last executing test programs: 2m16.297048631s ago: executing program 1 (id=1960): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram12\x00', 0x503900, 0x0) mmap$auto(0x0, 0x810004, 0x9, 0x8000000008015, 0x3, 0x0) madvise$auto(0x10000000, 0x5, 0x9) madvise$auto(0x110c230000, 0x2, 0x3) write$auto(r0, 0x0, 0x6) msgctl$auto_IPC_STAT(0x1, 0x2, &(0x7f00000000c0)={{0x5, 0x0, 0x0, 0xa8f1, 0x3, 0x5, 0x7}, 0x0, 0x0, 0xfffffffffffffffd, 0x20000080000001, 0x80000001, 0x3, 0x4, 0x8003, 0x10, 0xfff8, @raw=0x400, @raw=0xbc}) mmap$auto(0x0, 0x400008, 0x6, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_COOKIE(r1, 0x1, 0x39, 0x0, &(0x7f0000005b00)=0x7) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyS2\x00', 0x280, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(r2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x94003, 0x0) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x80002, 0x0) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) mmap$auto(0x0, 0x20009, 0xdd, 0xeb1, 0xffffffffffffffff, 0x8) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) socket(0x23, 0x800, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) socket(0x2b, 0x1, 0x0) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) 2m14.993392782s ago: executing program 1 (id=1967): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = mq_open$auto(&(0x7f0000000040)='ovs_\x1f\x00', 0x9, 0x5, &(0x7f00000000c0)={0xb83, 0x1, 0x3}) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/rxrpc/peers\x00', 0x1014a0, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r3 = socket(0xa, 0x2, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x240202, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x3) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000002c0), r1) sendmsg$auto_NFC_CMD_START_POLL(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r7, @ANYBLOB="01002cbd7000fcdbdf250600000005000c000c008000bc001f00ac101b22dd79037bd4b637575433740ec7c94046fbe46699da69f8a7caab4a77f1e6f323e09b60b99fa6324bd36c03c33583aaa54d5232d5e09581ea669ef13398fa8ee7661052ebd59019166d47022c3bbced640a816acafe035e3c8eb9abe9a3e8e66496745aa517659d67e336658cfb48e625f76f07af053b511bf65793ac50182b54c0dd5ed6cf74c37032ee522185a71ab3ffc3ae1a8dabe3b3f66c33b50a51e18494d596aeea3a921eded9f369179a320a48f5f2b4fe5e47f7d910080003000500000008001d000e000000"], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x44010) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r4, 0x4004ae86, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000000)=""/223, 0xdf) rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x2, 0xb, @old_prog_fd=0x13b}, 0xa3) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty6\x00', 0x14400, 0x0) ioctl$auto(r8, 0x80045430, r8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim2/new_port\x00', 0x183a41, 0x0) writev$auto(r9, &(0x7f00000002c0)={&(0x7f0000000480)='4r', 0x5}, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto(0x1, 0x541b, 0x8) 2m13.177526698s ago: executing program 1 (id=1978): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) unshare$auto(0x4f) r1 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x121102, 0x0) read$auto_vhci_fops_hci_vhci(r1, &(0x7f0000000d40)=""/16, 0x10) writev$auto(0xffffffffffffffff, 0x0, 0x3) openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000100), 0x290801, 0x0) bpf$auto_BPF_MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)=@prog_bind_map={r1, r1, 0x8}, 0x7fff) unshare$auto(0x6c000000) mmap$auto(0x8000000, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) clock_gettime$auto(0x6, 0x0) write$auto_fops_init_pkru_pkeys(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) select$auto(0xfffffff9, &(0x7f0000000080)={[0x4, 0x1000003, 0x3ff, 0x3, 0x6, 0x6, 0x0, 0x1ffe000, 0xcad, 0x2, 0x31d024e5, 0xf, 0x3, 0x400203, 0x0, 0xd]}, 0x0, 0x0, 0x0) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x20201, 0x0) r2 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0xb) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0xf, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) mmap$auto(0x0, 0x400005, 0x10001, 0x9b72, r1, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r3, 0x8000) fdatasync$auto(r3) madvise$auto(0x100000001, 0x8, 0x8) madvise$auto(0x0, 0x400053, 0x9) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer\x00', 0x80102, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x4000003, 0xeb1, 0xfffffffffffffffa, 0x8000) pread64$auto(0xffffffffffffffff, &(0x7f0000000400)='\\\x00', 0xffff, 0x1) ioctl$auto(0x3, 0x40081271, r2) 2m9.878124853s ago: executing program 1 (id=1994): clone3$auto(&(0x7f0000000000)={0xb2c7, 0x7, 0x5, 0x10200000, 0x9, 0x200, 0x52, 0xff, 0x0, 0xb, 0xd}, 0x5) (async) r0 = socket(0x18, 0x5, 0x1) connect$auto(r0, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) close_range$auto(0x2, 0xa, 0x0) (async) r1 = socket(0xa, 0x3, 0x2) (async) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="13002ebd7000fbdbdf250a00000008000300", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001a80), r9) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001ac0)={'veth0_to_hsr\x00', 0x0}) sendmsg$auto_NETDEV_CMD_DEV_GET(r9, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="01002abd7000fedbdf250100000008000100", @ANYRES32=r11, @ANYBLOB="300200aae9ed6ed366647ad9a2e455176c581c89a2e2ac65ba480fbd372c7236778f41c045b28376ace21f083e27afcc50a7d0d63615f8a8930ccc63501a90939fa2c81d83f5ad0c372c89193f7669c27576313387a0388bc2719bc086c75d89534511c21fd513ad9bc9f4350ba26f56c122240c1e7e772df3874493c3c137eeb8980a83534c63c2bd7fd4069bd7e3ec21334948208c4637011604a32d12856195ef55af24621d6668d320caee1a90cbc6fc306f73d306033e5ced00b10de437e863a69fe1f65e3577242187"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000028bd7000ffdbdf25110000000c00018008000100", @ANYRES32=r3, @ANYBLOB="5c000180080003000200000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="1400020076657468315f766972745f7769666900140002006970366772653000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="08005c121d947a8e6675320e77d43de926000200000048004300070000000169648d8262046a411e82146d92d15645b1c276e7d8d41436a625ccbc89d39ba320c6791c53e8ee0bc7e14460fb378847f00eafa61042863f8bafd5fbbaa8010581bbfd849e0d2cf58f69d3b5af70c50274ddb843876a1e179c"], 0x7c}, 0x1, 0x0, 0x0, 0x2800}, 0x20000040) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) r13 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r13, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r13) (async) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) getpriority$auto_PRIO_PGRP(0x1, 0x0) (async) r14 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="200026bd7000fedbdf252400000005001500084400001f001600e121614a13aad0c2e4ffde1f6086e6a42fde6ba40164249cff60a700050023005400000005001a000b000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000885}, 0x5) (async) sendmsg$auto_IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r14, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x19}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x400}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x1) (async) ioctl$auto_KVM_GET_DEVICE_ATTR(r12, 0x4018aee2, &(0x7f0000001400)={0x6, 0x0, 0x2, 0xff}) 2m9.727796912s ago: executing program 1 (id=1996): unshare$auto(0x40000080) r0 = clone$auto(0x7, 0x7, 0x0, 0x0, 0xfffffffc) r1 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) read$auto_state_fops_(r1, &(0x7f0000000180)=""/61, 0xfffffeeb) timer_create$auto_CLOCK_TAI(0xb, &(0x7f0000000100)={@sival_int=0x7cb4, @raw=0x7f172694, 0x4, @_tid=r0}, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000000040)=""/36, 0x24) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0x694, 0x200000000009b72, r3, 0x28000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x4001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r5, 0x0, 0x100000a3d9) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x20a00, 0x0) r6 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r6, 0x40186f40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_UBI_IOCDET(r6, 0x40046f41, 0x0) ioctl$auto_UBI_IOCDET(r6, 0x40046f41, 0x0) ioctl$auto_BLKGETNRZONES(0xffffffffffffffff, 0x80041285, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$auto(0x3, 0x0, 0x4b34) sendmsg$auto_TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x48010) write$auto(r4, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x1, 0x62, 0x8, 0x7, 0x6d3f, 0x5, 0xa, 0xfffffffffffffffe]}, 0x0) prctl$auto(0xce, 0xfffffffffffffffc, r2, 0x3, 0x2) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) 2m7.716498129s ago: executing program 1 (id=2007): socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) timer_settime$auto(0x1, 0x3, 0x0, 0x0) socket(0x10, 0x3, 0xb) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = socket(0xa, 0x3, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r0, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r0, 0x400454ca, 0x38) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyu3\x00', 0x481500, 0x0) ioctl$auto(r2, 0x4bfa, 0x9) r3 = fcntl$getown(r0, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000080), r1) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={0x0, 0x110}, 0x1, 0x0, 0x0, 0x8051}, 0x4040) prctl$auto(0x79, 0x7, r3, 0x4d, 0x1) getrlimit$auto(0x80, 0x0) ioctl$auto_TUNSETVNETLE2(r0, 0x400454dc, 0x0) ioctl$auto_TUNSETPERSIST(r0, 0x400454cb, &(0x7f0000000280)) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x3, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x0, 0xffffeffe, 0x2) socket(0xa, 0x1, 0x84) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x8d}, 0x7}, 0xb8ad, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) 1m52.356057978s ago: executing program 32 (id=2007): socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) timer_settime$auto(0x1, 0x3, 0x0, 0x0) socket(0x10, 0x3, 0xb) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = socket(0xa, 0x3, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r0, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r0, 0x400454ca, 0x38) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyu3\x00', 0x481500, 0x0) ioctl$auto(r2, 0x4bfa, 0x9) r3 = fcntl$getown(r0, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000080), r1) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={0x0, 0x110}, 0x1, 0x0, 0x0, 0x8051}, 0x4040) prctl$auto(0x79, 0x7, r3, 0x4d, 0x1) getrlimit$auto(0x80, 0x0) ioctl$auto_TUNSETVNETLE2(r0, 0x400454dc, 0x0) ioctl$auto_TUNSETPERSIST(r0, 0x400454cb, &(0x7f0000000280)) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x3, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x0, 0xffffeffe, 0x2) socket(0xa, 0x1, 0x84) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x8d}, 0x7}, 0xb8ad, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) 42.049893091s ago: executing program 0 (id=2347): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) unshare$auto(0x4f) r1 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x121102, 0x0) read$auto_vhci_fops_hci_vhci(r1, &(0x7f0000000d40)=""/16, 0x10) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000100), 0x290801, 0x0) bpf$auto_BPF_MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)=@prog_bind_map={r1, r1, 0x8}, 0x7fff) unshare$auto(0x67000000) mmap$auto(0x8000000, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) clock_gettime$auto(0x6, 0x0) write$auto_fops_init_pkru_pkeys(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) select$auto(0xfffffff9, &(0x7f0000000080)={[0x4, 0x1000003, 0x3ff, 0x3, 0x6, 0x6, 0x0, 0x1ffe000, 0xcad, 0x2, 0x31d024e5, 0xf, 0x3, 0x400203, 0x0, 0xd]}, 0x0, 0x0, 0x0) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x20201, 0x0) r2 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0xb) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0xf, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) mmap$auto(0x0, 0x400005, 0x10001, 0x9b72, r1, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r3, 0x8000) fdatasync$auto(r3) madvise$auto(0x100000001, 0x8, 0x8) madvise$auto(0x0, 0x400053, 0x9) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer\x00', 0x80102, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x4000003, 0xeb1, 0xfffffffffffffffa, 0x8000) pread64$auto(0xffffffffffffffff, &(0x7f0000000400)='\\\x00', 0xffff, 0x1) ioctl$auto(0x3, 0x40081271, r2) 41.040796803s ago: executing program 0 (id=2351): mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x200008, 0x100019, 0x0, @raw=0x8000000000000001}, 0x283) r0 = prctl$auto_PR_SET_MM_END_DATA(0x3, 0x4, 0x0, 0x5, 0x4a2bdd7a) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10700, 0x0, 0x0) semtimedop$auto(0x7, &(0x7f0000000140)={0x9, 0x7, 0x3ff}, 0x40, &(0x7f0000000180)={0x8000000000000000, 0x7f}) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) connect$auto(0x3, 0x0, 0x54) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x40000c, 0x45bd, 0x9b72, 0x2, 0x8000) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) write$auto_sg_fops_sg(r1, &(0x7f0000001380)="4a0200000000040000899edb615550fd8c44924d87f0010047eb02eff5d2adc245a4e1eded0e91b86c61b6b42ed6", 0x2e) ioctl$auto_SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000040)) read$auto_i2cdev_fops_i2c_dev(r0, &(0x7f0000000000)=""/213, 0xd5) setuid$auto(0xe) bpf$auto(0x5, &(0x7f0000001100)=@bpf_attr_0={0x6, 0xf, 0x4e, 0x7, 0xa00, 0xffffffffffffffff, 0x6780, "e1cccd8b7b65ff56d28b2db982e6a0a3", 0x0, 0xffffffffffffffff, 0x5, 0x1000, 0x5, 0x4}, 0x2) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/dummy0/proto_down\x00', 0x60282, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) 39.397824694s ago: executing program 0 (id=2356): r0 = bpf$auto_BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000280), r0) sendmsg$auto_KSMBD_EVENT_TREE_CONNECT_REQUEST(r0, &(0x7f0000000980)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r1, 0x100, 0x70bd29, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040014}, 0x8000) (async, rerun: 64) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) (rerun: 64) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r0, &(0x7f00000008c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000300)={0x56c, r2, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_FILS_NONCES={0x5c, 0xf3, "4952baada18088dced7d7cd006f29d4e47b6b663611ae39da654e5021304849b41f855cc4f1baba1cc73e9ced4e9e80aafeb0173935516f6e9377fcf6a620b3bda11866c8580cc760ab2f37c59fcb59302a2c9ef0384cca5"}, @NL80211_ATTR_QOS_MAP={0x49, 0xc7, "6766a2fcd97e93e0db5d10fce0e492f8d2cc31d81c12570d3e77c4307d8d7a82f8e93b3d25b91feb6b618cb285263da339d13f4a51120121ca27daee24f178a4a5dc77487b"}, @NL80211_ATTR_BEACON_TAIL={0x4ad, 0xf, "9797c6ef09fdb7a00e804df12940653c699b9f3db5c069a38c35f7f48f5690c4cef73c4fbadee0fe788e84c6ba6b211ca83b121059d281ac0bf5f362f88cd554ae25b4105708c5179584c934d7e01df9f6f443b70260108535941f2f38db9a233edd6586e93db48ff627d59d2e831470b1df14faeeda323bfdf0181a6882e240d4fd76751b297ffb18335f0745b946faa3e3cd87321fd1e0c9da7d8624146ebbe184b851613d67d20929c5d03b09c13f15fad8358a0492b38303c14444855844e55ef47f90a9a8dc01e642d421eaf24898559abc114b089de2e9e1d1a63a0d034e034664bd1fb923f96d4e5a2b1edca92a169282f089b7035d368c640b3d17cc45fd20a532409d4e07b2ad65ef7d3ffa264630700352d7ded6a7baf448f2551d2f4d7cb1a76ea735b05a47d8709cde2eb830957b3f3a75b23dadb4c81215211cbf55859618844ffd19431faab28635095f3b76c961764f8ff9a7ba3346685859df45819faf1345d7ebdcaa6d0a5b6f3f2b5c0ed5928ba7ce56990b3f97b996d4a7499c463aafbd9d4473daf7f6e71a6f651b0ae8f09194803b2206bef835a06c0362700c8d45b7756a40ab2ff3da35e32f1924e2a9ab90217faaa94dac29863e101cec7584d2bb4917e51da5e1ebda3d46f862781ad1a1fea95102ee75ee5ddc176c3f83c6c0370910763ef8c790718cd2b86651a09731408f7fed1ad136d1cf2684134815f22c81f361ba580a30ae16cbf542880bd53c76cd9a9289c2007a1fdeb83e023d342bf3f12db4f96b0d22d3aaa9cf749be3accdeecf45b339fd4e6354f6d3cf4d7e85c6c43ece7eefec04450d38fa2a738fccca8740a868d2e060cda0262a7fc719165e0f4799e474aba4c2f47f82376019b7d10ce2d139c39a1f3d3668abc9b373891f5dda5fc6abb9d53f0fb959f618bc5cc99238d5d283cb3bc8951a2b62f0b6a92a040456dd9e152e96614719726c9dcbed09896fe30b8dfe73c1959f0e205d3a87495548d8d1c099371d2416db50b70eb83930ff8627c32bae3bbc6d7ea199cdb931085848a7bce900c0e4f471a398a000e38dfc630c364c52118a0ac78f076a3a69544f29239375e7caffb99d4da7a6b084b4a5ffdd62749374bf74d231b3b13e5d0f6fb473b548127479754f4e45d20eddd3fe5b33791071d6f10e8c945506a63a3c2a71d216a7797ae778c4580582e3fc51a3d9bb07b949432ddd2c6b10ded47d35a697e511da8613d0972ed29ef8ed05ca3be1d7c9c9d40f71312aa5074e672b54ba42d6a2c9d76dcce3eb032926c6cc11a271dcccd59595954f727b68b9750cb1e28858b9d49a030be48dd84045a2d2bf389d46f66f0ddbe2e7c985b174b6cab4f67a3e7bcd29cfcf6a3199c72c90205595df9168954081ba6b518a0e54532c1328f56d413391c946a45e10351a09dc37c6507d4728ed6330f081b75b0d0a408fbdf03e42197c6b366db3732029e9e412a1fb52a9d18504b6753d7008f1be95a25986eab8a0bb8cd7388ea4d2b15a905ffde4a3d1925f7fb4fc3c10854ee2841ccbc6eba506e32a3c43ae24c59595252856fca7a4e6cdfd8d2f8db784867544b7a9ad0a6a1d853f85b5e801a887ab6f0fbe68986031b93f52d3d463fd92e91abac4a7eefa9c747ddfe6cc0d51d43c367008f43f24061dce419b316a88efeb04"}]}, 0x56c}}, 0x800c011) (async) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x2000800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) (async) r4 = socket(0x18, 0x5, 0x1) connect$auto(r4, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) (async) connect$auto(r4, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 39.128208387s ago: executing program 0 (id=2358): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x20000, 0x0) pread64$auto(r0, 0x0, 0x6f, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x123801, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000009c0)={{@inferred, 0xd252, 0x9, 0x2, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000000000000000000030400", @raw=0xfffffff7}, 0x4, 0x2000963, 0x2, @raw, @reserved="b20200a3077300f2c167afeb0a9902da3d58908ea1a8475fbd3a75d4690e48fc922df5fdffffffffffffffdbb68aec3f51e29bc18b59d74badbdcc1ba97a2004117190c9a050186fa73f5a197762a94460d134b357b8b4d0caaf1ca142917779cef3673ee57f2f5fde573fa4d4328a8ea0be7eccec0adb4f64290e53d4faa89d", "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1cb04b435b3fcd0c7c61c329794e5311121c760cb9611c78e6947a99806bcc100"}) mremap$auto(0x4000000000000000, 0x4, 0x4, 0x7, 0x100000000) unshare$auto(0x40000080) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x400000100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) mmap$auto(0x1000, 0x7f, 0x3, 0xebf, r1, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC0\x00', 0x80, 0x0) r3 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r3, 0x0, 0x1) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001400)='ns/mnt\x00') ioctl$NS_GET_PARENT(r4, 0x8008b705, 0x0) capget$auto(&(0x7f0000000040), &(0x7f0000000100)={0x4, 0x3, 0xf}) ioctl$auto(r2, 0x0, r4) r5 = openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/options/event-fork\x00', 0x2000, 0x0) read$auto_trace_options_core_fops_trace(r5, 0x0, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0x8a001, 0x0) write$auto(r6, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) madvise$auto(0x0, 0x2003f2, 0x15) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x5, 0x0, 0x9, 0x8, 0x4, 0x5, 0xffffffffffffffff, [], {0x9, 0x6, 0x6, 0x39f, 0x5, 0x7f, 0x101, 0x4000006, 0x4000002000}, {0x100, 0x3e4f, 0x101, 0x5, 0x2, 0x105, 0x8, 0x8, 0x100000002}}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r2) fsconfig$auto_XFS_DAX_INODE(r0, 0x6e9, &(0x7f00000005c0)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', &(0x7f0000000800)="de92a2a01f2eac4bf0c6b8c2fc738c123ffb35b280e1be4537c60b0f5db5ea636c6cf95b549a99441c831d52dce08452e527ee64e1aa4d5415336a20648339a45ff93defd1652e52557afa9330c013ce85a2e6614ccc203cde07ba1c83976d349334dacf55c7703b9d50bc73f1bde489cef52b8f8e0424ac63c8", 0x0) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x231, 0x400008, 0x5, 0x14, r4, 0x7) sched_getattr$auto(0x0, 0x0, 0x68, 0x0) 38.48522351s ago: executing program 0 (id=2362): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)=@bpf_attr_1={0xffffffffffffffff, 0x21f, @next_key=0x2f17, 0xff}, 0x6) r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000140)={0x2c, r0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0x18, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x14, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r3, 0x4068aea3, 0x0) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) preadv2$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x80000000009}, 0x6, 0xffffffffffffffff, 0x3ffff, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/lru_gen_full\x00', 0x404002, 0x0) ioctl$auto(0x3, 0x402c542d, r4) write$auto(0x3, 0x0, 0xfffffdef) 36.828092094s ago: executing program 0 (id=2369): mmap$auto(0x0, 0x2020009, 0x7, 0x2000000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="6e515ed124a0fe8ed198ba40d0c3edd0a16ea41e", @ANYRES16=r1, @ANYBLOB="00022abd7000fcdbdf255f0000000400050108007700f8ffffff06001000060000001e009400341bf2cb724bb360ff318fe3db04607a1cfa48ef475b6b248400000012002501ec9f9100b4ad1312a456b4fd7c28000004004701040093000800c900090000000c003180080035000800000004004a01"], 0x7c}, 0x1, 0x0, 0x0, 0x48010}, 0x44) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r2, 0x400454ca, 0x38) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, r2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) fallocate$auto(0xffffffffffffffff, 0x7, 0xd, 0x4cbd5d) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r3 = getpid() process_vm_readv$auto(r3, 0x0, 0x800000001, 0x0, 0x6, 0x8) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0, 0x2e0}, 0x1, 0x0, 0x0, 0xc094}, 0x0) r4 = socket(0x1e, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.0/usb1/power/wakeup_max_time_ms\x00', 0x0, 0x0) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) socket(0x29, 0x801, 0x84) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/open_files\x00', 0x502, 0x0) socketpair$auto(0x8, 0x1, 0x8002, 0x0) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vbi0\x00', 