last executing test programs: 7m48.801206193s ago: executing program 0 (id=125): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000080)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0xffff}, 0x5, 0x20000043) poll$auto(0x0, 0x7f, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$auto(0x3, 0x4, 0xa553) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) fcntl$auto(0x3, 0x4, 0xa553) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0x8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x40000, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x0, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x200084c, 0x0, 0x9, 0x0, 0x3, 0x10b}, 0x4}, 0xdfffffff, 0xc5c) mbind$auto(0x8000002000, 0x100000004, 0x1, 0x0, 0xffffffffffffff39, 0x800001) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7112}, 0x8) 7m47.401847177s ago: executing program 0 (id=121): getsockopt$auto_SO_RCVTIMEO_OLD(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000000)='\x00', &(0x7f0000000040)=0x9) r0 = bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000000080)=@test={0xffffffffffffffff, 0x6, 0x81, 0x2, 0xc1, 0xffffffffffffffff, 0x2, 0x4, 0xe, 0x2, 0x0, 0xd83, 0x6, 0x1, 0x5}, 0xfff) r2 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000180), 0xffffffffffffffff) r3 = prctl$auto_PR_SET_MM_ENV_END(0xebd2, 0xb, 0x0, 0x0, 0x37f0) r4 = waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000001c0)={@siginfo_0_0={0xb58ded6, 0x8, 0x9, @_sigchld={0xffffffffffffffff, 0x0, 0x10001, 0x5, 0x7fff}}}, 0x0, &(0x7f0000000240)={{0xc1, 0x8}, {0x2, 0x2}, 0x7fffffffffffffff, 0xf24, 0x363, 0x3, 0x7f, 0x1, 0x1acc, 0x200, 0x1, 0x7, 0x6710, 0x9, 0xfffffffffffffffa, 0x4}) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, &(0x7f0000000300)={0xffff, 0xa, 0x222c, 0x6, 0x0, 0x0}) sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f0000000340)={0x3a0, r2, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @WGDEVICE_A_PEERS={0x3e, 0x8, 0x0, 0x1, [@typed={0x8, 0x12d, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x91, 0x0, 0x0, @pid=r4}, @generic="cdc298ccfe0d8b3d0d7c59d7fa48", @typed={0x8, 0x75, 0x0, 0x0, @uid=0xee01}, @typed={0x14, 0x70, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, @WGDEVICE_A_PUBLIC_KEY={0x6b, 0x4, "5a5159a3d4c7777e0f2f5e06f18a1297edf80a65fa89de75e4941154f8db24a55c3cea95891f3595865aa9eab8ba9326dd6729357d9440683f804df3fa11185c77eea8334504981e9f00e1f3fb1ed34deaec833230e5b5f0f805dfeba4a6929aca78a87fa35f98"}, @WGDEVICE_A_PEERS={0x11b, 0x8, 0x0, 0x1, [@nested={0x10, 0xf8, 0x0, 0x1, [@nested={0x4, 0xf3}, @typed={0x8, 0x52, 0x0, 0x0, @pid=r6}]}, @generic="ebf847480dc242b10b6d78b05fe904270b5f1096f5ce94db9379f288a026125aff981e72cd4c8f7587a2f82a2ca0ec17c24efbe542a7c36110ffd490186db9216c09bfe1569016474ced036251753ea0b012ce6379400956eca401a67c5d0318f408400f46e485801d78acb831d424b93757b274f68a619585d04a8b850f6e6fff8006d336efaabd49e736fb", @generic="0b285588f753114c05eeceb559442f2d5333352e93122432cdc55019057a7c11c6f442719e1a850aab33787a08e632ead8bce81d307f9550252f403a3938ab3c2ce4979813c61a", @generic="983f3e70d3c0d83d32158436c818e581709a025cd1913cbac84cecc1d1e68405ababa1672d0bb639fce346406a51f512deed092d"]}, @WGDEVICE_A_PRIVATE_KEY={0xa7, 0x3, "d06481de6f58ded7702a1374c7892427e9508a6517fc8b1db6e360f7f4e7bd858d054d92fe6ea76610775aaa3b9673a7c2dcb9ede64b0b4d731ea51ee486ef4a7abd19c46cf82c68594ad4c6c7bfb0219b26110c076377e20e22d535fd6004bf67c038389dd0dad696a6bbaeec2ae903af2a65b2b894eba66c3238feb30c53f471e55d3242751c3639c9f1449965cb2a4f6fd1217c63f5bf406bdb1d255e982fb87288"}, @WGDEVICE_A_PRIVATE_KEY={0xf8, 0x3, "291fd94eb189cb90d3b00b64551d30349b0c105101f165b271e8d5d073233a4b5194222bd417dc9cabe4bae98f28945d12bebdad5b7062fa3926c01dc56d144094f79b0ae43a6bab84ac9aa0cb6b3128060ecc0a0f97e8bfdce46025a05b6a9a2e43500662434d164392b919653573c9585e788629784628fffb7090628d38e55b7112c418666021e4c1858206ef78c0e58c51f29704747936cec8f513fd043f63ff3109ddcd37573dffcbd0d971ddc7434ffbd126cf46166abaeda08156008235353034957f778cb44fadbf40c805023792d2703b26cf4656edc6c3b7687bbed9ec5a6abccc344a02fca57f30797e87af0791f4"}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x5}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x8000}, 0x80) io_cancel$auto(0x80, &(0x7f0000000780)={0x5, 0x4, 0x800, 0xcc, 0x9, r3, 0x56, 0x7, 0x6, 0x0, 0x2, r1}, &(0x7f00000007c0)={0x4, 0x7, 0x1, 0x8}) getsockopt$auto_SO_LINGER(r7, 0x9, 0xd, &(0x7f0000000800)='-)?$\\#&${(}\',\x8a\\$\'/}&\x00', &(0x7f0000000840)=0x8) rt_tgsigqueueinfo$auto_SIGCONT(r6, r6, 0x12, &(0x7f00000008c0)={@siginfo_0_0={0x2, 0x6, 0x3, @_sigfault={&(0x7f0000000880)="f21a0d7cd9474e1c67a6d87c5ce1ce69e4e2e8abff44d4", @_addr_pkey={"9a64f8d0e0590646", 0x2}}}}) close_range$auto(r3, r1, 0x6f) r8 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000940)='/dev/snd/pcmC1D0p\x00', 0x82000, 0x0) connect$auto(r8, &(0x7f0000000980)=@hci={0x1f, 0x0, 0x1}, 0x7fffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/nbd9\x00', 0x3c10c3, 0x0) openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000000a00), 0x10000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/devices/virtual/vc/vcsu1/power/autosuspend_delay_ms\x00', 0x234060, 0x0) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000a80), 0xa0080, 0x0) r9 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000b00), r0) sendmsg$auto_NFC_CMD_DISABLE_SE(r3, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r9, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20044000) r10 = syz_clone(0x20100200, &(0x7f0000000c00)="0701d48e7abab75c94d5a106175a0c08e7762ac9f06916ee91a542f79ae5c848ac7a5497117da79f548d94b97693f0456fde38464f3df629dd95b239b3225ba7bc93", 0x42, &(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)="88df6f064d716074319beb88a79ad419db02e27bcf294d95febe19a07b14f13ff58054f648b528d2645c80d7b317a15baa") waitid$auto_P_PGID(0x2, r6, &(0x7f0000000d40)={@siginfo_0_0={0xffffffff, 0x0, 0x1000, @_rt={r10, r5}}}, 0x800, &(0x7f0000000dc0)={{0x5, 0x7}, {0x2, 0x40e}, 0xffffffff, 0x9b, 0x3, 0xbb, 0x5, 0x100, 0x8, 0x10, 0x7, 0x4, 0x8, 0x1, 0x2, 0x6}) socketpair$auto(0x232, 0xe4a, 0x4, &(0x7f0000000e80)=0x7) bpf$auto_BPF_LINK_GET_NEXT_ID(0x1f, &(0x7f0000000ec0)=@bpf_attr_7={@btf_id=0x3, 0x3, 0x4, r3}, 0x900000) getsockopt$auto(r11, 0x3, 0x81, &(0x7f0000000f80)='\x00', &(0x7f0000000fc0)=0x26) r12 = openat$auto_fops_u64_ro_(0xffffffffffffff9c, &(0x7f0000001000)='/sys/kernel/debug/ramdisk_pages/ram7\x00', 0x12040, 0x0) fadvise64$auto_POSIX_FADV_NOREUSE(r12, 0x8000, 0xa, 0x5) r13 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000001040)='/dev/usbmon3\x00', 0x208040, 0x0) ioctl$auto_BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000001080)={@inferred=r13, "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"}) recvmmsg$auto(r12, &(0x7f0000002200)={{&(0x7f0000002080)="66e8073ad52c8b18e83747a6258e10de56", 0x100, &(0x7f0000002180)={&(0x7f00000020c0)="d6bec7e67d62648325ebe6da672e7e97d6968e3a24592c1898600b06cc40a2dd317be585e6d106a1e44697c399824e2c2220f192d4565c4a582b37ef41fb85865d20884de126d55539a34fa5e25b8f92df462f02365acda6380e9dff5218318f02f5c7b93ca5f8d5fb98d5660e37ff370da96697ecf60daf640c6e27a88efbc110d29af8511cd5c117be8d166e979ff9f3c32b42f608d3486643f41f75675daad7e36ac458ad80076a243f61c32507", 0x4}, 0x291b, &(0x7f00000021c0)="82920a06377eca6f326c032ea64a170adb59c40fc83c0b", 0x9, 0x7}}, 0x1ff, 0xd, &(0x7f0000002240)={0x8, 0x8}) sendmsg$auto_NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x18, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc810) 7m46.98729998s ago: executing program 0 (id=123): r0 = socket(0x1d, 0x2, 0x6) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r0) getsockopt$auto(r0, 0x6a, 0x88006, 0x0, 0x0) 7m46.698163295s ago: executing program 0 (id=124): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x201, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r1, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x5c8) sendmmsg$auto(r0, &(0x7f0000000080)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0xffff}, 0x5, 0x20000043) poll$auto(0x0, 0x7f, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$auto(0x3, 0x4, 0xa553) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) times$auto(0xfffffffffffffffc) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) fcntl$auto(0x3, 0x4, 0xa553) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0x8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) 7m45.373107696s ago: executing program 0 (id=130): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x4004, 