][T13134] ? preempt_schedule_common+0x42/0xc0 [ 526.789624][T13134] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 526.789646][T13134] ? __pfx___x64_sys_futex+0x10/0x10 [ 526.789668][T13134] exit_to_user_mode_loop+0x86/0x4a0 [ 526.789690][T13134] do_syscall_64+0x668/0xf80 [ 526.789706][T13134] ? clear_bhb_loop+0x40/0x90 [ 526.789724][T13134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.789738][T13134] RIP: 0033:0x7faf3699c799 [ 526.789751][T13134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.789765][T13134] RSP: 002b:00007faf377b60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 526.789780][T13134] RAX: fffffffffffffe00 RBX: 00007faf36c16098 RCX: 00007faf3699c799 [ 526.789789][T13134] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007faf36c16098 [ 526.789798][T13134] RBP: 00007faf36c16090 R08: 0000000000000000 R09: 0000000000000000 [ 526.789807][T13134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 526.789816][T13134] R13: 00007faf36c16128 R14: 00007ffc6cbd5400 R15: 00007ffc6cbd54e8 [ 526.789834][T13134] [ 527.436391][T13143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1493'. [ 527.476899][T13143] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1493'. [ 527.544262][T13148] FAULT_INJECTION: forcing a failure. [ 527.544262][T13148] name failslab, interval 1, probability 0, space 0, times 0 [ 527.594291][T13148] CPU: 0 UID: 0 PID: 13148 Comm: syz.3.1495 Tainted: G L syzkaller #0 PREEMPT(full) [ 527.594323][T13148] Tainted: [L]=SOFTLOCKUP [ 527.594329][T13148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 527.594338][T13148] Call Trace: [ 527.594344][T13148] [ 527.594351][T13148] dump_stack_lvl+0x100/0x190 [ 527.594380][T13148] should_fail_ex.cold+0x5/0xa [ 527.594398][T13148] ? vhost_dev_set_owner+0x190/0xa30 [ 527.594416][T13148] should_failslab+0xc2/0x120 [ 527.594432][T13148] __kmalloc_noprof+0xe0/0x850 [ 527.594459][T13148] vhost_dev_set_owner+0x190/0xa30 [ 527.594484][T13148] vhost_net_ioctl+0xfa3/0x1910 [ 527.594502][T13148] ? do_vfs_ioctl+0x226/0x13e0 [ 527.594523][T13148] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 527.594543][T13148] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 527.594566][T13148] ? find_held_lock+0x2b/0x80 [ 527.594580][T13148] ? __fget_files+0x215/0x3d0 [ 527.594593][T13148] ? hook_file_ioctl_common+0x146/0x410 [ 527.594621][T13148] ? __fget_files+0x21f/0x3d0 [ 527.594637][T13148] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 527.594657][T13148] __x64_sys_ioctl+0x18e/0x210 [ 527.594680][T13148] do_syscall_64+0x106/0xf80 [ 527.594697][T13148] ? clear_bhb_loop+0x40/0x90 [ 527.594716][T13148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.594732][T13148] RIP: 0033:0x7faf3699c799 [ 527.594747][T13148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.594761][T13148] RSP: 002b:00007faf377b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 527.594776][T13148] RAX: ffffffffffffffda RBX: 00007faf36c16090 RCX: 00007faf3699c799 [ 527.594786][T13148] RDX: 0000000000000005 RSI: 000000000000af01 RDI: 0000000000000007 [ 527.594796][T13148] RBP: 00007faf36a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 527.594805][T13148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 527.594813][T13148] R13: 00007faf36c16128 R14: 00007faf36c16090 R15: 00007ffc6cbd54e8 [ 527.594833][T13148] [ 528.682502][T13172] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1500'. [ 529.636496][T13214] FAULT_INJECTION: forcing a failure. [ 529.636496][T13214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.696393][T13214] CPU: 0 UID: 0 PID: 13214 Comm: syz.1.1507 Tainted: G L syzkaller #0 PREEMPT(full) [ 529.696419][T13214] Tainted: [L]=SOFTLOCKUP [ 529.696424][T13214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 529.696434][T13214] Call Trace: [ 529.696440][T13214] [ 529.696446][T13214] dump_stack_lvl+0x100/0x190 [ 529.696472][T13214] should_fail_ex.cold+0x5/0xa [ 529.696490][T13214] _copy_to_user+0x32/0xd0 [ 529.696506][T13214] simple_read_from_buffer+0xcb/0x170 [ 529.696530][T13214] proc_fail_nth_read+0x1af/0x230 [ 529.696548][T13214] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 529.696567][T13214] ? rw_verify_area+0xce/0x6d0 [ 529.696587][T13214] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 529.696603][T13214] vfs_read+0x1e4/0xb30 [ 529.696627][T13214] ? __pfx_vfs_read+0x10/0x10 [ 529.696648][T13214] ? __fget_files+0x215/0x3d0 [ 529.696665][T13214] ? __fget_files+0x21f/0x3d0 [ 529.696683][T13214] ksys_read+0x12a/0x250 [ 529.696704][T13214] ? __pfx_ksys_read+0x10/0x10 [ 529.696730][T13214] do_syscall_64+0x106/0xf80 [ 529.696747][T13214] ? clear_bhb_loop+0x40/0x90 [ 529.696765][T13214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.696779][T13214] RIP: 0033:0x7fe137b5cfce [ 529.696792][T13214] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 529.696806][T13214] RSP: 002b:00007fe135df5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 529.696820][T13214] RAX: ffffffffffffffda RBX: 00007fe135df66c0 RCX: 00007fe137b5cfce [ 529.696830][T13214] RDX: 000000000000000f RSI: 00007fe135df60a0 RDI: 0000000000000004 [ 529.696838][T13214] RBP: 00007fe135df6090 R08: 0000000000000000 R09: 0000000000000000 [ 529.696847][T13214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.696855][T13214] R13: 00007fe137e16038 R14: 00007fe137e15fa0 R15: 00007fff6a983b88 [ 529.696875][T13214] [ 529.911976][T13194] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1505'. [ 530.546462][T13215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1508'. [ 531.562397][T13254] cgroup: fork rejected by pids controller in /syz4 [ 532.514461][T13401] binder: 13400:13401 ioctl c018620c 200000000040 returned -22 [ 532.870059][T13404] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1519'. [ 533.828835][T13432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1524'. [ 533.870405][T13432] netlink: 13 bytes leftover after parsing attributes in process `syz.4.1524'. [ 534.321300][T13440] netlink: 'syz.2.1527': attribute type 11 has an invalid length. [ 535.590541][T13461] cougar: G6 mapped to space [ 535.931292][T13466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1534'. [ 535.965648][T13466] netlink: 13 bytes leftover after parsing attributes in process `syz.4.1534'. [ 537.549888][T13517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1544'. [ 537.603273][T13517] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1544'. [ 537.892864][T13528] mkiss: ax0: crc mode is auto. [ 539.310123][T13561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1556'. [ 539.363041][T13561] netlink: 13 bytes leftover after parsing attributes in process `syz.4.1556'. [ 543.711527][T13642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1575'. [ 543.741229][T13642] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1575'. [ 544.138525][T13654] netlink: 186 bytes leftover after parsing attributes in process `syz.4.1577'. [ 544.661457][T13658] netlink: 'syz.3.1579': attribute type 1 has an invalid length. [ 544.986115][T13667] synth uevent: /devices/virtual/tty/ttyz1: unknown uevent action string [ 545.027169][T13667] tty ttyz1: uevent: failed to send synthetic uevent: -22 [ 545.670891][T13681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1587'. [ 545.728868][T13681] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1587'. [ 547.347667][T13712] FAULT_INJECTION: forcing a failure. [ 547.347667][T13712] name fail_futex, interval 1, probability 0, space 0, times 0 [ 547.490576][T13717] FAULT_INJECTION: forcing a failure. [ 547.490576][T13717] name failslab, interval 1, probability 0, space 0, times 0 [ 547.504436][T13712] CPU: 0 UID: 0 PID: 13712 Comm: syz.1.1592 Tainted: G L syzkaller #0 PREEMPT(full) [ 547.504460][T13712] Tainted: [L]=SOFTLOCKUP [ 547.504465][T13712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 547.504474][T13712] Call Trace: [ 547.504479][T13712] [ 547.504485][T13712] dump_stack_lvl+0x100/0x190 [ 547.504511][T13712] should_fail_ex.cold+0x5/0xa [ 547.504528][T13712] get_futex_key+0x1d2/0x1620 [ 547.504551][T13712] ? __pfx_get_futex_key+0x10/0x10 [ 547.504574][T13712] futex_wake+0xea/0x530 [ 547.504597][T13712] ? __pfx_futex_wake+0x10/0x10 [ 547.504619][T13712] ? putname+0xb1/0x110 [ 547.504634][T13712] ? kmem_cache_free+0x124/0x6a0 [ 547.504657][T13712] do_futex+0x32b/0x350 [ 547.504675][T13712] ? __pfx_do_futex+0x10/0x10 [ 547.504691][T13712] ? __pfx_do_sys_openat2+0x10/0x10 [ 547.504711][T13712] ? find_held_lock+0x2b/0x80 [ 547.504727][T13712] __x64_sys_futex+0x34f/0x4d0 [ 547.504746][T13712] ? __x64_sys_openat+0x12d/0x210 [ 547.504764][T13712] ? __pfx___x64_sys_futex+0x10/0x10 [ 547.504788][T13712] do_syscall_64+0x106/0xf80 [ 547.504805][T13712] ? clear_bhb_loop+0x40/0x90 [ 547.504823][T13712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.504838][T13712] RIP: 0033:0x7fe137b9c799 [ 547.504851][T13712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.504864][T13712] RSP: 002b:00007fe135d720e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 547.504879][T13712] RAX: ffffffffffffffda RBX: 00007fe137e16368 RCX: 00007fe137b9c799 [ 547.504888][T13712] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe137e1636c [ 547.504897][T13712] RBP: 00007fe137e16360 R08: 0000000000000000 R09: 0000000000000000 [ 547.504906][T13712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.504914][T13712] R13: 00007fe137e163f8 R14: 00007fff6a983aa0 R15: 00007fff6a983b88 [ 547.504933][T13712] [ 547.913574][T13717] CPU: 0 UID: 0 PID: 13717 Comm: syz.4.1601 Tainted: G L syzkaller #0 PREEMPT(full) [ 547.913599][T13717] Tainted: [L]=SOFTLOCKUP [ 547.913605][T13717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 547.913614][T13717] Call Trace: [ 547.913619][T13717] [ 547.913626][T13717] dump_stack_lvl+0x100/0x190 [ 547.913652][T13717] should_fail_ex.cold+0x5/0xa [ 547.913669][T13717] should_failslab+0xc2/0x120 [ 547.913685][T13717] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 547.913705][T13717] ? alloc_empty_file+0x55/0x1c0 [ 547.913727][T13717] alloc_empty_file+0x55/0x1c0 [ 547.913744][T13717] alloc_file_pseudo+0x13a/0x230 [ 547.913763][T13717] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 547.913781][T13717] ? alloc_fd+0x476/0x790 [ 547.913798][T13717] sock_alloc_file+0x50/0x210 [ 547.913818][T13717] __sys_socket+0x1c0/0x260 [ 547.913830][T13717] ? exc_page_fault+0x6f/0xd0 [ 547.913847][T13717] ? __pfx___sys_socket+0x10/0x10 [ 547.913871][T13717] ? do_user_addr_fault+0x8d6/0x12f0 [ 547.913896][T13717] __x64_sys_socket+0x72/0xb0 [ 547.913908][T13717] ? lockdep_hardirqs_on+0x78/0x100 [ 547.913924][T13717] do_syscall_64+0x106/0xf80 [ 547.913941][T13717] ? clear_bhb_loop+0x40/0x90 [ 547.913958][T13717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.913972][T13717] RIP: 0033:0x7f4cacb9e007 [ 547.913985][T13717] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.913999][T13717] RSP: 002b:00007f4cadad6f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 547.914024][T13717] RAX: ffffffffffffffda RBX: 00007f4cace16090 RCX: 00007f4cacb9e007 [ 547.914033][T13717] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 547.914042][T13717] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 547.914051][T13717] R10: 0000200000000040 R11: 0000000000000286 R12: 0000000000000000 [ 547.914060][T13717] R13: 00007f4cace16128 R14: 00007f4cace16090 R15: 00007ffc6f7b4ea8 [ 547.914078][T13717] [ 548.644310][T13729] futex_wake_op: syz.4.1595 tries to shift op by -2048; fix this program [ 548.676828][T13729] futex_wake_op: syz.4.1595 tries to shift op by -2048; fix this program [ 548.732755][T13729] 0x000000000001-0x000000020000 : "" [ 548.771667][T13729] ftl_cs: FTL header corrupt! [ 549.293123][T13742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1598'. [ 549.380235][T13742] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1598'. [ 549.859770][T13755] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1603'. [ 551.358700][T13783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1610'. [ 551.402556][T13783] netlink: 13 bytes leftover after parsing attributes in process `syz.4.1610'. [ 552.126957][T13810] misc userio: Invalid payload size [ 552.742628][T13828] Line length is too long: Should be less than 4094 [ 553.861725][T13847] vivid-007: ================= START STATUS ================= [ 554.008581][T13847] vivid-007: Generate PTS: true [ 554.051633][T13847] vivid-007: Generate SCR: true [ 554.073746][T13847] tpg source WxH: 320x240 (Y'CbCr) [ 554.099421][T13847] tpg field: 1 [ 554.119888][T13847] tpg crop: (0,0)/320x240 [ 554.142522][T13847] tpg compose: (0,0)/320x240 [ 554.164628][T13847] tpg colorspace: 8 [ 554.184684][T13847] tpg transfer function: 0/0 [ 554.202186][T13847] tpg Y'CbCr encoding: 0/0 [ 554.224056][T13847] tpg quantization: 0/0 [ 554.237078][T13847] tpg RGB range: 0/2 [ 554.252065][T13847] vivid-007: ================== END STATUS ================== [ 556.085552][T13931] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 556.311104][T13947] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1641'. [ 556.615209][T13954] FAULT_INJECTION: forcing a failure. [ 556.615209][T13954] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 556.675161][T13954] CPU: 0 UID: 0 PID: 13954 Comm: syz.1.1644 Tainted: G L syzkaller #0 PREEMPT(full) [ 556.675190][T13954] Tainted: [L]=SOFTLOCKUP [ 556.675195][T13954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 556.675206][T13954] Call Trace: [ 556.675212][T13954] [ 556.675219][T13954] dump_stack_lvl+0x100/0x190 [ 556.675246][T13954] should_fail_ex.cold+0x5/0xa [ 556.675261][T13954] ? prepare_alloc_pages+0x16d/0x5f0 [ 556.675280][T13954] should_fail_alloc_page+0xeb/0x140 [ 556.675297][T13954] prepare_alloc_pages+0x1f0/0x5f0 [ 556.675317][T13954] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 556.675342][T13954] ? __schedule+0x1000/0x6120 [ 556.675363][T13954] ? __lock_acquire+0x4a5/0x2630 [ 556.675381][T13954] ? css_rstat_updated+0x1ce/0x5a0 [ 556.675400][T13954] ? __pfx_css_rstat_updated+0x10/0x10 [ 556.675417][T13954] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 556.675445][T13954] ? rcu_is_watching+0x12/0xc0 [ 556.675470][T13954] ? __lock_acquire+0x4a5/0x2630 [ 556.675490][T13954] ? __lock_acquire+0x4a5/0x2630 [ 556.675507][T13954] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 556.675531][T13954] ? policy_nodemask+0xed/0x4f0 [ 556.675549][T13954] alloc_pages_mpol+0x1fb/0x550 [ 556.675566][T13954] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 556.675582][T13954] ? find_held_lock+0x2b/0x80 [ 556.675596][T13954] ? filemap_get_entry+0x1a7/0x3b0 [ 556.675618][T13954] ? filemap_get_entry+0x1a7/0x3b0 [ 556.675642][T13954] folio_alloc_noprof+0x22/0x330 [ 556.675661][T13954] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 556.675679][T13954] ? __pfx_filemap_get_entry+0x10/0x10 [ 556.675700][T13954] ? filemap_add_folio+0x114/0x690 [ 556.675722][T13954] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 556.675743][T13954] ? rcu_is_watching+0x12/0xc0 [ 556.675766][T13954] __filemap_get_folio_mpol+0x6a4/0xe70 [ 556.675794][T13954] ioctx_alloc+0x7e4/0x21d0 [ 556.675819][T13954] ? __pfx_ioctx_alloc+0x10/0x10 [ 556.675840][T13954] __x64_sys_io_setup+0xc9/0x220 [ 556.675859][T13954] do_syscall_64+0x106/0xf80 [ 556.675876][T13954] ? clear_bhb_loop+0x40/0x90 [ 556.675895][T13954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.675910][T13954] RIP: 