0x8302, 0x0) ioctl$auto(r5, 0xc0045627, r4) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, 0x0, 0x33) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) 21.637150113s ago: executing program 33 (id=2369): mmap$auto(0x0, 0x2020009, 0x7, 0x2000000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="6e515ed124a0fe8ed198ba40d0c3edd0a16ea41e", @ANYRES16=r1, @ANYBLOB="00022abd7000fcdbdf255f0000000400050108007700f8ffffff06001000060000001e009400341bf2cb724bb360ff318fe3db04607a1cfa48ef475b6b248400000012002501ec9f9100b4ad1312a456b4fd7c28000004004701040093000800c900090000000c003180080035000800000004004a01"], 0x7c}, 0x1, 0x0, 0x0, 0x48010}, 0x44) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r2, 0x400454ca, 0x38) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, r2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) fallocate$auto(0xffffffffffffffff, 0x7, 0xd, 0x4cbd5d) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r3 = getpid() process_vm_readv$auto(r3, 0x0, 0x800000001, 0x0, 0x6, 0x8) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0, 0x2e0}, 0x1, 0x0, 0x0, 0xc094}, 0x0) r4 = socket(0x1e, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.0/usb1/power/wakeup_max_time_ms\x00', 0x0, 0x0) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) socket(0x29, 0x801, 0x84) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/open_files\x00', 0x502, 0x0) socketpair$auto(0x8, 0x1, 0x8002, 0x0) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vbi0\x00', 0x8302, 0x0) ioctl$auto(r5, 0xc0045627, r4) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, 0x0, 0x33) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) 5.300395131s ago: executing program 2 (id=2477): close_range$auto(0x0, 0x5, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) (async) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x93c7a32f4f3a379b}, 0x40005) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) preadv2$auto(r1, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) (async) madvise$auto(0x0, 0xffffffffffff0006, 0x17) setreuid$auto(0xffffffffffffffff, 0x8) (async) mlock$auto(0x7c88, 0x7fff) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) (async) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x4) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) sendto$auto(0xffffffffffffffff, 0x0, 0x8, 0xd, 0x0, 0x1c) listmount$auto(&(0x7f0000000080)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x8}, 0x0, 0xf4240, 0x1) (async) madvise$auto(0x0, 0x400053, 0x9) fanotify_init$auto(0x6, 0x2000000000002) (async) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') fremovexattr$auto(r2, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.4/usb5/descriptors\x00') (async) write$auto(0x0, &(0x7f00000000c0)='vlan1\x00', 0x10001) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) connect$auto(0x4, 0x0, 0x10) 4.979656853s ago: executing program 5 (id=2478): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a9, 0x7) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x200084c, 0x0, 0x9, 0x0, 0x3, 0x10b}, 0x4}, 0xffffffff, 0xc5c) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000180), 0x7112}, 0x8) 4.840657899s ago: executing program 5 (id=2479): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/mcfilter\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x3fc, 0x400009) open(0x0, 0x22240, 0x55) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) pwritev2$auto(r1, 0x0, 0x19, 0x2, 0x8, 0x100) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) sendto$auto(0x3, 0x0, 0xffeb, 0xe, &(0x7f0000000100)=@in={0x2, 0x4e22, @multicast2}, 0x19) 4.107875833s ago: executing program 2 (id=2483): unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) add_key$auto_KEY_SPEC_USER_KEYRING(0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/ieee80211/phy0/statistics/dot11ACKFailureCount\x00', 0x2240, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, r1, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x80140, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) close_range$auto(0x0, 0x5, 0x0) r3 = pipe$auto(0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/4096, 0x1000) write$auto(0x1, 0x0, 0x80000000) read$auto(r2, 0x0, 0x8) close_range$auto(r1, 0x8, 0x200) socket(0x1e, 0x805, 0x0) sendmsg$auto_NBD_CMD_DISCONNECT(r0, &(0x7f00000039c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003980)={&(0x7f0000001200)={0x274c, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '\'+-'}, @NBD_ATTR_SOCKETS={0x131b, 0x7, 0x0, 0x1, [@generic="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", @generic="1e528e369455bf8f086385f4aa9d83c71999c6b173fbdcc048b82e04c544fcbf5f3fbcb770c3ab7642b20212df0109cf582acb5b92c0f951aedd676c6568e269f8d092bda16330f2047e55f37fce42fe049387a05869e404242f31592c00c6985907bd9d5819b941ec87379eb3b4e2ee35c7424224200d3a906876b2f38542a38834cb42c41f9e1f2488e2cb0dbaaa89ec88ba57c60a2e3f016131bfd2e30c6a2de95a13437018d1036731d78b4f7196f128b115d6", @nested={0xe2, 0xe1, 0x0, 0x1, [@typed={0x8, 0x4c, 0x0, 0x0, @pid}, @generic="d448b30b176a46194e9069bb6a4e713222940e8226ed06f7d1c4bb2b4eeecf0fc35dedf2115f312a867825e8b37eb9e22dedab6b307279e8ba058f51c6e73bf2fd11a4fec1cae5bfe797c93c07229d4f6f67162fc82f5c29be2ed5f8baf7d8bfb6771ea97e679185fc8f9d650ee61aea64872310969731e0f7966f95b39751d683c98381b00aff480ab6cd17494e87f48784291f74f43613ed1a4913f2c1d96c314120159b767f4985f66206a46496533e3f74d5b958b1f32878158167648ed1f848", @typed={0x14, 0x96, 0x0, 0x0, @ipv6=@private1}]}, @nested={0x5e, 0x44, 0x0, 0x1, [@nested={0x4, 0x10b}, @nested={0x4, 0x9c}, @generic="2556d9db06ecf0cf9412ca0b058ace59c01167ac206e91e04a6eb624593c99fa3614e1aba17a8203490c4a24151c286a26fbcde0d249ba58fd33f5382ff9d6120844f3bc13ea9b682177e990eb472c9ed957"]}, @generic="06752af36b67698700318fee7b1e7a10b72045338d7359e91e6d91b02aba8335f92a21bb5d699b5454ba69c1a0a7143c12658a7cfbff144aef67025254fb82c98747d87530d941460e4a54b8a2b86bf9abb45a78a0f5fdab462207b04bda93ad1ec958b34f2b6237babea548c985a38ecea8eb88acdef496b0ace0c42b832df11cd1", @nested={0x8, 0x18, 0x0, 0x1, [@nested={0x4, 0x15f}]}, @generic="6c08c69ea54a3f704bc4891de2b78bf1565ad1180a14d2d1a0ce53b486bb390153d569afc01abb74870d18b5390c9cf15988d5e2b0d06ac94c488532f1d72237fc41fc04e779c72e025a33c065dc1d059bedd56824264209c76a8de644991c133bd2507a704e3aec1905e8db5050301d104436118c943985b6f9f0bc9cde5fae410e1f3a47323984451ea449bc7f7f397de122eb"]}, @NBD_ATTR_SOCKETS={0x11fc, 0x7, 0x0, 0x1, [@nested={0x1026, 0xa7, 0x0, 0x1, [@generic="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", @nested={0x4, 0x3c}, @typed={0x8, 0xe6, 0x0, 0x0, @fd=r1}, @generic="b66b2cda20d7e06720fe", @typed={0x8, 0x103, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xe}}, @nested={0x4, 0x149}]}, @nested={0x10c, 0x103, 0x0, 0x1, [@generic="c817a6511103e0de566bb185c1ac22b9e73c2c9157370840b859d9462560bfa5cb115d347906703c70e7357ee99848cd10c748b172ff", @nested={0x4, 0xae}, @generic="b3183f0ab0ac3197cb385de4906784c703d6fbd5b15b818337b64d9e603d9aae144071897789237e0c00a04d6976cdc4bd21bad5ff1e18d2d190e822ede2", @generic="583441f65e7a0a0fcee1f4c76ce055dc52492107e59bb5a7cb030bd0b8ed475d080e5a88278c709abb6caf5382712841e684dfc683fa4fd279d4476e10b4859ef5ff7d362b5eb88c4b4de6f914ef9c6a9d53c063739a08ad423830038e960ea76388b486cef825ef9109aa82eb3cbcd64826efdfbe79778af53e1abd058129baf9bcbe9d7d6a9b49c52321c9ed313023"]}, @nested={0x4, 0xa9}, @nested={0xbd, 0x3b, 0x0, 0x1, [@generic="16a60b9063d9224bc274482f3d71b17e5764ced1995348033d6885c3c2f82da61f88f225afce79cad940bc2ce86f797d0867a338babb09c9b98bc07156eb84a9eb2a5871199f003ae17c0f3b794143750d846706c76561d0b4", @typed={0x8, 0x74, 0x0, 0x0, @u32=0xf1}, @nested={0x4, 0x137}, @generic="09e6398882a3391a1eec7a8074d0e3f5f9587ba7a90eaafef9dccf20a46c72384579eb924dce25cfcf58b943f8dbd221c4d11e82502621d790975777200f03f5e0cc6a211c6b10e4de7caaf4bc37ab2a4fd7c6cd"]}]}, @NBD_ATTR_SOCKETS={0x20f, 0x7, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @pid}, @nested={0x115, 0xe0, 0x0, 0x1, [@typed={0x14, 0xad, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic="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"]}, @generic="cdb6a314ae9f53433ef7490d36a4bbedcaa17b99df5e1b598791b4404a1b4375048bcb1d73abf0a6efbd0ac4b9654eb652d07ff3f5115d505856cb39bb346b703d5d127ddc24db610b32059289ed6d35aa470f336ef0806cd7b169b5734f3086c57c5672a72b8c17050e3050a998583a587e6c0693a73e94dddfa940c074b7cb106014d971411cf500213c55b83f9856e7877ceb726e9db3f97af2fdb97e3061aab65b76e430ee1853583424893bf59953e075c7a5d2a30f93a93a707e5638f1dbadaff26f2caf97ea5e2edba649e43e7015cdde3635d9f3b26d63fa97e0fb", @typed={0xc, 0xfe, 0x0, 0x0, @u64=0x6}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x5}]}, 0x274c}, 0x1, 0x0, 0x0, 0x814}, 0x4004001) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto(0x3, 0x40045532, 0x38) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D0c\x00', 0x80600, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r1, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810001, 0xffb, 0x8000000008011, 0x3, 0x637) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendfile$auto(0x1, 0x3, 0x0, 0x400000) write$auto(0x3, 0x0, 0x100000000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl802154(0x0, r0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) 4.026878582s ago: executing program 4 (id=2485): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) setfsgid$auto(0x9) setresgid$auto(0xffffffffffffffff, 0x28000000000000, 0x7) getrandom$auto(0x0, 0x3, 0x80000001) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) madvise$auto(0xfffffffffffffffe, 0x7fffffffffffffff, 0xa) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r1) getuid() sendmsg$auto_NL80211_CMD_RADAR_DETECT(r1, 0x0, 0x80d0) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') write$auto(0xffffffffffffffff, 0x0, 0x8000007f) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram8\x00', 0x16fa02, 0x0) sendmmsg$auto(r0, &(0x7f0000000300)={{&(0x7f0000000080)="c7a3290e4ec922ea57b451c14eb88d67265ac952df4709886a38c390e1f357e5b59334f501b42eb4d98a6468a4d30ecbad1efa1546d1750547ec78afdc6f5f5b032ce19104de6e135eb0afe8b2a1b69e653c45d9533d8b9a092fef69bce656d456ff5182c87da8d425af2133e7dd6ba48d5a69330bbc4d1a", 0x1000, &(0x7f0000000280)={&(0x7f0000000240)="336de806ded72b7d4b1dd25dbb347e85938255c5c88a5b417017e0e75d384d195081de375239b41aeeb351a18702eb3a4781c36c33afbc", 0x3}, 0x9, &(0x7f00000002c0)="82f355c57f4ede633383e81056", 0xa5, 0x9}, 0x1}, 0x1, 0x40) sendfile$auto(0x3, r2, 0x0, 0x400000000006) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/task_delayacct\x00', 0x80282, 0x0) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) 3.761535822s ago: executing program 3 (id=2486): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) unshare$auto(0x4f) r1 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x121102, 0x0) read$auto_vhci_fops_hci_vhci(r1, &(0x7f0000000d40)=""/16, 0x10) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000100), 0x290801, 0x0) bpf$auto_BPF_MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)=@prog_bind_map={r1, r1, 0x8}, 0x7fff) unshare$auto(0x6c0000ef) mmap$auto(0x8000000, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) clock_gettime$auto(0x6, 0x0) write$auto_fops_init_pkru_pkeys(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) select$auto(0xfffffff9, &(0x7f0000000080)={[0x4, 0x1000003, 0x3ff, 0x3, 0x6, 0x6, 0x0, 0x1ffe000, 0xcad, 0x2, 0x31d024e5, 0xf, 0x3, 0x400203, 0x0, 0xd]}, 0x0, 0x0, 0x0) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x20201, 0x0) r2 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0xb) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0xf, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) mmap$auto(0x0, 0x400005, 0x10001, 0x9b72, r1, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r3, 0x8000) fdatasync$auto(r3) madvise$auto(0x100000001, 0x8, 0x8) madvise$auto(0x0, 0x400053, 0x9) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer\x00', 0x80102, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x4000003, 0xeb1, 0xfffffffffffffffa, 0x8000) pread64$auto(0xffffffffffffffff, &(0x7f0000000400)='\\\x00', 0xffff, 0x1) ioctl$auto(0x3, 0x40081271, r2) 3.693654469s ago: executing program 5 (id=2487): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) unshare$auto(0x4f) r1 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x121102, 0x0) read$auto_vhci_fops_hci_vhci(r1, &(0x7f0000000d40)=""/16, 0x10) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000100), 0x290801, 0x0) bpf$auto_BPF_MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)=@prog_bind_map={r1, r1, 0x8}, 0x7fff) unshare$auto(0x6c000106) mmap$auto(0x8000000, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) clock_gettime$auto(0x6, 0x0) write$auto_fops_init_pkru_pkeys(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) select$auto(0xfffffff9, &(0x7f0000000080)={[0x4, 0x1000003, 0x3ff, 0x3, 0x6, 0x6, 0x0, 0x1ffe000, 0xcad, 0x2, 0x31d024e5, 0xf, 0x3, 0x400203, 0x0, 0xd]}, 0x0, 0x0, 0x0) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x20201, 0x0) r2 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0xb) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0xf, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) mmap$auto(0x0, 0x400005, 0x10001, 0x9b72, r1, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r3, 0x8000) fdatasync$auto(r3) madvise$auto(0x100000001, 0x8, 0x8) madvise$auto(0x0, 0x400053, 0x9) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer\x00', 0x80102, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x4000003, 0xeb1, 0xfffffffffffffffa, 0x8000) pread64$auto(0xffffffffffffffff, &(0x7f0000000400)='\\\x00', 0xffff, 0x1) ioctl$auto(0x3, 0x40081271, r2) 2.709143591s ago: executing program 5 (id=2488): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x10, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8000400000000000, 0xdb, 0x100eb4, 0xffffffffffffffff, 0x4) r0 = socketpair$auto(0x1, 0x5, 0x8, 0x0) mmap$auto(0xfffffffffffffffe, 0x2020009, 0x3, 0x800000000000eb1, r0, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80003, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x3) mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) timer_create$auto(0x2, 0x0, 0x0) socket(0x6, 0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r2 = socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000300)={0x28, r4, 0x159198c6007aa95d, 0x70bd29, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0x8, 0x4, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r5, r1, 0x0, 0x2) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) setsockopt$auto(0x3, 0x9, 0x2f, 0x0, 0x9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0x5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) 2.683276364s ago: executing program 2 (id=2489): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)='+') mmap$auto(0x0, 0x6, 0x10003000000, 0x11, 0x3, 0x0) 2.646115872s ago: executing program 3 (id=2490): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x200005) prctl$auto_PR_SET_SECCOMP(0x16, 0x7, 0x7, 0xfffffffffffff6bd, 0xfffffffffffff801) ioctl$auto(0x3, 0x80000541b, 0x38) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000001580), 0x100, 0x0) ioctl$auto_VFIO_IOMMU_MAP_DMA(r2, 0x3b71, 0x0) r3 = socket(0x2, 0x801, 0x106) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20b42, 0x0) io_uring_setup$auto(0x2, 0x0) write$auto(r4, 0x0, 0x0) getsockopt$auto(r3, 0x11c, 0x4, 0x0, 0x0) r5 = socket(0x10, 0x3, 0xa) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)={0x24, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0xff12}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x10) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r0, &(0x7f00000000c0)='Fm_\xbd\xc3!\x00', 0x7) 2.546065584s ago: executing program 2 (id=2491): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1020802}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000fddbdf2516000000850107800800e700080000004d9f73a27dead7c1fa7ca42904452c2306b23784d7538aa35d1f24595655a2cb78342ffcf2bdf23dd0f9a4828a8b710e2d2798efcf00c1cc15fca989d8fcbb29ff9288aa59b09ba809d6a5d10a520a3b82657b63bf9fd0f7b45fa46863aa35cd2564c5877fb8566453e912636387817033b9e115136a9e665d0caed8bdb24750f7f2a630bf1f289a9d462ec9780d3e1f78db52645037424d7f7a12201459b2abec58ec157d82f32746b99be9bfb47fec5fb891ff179b798bb9dbc101e37dfb1f3dd4525a92fe7fd11376a7e3b10f75189850bd74cf43c6de1638f27ac862d5b1d4940ceae6d33a1d9d902af8a70d46993228e8075193e256100a71c7efef904a1ca9aa2bda28a18bda695c5bc1bf33100500e37dad808a93104de835767332d8765c9cc221e8911a96bb4c48ec72a94a34db644c9f2b30c9bfd9690ab5805075c8bfd9a75f37894e6b1a6703be0beffa8336a1d5b1549bc955c5469b90f81adedf45740ccfde6621eae71c7f9881a791b9d36563f44db08048000000"], 0x19c}, 0x1, 0x0, 0x0, 0x2400c861}, 0x4004010) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x801, 0x84) r1 = socket(0xa, 0x3, 0x3a) setsockopt$auto(r1, 0x29, 0x14, 0x0, 0x56b) pread64$auto(r1, &(0x7f0000000280)=']-$.\x00', 0x2, 0x6) r2 = socket(0x2, 0x1, 0x0) socket(0x1, 0x2, 0x0) bind$auto(r2, &(0x7f00000002c0)=@qipcrtr={0x2a, 0x1, 0x7ffe}, 0xfff) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x0) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 2.390026497s ago: executing program 2 (id=2492): syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex_wait$auto(0x0, 0x0, 0x83, 0xa, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, 0x0, 0x6, 0xfffffffffffffffb, 0x4, 0x800) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) open$dir(0x0, 0x10000, 0x6) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) msgget$auto(0xc, 0x77d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000040)=0x1) sendto$auto(0x3, 0x0, 0x1, 0x101, 0x0, 0x1c) ioctl$auto(0x3, 0x541b, 0x38) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/user\x00') getdents$auto(r1, 0x0, 0xa2b0) msync$auto(0x0, 0x2000000005, 0x6) msgrcv$auto(0x0, 0x0, 0xff9, 0x0, 0x3) syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000180), 0xffffffffffffffff) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) mprotect$auto(0x6, 0x1, 0x3) madvise$auto(0x110c230000, 0x8031ca, 0x9) close_range$auto(0x2, 0xa, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) 2.157444603s ago: executing program 3 (id=2493): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x121040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2ab42, 0x0) pwritev$auto(r0, 0x0, 0x2, 0xfffffffd, 0x7fff) bpf$auto_BPF_PROG_QUERY(0x10, &(0x7f0000000580)=@bpf_attr_11={0xfffffffffffff9e6, 0xe, 0x6, 0x1, 0xc, 0x5, 0xff}, 0x1ff) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/oss/devices\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000000)=""/57, 0x39) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) sysfs$auto(0x2, 0xe, 0x0) close_range$auto(0x2, 0x8, 0x0) getgroups$auto(0x5, 0x0) r4 = socket(0x2, 0x80002, 0x73) landlock_add_rule$auto(r4, 0x3, &(0x7f0000000140)="968a26e1e44fc8fd1325376c887b85e6c4e75d8925b848502a84377766cb77fff873b3d568135882806b500420b294628918f9b2c86aa171d2b777e76129b2aaa37aa9a70277513bca583659c3164c2ff73bf10cbcc0ec0c30e7d10a84a94c9c0e822192eba62a96aea04f70f199bd65ac9ec381", 0xfb) socket(0x2, 0x1, 0x84) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @rand_addr=0x64010100}, 0x1c) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x121040, 0x0) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (async) read$auto(r1, 0x0, 0x20) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2ab42, 0x0) (async) pwritev$auto(r0, 0x0, 0x2, 0xfffffffd, 0x7fff) (async) bpf$auto_BPF_PROG_QUERY(0x10, &(0x7f0000000580)=@bpf_attr_11={0xfffffffffffff9e6, 0xe, 0x6, 0x1, 0xc, 0x5, 0xff}, 0x1ff) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/oss/devices\x00', 0x0, 0x0) (async) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000000)=""/57, 0x39) (async) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) sysfs$auto(0x2, 0xe, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) getgroups$auto(0x5, 0x0) (async) socket(0x2, 0x80002, 0x73) (async) landlock_add_rule$auto(r4, 0x3, &(0x7f0000000140)="968a26e1e44fc8fd1325376c887b85e6c4e75d8925b848502a84377766cb77fff873b3d568135882806b500420b294628918f9b2c86aa171d2b777e76129b2aaa37aa9a70277513bca583659c3164c2ff73bf10cbcc0ec0c30e7d10a84a94c9c0e822192eba62a96aea04f70f199bd65ac9ec381", 0xfb) (async) socket(0x2, 0x1, 0x84) (async) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @rand_addr=0x64010100}, 0x1c) (async) 2.098322318s ago: executing program 4 (id=2494): r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x454, 0x9) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) shutdown$auto(0x200000003, 0x2) readv$auto(r0, &(0x7f00000000c0)={&(0x7f0000000000)="46910d6162fecc2697b76dee9bd9ef6797eb31453b", 0x8}, 0xff80000000000000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(r1, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) 1.951891816s ago: executing program 4 (id=2495): mmap$auto(0xfffffffffffffffe, 0x202000d, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/clockevents/broadcast/current_device\x00', 0x181400, 0x0) futex$auto(&(0x7f0000000040)=0x1, 0x5, 0x10001, 0x0, &(0x7f0000000140)=0x3, 0x6fffffff) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x101202, 0x0) write$auto(0x3, 0x0, 0x200000100082) pread64$auto(0xffffffffffffffff, 0x0, 0x13, 0x4) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/saved_tgids\x00', 0x101002, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) open(&(0x7f0000001bc0)='./file0\x00', 0x4142, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty57\x00', 0x40741, 0x0) ioctl$auto(0x3, 0x402c542d, r1) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810000, 0xffb, 0x8000000008011, 0x3, 0x8000) r2 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r2, 0x0, 0x1) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000040), 0x2502, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x2) 1.676003673s ago: executing program 5 (id=2496): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyze\x00', 