0x5, 0xfffffffc, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/block/loop0/hctx0/sched_tags\x00', 0x22400, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x80000000001, 0x20004, 0x4000000, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop15\x00', 0x6600, 0x0) openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040), 0x22402, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x25, 0x6, 0x0) getsockopt$auto(r0, 0x114, 0x2714, 0xfffffffffffffffc, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x0, 0x0) socketpair$auto(0x1, 0x2, 0xe19, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x109000, 0x110) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0xc8e03, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x82, 0x0, 0x0) ioctl$auto(0x3, 0x40106f52, r1) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x175) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r4, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto(r3, 0x8925, r3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4000, 0x0) socket(0x840000000002, 0x3, 0xff) 7m44.430972421s ago: executing program 0 (id=134): mmap$auto(0x0, 0x20009, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pipe2$auto(0x0, 0x80) ioctl$auto(0x1, 0x5760, 0xffffffffffffffff) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/fail-nth\x00', 0x129842, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mknod$auto(0x0, 0x2, 0x9) socket$nl_generic(0x10, 0x3, 0x10) lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) mmap$auto(0xff, 0x2020009, 0x8, 0x18, 0xffffffffffffffff, 0x1002000008000) socket(0x15, 0x5, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/block/nbd3/queue/iosched/front_merges\x00', 0x2041, 0x0) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = socket(0x15, 0x5, 0x0) getsockopt$auto(r3, 0x114, 0x2718, 0xfffffffffffffffc, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @initdev={0xac, 0x1e, 0x3, 0x0}}, 0x406a) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) 7m29.310197246s ago: executing program 32 (id=134): mmap$auto(0x0, 0x20009, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pipe2$auto(0x0, 0x80) ioctl$auto(0x1, 0x5760, 0xffffffffffffffff) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/fail-nth\x00', 0x129842, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mknod$auto(0x0, 0x2, 0x9) socket$nl_generic(0x10, 0x3, 0x10) lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) mmap$auto(0xff, 0x2020009, 0x8, 0x18, 0xffffffffffffffff, 0x1002000008000) socket(0x15, 0x5, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/block/nbd3/queue/iosched/front_merges\x00', 0x2041, 0x0) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = socket(0x15, 0x5, 0x0) getsockopt$auto(r3, 0x114, 0x2718, 0xfffffffffffffffc, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @initdev={0xac, 0x1e, 0x3, 0x0}}, 0x406a) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) 6m25.165484228s ago: executing program 2 (id=303): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x680, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x3981, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xa, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x6, 0x5, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x3, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40084, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xb8a0]}, 0x1fe, 0x200c) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 6m24.775864457s ago: executing program 2 (id=305): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r0 = socket(0x3, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x69) sendmmsg$auto(r0, &(0x7f0000000080)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0xffff}, 0x5, 0x20000043) poll$auto(0x0, 0x40007f, 0x800) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) r1 = fcntl$auto(0x3, 0x4, 0xa553) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) fcntl$auto(0x3, 0x4, 0xa553) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'dummy0\x00'}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0x8) prctl$auto(0x7, 0x1, 0x0, 0x6, 0x0) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$auto(r4, &(0x7f0000000040)='/dev/snd/seq\x00', 0x7) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2242, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) futimesat$auto(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0xffffffffffffffff, 0x8}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x101, 0x0) sendmsg$auto_NET_SHAPER_CMD_GROUP(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NET_SHAPER_A_LEAVES={0x40, 0xa, 0x0, 0x1, [@NET_SHAPER_A_PRIORITY={0x0, 0x6, 0x79f}, @NET_SHAPER_A_WEIGHT={0x8, 0x7, 0x1}, @NET_SHAPER_A_PRIORITY={0x8, 0x6, 0x7}, @NET_SHAPER_A_WEIGHT={0x8, 0x7, 0xc753}, @NET_SHAPER_A_PRIORITY={0x8, 0x6, 0x3}, @NET_SHAPER_A_PRIORITY={0x8, 0x6, 0xfff}]}, @NET_SHAPER_A_METRIC={0x8, 0x2, 0xc}, @NET_SHAPER_A_WEIGHT={0x8, 0x7, 0xf054}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x40) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x0, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x200084c, 0x0, 0x9, 0x0, 0x3, 0x10b}, 0x4}, 0xdfffffff, 0xc5c) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mbind$auto(0x8000002000, 0x100000004, 0x1, 0x0, 0xffffffffffffff39, 0x800001) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7112}, 0x8) 6m22.805945031s ago: executing program 2 (id=309): r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, 0x0, 0x381b80, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ustat$auto(0x801, 0x0) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000080), 0x7390c1, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x511000, 0x0) (async) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x511000, 0x0) mmap$auto(0x0, 0x20005, 0x7fffffff, 0xeb1, r2, 0x7ffe) io_uring_setup$auto(0x0, 0x0) mmap$auto(0x0, 0x2000d, 0x3, 0xeb1, 0x404, 0x100010008000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x23, 0x80805, 0x0) close_range$auto(0x2, 0xa, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0x0) (async) timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0x0) clone$auto(0x20003b48, 0x5, 0x0, 0x0, 0xe) ioctl$auto(0x3, 0x80000000, r0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x200, 0x800000000006, 0x15, 0xffffffffffffffff, 0x200000000008007) socketpair$auto(0x7, 0xfffffffd, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/0000:00:02.0/subsystem_vendor\x00', 0x40200, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) socket(0x15, 0x5, 0x0) (async) socket(0x15, 0x5, 0x0) ioctl$auto(0x3, 0x8b35, 0x91) (async) ioctl$auto(0x3, 0x8b35, 0x91) close_range$auto(r2, r3, 0x48) pipe2$auto(&(0x7f0000000180), 0xec7) (async) pipe2$auto(&(0x7f0000000180), 0xec7) write$auto(0x3, 0x0, 0xfffffdef) (async) write$auto(0x3, 0x0, 0xfffffdef) 6m21.347375398s ago: executing program 2 (id=321): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r0 = socket(0x28, 0x4, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000080)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0xffff}, 0x5, 0x20000043) poll$auto(0x0, 0x7f, 0x9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x115982, 0x0) fcntl$auto(r1, 0x9, 0x0) io_uring_setup$auto(0xfffffffe, &(0x7f0000000080)={0x7fffffff, 0x3, 0x2000, 0x2, 0x7, 0x200008, 0xffffffffffffffff, [], {0x4, 0x2, 0x8c48, 0x29f, 0x102, 0x7f, 0x101, 0x24, 0x2}, {0x100, 0x1, 0x56, 0x9, 0x1, 0x0, 0x76c5, 0x8, 0x100000000}}) r2 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2a801, 0x0) writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x5}, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) fcntl$auto(0x3, 0x4, 0xa553) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x1000000000000006, 0xf8, 0xfffffffffffffffa, 0x9000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x80201, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x80003e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0xfffffffffffffffe, 0xe984, 0x619, 0x8000000000000010, r0, 0x5e) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket(0xa, 0x3, 0x3b) getsockopt$auto(r4, 0x29, 0x20, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x189400, 0x0) pwrite64$auto(0xffffffffffffffff, 0x0, 0x4e, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/vivid.0/video4linux/radio6/power/autosuspend_delay_ms\x00', 0x0, 0x0) 6m19.192494816s ago: executing program 2 (id=315): mmap$auto(0x0, 0x6, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x2, 