0033:0x7fe137b9c799 [ 556.675924][T13954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.675939][T13954] RSP: 002b:00007fe135df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 556.675954][T13954] RAX: ffffffffffffffda RBX: 00007fe137e15fa0 RCX: 00007fe137b9c799 [ 556.675964][T13954] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 556.675974][T13954] RBP: 00007fe137c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 556.675983][T13954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.675992][T13954] R13: 00007fe137e16038 R14: 00007fe137e15fa0 R15: 00007fff6a983b88 [ 556.676012][T13954] [ 558.813609][T13994] futex_wake_op: syz.1.1653 tries to shift op by -2048; fix this program [ 558.856274][T13994] futex_wake_op: syz.1.1653 tries to shift op by -2048; fix this program [ 558.943177][T13994] 0x000000000001-0x000000020000 : "" [ 559.008997][T13994] ftl_cs: FTL header corrupt! [ 559.631855][T14020] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1659'. [ 560.219435][T14030] netlink: 'syz.4.1661': attribute type 12 has an invalid length. [ 560.260941][T14029] netlink: 'syz.4.1661': attribute type 12 has an invalid length. [ 561.332558][T14058] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1667'. [ 561.381478][T14058] netlink: 146 bytes leftover after parsing attributes in process `syz.4.1667'. [ 561.627369][T14070] Invalid ELF header magic: != ELF [ 561.708705][T14070] Invalid ELF header magic: != ELF [ 563.152221][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.164716][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.443577][T14111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1679'. [ 563.475283][T14111] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1679'. [ 564.144167][T14131] random: crng reseeded on system resumption [ 565.305921][T14162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1689'. [ 565.346056][T14162] netlink: 13 bytes leftover after parsing attributes in process `syz.4.1689'. [ 566.960056][T14213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1699'. [ 567.021438][T14213] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1699'. [ 567.204963][T14218] FAULT_INJECTION: forcing a failure. [ 567.204963][T14218] name fail_futex, interval 1, probability 0, space 0, times 0 [ 567.258444][T14218] CPU: 0 UID: 0 PID: 14218 Comm: syz.3.1701 Tainted: G L syzkaller #0 PREEMPT(full) [ 567.258470][T14218] Tainted: [L]=SOFTLOCKUP [ 567.258475][T14218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 567.258485][T14218] Call Trace: [ 567.258491][T14218] [ 567.258497][T14218] dump_stack_lvl+0x100/0x190 [ 567.258523][T14218] should_fail_ex.cold+0x5/0xa [ 567.258540][T14218] get_futex_key+0x1d2/0x1620 [ 567.258560][T14218] ? __pfx_get_futex_key+0x10/0x10 [ 567.258575][T14218] ? lock_acquire+0x1cf/0x380 [ 567.258599][T14218] futex_wake+0xea/0x530 [ 567.258621][T14218] ? __pfx_futex_wake+0x10/0x10 [ 567.258641][T14218] ? exit_mm_release+0x19/0x30 [ 567.258664][T14218] do_futex+0x32b/0x350 [ 567.258682][T14218] ? __pfx_do_futex+0x10/0x10 [ 567.258698][T14218] ? __might_fault+0xc5/0x140 [ 567.258723][T14218] mm_release+0x24a/0x2f0 [ 567.258737][T14218] do_exit+0x704/0x2b60 [ 567.258758][T14218] ? __pfx_do_exit+0x10/0x10 [ 567.258776][T14218] ? do_raw_spin_lock+0x128/0x260 [ 567.258796][T14218] ? find_held_lock+0x2b/0x80 [ 567.258808][T14218] ? get_signal+0x7e0/0x21e0 [ 567.258825][T14218] do_group_exit+0xd5/0x2a0 [ 567.258845][T14218] get_signal+0x1ec7/0x21e0 [ 567.258864][T14218] ? rcu_is_watching+0x12/0xc0 [ 567.258887][T14218] ? __pfx_get_signal+0x10/0x10 [ 567.258902][T14218] ? do_futex+0x192/0x350 [ 567.258939][T14218] arch_do_signal_or_restart+0x91/0x770 [ 567.258957][T14218] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 567.258980][T14218] ? __pfx___x64_sys_futex+0x10/0x10 [ 567.259012][T14218] exit_to_user_mode_loop+0x86/0x4a0 [ 567.259033][T14218] do_syscall_64+0x668/0xf80 [ 567.259050][T14218] ? clear_bhb_loop+0x40/0x90 [ 567.259068][T14218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.259082][T14218] RIP: 0033:0x7faf3699c799 [ 567.259096][T14218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.259110][T14218] RSP: 002b:00007faf377d70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 567.259124][T14218] RAX: fffffffffffffe00 RBX: 00007faf36c15fa8 RCX: 00007faf3699c799 [ 567.259134][T14218] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007faf36c15fa8 [ 567.259143][T14218] RBP: 00007faf36c15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 567.259152][T14218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 567.259160][T14218] R13: 00007faf36c16038 R14: 00007ffc6cbd5400 R15: 00007ffc6cbd54e8 [ 567.259179][T14218] [ 570.381459][T14261] sg_read: process 1675 (syz.2.1710) changed security contexts after opening file descriptor, this is not allowed. [ 570.521362][T14264] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1711'. [ 571.811749][T14286] nvme_fcloop: unknown parameter or missing value '7' [ 571.877149][T14288] bridge0: port 3(gretap0) entered blocking state [ 571.913203][T14288] bridge0: port 3(gretap0) entered disabled state [ 571.944661][T14288] gretap0: entered allmulticast mode [ 571.979694][T14288] gretap0: entered promiscuous mode [ 572.007547][T14288] bridge0: port 3(gretap0) entered blocking state [ 572.014088][T14288] bridge0: port 3(gretap0) entered forwarding state [ 572.286427][T14300] writes to the poll attribute are ignored. [ 572.317615][T14300] please use driver specific parameters instead. [ 572.933879][ T29] audit: type=1806 audit(1772992342.616:13): xattr=1C res=-22 [ 574.724366][T14359] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1730'. [ 576.185602][ T5835] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 578.357901][T14417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1745'. [ 578.451519][T14426] netlink: 146 bytes leftover after parsing attributes in process `syz.2.1748'. [ 579.418589][T14447] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input16 [ 581.166090][T14481] zswap: compressor not available [ 582.381734][T14499] FAULT_INJECTION: forcing a failure. [ 582.381734][T14499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 582.506171][T14499] CPU: 0 UID: 0 PID: 14499 Comm: syz.2.1764 Tainted: G L syzkaller #0 PREEMPT(full) [ 582.506198][T14499] Tainted: [L]=SOFTLOCKUP [ 582.506203][T14499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 582.506212][T14499] Call Trace: [ 582.506218][T14499] [ 582.506224][T14499] dump_stack_lvl+0x100/0x190 [ 582.506251][T14499] should_fail_ex.cold+0x5/0xa [ 582.506269][T14499] _copy_to_iter+0x1f3/0x1720 [ 582.506394][T14499] ? __pfx__copy_to_iter+0x10/0x10 [ 582.506416][T14499] ? kernfs_seq_stop+0xcd/0x120 [ 582.506435][T14499] ? kernfs_put_active+0x93/0xe0 [ 582.506458][T14499] seq_read_iter+0xdab/0x1270 [ 582.506489][T14499] kernfs_fop_read_iter+0x46c/0x610 [ 582.506505][T14499] ? rw_verify_area+0xce/0x6d0 [ 582.506525][T14499] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 582.506560][T14499] vfs_read+0x825/0xb30 [ 582.506584][T14499] ? __pfx_vfs_read+0x10/0x10 [ 582.506618][T14499] ksys_read+0x12a/0x250 [ 582.506638][T14499] ? __pfx_ksys_read+0x10/0x10 [ 582.506665][T14499] do_syscall_64+0x106/0xf80 [ 582.506683][T14499] ? clear_bhb_loop+0x40/0x90 [ 582.506701][T14499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.506716][T14499] RIP: 0033:0x7f37e0d9c799 [ 582.506729][T14499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 582.506743][T14499] RSP: 002b:00007f37e1cca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 582.506758][T14499] RAX: ffffffffffffffda RBX: 00007f37e1015fa0 RCX: 00007f37e0d9c799 [ 582.506768][T14499] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000003 [ 582.506777][T14499] RBP: 00007f37e1cca090 R08: 0000000000000000 R09: 0000000000000000 [ 582.506785][T14499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.506793][T14499] R13: 00007f37e1016038 R14: 00007f37e1015fa0 R15: 00007ffcd16a2188 [ 582.506813][T14499] [ 584.937108][T14529] block nbd7: not configured, cannot reconfigure [ 585.141451][T14533] netlink: 246 bytes leftover after parsing attributes in process `syz.4.1771'. [ 585.477109][T14537] FAULT_INJECTION: forcing a failure. [ 585.477109][T14537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 585.546918][T14537] CPU: 0 UID: 0 PID: 14537 Comm: syz.4.1773 Tainted: G L syzkaller #0 PREEMPT(full) [ 585.546944][T14537] Tainted: [L]=SOFTLOCKUP [ 585.546949][T14537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 585.546958][T14537] Call Trace: [ 585.546964][T14537] [ 585.546971][T14537] dump_stack_lvl+0x100/0x190 [ 585.546996][T14537] should_fail_ex.cold+0x5/0xa [ 585.547014][T14537] _copy_to_user+0x32/0xd0 [ 585.547031][T14537] simple_read_from_buffer+0xcb/0x170 [ 585.547054][T14537] proc_fail_nth_read+0x1af/0x230 [ 585.547073][T14537] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 585.547091][T14537] ? rw_verify_area+0xce/0x6d0 [ 585.547119][T14537] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 585.547136][T14537] vfs_read+0x1e4/0xb30 [ 585.547160][T14537] ? __pfx_vfs_read+0x10/0x10 [ 585.547181][T14537] ? __fget_files+0x215/0x3d0 [ 585.547199][T14537] ? __fget_files+0x21f/0x3d0 [ 585.547217][T14537] ksys_read+0x12a/0x250 [ 585.547238][T14537] ? __pfx_ksys_read+0x10/0x10 [ 585.547265][T14537] do_syscall_64+0x106/0xf80 [ 585.547282][T14537] ? clear_bhb_loop+0x40/0x90 [ 585.547300][T14537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.547315][T14537] RIP: 0033:0x7f4cacb5cfce [ 585.547328][T14537] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 585.547343][T14537] RSP: 002b:00007f4cadaf8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 585.547358][T14537] RAX: ffffffffffffffda RBX: 00007f4cadaf96c0 RCX: 00007f4cacb5cfce [ 585.547367][T14537] RDX: 000000000000000f RSI: 00007f4cadaf90a0 RDI: 0000000000000004 [ 585.547376][T14537] RBP: 00007f4cadaf9090 R08: 0000000000000000 R09: 0000000000000000 [ 585.547385][T14537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.547394][T14537] R13: 00007f4cace16038 R14: 00007f4cace15fa0 R15: 00007ffc6f7b4ea8 [ 585.547413][T14537] [ 586.658209][T14550] FAULT_INJECTION: forcing a failure. [ 586.658209][T14550] name failslab, interval 1, probability 0, space 0, times 0 [ 586.716428][T14550] CPU: 0 UID: 0 PID: 14550 Comm: syz.4.1776 Tainted: G L syzkaller #0 PREEMPT(full) [ 586.716456][T14550] Tainted: [L]=SOFTLOCKUP [ 586.716465][T14550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 586.716474][T14550] Call Trace: [ 586.716480][T14550] [ 586.716487][T14550] dump_stack_lvl+0x100/0x190 [ 586.716521][T14550] should_fail_ex.cold+0x5/0xa [ 586.716540][T14550] should_failslab+0xc2/0x120 [ 586.716556][T14550] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 586.716578][T14550] ? __d_alloc+0x34/0xa80 [ 586.716594][T14550] ? make_vfsgid+0xf1/0x140 [ 586.716618][T14550] __d_alloc+0x34/0xa80 [ 586.716633][T14550] ? bpf_lsm_inode_permission+0x9/0x10 [ 586.716657][T14550] d_alloc+0x4a/0x1e0 [ 586.716674][T14550] vfs_tmpfile+0x148/0x9a0 [ 586.716694][T14550] path_openat+0x164e/0x31a0 [ 586.716709][T14550] ? kasan_save_stack+0x3f/0x50 [ 586.716730][T14550] ? kasan_save_stack+0x30/0x50 [ 586.716751][T14550] ? __kasan_slab_alloc+0x89/0x90 [ 586.716764][T14550] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 586.716785][T14550] ? do_getname+0x35/0x390 [ 586.716813][T14550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.716832][T14550] ? __pfx_path_openat+0x10/0x10 [ 586.716855][T14550] do_file_open+0x20e/0x430 [ 586.716872][T14550] ? __pfx_do_file_open+0x10/0x10 [ 586.716903][T14550] ? _raw_spin_unlock+0x28/0x50 [ 586.716918][T14550] ? alloc_fd+0x476/0x790 [ 586.716954][T14550] do_sys_openat2+0x10d/0x1e0 [ 586.716976][T14550] ? __pfx_do_sys_openat2+0x10/0x10 [ 586.717003][T14550] __x64_sys_open+0xfe/0x1d0 [ 586.717023][T14550] ? __pfx___x64_sys_open+0x10/0x10 [ 586.717057][T14550] do_syscall_64+0x106/0xf80 [ 586.717075][T14550] ? clear_bhb_loop+0x40/0x90 [ 586.717095][T14550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.717111][T14550] RIP: 0033:0x7f4cacb9c799 [ 586.717125][T14550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.717140][T14550] RSP: 002b:00007f4cadaf9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 586.717155][T14550] RAX: ffffffffffffffda RBX: 00007f4cace15fa0 RCX: 00007f4cacb9c799 [ 586.717165][T14550] RDX: 0000000000000408 RSI: 0000000000595002 RDI: 0000200000000100 [ 586.717175][T14550] RBP: 00007f4cacc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 586.717185][T14550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.717195][T14550] R13: 00007f4cace16038 R14: 00007f4cace15fa0 R15: 00007ffc6f7b4ea8 [ 586.717216][T14550] [ 587.332827][T14550] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1776'. [ 587.787358][T14550] team0 (unregistering): Port device team_slave_0 removed [ 587.833466][T14550] team0 (unregistering): Port device team_slave_1 removed [ 588.149735][T14559] nvme_fcloop: unknown parameter or missing value '7' [ 591.630236][T14619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1790'. [ 591.735883][T14620] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1790'. [ 593.244322][T14641] FAULT_INJECTION: forcing a failure. [ 593.244322][T14641] name failslab, interval 1, probability 0, space 0, times 0 [ 593.308269][T14641] CPU: 0 UID: 0 PID: 14641 Comm: syz.4.1797 Tainted: G L syzkaller #0 PREEMPT(full) [ 593.308297][T14641] Tainted: [L]=SOFTLOCKUP [ 593.308303][T14641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 593.308313][T14641] Call Trace: [ 593.308319][T14641] [ 593.308326][T14641] dump_stack_lvl+0x100/0x190 [ 593.308355][T14641] should_fail_ex.cold+0x5/0xa [ 593.308374][T14641] should_failslab+0xc2/0x120 [ 593.308396][T14641] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 593.308421][T14641] ? register_pidns_sysctls+0x48/0x1c0 [ 593.308442][T14641] ? rcu_is_watching+0x12/0xc0 [ 593.308467][T14641] kmemdup_noprof+0x29/0x60 [ 593.308489][T14641] register_pidns_sysctls+0x48/0x1c0 [ 593.308509][T14641] ? __ns_common_init+0x299/0x4b0 [ 593.308528][T14641] copy_pid_ns+0x680/0x10a0 [ 593.308546][T14641] ? __pfx_copy_pid_ns+0x10/0x10 [ 593.308563][T14641] ? rcu_is_watching+0x12/0xc0 [ 593.308585][T14641] ? copy_mnt_ns+0x106/0xc30 [ 593.308602][T14641] ? create_new_namespaces+0x30/0xac0 [ 593.308621][T14641] create_new_namespaces+0x2aa/0xac0 [ 593.308641][T14641] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 593.308658][T14641] ksys_unshare+0x473/0xad0 [ 593.308678][T14641] ? __pfx_ksys_unshare+0x10/0x10 [ 593.308703][T14641] __x64_sys_unshare+0x31/0x40 [ 593.308721][T14641] do_syscall_64+0x106/0xf80 [ 593.308738][T14641] ? clear_bhb_loop+0x40/0x90 [ 593.308756][T14641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.308772][T14641] RIP: 0033:0x7f4cacb9c799 [ 593.308786][T14641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.308802][T14641] RSP: 002b:00007f4cadaf9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 593.308824][T14641] RAX: ffffffffffffffda RBX: 00007f4cace15fa0 RCX: 00007f4cacb9c799 [ 593.308834][T14641] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 593.308843][T14641] RBP: 00007f4cacc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 593.308852][T14641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 593.308861][T14641] R13: 00007f4cace16038 R14: 00007f4cace15fa0 R15: 