0x577e01, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda1\x00', 0x2000, 0x0) sendfile$auto(0x3, r1, 0x0, 0x100400000000006) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto(0x3, 0x0, 0xffd8) r2 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r2, 0x10f, 0x8a, 0x0, 0x14) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95) 1.612424217s ago: executing program 4 (id=2497): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyze\x00', 0x577e01, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda1\x00', 0x2000, 0x0) sendfile$auto(0x3, r1, 0x0, 0x100400000000006) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto(0x3, 0x0, 0xffd8) r2 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r2, 0x10f, 0x8a, 0x0, 0x14) io_uring_setup$auto(0x1, 0x0) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95) 1.171922344s ago: executing program 3 (id=2498): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) unshare$auto(0x4f) r1 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x121102, 0x0) read$auto_vhci_fops_hci_vhci(r1, &(0x7f0000000d40)=""/16, 0x10) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000100), 0x290801, 0x0) bpf$auto_BPF_MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)=@prog_bind_map={r1, r1, 0x8}, 0x7fff) unshare$auto(0x6c000300) mmap$auto(0x8000000, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) clock_gettime$auto(0x6, 0x0) write$auto_fops_init_pkru_pkeys(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) select$auto(0xfffffff9, &(0x7f0000000080)={[0x4, 0x1000003, 0x3ff, 0x3, 0x6, 0x6, 0x0, 0x1ffe000, 0xcad, 0x2, 0x31d024e5, 0xf, 0x3, 0x400203, 0x0, 0xd]}, 0x0, 0x0, 0x0) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x20201, 0x0) r2 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0xb) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0xf, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) mmap$auto(0x0, 0x400005, 0x10001, 0x9b72, r1, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r3, 0x8000) fdatasync$auto(r3) madvise$auto(0x100000001, 0x8, 0x8) madvise$auto(0x0, 0x400053, 0x9) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer\x00', 0x80102, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x4000003, 0xeb1, 0xfffffffffffffffa, 0x8000) pread64$auto(0xffffffffffffffff, &(0x7f0000000400)='\\\x00', 0xffff, 0x1) ioctl$auto(0x3, 0x40081271, r2) 652.24891ms ago: executing program 5 (id=2499): close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, 0x0, 0x4, 0xfffffffffffffffb, 0x4, 0x800) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = open$dir(0x0, 0x10000, 0x6) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) pwritev$auto(r1, 0x0, 0x2, 0xfffffffffffff274, 0x6) msgget$auto(0xc, 0x77d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000040)=0x1) sendto$auto(0x3, 0x0, 0x1, 0x101, 0x0, 0x1c) ioctl$auto(0x3, 0x541b, 0x38) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/user\x00') getdents$auto(r2, 0x0, 0xa2b0) msync$auto(0x0, 0x2000000005, 0x6) msgrcv$auto(0x0, 0x0, 0xff9, 0x0, 0x3) syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000180), 0xffffffffffffffff) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) mprotect$auto(0x6, 0x1, 0x3) madvise$auto(0x110c230000, 0x8031ca, 0x9) close_range$auto(0x2, 0xa, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfffffffc, &(0x7f0000000100)={0x0, 0xfbe}, 0x8, 0x0, 0x8, 0x1}, 0x3}, 0xc, 0x4008) 561.688233ms ago: executing program 4 (id=2500): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)='+') mmap$auto(0x0, 0x6, 0x10004000000, 0x11, 0x3, 0x0) 430.032927ms ago: executing program 4 (id=2501): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) r0 = socket(0x2a, 0xa, 0xffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0xa, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000001140)='/dev/sg0\x00', 0x404900, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg0\x00', 0x282, 0x0) close_range$auto(r0, 0x8, 0x0) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000001100)=@in={0x2, 0x3, @multicast2}, 0x65) mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, r2, 0xb1d6) socketpair$auto(0x7fffffff, 0x200009, 0x8000000000000000, 0x0) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x0, 0x203, 0x0, 0x10000, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x8, 0x7]}, 0x0, 0x0) mknod$auto(&(0x7f00000012c0)=':,\x00', 0xca, 0x6) mmap$auto(0x0, 0x10008, 0x4000000000df, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) r3 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f00000010c0), 0x313083, 0x0) read$auto_rng_chrdev_ops_core(r3, &(0x7f0000001340)=""/4111, 0x100f) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000001040)={0x8, "e7f6070949e76300", @raw=0x10000}) execve$auto(0x0, 0x0, &(0x7f0000001300)=&(0x7f0000001080)='\x8c\x82\xa5') mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, r3, 0x0) semop$auto(0x100, 0x0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) symlink$auto(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') rename$auto(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) 429.801059ms ago: executing program 3 (id=2502): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x20000, 0x0) pread64$auto(r0, 0x0, 0x6f, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x123801, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000009c0)={{@inferred, 0xd252, 0x9, 0x2, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0xfffffff7}, 0x4, 0x2000963, 0x2, @raw, @reserved="b20200a3077300f2c167afeb0a9902da3d58908ea1a8475fbd3a75d4690e48fc922df5fdffffffffffffffdbb68aec3f51e29bc18b59d74badbdcc1ba97a2004117190c9a050186fa73f5a197762a94460d134b357b8b4d0caaf1ca142917779cef3673ee57f2f5fde573fa4d4328a8ea0be7eccec0adb4f64290e53d4faa89d", "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1cb04b435b3fcd0c7c61c329794e5311121c760cb9611c78e6947a99806bcc100"}) mremap$auto(0x4000000000000000, 0x4, 0x4, 0x7, 0x100000000) unshare$auto(0x40000080) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x400000100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) mmap$auto(0x1000, 0x7f, 0x3, 0xebf, r1, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC0\x00', 0x80, 0x0) r3 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r3, 0x0, 0x1) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001400)='ns/mnt\x00') ioctl$NS_GET_PARENT(r4, 0x8008b705, 0x0) capget$auto(&(0x7f0000000040), &(0x7f0000000100)={0x4, 0x3, 0xf}) ioctl$auto(r2, 0x0, r4) r5 = openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/options/event-fork\x00', 0x2000, 0x0) read$auto_trace_options_core_fops_trace(r5, 0x0, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0x8a001, 0x0) write$auto(r6, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) madvise$auto(0x0, 0x2003f2, 0x15) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x5, 0x0, 0x9, 0x8, 0x4, 0x5, 0xffffffffffffffff, [], {0x9, 0x6, 0x6, 0x39f, 0x5, 0x7f, 0x101, 0x4000006, 0x4000002000}, {0x100, 0x3e4f, 0x101, 0x5, 0x2, 0x105, 0x8, 0x8, 0x100000002}}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r2) fsconfig$auto_XFS_DAX_INODE(r0, 0x6e9, &(0x7f00000005c0)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', &(0x7f0000000800)="de92a2a01f2eac4bf0c6b8c2fc738c123ffb35b280e1be4537c60b0f5db5ea636c6cf95b549a99441c831d52dce08452e527ee64e1aa4d5415336a20648339a45ff93defd1652e52557afa9330c013ce85a2e6614ccc203cde07ba1c83976d349334dacf55c7703b9d50bc73f1bde489cef52b8f8e0424ac63c8", 0x0) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x231, 0x400008, 0x5, 0x14, r4, 0x7) sched_getattr$auto(0x0, 0x0, 0x68, 0x0) 75.516792ms ago: executing program 3 (id=2503): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) shutdown$auto(r0, 0xda6) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x2020007, 0x1, 0xeb1, r0, 0x800) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_map_fd=r2}, 0xa3) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) socket(0x10, 0x2, 0x0) ioctl$auto_KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000380)={0x774, 0x0, [{0x9, 0x6, 0x34dd, 0x401, 0xe, 0x1, 0x8001}, {0x9, 0x6, 0x6, 0x1, 0x1ff, 0xe0000, 0x401}, {0x8, 0x8, 0x5, 0x6, 0x2, 0x4, 0xfffffff9}, {0xfffffffa, 0xfffffffe, 0xd7, 0xc0, 0x300000, 0x3, 0x4}]}) r4 = socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6d) connect$auto(r4, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) sendmmsg$auto(r4, 0x0, 0x9, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto(0x4000000000000c8, 0x400454cc, 0x6f) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) setsockopt$auto(0x3, 0x0, 0x28, 0xfffffffffffffffc, 0x70) write$auto(0x3, 0x0, 0x1) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bdi/43:256/stats\x00', 0x20002, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x6b) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 0s ago: executing program 2 (id=2504): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xed\xf8\xe1\xbc\x1d\x91D\xe7R\x12\xc4\xcd\xc6\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY2@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(', 0x100000a3dd) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/net/tls_stat\x00', 0x500, 0x0) pipe$auto(0x0) munlock$auto(0x3, 0xffffffffffffffff) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101000, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x281, 0x0) getcpu$auto(&(0x7f0000000040)=0x6, &(0x7f0000000180)=0x8, &(0x7f00000002c0)={[0x6699, 0x3, 0x401, 0x5, 0x7f4, 0x818, 0x5, 0x35a14b10, 0x7, 0x80, 0x3, 0x3, 0x7ff, 0x7, 0x9]}) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/queues\x00', 0x20000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f00000001c0)=""/218, 0xda) write$auto(0xffffffffffffffff, 0x0, 0x8) write$auto(0xca, &(0x7f00000000c0)='\x04>\x01\x01\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c\f\xb6,NS\xa2(Q\xcc', 0x7f) statmount$auto(0x0, 0x0, 0x9, 0xd) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x8) lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000340)='security.capability\x00\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\x8f\x1aU\xbbG\x98\x9a\xd9\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf29\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xca%8\x94\xa66\xda\xbclm*\xe8]\xe1\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x8a\n\xe8\x1c\x88\xd4\xa5\x96!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04\x1b\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd30L\xda^\xc9\xd5\xe3U/\xa5$*\xc9\x9cCGl\xb6+\xbf[>l\xc5\xeb\xe5\xfc\x1d\xec\xad\xd0\x89\x9d\v\xbc\xe5\x95\xc3\x18\xb49^\x91\x8b\xee\xa6Q\'\xd7\xf0\'\x16\x19\x13\x01\x17N\xf4yQ#c\xfa=\xc7\xd1\x02Lz&\x8f\x17\xd7\xb5\x86\xa5 \x80\xea\x06\xd6\xdaX\xc6|f\xbd\x7f\x19\x15\xb4\x17w\xbfT\xc7G\xf2\xc3C\x05\x9f9\x01\xe8U\xe5\x19\xaa=\xa8\xc2_\xeb\xa77T0\x9e\xb6\x93\'Ei\xd9\xd5\xbe`\xeb\x16#\xff\xd5\x7f%d\xc9HK>\xe2\xa1Du\r\r\xear\'i\x05\xd2\xf2\x00\xb0(\x928R\x16*\x13\xaa\x1c\xb2E-O\x9a\xe2\xce\x8b\x00\xe0\x06\xe7U\xae%%\xd2\xa8.?c\xc5QI\x00GM\xedn\xbd%\n\xe1\xf3D\xf8\x86\x92\x02B\x05\x16\xc2\x8b\xb4KZ\xa9P\x13\xe3jn\xfc\xec\xc2\x80\x82\x19\x18/\xf3Q\x9ec\xe5\x00\x00', 0x0, 0x0, 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x404800, 0x0) read$auto(r3, 0x0, 0x20) kernel console output (not intermixed with test programs): 871140][T15492] FAULT_INJECTION: forcing a failure. [ 483.871140][T15492] name failslab, interval 1, probability 0, space 0, times 0 [ 483.992512][T15496] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2095'. [ 484.058072][T15492] CPU: 0 UID: 0 PID: 15492 Comm: syz.3.2095 Tainted: G L syzkaller #0 PREEMPT(full) [ 484.058100][T15492] Tainted: [L]=SOFTLOCKUP [ 484.058105][T15492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 484.058115][T15492] Call Trace: [ 484.058121][T15492] [ 484.058127][T15492] dump_stack_lvl+0x100/0x190 [ 484.058148][T15492] should_fail_ex.cold+0x5/0xa [ 484.058165][T15492] ? kmem_cache_alloc_lru_noprof+0x59/0x6e0 [ 484.058182][T15492] should_failslab+0xc2/0x120 [ 484.058200][T15492] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 484.058214][T15492] ? __d_alloc+0x35/0xa50 [ 484.058238][T15492] __d_alloc+0x35/0xa50 [ 484.058259][T15492] d_alloc_parallel+0x105/0x14b0 [ 484.058276][T15492] ? lockref_get_not_dead+0x6a/0x80 [ 484.058297][T15492] ? lock_release+0x24d/0x310 [ 484.058318][T15492] ? rcu_is_watching+0x12/0xc0 [ 484.058333][T15492] ? __pfx_d_alloc_parallel+0x10/0x10 [ 484.058349][T15492] ? rcu_is_watching+0x12/0xc0 [ 484.058363][T15492] ? __d_lookup+0x25c/0x4a0 [ 484.058378][T15492] ? lock_release+0x24d/0x310 [ 484.058398][T15492] ? __d_lookup+0x266/0x4a0 [ 484.058416][T15492] path_openat+0x271c/0x4280 [ 484.058440][T15492] ? __pfx_path_openat+0x10/0x10 [ 484.058462][T15492] do_file_open+0x20e/0x430 [ 484.058483][T15492] ? __pfx_do_file_open+0x10/0x10 [ 484.058506][T15492] ? __pfx_kfree_link+0x10/0x10 [ 484.058525][T15492] ? alloc_fd+0x471/0x7a0 [ 484.058545][T15492] ? do_getname+0x191/0x390 [ 484.058559][T15492] do_sys_openat2+0x10f/0x1e0 [ 484.058575][T15492] ? __pfx_do_sys_openat2+0x10/0x10 [ 484.058591][T15492] ? fdget+0x18b/0x210 [ 484.058610][T15492] __x64_sys_openat+0x12d/0x210 [ 484.058626][T15492] ? __pfx___x64_sys_openat+0x10/0x10 [ 484.058643][T15492] ? rcu_is_watching+0x12/0xc0 [ 484.058659][T15492] do_syscall_64+0x115/0x840 [ 484.058675][T15492] ? clear_bhb_loop+0x40/0x90 [ 484.058691][T15492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.058707][T15492] RIP: 0033:0x7ff96195d68e [ 484.058720][T15492] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 484.058735][T15492] RSP: 002b:00007ff96282bec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 484.058750][T15492] RAX: ffffffffffffffda RBX: 00007ff96282c6c0 RCX: 00007ff96195d68e [ 484.058761][T15492] RDX: 0000000000000002 RSI: 00007ff96282bf90 RDI: ffffffffffffff9c [ 484.058771][T15492] RBP: 00007ff961a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 484.058780][T15492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.058789][T15492] R13: 00007ff961c16038 R14: 00007ff961c15fa0 R15: 00007fffa4ade378 [ 484.058804][T15492] [ 484.699766][ T50] Bluetooth: hci4: command tx timeout [ 484.859296][T15506] FAULT_INJECTION: forcing a failure. [ 484.859296][T15506] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 484.955694][T15506] CPU: 0 UID: 0 PID: 15506 Comm: syz.3.2098 Tainted: G L syzkaller #0 PREEMPT(full) [ 484.955721][T15506] Tainted: [L]=SOFTLOCKUP [ 484.955756][T15506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 484.955768][T15506] Call Trace: [ 484.955773][T15506] [ 484.955779][T15506] dump_stack_lvl+0x100/0x190 [ 484.955800][T15506] should_fail_ex.cold+0x5/0xa [ 484.955818][T15506] should_fail_alloc_page+0xeb/0x140 [ 484.955837][T15506] prepare_alloc_pages+0x1f0/0x5f0 [ 484.955857][T15506] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 484.955881][T15506] ? alloc_skb_with_frags+0xdd/0x760 [ 484.955904][T15506] ? tun_chr_write_iter+0xdc/0x200 [ 484.955926][T15506] ? vfs_write+0x6ac/0x1050 [ 484.955945][T15506] ? __x64_sys_pwrite64+0x1eb/0x250 [ 484.955966][T15506] ? do_syscall_64+0x115/0x840 [ 484.955982][T15506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.956000][T15506] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 484.956028][T15506] ? rcu_is_watching+0x12/0xc0 [ 484.956044][T15506] ? trace_kmalloc+0xeb/0x110 [ 484.956061][T15506] ? __kasan_kmalloc+0xaa/0xb0 [ 484.956075][T15506] ? __kmalloc_node_track_caller_noprof+0x33b/0x890 [ 484.956091][T15506] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 484.956110][T15506] ? policy_nodemask+0xed/0x4f0 [ 484.956128][T15506] alloc_pages_mpol+0x1fb/0x540 [ 484.956146][T15506] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 484.956162][T15506] ? __alloc_skb+0x5b7/0x710 [ 484.956180][T15506] ? __pfx___alloc_skb+0x10/0x10 [ 484.956198][T15506] ? finish_task_switch.isra.0+0x2c0/0x1010 [ 484.956223][T15506] alloc_pages_noprof+0x1a/0x160 [ 484.956242][T15506] alloc_skb_with_frags+0x4e7/0x760 [ 484.956267][T15506] sock_alloc_send_pskb+0x801/0x980 [ 484.956288][T15506] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 484.956306][T15506] ? rcu_is_watching+0x12/0xc0 [ 484.956321][T15506] ? futex_unqueue+0x133/0x2c0 [ 484.956343][T15506] ? rcu_is_watching+0x12/0xc0 [ 484.956358][T15506] tun_get_user+0x904/0x3c20 [ 484.956376][T15506] ? rcu_is_watching+0x12/0xc0 [ 484.956390][T15506] ? __pfx_tun_get_user+0x10/0x10 [ 484.956406][T15506] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 484.956423][T15506] ? tun_get+0x191/0x370 [ 484.956435][T15506] ? rcu_is_watching+0x12/0xc0 [ 484.956450][T15506] ? tun_get+0x191/0x370 [ 484.956461][T15506] ? lock_release+0x24d/0x310 [ 484.956483][T15506] tun_chr_write_iter+0xdc/0x200 [ 484.956499][T15506] vfs_write+0x6ac/0x1050 [ 484.956518][T15506] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 484.956534][T15506] ? __pfx_vfs_write+0x10/0x10 [ 484.956553][T15506] ? lock_release+0x24d/0x310 [ 484.956576][T15506] __x64_sys_pwrite64+0x1eb/0x250 [ 484.956597][T15506] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 484.956619][T15506] ? rcu_is_watching+0x12/0xc0 [ 484.956634][T15506] do_syscall_64+0x115/0x840 [ 484.956650][T15506] ? clear_bhb_loop+0x40/0x90 [ 484.956666][T15506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.956681][T15506] RIP: 0033:0x7ff96199ce59 [ 484.956695][T15506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.956709][T15506] RSP: 002b:00007ff96280b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 484.956724][T15506] RAX: ffffffffffffffda RBX: 00007ff961c16090 RCX: 00007ff96199ce59 [ 484.956735][T15506] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 00000000000000c8 [ 484.956744][T15506] RBP: 00007ff961a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 484.956754][T15506] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 484.956763][T15506] R13: 00007ff961c16128 R14: 00007ff961c16090 R15: 00007fffa4ade378 [ 484.956778][T15506] [ 485.503551][ C0] bridge0: port 1(dummy0) entered learning state [ 485.951936][T15375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.241566][ T30] audit: type=1804 audit(8277292050.910:18): pid=15532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2102" name="/newroot/550/file0" dev="tmpfs" ino=2935 res=1 errno=0 [ 486.583489][T15375] veth0_vlan: entered promiscuous mode [ 486.645363][T15375] veth1_vlan: entered promiscuous mode [ 486.689573][T15538] NFSD: Failed to start, no listeners configured. [ 486.761609][T15375] veth0_macvtap: entered promiscuous mode [ 486.785686][ T50] Bluetooth: hci4: command tx timeout [ 486.818823][T15375] veth1_macvtap: entered promiscuous mode [ 486.858255][T15543] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2105'. [ 486.919831][T15375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.981524][T15375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.039712][ T7511] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.085459][ T7511] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.132191][ T7511] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.182097][ T7511] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.319254][ T7511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.368607][ T7511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.457729][ T7512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.503935][ T7512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.240730][T15589] snd_virmidi snd_virmidi.0: control 53842:9:2:y:-9 is already present [ 488.291124][T15591] : Can't lookup blockdev [ 488.363339][T15591] Process accounting paused [ 488.457272][ T50] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 489.607091][ T30] audit: type=1804 audit(8277292054.300:19): pid=15625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2122" name="/newroot/556/file0" dev="tmpfs" ino=2966 res=1 errno=0 [ 490.387426][T15647] FAULT_INJECTION: forcing a failure. [ 490.387426][T15647] name failslab, interval 1, probability 0, space 0, times 0 [ 490.451900][T15634] Process accounting resumed [ 490.457522][T15647] CPU: 0 UID: 0 PID: 15647 Comm: syz.0.2127 Tainted: G L syzkaller #0 PREEMPT(full) [ 490.457547][T15647] Tainted: [L]=SOFTLOCKUP [ 490.457552][T15647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 490.457561][T15647] Call Trace: [ 490.457566][T15647] [ 490.457572][T15647] dump_stack_lvl+0x100/0x190 [ 490.457591][T15647] should_fail_ex.cold+0x5/0xa [ 490.457608][T15647] ? __kmalloc_noprof+0xba/0x840 [ 490.457630][T15647] ? lsm_blob_alloc+0x68/0x90 [ 490.457643][T15647] should_failslab+0xc2/0x120 [ 490.457661][T15647] __kmalloc_noprof+0xe0/0x840 [ 490.457681][T15647] ? trace_kmem_cache_alloc+0xdd/0x100 [ 490.457699][T15647] lsm_blob_alloc+0x68/0x90 [ 490.457712][T15647] security_sk_alloc+0x2d/0x290 [ 490.457730][T15647] sk_prot_alloc+0x1d1/0x2a0 [ 490.457745][T15647] sk_alloc+0x36/0xe80 [ 490.457765][T15647] kcm_create+0xfc/0x6a0 [ 490.457782][T15647] __sock_create+0x339/0x860 [ 490.457798][T15647] __sys_socket+0x14d/0x260 [ 490.457814][T15647] ? __pfx___sys_socket+0x10/0x10 [ 490.457833][T15647] __x64_sys_socket+0x72/0xb0 [ 490.457849][T15647] do_syscall_64+0x115/0x840 [ 490.457865][T15647] ? clear_bhb_loop+0x40/0x90 [ 490.457881][T15647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.457896][T15647] RIP: 0033:0x7f7fc1f9ce59 [ 490.457908][T15647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.457923][T15647] RSP: 002b:00007f7fc2e8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 490.457937][T15647] RAX: ffffffffffffffda RBX: 00007f7fc2215fa0 RCX: 00007f7fc1f9ce59 [ 490.457947][T15647] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000029 [ 490.457956][T15647] RBP: 00007f7fc2032e6f R08: 0000000000000000 R09: 0000000000000000 [ 490.457966][T15647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.457978][T15647] R13: 00007f7fc2216038 R14: 00007f7fc2215fa0 R15: 00007fff63a945f8 [ 490.457991][T15647] [ 491.392926][ T50] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 