0x3a) r0 = io_uring_setup$auto(0x52, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/hugepages-8kB/shmem_enabled\x00', 0x1a1842, 0x0) sendfile$auto(r1, r1, 0x0, 0x0) socket(0x28, 0x0, 0xe3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000040)='\t', 0x1) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/conf/bridge0/disable_policy\x00', 0x301800, 0x0) setregid$auto(0x0, 0x0) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000000)="c80d1b5d399b4a", 0xfdef) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x400, 0x400008, 0xdf, 0x1000000000009b72, r2, 0xdac4) semctl$auto(0x1, 0xfffffffe, 0x3, 0x5) r4 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r4, 0x0, 0xc3) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) munlock$auto(0xf, 0x6) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)="8736893ed92c4d7a9deed2a5a63ebc33c949eb4aca7dc3e8852d1ef01a2036dce912f7ea6b13fbaa831f9767077cc1dd883d7283c5d43ec5dffba032290c2f81e3e05bb229e5ec3fe414429619e55a22ab8335d080cc0d1251", 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/uvcvideo/parameters/clock\x00', 0x80002, 0x0) sendfile$auto(r6, r6, 0x0, 0x7) syz_genetlink_get_family_id$auto_thermal(&(0x7f00000000c0), r2) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) 6m14.488133812s ago: executing program 2 (id=325): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x3, 0x0) sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000090}, 0x4891) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15a}, 0x6, 0x8, 0x5) read$auto(0x3, 0x0, 0x8080) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) lchown$auto(&(0x7f0000000080)='./file0\x00', 0xee01, 0xee00) write$auto(r0, 0x0, 0x20000000005) 5m59.306170881s ago: executing program 33 (id=325): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x3, 0x0) sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000090}, 0x4891) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15a}, 0x6, 0x8, 0x5) read$auto(0x3, 0x0, 0x8080) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) lchown$auto(&(0x7f0000000080)='./file0\x00', 0xee01, 0xee00) write$auto(r0, 0x0, 0x20000000005) 2m28.367249362s ago: executing program 4 (id=857): r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) fcntl$auto(0x3, 0x4, 0xa553) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0x8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) epoll_ctl$auto(r0, 0xffffffff, 0xffffffffffffffff, &(0x7f00000000c0)={0x4, 0x3}) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x0, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) 2m26.991508638s ago: executing program 4 (id=862): socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x300) mmap$auto(0x401000000000, 0x40000004020009, 0xc, 0x15, 0xffffffffffffffff, 0x7ffe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x288202, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) syslog$auto(0x3, 0x0, 0x5) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x200, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000080)=0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0) pread64$auto(r1, 0x0, 0x800003, 0x270) 2m24.688400506s ago: executing program 4 (id=867): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000080)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0xffff}, 0x5, 0x20000043) poll$auto(0x0, 0x7f, 0x9) fcntl$auto(0x3, 0x4, 0xa553) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) r1 = socket(0x2, 0x5, 0x0) pipe2$auto(0x0, 0x80) setsockopt$auto(r1, 0xfffffffd, 0x3800000, 0x0, 0x8) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) semctl$auto(0x7, 0x6, 0x13, 0x1) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0x10, 0x1, 0x948b, 0x0, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x80000400, 0x6, 0x8]}, 0x0) 2m23.406539608s ago: executing program 4 (id=875): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/bus/usb/drivers/ni6501/new_id\x00', 0x2000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000540)=""/114, 0x72) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r1, &(0x7f0000000140)="0a1b9a5c305c0a", 0x7) r2 = openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/bluetooth/hci2/force_suspend\x00', 0x201, 0x0) write$auto_force_suspend_fops_hci_vhci(r2, &(0x7f0000000280)='Y', 0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000100)='/proc/version\x00', 0x101000, 0x0) (async) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000100)='/proc/version\x00', 0x101000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto_SO_RCVPRIORITY(r1, 0x8, 0x52, &(0x7f0000000200)='}/%\x00', 0x2) socket(0x2, 0x1, 0x0) (async) r3 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) r4 = open(&(0x7f0000000540)='./cgroup\x00', 0x0, 0x310) fcntl$auto(r4, 0x402, 0x1) ioctl$auto_BLKIOMIN(r4, 0x1278, 0x0) sendmsg$auto_NFC_CMD_SE_IO(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x408d4}, 0x0) getsockopt$auto(r3, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x18) (async) getsockopt$auto(r3, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x18) socket(0x2, 0x80002, 0x73) (async) socket(0x2, 0x80002, 0x73) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$auto(0x3, 0x40505331, 0x38) 2m23.143707215s ago: executing program 4 (id=876): flock$auto(0x1, 0x8) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x3000c, 0x4000000000df, 0x4000eb1, 0x401, 0x10000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1f, 0x3, 0x3) futex$auto(0x0, 0x6, 0x100004a, 0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x0, 0x7, 0x0, 0x82d7) read$auto(0x3, 0x0, 0x7e) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, 0x0, 0x5, 0x4) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1f, 0x9, 0x62, 0x0, 0x0, 0x0, 0xffc, 0x2, 0x80000000400000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0x11, 0x1, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x2001, 0x8) r0 = getuid() r1 = getegid() setregid$auto(r1, r1) getgroups$auto(0x1ff, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x2001, 0x8) r3 = getuid() r4 = getegid() socket(0xa, 0x3, 0x87) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x797d02f5) setregid$auto(r4, r4) r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x44000, 0x0) ioctl$auto_UI_DEV_CREATE(r5, 0x5501, 0x0) statx$auto(r2, &(0x7f0000001100)='./file0\x00', 0x0, 0x10001, &(0x7f0000001140)={0x3, 0x6, 0x9, 0x0, r3, r4, 0x5, 0x1, 0x3, 0xffff, 0xb, 0xb6, {0xc, 0xfffffffa}, {0x1, 0x2}, {0x5, 0x8001}, {0x8, 0x101}, 0x7e05b10d, 0x7, 0x7b6, 0x1, 0xb, 0x7, 0xa, 0x2, 0x5, 0x3, 0x3, 0x1c5, [0x3ff, 0x2, 0x7ffffffd, 0x8, 0x200000096, 0x0, 0x20, 0x0, 0xffffffffffff0000]}) stat$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x1, 0x8, 0xffffffffffff0000, 0xe, r0, r4, 0x0, 0x36, 0x0, 0x400, 0x6, 0x4, 0x4, 0x8000, 0x8000000000000001, 0x4, 0x7}) 2m23.013314539s ago: executing program 4 (id=878): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x41, 0x0) r1 = clone3$auto(&(0x7f0000000040)={0x43, 0x4, 0xa5e7, 0x10000, 0x1, 0x8000000000000000, 0x10, 0x5, 0xf, 0x1ff, 0x5185}, 0x1) prctl$auto(0x3e, 0x1, r1, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000000)) chdir$auto(&(0x7f0000000340)='./file0\x00') mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) unshare$auto(0x8) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) ioctl$auto_SNDCTL_DSP_PROFILE(r2, 0x40045017, &(0x7f0000000180)="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") close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/sys/kernel/usermodehelper/bset\x00', 0x8a802, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r3, 0x4b72, r4) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) rseq$auto(&(0x7f0000000280)={0xe, 0x401, 0x0, 0x806, 0x7, 0x2, "a005e2079990dbea867d20f42a909da4bd862dd72f80af99f59d86b567b54339f9b0684def766e0ed26bb934a5d4f977ea74add42aecf45ef5799ce682dcaae1bdd579f1e0a2644be3281def8a948ab91137d0d6577a9e7efd2639688d2ae832b4947ab26e0d4e8b00572342e2a8ac0fb63464ea1ee16b46cbfec625d3d196532879"}, 0x8003, 0x0, 0x8000006) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) 2m9.466860301s ago: executing program 5 (id=913): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:/\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xadCl\x9e\xeb\xcd\vp\x99\x00\xc8eX\xdc3\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0A\x94\xa3\xaef\x87\xd8\x95I\xfd\xa8\t\xac\x87\xb7\x1d\xd5\x83\xdcyu]\xde\xbe\xbf$<.