00007ffc6f7b4ea8 [ 593.308880][T14641] [ 595.175608][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 595.186469][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 595.194307][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 595.205485][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 595.213274][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 595.870087][T14688] sd 0:0:1:0: PR command failed: 1026 [ 595.901051][T14688] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 595.955817][T14688] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 595.997332][T14690] delete_channel: no stack [ 596.074498][T14690] delete_channel: no stack [ 596.457590][T14677] chnl_net:caif_netlink_parms(): no params data found [ 596.892116][T14677] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.963360][T14677] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.015514][T14677] bridge_slave_0: entered allmulticast mode [ 597.055490][T14677] bridge_slave_0: entered promiscuous mode [ 597.093298][T14677] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.155757][T14677] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.191682][T14677] bridge_slave_1: entered allmulticast mode [ 597.235433][T14677] bridge_slave_1: entered promiscuous mode [ 597.306623][ T5827] Bluetooth: hci3: command tx timeout [ 597.369844][T14677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.451051][T14677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.577132][T14677] team0: Port device team_slave_0 added [ 597.626844][T14677] team0: Port device team_slave_1 added [ 597.780776][T14677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.813256][T14677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.914176][T14748] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input18 [ 597.934502][T14677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.977773][T14677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.011172][T14677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.106572][T14677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.357419][T14677] hsr_slave_0: entered promiscuous mode [ 598.370893][T14677] hsr_slave_1: entered promiscuous mode [ 598.386141][T14677] debugfs: 'hsr0' already exists in 'hsr' [ 598.399119][T14677] Cannot create hsr debugfs directory [ 599.221074][T14677] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 599.291622][T14677] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 599.346955][T14677] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 599.386469][ T5827] Bluetooth: hci3: command tx timeout [ 599.422729][T14677] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 599.846007][T14790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1827'. [ 599.883188][T14790] netlink: 13 bytes leftover after parsing attributes in process `syz.4.1827'. [ 600.029798][ T5827] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 600.029825][ T5827] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 600.046198][ T5827] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 600.046237][ T5827] Bluetooth: hci0: adv larger than maximum supported [ 600.053409][ T5827] Bluetooth: hci0: adv larger than maximum supported [ 600.061576][ T5827] Bluetooth: hci0: adv larger than maximum supported [ 600.068603][ T5827] Bluetooth: hci0: Malformed LE Event: 0x0d [ 600.153864][ T5827] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 600.173155][ T5827] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 600.181512][ T5827] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 600.192963][ T5827] CPU: 0 UID: 0 PID: 5827 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 600.192992][ T5827] Tainted: [L]=SOFTLOCKUP [ 600.192998][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 600.193036][ T5827] Workqueue: hci4 hci_rx_work [ 600.193056][ T5827] Call Trace: [ 600.193062][ T5827] [ 600.193069][ T5827] dump_stack_lvl+0x100/0x190 [ 600.193096][ T5827] sysfs_warn_dup.cold+0x1c/0x28 [ 600.193120][ T5827] sysfs_create_dir_ns+0x24b/0x2b0 [ 600.193141][ T5827] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 600.193160][ T5827] ? find_held_lock+0x2b/0x80 [ 600.193175][ T5827] ? kobject_add_internal+0x25f/0x930 [ 600.193197][ T5827] ? kobject_add_internal+0x25f/0x930 [ 600.193220][ T5827] ? do_raw_spin_unlock+0x145/0x1e0 [ 600.193244][ T5827] kobject_add_internal+0x2c8/0x930 [ 600.193269][ T5827] kobject_add+0x16a/0x1e0 [ 600.193290][ T5827] ? __pfx_kobject_add+0x10/0x10 [ 600.193310][ T5827] ? class_to_subsys+0x10f/0x150 [ 600.193382][ T5827] ? kobject_put+0xb9/0x640 [ 600.193401][ T5827] ? _raw_spin_unlock+0x28/0x50 [ 600.193423][ T5827] device_add+0x294/0x1950 [ 600.193462][ T5827] ? __pfx_dev_set_name+0x10/0x10 [ 600.193506][ T5827] ? __pfx_device_add+0x10/0x10 [ 600.193521][ T5827] ? mgmt_send_event_skb+0x2fb/0x460 [ 600.193543][ T5827] hci_conn_add_sysfs+0x1a3/0x260 [ 600.193563][ T5827] le_conn_complete_evt+0x11cb/0x1f40 [ 600.193585][ T5827] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 600.193599][ T5827] ? __pfx_bt_warn+0x10/0x10 [ 600.193621][ T5827] hci_le_conn_complete_evt+0x23c/0x3a0 [ 600.193637][ T5827] ? skb_pull_data+0x15f/0x1e0 [ 600.193663][ T5827] hci_le_meta_evt+0x34a/0x5f0 [ 600.193679][ T5827] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 600.193705][ T5827] hci_event_packet+0x682/0x11c0 [ 600.193722][ T5827] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 600.193740][ T5827] ? __pfx_hci_event_packet+0x10/0x10 [ 600.193758][ T5827] ? kcov_remote_start+0x374/0x660 [ 600.193774][ T5827] ? lockdep_hardirqs_on+0x78/0x100 [ 600.193797][ T5827] hci_rx_work+0x451/0xfc0 [ 600.193816][ T5827] process_one_work+0x9d7/0x1920 [ 600.193845][ T5827] ? __pfx_process_one_work+0x10/0x10 [ 600.193872][ T5827] ? __pfx_hci_rx_work+0x10/0x10 [ 600.193888][ T5827] worker_thread+0x5da/0xe40 [ 600.193916][ T5827] ? kthread+0x13a/0x450 [ 600.193933][ T5827] ? __pfx_worker_thread+0x10/0x10 [ 600.193953][ T5827] kthread+0x370/0x450 [ 600.193971][ T5827] ? __pfx_kthread+0x10/0x10 [ 600.193991][ T5827] ret_from_fork+0x754/0xd80 [ 600.194013][ T5827] ? __pfx_ret_from_fork+0x10/0x10 [ 600.194037][ T5827] ? __switch_to+0x7b4/0x1120 [ 600.194054][ T5827] ? __pfx_kthread+0x10/0x10 [ 600.194074][ T5827] ret_from_fork_asm+0x1a/0x30 [ 600.194100][ T5827] [ 600.194186][ T5827] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 600.494631][ T5827] Bluetooth: hci4: failed to register connection device [ 600.892963][T14677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.963052][T14677] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.022711][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.029899][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.056222][T14795] FAULT_INJECTION: forcing a failure. [ 601.056222][T14795] name failslab, interval 1, probability 0, space 0, times 0 [ 601.125600][T14795] CPU: 0 UID: 0 PID: 14795 Comm: syz.3.1830 Tainted: G L syzkaller #0 PREEMPT(full) [ 601.125628][T14795] Tainted: [L]=SOFTLOCKUP [ 601.125633][T14795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 601.125644][T14795] Call Trace: [ 601.125650][T14795] [ 601.125657][T14795] dump_stack_lvl+0x100/0x190 [ 601.125685][T14795] should_fail_ex.cold+0x5/0xa [ 601.125704][T14795] ? iovec_from_user+0x8d/0x140 [ 601.125719][T14795] should_failslab+0xc2/0x120 [ 601.125735][T14795] __kmalloc_noprof+0xe0/0x850 [ 601.125762][T14795] iovec_from_user+0x8d/0x140 [ 601.125780][T14795] __import_iovec+0x81/0x640 [ 601.125800][T14795] import_iovec+0x82/0xb0 [ 601.125817][T14795] vfs_writev+0x197/0xe10 [ 601.125845][T14795] ? __pfx_vfs_writev+0x10/0x10 [ 601.125879][T14795] ? __fget_files+0x21f/0x3d0 [ 601.125898][T14795] ? do_writev+0x13e/0x340 [ 601.125918][T14795] do_writev+0x13e/0x340 [ 601.125940][T14795] ? __pfx_do_writev+0x10/0x10 [ 601.125966][T14795] do_syscall_64+0x106/0xf80 [ 601.125984][T14795] ? clear_bhb_loop+0x40/0x90 [ 601.126002][T14795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.126018][T14795] RIP: 0033:0x7faf3699c799 [ 601.126032][T14795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.126048][T14795] RSP: 002b:00007faf377d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 601.126063][T14795] RAX: ffffffffffffffda RBX: 00007faf36c15fa0 RCX: 00007faf3699c799 [ 601.126073][T14795] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 00000000000000c8 [ 601.126082][T14795] RBP: 00007faf36a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 601.126091][T14795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 601.126100][T14795] R13: 00007faf36c16038 R14: 00007faf36c15fa0 R15: 00007ffc6cbd54e8 [ 601.126120][T14795] [ 601.357822][T14677] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 601.368432][T14677] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 601.596087][ T5827] Bluetooth: hci3: command tx timeout [ 601.611713][ T1011] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.618883][ T1011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.997897][ T50] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 601.997924][ T50] Bluetooth: hci0: unexpected subevent 0x0e length: 725 > 15 [ 602.012916][ T50] Bluetooth: hci0: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 602.153365][T14677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.187851][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 602.524747][T14821] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1835'. [ 602.784772][T14826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1836'. [ 602.850691][T14826] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1836'. [ 602.992643][T14677] veth0_vlan: entered promiscuous mode [ 603.076650][T14677] veth1_vlan: entered promiscuous mode [ 603.231724][T14677] veth0_macvtap: entered promiscuous mode [ 603.268787][T14677] veth1_macvtap: entered promiscuous mode [ 603.354333][T14677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.480829][T14677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.588450][T10590] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.628070][ T50] Bluetooth: hci3: command tx timeout [ 603.688962][T10590] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.803587][T10590] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.913277][T10590] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.132675][T13211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.195416][T13211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.268060][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 604.337588][T13876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.378494][T13876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.693489][T14873] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1845'. [ 606.757084][T14873] netlink: 13 bytes leftover after parsing attributes in process `syz.5.1845'. [ 607.547696][T14889] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 608.435287][T14898] FAULT_INJECTION: forcing a failure. [ 608.435287][T14898] name failslab, interval 1, probability 0, space 0, times 0 [ 608.491774][T14898] CPU: 0 UID: 0 PID: 14898 Comm: syz.3.1850 Tainted: G L syzkaller #0 PREEMPT(full) [ 608.491801][T14898] Tainted: [L]=SOFTLOCKUP [ 608.491808][T14898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 608.491818][T14898] Call Trace: [ 608.491824][T14898] [ 608.491830][T14898] dump_stack_lvl+0x100/0x190 [ 608.491859][T14898] should_fail_ex.cold+0x5/0xa [ 608.491878][T14898] should_failslab+0xc2/0x120 [ 608.491894][T14898] __kmalloc_cache_noprof+0x7a/0x6f0 [ 608.491913][T14898] ? nexthop_net_init+0x73/0x140 [ 608.491929][T14898] ? lockdep_init_map_type+0x5c/0x250 [ 608.491950][T14898] ? __pfx_nexthop_net_init+0x10/0x10 [ 608.491966][T14898] nexthop_net_init+0x73/0x140 [ 608.491981][T14898] ? tcf_net_init+0x55/0x150 [ 608.491998][T14898] ops_init+0x1e2/0x5f0 [ 608.492019][T14898] setup_net+0x118/0x3a0 [ 608.492038][T14898] ? __pfx_setup_net+0x10/0x10 [ 608.492056][T14898] ? lockdep_init_map_type+0x5c/0x250 [ 608.492077][T14898] ? mutex_init_lockep+0x110/0x150 [ 608.492099][T14898] copy_net_ns+0x46f/0x7c0 [ 608.492121][T14898] create_new_namespaces+0x3ea/0xac0 [ 608.492142][T14898] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 608.492159][T14898] ksys_unshare+0x473/0xad0 [ 608.492179][T14898] ? __pfx_ksys_unshare+0x10/0x10 [ 608.492205][T14898] __x64_sys_unshare+0x31/0x40 [ 608.492222][T14898] do_syscall_64+0x106/0xf80 [ 608.492240][T14898] ? clear_bhb_loop+0x40/0x90 [ 608.492258][T14898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.492273][T14898] RIP: 0033:0x7faf3699c799 [ 608.492287][T14898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.492302][T14898] RSP: 002b:00007faf377d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 608.492317][T14898] RAX: ffffffffffffffda RBX: 00007faf36c15fa0 RCX: 00007faf3699c799 [ 608.492327][T14898] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 608.492336][T14898] RBP: 00007faf36a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 608.492345][T14898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 608.492354][T14898] R13: 00007faf36c16038 R14: 00007faf36c15fa0 R15: 00007ffc6cbd54e8 [ 608.492373][T14898] [ 610.518921][T14906] zswap: compressor not available [ 610.890556][T14916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1855'. [ 610.956167][T14916] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1855'. [ 611.865675][T14933] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1853'. [ 612.783849][ T5835] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 612.793086][ T5835] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 612.803332][ T5835] CPU: 0 UID: 0 PID: 5835 Comm: kworker/u9:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 612.803358][ T5835] Tainted: [L]=SOFTLOCKUP [ 612.803363][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 612.803375][ T5835] Workqueue: hci2 hci_rx_work [ 612.803395][ T5835] Call Trace: [ 612.803400][ T5835] [ 612.803406][ T5835] dump_stack_lvl+0x100/0x190 [ 612.803431][ T5835] sysfs_warn_dup.cold+0x1c/0x28 [ 612.803453][ T5835] sysfs_create_dir_ns+0x24b/0x2b0 [ 612.803510][ T5835] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 612.803531][ T5835] ? find_held_lock+0x2b/0x80 [ 612.803545][ T5835] ? kobject_add_internal+0x25f/0x930 [ 612.803566][ T5835] ? kobject_add_internal+0x25f/0x930 [ 612.803589][ T5835] ? do_raw_spin_unlock+0x145/0x1e0 [ 612.803612][ T5835] kobject_add_internal+0x2c8/0x930 [ 612.803638][ T5835] kobject_add+0x16a/0x1e0 [ 612.803658][ T5835] ? __pfx_kobject_add+0x10/0x10 [ 612.803677][ T5835] ? class_to_subsys+0x10f/0x150 [ 612.803697][ T5835] ? kobject_put+0xb9/0x640 [ 612.803714][ T5835] ? _raw_spin_unlock+0x28/0x50 [ 612.803735][ T5835] device_add+0x294/0x1950 [ 612.803752][ T5835] ? __pfx_dev_set_name+0x10/0x10 [ 612.803770][ T5835] ? __pfx_device_add+0x10/0x10 [ 612.803785][ T5835] ? mgmt_send_event_skb+0x2fb/0x460 [ 612.803806][ T5835] hci_conn_add_sysfs+0x1a3/0x260 [ 612.803825][ T5835] le_conn_complete_evt+0x11cb/0x1f40 [ 612.803846][ T5835] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 612.803860][ T5835] ? __pfx_bt_warn+0x10/0x10 [ 612.803881][ T5835] hci_le_conn_complete_evt+0x23c/0x3a0 [ 612.803898][ T5835] ? skb_pull_data+0x15f/0x1e0 [ 612.803923][ T5835] hci_le_meta_evt+0x34a/0x5f0 [ 612.803940][ T5835] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 612.803958][ T5835] hci_event_packet+0x682/0x11c0 [ 612.803974][ T5835] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 612.803991][ T5835] ? __pfx_hci_event_packet+0x10/0x10 [ 612.804009][ T5835] ? kcov_remote_start+0x374/0x660 [ 612.804023][ T5835] ? lockdep_hardirqs_on+0x78/0x100 [ 612.804046][ T5835] hci_rx_work+0x451/0xfc0 [ 612.804065][ T5835] process_one_work+0x9d7/0x1920 [ 612.804094][ T5835] ? __pfx_process_one_work+0x10/0x10 [ 612.804120][ T5835] ? __pfx_hci_rx_work+0x10/0x10 [ 612.804137][ T5835] worker_thread+0x5da/0xe40 [ 612.804162][ T5835] ? __pfx_worker_thread+0x10/0x10 [ 612.804183][ T5835] ? kthread+0x13a/0x450 [ 612.804201][ T5835] ? __pfx_worker_thread+0x10/0x10 [ 612.804220][ T5835] kthread+0x370/0x450 [ 612.804238][ T5835] ? __pfx_kthread+0x10/0x10 [ 612.804258][ T5835] ret_from_fork+0x754/0xd80 [ 612.804280][ T5835] ? __pfx_ret_from_fork+0x10/0x10 [ 612.804303][ T5835] ? __switch_to+0x7b4/0x1120 [ 612.804320][ T5835] ? __pfx_kthread+0x10/0x10 [ 612.804340][ T5835] ret_from_fork_asm+0x1a/0x30 [ 612.804366][ T5835] [ 612.804385][ T5835] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 613.110958][ T5835] Bluetooth: hci2: failed to register connection device [ 613.122731][ T5835] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 613.131754][ T5835] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 613.141673][ T5835] CPU: 0 UID: 0 PID: 5835 Comm: kworker/u9:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 613.141698][ T5835] Tainted: [L]=SOFTLOCKUP [ 613.141704][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 613.141716][ T5835] Workqueue: hci2 hci_rx_work [ 613.141736][ T5835] Call Trace: [ 613.141742][ T5835] [ 613.141748][ T5835] dump_stack_lvl+0x100/0x190 [ 613.141774][ T5835] sysfs_warn_dup.cold+0x1c/0x28 [ 613.141796][ T5835] sysfs_create_dir_ns+0x24b/0x2b0 [ 613.141819][ T5835] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 613.141838][ T5835] ? find_held_lock+0x2b/0x80 [ 613.141852][ T5835] ? kobject_add_internal+0x25f/0x930 [ 613.141873][ T5835] ? kobject_add_internal+0x25f/0x930 [ 613.141895][ T5835] ? do_raw_spin_unlock+0x145/0x1e0 [ 613.141918][ T5835] kobject_add_internal+0x2c8/0x930 [ 613.141943][ T5835] kobject_add+0x16a/0x1e0 [ 613.141964][ T5835] ? __pfx_kobject_add+0x10/0x10 [ 613.141983][ T5835] ? class_to_subsys+0x10f/0x150 [ 613.142002][ T5835] ? kobject_put+0xb9/0x640 [ 613.142019][ T5835] ? _raw_spin_unlock+0x28/0x50 [ 613.142040][ T5835] device_add+0x294/0x1950 [ 613.142054][ T5835] ? __pfx_dev_set_name+0x10/0x10 [ 613.142073][ T5835] ? __pfx_device_add+0x10/0x10 [ 613.142088][ T5835] ? mgmt_send_event_skb+0x2fb/0x460 [ 613.142109][ T5835] hci_conn_add_sysfs+0x1a3/0x260 [ 613.142128][ T5835] le_conn_complete_evt+0x11cb/0x1f40 [ 613.142148][ T5835] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 613.142163][ T5835] ? __pfx_bt_warn+0x10/0x10 [ 613.142184][ T5835] hci_le_conn_complete_evt+0x23c/0x3a0 [ 613.142201][ T5835] ? skb_pull_data+0x15f/0x1e0 [ 613.142230][ T5835] hci_le_meta_evt+0x34a/0x5f0 [ 613.142247][ T5835] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 613.142266][ T5835] hci_event_packet+0x682/0x11c0 [ 613.142283][ T5835] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 613.142301][ T5835] ? __pfx_hci_event_packet+0x10/0x10 [ 613.142320][ T5835] ? kcov_remote_start+0x374/0x660 [ 613.142334][ T5835] ? lockdep_hardirqs_on+0x78/0x100 [ 613.142356][ T5835] hci_rx_work+0x451/0xfc0 [ 613.142383][ T5835] process_one_work+0x9d7/0x1920 [ 613.142413][ T5835] ? __pfx_process_one_work+0x10/0x10 [ 613.142440][ T5835] ? __pfx_hci_rx_work+0x10/0x10 [ 613.142458][ T5835] worker_thread+0x5da/0xe40 [ 613.142485][ T5835] ? __pfx_worker_thread+0x10/0x10 [ 613.142508][ T5835] ? kthread+0x13a/0x450 [ 613.142525][ T5835] ? __pfx_worker_thread+0x10/0x10 [ 613.142544][ T5835] kthread+0x370/0x450 [ 613.142562][ T5835] ? __pfx_kthread+0x10/0x10 [ 613.142582][ T5835] ret_from_fork+0x754/0xd80 [ 613.142605][ T5835] ? __pfx_ret_from_fork+0x10/0x10 [ 613.142628][ T5835] ? __switch_to+0x7b4/0x1120 [ 613.142644][ T5835] ? __pfx_kthread+0x10/0x10 [ 613.142664][ T5835] ret_from_fork_asm+0x1a/0x30 [ 613.142691][ T5835] [ 613.143016][ T5835] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 613.474829][ T5835] Bluetooth: hci2: failed to register connection device [ 615.545957][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 615.787879][T14969] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1867'. [ 616.714938][T14973] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 617.121155][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 617.133796][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 617.142336][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 617.151311][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 617.158736][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 617.627763][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 617.803127][T10590] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.974400][T10590] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.090319][T14980] chnl_net:caif_netlink_parms(): no params data found [ 618.129069][T10590] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.306512][T10590] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.520318][T14980] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.558066][T14980] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.595173][T14980] bridge_slave_0: entered allmulticast mode [ 618.633391][T14980] bridge_slave_0: entered promiscuous mode [ 618.661273][T14980] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.715818][T14980] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.762156][T14980] bridge_slave_1: entered allmulticast mode [ 618.804810][T14980] bridge_slave_1: entered promiscuous mode [ 618.985763][T14980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.100828][T14980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.227440][ T5835] Bluetooth: hci5: command tx timeout [ 619.276910][T14980] team0: Port device team_slave_0 added [ 619.322566][T14980] team0: Port device team_slave_1 added [ 619.883171][T10590] gretap0: left allmulticast mode [ 620.005384][T10590] gretap0: left promiscuous mode [ 620.011702][T10590] bridge0: port 3(gretap0) entered disabled state [ 620.130694][T10590] bridge_slave_1: left allmulticast mode [ 620.155922][T15010] FAULT_INJECTION: forcing a failure. [ 620.155922][T15010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 620.169126][T10590] bridge_slave_1: left promiscuous mode [ 620.174824][T10590] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.228023][T15010] CPU: 0 UID: 0 PID: 15010 Comm: syz.2.1873 Tainted: G L syzkaller #0 PREEMPT(full) [ 620.228051][T15010] Tainted: [L]=SOFTLOCKUP [ 620.228058][T15010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 620.228068][T15010] Call Trace: [ 620.228074][T15010] [ 620.228081][T15010] dump_stack_lvl+0x100/0x190 [ 620.228109][T15010] should_fail_ex.cold+0x5/0xa [ 620.228128][T15010] strncpy_from_user+0x3b/0x2d0 [ 620.228232][T15010] do_getname+0x78/0x390 [ 620.228253][T15010] do_sys_openat2+0xc5/0x1e0 [ 620.228272][T15010] ? __pfx_do_sys_openat2+0x10/0x10 [ 620.228293][T15010] ? do_pselect.constprop.0+0x196/0x270 [ 620.228320][T15010] __x64_sys_openat+0x12d/0x210 [ 620.228340][T15010] ? __pfx___x64_sys_openat+0x10/0x10 [ 620.228366][T15010] do_syscall_64+0x106/0xf80 [ 620.228384][T15010] ? clear_bhb_loop+0x40/0x90 [ 620.228402][T15010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.228417][T15010] RIP: 0033:0x7f37e0d9c799 [ 620.228432][T15010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.228446][T15010] RSP: 002b:00007f37e1cca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 620.228461][T15010] RAX: ffffffffffffffda RBX: 00007f37e1015fa0 RCX: 00007f37e0d9c799 [ 620.228471][T15010] RDX: 0000000000040001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 620.228481][T15010] RBP: 00007f37e0e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 620.228491][T15010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.228500][T15010] R13: 00007f37e1016038 R14: 00007f37e1015fa0 R15: 00007ffcd16a2188 [ 620.228521][T15010] [ 620.718348][T10590] bridge_slave_0: left allmulticast mode [ 620.718395][T10590] bridge_slave_0: left promiscuous mode [ 620.718522][T10590] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.180338][T10590] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 621.239943][T10590] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 621.305680][ T5835] Bluetooth: hci5: command tx timeout [ 621.339714][T10590] bond0 (unregistering): Released all slaves [ 621.626743][T14980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.686951][T14980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.835665][T14980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.895498][T14980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.933931][T14980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.063415][T14980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.405555][T14980] hsr_slave_0: entered promiscuous mode [ 622.427303][T14980] hsr_slave_1: entered promiscuous mode [ 622.446814][T14980] debugfs: 'hsr0' already exists in 'hsr' [ 622.460039][T14980] Cannot create hsr debugfs directory [ 622.653805][T10590] hsr_slave_0: left promiscuous mode [ 622.676649][T10590] hsr_slave_1: left promiscuous mode [ 622.707105][T10590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 622.740858][T10590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.753734][T15044] __vm_enough_memory: pid: 15044, comm: syz.2.1880, bytes: 4398046511104 not enough memory for the allocation [ 622.775978][T10590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 622.800920][T10590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.854991][T10590] veth1_vlan: left promiscuous mode [ 622.882090][T10590] veth0_vlan: left promiscuous mode [ 623.044371][T15052] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 623.101492][T15052] pci 0000:00:01.3: PCI INT A: no GSI [ 623.273042][ T29] audit: type=1800 audit(1773010736.953:14): pid=15052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1881" name="trace_pipe" dev="tracefs" ino=645 res=0 errno=0 [ 623.386753][ T5835] Bluetooth: hci5: command tx timeout [ 623.835887][T15056] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 624.524849][T15074] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 624.596355][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.602771][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.636823][T15074] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 624.724567][T10590] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.974323][T10590] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.042068][T14980] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 625.200826][T10590] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.271585][T14980] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 625.383130][T10590] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.451810][T14980] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 625.468176][ T5835] Bluetooth: hci5: command tx timeout [ 625.513350][T14980] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 625.696952][T15095] Invalid ELF header magic: != ELF [ 626.008510][T10590] gretap0: left allmulticast mode [ 626.039886][T10590] gretap0: left promiscuous mode [ 626.053760][T10590] bridge0: port 3(gretap0) entered disabled state [ 626.102009][T10590] bridge_slave_1: left allmulticast mode [ 626.127431][T10590] bridge_slave_1: left promiscuous mode [ 626.178798][T10590] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.241108][T10590] bridge_slave_0: left allmulticast mode [ 626.291394][T10590] bridge_slave_0: left promiscuous mode [ 626.325539][T10590] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.985843][T10590] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 627.042150][T10590] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 627.079038][T10590] bond0 (unregistering): Released all slaves [ 627.164505][T14980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 627.243158][T14980] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.336505][T10590] i: left promiscuous mode [ 627.412504][T10581] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.419657][T10581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.574745][T10590] HfR: left promiscuous mode [ 627.621789][T13211] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.628952][T13211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.153103][T10590] hsr_slave_0: left promiscuous mode [ 628.183212][T10590] hsr_slave_1: left promiscuous mode [ 628.226404][T10590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.233812][T10590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.315551][T10590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 628.347516][T10590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.418280][T10590] veth1_macvtap: left promiscuous mode [ 628.423865][T10590] veth1_vlan: left promiscuous mode [ 628.475672][T10590] veth0_vlan: left promiscuous mode [ 629.094313][T10590] team0 (unregistering): Port device team_slave_1 removed [ 629.144970][T10590] team0 (unregistering): Port device team_slave_0 removed [ 629.344083][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 629.354424][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 629.372456][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 629.383184][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 629.393471][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 630.297238][T10590] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.380525][T14980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 630.530422][T10590] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.750764][T10590] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.879783][T10590] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.247669][T15160] chnl_net:caif_netlink_parms(): no params data found [ 631.465835][ T5835] Bluetooth: hci1: command tx timeout [ 631.474979][T10590] bridge_slave_1: left allmulticast mode [ 631.487926][T10590] bridge_slave_1: left promiscuous mode [ 631.501606][T10590] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.519419][T10590] bridge_slave_0: left allmulticast mode [ 631.531655][T10590] bridge_slave_0: left promiscuous mode [ 631.544536][T10590] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.790289][T10590] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 631.806683][T15206] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1896'. [ 631.818535][T10590] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 631.828751][T10590] bond0 (unregistering): Released all slaves [ 631.910322][T15206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 631.920099][T15206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 631.936965][T15206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 631.954596][T15206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 631.992056][T10590] ovs_: left promiscuous mode [ 632.064567][T10590] HfR: left promiscuous mode [ 632.171073][T14980] veth0_vlan: entered promiscuous mode [ 632.256730][T15160] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.288523][T15160] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.308375][T15160] bridge_slave_0: entered allmulticast mode [ 632.334558][T15160] bridge_slave_0: entered promiscuous mode [ 632.389763][T15160] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.405587][T15160] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.423029][T15160] bridge_slave_1: entered allmulticast mode [ 632.437944][T15160] bridge_slave_1: entered promiscuous mode [ 632.560349][T15160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.643746][T14980] veth1_vlan: entered promiscuous mode [ 632.678939][T15160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.698376][T15229] FAULT_INJECTION: forcing a failure. [ 632.698376][T15229] name failslab, interval 1, probability 0, space 0, times 0 [ 632.757175][T15229] CPU: 0 UID: 0 PID: 15229 Comm: syz.2.1898 Tainted: G L syzkaller #0 PREEMPT(full) [ 632.757201][T15229] Tainted: [L]=SOFTLOCKUP [ 632.757207][T15229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 632.757218][T15229] Call Trace: [ 632.757224][T15229] [ 632.757230][T15229] dump_stack_lvl+0x100/0x190 [ 632.757260][T15229] should_fail_ex.cold+0x5/0xa [ 632.757278][T15229] should_failslab+0xc2/0x120 [ 632.757295][T15229] __kmalloc_cache_noprof+0x7a/0x6f0 [ 632.757315][T15229] ? acpi_ds_call_control_method+0x300/0xab0 [ 632.757435][T15229] acpi_ds_call_control_method+0x300/0xab0 [ 632.757460][T15229] acpi_ps_parse_aml+0xacd/0x1120 [ 632.757503][T15229] acpi_ps_execute_method+0x5c4/0xe90 [ 632.757525][T15229] acpi_ns_evaluate+0x640/0x1670 [ 632.757569][T15229] acpi_evaluate_object+0x420/0xe00 [ 632.757591][T15229] ? kasan_save_stack+0x30/0x50 [ 632.757613][T15229] ? kasan_save_track+0x14/0x30 [ 632.757642][T15229] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 632.757670][T15229] acpi_evaluate_integer+0xdf/0x220 [ 632.757729][T15229] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 632.757757][T15229] ? __pfx_status_show+0x10/0x10 [ 632.757792][T15229] status_show+0xa0/0x120 [ 632.757813][T15229] ? __pfx_status_show+0x10/0x10 [ 632.757839][T15229] dev_attr_show+0x52/0xa0 [ 632.757855][T15229] ? __pfx_dev_attr_show+0x10/0x10 [ 632.757870][T15229] sysfs_kf_seq_show+0x217/0x3a0 [ 632.757893][T15229] seq_read_iter+0x32f/0x1270 [ 632.757925][T15229] kernfs_fop_read_iter+0x46c/0x610 [ 632.757942][T15229] ? rw_verify_area+0xce/0x6d0 [ 632.757963][T15229] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 632.757981][T15229] vfs_read+0x825/0xb30 [ 632.758006][T15229] ? __pfx_vfs_read+0x10/0x10 [ 632.758040][T15229] ksys_read+0x12a/0x250 [ 632.758062][T15229] ? __pfx_ksys_read+0x10/0x10 [ 632.758090][T15229] do_syscall_64+0x106/0xf80 [ 632.758108][T15229] ? clear_bhb_loop+0x40/0x90 [ 632.758126][T15229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.758143][T15229] RIP: 0033:0x7f37e0d9c799 [ 632.758157][T15229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.758172][T15229] RSP: 002b:00007f37e1cca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 632.758187][T15229] RAX: ffffffffffffffda RBX: 00007f37e1015fa0 RCX: 00007f37e0d9c799 [ 632.758197][T15229] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000005 [ 632.758207][T15229] RBP: 00007f37e0e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 632.758216][T15229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.758226][T15229] R13: 00007f37e1016038 R14: 00007f37e1015fa0 R15: 00007ffcd16a2188 [ 632.758247][T15229] [ 632.758498][T15229] ACPI Error: [ 633.252185][T15160] team0: Port device team_slave_0 added [ 633.264816][T15160] team0: Port device team_slave_1 added [ 633.350730][T10590] hsr_slave_0: left promiscuous mode [ 633.365909][T10590] hsr_slave_1: left promiscuous mode [ 633.378890][T10590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.392965][T15229] Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20251212/psparse-529) [ 633.414424][T10590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.459145][T10590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.475534][T10590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.510408][T10590] veth1_macvtap: left promiscuous mode [ 633.525903][T10590] veth1_vlan: left promiscuous mode [ 633.543008][T10590] veth0_vlan: left promiscuous mode [ 633.549129][ T5835] Bluetooth: hci1: command tx timeout [ 633.901905][T10590] team0 (unregistering): Port device team_slave_1 removed [ 633.917225][T10590] team0 (unregistering): Port device team_slave_0 removed [ 634.119906][T15160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.127187][T15160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.173463][T15160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.213756][T14980] veth0_macvtap: entered promiscuous mode [ 634.248003][T15160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.269138][T15160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.327262][T15160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.374307][T14980] veth1_macvtap: entered promiscuous mode [ 634.553229][T14980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.639912][T15160] hsr_slave_0: entered promiscuous mode [ 634.676639][T15160] hsr_slave_1: entered promiscuous mode [ 634.710318][T14980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.755441][T13211] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.893819][T15252] Invalid ELF header magic: != ELF [ 634.934863][T13211] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.977401][T13211] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.310095][T13211] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.366322][T15252] Invalid ELF header magic: != ELF [ 635.632940][ T5835] Bluetooth: hci1: command tx timeout [ 636.016135][T10590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.074707][T10590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.270295][T13876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.309187][T13876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.439318][T15281] mkiss: ax0: crc mode is auto. [ 636.638124][T15160] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 636.749032][T15160] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 636.788181][T15160] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 636.871358][T15160] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 637.450520][T15160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.579016][T15160] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.654760][T13876] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.661966][T13876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.697557][T13876] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.704821][T13876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.716216][ T5835] Bluetooth: hci1: command tx timeout [ 638.120320][T15160] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 638.529423][T15334] FAULT_INJECTION: forcing a failure. [ 638.529423][T15334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 638.599954][T15334] CPU: 0 UID: 0 PID: 15334 Comm: syz.5.1906 Tainted: G L syzkaller #0 PREEMPT(full) [ 638.599978][T15334] Tainted: [L]=SOFTLOCKUP [ 638.599983][T15334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 638.599993][T15334] Call Trace: [ 638.599998][T15334] [ 638.600004][T15334] dump_stack_lvl+0x100/0x190 [ 638.600029][T15334] should_fail_ex.cold+0x5/0xa [ 638.600047][T15334] _copy_from_user+0x2e/0xd0 [ 638.600063][T15334] copy_msghdr_from_user+0x9f/0x4f0 [ 638.600085][T15334] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 638.600111][T15334] ? __pfx__kstrtoull+0x10/0x10 [ 638.600132][T15334] ___sys_sendmsg+0x106/0x1e0 [ 638.600155][T15334] ? __pfx____sys_sendmsg+0x10/0x10 [ 638.600185][T15334] ? find_held_lock+0x2b/0x80 [ 638.600210][T15334] __sys_sendmmsg+0x205/0x430 [ 638.600230][T15334] ? __pfx___sys_sendmmsg+0x10/0x10 [ 638.600253][T15334] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 638.600280][T15334] ? fput+0x79/0x100 [ 638.600296][T15334] ? ksys_write+0x1ac/0x250 [ 638.600309][T15334] ? __pfx_ksys_write+0x10/0x10 [ 638.600326][T15334] __x64_sys_sendmmsg+0x9c/0x100 [ 638.600343][T15334] ? lockdep_hardirqs_on+0x78/0x100 [ 638.600359][T15334] do_syscall_64+0x106/0xf80 [ 638.600375][T15334] ? clear_bhb_loop+0x40/0x90 [ 638.600393][T15334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.600408][T15334] RIP: 0033:0x7fb8eef9c799 [ 638.600420][T15334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.600434][T15334] RSP: 002b:00007fb8efe0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 638.600449][T15334] RAX: ffffffffffffffda RBX: 00007fb8ef216090 RCX: 00007fb8eef9c799 [ 638.600458][T15334] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000004 [ 638.600467][T15334] RBP: 00007fb8efe0b090 R08: 0000000000000000 R09: 0000000000000000 [ 638.600476][T15334] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 638.600484][T15334] R13: 00007fb8ef216128 R14: 00007fb8ef216090 R15: 00007ffca6f89f38 [ 638.600503][T15334] [ 639.143270][ T29] audit: type=1806 audit(1773029096.779:15): xattr="." res=0 [ 639.244959][T15160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.256399][T15357] FAULT_INJECTION: forcing a failure. [ 639.256399][T15357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 639.322381][T15357] CPU: 0 UID: 0 PID: 15357 Comm: syz.5.1916 Tainted: G L syzkaller #0 PREEMPT(full) [ 639.322407][T15357] Tainted: [L]=SOFTLOCKUP [ 639.322412][T15357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 639.322422][T15357] Call Trace: [ 639.322427][T15357] [ 639.322433][T15357] dump_stack_lvl+0x100/0x190 [ 639.322460][T15357] should_fail_ex.cold+0x5/0xa [ 639.322477][T15357] _copy_from_user+0x2e/0xd0 [ 639.322493][T15357] ____sys_sendmsg+0x1d1/0xb70 [ 639.322516][T15357] ? __pfx_____sys_sendmsg+0x10/0x10 [ 639.322540][T15357] ? __pfx__kstrtoull+0x10/0x10 [ 639.322561][T15357] ___sys_sendmsg+0x190/0x1e0 [ 639.322584][T15357] ? __pfx____sys_sendmsg+0x10/0x10 [ 639.322614][T15357] ? find_held_lock+0x2b/0x80 [ 639.322639][T15357] __sys_sendmmsg+0x205/0x430 [ 639.322659][T15357] ? __pfx___sys_sendmmsg+0x10/0x10 [ 639.322682][T15357] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 639.322709][T15357] ? fput+0x79/0x100 [ 639.322725][T15357] ? ksys_write+0x1ac/0x250 [ 639.322738][T15357] ? __pfx_ksys_write+0x10/0x10 [ 639.322754][T15357] __x64_sys_sendmmsg+0x9c/0x100 [ 639.322770][T15357] ? lockdep_hardirqs_on+0x78/0x100 [ 639.322794][T15357] do_syscall_64+0x106/0xf80 [ 639.322811][T15357] ? clear_bhb_loop+0x40/0x90 [ 639.322829][T15357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.322844][T15357] RIP: 0033:0x7fb8eef9c799 [ 639.322856][T15357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.322870][T15357] RSP: 002b:00007fb8efe0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 639.322884][T15357] RAX: ffffffffffffffda RBX: 00007fb8ef216090 RCX: 00007fb8eef9c799 [ 639.322894][T15357] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000004 [ 639.322903][T15357] RBP: 00007fb8efe0b090 R08: 0000000000000000 R09: 0000000000000000 [ 639.322911][T15357] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 639.322920][T15357] R13: 00007fb8ef216128 R14: 00007fb8ef216090 R15: 00007ffca6f89f38 [ 639.322938][T15357] [ 639.665523][T15364] futex_wake_op: syz.2.1911 tries to shift op by -2048; fix this program [ 639.674154][T15364] futex_wake_op: syz.2.1911 tries to shift op by -2048; fix this program [ 639.683604][T15364] 0x000000000001-0x000000020000 : "" [ 639.700679][T15366] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 639.845180][T15364] ftl_cs: FTL header corrupt! [ 641.357776][T15160] veth0_vlan: entered promiscuous mode [ 641.473875][T15160] veth1_vlan: entered promiscuous mode [ 641.592334][T15160] veth0_macvtap: entered promiscuous mode [ 641.680376][T15160] veth1_macvtap: entered promiscuous mode [ 641.786563][T15160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.857696][T15160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.929178][T15427] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1920'. [ 641.964376][T10588] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.997115][T15432] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1919'. [ 642.010720][T15427] netlink: 13 bytes leftover after parsing attributes in process `syz.6.1920'. [ 642.028317][T15433] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1921'. [ 642.037492][T10588] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.143535][T15433] veth0_macvtap: left promiscuous mode [ 642.169712][T15433] macvtap0: entered promiscuous mode [ 642.208609][T15433] macvtap0: entered allmulticast mode [ 642.272489][T10588] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.318126][T10588] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.604482][T13876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.653707][T13876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.721238][T15444] NFSD: Failed to start, no listeners configured. [ 642.799012][T13880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.850969][T13880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.448951][T15471] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1929'. [ 643.939970][T15484] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1930'. [ 645.225690][T15505] FAULT_INJECTION: forcing a failure. [ 645.225690][T15505] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 645.374962][T15505] CPU: 0 UID: 0 PID: 15505 Comm: syz.6.1934 Tainted: G L syzkaller #0 PREEMPT(full) [ 645.374989][T15505] Tainted: [L]=SOFTLOCKUP [ 645.374995][T15505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 645.375005][T15505] Call Trace: [ 645.375011][T15505] [ 645.375018][T15505] dump_stack_lvl+0x100/0x190 [ 645.375046][T15505] should_fail_ex.cold+0x5/0xa [ 645.375062][T15505] ? prepare_alloc_pages+0x16d/0x5f0 [ 645.375081][T15505] should_fail_alloc_page+0xeb/0x140 [ 645.375108][T15505] prepare_alloc_pages+0x1f0/0x5f0 [ 645.375128][T15505] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 645.375153][T15505] ? __lock_acquire+0x4a5/0x2630 [ 645.375176][T15505] ? __lock_acquire+0x4a5/0x2630 [ 645.375198][T15505] ? lock_acquire+0x1cf/0x380 [ 645.375216][T15505] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 645.375242][T15505] ? find_held_lock+0x2b/0x80 [ 645.375255][T15505] ? __might_fault+0xc5/0x140 [ 645.375277][T15505] ? __might_fault+0xc5/0x140 [ 645.375303][T15505] ? _copy_from_iter+0x270/0x1690 [ 645.375319][T15505] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 645.375344][T15505] ? policy_nodemask+0xed/0x4f0 [ 645.375361][T15505] alloc_pages_mpol+0x1fb/0x550 [ 645.375377][T15505] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 645.375399][T15505] alloc_pages_noprof+0x131/0x390 [ 645.375415][T15505] anon_pipe_write+0xabf/0x1d40 [ 645.375437][T15505] ? __pfx_anon_pipe_write+0x10/0x10 [ 645.375454][T15505] ? __pfx_autoremove_wake_function+0x10/0x10 [ 645.375472][T15505] ? bpf_lsm_file_permission+0x9/0x10 [ 645.375495][T15505] ? security_file_permission+0x76/0x210 [ 645.375512][T15505] ? rw_verify_area+0xce/0x6d0 [ 645.375535][T15505] vfs_write+0x6ac/0x1070 [ 645.375558][T15505] ? __pfx_anon_pipe_write+0x10/0x10 [ 645.375575][T15505] ? __pfx_vfs_write+0x10/0x10 [ 645.375595][T15505] ? find_held_lock+0x2b/0x80 [ 645.375621][T15505] ksys_write+0x1f8/0x250 [ 645.375635][T15505] ? __pfx_ksys_write+0x10/0x10 [ 645.375654][T15505] do_syscall_64+0x106/0xf80 [ 645.375672][T15505] ? clear_bhb_loop+0x40/0x90 [ 645.375691][T15505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.375706][T15505] RIP: 