492.456984][T15654] kexec: Could not allocate control_code_buffer [ 492.648123][T15689] netlink: 334 bytes leftover after parsing attributes in process `syz.4.2136'. [ 492.815637][T15689] sg_write: data in/out 8156/3992 bytes for SCSI command 0x0-- guessing data in; [ 492.815637][T15689] program syz.4.2136 not setting count and/or reply_len properly [ 493.031219][T15704] snd_virmidi snd_virmidi.0: control 53842:9:2:y:-9 is already present [ 493.458327][T15723] busy [ 493.483440][T15723] FAULT_INJECTION: forcing a failure. [ 493.483440][T15723] name fail_futex, interval 1, probability 0, space 0, times 0 [ 493.558850][T15723] CPU: 0 UID: 0 PID: 15723 Comm: syz.0.2144 Tainted: G L syzkaller #0 PREEMPT(full) [ 493.558876][T15723] Tainted: [L]=SOFTLOCKUP [ 493.558881][T15723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 493.558891][T15723] Call Trace: [ 493.558895][T15723] [ 493.558901][T15723] dump_stack_lvl+0x100/0x190 [ 493.558920][T15723] should_fail_ex.cold+0x5/0xa [ 493.558937][T15723] get_futex_key+0x1d2/0x14f0 [ 493.558960][T15723] ? __pfx_get_futex_key+0x10/0x10 [ 493.558987][T15723] ? rcu_is_watching+0x12/0xc0 [ 493.559002][T15723] ? lock_acquire+0x301/0x370 [ 493.559024][T15723] futex_wake+0xf4/0x5e0 [ 493.559040][T15723] ? __mutex_lock+0x26d/0x1bd0 [ 493.559057][T15723] ? __pfx_futex_wake+0x10/0x10 [ 493.559074][T15723] ? exit_mm_release+0x19/0x30 [ 493.559088][T15723] ? lock_release+0x24d/0x310 [ 493.559109][T15723] do_futex+0x2b2/0x440 [ 493.559122][T15723] ? __pfx_do_futex+0x10/0x10 [ 493.559135][T15723] ? lock_release+0x24d/0x310 [ 493.559161][T15723] mm_release+0x24a/0x2f0 [ 493.559184][T15723] do_exit+0x707/0x2ae0 [ 493.559203][T15723] ? __pfx_do_exit+0x10/0x10 [ 493.559223][T15723] ? do_raw_spin_lock+0x128/0x260 [ 493.559237][T15723] ? get_signal+0x7e0/0x21e0 [ 493.559251][T15723] do_group_exit+0xd5/0x2a0 [ 493.559269][T15723] get_signal+0x1ec7/0x21e0 [ 493.559285][T15723] ? __pfx_get_signal+0x10/0x10 [ 493.559299][T15723] ? do_futex+0x190/0x440 [ 493.559313][T15723] arch_do_signal_or_restart+0x91/0x7a0 [ 493.559336][T15723] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 493.559361][T15723] ? rcu_is_watching+0x12/0xc0 [ 493.559376][T15723] exit_to_user_mode_loop+0x139/0x6f0 [ 493.559398][T15723] ? rcu_is_watching+0x12/0xc0 [ 493.559414][T15723] do_syscall_64+0x652/0x840 [ 493.559429][T15723] ? clear_bhb_loop+0x40/0x90 [ 493.559446][T15723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.559461][T15723] RIP: 0033:0x7f7fc1f9ce59 [ 493.559473][T15723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.559487][T15723] RSP: 002b:00007f7fc2e8a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 493.559503][T15723] RAX: fffffffffffffe00 RBX: 00007f7fc2215fa8 RCX: 00007f7fc1f9ce59 [ 493.559513][T15723] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7fc2215fa8 [ 493.559523][T15723] RBP: 00007f7fc2215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 493.559533][T15723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 493.559542][T15723] R13: 00007f7fc2216038 R14: 00007fff63a94510 R15: 00007fff63a945f8 [ 493.559555][T15723] [ 494.494977][T15739] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5619] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[15739] [ 496.010251][T15777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2158'. [ 496.387780][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.394139][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 498.544303][ T50] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 498.720066][ T30] audit: type=1804 audit(8277292063.410:20): pid=15787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2160" name="/newroot/540/file0" dev="tmpfs" ino=2851 res=1 errno=0 [ 499.182434][T15801] FAULT_INJECTION: forcing a failure. [ 499.182434][T15801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.237781][T15801] CPU: 0 UID: 0 PID: 15801 Comm: syz.0.2163 Tainted: G L syzkaller #0 PREEMPT(full) [ 499.237807][T15801] Tainted: [L]=SOFTLOCKUP [ 499.237813][T15801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 499.237822][T15801] Call Trace: [ 499.237827][T15801] [ 499.237833][T15801] dump_stack_lvl+0x100/0x190 [ 499.237852][T15801] should_fail_ex.cold+0x5/0xa [ 499.237869][T15801] _copy_from_user+0x2e/0xd0 [ 499.237892][T15801] __x64_sys_cachestat+0x18a/0x5f0 [ 499.237917][T15801] ? __pfx___x64_sys_cachestat+0x10/0x10 [ 499.237943][T15801] ? rcu_is_watching+0x12/0xc0 [ 499.237960][T15801] do_syscall_64+0x115/0x840 [ 499.237977][T15801] ? clear_bhb_loop+0x40/0x90 [ 499.237993][T15801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.238008][T15801] RIP: 0033:0x7f7fc1f9ce59 [ 499.238020][T15801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.238035][T15801] RSP: 002b:00007f7fc2e8a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c3 [ 499.238050][T15801] RAX: ffffffffffffffda RBX: 00007f7fc2215fa0 RCX: 00007f7fc1f9ce59 [ 499.238060][T15801] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 499.238069][T15801] RBP: 00007f7fc2e8a090 R08: 0000000000000000 R09: 0000000000000000 [ 499.238078][T15801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.238087][T15801] R13: 00007f7fc2216038 R14: 00007f7fc2215fa0 R15: 00007fff63a945f8 [ 499.238100][T15801] [ 500.033920][T15789] Process accounting resumed [ 500.864322][ C0] bridge0: port 1(dummy0) entered forwarding state [ 500.870875][ C0] bridge0: topology change detected, propagating [ 501.681901][ T30] audit: type=1804 audit(8277292066.370:21): pid=15828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2170" name="/newroot/551/file0" dev="tmpfs" ino=2916 res=1 errno=0 [ 502.232956][ T30] audit: type=1804 audit(8277292066.920:22): pid=15832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2171" name="/newroot/552/file0" dev="tmpfs" ino=2922 res=1 errno=0 [ 502.608285][ T30] audit: type=1804 audit(8277292067.300:23): pid=15840 uid=2 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2173" name="/newroot/553/file0" dev="tmpfs" ino=2928 res=1 errno=0 [ 503.580680][T15856] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2176'. [ 503.610800][T15856] veth0_macvtap: entered promiscuous mode [ 503.634360][T15856] veth0_macvtap: entered allmulticast mode [ 504.064077][ T50] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 504.407816][ T30] audit: type=1804 audit(8277292069.100:24): pid=15877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2182" name="/newroot/11/file0" dev="tmpfs" ino=74 res=1 errno=0 [ 504.888104][T15893] FAULT_INJECTION: forcing a failure. [ 504.888104][T15893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.888133][T15893] CPU: 0 UID: 0 PID: 15893 Comm: syz.4.2185 Tainted: G L syzkaller #0 PREEMPT(full) [ 504.888154][T15893] Tainted: [L]=SOFTLOCKUP [ 504.888160][T15893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 504.888169][T15893] Call Trace: [ 504.888174][T15893] [ 504.888179][T15893] dump_stack_lvl+0x100/0x190 [ 504.888198][T15893] should_fail_ex.cold+0x5/0xa [ 504.888215][T15893] _copy_from_user+0x2e/0xd0 [ 504.888238][T15893] get_timespec64+0x8b/0x1b0 [ 504.888258][T15893] ? __pfx_get_timespec64+0x10/0x10 [ 504.888278][T15893] __x64_sys_futex+0x21a/0x4d0 [ 504.888294][T15893] ? __pfx___x64_sys_futex+0x10/0x10 [ 504.888309][T15893] ? rcu_is_watching+0x12/0xc0 [ 504.888324][T15893] do_syscall_64+0x115/0x840 [ 504.888340][T15893] ? clear_bhb_loop+0x40/0x90 [ 504.888357][T15893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.888372][T15893] RIP: 0033:0x7f9e6af9ce59 [ 504.888383][T15893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.888397][T15893] RSP: 002b:00007ffc37b18578 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 504.888413][T15893] RAX: ffffffffffffffda RBX: 000000000007b402 RCX: 00007f9e6af9ce59 [ 504.888423][T15893] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9e6b21609c [ 504.888432][T15893] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000 [ 504.888441][T15893] R10: 00007ffc37b18680 R11: 0000000000000246 R12: 00007ffc37b186a0 [ 504.888451][T15893] R13: 00007f9e6b21609c R14: 000000000007b434 R15: 00007ffc37b18680 [ 504.888464][T15893] [ 506.120181][T15879] Process accounting resumed [ 506.322741][T15923] can: request_module (can-proto-0) failed. [ 506.374953][T15925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2191'. [ 506.662408][ T4941] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 507.391092][T15946] netlink: 206 bytes leftover after parsing attributes in process `syz.0.2195'. [ 508.473259][T15968] FAULT_INJECTION: forcing a failure. [ 508.473259][T15968] name fail_futex, interval 1, probability 0, space 0, times 0 [ 508.555430][T15967] FAULT_INJECTION: forcing a failure. [ 508.555430][T15967] name failslab, interval 1, probability 0, space 0, times 0 [ 508.576751][T15969] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.2.2198: No space for directory leaf checksum. Please run e2fsck -D. [ 508.626184][T15967] CPU: 0 UID: 0 PID: 15967 Comm: syz.4.2201 Tainted: G L syzkaller #0 PREEMPT(full) [ 508.626212][T15967] Tainted: [L]=SOFTLOCKUP [ 508.626218][T15967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 508.626228][T15967] Call Trace: [ 508.626233][T15967] [ 508.626241][T15967] dump_stack_lvl+0x100/0x190 [ 508.626262][T15967] should_fail_ex.cold+0x5/0xa [ 508.626279][T15967] ? __kmalloc_noprof+0xba/0x840 [ 508.626300][T15967] ? afs_alloc_vlserver_list+0x24/0xa0 [ 508.626323][T15967] should_failslab+0xc2/0x120 [ 508.626340][T15967] __kmalloc_noprof+0xe0/0x840 [ 508.626360][T15967] ? lockdep_init_map_type+0x5c/0x250 [ 508.626383][T15967] afs_alloc_vlserver_list+0x24/0xa0 [ 508.626406][T15967] afs_lookup_cell+0x15fa/0x1b10 [ 508.626422][T15967] ? __pfx_afs_lookup_cell+0x10/0x10 [ 508.626435][T15967] ? __pfx___might_resched+0x10/0x10 [ 508.626455][T15967] ? rcu_is_watching+0x12/0xc0 [ 508.626473][T15967] afs_cell_init+0x17d/0x380 [ 508.626487][T15967] afs_proc_rootcell_write+0x1c9/0x280 [ 508.626508][T15967] proc_simple_write+0x10e/0x1a0 [ 508.626531][T15967] ? __pfx_proc_simple_write+0x10/0x10 [ 508.626553][T15967] proc_reg_write+0x240/0x330 [ 508.626573][T15967] vfs_write+0x2aa/0x1050 [ 508.626593][T15967] ? __pfx_proc_reg_write+0x10/0x10 [ 508.626612][T15967] ? __pfx_vfs_write+0x10/0x10 [ 508.626631][T15967] ? rcu_is_watching+0x12/0xc0 [ 508.626647][T15967] ? __fget_files+0x21f/0x3d0 [ 508.626668][T15967] ksys_write+0x12a/0x250 [ 508.626687][T15967] ? __pfx_ksys_write+0x10/0x10 [ 508.626707][T15967] ? rcu_is_watching+0x12/0xc0 [ 508.626722][T15967] do_syscall_64+0x115/0x840 [ 508.626738][T15967] ? clear_bhb_loop+0x40/0x90 [ 508.626754][T15967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.626769][T15967] RIP: 0033:0x7f9e6af9ce59 [ 508.626782][T15967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.626797][T15967] RSP: 002b:00007f9e6bec5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 508.626812][T15967] RAX: ffffffffffffffda RBX: 00007f9e6b215fa0 RCX: 00007f9e6af9ce59 [ 508.626822][T15967] RDX: 0000000000000007 RSI: 00002000000000c0 RDI: 0000000000000003 [ 508.626832][T15967] RBP: 00007f9e6b032e6f R08: 0000000000000000 R09: 0000000000000000 [ 508.626840][T15967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 508.626849][T15967] R13: 00007f9e6b216038 R14: 00007f9e6b215fa0 R15: 00007ffc37b18418 [ 508.626864][T15967] [ 509.169280][T15968] CPU: 0 UID: 0 PID: 15968 Comm: syz.3.2200 Tainted: G L syzkaller #0 PREEMPT(full) [ 509.169308][T15968] Tainted: [L]=SOFTLOCKUP [ 509.169315][T15968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 509.169325][T15968] Call Trace: [ 509.169330][T15968] [ 509.169338][T15968] dump_stack_lvl+0x100/0x190 [ 509.169359][T15968] should_fail_ex.cold+0x5/0xa [ 509.169376][T15968] ? rcu_is_watching+0x12/0xc0 [ 509.169393][T15968] get_futex_key+0x1d2/0x14f0 [ 509.169416][T15968] ? __pfx_get_futex_key+0x10/0x10 [ 509.169437][T15968] ? __pfx_futex_hash+0x10/0x10 [ 509.169460][T15968] futex_wake+0xf4/0x5e0 [ 509.169475][T15968] ? futex_wait+0x11e/0x370 [ 509.169491][T15968] ? __pfx_futex_wake+0x10/0x10 [ 509.169508][T15968] ? do_sys_openat2+0x1b6/0x1e0 [ 509.169523][T15968] ? rcu_is_watching+0x12/0xc0 [ 509.169538][T15968] ? do_sys_openat2+0x1b6/0x1e0 [ 509.169552][T15968] ? lock_release+0x24d/0x310 [ 509.169573][T15968] do_futex+0x2b2/0x440 [ 509.169586][T15968] ? __pfx_do_futex+0x10/0x10 [ 509.169599][T15968] ? lock_release+0x24d/0x310 [ 509.169620][T15968] __x64_sys_futex+0x34f/0x4d0 [ 509.169634][T15968] ? fdget_pos+0x2c0/0x380 [ 509.169655][T15968] ? __pfx___x64_sys_futex+0x10/0x10 [ 509.169668][T15968] ? ksys_write+0x1ac/0x250 [ 509.169687][T15968] ? __pfx_ksys_write+0x10/0x10 [ 509.169707][T15968] ? rcu_is_watching+0x12/0xc0 [ 509.169722][T15968] do_syscall_64+0x115/0x840 [ 509.169738][T15968] ? clear_bhb_loop+0x40/0x90 [ 509.169754][T15968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.169769][T15968] RIP: 0033:0x7ff96199ce59 [ 509.169783][T15968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.169798][T15968] RSP: 002b:00007ff96280b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 509.169813][T15968] RAX: ffffffffffffffda RBX: 00007ff961c16098 RCX: 00007ff96199ce59 [ 509.169823][T15968] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff961c1609c [ 509.169832][T15968] RBP: 00007ff961c16090 R08: 0000000000000001 R09: 0000000000000000 [ 509.169842][T15968] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 509.169851][T15968] R13: 00007ff961c16128 R14: 00007fffa4ade290 R15: 00007fffa4ade378 [ 509.169866][T15968] [ 509.667051][T15969] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.2.2198: checksumming directory block 0 [ 509.742190][T15969] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 509.823795][T15969] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.2.2198: No space for directory leaf checksum. Please run e2fsck -D. [ 509.933522][T15969] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.2.2198: checksumming directory block 0 [ 510.070579][T15969] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 510.152599][T15969] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.2.2198: No space for directory leaf checksum. Please run e2fsck -D. [ 510.254568][T15969] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.2.2198: checksumming directory block 0 [ 510.488918][T15969] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 510.666973][T15969] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.2.2198: No space for directory leaf checksum. Please run e2fsck -D. [ 510.711635][ T30] audit: type=1804 audit(8277292075.390:25): pid=15987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2203" name="/newroot/14/file0" dev="tmpfs" ino=90 res=1 errno=0 [ 510.907411][T15969] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.2.2198: checksumming directory block 0 [ 511.060312][ T4941] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 511.095658][T15969] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 511.209534][T15969] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 511.326802][T15969] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 511.357417][T15997] blktrace: Concurrent blktraces are not allowed on loop2 [ 511.583383][T15997] FAULT_INJECTION: forcing a failure. [ 511.583383][T15997] name fail_futex, interval 1, probability 0, space 0, times 0 [ 511.638004][T15997] CPU: 0 UID: 0 PID: 15997 Comm: syz.4.2207 Tainted: G L syzkaller #0 PREEMPT(full) [ 511.638031][T15997] Tainted: [L]=SOFTLOCKUP [ 511.638037][T15997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 511.638046][T15997] Call Trace: [ 511.638051][T15997] [ 511.638056][T15997] dump_stack_lvl+0x100/0x190 [ 511.638076][T15997] should_fail_ex.cold+0x5/0xa [ 511.638093][T15997] get_futex_key+0x295/0x14f0 [ 511.638115][T15997] ? __pfx_get_futex_key+0x10/0x10 [ 511.638137][T15997] ? rcu_is_watching+0x12/0xc0 [ 511.638152][T15997] ? lock_acquire+0x301/0x370 [ 511.638176][T15997] futex_wake+0xf4/0x5e0 [ 511.638192][T15997] ? __mutex_lock+0x26d/0x1bd0 [ 511.638209][T15997] ? __pfx_futex_wake+0x10/0x10 [ 511.638226][T15997] ? exit_mm_release+0x19/0x30 [ 511.638240][T15997] ? lock_release+0x24d/0x310 [ 511.638261][T15997] do_futex+0x2b2/0x440 [ 511.638275][T15997] ? __pfx_do_futex+0x10/0x10 [ 511.638288][T15997] ? lock_release+0x24d/0x310 [ 511.638309][T15997] mm_release+0x24a/0x2f0 [ 511.638331][T15997] do_exit+0x707/0x2ae0 [ 511.638350][T15997] ? __pfx_do_exit+0x10/0x10 [ 511.638366][T15997] ? do_raw_spin_lock+0x128/0x260 [ 511.638380][T15997] ? get_signal+0x7e0/0x21e0 [ 511.638394][T15997] do_group_exit+0xd5/0x2a0 [ 511.638412][T15997] get_signal+0x1ec7/0x21e0 [ 511.638428][T15997] ? __pfx_get_signal+0x10/0x10 [ 511.638442][T15997] ? do_futex+0x190/0x440 [ 511.638456][T15997] arch_do_signal_or_restart+0x91/0x7a0 [ 511.638479][T15997] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 511.638504][T15997] ? rcu_is_watching+0x12/0xc0 [ 511.638534][T15997] exit_to_user_mode_loop+0x139/0x6f0 [ 511.638556][T15997] ? rcu_is_watching+0x12/0xc0 [ 511.638571][T15997] do_syscall_64+0x652/0x840 [ 511.638586][T15997] ? clear_bhb_loop+0x40/0x90 [ 511.638602][T15997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.638617][T15997] RIP: 0033:0x7f9e6af9ce59 [ 511.638629][T15997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.638643][T15997] RSP: 002b:00007f9e6bea40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 511.638658][T15997] RAX: fffffffffffffe00 RBX: 00007f9e6b216098 RCX: 00007f9e6af9ce59 [ 511.638668][T15997] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9e6b216098 [ 511.638678][T15997] RBP: 00007f9e6b216090 R08: 0000000000000000 R09: 0000000000000000 [ 511.638687][T15997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.638696][T15997] R13: 00007f9e6b216128 R14: 00007ffc37b18330 R15: 00007ffc37b18418 [ 511.638710][T15997] [ 512.626253][T16015] busy [ 512.817448][T16022] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2212'. [ 513.628752][ T4941] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 513.919694][T16046] futex_wake_op: syz.3.2218 tries to shift op by -2048; fix this program [ 514.331872][T16057] FAULT_INJECTION: forcing a failure. [ 514.331872][T16057] name failslab, interval 1, probability 0, space 0, times 0 [ 514.473136][T16057] CPU: 0 UID: 0 PID: 16057 Comm: syz.0.2222 Tainted: G L syzkaller #0 PREEMPT(full) [ 514.473163][T16057] Tainted: [L]=SOFTLOCKUP [ 514.473169][T16057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 514.473179][T16057] Call Trace: [ 514.473184][T16057] [ 514.473190][T16057] dump_stack_lvl+0x100/0x190 [ 514.473209][T16057] should_fail_ex.cold+0x5/0xa [ 514.473226][T16057] ? kmem_cache_alloc_noprof+0x54/0x6d0 [ 514.473243][T16057] should_failslab+0xc2/0x120 [ 514.473260][T16057] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 514.473275][T16057] ? alloc_empty_file+0x5b/0x1c0 [ 514.473289][T16057] ? lock_release+0x24d/0x310 [ 514.473311][T16057] alloc_empty_file+0x5b/0x1c0 [ 514.473325][T16057] alloc_file_pseudo+0x183/0x290 [ 514.473340][T16057] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 514.473358][T16057] ioctx_alloc+0x5d6/0x21a0 [ 514.473379][T16057] ? do_raw_spin_lock+0x128/0x260 [ 514.473393][T16057] ? rcu_is_watching+0x12/0xc0 [ 514.473409][T16057] ? __might_fault+0xc5/0x140 [ 514.473430][T16057] ? __pfx_ioctx_alloc+0x10/0x10 [ 514.473450][T16057] ? __might_fault+0xc5/0x140 [ 514.473473][T16057] __x64_sys_io_setup+0xc9/0x220 [ 514.473498][T16057] do_syscall_64+0x115/0x840 [ 514.473514][T16057] ? clear_bhb_loop+0x40/0x90 [ 514.473530][T16057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.473545][T16057] RIP: 0033:0x7f7fc1f9ce59 [ 514.473557][T16057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.473572][T16057] RSP: 002b:00007f7fc2e69028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 514.473587][T16057] RAX: ffffffffffffffda RBX: 00007f7fc2216090 RCX: 00007f7fc1f9ce59 [ 514.473598][T16057] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000007ffe [ 514.473607][T16057] RBP: 00007f7fc2032e6f R08: 0000000000000000 R09: 0000000000000000 [ 514.473616][T16057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.473625][T16057] R13: 00007f7fc2216128 R14: 00007f7fc2216090 R15: 00007fff63a945f8 [ 514.473639][T16057] [ 515.655366][ T30] audit: type=1804 audit(8277292080.330:26): pid=16083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2230" name="/newroot/585/file0" dev="tmpfs" ino=3118 res=1 errno=0 [ 515.822878][ T4941] block nbd0: Receive control failed (result -32) [ 516.706347][ T4941] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 517.767842][T16060] kexec: Could not allocate control_code_buffer [ 518.019568][T16119] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.3.2238: No space for directory leaf checksum. Please run e2fsck -D. [ 518.224176][T16119] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.3.2238: checksumming directory block 0 [ 518.409795][T16119] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 518.555108][T16119] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.3.2238: No space for directory leaf checksum. Please run e2fsck -D. [ 518.706034][T16119] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.3.2238: checksumming directory block 0 [ 518.820096][T16119] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 518.908296][T16119] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.3.2238: No space for directory leaf checksum. Please run e2fsck -D. [ 519.013308][T16136] raw_sendmsg: syz.0.2242 forgot to set AF_INET. Fix it! [ 519.044371][T16119] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.3.2238: checksumming directory block 0 [ 519.078031][T16136] random: crng reseeded on system resumption [ 519.121507][T16119] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 519.250681][T16119] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.3.2238: No space for directory leaf checksum. Please run e2fsck -D. [ 