}\x8b`\x04\xfc\xa2\xab\xb5]\x80\x00\xb9D\xc5\xbc\xf2a\xd66\xa5\xd3\xc1r\x96\x1e\x8db\x05=`\x01\x11\x04Tz\x87A$\x115\x95PUf\xa7\xfe\x19\x00\x82go}@W\xd5\xaej\x01\xbf>5n\x17S\xc0\x8a\xaf%O\xd1W\xa3ua+sUJ\xea\xf9\xb7p-\x128\x9d\xbaM_\xff\x1c\xc3sG\x04\xf2\xd3\xf3{;\xd4\xd7\x1c\x1dZ\xe9\xe9\xc9\x9cu5\xe9\xa2\xb3N\xd2\xc1\xc8\xa5\xadt\xd5BKD\x86\xeb%\a*\x06\xbb\x1e\xfb\x11U\f&\xcbP\xf1\xcf\xccb\xe8Wb\xc5ae\xe3\xf9l\xa9vK\xed\x8cL\xfb%g\x83;\xe1\xe2w\xd6\xaa6\x16\x8fx\x1a\xd7\xc8\xf4[\xbc\b\xe1Z\x92\x14Q\xdef\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\xb0\xa1\xeeJ\xd8\xef\xc8t\x9d\x1e=J\x91W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7b#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbr\xb9\xc3\xacH!\xc1\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2?\x0e\x85\xaaIGu\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1bx#\x87\xa9\x10\x9b\xf8YD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*w\x13\x96\xd5\xd0\x877\x12\xbc\xa1\xd0h@|\xf9\xfa\x9b\x17\x94\xb9\xe7\xf3\x15\x05\x91\xe8\x98p\x7f:\xd7s\xd9wo\x82\xda\xec\x91\xb7\xd9;H\x8a\b\x00\x00\x00\x00\x00\x00\x00\x8aZ\x94\x14$X7\xaeW6=^I\x9fQ\r5c\x81\xca]\x97m\x89o\x8f\xd8}P>I\xd0\xb3\x88C\xd7', 0x100000a3d9) close_range$auto(0x2, r1, 0x401) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) socket(0x2, 0x3, 0xa) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd5, 0x948b, 0x3, 0x15f4da0a, 0x4, 0x3, 0x62, 0x80000002, 0x7, 0x1, 0x9, 0x3, 0xfffffffffefffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x1000, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x8062, 0x80000001, 0x800, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0) r2 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000100), 0x20400, 0x0) ioctl$auto_TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000140)=0xbc) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000001ff, 0x4, 0xd, 0x1, 0x3, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0xd, 0xd, 0x1]}, 0x0) r3 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) read$auto_stats_fops_(r3, 0x0, 0x0) unshare$auto(0x3) mmap$auto(0x40000000, 0x2000d, 0x4000000000df, 0xebf, 0x401, 0x7ffe) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x9, 0x6, 0x6, 0x4, 0x11ffffffffffb, 0xb2, 0x2, 0x6, 0x10, 0x80, 0x7ff, 0x8000, 0x1, 0x1, 0x202, 0x9, 0xbca7, 0x4, 0x0, 0x0, 0x0, 0x694, [0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x20000000000, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffc01, 0x7fffffff, 0xfffffffffffffffb, 0x0, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0x7fffffff, 0x0, 0x0, 0x20000000000000, 0x0, 0x1000000000000200, 0x0, 0x400, 0x96, 0x4000000000009, 0x4, 0xe17, 0x0, 0x6]}, 0x1fe, 0x1) r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffffffffffd03, &(0x7f00000001c0)) 2m7.89836438s ago: executing program 34 (id=878): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x41, 0x0) r1 = clone3$auto(&(0x7f0000000040)={0x43, 0x4, 0xa5e7, 0x10000, 0x1, 0x8000000000000000, 0x10, 0x5, 0xf, 0x1ff, 0x5185}, 0x1) prctl$auto(0x3e, 0x1, r1, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000000)) chdir$auto(&(0x7f0000000340)='./file0\x00') mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) unshare$auto(0x8) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) ioctl$auto_SNDCTL_DSP_PROFILE(r2, 0x40045017, &(0x7f0000000180)="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") close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/sys/kernel/usermodehelper/bset\x00', 0x8a802, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r3, 0x4b72, r4) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) rseq$auto(&(0x7f0000000280)={0xe, 0x401, 0x0, 0x806, 0x7, 0x2, "a005e2079990dbea867d20f42a909da4bd862dd72f80af99f59d86b567b54339f9b0684def766e0ed26bb934a5d4f977ea74add42aecf45ef5799ce682dcaae1bdd579f1e0a2644be3281def8a948ab91137d0d6577a9e7efd2639688d2ae832b4947ab26e0d4e8b00572342e2a8ac0fb63464ea1ee16b46cbfec625d3d196532879"}, 0x8003, 0x0, 0x8000006) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) 2m7.10587662s ago: executing program 5 (id=919): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) r1 = socket(0xb, 0x2, 0x7) cachestat$auto(r1, &(0x7f0000000000)={0x0, 0x7fc}, &(0x7f0000000040)={0x2, 0x0, 0xd6, 0x1, 0x3}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = socket(0xa, 0x3, 0x3a) io_uring_setup$auto(0x3, 0x0) io_uring_register$auto(r2, 0x8, 0x0, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/027/001\x00', 0x4a901, 0x0) ioctl$auto_USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f00000001c0)={0x0, 0x5516, 0x0}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r4 = open(0x0, 0x0, 0x408) socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x61, 0x100001000000003, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x45, 0x0, 0x0) getdents$auto(r4, 0x0, 0x400018) mmap$auto(0xffffffffffffffff, 0x4020009, 0xdf, 0x40000eb1, 0x401, 0x8000) clone$auto(0x100000008, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006) clone$auto(0x1, 0x1, 0x0, 0x0, 0x2) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x5, 0xfff, 0x44eb2, 0x10006, 0x300000000000) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, 0x0, 0x6, 0xffffffffffffffff, 0x4, 0x400) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80180, 0x0) mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec9\x00', 0x8800, 0x0) ioctl$auto_CEC_DQEVENT(r5, 0xc0506107, 0x0) 2m5.340758693s ago: executing program 5 (id=922): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000080)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0xffff}, 0x5, 0x20000043) poll$auto(0x0, 0x7f, 0x9) fcntl$auto(0x3, 0x4, 0xa553) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x5, 0x0) pipe2$auto(0x0, 0x80) setsockopt$auto(r1, 0xfffffffd, 0x3800000, 0x0, 0x8) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) semctl$auto(0x7, 0x6, 0x13, 0x1) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0x10, 0x1, 0x948b, 0x0, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x80000400, 0x6, 0x8]}, 0x0) 2m4.229589615s ago: executing program 5 (id=924): recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) 2m3.5270399s ago: executing program 5 (id=925): r0 = socket(0x23, 0x2, 0x73) mmap$auto(0xfffffffffffffc, 0xd8f0, 0x7, 0xeb1, r0, 0xbf47) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mtdblock0\x00', 0x26c282, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv6/conf/ip6tnl0/stable_secret\x00', 0x141241, 0x0) pwrite64$auto(r1, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5) r2 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r2, &(0x7f0000000680)={0x0, 0x40200}, 0x3) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) unshare$auto(0x20000) unshare$auto(0x20000) mmap$auto(0x0, 0x202000d, 0x3, 0x200000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/mac80211_hwsim/hwsim0/net/wlan0/flags\x00', 0x189082, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/maps\x00', 0x121e43, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="13002cbd7000dddbdf2501e5000008000300", @ANYRES32=0x0, @ANYBLOB="04002580"], 0x20}, 0x1, 0x0, 0x0, 0x24004080}, 0x200408d4) 1m48.468902742s ago: executing program 35 (id=925): r0 = socket(0x23, 0x2, 0x73) mmap$auto(0xfffffffffffffc, 0xd8f0, 0x7, 0xeb1, r0, 0xbf47) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mtdblock0\x00', 0x26c282, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv6/conf/ip6tnl0/stable_secret\x00', 0x141241, 0x0) pwrite64$auto(r1, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5) r2 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r2, &(0x7f0000000680)={0x0, 0x40200}, 0x3) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) unshare$auto(0x20000) unshare$auto(0x20000) mmap$auto(0x0, 0x202000d, 0x3, 0x200000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/mac80211_hwsim/hwsim0/net/wlan0/flags\x00', 0x189082, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/maps\x00', 0x121e43, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="13002cbd7000dddbdf2501e5000008000300", @ANYRES32=0x0, @ANYBLOB="04002580"], 0x20}, 0x1, 0x0, 0x0, 0x24004080}, 0x200408d4) 55.706699897s ago: executing program 3 (id=1135): r0 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$auto_cachefiles_daemon_fops_internal(r0, &(0x7f0000000300)="a04f", 0x2) unshare$auto(0x40000080) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000040)=0x5) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x2e6205, 