0033:0x7f0a9f79c799 [ 645.375720][T15505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.375735][T15505] RSP: 002b:00007f0aa05cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 645.375750][T15505] RAX: ffffffffffffffda RBX: 00007f0a9fa15fa0 RCX: 00007f0a9f79c799 [ 645.375760][T15505] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 645.375770][T15505] RBP: 00007f0a9f832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 645.375780][T15505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 645.375789][T15505] R13: 00007f0a9fa16038 R14: 00007f0a9fa15fa0 R15: 00007ffcdde4c8c8 [ 645.375810][T15505] [ 652.462274][T15629] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 652.518536][T15629] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 652.824999][T15629] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 652.865153][T15612] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 652.888558][T15629] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 653.029062][T15629] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 653.196026][T15629] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 653.227646][T15629] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 653.374309][T15629] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 653.514826][T15629] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 653.552956][T15629] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 653.662947][T15629] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 654.506810][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 654.909604][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 655.226470][ T5835] Bluetooth: hci5: command 0x0c1a tx timeout [ 655.348000][T15684] random: crng reseeded on system resumption [ 655.545378][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 656.205934][T15678] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1958'. [ 656.587885][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 656.987890][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 657.260635][T15704] can: request_module (can-proto-0) failed. [ 657.306512][ T5835] Bluetooth: hci5: command 0x0c1a tx timeout [ 657.625384][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 658.229072][T15713] syz.2.1963 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 658.251439][T15702] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 658.294663][T15702] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 658.358981][T15702] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 658.442229][T15702] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 660.116916][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 660.165564][T15752] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 660.352949][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 660.426861][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 660.433213][ T5835] Bluetooth: hci5: command 0x0c1a tx timeout [ 664.408107][T15797] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 664.474104][T15797] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 664.481598][T15837] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1979'. [ 664.571577][T15797] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 664.695396][T15797] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 665.525041][T15856] can: request_module (can-proto-0) failed. [ 665.947530][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 666.506532][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 666.514134][T15884] FAULT_INJECTION: forcing a failure. [ 666.514134][T15884] name failslab, interval 1, probability 0, space 0, times 0 [ 666.585587][ T5835] Bluetooth: hci5: command 0x0c1a tx timeout [ 666.594977][T15884] CPU: 0 UID: 0 PID: 15884 Comm: syz.2.1987 Tainted: G L syzkaller #0 PREEMPT(full) [ 666.595001][T15884] Tainted: [L]=SOFTLOCKUP [ 666.595006][T15884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 666.595015][T15884] Call Trace: [ 666.595021][T15884] [ 666.595026][T15884] dump_stack_lvl+0x100/0x190 [ 666.595053][T15884] should_fail_ex.cold+0x5/0xa [ 666.595070][T15884] should_failslab+0xc2/0x120 [ 666.595086][T15884] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 666.595106][T15884] ? skb_clone+0x190/0x400 [ 666.595126][T15884] skb_clone+0x190/0x400 [ 666.595144][T15884] netlink_deliver_tap+0xaed/0xcc0 [ 666.595167][T15884] netlink_unicast+0x650/0x870 [ 666.595189][T15884] ? __pfx_netlink_unicast+0x10/0x10 [ 666.595207][T15884] ? __pfx___might_resched+0x10/0x10 [ 666.595228][T15884] ? __lock_acquire+0x4a5/0x2630 [ 666.595251][T15884] netlink_sendmsg+0x8b0/0xda0 [ 666.595275][T15884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 666.595293][T15884] ? __import_iovec+0x1d2/0x640 [ 666.595310][T15884] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 666.595333][T15884] ____sys_sendmsg+0x9e1/0xb70 [ 666.595353][T15884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 666.595373][T15884] ? __pfx_____sys_sendmsg+0x10/0x10 [ 666.595396][T15884] ? rcu_is_watching+0x12/0xc0 [ 666.595417][T15884] ? ___sys_sendmsg+0x19d/0x1e0 [ 666.595437][T15884] ? kfree+0x2ec/0x6b0 [ 666.595458][T15884] ___sys_sendmsg+0x190/0x1e0 [ 666.595481][T15884] ? __pfx____sys_sendmsg+0x10/0x10 [ 666.595520][T15884] ? __pfx___might_resched+0x10/0x10 [ 666.595544][T15884] __sys_sendmmsg+0x205/0x430 [ 666.595565][T15884] ? __pfx___sys_sendmmsg+0x10/0x10 [ 666.595588][T15884] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 666.595615][T15884] ? fput+0x79/0x100 [ 666.595632][T15884] ? ksys_write+0x1ac/0x250 [ 666.595644][T15884] ? __pfx_ksys_write+0x10/0x10 [ 666.595660][T15884] __x64_sys_sendmmsg+0x9c/0x100 [ 666.595678][T15884] ? lockdep_hardirqs_on+0x78/0x100 [ 666.595695][T15884] do_syscall_64+0x106/0xf80 [ 666.595711][T15884] ? clear_bhb_loop+0x40/0x90 [ 666.595729][T15884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.595744][T15884] RIP: 0033:0x7f37e0d9c799 [ 666.595757][T15884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 666.595771][T15884] RSP: 002b:00007f37e1ca9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 666.595785][T15884] RAX: ffffffffffffffda RBX: 00007f37e1016090 RCX: 00007f37e0d9c799 [ 666.595795][T15884] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000004 [ 666.595804][T15884] RBP: 00007f37e1ca9090 R08: 0000000000000000 R09: 0000000000000000 [ 666.595813][T15884] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000002 [ 666.595821][T15884] R13: 00007f37e1016128 R14: 00007f37e1016090 R15: 00007ffcd16a2188 [ 666.595841][T15884] [ 667.254800][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 667.332632][T15892] : entered promiscuous mode [ 667.462626][T15898] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1989'. [ 668.096041][T15884] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1987'. [ 669.887889][T15956] zswap: compressor not available [ 670.544975][T15983] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 670.563447][T15984] Setting dangerous option i915.mitigations - tainting kernel [ 670.675909][T15989] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2002'. [ 670.726454][T15982] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2002'. [ 672.388404][T16035] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2010'. [ 672.672768][T16035] macvtap0: entered promiscuous mode [ 672.695895][T16035] macvtap0: entered allmulticast mode [ 672.769020][T16035] veth0_macvtap: entered allmulticast mode [ 672.857936][T16044] FAULT_INJECTION: forcing a failure. [ 672.857936][T16044] name failslab, interval 1, probability 0, space 0, times 0 [ 672.960581][T16044] CPU: 0 UID: 0 PID: 16044 Comm: syz.5.2012 Tainted: G U L syzkaller #0 PREEMPT(full) [ 672.960612][T16044] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 672.960618][T16044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 672.960628][T16044] Call Trace: [ 672.960633][T16044] [ 672.960640][T16044] dump_stack_lvl+0x100/0x190 [ 672.960668][T16044] should_fail_ex.cold+0x5/0xa [ 672.960686][T16044] ? lsm_blob_alloc+0x68/0x90 [ 672.960704][T16044] should_failslab+0xc2/0x120 [ 672.960720][T16044] __kmalloc_noprof+0xe0/0x850 [ 672.960742][T16044] ? trace_kmem_cache_alloc+0xf3/0x120 [ 672.960761][T16044] lsm_blob_alloc+0x68/0x90 [ 672.960779][T16044] security_prepare_creds+0x2d/0x290 [ 672.960797][T16044] prepare_creds+0x5d6/0x950 [ 672.960821][T16044] lookup_user_key+0xfb2/0x1300 [ 672.960925][T16044] ? __pfx_lookup_user_key+0x10/0x10 [ 672.960950][T16044] ? do_raw_spin_lock+0x128/0x260 [ 672.960973][T16044] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 672.960999][T16044] ? _raw_spin_unlock_irq+0x2e/0x50 [ 672.961015][T16044] ? do_sigaltstack.constprop.0+0x4c0/0x670 [ 672.961039][T16044] keyctl_restrict_keyring+0x99/0x250 [ 672.961061][T16044] ? __pfx_keyctl_restrict_keyring+0x10/0x10 [ 672.961090][T16044] __do_sys_keyctl+0x2e8/0x5a0 [ 672.961113][T16044] do_syscall_64+0x106/0xf80 [ 672.961130][T16044] ? clear_bhb_loop+0x40/0x90 [ 672.961149][T16044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.961164][T16044] RIP: 0033:0x7fb8eef9c799 [ 672.961178][T16044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 672.961194][T16044] RSP: 002b:00007fb8efe2c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 672.961209][T16044] RAX: ffffffffffffffda RBX: 00007fb8ef215fa0 RCX: 00007fb8eef9c799 [ 672.961219][T16044] RDX: 0000000000000002 RSI: fffffffffffffffd RDI: 000000000000001d [ 672.961229][T16044] RBP: 00007fb8ef032bd9 R08: fffffffffffffffd R09: 0000000000000000 [ 672.961239][T16044] R10: 0000000000000628 R11: 0000000000000246 R12: 0000000000000000 [ 672.961248][T16044] R13: 00007fb8ef216038 R14: 00007fb8ef215fa0 R15: 00007ffca6f89f38 [ 672.961269][T16044] [ 673.566515][T15980] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 674.585121][T16081] netlink: 74 bytes leftover after parsing attributes in process `syz.7.2021'. [ 675.516925][T16115] Invalid ELF header magic: != ELF [ 676.797721][T16157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2034'. [ 676.922419][T16155] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input20 [ 678.724449][T16202] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2045'. [ 678.736887][T16203] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2044'. [ 679.021206][T16207] vivid-007: ================= START STATUS ================= [ 679.062197][T16207] vivid-007: Generate PTS: true [ 679.139110][T16207] vivid-007: Generate SCR: true [ 679.198018][T16207] tpg source WxH: 320x240 (Y'CbCr) [ 679.203152][T16207] tpg field: 1 [ 679.263214][T16207] tpg crop: (0,0)/320x240 [ 679.305600][T16207] tpg compose: (0,0)/320x240 [ 679.402981][T16207] tpg colorspace: 8 [ 679.446205][T16207] tpg transfer function: 0/0 [ 679.526218][T16207] tpg Y'CbCr encoding: 0/0 [ 679.625101][T16207] tpg quantization: 0/0 [ 679.709056][T16207] tpg RGB range: 0/2 [ 679.744717][T16207] vivid-007: ================== END STATUS ================== [ 680.838839][T16243] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2054'. [ 680.878285][T16243] veth0_macvtap: left allmulticast mode [ 680.883967][T16243] veth0_macvtap: left promiscuous mode [ 681.131531][T16246] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2055'. [ 682.390301][T16282] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2063'. [ 682.444940][T16282] FAULT_INJECTION: forcing a failure. [ 682.444940][T16282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 682.527415][T16282] CPU: 0 UID: 0 PID: 16282 Comm: syz.5.2063 Tainted: G U L syzkaller #0 PREEMPT(full) [ 682.527441][T16282] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 682.527447][T16282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 682.527455][T16282] Call Trace: [ 682.527461][T16282] [ 682.527467][T16282] dump_stack_lvl+0x100/0x190 [ 682.527492][T16282] should_fail_ex.cold+0x5/0xa [ 682.527510][T16282] _copy_from_user+0x2e/0xd0 [ 682.527526][T16282] copy_msghdr_from_user+0x9f/0x4f0 [ 682.527549][T16282] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 682.527574][T16282] ? rcu_is_watching+0x12/0xc0 [ 682.527595][T16282] ? ___sys_sendmsg+0x19d/0x1e0 [ 682.527614][T16282] ? kfree+0x2ec/0x6b0 [ 682.527639][T16282] ___sys_sendmsg+0x106/0x1e0 [ 682.527661][T16282] ? __pfx____sys_sendmsg+0x10/0x10 [ 682.527699][T16282] ? __pfx___might_resched+0x10/0x10 [ 682.527724][T16282] __sys_sendmmsg+0x205/0x430 [ 682.527744][T16282] ? __pfx___sys_sendmmsg+0x10/0x10 [ 682.527767][T16282] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 682.527793][T16282] ? fput+0x79/0x100 [ 682.527810][T16282] ? ksys_write+0x1ac/0x250 [ 682.527822][T16282] ? __pfx_ksys_write+0x10/0x10 [ 682.527839][T16282] __x64_sys_sendmmsg+0x9c/0x100 [ 682.527856][T16282] ? lockdep_hardirqs_on+0x78/0x100 [ 682.527873][T16282] do_syscall_64+0x106/0xf80 [ 682.527889][T16282] ? clear_bhb_loop+0x40/0x90 [ 682.527907][T16282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.527921][T16282] RIP: 0033:0x7fb8eef9c799 [ 682.527934][T16282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.527949][T16282] RSP: 002b:00007fb8efe0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 682.527963][T16282] RAX: ffffffffffffffda RBX: 00007fb8ef216090 RCX: 00007fb8eef9c799 [ 682.527973][T16282] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000004 [ 682.527981][T16282] RBP: 00007fb8efe0b090 R08: 0000000000000000 R09: 0000000000000000 [ 682.527990][T16282] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000002 [ 682.528006][T16282] R13: 00007fb8ef216128 R14: 00007fb8ef216090 R15: 00007ffca6f89f38 [ 682.528025][T16282] [ 683.518454][T16287] FAULT_INJECTION: forcing a failure. [ 683.518454][T16287] name failslab, interval 1, probability 0, space 0, times 0 [ 683.745411][T16287] CPU: 0 UID: 0 PID: 16287 Comm: syz.2.2065 Tainted: G U L syzkaller #0 PREEMPT(full) [ 683.745437][T16287] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 683.745442][T16287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 683.745451][T16287] Call Trace: [ 683.745457][T16287] [ 683.745463][T16287] dump_stack_lvl+0x100/0x190 [ 683.745489][T16287] should_fail_ex.cold+0x5/0xa [ 683.745508][T16287] should_failslab+0xc2/0x120 [ 683.745523][T16287] __kmalloc_cache_noprof+0x7a/0x6f0 [ 683.745542][T16287] ? drm_atomic_helper_connector_duplicate_state+0x72/0xd0 [ 683.745648][T16287] drm_atomic_helper_connector_duplicate_state+0x72/0xd0 [ 683.745669][T16287] drm_atomic_get_connector_state+0x401/0x8f0 [ 683.745743][T16287] drm_atomic_add_affected_connectors+0x2e0/0x3f0 [ 683.745769][T16287] ? __pfx_drm_atomic_add_affected_connectors+0x10/0x10 [ 683.745794][T16287] ? modeset_lock+0x114/0x6d0 [ 683.745860][T16287] __drm_atomic_helper_set_config+0x5f6/0xee0 [ 683.745887][T16287] ? __pfx___drm_atomic_helper_set_config+0x10/0x10 [ 683.745914][T16287] ? drm_client_rotation+0x451/0x6a0 [ 683.745975][T16287] drm_client_modeset_commit_atomic+0x53d/0x7e0 [ 683.745998][T16287] ? __mutex_lock+0x26a/0x1b90 [ 683.746016][T16287] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 683.746035][T16287] ? drm_master_internal_acquire+0x21/0x80 [ 683.746091][T16287] drm_client_modeset_commit_locked+0x14d/0x580 [ 683.746112][T16287] drm_client_modeset_commit+0x4f/0x80 [ 683.746130][T16287] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 683.746178][T16287] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 683.746204][T16287] drm_fbdev_client_restore+0x1b/0x30 [ 