519.430940][T16119] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.3.2238: checksumming directory block 0 [ 519.472819][T16146] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2245'. [ 519.569381][T16119] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 519.671462][T16119] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 519.791848][T16119] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 519.988822][T16119] Process accounting resumed [ 521.241476][T16157] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 521.319413][T16157] Process accounting paused [ 521.432070][T16180] net_ratelimit: 196 callbacks suppressed [ 521.432086][T16180] netlink: zone id is out of range [ 521.491083][T16180] netlink: zone id is out of range [ 521.523109][T16180] netlink: zone id is out of range [ 521.557957][T16184] FAULT_INJECTION: forcing a failure. [ 521.557957][T16184] name failslab, interval 1, probability 0, space 0, times 0 [ 521.632658][T16180] netlink: zone id is out of range [ 521.662528][T16180] netlink: zone id is out of range [ 521.692059][T16184] CPU: 0 UID: 0 PID: 16184 Comm: syz.4.2251 Tainted: G L syzkaller #0 PREEMPT(full) [ 521.692086][T16184] Tainted: [L]=SOFTLOCKUP [ 521.692092][T16184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 521.692102][T16184] Call Trace: [ 521.692107][T16184] [ 521.692113][T16184] dump_stack_lvl+0x100/0x190 [ 521.692133][T16184] should_fail_ex.cold+0x5/0xa [ 521.692150][T16184] ? __kmalloc_cache_noprof+0x53/0x6e0 [ 521.692174][T16184] should_failslab+0xc2/0x120 [ 521.692192][T16184] __kmalloc_cache_noprof+0x7a/0x6e0 [ 521.692212][T16184] ? sctp_endpoint_new+0xfc/0xb20 [ 521.692235][T16184] sctp_endpoint_new+0xfc/0xb20 [ 521.692254][T16184] ? rcu_is_watching+0x12/0xc0 [ 521.692270][T16184] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 521.692290][T16184] ? lockdep_init_map_type+0x5c/0x250 [ 521.692312][T16184] ? lockdep_init_map_type+0x5c/0x250 [ 521.692332][T16184] ? lockdep_init_map_type+0x5c/0x250 [ 521.692354][T16184] ? lockdep_init_map_type+0x5c/0x250 [ 521.692376][T16184] sctp_init_sock+0xe2b/0x1300 [ 521.692395][T16184] ? __pfx_sctp_init_sock+0x10/0x10 [ 521.692414][T16184] inet_create+0x94c/0x1060 [ 521.692433][T16184] ? inet_create+0x94/0x1060 [ 521.692452][T16184] __sock_create+0x339/0x860 [ 521.692469][T16184] __sys_socket+0x14d/0x260 [ 521.692484][T16184] ? __pfx___sys_socket+0x10/0x10 [ 521.692503][T16184] __x64_sys_socket+0x72/0xb0 [ 521.692519][T16184] do_syscall_64+0x115/0x840 [ 521.692534][T16184] ? clear_bhb_loop+0x40/0x90 [ 521.692551][T16184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.692566][T16184] RIP: 0033:0x7f9e6af9ce59 [ 521.692578][T16184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.692592][T16184] RSP: 002b:00007f9e6bea4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 521.692608][T16184] RAX: ffffffffffffffda RBX: 00007f9e6b216090 RCX: 00007f9e6af9ce59 [ 521.692618][T16184] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 521.692627][T16184] RBP: 00007f9e6b032e6f R08: 0000000000000000 R09: 0000000000000000 [ 521.692636][T16184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.692644][T16184] R13: 00007f9e6b216128 R14: 00007f9e6b216090 R15: 00007ffc37b18418 [ 521.692658][T16184] [ 521.921459][T16180] netlink: zone id is out of range [ 521.926620][T16180] netlink: zone id is out of range [ 521.931768][T16180] netlink: zone id is out of range [ 521.936950][T16180] netlink: zone id is out of range [ 521.942084][T16180] netlink: zone id is out of range [ 522.496409][ T4941] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 523.429221][T16217] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 524.145294][T16230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2262'. [ 524.360989][ T30] audit: type=1804 audit(8277292089.050:27): pid=16237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2261" name="/newroot/30/file0" dev="tmpfs" ino=174 res=1 errno=0 [ 525.062042][T16253] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2268'. [ 525.284532][T16259] zram0: detected capacity change from 16 to 0 [ 525.451002][ T4941] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 525.512878][T16264] futex_wake_op: syz.0.2270 tries to shift op by -2048; fix this program [ 525.665969][T16264] futex_wake_op: syz.0.2270 tries to shift op by -2048; fix this program [ 525.883008][ T7511] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 526.437578][ T50] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 527.863756][ T30] audit: type=1804 audit(8277292092.550:28): pid=16321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2284" name="/newroot/573/file0" dev="tmpfs" ino=3021 res=1 errno=0 [ 528.443178][T16331] FAULT_INJECTION: forcing a failure. [ 528.443178][T16331] name failslab, interval 1, probability 0, space 0, times 0 [ 528.528819][T16331] CPU: 0 UID: 0 PID: 16331 Comm: syz.4.2287 Tainted: G L syzkaller #0 PREEMPT(full) [ 528.528846][T16331] Tainted: [L]=SOFTLOCKUP [ 528.528853][T16331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 528.528867][T16331] Call Trace: [ 528.528873][T16331] [ 528.528879][T16331] dump_stack_lvl+0x100/0x190 [ 528.528899][T16331] should_fail_ex.cold+0x5/0xa [ 528.528915][T16331] ? kmem_cache_alloc_noprof+0x54/0x6d0 [ 528.528932][T16331] should_failslab+0xc2/0x120 [ 528.528950][T16331] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 528.528964][T16331] ? security_file_alloc+0x34/0x2c0 [ 528.528984][T16331] ? trace_kmem_cache_alloc+0xdd/0x100 [ 528.529003][T16331] security_file_alloc+0x34/0x2c0 [ 528.529023][T16331] init_file+0x95/0x480 [ 528.529036][T16331] alloc_empty_file+0x79/0x1c0 [ 528.529051][T16331] path_openat+0xe7/0x4280 [ 528.529071][T16331] ? kasan_save_stack+0x3f/0x50 [ 528.529085][T16331] ? kasan_save_stack+0x30/0x50 [ 528.529099][T16331] ? kasan_save_track+0x14/0x30 [ 528.529113][T16331] ? __kasan_slab_alloc+0x89/0x90 [ 528.529128][T16331] ? kmem_cache_alloc_noprof+0x241/0x6d0 [ 528.529141][T16331] ? do_getname+0x35/0x390 [ 528.529154][T16331] ? do_sys_openat2+0xc7/0x1e0 [ 528.529169][T16331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.529186][T16331] ? __pfx_path_openat+0x10/0x10 [ 528.529208][T16331] do_file_open+0x20e/0x430 [ 528.529229][T16331] ? __pfx_do_file_open+0x10/0x10 [ 528.529254][T16331] ? alloc_fd+0x471/0x7a0 [ 528.529274][T16331] ? do_getname+0x191/0x390 [ 528.529289][T16331] do_sys_openat2+0x10f/0x1e0 [ 528.529304][T16331] ? __pfx_do_sys_openat2+0x10/0x10 [ 528.529320][T16331] ? __do_sys_prctl+0x197e/0x2270 [ 528.529341][T16331] __x64_sys_openat+0x12d/0x210 [ 528.529357][T16331] ? __pfx___x64_sys_openat+0x10/0x10 [ 528.529374][T16331] ? rcu_is_watching+0x12/0xc0 [ 528.529393][T16331] do_syscall_64+0x115/0x840 [ 528.529408][T16331] ? clear_bhb_loop+0x40/0x90 [ 528.529425][T16331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.529440][T16331] RIP: 0033:0x7f9e6af9ce59 [ 528.529452][T16331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.529468][T16331] RSP: 002b:00007f9e6bec5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 528.529482][T16331] RAX: ffffffffffffffda RBX: 00007f9e6b215fa0 RCX: 00007f9e6af9ce59 [ 528.529493][T16331] RDX: 000000000018a041 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 528.529502][T16331] RBP: 00007f9e6b032e6f R08: 0000000000000000 R09: 0000000000000000 [ 528.529511][T16331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.529520][T16331] R13: 00007f9e6b216038 R14: 00007f9e6b215fa0 R15: 00007ffc37b18418 [ 528.529533][T16331] [ 530.631882][ T30] audit: type=1804 audit(8277292095.320:29): pid=16373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2295" name="/newroot/576/file0" dev="tmpfs" ino=3037 res=1 errno=0 [ 531.128401][T16384] snd_virmidi snd_virmidi.0: control 53842:9:2:y:-9 is already present [ 531.139803][T16366] Process accounting paused [ 531.569231][ T30] audit: type=1804 audit(8277292096.260:30): pid=16397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2300" name="/newroot/597/file0" dev="tmpfs" ino=3180 res=1 errno=0 [ 531.874523][T16413] FAULT_INJECTION: forcing a failure. [ 531.874523][T16413] name fail_futex, interval 1, probability 0, space 0, times 0 [ 531.955428][T16412] FAULT_INJECTION: forcing a failure. [ 531.955428][T16412] name failslab, interval 1, probability 0, space 0, times 0 [ 531.976232][T16413] CPU: 0 UID: 0 PID: 16413 Comm: syz.3.2304 Tainted: G L syzkaller #0 PREEMPT(full) [ 531.976261][T16413] Tainted: [L]=SOFTLOCKUP [ 531.976267][T16413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 531.976276][T16413] Call Trace: [ 531.976281][T16413] [ 531.976288][T16413] dump_stack_lvl+0x100/0x190 [ 531.976308][T16413] should_fail_ex.cold+0x5/0xa [ 531.976326][T16413] get_futex_key+0x1d2/0x14f0 [ 531.976350][T16413] ? __pfx_get_futex_key+0x10/0x10 [ 531.976371][T16413] ? rcu_is_watching+0x12/0xc0 [ 531.976386][T16413] ? trace_irq_enable.constprop.0+0x122/0x160 [ 531.976409][T16413] futex_wake+0xf4/0x5e0 [ 531.976425][T16413] ? kfree+0x22b/0x6c0 [ 531.976446][T16413] ? __pfx_futex_wake+0x10/0x10 [ 531.976471][T16413] ? preempt_count_add+0x76/0x150 [ 531.976493][T16413] ? ksys_write+0x190/0x250 [ 531.976512][T16413] ? rcu_is_watching+0x12/0xc0 [ 531.976529][T16413] do_futex+0x2b2/0x440 [ 531.976543][T16413] ? __pfx_do_futex+0x10/0x10 [ 531.976556][T16413] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 531.976575][T16413] __x64_sys_futex+0x34f/0x4d0 [ 531.976590][T16413] ? fput+0x79/0x100 [ 531.976602][T16413] ? __pfx___x64_sys_futex+0x10/0x10 [ 531.976615][T16413] ? ksys_write+0x1ac/0x250 [ 531.976634][T16413] ? __pfx_ksys_write+0x10/0x10 [ 531.976654][T16413] ? rcu_is_watching+0x12/0xc0 [ 531.976670][T16413] do_syscall_64+0x115/0x840 [ 531.976687][T16413] ? clear_bhb_loop+0x40/0x90 [ 531.976704][T16413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.976719][T16413] RIP: 0033:0x7ff96199ce59 [ 531.976731][T16413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.976747][T16413] RSP: 002b:00007ff96280b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 531.976762][T16413] RAX: ffffffffffffffda RBX: 00007ff961c16098 RCX: 00007ff96199ce59 [ 531.976773][T16413] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff961c1609c [ 531.976782][T16413] RBP: 00007ff961c16090 R08: 0000000000000001 R09: 0000000000000000 [ 531.976792][T16413] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 531.976801][T16413] R13: 00007ff961c16128 R14: 00007fffa4ade290 R15: 00007fffa4ade378 [ 531.976814][T16413] [ 532.463648][T16412] CPU: 0 UID: 0 PID: 16412 Comm: syz.4.2303 Tainted: G L syzkaller #0 PREEMPT(full) [ 532.463676][T16412] Tainted: [L]=SOFTLOCKUP [ 532.463682][T16412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 532.463692][T16412] Call Trace: [ 532.463697][T16412] [ 532.463703][T16412] dump_stack_lvl+0x100/0x190 [ 532.463724][T16412] should_fail_ex.cold+0x5/0xa [ 532.463740][T16412] ? kmem_cache_alloc_lru_noprof+0x59/0x6e0 [ 532.463757][T16412] should_failslab+0xc2/0x120 [ 532.463774][T16412] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 532.463789][T16412] ? __d_alloc+0x35/0xa50 [ 532.463813][T16412] __d_alloc+0x35/0xa50 [ 532.463834][T16412] d_alloc_pseudo+0x1c/0xc0 [ 532.463850][T16412] alloc_file_pseudo+0x118/0x290 [ 532.463866][T16412] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 532.463883][T16412] __shmem_file_setup+0x205/0x460 [ 532.463902][T16412] ? __pfx___shmem_file_setup+0x10/0x10 [ 532.463921][T16412] ? vm_area_alloc+0x1f/0x160 [ 532.463942][T16412] shmem_zero_setup+0x96/0x1b0 [ 532.463956][T16412] __mmap_region+0x24ef/0x2db0 [ 532.463979][T16412] ? __pfx___mmap_region+0x10/0x10 [ 532.463999][T16412] ? __pfx___might_resched+0x10/0x10 [ 532.464020][T16412] ? process_measurement+0x4c8/0x2350 [ 532.464038][T16412] ? rcu_is_watching+0x12/0xc0 [ 532.464053][T16412] ? process_measurement+0x4c8/0x2350 [ 532.464070][T16412] ? lock_release+0x24d/0x310 [ 532.464090][T16412] ? down_write+0x146/0x1f0 [ 532.464111][T16412] ? debug_object_assert_init+0x1c4/0x300 [ 532.464131][T16412] ? debug_object_assert_init+0x1c4/0x300 [ 532.464149][T16412] ? lock_release+0x24d/0x310 [ 532.464173][T16412] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 532.464193][T16412] ? rcu_is_watching+0x12/0xc0 [ 532.464207][T16412] ? trace_irq_enable.constprop.0+0x122/0x160 [ 532.464241][T16412] mmap_region+0x35d/0x620 [ 532.464254][T16412] ? rcu_is_watching+0x12/0xc0 [ 532.464269][T16412] ? __pfx_mmap_region+0x10/0x10 [ 532.464283][T16412] ? cap_mmap_addr+0x4b/0x120 [ 532.464298][T16412] ? bpf_lsm_mmap_addr+0x9/0x30 [ 532.464318][T16412] ? security_mmap_addr+0x71/0x1e0 [ 532.464338][T16412] ? __get_unmapped_area+0x255/0x3e0 [ 532.464356][T16412] do_mmap+0xc63/0x12f0 [ 532.464374][T16412] ? __pfx_do_mmap+0x10/0x10 [ 532.464391][T16412] ? __pfx_down_write_killable+0x10/0x10 [ 532.464409][T16412] ? __pfx_futex_wait+0x10/0x10 [ 532.464427][T16412] vm_mmap_pgoff+0x29e/0x470 [ 532.464445][T16412] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 532.464463][T16412] ? __pfx_do_futex+0x10/0x10 [ 532.464477][T16412] ksys_mmap_pgoff+0xe4/0x610 [ 532.464494][T16412] ? __x64_sys_futex+0x358/0x4d0 [ 532.464507][T16412] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 532.464524][T16412] ? xfd_validate_state+0x129/0x190 [ 532.464541][T16412] __x64_sys_mmap+0x125/0x190 [ 532.464557][T16412] do_syscall_64+0x115/0x840 [ 532.464582][T16412] ? clear_bhb_loop+0x40/0x90 [ 532.464600][T16412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.464616][T16412] RIP: 0033:0x7f9e6af9ce59 [ 532.464629][T16412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.464644][T16412] RSP: 002b:00007f9e6bea4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 532.464659][T16412] RAX: ffffffffffffffda RBX: 00007f9e6b216090 RCX: 00007f9e6af9ce59 [ 532.464670][T16412] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 532.464679][T16412] RBP: 00007f9e6b032e6f R08: 0000000000000401 R09: 0000000000008000 [ 532.464690][T16412] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 532.464700][T16412] R13: 00007f9e6b216128 R14: 00007f9e6b216090 R15: 00007ffc37b18418 [ 532.464714][T16412] [ 533.685674][T16426] FAULT_INJECTION: forcing a failure. [ 533.685674][T16426] name failslab, interval 1, probability 0, space 0, times 0 [ 533.740303][T16426] CPU: 0 UID: 0 PID: 16426 Comm: syz.0.2307 Tainted: G L syzkaller #0 PREEMPT(full) [ 533.740331][T16426] Tainted: [L]=SOFTLOCKUP [ 533.740337][T16426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 533.740347][T16426] Call Trace: [ 533.740352][T16426] [ 533.740359][T16426] dump_stack_lvl+0x100/0x190 [ 533.740379][T16426] should_fail_ex.cold+0x5/0xa [ 533.740396][T16426] ? kmem_cache_alloc_lru_noprof+0x59/0x6e0 [ 533.740413][T16426] should_failslab+0xc2/0x120 [ 533.740430][T16426] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 533.740445][T16426] ? sock_alloc_inode+0x26/0x2c0 [ 533.740460][T16426] ? __pfx_sock_alloc_inode+0x10/0x10 [ 533.740474][T16426] sock_alloc_inode+0x26/0x2c0 [ 533.740487][T16426] ? __pfx_sock_alloc_inode+0x10/0x10 [ 533.740500][T16426] alloc_inode+0x68/0x250 [ 533.740517][T16426] sock_alloc+0x44/0x280 [ 533.740537][T16426] ? security_socket_create+0x7f/0x250 [ 533.740554][T16426] __sock_create+0xc2/0x860 [ 533.740570][T16426] __sys_socket+0x14d/0x260 [ 533.740586][T16426] ? __pfx___sys_socket+0x10/0x10 [ 533.740604][T16426] __x64_sys_socket+0x72/0xb0 [ 533.740621][T16426] do_syscall_64+0x115/0x840 [ 533.740637][T16426] ? clear_bhb_loop+0x40/0x90 [ 533.740654][T16426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.740669][T16426] RIP: 0033:0x7f7fc1f9ce59 [ 533.740682][T16426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.740697][T16426] RSP: 002b:00007f7fc2e8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 533.740712][T16426] RAX: ffffffffffffffda RBX: 00007f7fc2215fa0 RCX: 00007f7fc1f9ce59 [ 533.740723][T16426] RDX: 0000000001000000 RSI: 0000000000000006 RDI: 0000000000000002 [ 533.740738][T16426] RBP: 00007f7fc2032e6f R08: 0000000000000000 R09: 0000000000000000 [ 533.740751][T16426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.740761][T16426] R13: 00007f7fc2216038 R14: 00007f7fc2215fa0 R15: 00007fff63a945f8 [ 533.740776][T16426] [ 533.740794][T16426] net_ratelimit: 333 callbacks suppressed [ 533.740803][T16426] socket: no more sockets [ 534.163946][T16437] FAULT_INJECTION: forcing a failure. [ 534.163946][T16437] name failslab, interval 1, probability 0, space 0, times 0 [ 534.238460][T16437] CPU: 0 UID: 0 PID: 16437 Comm: syz.4.2308 Tainted: G L syzkaller #0 PREEMPT(full) [ 534.238487][T16437] Tainted: [L]=SOFTLOCKUP [ 534.238492][T16437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 534.238502][T16437] Call Trace: [ 534.238507][T16437] [ 534.238513][T16437] dump_stack_lvl+0x100/0x190 [ 534.238532][T16437] should_fail_ex.cold+0x5/0xa [ 534.238549][T16437] ? kmem_cache_alloc_noprof+0x54/0x6d0 [ 534.238565][T16437] should_failslab+0xc2/0x120 [ 534.238582][T16437] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 534.238596][T16437] ? copy_utsname+0x1a8/0x690 [ 534.238614][T16437] copy_utsname+0x1a8/0x690 [ 534.238631][T16437] create_new_namespaces+0x16a/0xac0 [ 534.238655][T16437] ? bpf_lsm_capable+0x9/0x10 [ 534.238668][T16437] ? security_capable+0x80/0x260 [ 534.238685][T16437] unshare_nsproxy_namespaces+0xf2/0x220 [ 534.238709][T16437] ksys_unshare+0x438/0xab0 [ 534.238726][T16437] ? __pfx_ksys_unshare+0x10/0x10 [ 534.238742][T16437] ? ksys_write+0x1ac/0x250 [ 534.238764][T16437] __x64_sys_unshare+0x31/0x40 [ 534.238784][T16437] do_syscall_64+0x115/0x840 [ 534.238800][T16437] ? clear_bhb_loop+0x40/0x90 [ 534.238816][T16437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.238831][T16437] RIP: 0033:0x7f9e6af9ce59 [ 534.238843][T16437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.238857][T16437] RSP: 002b:00007f9e6bea4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 534.238872][T16437] RAX: ffffffffffffffda RBX: 00007f9e6b216090 RCX: 00007f9e6af9ce59 [ 534.238882][T16437] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 534.238891][T16437] RBP: 00007f9e6bea4090 R08: 0000000000000000 R09: 0000000000000000 [ 534.238900][T16437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.238909][T16437] R13: 00007f9e6b216128 R14: 00007f9e6b216090 R15: 00007ffc37b18418 [ 534.238923][T16437] [ 535.225137][T16455] blktrace: Concurrent blktraces are not allowed on loop2 [ 535.283533][ T7511] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 3 with max blocks 1 with error 117 [ 535.351899][T16455] FAULT_INJECTION: forcing a failure. [ 535.351899][T16455] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 535.376092][ T7511] EXT4-fs (sda1): This should not happen!! Data will be lost [ 535.376092][ T7511] [ 535.479960][T16455] CPU: 0 UID: 0 PID: 16455 Comm: syz.4.2312 Tainted: G L syzkaller #0 PREEMPT(full) [ 535.479987][T16455] Tainted: [L]=SOFTLOCKUP [ 535.479993][T16455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 535.480002][T16455] Call Trace: [ 535.480007][T16455] [ 535.480013][T16455] dump_stack_lvl+0x100/0x190 [ 535.480033][T16455] should_fail_ex.cold+0x5/0xa [ 535.480052][T16455] should_fail_alloc_page+0xeb/0x140 [ 535.480081][T16455] prepare_alloc_pages+0x1f0/0x5f0 [ 535.480101][T16455] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 535.480126][T16455] ? alloc_skb_with_frags+0xdd/0x760 [ 535.480148][T16455] ? tun_chr_write_iter+0xdc/0x200 [ 535.480163][T16455] ? vfs_write+0x6ac/0x1050 [ 535.480182][T16455] ? __x64_sys_pwrite64+0x1eb/0x250 [ 535.480202][T16455] ? do_syscall_64+0x115/0x840 [ 535.480217][T16455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.480235][T16455] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 535.480263][T16455] ? rcu_is_watching+0x12/0xc0 [ 535.480279][T16455] ? trace_kmalloc+0xeb/0x110 [ 535.480296][T16455] ? __kasan_kmalloc+0xaa/0xb0 [ 535.480311][T16455] ? __kmalloc_node_track_caller_noprof+0x33b/0x890 [ 535.480327][T16455] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 535.480346][T16455] ? policy_nodemask+0xed/0x4f0 [ 535.480364][T16455] alloc_pages_mpol+0x1fb/0x540 [ 535.480381][T16455] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 535.480397][T16455] ? __alloc_skb+0x5b7/0x710 [ 535.480415][T16455] ? __pfx___alloc_skb+0x10/0x10 [ 535.480435][T16455] alloc_pages_noprof+0x1a/0x160 [ 535.480455][T16455] alloc_skb_with_frags+0x4e7/0x760 [ 535.480478][T16455] sock_alloc_send_pskb+0x801/0x980 [ 535.480497][T16455] ? trace_pid_list_is_set+0x22c/0x390 [ 535.480517][T16455] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 535.480535][T16455] ? event_filter_pid_sched_wakeup_probe_post+0x128/0x270 [ 535.480556][T16455] ? preempt_schedule_thunk+0x16/0x40 [ 535.480578][T16455] ? rcu_is_watching+0x12/0xc0 [ 535.480594][T16455] tun_get_user+0x904/0x3c20 [ 535.480611][T16455] ? lock_release+0x24d/0x310 [ 535.480631][T16455] ? __pfx_tun_get_user+0x10/0x10 [ 535.480647][T16455] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 535.480665][T16455] ? tun_get+0x191/0x370 [ 535.480678][T16455] ? rcu_is_watching+0x12/0xc0 [ 535.480692][T16455] ? tun_get+0x191/0x370 [ 535.480705][T16455] ? lock_release+0x24d/0x310 [ 535.480729][T16455] tun_chr_write_iter+0xdc/0x200 [ 535.480746][T16455] vfs_write+0x6ac/0x1050 [ 535.480766][T16455] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 535.480783][T16455] ? __pfx_vfs_write+0x10/0x10 [ 535.480802][T16455] ? lock_release+0x24d/0x310 [ 535.480825][T16455] __x64_sys_pwrite64+0x1eb/0x250 [ 535.480846][T16455] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 535.480867][T16455] ? rcu_is_watching+0x12/0xc0 [ 535.480882][T16455] do_syscall_64+0x115/0x840 [ 535.480898][T16455] ? clear_bhb_loop+0x40/0x90 [ 535.480914][T16455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.480929][T16455] RIP: 0033:0x7f9e6af9ce59 [ 535.480941][T16455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.480955][T16455] RSP: 002b:00007f9e6bea4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 