0x0) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000640)={0x18, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_FRAME={0x0, 0x3, "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"}]}, 0xfffffffffffffe84}, 0x1, 0x0, 0x0, 0x40c4}, 0x4048000) ioctl$auto_KVM_GET_MSR_FEATURE_INDEX_LIST(r1, 0xc004ae0a, &(0x7f0000000180)={0x7, [0x31f, 0x4, 0x10]}) unshare$auto(0x40000080) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/set_event\x00', 0x101901, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = socket(0x2, 0x1, 0x0) getsockopt$auto_SO_OOBINLINE(r6, 0x0, 0xa, &(0x7f0000000040)='H\xff\x7f\v\x00kvm\x00', &(0x7f0000000080)=0x400) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/est_cpulist\x00', 0x60802, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) sysfs$auto(0x2, 0x4, 0x0) mbind$auto(0x0, 0xfaa1, 0x8001, &(0x7f0000000280)=0xc9e, 0x400, 0x1) mremap$auto(0x200000081001, 0x8, 0x1eac881d, 0x3, 0x1) open(&(0x7f0000000000)='./bus\x00', 0xa23c2, 0x1c0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2) getdents64$auto(r7, &(0x7f0000000f40)={0x309, 0x7, 0xffff, 0x7}, 0x200c8) 54.139827269s ago: executing program 3 (id=1141): mmap$auto(0x0, 0x2020009, 0x10000043, 0xeb1, 0xffffffffffffffff, 0x5c9) (async) socket(0xa, 0xa, 0x0) r0 = pidfd_open$auto(0x0, 0x0) setns(r0, 0x2000000) ioctl$auto_VHOST_SET_VRING_CALL2(r0, 0x4008af21, 0x0) (async, rerun: 32) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) (async, rerun: 32) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000080), 0x800000000001002}, 0x3) (async) r3 = socket(0x1d, 0x5, 0x0) syz_genetlink_get_family_id$auto_smbd_genl(0x0, 0xffffffffffffffff) (async) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r3, 0x0, 0x30004850) (async) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) mmap$auto(0x10, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x1f, 0x940, 0x1dfde, 0x3, 0x6, 0x8000003, 0x8, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x203, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x4, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x81, 0x80000, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x203, 0x7d) (async, rerun: 64) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async, rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000500)={0x0, 0xfbf}, 0x2, 0x0, 0x7, 0xa505}, 0x3ff}, 0x7, 0x4008) (async) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) sendmmsg$auto(r1, 0x0, 0x9a6, 0xffff) (async) connect$auto(0x4, 0x0, 0x10) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r5, 0x4b47, 0x1) 53.887406009s ago: executing program 3 (id=1142): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_VDPA_CMD_DEV_CONFIG_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="6402000000f0382fb4dabed2641dd00e04c1000000", @ANYRES16=0x0, @ANYBLOB="100029bd7040fcdbdf2506000000140002006970766c616e30000000000000000000140002006e6574706369300000000000000000001400020076657468305f746f5f687372000000001400020073797a6b616c6c657231000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x20044085) r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x43, 0x0, 0x3) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf2503000000790008805b4f2525b2dc3a73ec37e7122e6f0d55382854d419b883b7ed64bd3c7b9fb15273e787030718751e0a22cc6cabcae114aa6448d0356183e1ca7c01536c5c6f37915b26a3e75515ab02807fe932b8a415a581dcdc7800f91e231c001d800400d3800c002000f3000000002b3c0c7e9b"], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x42) close_range$auto(0x2, 0x8, 0x0) utimes$auto(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x9, 0x8}) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fcdbdf25030000000800030000020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a000500c862a41184f600000a00010000000000000000000a00010070b28a70c5dc0000080004000300000006000700ff0000000800040006fdfa"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r3 = socket(0x23, 0x5, 0x0) bind$auto(r3, 0x0, 0x80) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x2, 0x110000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x2}) timerfd_settime$auto(0xffffffffffffffff, 0x3, &(0x7f0000000040)={{0x2, 0x8000000000000000}, {0x2, 0x80}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = getpid() process_vm_readv$auto(r4, 0x0, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) read$auto(r2, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f00000001c0)={0x0, 0x7}, 0x3) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x5, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x10000) 53.454681336s ago: executing program 3 (id=1145): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) poll$auto(0x0, 0x7f, 0x9) fcntl$auto(0x3, 0x4, 0xa553) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x1, 0x84) bind$auto(r0, &(0x7f0000000100)=@in={0x2, 0x3, @remote}, 0x69) r1 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x6a) pipe2$auto(0x0, 0x80) setsockopt$auto(r1, 0xfffffffd, 0x3800000, 0x0, 0x8) listen$auto(0x3, 0x83) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0xa, 0x801, 0x84) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) keyctl$auto(0x2000000000000017, 0x3ff, 0x0, 0x0, 0x3) read$auto(r3, &(0x7f0000000040)='/dev/snd/seq\x00', 0x7) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0x10, 0x1, 0x948b, 0x0, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x80000400, 0x6, 0x8]}, 0x0) 52.419136124s ago: executing program 3 (id=1146): mmap$auto(0x0, 0xd, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000001880)=""/4101, 0x1005) 52.221703721s ago: executing program 3 (id=1148): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:/\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xadCl\x9e\xeb\xcd\vp\x99\x00\xc8eX\xdc3\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0A\x94\xa3\xaef\x87\xd8\x95I\xfd\xa8\t\xac\x87\xb7\x1d\xd5\x83\xdcyu]\xde\xbe\xbf$<.}\x8b`\x04\xfc\xa2\xab\xb5]\x80\x00\xb9D\xc5\xbc\xf2a\xd66\xa5\xd3\xc1r\x96\x1e\x8db\x05=`\x01\x11\x04Tz\x87A$\x115\x95PUf\xa7\xfe\x19\x00\x82go}@W\xd5\xaej\x01\xbf>5n\x17S\xc0\x8a\xaf%O\xd1W\xa3ua+sUJ\xea\xf9\xb7p-\x128\x9d\xbaM_\xff\x1c\xc3sG\x04\xf2\xd3\xf3{;\xd4\xd7\x1c\x1dZ\xe9\xe9\xc9\x9cu5\xe9\xa2\xb3N\xd2\xc1\xc8\xa5\xadt\xd5BKD\x86\xeb%\a*\x06\xbb\x1e\xfb\x11U\f&\xcbP\xf1\xcf\xccb\xe8Wb\xc5ae\xe3\xf9l\xa9vK\xed\x8cL\xfb%g\x83;\xe1\xe2w\xd6\xaa6\x16\x8fx\x1a\xd7\xc8\xf4[\xbc\b\xe1Z\x92\x14Q\xde5n\x17S\xc0\x8a\xaf%O\xd1W\xa3ua+sUJ\xea\xf9\xb7p-\x128\x9d\xbaM_\xff\x1c\xc3sG\x04\xf2\xd3\xf3{;\xd4\xd7\x1c\x1dZ\xe9\xe9\xc9\x9cu5\xe9\xa2\xb3N\xd2\xc1\xc8\xa5\xadt\xd5BKD\x86\xeb%\a*\x06\xbb\x1e\xfb\x11U\f&\xcbP\xf1\xcf\xccb\xe8Wb\xc5ae\xe3\xf9l\xa9vK\xed\x8cL\xfb%g\x83;\xe1\xe2w\xd6\xaa6\x16\x8fx\x1a\xd7\xc8\xf4[\xbc\b\xe1Z\x92\x14Q\xde0xee00, 0x0, 0x3, 0x10001, 0xb, {0x1, 0xffffffff}, {0xb, 0x8}, {0x7f, 0x6}, 0x6, 0xae7c, 0xf6, 0xf, 0x8001, 0x7, 0x2, 0x3, 0x9, 0x9, '\x00', 0x7, 0x8, 0x5, 0x8}}) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x4e0, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x7fff}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c1, 0x6e, 0x0, 0x1, [@typed={0x8, 0xb0, 0x0, 0x0, @pid=r4}, @nested={0x11f, 0xd1, 0x0, 0x1, [@typed={0x8, 0xa1, 0x0, 0x0, @pid=r5}, @nested={0x4, 0xa6}, @generic="75a23b06c0e6081c1d680dca9e556b5874042405b5735b9183b2", @typed={0x8, 0x85, 0x0, 0x0, @fd=r1}, @generic="c6fb2490c224ec999c952e5d3c87c9947d39fb81261cd02e407ff4c79c3edda3cb2ead6c26cec83e3a8883e4c02fbfaeb3db6bf4791d52097ef3945afa0df85562d06748ec124a654ea536411a0f964cbfdc25a504ab225dc9823d69e9de24d6e9d098c1f869321dd2ba066be0936c29228ba55ffed3d5c1c243f6607e32b6013850fcbf129eb45ac2a27eeaf7eb96de7853797dd43665e444c6624da106033767ea4d0e1e3e132895941656ed6eb4f05c7cc292f358acc0a2fa9deea531da8d18de64add4d2a928fb13a12f9105e3a5578fd261ee8f0a075716a13bf84aa70069", @typed={0x8, 0x25, 0x0, 0x0, @uid=r6}, @nested={0x4, 0x116}]}, @generic="f00339fc0a9b7cc84cfce0dac0069e86cc6a610828c33d874240d5727a289db400a64744a01e245a05c61b5d8057c269203609ac6710bdb1d99d116f886dbfc25b04374537a1ffb6ee07b1e133a6f168698b2e93300d143babd12a90a2ee0e84f8f3691d4c09898b692b62e3d9345e06b59010e12eca73c87d1a5e2cfbd2c908541d05ed79d9b3", @generic="a0112d6478a5", @typed={0x8, 0x16, 0x0, 0x0, @fd}]}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x380000}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0x2f4, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x2ed, 0x2, "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"}]}]}, 0x4e0}, 0x1, 0x0, 0x0, 0x800}, 0x4801) mremap$auto(0x8, 0x8000000000000001, 0x0, 0x3, 0x2) r7 