683.746246][T16287] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 683.746268][T16287] drm_client_dev_restore+0x205/0x2a0 [ 683.746289][T16287] drm_release+0x2c6/0x360 [ 683.746327][T16287] ? __pfx_drm_release+0x10/0x10 [ 683.746343][T16287] __fput+0x3ff/0xb40 [ 683.746365][T16287] task_work_run+0x150/0x240 [ 683.746386][T16287] ? __pfx_task_work_run+0x10/0x10 [ 683.746412][T16287] exit_to_user_mode_loop+0x100/0x4a0 [ 683.746433][T16287] do_syscall_64+0x668/0xf80 [ 683.746450][T16287] ? clear_bhb_loop+0x40/0x90 [ 683.746468][T16287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.746483][T16287] RIP: 0033:0x7f37e0d9c799 [ 683.746497][T16287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.746511][T16287] RSP: 002b:00007f37e1cca028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 683.746526][T16287] RAX: 0000000000000000 RBX: 00007f37e1015fa0 RCX: 00007f37e0d9c799 [ 683.746535][T16287] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 683.746544][T16287] RBP: 00007f37e0e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 683.746553][T16287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 683.746561][T16287] R13: 00007f37e1016038 R14: 00007f37e1015fa0 R15: 00007ffcd16a2188 [ 683.746581][T16287] [ 684.954922][T16330] can: request_module (can-proto-0) failed. [ 686.039648][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.046227][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.998545][T16460] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 692.820863][ T5835] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 693.362740][T16517] FAULT_INJECTION: forcing a failure. [ 693.362740][T16517] name failslab, interval 1, probability 0, space 0, times 0 [ 693.535959][T16517] CPU: 0 UID: 0 PID: 16517 Comm: syz.6.2109 Tainted: G U L syzkaller #0 PREEMPT(full) [ 693.535989][T16517] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 693.535996][T16517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 693.536006][T16517] Call Trace: [ 693.536012][T16517] [ 693.536019][T16517] dump_stack_lvl+0x100/0x190 [ 693.536046][T16517] should_fail_ex.cold+0x5/0xa [ 693.536065][T16517] should_failslab+0xc2/0x120 [ 693.536082][T16517] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 693.536104][T16517] ? __d_alloc+0x34/0xa80 [ 693.536121][T16517] ? security_inode_alloc+0xcf/0x2c0 [ 693.536146][T16517] __d_alloc+0x34/0xa80 [ 693.536160][T16517] ? __ns_ref_active_get+0x9f/0x1b0 [ 693.536182][T16517] path_from_stashed+0x427/0x750 [ 693.536197][T16517] ? do_raw_spin_unlock+0x145/0x1e0 [ 693.536231][T16517] ns_get_path+0x60/0x80 [ 693.536248][T16517] proc_ns_get_link+0x121/0x230 [ 693.536269][T16517] ? __pfx_proc_ns_get_link+0x10/0x10 [ 693.536291][T16517] ? atime_needs_update+0x8b/0x6b0 [ 693.536313][T16517] pick_link+0xd17/0x13c0 [ 693.536333][T16517] ? __pfx_proc_ns_get_link+0x10/0x10 [ 693.536355][T16517] step_into_slowpath+0x9ba/0xf90 [ 693.536380][T16517] ? __pfx_step_into_slowpath+0x10/0x10 [ 693.536401][T16517] ? find_held_lock+0x2b/0x80 [ 693.536420][T16517] path_openat+0xf95/0x31a0 [ 693.536442][T16517] ? __pfx_path_openat+0x10/0x10 [ 693.536464][T16517] do_file_open+0x20e/0x430 [ 693.536480][T16517] ? __pfx_do_file_open+0x10/0x10 [ 693.536508][T16517] ? alloc_fd+0x476/0x790 [ 693.536525][T16517] ? do_getname+0x191/0x390 [ 693.536544][T16517] do_sys_openat2+0x10d/0x1e0 [ 693.536564][T16517] ? __pfx_do_sys_openat2+0x10/0x10 [ 693.536585][T16517] ? __fget_files+0x21f/0x3d0 [ 693.536602][T16517] __x64_sys_openat+0x12d/0x210 [ 693.536622][T16517] ? __pfx___x64_sys_openat+0x10/0x10 [ 693.536648][T16517] do_syscall_64+0x106/0xf80 [ 693.536666][T16517] ? clear_bhb_loop+0x40/0x90 [ 693.536685][T16517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.536700][T16517] RIP: 0033:0x7f0a9f75cfce [ 693.536714][T16517] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 693.536728][T16517] RSP: 002b:00007f0aa05aaec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 693.536743][T16517] RAX: ffffffffffffffda RBX: 00007f0aa05ab6c0 RCX: 00007f0a9f75cfce [ 693.536753][T16517] RDX: 0000000000000002 RSI: 00007f0aa05aaf90 RDI: ffffffffffffff9c [ 693.536763][T16517] RBP: 00007f0a9f832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 693.536773][T16517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 693.536782][T16517] R13: 00007f0a9fa16128 R14: 00007f0a9fa16090 R15: 00007ffcdde4c8c8 [ 693.536803][T16517] [ 694.656034][T16545] sd 0:0:1:0: PR command failed: 1026 [ 694.699763][T16545] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 694.723254][T16545] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 695.355079][ T5835] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 695.805842][T16572] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2125'. [ 698.382782][T16610] Console: switching to colour VGA+ 80x25 [ 698.588323][T16618] futex_wake_op: syz.5.2134 tries to shift op by -2048; fix this program [ 698.730320][T16618] 0x000000000001-0x000000020000 : "" [ 698.767063][T16618] ftl_cs: FTL header corrupt! [ 698.990777][T16628] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2139'. [ 699.831199][T16645] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2143'. [ 701.769040][T16702] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2157'. [ 702.104083][T16697] zswap: compressor not available [ 702.190023][T16712] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2158'. [ 703.739498][T16743] netlink: 276 bytes leftover after parsing attributes in process `syz.5.2164'. [ 703.833358][T16735] zswap: compressor not available [ 704.176594][T16760] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2167'. [ 706.641562][ T29] audit: type=1800 audit(1773029164.329:16): pid=16804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2180" name="features" dev="configfs" ino=76635 res=0 errno=0 [ 707.286084][T16822] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2183'. [ 707.411837][T16828] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2183'. [ 707.677864][T16828] veth0_macvtap: left promiscuous mode [ 707.718692][T16828] macvtap0: entered promiscuous mode [ 707.782864][T16828] macvtap0: entered allmulticast mode [ 710.341868][T16891] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 711.155056][T16924] netlink: 334 bytes leftover after parsing attributes in process `syz.7.2205'. [ 711.196320][T16921] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 711.267294][T16928] netlink: 354 bytes leftover after parsing attributes in process `syz.6.2203'. [ 711.397214][T16929] netlink: 186 bytes leftover after parsing attributes in process `syz.6.2203'. [ 713.386024][T16980] openvswitch: netlink: Multiple metadata blocks provided [ 714.104695][T16998] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2224'. [ 714.455054][T17003] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 715.367641][T17035] FAULT_INJECTION: forcing a failure. [ 715.367641][T17035] name failslab, interval 1, probability 0, space 0, times 0 [ 715.456495][T17035] CPU: 0 UID: 0 PID: 17035 Comm: syz.7.2232 Tainted: G U L syzkaller #0 PREEMPT(full) [ 715.456526][T17035] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 715.456532][T17035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 715.456543][T17035] Call Trace: [ 715.456549][T17035] [ 715.456556][T17035] dump_stack_lvl+0x100/0x190 [ 715.456584][T17035] should_fail_ex.cold+0x5/0xa [ 715.456603][T17035] should_failslab+0xc2/0x120 [ 715.456619][T17035] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 715.456641][T17035] ? __d_alloc+0x34/0xa80 [ 715.456662][T17035] __d_alloc+0x34/0xa80 [ 715.456677][T17035] ? security_inode_alloc+0xcf/0x2c0 [ 715.456701][T17035] d_alloc_pseudo+0x1c/0xc0 [ 715.456720][T17035] alloc_file_pseudo+0xcf/0x230 [ 715.456740][T17035] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 715.456758][T17035] ? security_inode_init_security_anon+0x7b/0x230 [ 715.456784][T17035] __do_sys_memfd_secret+0x11d/0x3d0 [ 715.456801][T17035] do_syscall_64+0x106/0xf80 [ 715.456818][T17035] ? clear_bhb_loop+0x40/0x90 [ 715.456836][T17035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.456851][T17035] RIP: 0033:0x7f6f1eb9c799 [ 715.456866][T17035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.456880][T17035] RSP: 002b:00007f6f1fb0d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 715.456895][T17035] RAX: ffffffffffffffda RBX: 00007f6f1ee15fa0 RCX: 00007f6f1eb9c799 [ 715.456906][T17035] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 715.456915][T17035] RBP: 00007f6f1ec32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 715.456924][T17035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 715.456932][T17035] R13: 00007f6f1ee16038 R14: 00007f6f1ee15fa0 R15: 00007ffdedd194f8 [ 715.456951][T17035] [ 716.785357][ T5835] Bluetooth: hci0: Unable to find connection for big 0xd2 [ 717.220436][T17058] FAULT_INJECTION: forcing a failure. [ 717.220436][T17058] name fail_futex, interval 1, probability 0, space 0, times 0 [ 717.283512][T17058] CPU: 0 UID: 0 PID: 17058 Comm: syz.2.2238 Tainted: G U L syzkaller #0 PREEMPT(full) [ 717.283540][T17058] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 717.283545][T17058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 717.283555][T17058] Call Trace: [ 717.283560][T17058] [ 717.283566][T17058] dump_stack_lvl+0x100/0x190 [ 717.283592][T17058] should_fail_ex.cold+0x5/0xa [ 717.283609][T17058] get_futex_key+0x107c/0x1620 [ 717.283629][T17058] ? __pfx_get_futex_key+0x10/0x10 [ 717.283644][T17058] ? lock_acquire+0x1cf/0x380 [ 717.283668][T17058] futex_wake+0xea/0x530 [ 717.283690][T17058] ? __pfx_futex_wake+0x10/0x10 [ 717.283710][T17058] ? exit_mm_release+0x19/0x30 [ 717.283733][T17058] do_futex+0x32b/0x350 [ 717.283771][T17058] ? __pfx_do_futex+0x10/0x10 [ 717.283788][T17058] ? __might_fault+0xc5/0x140 [ 717.283813][T17058] mm_release+0x24a/0x2f0 [ 717.283827][T17058] do_exit+0x704/0x2b60 [ 717.283849][T17058] ? __pfx_do_exit+0x10/0x10 [ 717.283869][T17058] ? do_raw_spin_lock+0x128/0x260 [ 717.283888][T17058] ? find_held_lock+0x2b/0x80 [ 717.283901][T17058] ? get_signal+0x7e0/0x21e0 [ 717.283918][T17058] do_group_exit+0xd5/0x2a0 [ 717.283937][T17058] get_signal+0x1ec7/0x21e0 [ 717.283959][T17058] ? __pfx_get_signal+0x10/0x10 [ 717.283974][T17058] ? do_futex+0x192/0x350 [ 717.283994][T17058] arch_do_signal_or_restart+0x91/0x770 [ 717.284013][T17058] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 717.284035][T17058] ? __pfx___x64_sys_futex+0x10/0x10 [ 717.284057][T17058] exit_to_user_mode_loop+0x86/0x4a0 [ 717.284078][T17058] do_syscall_64+0x668/0xf80 [ 717.284095][T17058] ? clear_bhb_loop+0x40/0x90 [ 717.284113][T17058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.284127][T17058] RIP: 0033:0x7f37e0d9c799 [ 717.284141][T17058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.284155][T17058] RSP: 002b:00007f37e1cca0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 717.284170][T17058] RAX: fffffffffffffe00 RBX: 00007f37e1015fa8 RCX: 00007f37e0d9c799 [ 717.284179][T17058] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f37e1015fa8 [ 717.284188][T17058] RBP: 00007f37e1015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 717.284197][T17058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 717.284206][T17058] R13: 00007f37e1016038 R14: 00007ffcd16a20a0 R15: 00007ffcd16a2188 [ 717.284224][T17058] [ 718.351359][T17079] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2241'. [ 719.833035][T17119] Invalid ELF header magic: != ELF [ 722.354138][T17192] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2259'. [ 722.408628][T17192] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2259'. [ 725.897113][T17288] futex_wake_op: syz.6.2276 tries to shift op by -2048; fix this program [ 726.099950][T17282] zswap: compressor not available [ 727.815076][T17345] sysfs_service_op_store: Client not running :-5: [ 727.873844][T17349] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2290'. [ 729.233238][T17371] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2297'. [ 730.720838][T17384] futex_wake_op: syz.2.2300 tries to shift op by -2048; fix this program [ 732.675024][T17412] netlink: 5200 bytes leftover after parsing attributes in process `syz.6.2310'. [ 732.721223][T17412] netlink: zone id is out of range [ 732.737766][T17412] netlink: zone id is out of range [ 732.797969][T17412] netlink: zone id is out of range [ 732.803108][T17412] netlink: zone id is out of range [ 732.908233][T17412] netlink: zone id is out of range [ 732.913372][T17412] netlink: zone id is out of range [ 732.944640][T17421] FAULT_INJECTION: forcing a failure. [ 732.944640][T17421] name failslab, interval 1, probability 0, space 0, times 0 [ 733.017974][T17421] CPU: 0 UID: 0 PID: 17421 Comm: syz.5.2313 Tainted: G U L syzkaller #0 PREEMPT(full) [ 733.018001][T17421] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 733.018007][T17421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 733.018015][T17421] Call Trace: [ 733.018021][T17421] [ 733.018027][T17421] dump_stack_lvl+0x100/0x190 [ 733.018053][T17421] should_fail_ex.cold+0x5/0xa [ 733.018072][T17421] should_failslab+0xc2/0x120 [ 733.018087][T17421] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 733.018110][T17421] ? shmem_symlink+0x287/0xa00 [ 733.018130][T17421] ? __pfx_simple_offset_add+0x10/0x10 [ 733.018149][T17421] kmemdup_noprof+0x29/0x60 [ 733.018171][T17421] shmem_symlink+0x287/0xa00 [ 733.018195][T17421] ? __pfx_shmem_symlink+0x10/0x10 [ 733.018215][T17421] ? security_inode_permission+0xbf/0x250 [ 733.018239][T17421] ? inode_permission+0x374/0x620 [ 733.018262][T17421] ? tomoyo_path_symlink+0x97/0xe0 [ 733.018286][T17421] vfs_symlink+0x178/0x4d0 [ 733.018307][T17421] filename_symlinkat+0x2a6/0x560 [ 733.018327][T17421] ? __pfx_filename_symlinkat+0x10/0x10 [ 733.018343][T17421] ? strncpy_from_user+0x19d/0x2d0 [ 733.018368][T17421] ? do_getname+0x191/0x390 [ 733.018387][T17421] __x64_sys_symlink+0x79/0xb0 [ 733.018404][T17421] do_syscall_64+0x106/0xf80 [ 733.018421][T17421] ? clear_bhb_loop+0x40/0x90 [ 733.018439][T17421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.018454][T17421] RIP: 0033:0x7fb8eef9c799 [ 733.018467][T17421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.018481][T17421] RSP: 002b:00007fb8efe0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 733.018496][T17421] RAX: ffffffffffffffda RBX: 00007fb8ef216090 RCX: 00007fb8eef9c799 [ 733.018505][T17421] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 733.018514][T17421] RBP: 00007fb8ef032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 733.018523][T17421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 733.018531][T17421] R13: 00007fb8ef216128 R14: 00007fb8ef216090 R15: 00007ffca6f89f38 [ 733.018550][T17421] [ 733.461774][T17412] netlink: zone id is out of range [ 733.477215][T17412] netlink: zone id is out of range [ 733.502691][T17412] netlink: zone id is out of range [ 733.522937][T17412] netlink: zone id is out of range [ 734.195550][T17429] FAULT_INJECTION: forcing a failure. [ 734.195550][T17429] name fail_futex, interval 1, probability 0, space 0, times 0 [ 734.250281][T17429] CPU: 0 UID: 0 PID: 17429 Comm: syz.5.2316 Tainted: G U L syzkaller #0 PREEMPT(full) [ 734.250312][T17429] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 734.250318][T17429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 734.250328][T17429] Call Trace: [ 