535.480970][T16455] RAX: ffffffffffffffda RBX: 00007f9e6b216090 RCX: 00007f9e6af9ce59 [ 535.480981][T16455] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 00000000000000c8 [ 535.480991][T16455] RBP: 00007f9e6b032e6f R08: 0000000000000000 R09: 0000000000000000 [ 535.481001][T16455] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 535.481010][T16455] R13: 00007f9e6b216128 R14: 00007f9e6b216090 R15: 00007ffc37b18418 [ 535.481024][T16455] [ 536.186905][T16462] snd_virmidi snd_virmidi.0: control 53842:9:2:y:-9 is already present [ 537.485692][T16482] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 2, inode_bitmap = 139 [ 537.995950][ T4941] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 538.005834][ T5632] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 538.032079][ T5632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 538.065931][ T5632] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 538.080662][ T5632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 538.466969][ T50] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 538.497468][T16510] FAULT_INJECTION: forcing a failure. [ 538.497468][T16510] name failslab, interval 1, probability 0, space 0, times 0 [ 538.671040][T16452] Process accounting paused [ 538.705169][T16510] CPU: 0 UID: 0 PID: 16510 Comm: syz.3.2320 Tainted: G L syzkaller #0 PREEMPT(full) [ 538.705195][T16510] Tainted: [L]=SOFTLOCKUP [ 538.705201][T16510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 538.705210][T16510] Call Trace: [ 538.705216][T16510] [ 538.705221][T16510] dump_stack_lvl+0x100/0x190 [ 538.705241][T16510] should_fail_ex.cold+0x5/0xa [ 538.705257][T16510] ? __kmalloc_cache_noprof+0x53/0x6e0 [ 538.705281][T16510] should_failslab+0xc2/0x120 [ 538.705298][T16510] __kmalloc_cache_noprof+0x7a/0x6e0 [ 538.705318][T16510] ? copy_ipcs+0x10d/0x7e0 [ 538.705335][T16510] ? lock_release+0x24d/0x310 [ 538.705360][T16510] copy_ipcs+0x10d/0x7e0 [ 538.705378][T16510] create_new_namespaces+0x20a/0xac0 [ 538.705402][T16510] ? security_capable+0x80/0x260 [ 538.705418][T16510] unshare_nsproxy_namespaces+0xf2/0x220 [ 538.705441][T16510] ksys_unshare+0x438/0xab0 [ 538.705458][T16510] ? __pfx_ksys_unshare+0x10/0x10 [ 538.705474][T16510] ? ksys_write+0x1ac/0x250 [ 538.705496][T16510] __x64_sys_unshare+0x31/0x40 [ 538.705512][T16510] do_syscall_64+0x115/0x840 [ 538.705528][T16510] ? clear_bhb_loop+0x40/0x90 [ 538.705545][T16510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.705560][T16510] RIP: 0033:0x7ff96199ce59 [ 538.705572][T16510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.705587][T16510] RSP: 002b:00007ff96282c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 538.705602][T16510] RAX: ffffffffffffffda RBX: 00007ff961c15fa0 RCX: 00007ff96199ce59 [ 538.705612][T16510] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 538.705621][T16510] RBP: 00007ff96282c090 R08: 0000000000000000 R09: 0000000000000000 [ 538.705630][T16510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.705639][T16510] R13: 00007ff961c16038 R14: 00007ff961c15fa0 R15: 00007fffa4ade378 [ 538.705653][T16510] [ 538.921994][T16518] FAULT_INJECTION: forcing a failure. [ 538.921994][T16518] name failslab, interval 1, probability 0, space 0, times 0 [ 538.934720][T16518] CPU: 0 UID: 0 PID: 16518 Comm: syz.0.2321 Tainted: G L syzkaller #0 PREEMPT(full) [ 538.934746][T16518] Tainted: [L]=SOFTLOCKUP [ 538.934752][T16518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 538.934762][T16518] Call Trace: [ 538.934767][T16518] [ 538.934773][T16518] dump_stack_lvl+0x100/0x190 [ 538.934793][T16518] should_fail_ex.cold+0x5/0xa [ 538.934810][T16518] ? kmem_cache_alloc_noprof+0x54/0x6d0 [ 538.934826][T16518] should_failslab+0xc2/0x120 [ 538.934843][T16518] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 538.934857][T16518] ? __anon_vma_prepare+0xae/0x5e0 [ 538.934880][T16518] __anon_vma_prepare+0xae/0x5e0 [ 538.934902][T16518] __vmf_anon_prepare+0x11f/0x250 [ 538.934921][T16518] do_anonymous_page+0x51b/0x2080 [ 538.934942][T16518] ? rcu_read_unlock+0x2d/0xb0 [ 538.934963][T16518] ? lock_release+0x24d/0x310 [ 538.934985][T16518] __handle_mm_fault+0x1d2c/0x2a00 [ 538.935007][T16518] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 538.935021][T16518] ? __pfx___handle_mm_fault+0x10/0x10 [ 538.935042][T16518] ? pte_offset_map_lock+0x174/0x320 [ 538.935061][T16518] ? follow_page_pte+0x4d0/0x13f0 [ 538.935079][T16518] handle_mm_fault+0x37b/0xa30 [ 538.935101][T16518] __get_user_pages+0x1178/0x32a0 [ 538.935121][T16518] ? __pfx___get_user_pages+0x10/0x10 [ 538.935139][T16518] ? __pfx___might_resched+0x10/0x10 [ 538.935160][T16518] populate_vma_page_range+0x267/0x3f0 [ 538.935179][T16518] ? __pfx_populate_vma_page_range+0x10/0x10 [ 538.935198][T16518] ? __pfx_find_vma_intersection+0x10/0x10 [ 538.935215][T16518] ? do_mmap+0x93f/0x12f0 [ 538.935231][T16518] __mm_populate+0x107/0x3a0 [ 538.935250][T16518] ? __pfx___mm_populate+0x10/0x10 [ 538.935268][T16518] ? up_write+0x2e5/0x5c0 [ 538.935282][T16518] vm_mmap_pgoff+0x37f/0x470 [ 538.935299][T16518] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 538.935317][T16518] ? __pfx_do_futex+0x10/0x10 [ 538.935332][T16518] ksys_mmap_pgoff+0xe4/0x610 [ 538.935348][T16518] ? __x64_sys_futex+0x358/0x4d0 [ 538.935362][T16518] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 538.935405][T16518] ? xfd_validate_state+0x129/0x190 [ 538.935424][T16518] __x64_sys_mmap+0x125/0x190 [ 538.935441][T16518] do_syscall_64+0x115/0x840 [ 538.935457][T16518] ? clear_bhb_loop+0x40/0x90 [ 538.935475][T16518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.935490][T16518] RIP: 0033:0x7f7fc1f9ce59 [ 538.935503][T16518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.935517][T16518] RSP: 002b:00007f7fc2e8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 538.935532][T16518] RAX: ffffffffffffffda RBX: 00007f7fc2215fa0 RCX: 00007f7fc1f9ce59 [ 538.935543][T16518] RDX: 00000000000000df RSI: 0000000000000009 RDI: 0000000000000000 [ 538.935552][T16518] RBP: 00007f7fc2032e6f R08: 0000000000000000 R09: 0000000000008000 [ 538.935563][T16518] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 538.935572][T16518] R13: 00007f7fc2216038 R14: 00007f7fc2215fa0 R15: 00007fff63a945f8 [ 538.935587][T16518] [ 540.182085][ T50] Bluetooth: hci5: command tx timeout [ 540.678658][T16491] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.725247][T16491] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.770547][T16491] bridge_slave_0: entered allmulticast mode [ 540.817751][T16491] bridge_slave_0: entered promiscuous mode [ 540.906099][T16491] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.968139][T16491] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.016032][T16491] bridge_slave_1: entered allmulticast mode [ 541.030159][ T5632] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 541.055348][T16549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2327'. [ 541.069620][T16491] bridge_slave_1: entered promiscuous mode [ 541.215011][T16491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.288005][T16491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.418521][T16491] team0: Port device team_slave_0 added [ 541.513515][T16491] team0: Port device team_slave_1 added [ 541.657632][T16491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.708376][T16491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.855547][T16491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.915927][T16491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.957112][T16491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.097182][T16491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.224569][ T50] Bluetooth: hci5: command tx timeout [ 542.439169][T16491] hsr_slave_0: entered promiscuous mode [ 542.459048][T16491] hsr_slave_1: entered promiscuous mode [ 542.487718][T16491] debugfs: 'hsr0' already exists in 'hsr' [ 542.509695][T16491] Cannot create hsr debugfs directory [ 542.667458][T16576] FAULT_INJECTION: forcing a failure. [ 542.667458][T16576] name failslab, interval 1, probability 0, space 0, times 0 [ 542.750895][T16576] CPU: 0 UID: 0 PID: 16576 Comm: syz.3.2331 Tainted: G L syzkaller #0 PREEMPT(full) [ 542.750921][T16576] Tainted: [L]=SOFTLOCKUP [ 542.750926][T16576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 542.750936][T16576] Call Trace: [ 542.750941][T16576] [ 542.750946][T16576] dump_stack_lvl+0x100/0x190 [ 542.750966][T16576] should_fail_ex.cold+0x5/0xa [ 542.750983][T16576] ? __kmalloc_cache_noprof+0x53/0x6e0 [ 542.751006][T16576] should_failslab+0xc2/0x120 [ 542.751023][T16576] __kmalloc_cache_noprof+0x7a/0x6e0 [ 542.751044][T16576] ? alloc_fs_context+0x57/0xf40 [ 542.751059][T16576] alloc_fs_context+0x57/0xf40 [ 542.751074][T16576] mq_init_ns+0x16e/0x820 [ 542.751093][T16576] copy_ipcs+0x3dd/0x7e0 [ 542.751110][T16576] create_new_namespaces+0x20a/0xac0 [ 542.751134][T16576] ? security_capable+0x80/0x260 [ 542.751150][T16576] unshare_nsproxy_namespaces+0xf2/0x220 [ 542.751174][T16576] ksys_unshare+0x438/0xab0 [ 542.751191][T16576] ? __pfx_ksys_unshare+0x10/0x10 [ 542.751213][T16576] ? ksys_write+0x1ac/0x250 [ 542.751235][T16576] __x64_sys_unshare+0x31/0x40 [ 542.751251][T16576] do_syscall_64+0x115/0x840 [ 542.751267][T16576] ? clear_bhb_loop+0x40/0x90 [ 542.751284][T16576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.751299][T16576] RIP: 0033:0x7ff96199ce59 [ 542.751311][T16576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.751325][T16576] RSP: 002b:00007ff96282c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 542.751340][T16576] RAX: ffffffffffffffda RBX: 00007ff961c15fa0 RCX: 00007ff96199ce59 [ 542.751351][T16576] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 542.751359][T16576] RBP: 00007ff96282c090 R08: 0000000000000000 R09: 0000000000000000 [ 542.751369][T16576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.751377][T16576] R13: 00007ff961c16038 R14: 00007ff961c15fa0 R15: 00007fffa4ade378 [ 542.751392][T16576] [ 543.605422][ T5632] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 543.982969][T16491] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.016857][T16588] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2333'. [ 544.057682][T16491] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.159073][T16491] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.246695][T16595] FAULT_INJECTION: forcing a failure. [ 544.246695][T16595] name failslab, interval 1, probability 0, space 0, times 0 [ 544.282896][T16491] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.305554][ T5632] Bluetooth: hci5: command tx timeout [ 544.347762][T16595] CPU: 0 UID: 0 PID: 16595 Comm: syz.3.2335 Tainted: G L syzkaller #0 PREEMPT(full) [ 544.347790][T16595] Tainted: [L]=SOFTLOCKUP [ 544.347795][T16595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 544.347804][T16595] Call Trace: [ 544.347810][T16595] [ 544.347816][T16595] dump_stack_lvl+0x100/0x190 [ 544.347836][T16595] should_fail_ex.cold+0x5/0xa [ 544.347853][T16595] ? __kmalloc_node_noprof+0xc1/0x890 [ 544.347870][T16595] should_failslab+0xc2/0x120 [ 544.347887][T16595] __kmalloc_node_noprof+0xe7/0x890 [ 544.347902][T16595] ? mempool_init_node+0x11b/0x6e0 [ 544.347916][T16595] ? lockdep_init_map_type+0x5c/0x250 [ 544.347938][T16595] ? __pfx_mempool_free_slab+0x10/0x10 [ 544.347951][T16595] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 544.347965][T16595] mempool_init_node+0x11b/0x6e0 [ 544.347981][T16595] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 544.347995][T16595] ? __pfx_mempool_free_slab+0x10/0x10 [ 544.348009][T16595] mempool_init_noprof+0x3a/0x50 [ 544.348024][T16595] bioset_init+0x37e/0x8a0 [ 544.348042][T16595] ? __pfx_bioset_init+0x10/0x10 [ 544.348063][T16595] __alloc_disk_node+0x83/0x6b0 [ 544.348083][T16595] __blk_alloc_disk+0xd2/0x170 [ 544.348101][T16595] ? __pfx___blk_alloc_disk+0x10/0x10 [ 544.348132][T16595] ? __pfx_idr_alloc+0x10/0x10 [ 544.348149][T16595] ? lockdep_init_map_type+0x5c/0x250 [ 544.348171][T16595] ? __raw_spin_lock_init+0x3a/0x110 [ 544.348187][T16595] ? __pfx_hot_add_show+0x10/0x10 [ 544.348204][T16595] zram_add+0x1bf/0x5d0 [ 544.348220][T16595] ? __pfx_zram_add+0x10/0x10 [ 544.348235][T16595] ? trace_contention_end+0x126/0x160 [ 544.348261][T16595] ? rcu_is_watching+0x12/0xc0 [ 544.348277][T16595] ? sysfs_file_kobj+0xe4/0x290 [ 544.348291][T16595] ? rcu_is_watching+0x12/0xc0 [ 544.348307][T16595] ? __pfx_hot_add_show+0x10/0x10 [ 544.348323][T16595] hot_add_show+0x21/0x80 [ 544.348339][T16595] class_attr_show+0x72/0xa0 [ 544.348362][T16595] ? __pfx_class_attr_show+0x10/0x10 [ 544.348383][T16595] sysfs_kf_seq_show+0x217/0x3f0 [ 544.348400][T16595] seq_read_iter+0x32f/0x1270 [ 544.348422][T16595] kernfs_fop_read_iter+0x46c/0x610 [ 544.348436][T16595] ? rw_verify_area+0xce/0x6d0 [ 544.348453][T16595] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 544.348468][T16595] vfs_read+0x82e/0xb40 [ 544.348487][T16595] ? __pfx_vfs_read+0x10/0x10 [ 544.348510][T16595] ksys_read+0x12a/0x250 [ 544.348528][T16595] ? __pfx_ksys_read+0x10/0x10 [ 544.348548][T16595] ? rcu_is_watching+0x12/0xc0 [ 544.348563][T16595] do_syscall_64+0x115/0x840 [ 544.348579][T16595] ? clear_bhb_loop+0x40/0x90 [ 544.348595][T16595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.348610][T16595] RIP: 0033:0x7ff96199ce59 [ 544.348623][T16595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.348637][T16595] RSP: 002b:00007ff96282c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 544.348653][T16595] RAX: ffffffffffffffda RBX: 00007ff961c15fa0 RCX: 00007ff96199ce59 [ 544.348663][T16595] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000005 [ 544.348675][T16595] RBP: 00007ff961a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 544.348685][T16595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.348694][T16595] R13: 00007ff961c16038 R14: 00007ff961c15fa0 R15: 00007fffa4ade378 [ 544.348708][T16595] [ 544.350918][T16595] zram: Error allocating disk structure for device 1 [ 545.038178][T16491] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.341462][ T30] audit: type=1804 audit(8277292109.890:31): pid=16602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2336" name="/newroot/49/file0" dev="tmpfs" ino=271 res=1 errno=0 [ 545.465984][T16491] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 545.536769][T16491] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 545.557698][T16491] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 545.608717][T16491] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 545.719952][T16491] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 545.785237][T16491] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 545.814025][T16491] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 545.848214][T16491] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 546.132928][T16491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.221157][T16491] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.288479][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.295602][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.355926][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.363016][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.386450][ T5632] Bluetooth: hci5: command tx timeout [ 546.592935][T16627] busy [ 547.696369][T16491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.821399][T16491] veth0_vlan: entered promiscuous mode [ 547.874216][T16491] veth1_vlan: entered promiscuous mode [ 547.988010][T16491] veth0_macvtap: entered promiscuous mode [ 548.042570][T16491] veth1_macvtap: entered promiscuous mode [ 548.074050][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 548.081546][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 548.088888][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 548.096627][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 548.105148][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 548.208468][T16491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.269192][T16491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.337712][ T7579] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.376484][ T7579] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.441734][ T7579] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.522678][ T7579] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.657784][ T7511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.708457][ T7511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.808339][ T7579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.868024][ T7579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.742234][T16669] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.791099][T16669] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.838415][T16669] bridge_slave_0: entered allmulticast mode [ 549.890442][T16669] bridge_slave_0: entered promiscuous mode [ 549.934464][T16669] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.984876][T16669] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.029165][T16669] bridge_slave_1: entered allmulticast mode [ 550.070322][T16669] bridge_slave_1: entered promiscuous mode [ 550.076329][T16709] Process accounting paused [ 550.152550][ T50] Bluetooth: hci2: command tx timeout [ 550.198548][ T30] audit: type=1804 audit(8277292114.890:32): pid=16711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2354" name="/newroot/608/file0" dev="tmpfs" ino=3215 res=1 errno=0 [ 550.223397][T16669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.288871][T16669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.433311][T16669] team0: Port device team_slave_0 added [ 550.486104][T16669] team0: Port device team_slave_1 added [ 550.590460][T16669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.643316][T16669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.707085][T16732] snd_virmidi snd_virmidi.0: control 53842:9:2:y:-9 is already present [ 550.827650][T16669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.906862][T16669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.942251][T16669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.081411][T16669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.286886][T16669] hsr_slave_0: entered promiscuous mode [ 551.321767][T16669] hsr_slave_1: entered promiscuous mode [ 551.355523][T16669] debugfs: 'hsr0' already exists in 'hsr' [ 551.401879][T16669] Cannot create hsr debugfs directory [ 552.009157][T16669] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.145137][T16669] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.224602][ T5632] Bluetooth: hci2: command tx timeout [ 552.279737][T16669] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.402668][T16669] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.632208][T16669] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 552.678506][T16669] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 552.717550][T16669] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 552.760013][T16669] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 552.817512][T16669] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 552.887616][T16669] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 552.939427][T16669] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 553.012890][T16669] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 553.515560][T16669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.585250][T16669] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.637328][ T7512] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.644423][ T7512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.729855][ T7512] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.736968][ T7512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.305936][ T5632] Bluetooth: hci2: command tx timeout [ 554.933851][T16669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 555.318784][T16839] busy [ 555.777074][T16669] veth0_vlan: entered promiscuous mode [ 555.855691][T16669] veth1_vlan: entered promiscuous mode [ 555.976933][T16669] veth0_macvtap: entered promiscuous mode [ 556.030792][T16669] veth1_macvtap: entered promiscuous mode [ 556.111920][T16669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 556.177022][T16669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.247309][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.287428][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.358197][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.385959][ T5632] Bluetooth: hci2: command tx timeout [ 556.421694][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.640779][ T7511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.686423][ T7511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.782329][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.831035][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.689141][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 557.698558][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 557.709243][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 557.716703][ T5622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 557.725463][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 557.829785][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.839292][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 558.982110][T16883] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.013574][T16883] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.044374][T16883] bridge_slave_0: entered allmulticast mode [ 559.080371][T16883] bridge_slave_0: entered promiscuous mode [ 559.111188][T16883] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.143835][T16883] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.177011][T16883] bridge_slave_1: entered allmulticast mode [ 559.205103][T16883] bridge_slave_1: entered promiscuous mode [ 