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) connect$auto(r7, 0x0, 0xd) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) getsockopt$auto(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) r8 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto_I2C_SMBUS(r8, 0x720, 0x0) pread64$auto(r7, 0x0, 0x101, 0x103) read$auto_mon_fops_text_t_mon_text(r7, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) close_range$auto(0x2, 0x8, 0x0) 3.422581316s ago: executing program 8 (id=1324): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x3, 0x1) setsockopt$auto(r0, 0xff, 0x1, 0x0, 0x1) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) msgctl$auto_MSG_INFO(0x5, 0xc, &(0x7f0000000180)={{0xc1, 0xee00, 0xee00, 0x87a5, 0x0, 0x6, 0x2}, &(0x7f00000000c0)=0x8, &(0x7f0000000100)=0x9, 0x7fff, 0xa, 0x8, 0x9, 0x1, 0x7, 0x2, 0x8, @raw=0x2817, @inferred=0xffffffffffffffff}) (async, rerun: 32) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x40080, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPP(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_HE_CAPABILITY={0x21, 0x10d, "fd5736a95c80db53e7c4aadb2715ac2f8807943d1727244eba33fc42fe"}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x4000890) (async, rerun: 32) sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, r5, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) (rerun: 32) msgctl$auto_MSG_INFO(0x10001, 0xc, &(0x7f00000002c0)={{0x1, r2, 0xee00, 0x2f05095a, 0x5, 0xb1a, 0x1ff}, &(0x7f0000000240)=0xc, &(0x7f0000000280)=0x4, 0x4, 0x5, 0x8, 0x69, 0x3, 0x5, 0x101, 0x1, @inferred=0xffffffffffffffff, @raw=0x8}) sendmsg$auto_TIPC_NL_MON_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\f\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="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"], 0xc38}}, 0x4005) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/kernel/watchdog_cpumask\x00', 0x141241, 0x0) (async) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd9/queue/dma_alignment\x00', 0x80080, 0x0) read$auto(r7, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) 3.157731478s ago: executing program 8 (id=1326): socket(0xa, 0x3, 0x3b) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0x2505}, 0x7fe}, 0x4, 0x1000) socket(0x26, 0x80805, 0x0) r0 = accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x2841, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSCOMPRESS(r2, 0x4010744d, &(0x7f00000001c0)={0x0, 0x8, 0x80}) mmap$auto(0x0, 0x2020009, 0x3, 0x355, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event0\x00', 0x2, 0x0) rt_tgsigqueueinfo$auto(0x0, 0x0, 0x8001, &(0x7f0000000740)={@_si_pad}) ioctl$auto_EVIOCGMASK(r3, 0x80104592, &(0x7f0000000000)={0x2000, 0x17a67492, 0x9}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mlock$auto(0x2, 0x0) msync$auto(0x0, 0xe0, 0x6) write$auto(r3, 0x0, 0x47ffffdf2) ioctl$auto_BLKFINISHZONE(r0, 0x40101288, &(0x7f00000000c0)={0x1, 0x8}) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) fsmount$auto(r4, 0x8, 0x6e) recvmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x200002, 0xafb}, 0x800}, 0xfffffffb, 0x8, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x18}, 0x1) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) read$auto(0xffffffffffffffff, 0x0, 0x7f) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x40, 0x0) 2.668987388s ago: executing program 7 (id=1327): r0 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x20c542, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, r0, 0x8000) io_uring_setup$auto(0x2008, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffff7fffffe01, 0x8051, 0x3, 0x0) syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2.659485023s ago: executing program 1 (id=1328): setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) 2.487121695s ago: executing program 1 (id=1329): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000000000000000) close_range$auto(0x2, 0x8, 0x0) r0 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci6/msft_opcode\x00', 0x208800, 0x0) mq_notify$auto(r1, &(0x7f0000000100)={@sival_ptr=&(0x7f0000000080)="6fe792f0107166c4b36d4598f99f258ea5577b79bfc83be2119542459ac27520e00f929ab3084aaf5fa080adb5ec63b53cdcfd97c2cc984f95b35712fbebed8df8ca7cd3457e198a1e871d0f080de50fb6248b2ae67f62e1cff7ad8e02d1274595725aad6312129495eec4ffd5118c7fcda0d64d6c2b89", @inferred=r0, 0x3, @_tid}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r2 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000180), r0) sendmsg$auto_NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x1a4, r2, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAG={0x5, 0x3, 0x81}, @NLBL_CIPSOV4_A_TAG={0x5, 0x3, 0x1}, @NLBL_CIPSOV4_A_MLSLVL={0x177, 0x7, 0x0, 0x1, [@generic="4020154b3c09a2e3e7320d33982561fd16c973f26d5dcc06680705eec53bcb02262fce574455323a81228401ae3560f462c20d04a6fda0c22cb5308588bfd66079d37c694cd3d1e7004af51f8c556d3475e964b63a7cbc1dfd3d5bc936ccdc84e26ae09df219a8b8ed5a371c6bc6f92844db97f5acff85c3900268565e91ed45cb21e49b4c4bfcbf4d7daf6d0f4e847d13dc8b599e1e6fd94827528f69c8673068bf6a24c5c8a86dfcc2a798f5563c01c4bb305df75a40f82683e7ca384bbc1542215ab2823b7315d4bb35578decec441bc471bc51ea1503c3a0ccedc2576c", @nested={0x94, 0x104, 0x0, 0x1, [@generic="69099f5b88e2bd1faecdc79a4b7df2696bad86cd280ff85af8c895661abadde73c2e9212dd0151810e6705876d23e0d99eceba3b4a3f23b2e15d9c359bd544b7195cdb931460d81d9c05bdef8c964565438b5cfd0de68ce2540c5dd24289a4d5c86c1134586222ad5762ee900cfe30f08f913d424014e3c16b9af3d101d9d1566ac575104920352598a3430e1698dedb"]}]}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x100}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x2000c840}, 0x4008180) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/pcm0c/sub0/xrun_injection\x00', 0x129541, 0x0) write$auto(r3, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) 2.294619552s ago: executing program 1 (id=1330): mmap$auto(0x3, 0x400008, 0xdc, 0x1009b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) close_range$auto(0x2, 0xffffffffffffffff, 0x7fff) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [{0x561, 0x3}]}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x202, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x2) mmap$auto(0x1000000000000000, 0x2020009, 0x4, 0x800000000eb1, 0xffffffffffffffff, 0x8000) r4 = open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x138) open_by_handle_at$auto(r4, &(0x7f0000000040)={0x21, 0x2, '\a\x00\x00\x00\x00\x00\x00\x00'}, 0x20401) r5 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000100), 0xffffffffffffffff) getsid$auto(0x0) msgsnd$auto(0x2, &(0x7f0000000300)={0x4, 0x9}, 0x65, 0xfffffffd) sendmsg$auto_OVS_VPORT_CMD_DEL(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="00002dbd7000fedbdf250200000004000a8044000600ffffffffffffff7f0200000000000000ff000000000000009b0c000000000000ce020000000000008500000000000000ff01000000000000ff07000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) socket(0x22, 0x2, 0x1) mmap$auto(0x0, 0x20009, 0xe3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x5, 0x0) open(0x0, 0x261c2, 0x84) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) 2.052909539s ago: executing program 1 (id=1331): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x81a0ae8c, 0x0) 1.837233097s ago: executing program 1 (id=1332): mmap$auto(0x0, 0x2000c, 0xdf, 0x18, 0xffffffffffffffff, 0x9) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x18, 0xffffffffffffffff, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000440)={0x6, 0x1, 0x9, 0x7, 0x3b, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x9, 0x25, 0x40fffc, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0xfffffffc, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1000000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x4, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7]}, 0x202, 0xd) (async) statmount$auto(0x0, &(0x7f0000000440)={0x6, 0x1, 0x9, 0x7, 0x3b, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x9, 0x25, 0x40fffc, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0xfffffffc, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1000000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x4, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7]}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) (async) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) acct$auto(0x0) r1 = socket(0x18, 0x0, 0x4) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x181441, 