734.250334][T17429] [ 734.250340][T17429] dump_stack_lvl+0x100/0x190 [ 734.250368][T17429] should_fail_ex.cold+0x5/0xa [ 734.250384][T17429] ? mt_find+0x687/0x8e0 [ 734.250404][T17429] get_futex_key+0x1d2/0x1620 [ 734.250426][T17429] ? __pfx_get_futex_key+0x10/0x10 [ 734.250442][T17429] ? __pfx_cmp_ex_search+0x10/0x10 [ 734.250462][T17429] ? search_extable+0x82/0xb0 [ 734.250480][T17429] ? __pfx_search_extable+0x10/0x10 [ 734.250501][T17429] futex_wait_setup+0x83/0x510 [ 734.250529][T17429] __futex_wait+0x19f/0x300 [ 734.250552][T17429] ? __pfx___futex_wait+0x10/0x10 [ 734.250577][T17429] ? __pfx_futex_wake_mark+0x10/0x10 [ 734.250601][T17429] ? futex_hash+0x2c5/0x380 [ 734.250623][T17429] futex_wait+0xed/0x380 [ 734.250645][T17429] ? __pfx_futex_wait+0x10/0x10 [ 734.250670][T17429] ? io_uring_setup+0xd7/0x160 [ 734.250766][T17429] do_futex+0x1ef/0x350 [ 734.250785][T17429] ? __pfx_do_futex+0x10/0x10 [ 734.250809][T17429] __x64_sys_futex+0x34f/0x4d0 [ 734.250832][T17429] ? __pfx___x64_sys_futex+0x10/0x10 [ 734.250859][T17429] do_syscall_64+0x106/0xf80 [ 734.250876][T17429] ? clear_bhb_loop+0x40/0x90 [ 734.250894][T17429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.250909][T17429] RIP: 0033:0x7fb8eef9c799 [ 734.250924][T17429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 734.250939][T17429] RSP: 002b:00007fb8efe2c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 734.250953][T17429] RAX: ffffffffffffffda RBX: 00007fb8ef215fa8 RCX: 00007fb8eef9c799 [ 734.250963][T17429] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb8ef215fa8 [ 734.250972][T17429] RBP: 00007fb8ef215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 734.250982][T17429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 734.250991][T17429] R13: 00007fb8ef216038 R14: 00007ffca6f89e50 R15: 00007ffca6f89f38 [ 734.251012][T17429] [ 734.474710][T17429] delete_channel: no stack [ 735.942258][T17440] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2318'. [ 736.014278][T17444] netlink: 13 bytes leftover after parsing attributes in process `syz.6.2318'. [ 736.827188][T17465] FAULT_INJECTION: forcing a failure. [ 736.827188][T17465] name failslab, interval 1, probability 0, space 0, times 0 [ 736.979927][T17465] CPU: 0 UID: 0 PID: 17465 Comm: syz.7.2324 Tainted: G U L syzkaller #0 PREEMPT(full) [ 736.979957][T17465] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 736.979963][T17465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 736.979974][T17465] Call Trace: [ 736.979979][T17465] [ 736.979986][T17465] dump_stack_lvl+0x100/0x190 [ 736.980014][T17465] should_fail_ex.cold+0x5/0xa [ 736.980033][T17465] should_failslab+0xc2/0x120 [ 736.980049][T17465] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 736.980073][T17465] ? __d_alloc+0x34/0xa80 [ 736.980093][T17465] __d_alloc+0x34/0xa80 [ 736.980112][T17465] d_alloc_parallel+0x111/0x14e0 [ 736.980139][T17465] ? find_held_lock+0x2b/0x80 [ 736.980153][T17465] ? __d_lookup+0x25c/0x4a0 [ 736.980174][T17465] ? __pfx_d_alloc_parallel+0x10/0x10 [ 736.980197][T17465] ? __d_lookup+0x266/0x4a0 [ 736.980222][T17465] lookup_open.isra.0+0x57c/0x11b0 [ 736.980248][T17465] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 736.980281][T17465] ? mnt_get_write_access+0x1e9/0x2f0 [ 736.980304][T17465] path_openat+0xa98/0x31a0 [ 736.980325][T17465] ? __pfx_path_openat+0x10/0x10 [ 736.980348][T17465] do_file_open+0x20e/0x430 [ 736.980365][T17465] ? __pfx_do_file_open+0x10/0x10 [ 736.980394][T17465] ? alloc_fd+0x476/0x790 [ 736.980410][T17465] ? do_getname+0x191/0x390 [ 736.980435][T17465] do_sys_openat2+0x10d/0x1e0 [ 736.980456][T17465] ? __pfx_do_sys_openat2+0x10/0x10 [ 736.980481][T17465] ? __fget_files+0x21f/0x3d0 [ 736.980500][T17465] __x64_sys_openat+0x12d/0x210 [ 736.980520][T17465] ? __pfx___x64_sys_openat+0x10/0x10 [ 736.980547][T17465] do_syscall_64+0x106/0xf80 [ 736.980565][T17465] ? clear_bhb_loop+0x40/0x90 [ 736.980584][T17465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.980598][T17465] RIP: 0033:0x7f6f1eb9c799 [ 736.980613][T17465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.980627][T17465] RSP: 002b:00007f6f1faec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 736.980642][T17465] RAX: ffffffffffffffda RBX: 00007f6f1ee16090 RCX: 00007f6f1eb9c799 [ 736.980653][T17465] RDX: 000000000000a001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 736.980664][T17465] RBP: 00007f6f1ec32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 736.980676][T17465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 736.980685][T17465] R13: 00007f6f1ee16128 R14: 00007f6f1ee16090 R15: 00007ffdedd194f8 [ 736.980706][T17465] [ 737.916676][T17476] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2329'. [ 737.967611][T17476] netlink: 25 bytes leftover after parsing attributes in process `syz.5.2329'. [ 738.551191][T17483] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 738.793437][T17483] File: /dev/nullb0 PID: 17483 Comm: syz.6.2328 [ 738.853943][ T29] audit: type=1800 audit(1773029196.529:17): pid=17503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2336" name="dbroot" dev="configfs" ino=79805 res=0 errno=0 [ 740.401033][T17526] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2341'. [ 740.605815][T17531] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2343'. [ 740.654059][T17531] netlink: 25 bytes leftover after parsing attributes in process `syz.7.2343'. [ 741.835428][T17562] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2354'. [ 741.881156][T17562] netlink: 25 bytes leftover after parsing attributes in process `syz.5.2354'. [ 741.947237][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 741.957599][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 741.965708][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 741.973866][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 741.981583][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 742.642138][T11534] ------------[ cut here ]------------ [ 742.648193][T11534] ODEBUG: free active (active state 0) object: ffff888033a01460 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 742.661529][T11534] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#0: syz.2.1173/11534 [ 742.672354][T11534] Modules linked in: [ 742.676286][T11534] CPU: 0 UID: 0 PID: 11534 Comm: syz.2.1173 Tainted: G U L syzkaller #0 PREEMPT(full) [ 742.687536][T11534] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 742.692715][T11534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 742.702973][T11534] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 742.709464][T11534] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d a2 94 e8 0b 41 56 48 8b 14 dd e0 0a 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 ec 35 de 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 742.729210][T11534] RSP: 0018:ffffc90006e67708 EFLAGS: 00010246 [ 742.735416][T11534] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 742.743374][T11534] RDX: ffffffff8c1b0a20 RSI: ffffffff8c1b0640 RDI: ffffffff90e45e90 [ 742.752033][T11534] RBP: 0000000000000001 R08: ffff888033a01460 R09: ffffffff8bb2b860 [ 742.760648][T11534] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b0640 [ 742.768913][T11534] R13: ffffffff8bb2b8a0 R14: ffffffff8a95d1a0 R15: ffffc90006e67808 [ 742.777066][T11534] FS: 0000000000000000(0000) GS:ffff88812434b000(0000) knlGS:0000000000000000 [ 742.786090][T11534] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 742.792970][T11534] CR2: 00007f6f1ebe9e80 CR3: 0000000020f52000 CR4: 00000000003526f0 [ 742.801152][T11534] Call Trace: [ 742.804434][T11534] [ 742.807402][T11534] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 742.812851][T11534] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 742.818674][T11534] debug_check_no_obj_freed+0x4da/0x630 [ 742.824218][T11534] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 742.830336][T11534] ? __page_table_check_zero+0x333/0x410 [ 742.835999][T11534] ? __page_table_check_zero+0x338/0x410 [ 742.841620][T11534] __free_frozen_pages+0x392/0x10d0 [ 742.846861][T11534] hci_release_dev+0x4ef/0x630 [ 742.852112][T11534] ? __pfx_hci_release_dev+0x10/0x10 [ 742.857744][T11534] ? device_release+0x69/0x240 [ 742.862501][T11534] ? rcu_is_watching+0x12/0xc0 [ 742.867536][T11534] ? device_release+0x69/0x240 [ 742.872287][T11534] ? kfree+0x2ec/0x6b0 [ 742.876568][T11534] bt_host_release+0x6a/0xb0 [ 742.881159][T11534] ? __pfx_bt_host_release+0x10/0x10 [ 742.886519][T11534] device_release+0xa4/0x240 [ 742.891364][T11534] kobject_put+0x1f7/0x640 [ 742.895981][T11534] put_device+0x1f/0x30 [ 742.900131][T11534] vhci_release+0x185/0x230 [ 742.904617][T11534] ? __pfx_vhci_release+0x10/0x10 [ 742.909672][T11534] __fput+0x3ff/0xb40 [ 742.913647][T11534] task_work_run+0x150/0x240 [ 742.918273][T11534] ? __pfx_task_work_run+0x10/0x10 [ 742.923380][T11534] do_exit+0x8b8/0x2b60 [ 742.927562][T11534] ? __pfx_do_exit+0x10/0x10 [ 742.932159][T11534] ? do_raw_spin_lock+0x128/0x260 [ 742.937244][T11534] ? find_held_lock+0x2b/0x80 [ 742.941908][T11534] ? get_signal+0x7e0/0x21e0 [ 742.946524][T11534] do_group_exit+0xd5/0x2a0 [ 742.951020][T11534] get_signal+0x1ec7/0x21e0 [ 742.956024][T11534] ? __pfx___handle_mm_fault+0x10/0x10 [ 742.961495][T11534] ? __pfx_get_signal+0x10/0x10 [ 742.967028][T11534] ? do_futex+0x192/0x350 [ 742.971365][T11534] arch_do_signal_or_restart+0x91/0x770 [ 742.977230][T11534] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 742.983387][T11534] ? __pfx___x64_sys_futex+0x10/0x10 [ 742.988815][T11534] exit_to_user_mode_loop+0x86/0x4a0 [ 742.994359][T11534] do_syscall_64+0x668/0xf80 [ 742.999160][T11534] ? clear_bhb_loop+0x40/0x90 [ 743.003829][T11534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.009750][T11534] RIP: 0033:0x7f37e0d9c799 [ 743.014147][T11534] Code: Unable to access opcode bytes at 0x7f37e0d9c76f. [ 743.021184][T11534] RSP: 002b:00007f37e1ca90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 743.029642][T11534] RAX: fffffffffffffe00 RBX: 00007f37e1016098 RCX: 00007f37e0d9c799 [ 743.037616][T11534] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f37e1016098 [ 743.045601][T11534] RBP: 00007f37e1016090 R08: 0000000000000000 R09: 0000000000000000 [ 743.053579][T11534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 743.062111][T11534] R13: 00007f37e1016128 R14: 00007ffcd16a20a0 R15: 00007ffcd16a2188 [ 743.070843][T11534] [ 743.073882][T11534] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 743.081157][T11534] CPU: 0 UID: 0 PID: 11534 Comm: syz.2.1173 Tainted: G U L syzkaller #0 PREEMPT(full) [ 743.092076][T11534] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 743.097250][T11534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 743.107287][T11534] Call Trace: [ 743.110551][T11534] [ 743.113466][T11534] dump_stack_lvl+0x100/0x190 [ 743.118134][T11534] vpanic+0x552/0x970 [ 743.122099][T11534] ? __pfx_vpanic+0x10/0x10 [ 743.126588][T11534] panic+0xd1/0xe0 [ 743.130291][T11534] ? __pfx_panic+0x10/0x10 [ 743.134694][T11534] ? check_panic_on_warn+0x1f/0x90 [ 743.139793][T11534] check_panic_on_warn.cold+0x19/0x34 [ 743.145148][T11534] ? debug_print_object+0x18e/0x2a0 [ 743.150336][T11534] __warn.cold+0x191/0x348 [ 743.154735][T11534] __report_bug+0x296/0x3d0 [ 743.159225][T11534] ? debug_print_object+0x18e/0x2a0 [ 743.164412][T11534] ? __pfx___report_bug+0x10/0x10 [ 743.169428][T11534] ? unwind_next_frame+0x3c8/0x1ea0 [ 743.174613][T11534] report_bug_entry+0xe1/0x290 [ 743.179367][T11534] ? debug_print_object+0x19b/0x2a0 [ 743.184553][T11534] handle_bug+0x1cd/0x2a0 [ 743.188870][T11534] exc_invalid_op+0x17/0x50 [ 743.193358][T11534] asm_exc_invalid_op+0x1a/0x20 [ 743.198192][T11534] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 743.204007][T11534] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d a2 94 e8 0b 41 56 48 8b 14 dd e0 0a 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 ec 35 de 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 743.223615][T11534] RSP: 0018:ffffc90006e67708 EFLAGS: 00010246 [ 743.229667][T11534] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 743.237630][T11534] RDX: ffffffff8c1b0a20 RSI: ffffffff8c1b0640 RDI: ffffffff90e45e90 [ 743.245584][T11534] RBP: 0000000000000001 R08: ffff888033a01460 R09: ffffffff8bb2b860 [ 743.253536][T11534] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b0640 [ 743.261493][T11534] R13: ffffffff8bb2b8a0 R14: ffffffff8a95d1a0 R15: ffffc90006e67808 [ 743.269446][T11534] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 743.274901][T11534] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 743.280339][T11534] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 743.286131][T11534] debug_check_no_obj_freed+0x4da/0x630 [ 743.291672][T11534] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 743.297727][T11534] ? __page_table_check_zero+0x333/0x410 [ 743.303345][T11534] ? __page_table_check_zero+0x338/0x410 [ 743.308982][T11534] __free_frozen_pages+0x392/0x10d0 [ 743.314191][T11534] hci_release_dev+0x4ef/0x630 [ 743.318952][T11534] ? __pfx_hci_release_dev+0x10/0x10 [ 743.324225][T11534] ? device_release+0x69/0x240 [ 743.328973][T11534] ? rcu_is_watching+0x12/0xc0 [ 743.333726][T11534] ? device_release+0x69/0x240 [ 743.338473][T11534] ? kfree+0x2ec/0x6b0 [ 743.342529][T11534] bt_host_release+0x6a/0xb0 [ 743.347105][T11534] ? __pfx_bt_host_release+0x10/0x10 [ 743.352373][T11534] device_release+0xa4/0x240 [ 743.356951][T11534] kobject_put+0x1f7/0x640 [ 743.361358][T11534] put_device+0x1f/0x30 [ 743.365500][T11534] vhci_release+0x185/0x230 [ 743.369983][T11534] ? __pfx_vhci_release+0x10/0x10 [ 743.374990][T11534] __fput+0x3ff/0xb40 [ 743.378976][T11534] task_work_run+0x150/0x240 [ 743.383559][T11534] ? __pfx_task_work_run+0x10/0x10 [ 743.388662][T11534] do_exit+0x8b8/0x2b60 [ 743.392832][T11534] ? __pfx_do_exit+0x10/0x10 [ 743.397419][T11534] ? do_raw_spin_lock+0x128/0x260 [ 743.402432][T11534] ? find_held_lock+0x2b/0x80 [ 743.407088][T11534] ? get_signal+0x7e0/0x21e0 [ 743.411660][T11534] do_group_exit+0xd5/0x2a0 [ 743.416151][T11534] get_signal+0x1ec7/0x21e0 [ 743.420639][T11534] ? __pfx___handle_mm_fault+0x10/0x10 [ 743.426087][T11534] ? __pfx_get_signal+0x10/0x10 [ 743.430920][T11534] ? do_futex+0x192/0x350 [ 743.435237][T11534] arch_do_signal_or_restart+0x91/0x770 [ 743.440770][T11534] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 743.446911][T11534] ? __pfx___x64_sys_futex+0x10/0x10 [ 743.452194][T11534] exit_to_user_mode_loop+0x86/0x4a0 [ 743.457467][T11534] do_syscall_64+0x668/0xf80 [ 743.462062][T11534] ? clear_bhb_loop+0x40/0x90 [ 743.466727][T11534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.472602][T11534] RIP: 0033:0x7f37e0d9c799 [ 743.477000][T11534] Code: Unable to access opcode bytes at 0x7f37e0d9c76f. [ 743.483994][T11534] RSP: 002b:00007f37e1ca90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 743.492390][T11534] RAX: fffffffffffffe00 RBX: 00007f37e1016098 RCX: 00007f37e0d9c799 [ 743.500348][T11534] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f37e1016098 [ 743.508303][T11534] RBP: 00007f37e1016090 R08: 0000000000000000 R09: 0000000000000000 [ 743.516257][T11534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 743.524215][T11534] R13: 00007f37e1016128 R14: 00007ffcd16a20a0 R15: 00007ffcd16a2188 [ 743.532185][T11534] [ 743.535275][T11534] Kernel Offset: disabled [ 743.539587][T11534] Rebooting in 86400 seconds..