559.281894][T16883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.328312][T16883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.419322][T16883] team0: Port device team_slave_0 added [ 559.452282][T16883] team0: Port device team_slave_1 added [ 559.506784][ T5632] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 559.537778][T16883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.586812][T16883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.726831][T16883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.744826][ T50] Bluetooth: hci4: command tx timeout [ 559.788425][T16883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.831817][T16883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.969300][T16883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.139161][T16883] hsr_slave_0: entered promiscuous mode [ 560.145849][ T5622] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 560.195917][T16883] hsr_slave_1: entered promiscuous mode [ 560.237166][T16883] debugfs: 'hsr0' already exists in 'hsr' [ 560.290699][T16883] Cannot create hsr debugfs directory [ 560.966761][T16883] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.066809][T16883] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.155709][T16883] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.280623][T16883] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.523246][T16926] blktrace: Concurrent blktraces are not allowed on loop2 [ 561.567172][T16883] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 561.575757][T16923] vivid-007: ================= START STATUS ================= [ 561.598301][T16926] FAULT_INJECTION: forcing a failure. [ 561.598301][T16926] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 561.632731][T16883] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 561.647424][T16923] vivid-007: Generate PTS: true [ 561.675780][T16926] CPU: 0 UID: 0 PID: 16926 Comm: syz.2.2388 Tainted: G L syzkaller #0 PREEMPT(full) [ 561.675807][T16926] Tainted: [L]=SOFTLOCKUP [ 561.675813][T16926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 561.675822][T16926] Call Trace: [ 561.675827][T16926] [ 561.675834][T16926] dump_stack_lvl+0x100/0x190 [ 561.675854][T16926] should_fail_ex.cold+0x5/0xa [ 561.675872][T16926] should_fail_alloc_page+0xeb/0x140 [ 561.675892][T16926] prepare_alloc_pages+0x1f0/0x5f0 [ 561.675912][T16926] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 561.675936][T16926] ? alloc_skb_with_frags+0xdd/0x760 [ 561.675957][T16926] ? tun_chr_write_iter+0xdc/0x200 [ 561.675973][T16926] ? vfs_write+0x6ac/0x1050 [ 561.675991][T16926] ? __x64_sys_pwrite64+0x1eb/0x250 [ 561.676011][T16926] ? do_syscall_64+0x115/0x840 [ 561.676027][T16926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.676045][T16926] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 561.676081][T16926] ? rcu_is_watching+0x12/0xc0 [ 561.676097][T16926] ? trace_kmalloc+0xeb/0x110 [ 561.676114][T16926] ? __kasan_kmalloc+0xaa/0xb0 [ 561.676130][T16926] ? __kmalloc_node_track_caller_noprof+0x33b/0x890 [ 561.676146][T16926] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 561.676165][T16926] ? policy_nodemask+0xed/0x4f0 [ 561.676184][T16926] alloc_pages_mpol+0x1fb/0x540 [ 561.676201][T16926] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 561.676218][T16926] ? __alloc_skb+0x5b7/0x710 [ 561.676236][T16926] ? __pfx___alloc_skb+0x10/0x10 [ 561.676256][T16926] alloc_pages_noprof+0x1a/0x160 [ 561.676276][T16926] alloc_skb_with_frags+0x4e7/0x760 [ 561.676300][T16926] sock_alloc_send_pskb+0x801/0x980 [ 561.676319][T16926] ? trace_pid_list_is_set+0x22c/0x390 [ 561.676338][T16926] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 561.676357][T16926] ? event_filter_pid_sched_wakeup_probe_post+0x128/0x270 [ 561.676379][T16926] ? preempt_schedule_thunk+0x16/0x40 [ 561.676401][T16926] ? rcu_is_watching+0x12/0xc0 [ 561.676416][T16926] tun_get_user+0x904/0x3c20 [ 561.676435][T16926] ? lock_release+0x24d/0x310 [ 561.676454][T16926] ? __pfx_tun_get_user+0x10/0x10 [ 561.676470][T16926] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 561.676487][T16926] ? tun_get+0x191/0x370 [ 561.676500][T16926] ? rcu_is_watching+0x12/0xc0 [ 561.676514][T16926] ? tun_get+0x191/0x370 [ 561.676526][T16926] ? lock_release+0x24d/0x310 [ 561.676548][T16926] tun_chr_write_iter+0xdc/0x200 [ 561.676563][T16926] vfs_write+0x6ac/0x1050 [ 561.676583][T16926] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 561.676600][T16926] ? __pfx_vfs_write+0x10/0x10 [ 561.676619][T16926] ? lock_release+0x24d/0x310 [ 561.676642][T16926] __x64_sys_pwrite64+0x1eb/0x250 [ 561.676663][T16926] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 561.676684][T16926] ? rcu_is_watching+0x12/0xc0 [ 561.676699][T16926] do_syscall_64+0x115/0x840 [ 561.676714][T16926] ? clear_bhb_loop+0x40/0x90 [ 561.676731][T16926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.676746][T16926] RIP: 0033:0x7f5fe3b9ce59 [ 561.676759][T16926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.676773][T16926] RSP: 002b:00007f5fe4b12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 561.676788][T16926] RAX: ffffffffffffffda RBX: 00007f5fe3e16090 RCX: 00007f5fe3b9ce59 [ 561.676799][T16926] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 00000000000000c8 [ 561.676809][T16926] RBP: 00007f5fe3c32e6f R08: 0000000000000000 R09: 0000000000000000 [ 561.676819][T16926] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 561.676828][T16926] R13: 00007f5fe3e16128 R14: 00007f5fe3e16090 R15: 00007fff56a274b8 [ 561.676843][T16926] [ 561.678483][T16923] vivid-007: Generate SCR: [ 562.109548][ T5622] Bluetooth: hci4: command tx timeout [ 562.359136][T16883] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 562.760545][T16883] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 562.801432][T16883] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 562.882463][T16883] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 563.005797][T16883] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 563.020761][T16883] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 563.438777][T16938] blktrace: Concurrent blktraces are not allowed on loop2 [ 563.449985][T16923] true [ 563.462934][T16923] tpg source WxH: 320x240 (Y'CbCr) [ 563.484742][T16923] tpg field: 1 [ 563.496431][T16938] FAULT_INJECTION: forcing a failure. [ 563.496431][T16938] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 563.525120][T16923] tpg crop: (0,0)/320x240 [ 563.543077][T16883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.555678][T16923] tpg compose: (0,0)/320x240 [ 563.580104][T16923] tpg colorspace: 8 [ 563.621814][T16923] tpg transfer function: 0/0 [ 563.634230][T16883] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.641069][T16938] CPU: 0 UID: 0 PID: 16938 Comm: syz.2.2389 Tainted: G L syzkaller #0 PREEMPT(full) [ 563.641095][T16938] Tainted: [L]=SOFTLOCKUP [ 563.641101][T16938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 563.641111][T16938] Call Trace: [ 563.641116][T16938] [ 563.641122][T16938] dump_stack_lvl+0x100/0x190 [ 563.641141][T16938] should_fail_ex.cold+0x5/0xa [ 563.641159][T16938] should_fail_alloc_page+0xeb/0x140 [ 563.641180][T16938] prepare_alloc_pages+0x1f0/0x5f0 [ 563.641198][T16938] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 563.641222][T16938] ? alloc_skb_with_frags+0xdd/0x760 [ 563.641244][T16938] ? tun_chr_write_iter+0xdc/0x200 [ 563.641259][T16938] ? vfs_write+0x6ac/0x1050 [ 563.641278][T16938] ? __x64_sys_pwrite64+0x1eb/0x250 [ 563.641297][T16938] ? do_syscall_64+0x115/0x840 [ 563.641312][T16938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.641330][T16938] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 563.641358][T16938] ? rcu_is_watching+0x12/0xc0 [ 563.641374][T16938] ? trace_kmalloc+0xeb/0x110 [ 563.641390][T16938] ? __kasan_kmalloc+0xaa/0xb0 [ 563.641405][T16938] ? __kmalloc_node_track_caller_noprof+0x33b/0x890 [ 563.641421][T16938] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 563.641440][T16938] ? policy_nodemask+0xed/0x4f0 [ 563.641458][T16938] alloc_pages_mpol+0x1fb/0x540 [ 563.641476][T16938] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 563.641492][T16938] ? __alloc_skb+0x5b7/0x710 [ 563.641510][T16938] ? __pfx___alloc_skb+0x10/0x10 [ 563.641530][T16938] alloc_pages_noprof+0x1a/0x160 [ 563.641550][T16938] alloc_skb_with_frags+0x4e7/0x760 [ 563.641574][T16938] sock_alloc_send_pskb+0x801/0x980 [ 563.641593][T16938] ? trace_pid_list_is_set+0x22c/0x390 [ 563.641612][T16938] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 563.641631][T16938] ? event_filter_pid_sched_wakeup_probe_post+0x128/0x270 [ 563.641652][T16938] ? preempt_schedule_thunk+0x16/0x40 [ 563.641674][T16938] ? rcu_is_watching+0x12/0xc0 [ 563.641689][T16938] tun_get_user+0x904/0x3c20 [ 563.641707][T16938] ? lock_release+0x24d/0x310 [ 563.641727][T16938] ? __pfx_tun_get_user+0x10/0x10 [ 563.641743][T16938] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 563.641761][T16938] ? tun_get+0x191/0x370 [ 563.641774][T16938] ? rcu_is_watching+0x12/0xc0 [ 563.641788][T16938] ? tun_get+0x191/0x370 [ 563.641801][T16938] ? lock_release+0x24d/0x310 [ 563.641822][T16938] tun_chr_write_iter+0xdc/0x200 [ 563.641838][T16938] vfs_write+0x6ac/0x1050 [ 563.641857][T16938] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 563.641882][T16938] ? __pfx_vfs_write+0x10/0x10 [ 563.641902][T16938] ? lock_release+0x24d/0x310 [ 563.641926][T16938] __x64_sys_pwrite64+0x1eb/0x250 [ 563.641947][T16938] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 563.641969][T16938] ? rcu_is_watching+0x12/0xc0 [ 563.641985][T16938] do_syscall_64+0x115/0x840 [ 563.642001][T16938] ? clear_bhb_loop+0x40/0x90 [ 563.642017][T16938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.642032][T16938] RIP: 0033:0x7f5fe3b9ce59 [ 563.642046][T16938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.642060][T16938] RSP: 002b:00007f5fe4b12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 563.642076][T16938] RAX: ffffffffffffffda RBX: 00007f5fe3e16090 RCX: 00007f5fe3b9ce59 [ 563.642086][T16938] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 00000000000000c8 [ 563.642096][T16938] RBP: 00007f5fe3c32e6f R08: 0000000000000000 R09: 0000000000000000 [ 563.642106][T16938] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 563.642115][T16938] R13: 00007f5fe3e16128 R14: 00007f5fe3e16090 R15: 00007fff56a274b8 [ 563.642130][T16938] [ 564.405548][T16923] tpg Y'CbCr encoding: 0/0 [ 564.431475][T16923] tpg quantization: 0/0 [ 564.446585][T16923] tpg RGB range: 0/2 [ 564.459461][T16883] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 564.471675][T16923] vivid-007: ================== END STATUS ================== [ 564.501005][T16883] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 564.552033][ T5622] Bluetooth: hci4: command tx timeout [ 564.698179][ T7511] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.705277][ T7511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.779075][ T7511] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.786193][ T7511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.858575][T16944] FAULT_INJECTION: forcing a failure. [ 564.858575][T16944] name failslab, interval 1, probability 0, space 0, times 0 [ 564.915145][T16944] CPU: 0 UID: 0 PID: 16944 Comm: syz.4.2390 Tainted: G L syzkaller #0 PREEMPT(full) [ 564.915172][T16944] Tainted: [L]=SOFTLOCKUP [ 564.915178][T16944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 564.915188][T16944] Call Trace: [ 564.915193][T16944] [ 564.915199][T16944] dump_stack_lvl+0x100/0x190 [ 564.915219][T16944] should_fail_ex.cold+0x5/0xa [ 564.915236][T16944] ? kmem_cache_alloc_noprof+0x54/0x6d0 [ 564.915252][T16944] should_failslab+0xc2/0x120 [ 564.915270][T16944] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 564.915284][T16944] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 564.915308][T16944] ? kasan_save_stack+0x30/0x50 [ 564.915322][T16944] ? kasan_save_track+0x14/0x30 [ 564.915336][T16944] ? __kasan_kmalloc+0xaa/0xb0 [ 564.915351][T16944] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 564.915376][T16944] idr_get_free+0x52e/0xa00 [ 564.915393][T16944] idr_alloc_u32+0x1ac/0x320 [ 564.915409][T16944] ? __pfx_idr_alloc_u32+0x10/0x10 [ 564.915429][T16944] idr_alloc_cyclic+0x10b/0x230 [ 564.915446][T16944] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 564.915462][T16944] ? __kmalloc_noprof+0x321/0x840 [ 564.915482][T16944] ? lockdep_init_map_type+0x5c/0x250 [ 564.915504][T16944] ? __rwlock_init+0x37/0x150 [ 564.915517][T16944] afs_lookup_cell+0xe48/0x1b10 [ 564.915534][T16944] ? __pfx_afs_lookup_cell+0x10/0x10 [ 564.915547][T16944] ? __pfx___might_resched+0x10/0x10 [ 564.915567][T16944] ? rcu_is_watching+0x12/0xc0 [ 564.915586][T16944] afs_cell_init+0x17d/0x380 [ 564.915601][T16944] afs_proc_rootcell_write+0x1c9/0x280 [ 564.915623][T16944] proc_simple_write+0x10e/0x1a0 [ 564.915646][T16944] ? __pfx_proc_simple_write+0x10/0x10 [ 564.915669][T16944] proc_reg_write+0x240/0x330 [ 564.915688][T16944] vfs_write+0x2aa/0x1050 [ 564.915720][T16944] ? __pfx_proc_reg_write+0x10/0x10 [ 564.915740][T16944] ? __pfx_vfs_write+0x10/0x10 [ 564.915759][T16944] ? rcu_is_watching+0x12/0xc0 [ 564.915776][T16944] ? __fget_files+0x21f/0x3d0 [ 564.915798][T16944] ksys_write+0x12a/0x250 [ 564.915817][T16944] ? __pfx_ksys_write+0x10/0x10 [ 564.915836][T16944] ? rcu_is_watching+0x12/0xc0 [ 564.915852][T16944] do_syscall_64+0x115/0x840 [ 564.915868][T16944] ? clear_bhb_loop+0x40/0x90 [ 564.915884][T16944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.915899][T16944] RIP: 0033:0x7f21d8f9ce59 [ 564.915912][T16944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.915926][T16944] RSP: 002b:00007f21d9e24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 564.915942][T16944] RAX: ffffffffffffffda RBX: 00007f21d9215fa0 RCX: 00007f21d8f9ce59 [ 564.915953][T16944] RDX: 0000000000000007 RSI: 00002000000000c0 RDI: 0000000000000003 [ 564.915963][T16944] RBP: 00007f21d9032e6f R08: 0000000000000000 R09: 0000000000000000 [ 564.915972][T16944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.915981][T16944] R13: 00007f21d9216038 R14: 00007f21d9215fa0 R15: 00007ffcea7f6f18 [ 564.915996][T16944] [ 565.260504][T16947] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 565.272371][T16947] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 566.063745][ T7511] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 3 with max blocks 4 with error 117 [ 566.129588][ T7511] EXT4-fs (sda1): This should not happen!! Data will be lost [ 566.129588][ T7511] [ 566.625417][ T5632] Bluetooth: hci4: command tx timeout [ 566.771103][T16883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 566.880518][T16971] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.987381][T16971] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.029014][T16883] veth0_vlan: entered promiscuous mode [ 567.075556][T16971] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.222259][T16883] veth1_vlan: entered promiscuous mode [ 567.268601][T16971] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.398824][T16883] veth0_macvtap: entered promiscuous mode [ 567.457000][T16883] veth1_macvtap: entered promiscuous mode [ 567.541102][T16883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 567.578425][T16981] snd_virmidi snd_virmidi.0: control 53842:9:2:y:-9 is already present [ 567.606751][T16883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 567.667730][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.708646][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.765662][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.826370][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.006571][T16985] snd_virmidi snd_virmidi.0: control 53842:9:2:y:-9 is already present [ 568.020300][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.074615][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.198340][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.257708][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.508326][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 568.515515][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 568.522616][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 568.530198][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 568.537600][ T5622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 568.909769][T16798] Process accounting resumed [ 569.088821][ T5622] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 569.130204][T17013] futex_wake_op: syz.3.2404 tries to shift op by -2048; fix this program [ 569.205481][T17013] futex_wake_op: syz.3.2404 tries to shift op by -2048; fix this program [ 569.282044][T17005] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2403'. [ 569.663223][T17023] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 570.378453][T16994] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.413631][T16994] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.450546][T16994] bridge_slave_0: entered allmulticast mode [ 570.481103][T16994] bridge_slave_0: entered promiscuous mode [ 570.551679][T16994] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.581501][T16994] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.615462][T16994] bridge_slave_1: entered allmulticast mode [ 570.624918][ T5622] Bluetooth: hci0: command tx timeout [ 570.646471][T16994] bridge_slave_1: entered promiscuous mode [ 570.661187][ T5622] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 570.764700][T17049] futex_wake_op: syz.4.2409 tries to shift op by -2048; fix this program [ 570.858500][T16994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.873333][T17049] futex_wake_op: syz.4.2409 tries to shift op by -2048; fix this program [ 570.896931][T17055] FAULT_INJECTION: forcing a failure. [ 570.896931][T17055] name failslab, interval 1, probability 0, space 0, times 0 [ 570.920836][T16994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.960571][T17055] CPU: 0 UID: 0 PID: 17055 Comm: syz.2.2411 Tainted: G L syzkaller #0 PREEMPT(full) [ 570.960598][T17055] Tainted: [L]=SOFTLOCKUP [ 570.960604][T17055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 570.960614][T17055] Call Trace: [ 570.960620][T17055] [ 570.960626][T17055] dump_stack_lvl+0x100/0x190 [ 570.960649][T17055] should_fail_ex.cold+0x5/0xa [ 570.960666][T17055] ? kmem_cache_alloc_noprof+0x54/0x6d0 [ 570.960683][T17055] should_failslab+0xc2/0x120 [ 570.960702][T17055] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 570.960716][T17055] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 570.960740][T17055] ? kasan_save_stack+0x30/0x50 [ 570.960754][T17055] ? kasan_save_track+0x14/0x30 [ 570.960768][T17055] ? __kasan_kmalloc+0xaa/0xb0 [ 570.960784][T17055] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 570.960809][T17055] idr_get_free+0x52e/0xa00 [ 570.960826][T17055] idr_alloc_u32+0x1ac/0x320 [ 570.960843][T17055] ? __pfx_idr_alloc_u32+0x10/0x10 [ 570.960863][T17055] idr_alloc_cyclic+0x10b/0x230 [ 570.960879][T17055] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 570.960896][T17055] ? __kmalloc_noprof+0x321/0x840 [ 570.960916][T17055] ? lockdep_init_map_type+0x5c/0x250 [ 570.960938][T17055] ? __rwlock_init+0x37/0x150 [ 570.960951][T17055] afs_lookup_cell+0xe48/0x1b10 [ 570.960968][T17055] ? __pfx_afs_lookup_cell+0x10/0x10 [ 570.960990][T17055] ? __pfx___might_resched+0x10/0x10 [ 570.961011][T17055] ? rcu_is_watching+0x12/0xc0 [ 570.961031][T17055] afs_cell_init+0x17d/0x380 [ 570.961045][T17055] afs_proc_rootcell_write+0x1c9/0x280 [ 570.961068][T17055] proc_simple_write+0x10e/0x1a0 [ 570.961091][T17055] ? __pfx_proc_simple_write+0x10/0x10 [ 570.961114][T17055] proc_reg_write+0x240/0x330 [ 570.961133][T17055] vfs_write+0x2aa/0x1050 [ 570.961152][T17055] ? __pfx_proc_reg_write+0x10/0x10 [ 570.961172][T17055] ? __pfx_vfs_write+0x10/0x10 [ 570.961190][T17055] ? rcu_is_watching+0x12/0xc0 [ 570.961206][T17055] ? __fget_files+0x21f/0x3d0 [ 570.961227][T17055] ksys_write+0x12a/0x250 [ 570.961246][T17055] ? __pfx_ksys_write+0x10/0x10 [ 570.961266][T17055] ? rcu_is_watching+0x12/0xc0 [ 570.961281][T17055] do_syscall_64+0x115/0x840 [ 570.961297][T17055] ? clear_bhb_loop+0x40/0x90 [ 570.961313][T17055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.961328][T17055] RIP: 0033:0x7f5fe3b9ce59 [ 570.961341][T17055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 570.961356][T17055] RSP: 002b:00007f5fe4b33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 570.961372][T17055] RAX: ffffffffffffffda RBX: 00007f5fe3e15fa0 RCX: 00007f5fe3b9ce59 [ 570.961382][T17055] RDX: 0000000000000007 RSI: 00002000000000c0 RDI: 0000000000000003 [ 570.961391][T17055] RBP: 00007f5fe3c32e6f R08: 0000000000000000 R09: 0000000000000000 [ 570.961401][T17055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 570.961410][T17055] R13: 00007f5fe3e16038 R14: 00007f5fe3e15fa0 R15: 00007fff56a274b8 [ 570.961425][T17055] [ 571.870898][T16994] team0: Port device team_slave_0 added [ 571.900885][T16994] team0: Port device team_slave_1 added [ 571.945313][T16994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.968291][T16994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.053622][T16994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.095439][T16994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.117684][T16994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.202726][T16994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.282021][T16994] hsr_slave_0: entered promiscuous mode [ 572.314012][T16994] hsr_slave_1: entered promiscuous mode [ 572.332478][ T5622] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 572.339935][ T5622] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 572.360727][T16994] debugfs: 'hsr0' already exists in 'hsr' [ 572.372902][T17065] futex_wake_op: syz.4.2413 tries to shift op by -2048; fix this program [ 