0x0) write$auto_bm_register_operations_binfmt_misc(r3, &(0x7f0000000380)="1fc8349b985f1e6c6020bf56bea2fa2a0de63c769504ed19f4409a1b80bdc029ab624875b8fc5bdbc2cd4d92b19d5e4eb29426d8261a797424ae0644ca9a45cd44bb137c2ec4b0f811a3d89a26af86ae23ed0df22f", 0x55) (async) write$auto_bm_register_operations_binfmt_misc(r3, &(0x7f0000000380)="1fc8349b985f1e6c6020bf56bea2fa2a0de63c769504ed19f4409a1b80bdc029ab624875b8fc5bdbc2cd4d92b19d5e4eb29426d8261a797424ae0644ca9a45cd44bb137c2ec4b0f811a3d89a26af86ae23ed0df22f", 0x55) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, 0x0, 0x100000a3d9) mmap$auto(0xf0, 0x400009, 0xdf, 0x9b72, r1, 0x8000) (async) mmap$auto(0xf0, 0x400009, 0xdf, 0x9b72, r1, 0x8000) socket(0xa, 0x5, 0x0) (async) socket(0xa, 0x5, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x31f882, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) close_range$auto(0x2, r4, 0x0) (async) close_range$auto(0x2, r4, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f0000000380)=@bpf_attr_1={0xffffffffffffffff, 0x7, @next_key=0x3, 0x1ff}, 0x8) (async) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f0000000380)=@bpf_attr_1={0xffffffffffffffff, 0x7, @next_key=0x3, 0x1ff}, 0x8) ioctl$auto_KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x7, 0x0, [{0x400000b5, 0x2, 0x6}]}) msync$auto(0x7, 0x8, 0x400000004) open(0x0, 0x163340, 0x2c) (async) open(0x0, 0x163340, 0x2c) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, &(0x7f0000000280)="34516f7276dfaacf46facb8323edc3f98472075577769a1f838e20ecf400bfb58bb5") prctl$auto(0x35, 0x0, 0x8, 0x0, 0x400) 1.579053635s ago: executing program 1 (id=1333): ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, 0x0) ioctl$auto(0xffffffffffffffff, 0x921064a6, 0x20000000020000a) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x402, 0x0) capset$auto(0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) close_range$auto(0x2, 0x8, 0x0) signalfd$auto(0xffffffffffffffff, 0x0, 0x8) r0 = socket(0x2, 0x1, 0x84) connect$auto(0x3, 0x0, 0x55) getsockopt$auto(r0, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x17d) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_register$auto(0x2, 0x1, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8000, 0x0) read$auto(0xca, 0x0, 0x6) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r2, 0xc0045520, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r3) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000340)={0x34, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0xf2b0dd16cfb63227}, 0x800) mmap$auto(0xffffffffffffffff, 0x20005, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020008, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x20499d, 0x9) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x100, 0x0, 0x13, 0xffffffffffffffff, 0x8000) 1.5751309s ago: executing program 6 (id=1334): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sigaltstack$auto(&(0x7f0000000180)={0x0, 0x0, 0x2}, 0x0) r0 = socket(0xa, 0x1, 0x100) setsockopt$auto(r0, 0x6, 0xa, 0x0, 0xfb3) mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000000)=r0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f0000000140)={{@raw, 0xed, 0x52bb, 0x1, "8f5242a6feaf1e36c5adbe210457943d1c36b96cba6c00e8fc2008bd3c26cb2afd2354e6f22c41c6923894de", @raw=0x8}, 0xe, 0x5, 0x6, @raw=0x54d, @enumerated={0x2, 0x9, "6f6ee28da54e121da754079f30127cf08a8563bda3ae5ba224ad33a2a27fc662081c641c7b389aa65368ce2a05201c1dbde47c8f49caf5c2264349e1e0a7ce84", 0x2a, 0x7}, "39fae82a4fc68a2e975f52b16299625838c263775dc21c58e34e21e1a497622c23669559c042f5b4d2d41e1075dbd83377296b50bf3197a4cf56562c7b584cff"}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sigaltstack$auto(&(0x7f0000000680)={&(0x7f0000000580)="3397c3cb21d614578783976978cb8804385007e34ed7ac83b094511ea584cdc2f98edf34265b60ac7c6318c4b2529caca4b4b6f4b6e429a79cfd4c66a1b7258c2fa7dd3adca124afc8c3cdde08a86e3ef8e0013d3979a8adc2637494689b0a9bbbb7740933143bb2b55f33990e93a6528e77d0255012a98345094dfe3a8287a0d8fde5449a3da0b249aee4c8f49c54a5c385640fa48932bc0e851399eda644be10568eff38667c196d90a908232646e8f3f1d63cb52c45af316935c5fb69661e9ae994be089bc6f4", 0x0, 0x6}, &(0x7f0000000780)={&(0x7f00000006c0)="4c6f8c6892cad9e97cfb284eb88afa217702f44d203189a757b937c27c1cd319501924e2b2fbf6e0dbf9412ddc830e0f5aa754acb97e45089604068377691f89a29dd49810a2a61c886332c3444eccf95048709085322fd113d070167b09b49e3346bfbd807b4bdb031bdf5e045da5fdb184358bdfbdb629b8d53826a6f2988b1e7acd9a506693da2b7de9791a1df3610a113bdf9b229779d3df845bb811c52a48315edf055dfcdf678dc02f55fef442ee49c96a501962a44d538ada5d88", 0x200, 0xb5}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) write$auto(r2, &(0x7f0000000540)='m(!\x00', 0x8000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) ioctl$auto_XFS_IOC_READLINK_BY_HANDLE(r3, 0xc038586c, &(0x7f00000004c0)={r0, &(0x7f0000000280)="1dac8f4e5ce2e6c799265e198a0ab01c63e813f20fff8a269c8d44775e1c26c76fdb11738b6c76d26f483c35e686ec14b7c5ce854cba6899e066c2a01bad32731cf01318d2223e0e6227e49f95b296a90830272fb85b0ef5cca8bf3c90f7452cbe3b77dfabed5d63be717f8e4b0f3dc2de18a621ad32bec51b15a6cf2c772bb484397260aee53c7e924861d67327541f8a489fc1fd35404d50a09df33e68040a7ef1bd0e68e01417156b550eade82b289ab03787ab54950d9c6db19878ea19b4254a5c1ea92625b4ac9940f0b4932fe5e879f8dc2d2598e176e073bd3adacc2b5079eb8c363bb3631b460407829b8c85d0ff35bc586b480ff1a0aa75", 0x800, &(0x7f0000000040)="e7ee07de3eb3816a88ff5e276ba1d4f421ad7cc66a478223dfffe7a7f2b3ffb39f07ccca09c44a5eb76f07991af1abf06d9a2b2fd165d57a986aa99e4c892e975e45dd3072fca9bb4d56491a4285c5fad6180aa4c112234490af3587c6d67bfe84b81b23851eea663a3f167bf26cfa99e302829a80f42beb49b81025befe20635dd4fee8c33f698dc158b8f146bdcd516237", 0x39a, &(0x7f0000000380)="f1aee49e2b75a19dd00c4c74400adb24125fcdd8c237ee5f33053e76e9511d560db53ffe49a452a89caccd7f2d8902707d72c8f8b7c1cdd359564f180752bdaf930263b19383808e670b7b008fdbf7be48bb9a44e14e5d7efd45fcedd38c4c6f82ddb40660c925fca1e10edaa45d1b0006b68bd91fe49951a14197eb44cd005c2144c484231502521428966ae8b939bf2a9da685d3d1af7da7a23d3b74c9082f3830bfc101479a16837bd1f642b1aadf746bb3c74262578748e7fc959b8a6c5367c6", &(0x7f0000000480)=0x2}) sendfile$auto(r4, r0, &(0x7f0000000500)=0xa2e, 0x3) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) sigaltstack$auto(&(0x7f0000000180)={0x0, 0x0, 0x2}, 0x0) (async) socket(0xa, 0x1, 0x100) (async) setsockopt$auto(r0, 0x6, 0xa, 0x0, 0xfb3) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) (async) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) ioctl$auto_VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000000)=r0) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f0000000140)={{@raw, 0xed, 0x52bb, 0x1, "8f5242a6feaf1e36c5adbe210457943d1c36b96cba6c00e8fc2008bd3c26cb2afd2354e6f22c41c6923894de", @raw=0x8}, 0xe, 0x5, 0x6, @raw=0x54d, @enumerated={0x2, 0x9, "6f6ee28da54e121da754079f30127cf08a8563bda3ae5ba224ad33a2a27fc662081c641c7b389aa65368ce2a05201c1dbde47c8f49caf5c2264349e1e0a7ce84", 0x2a, 0x7}, "39fae82a4fc68a2e975f52b16299625838c263775dc21c58e34e21e1a497622c23669559c042f5b4d2d41e1075dbd83377296b50bf3197a4cf56562c7b584cff"}) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) (async) sigaltstack$auto(&(0x7f0000000680)={&(0x7f0000000580)="3397c3cb21d614578783976978cb8804385007e34ed7ac83b094511ea584cdc2f98edf34265b60ac7c6318c4b2529caca4b4b6f4b6e429a79cfd4c66a1b7258c2fa7dd3adca124afc8c3cdde08a86e3ef8e0013d3979a8adc2637494689b0a9bbbb7740933143bb2b55f33990e93a6528e77d0255012a98345094dfe3a8287a0d8fde5449a3da0b249aee4c8f49c54a5c385640fa48932bc0e851399eda644be10568eff38667c196d90a908232646e8f3f1d63cb52c45af316935c5fb69661e9ae994be089bc6f4", 0x0, 0x6}, &(0x7f0000000780)={&(0x7f00000006c0)="4c6f8c6892cad9e97cfb284eb88afa217702f44d203189a757b937c27c1cd319501924e2b2fbf6e0dbf9412ddc830e0f5aa754acb97e45089604068377691f89a29dd49810a2a61c886332c3444eccf95048709085322fd113d070167b09b49e3346bfbd807b4bdb031bdf5e045da5fdb184358bdfbdb629b8d53826a6f2988b1e7acd9a506693da2b7de9791a1df3610a113bdf9b229779d3df845bb811c52a48315edf055dfcdf678dc02f55fef442ee49c96a501962a44d538ada5d88", 0x200, 0xb5}) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) write$auto(r2, &(0x7f0000000540)='m(!