572.398014][T16994] Cannot create hsr debugfs directory [ 572.413712][T17065] futex_wake_op: syz.4.2413 tries to shift op by -2048; fix this program [ 572.704413][ T5632] Bluetooth: hci0: command tx timeout [ 572.959813][T16994] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 573.008504][T16994] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 573.055541][T16994] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 573.110105][T16994] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 573.145365][T16994] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 573.193390][T16994] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 573.236196][T16994] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 573.246115][T17085] netlink: 'syz.3.2418': attribute type 1 has an invalid length. [ 573.326018][T16994] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 573.544385][T16994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.620961][T16994] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.685983][ T7511] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.693063][ T7511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.762943][ T7511] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.770056][ T7511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.807611][T17103] blktrace: Concurrent blktraces are not allowed on loop2 [ 574.265864][T17119] blktrace: Concurrent blktraces are not allowed on loop2 [ 574.658199][T17119] FAULT_INJECTION: forcing a failure. [ 574.658199][T17119] name fail_futex, interval 1, probability 0, space 0, times 0 [ 574.735010][T17119] CPU: 0 UID: 0 PID: 17119 Comm: syz.2.2422 Tainted: G L syzkaller #0 PREEMPT(full) [ 574.735037][T17119] Tainted: [L]=SOFTLOCKUP [ 574.735042][T17119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 574.735052][T17119] Call Trace: [ 574.735057][T17119] [ 574.735062][T17119] dump_stack_lvl+0x100/0x190 [ 574.735082][T17119] should_fail_ex.cold+0x5/0xa [ 574.735099][T17119] get_futex_key+0xf74/0x14f0 [ 574.735122][T17119] ? __pfx_get_futex_key+0x10/0x10 [ 574.735144][T17119] ? rcu_is_watching+0x12/0xc0 [ 574.735160][T17119] ? lock_acquire+0x301/0x370 [ 574.735184][T17119] futex_wake+0xf4/0x5e0 [ 574.735201][T17119] ? __mutex_lock+0x26d/0x1bd0 [ 574.735217][T17119] ? __pfx_futex_wake+0x10/0x10 [ 574.735234][T17119] ? exit_mm_release+0x19/0x30 [ 574.735249][T17119] ? lock_release+0x24d/0x310 [ 574.735270][T17119] do_futex+0x2b2/0x440 [ 574.735283][T17119] ? __pfx_do_futex+0x10/0x10 [ 574.735296][T17119] ? lock_release+0x24d/0x310 [ 574.735317][T17119] mm_release+0x24a/0x2f0 [ 574.735340][T17119] do_exit+0x707/0x2ae0 [ 574.735358][T17119] ? __pfx_do_exit+0x10/0x10 [ 574.735375][T17119] ? do_raw_spin_lock+0x128/0x260 [ 574.735388][T17119] ? get_signal+0x7e0/0x21e0 [ 574.735402][T17119] do_group_exit+0xd5/0x2a0 [ 574.735420][T17119] get_signal+0x1ec7/0x21e0 [ 574.735437][T17119] ? __pfx_get_signal+0x10/0x10 [ 574.735450][T17119] ? do_futex+0x190/0x440 [ 574.735464][T17119] arch_do_signal_or_restart+0x91/0x7a0 [ 574.735487][T17119] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 574.735512][T17119] ? rcu_is_watching+0x12/0xc0 [ 574.735527][T17119] exit_to_user_mode_loop+0x139/0x6f0 [ 574.735549][T17119] ? rcu_is_watching+0x12/0xc0 [ 574.735564][T17119] do_syscall_64+0x652/0x840 [ 574.735580][T17119] ? clear_bhb_loop+0x40/0x90 [ 574.735596][T17119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.735611][T17119] RIP: 0033:0x7f5fe3b9ce59 [ 574.735623][T17119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.735637][T17119] RSP: 002b:00007f5fe4b120e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 574.735652][T17119] RAX: fffffffffffffe00 RBX: 00007f5fe3e16098 RCX: 00007f5fe3b9ce59 [ 574.735662][T17119] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5fe3e16098 [ 574.735672][T17119] RBP: 00007f5fe3e16090 R08: 0000000000000000 R09: 0000000000000000 [ 574.735681][T17119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 574.735690][T17119] R13: 00007f5fe3e16128 R14: 00007fff56a273d0 R15: 00007fff56a274b8 [ 574.735704][T17119] [ 575.317525][ T5632] Bluetooth: hci0: command tx timeout [ 575.533725][T17154] netlink: 'syz.3.2431': attribute type 1 has an invalid length. [ 575.586407][T17154] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2431'. [ 575.617332][T17154] virt_wifi0: entered allmulticast mode [ 575.669540][T16994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.302233][T16994] veth0_vlan: entered promiscuous mode [ 576.390853][T16994] veth1_vlan: entered promiscuous mode [ 576.512275][T16994] veth0_macvtap: entered promiscuous mode [ 576.563914][T16994] veth1_macvtap: entered promiscuous mode [ 576.646873][T16994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.706390][T16994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.766701][ T7579] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.831045][ T7579] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.883535][ T7579] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.944771][ T7579] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.184440][ T7512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.221779][ T7512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.295230][ T7579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.341127][ T7579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.348985][ T5622] Bluetooth: hci0: command tx timeout [ 577.476284][T17196] bdi 43:192: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 577.837834][T17213] FAULT_INJECTION: forcing a failure. [ 577.837834][T17213] name failslab, interval 1, probability 0, space 0, times 0 [ 578.028312][T17213] CPU: 0 UID: 0 PID: 17213 Comm: syz.2.2437 Tainted: G L syzkaller #0 PREEMPT(full) [ 578.028346][T17213] Tainted: [L]=SOFTLOCKUP [ 578.028352][T17213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 578.028362][T17213] Call Trace: [ 578.028367][T17213] [ 578.028373][T17213] dump_stack_lvl+0x100/0x190 [ 578.028396][T17213] should_fail_ex.cold+0x5/0xa [ 578.028413][T17213] ? __kmalloc_cache_noprof+0x53/0x6e0 [ 578.028437][T17213] should_failslab+0xc2/0x120 [ 578.028455][T17213] __kmalloc_cache_noprof+0x7a/0x6e0 [ 578.028475][T17213] ? refill_pi_state_cache+0x91/0x260 [ 578.028493][T17213] refill_pi_state_cache+0x91/0x260 [ 578.028509][T17213] futex_lock_pi+0x17d/0x7f0 [ 578.028526][T17213] ? __pfx_futex_lock_pi+0x10/0x10 [ 578.028543][T17213] ? __pfx___futex_wait+0x10/0x10 [ 578.028559][T17213] ? __pfx_try_to_wake_up+0x10/0x10 [ 578.028588][T17213] ? __pfx_futex_wake_mark+0x10/0x10 [ 578.028606][T17213] ? __might_fault+0x111/0x140 [ 578.028628][T17213] ? do_vfs_ioctl+0x226/0x13e0 [ 578.028645][T17213] do_futex+0x371/0x440 [ 578.028659][T17213] ? __pfx_do_futex+0x10/0x10 [ 578.028672][T17213] ? rcu_is_watching+0x12/0xc0 [ 578.028687][T17213] ? __fget_files+0x215/0x3d0 [ 578.028707][T17213] __x64_sys_futex+0x34f/0x4d0 [ 578.028722][T17213] ? __pfx___x64_sys_futex+0x10/0x10 [ 578.028738][T17213] ? rcu_is_watching+0x12/0xc0 [ 578.028753][T17213] do_syscall_64+0x115/0x840 [ 578.028769][T17213] ? clear_bhb_loop+0x40/0x90 [ 578.028785][T17213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.028801][T17213] RIP: 0033:0x7f5fe3b9ce59 [ 578.028813][T17213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.028828][T17213] RSP: 002b:00007f5fe4af1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 578.028843][T17213] RAX: ffffffffffffffda RBX: 00007f5fe3e16180 RCX: 00007f5fe3b9ce59 [ 578.028853][T17213] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 578.028862][T17213] RBP: 00007f5fe3c32e6f R08: 0000000000000000 R09: 000000008000fff5 [ 578.028871][T17213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 578.028880][T17213] R13: 00007f5fe3e16218 R14: 00007f5fe3e16180 R15: 00007fff56a274b8 [ 578.028895][T17213] [ 579.903310][T17270] FAULT_INJECTION: forcing a failure. [ 579.903310][T17270] name failslab, interval 1, probability 0, space 0, times 0 [ 579.985233][T17270] CPU: 0 UID: 0 PID: 17270 Comm: syz.5.2450 Tainted: G L syzkaller #0 PREEMPT(full) [ 579.985259][T17270] Tainted: [L]=SOFTLOCKUP [ 579.985265][T17270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 579.985274][T17270] Call Trace: [ 579.985279][T17270] [ 579.985285][T17270] dump_stack_lvl+0x100/0x190 [ 579.985304][T17270] should_fail_ex.cold+0x5/0xa [ 579.985321][T17270] ? fs_reclaim_acquire+0x70/0x100 [ 579.985339][T17270] ? tomoyo_realpath_from_path+0xb6/0x690 [ 579.985363][T17270] should_failslab+0xc2/0x120 [ 579.985380][T17270] __kmalloc_noprof+0xe0/0x840 [ 579.985401][T17270] ? kfree+0x1e5/0x6c0 [ 579.985422][T17270] tomoyo_realpath_from_path+0xb6/0x690 [ 579.985446][T17270] tomoyo_path_number_perm+0x23c/0x580 [ 579.985464][T17270] ? tomoyo_path_number_perm+0x22e/0x580 [ 579.985484][T17270] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 579.985506][T17270] ? preempt_count_add+0x76/0x150 [ 579.985530][T17270] ? rcu_is_watching+0x12/0xc0 [ 579.985550][T17270] ? __fget_files+0x215/0x3d0 [ 579.985570][T17270] ? hook_file_ioctl_common+0x140/0x440 [ 579.985590][T17270] ? lock_release+0x24d/0x310 [ 579.985611][T17270] ? __fget_files+0x21f/0x3d0 [ 579.985631][T17270] security_file_ioctl+0xd3/0x230 [ 579.985654][T17270] __x64_sys_ioctl+0xb7/0x210 [ 579.985672][T17270] do_syscall_64+0x115/0x840 [ 579.985687][T17270] ? clear_bhb_loop+0x40/0x90 [ 579.985704][T17270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.985719][T17270] RIP: 0033:0x7fec7139ce59 [ 579.985731][T17270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.985746][T17270] RSP: 002b:00007fec7228e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 579.985762][T17270] RAX: ffffffffffffffda RBX: 00007fec71616090 RCX: 00007fec7139ce59 [ 579.985772][T17270] RDX: 0000000000000003 RSI: 00000000c0305602 RDI: 0000000000000007 [ 579.985781][T17270] RBP: 00007fec7228e090 R08: 0000000000000000 R09: 0000000000000000 [ 579.985790][T17270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.985799][T17270] R13: 00007fec71616128 R14: 00007fec71616090 R15: 00007ffcae305f78 [ 579.985815][T17270] [ 579.988393][T17270] ERROR: Out of memory at tomoyo_realpath_from_path. [ 580.821932][T17257] FAULT_INJECTION: forcing a failure. [ 580.821932][T17257] name failslab, interval 1, probability 0, space 0, times 0 [ 580.877238][T17257] CPU: 0 UID: 0 PID: 17257 Comm: syz.2.2448 Tainted: G L syzkaller #0 PREEMPT(full) [ 580.877266][T17257] Tainted: [L]=SOFTLOCKUP [ 580.877272][T17257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 580.877282][T17257] Call Trace: [ 580.877287][T17257] [ 580.877293][T17257] dump_stack_lvl+0x100/0x190 [ 580.877314][T17257] should_fail_ex.cold+0x5/0xa [ 580.877331][T17257] ? kmem_cache_alloc_lru_noprof+0x59/0x6e0 [ 580.877348][T17257] should_failslab+0xc2/0x120 [ 580.877366][T17257] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 580.877381][T17257] ? sock_alloc_inode+0x26/0x2c0 [ 580.877394][T17257] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 580.877418][T17257] ? __debug_object_init+0x2de/0x3d0 [ 580.877438][T17257] ? __pfx_sock_alloc_inode+0x10/0x10 [ 580.877452][T17257] sock_alloc_inode+0x26/0x2c0 [ 580.877465][T17257] ? __pfx_sock_alloc_inode+0x10/0x10 [ 580.877478][T17257] alloc_inode+0x68/0x250 [ 580.877493][T17257] sock_alloc+0x44/0x280 [ 580.877513][T17257] ? security_socket_create+0x7f/0x250 [ 580.877530][T17257] __sock_create+0xc2/0x860 [ 580.877547][T17257] smc_create_clcsk+0x37/0xd0 [ 580.877562][T17257] ? __pfx_smc_inet_init_sock+0x10/0x10 [ 580.877582][T17257] inet_create+0x94c/0x1060 [ 580.877601][T17257] ? inet_create+0x94/0x1060 [ 580.877620][T17257] __sock_create+0x339/0x860 [ 580.877636][T17257] __sys_socket+0x14d/0x260 [ 580.877652][T17257] ? __pfx___sys_socket+0x10/0x10 [ 580.877670][T17257] __x64_sys_socket+0x72/0xb0 [ 580.877686][T17257] do_syscall_64+0x115/0x840 [ 580.877702][T17257] ? clear_bhb_loop+0x40/0x90 [ 580.877718][T17257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.877734][T17257] RIP: 0033:0x7f5fe3b9ce59 [ 580.877746][T17257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.877761][T17257] RSP: 002b:00007f5fe4b33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 580.877776][T17257] RAX: ffffffffffffffda RBX: 00007f5fe3e15fa0 RCX: 00007f5fe3b9ce59 [ 580.877786][T17257] RDX: 0000000000000100 RSI: 0000000000000801 RDI: 0000000000000002 [ 580.877796][T17257] RBP: 00007f5fe3c32e6f R08: 0000000000000000 R09: 0000000000000000 [ 580.877805][T17257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 580.877814][T17257] R13: 00007f5fe3e16038 R14: 00007f5fe3e15fa0 R15: 00007fff56a274b8 [ 580.877828][T17257] [ 580.877836][T17257] socket: no more sockets [ 581.596273][T17296] blktrace: Concurrent blktraces are not allowed on loop2 [ 581.964210][T17313] FAULT_INJECTION: forcing a failure. [ 581.964210][T17313] name failslab, interval 1, probability 0, space 0, times 0 [ 582.021401][T17313] CPU: 0 UID: 0 PID: 17313 Comm: syz.5.2462 Tainted: G L syzkaller #0 PREEMPT(full) [ 582.021429][T17313] Tainted: [L]=SOFTLOCKUP [ 582.021435][T17313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 582.021445][T17313] Call Trace: [ 582.021450][T17313] [ 582.021456][T17313] dump_stack_lvl+0x100/0x190 [ 582.021476][T17313] should_fail_ex.cold+0x5/0xa [ 582.021493][T17313] ? kmem_cache_alloc_noprof+0x54/0x6d0 [ 582.021509][T17313] should_failslab+0xc2/0x120 [ 582.021527][T17313] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 582.021541][T17313] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 582.021564][T17313] ? kasan_save_stack+0x30/0x50 [ 582.021579][T17313] ? kasan_save_track+0x14/0x30 [ 582.021592][T17313] ? __kasan_kmalloc+0xaa/0xb0 [ 582.021608][T17313] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 582.021632][T17313] idr_get_free+0x52e/0xa00 [ 582.021652][T17313] idr_alloc_u32+0x1ac/0x320 [ 582.021669][T17313] ? __pfx_idr_alloc_u32+0x10/0x10 [ 582.021689][T17313] idr_alloc_cyclic+0x10b/0x230 [ 582.021705][T17313] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 582.021721][T17313] ? __kmalloc_noprof+0x321/0x840 [ 582.021741][T17313] ? lockdep_init_map_type+0x5c/0x250 [ 582.021763][T17313] ? __rwlock_init+0x37/0x150 [ 582.021777][T17313] afs_lookup_cell+0xe48/0x1b10 [ 582.021805][T17313] ? __pfx_afs_lookup_cell+0x10/0x10 [ 582.021820][T17313] ? __pfx___might_resched+0x10/0x10 [ 582.021840][T17313] ? rcu_is_watching+0x12/0xc0 [ 582.021860][T17313] afs_cell_init+0x17d/0x380 [ 582.021874][T17313] afs_proc_rootcell_write+0x1c9/0x280 [ 582.021897][T17313] proc_simple_write+0x10e/0x1a0 [ 582.021919][T17313] ? __pfx_proc_simple_write+0x10/0x10 [ 582.021942][T17313] proc_reg_write+0x240/0x330 [ 582.021962][T17313] vfs_write+0x2aa/0x1050 [ 582.021981][T17313] ? __pfx_proc_reg_write+0x10/0x10 [ 582.022000][T17313] ? __pfx_vfs_write+0x10/0x10 [ 582.022019][T17313] ? rcu_is_watching+0x12/0xc0 [ 582.022035][T17313] ? __fget_files+0x21f/0x3d0 [ 582.022056][T17313] ksys_write+0x12a/0x250 [ 582.022074][T17313] ? __pfx_ksys_write+0x10/0x10 [ 582.022094][T17313] ? rcu_is_watching+0x12/0xc0 [ 582.022110][T17313] do_syscall_64+0x115/0x840 [ 582.022126][T17313] ? clear_bhb_loop+0x40/0x90 [ 582.022142][T17313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.022163][T17313] RIP: 0033:0x7fec7139ce59 [ 582.022175][T17313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 582.022191][T17313] RSP: 002b:00007fec722af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 582.022207][T17313] RAX: ffffffffffffffda RBX: 00007fec71615fa0 RCX: 00007fec7139ce59 [ 582.022217][T17313] RDX: 0000000000000007 RSI: 00002000000000c0 RDI: 0000000000000003 [ 582.022226][T17313] RBP: 00007fec71432e6f R08: 0000000000000000 R09: 0000000000000000 [ 582.022236][T17313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 582.022246][T17313] R13: 00007fec71616038 R14: 00007fec71615fa0 R15: 00007ffcae305f78 [ 582.022260][T17313] [ 583.839036][T17356] netlink: 'syz.2.2471': attribute type 1 has an invalid length. [ 584.000101][T17359] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 584.147679][T17364] snd_virmidi snd_virmidi.0: control 53842:9:2:y:-9 is already present [ 585.693435][T17368] kexec: Could not allocate control_code_buffer [ 587.638791][T17416] Process accounting resumed [ 589.824228][ T31] INFO: task kworker/u8:5:83 blocked for more than 143 seconds. [ 589.832090][ T31] Tainted: G L syzkaller #0 [ 589.863489][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 589.921554][ T31] task:kworker/u8:5 state:D stack:23432 pid:83 tgid:83 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 590.011911][ T31] Workqueue: netns cleanup_net [ 590.035738][ T31] Call Trace: [ 590.053351][ T31] [ 590.080139][ T31] __schedule+0x125c/0x6730 [ 590.113424][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 590.121664][ T5622] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 590.160382][ T31] ? prepare_to_wait_event+0xbe/0x720 [ 590.201051][ T31] ? prepare_to_wait_event+0x8d/0x720 [ 590.232848][ T31] ? rcu_is_watching+0x12/0xc0 [ 590.257479][ T31] ? __pfx___schedule+0x10/0x10 [ 590.287002][ T31] ? rcu_is_watching+0x12/0xc0 [ 590.312608][ T31] ? schedule+0x2bf/0x390 [ 590.333053][ T31] ? lock_release+0x24d/0x310 [ 590.351409][ T31] schedule+0xdd/0x390 [ 590.370107][ T31] afs_cell_purge+0x46a/0x550 [ 590.387872][ T31] ? __try_to_del_timer_sync+0x107/0x160 [ 590.413113][ T31] ? __pfx_afs_cell_purge+0x10/0x10 [ 590.432700][ T31] ? __timer_delete_sync+0x151/0x1c0 [ 590.449992][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 590.472339][ T31] ? __timer_delete_sync+0x151/0x1c0 [ 590.499753][ T31] ? __timer_delete_sync+0x10f/0x1c0 [ 590.526464][ T31] ? __pfx_afs_net_exit+0x10/0x10 [ 590.549193][ T31] afs_net_exit+0x83/0x150 [ 590.565152][ T31] ops_undo_list+0x2ee/0xab0 [ 590.582039][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 590.608080][ T31] ? cleanup_net+0x332/0x920 [ 590.630837][ T31] ? lock_release+0x24d/0x310 [ 590.653841][ T31] ? idr_destroy+0x62/0x2e0 [ 590.674238][ T31] cleanup_net+0x499/0x920 [ 590.693542][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 590.711377][ T31] ? rcu_is_watching+0x12/0xc0 [ 590.728147][ T31] ? lock_acquire+0x301/0x370 [ 590.744035][ T31] ? rcu_is_watching+0x12/0xc0 [ 590.760247][ T31] process_one_work+0xa23/0x1940 [ 590.774880][ T31] ? __pfx_process_one_work+0x10/0x10 [ 590.791960][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 590.811287][ T31] worker_thread+0x5ef/0xe50 [ 590.825344][ T31] ? __pfx_worker_thread+0x10/0x10 [ 590.841690][ T31] ? kthread+0x13a/0x450 [ 590.851912][ T31] ? __pfx_worker_thread+0x10/0x10 [ 590.863104][ T31] kthread+0x370/0x450 [ 590.872203][ T31] ? __pfx_kthread+0x10/0x10 [ 590.881421][ T31] ret_from_fork+0x72b/0xd50 [ 590.890903][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 590.903590][ T31] ? __switch_to+0x800/0x10f0 [ 590.912749][ T31] ? __switch_to_asm+0x39/0x70 [ 590.922926][ T31] ? __pfx_kthread+0x10/0x10 [ 590.933211][ T31] ret_from_fork_asm+0x1a/0x30 [ 590.942629][ T31] [ 590.951810][ T31] INFO: lockdep is turned off. [ 591.014880][ T31] NMI backtrace for cpu 0 [ 591.014900][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 591.014922][ T31] Tainted: [L]=SOFTLOCKUP [ 591.014927][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 591.014937][ T31] Call Trace: [ 591.014942][ T31] [ 591.014947][ T31] dump_stack_lvl+0x100/0x190 [ 591.014967][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 591.014984][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 591.015000][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 591.015025][ T31] sys_info+0x141/0x190 [ 591.015044][ T31] watchdog+0xcb1/0x1030 [ 591.015065][ T31] ? trace_irq_enable.constprop.0+0x122/0x160 [ 591.015087][ T31] ? __pfx_watchdog+0x10/0x10 [ 591.015105][ T31] ? __kthread_parkme+0x18c/0x230 [ 591.015120][ T31] ? kthread+0x13a/0x450 [ 591.015136][ T31] ? __pfx_watchdog+0x10/0x10 [ 591.015156][ T31] kthread+0x370/0x450 [ 591.015172][ T31] ? __pfx_kthread+0x10/0x10 [ 591.015189][ T31] ret_from_fork+0x72b/0xd50 [ 591.015205][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 591.015221][ T31] ? __switch_to+0x800/0x10f0 [ 591.015242][ T31] ? __switch_to_asm+0x39/0x70 [ 591.015260][ T31] ? __pfx_kthread+0x10/0x10 [ 591.015277][ T31] ret_from_fork_asm+0x1a/0x30 [ 591.015299][ T31] [ 591.313145][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 591.320012][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 591.330672][ T31] Tainted: [L]=SOFTLOCKUP [ 591.334972][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 591.345016][ T31] Call Trace: [ 591.348276][ T31] [ 591.351273][ T31] dump_stack_lvl+0x100/0x190 [ 591.355933][ T31] vpanic+0x552/0x970 [ 591.359899][ T31] ? __pfx_vpanic+0x10/0x10 [ 591.364381][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 591.370527][ T31] panic+0xd1/0xe0 [ 591.374231][ T31] ? __pfx_panic+0x10/0x10 [ 591.378628][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 591.384767][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 591.390907][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 591.397046][ T31] ? watchdog.cold+0x1ec/0x234 [ 591.401790][ T31] ? watchdog+0xcc1/0x1030 [ 591.406190][ T31] watchdog.cold+0x1fd/0x234 [ 591.410761][ T31] ? trace_irq_enable.constprop.0+0x122/0x160 [ 591.416816][ T31] ? __pfx_watchdog+0x10/0x10 [ 591.421475][ T31] ? __kthread_parkme+0x18c/0x230 [ 591.426479][ T31] ? kthread+0x13a/0x450 [ 591.430726][ T31] ? __pfx_watchdog+0x10/0x10 [ 591.435401][ T31] kthread+0x370/0x450 [ 591.439453][ T31] ? __pfx_kthread+0x10/0x10 [ 591.444024][ T31] ret_from_fork+0x72b/0xd50 [ 591.448598][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 591.453689][ T31] ? __switch_to+0x800/0x10f0 [ 591.458354][ T31] ? __switch_to_asm+0x39/0x70 [ 591.463103][ T31] ? __pfx_kthread+0x10/0x10 [ 591.467675][ T31] ret_from_fork_asm+0x1a/0x30 [ 591.472425][ T31] [ 591.475494][ T31] Kernel Offset: disabled [ 591.479819][ T31] Rebooting in 86400 seconds..