\x00', 0x8000) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) ioctl$auto_XFS_IOC_READLINK_BY_HANDLE(r3, 0xc038586c, &(0x7f00000004c0)={r0, &(0x7f0000000280)="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", 0x800, &(0x7f0000000040)="e7ee07de3eb3816a88ff5e276ba1d4f421ad7cc66a478223dfffe7a7f2b3ffb39f07ccca09c44a5eb76f07991af1abf06d9a2b2fd165d57a986aa99e4c892e975e45dd3072fca9bb4d56491a4285c5fad6180aa4c112234490af3587c6d67bfe84b81b23851eea663a3f167bf26cfa99e302829a80f42beb49b81025befe20635dd4fee8c33f698dc158b8f146bdcd516237", 0x39a, &(0x7f0000000380)="f1aee49e2b75a19dd00c4c74400adb24125fcdd8c237ee5f33053e76e9511d560db53ffe49a452a89caccd7f2d8902707d72c8f8b7c1cdd359564f180752bdaf930263b19383808e670b7b008fdbf7be48bb9a44e14e5d7efd45fcedd38c4c6f82ddb40660c925fca1e10edaa45d1b0006b68bd91fe49951a14197eb44cd005c2144c484231502521428966ae8b939bf2a9da685d3d1af7da7a23d3b74c9082f3830bfc101479a16837bd1f642b1aadf746bb3c74262578748e7fc959b8a6c5367c6", &(0x7f0000000480)=0x2}) (async) sendfile$auto(r4, r0, &(0x7f0000000500)=0xa2e, 0x3) (async) 1.407108189s ago: executing program 7 (id=1335): r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) fcntl$auto(0x3, 0x4, 0xa553) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0xa, 0x801, 0x84) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x80001, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) epoll_ctl$auto(r0, 0xffffffff, 0xffffffffffffffff, &(0x7f00000000c0)={0x4, 0x3}) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x0, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) 1.335555599s ago: executing program 8 (id=1336): bpf$auto_BPF_MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)=@bpf_attr_1={0xffffffffffffffff, 0x4, @next_key=0x4, 0x1}, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) (async) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe\x00', 0x20100, 0x0) (async, rerun: 64) sendfile$auto(0x1, 0x3, 0x0, 0x6) (async, rerun: 64) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/kernel/watchdog_thresh\x00', 0x20402, 0x0) (async, rerun: 32) r1 = socket(0x2c, 0x80003, 0x0) (rerun: 32) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x44040}, 0x4000) (async) write$auto(0x3, 0x0, 0x81) (async) setsockopt$auto_SO_TIMESTAMPNS_NEW(r0, 0x1, 0x40, &(0x7f0000000000)='\x00', 0x8) 467.252911ms ago: executing program 8 (id=1337): setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) 361.484921ms ago: executing program 7 (id=1338): r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) r1 = socket(0x840000000002, 0x3, 0x8001) mmap$auto(0x0, 0x8001, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) semctl$auto(0x2, 0x5, 0xa6d, 0x4) fcntl$auto_F_OFD_GETLK(r1, 0x24, 0x2) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.5/usb6/maxchild\x00', 0x8000, 0x0) fgetxattr$auto(r2, &(0x7f00000004c0)='security.capability\x00\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd4.\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf29\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x8a\n\xe8\x1c\x88\xd4\xa5\x96!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f', 0x0, 0x96) pwrite64$auto(r2, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99+\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t3\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\xfb\xba\xb2.$\'\x1e\x82\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/250, 0x1000000000fdf1, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) io_uring_setup$auto(0x1d48, 0x0) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r3, 0x0, 0x0) close_range$auto(0x2, r2, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x1000000000006, 0x6, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create$auto(0x9, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) ioctl$auto(0x3, 0x40085400, 0x5) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40880) setreuid$auto(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x2, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/ad_actor_sys_prio\x00', 0x3c3542, 0x0) 257.941745ms ago: executing program 8 (id=1339): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0xc}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x6}, @OVS_DP_ATTR_UPCALL_PID={0x8}, @OVS_DP_ATTR_NAME={0x7, 0x1, '.^\x00'}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) 0s ago: executing program 8 (id=1340): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, 0x0, 0x5, 0x20000043) poll$auto(0x0, 0x7f, 0x9) fcntl$auto(0x3, 0x4, 0xa553) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) r1 = socket(0x2, 0x5, 0x0) pipe2$auto(0x0, 0x80) setsockopt$auto(r1, 0xfffffffd, 0x3800000, 0x0, 0x8) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) semctl$auto(0x7, 0x6, 0x13, 0x1) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0x10, 0x1, 0x948b, 0x0, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x80000400, 0x6, 0x8]}, 0x0) kernel console output (not intermixed with test programs): [ 254.562760][ T8156] bridge0: port 3(gretap0) entered disabled state [ 255.162282][ T5822] Bluetooth: hci3: command 0x0c1a tx timeout [ 255.162626][ T5826] Bluetooth: hci2: command 0x0c1a tx timeout [ 255.234136][ T5826] Bluetooth: hci4: command 0x0c1a tx timeout [ 255.554217][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 255.650505][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.656975][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.570836][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.416'. [ 257.034302][ T8191] can: request_module (can-proto-0) failed. [ 257.315670][ T5826] Bluetooth: hci4: command 0x0c1a tx timeout [ 257.726718][ T8206] sg_write: data in/out 262169/4198358 bytes for SCSI command 0x0-- guessing data in; [ 257.726718][ T8206] program syz.3.419 not setting count and/or reply_len properly [ 257.829541][ T8206] program syz.3.419 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.591899][ T7938] hsr_slave_0: left promiscuous mode [ 259.604353][ T7938] hsr_slave_1: left promiscuous mode [ 259.626011][ T7938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.686464][ T7938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.758467][ T7938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.788284][ T7938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.875885][ T7938] veth1_macvtap: left promiscuous mode [ 259.913890][ T7938] veth0_macvtap: left promiscuous mode [ 259.928044][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'. [ 260.886717][ T7938] team0 (unregistering): Port device team_slave_1 removed [ 260.956736][ T7938] team0 (unregistering): Port device team_slave_0 removed [ 264.084476][ T8263] FAULT_INJECTION: forcing a failure. [ 264.084476][ T8263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.134117][ T8263] CPU: 1 UID: 0 PID: 8263 Comm: syz.1.427 Tainted: G L syzkaller #0 PREEMPT(full) [ 264.134155][ T8263] Tainted: [L]=SOFTLOCKUP [ 264.134160][ T8263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 264.134169][ T8263] Call Trace: [ 264.134174][ T8263] [ 264.134180][ T8263] dump_stack_lvl+0x100/0x190 [ 264.134207][ T8263] should_fail_ex.cold+0x5/0xa [ 264.134225][ T8263] core_sys_select+0x5d1/0xbb0 [ 264.134253][ T8263] ? __pfx_core_sys_select+0x10/0x10 [ 264.134295][ T8263] ? trace_sched_exit_tp+0x13a/0x180 [ 264.134312][ T8263] ? __schedule+0x1000/0x6120 [ 264.134336][ T8263] kern_select+0x20c/0x270 [ 264.134360][ T8263] ? __pfx_kern_select+0x10/0x10 [ 264.134390][ T8263] __x64_sys_select+0xbd/0x160 [ 264.134412][ T8263] ? do_syscall_64+0x95/0xf80 [ 264.134431][ T8263] ? lockdep_hardirqs_on+0x78/0x100 [ 264.134451][ T8263] do_syscall_64+0x106/0xf80 [ 264.134469][ T8263] ? clear_bhb_loop+0x40/0x90 [ 264.134487][ T8263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.134502][ T8263] RIP: 0033:0x7f8935f9c799 [ 264.134515][ T8263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.134530][ T8263] RSP: 002b:00007f8936e50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 264.134545][ T8263] RAX: ffffffffffffffda RBX: 00007f8936216090 RCX: 00007f8935f9c799 [ 264.134554][ T8263] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 264.134563][ T8263] RBP: 00007f8936e50090 R08: 0000000000000000 R09: 0000000000000000 [ 264.134571][ T8263] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 264.134579][ T8263] R13: 00007f8936216128 R14: 00007f8936216090 R15: 00007ffc1ed40d08 [ 264.134598][ T8263] [ 264.814576][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.430'. [ 265.793269][ T8278] can: request_module (can-proto-0) failed. [ 267.830822][ T8303] can: request_module (can-proto-0) failed. [ 271.755249][ T8330] random: crng reseeded on system resumption [ 272.260515][ T8338] FAULT_INJECTION: forcing a failure. [ 272.260515][ T8338] name failslab, interval 1, probability 0, space 0, times 0 [ 272.291182][ T8338] CPU: 1 UID: 0 PID: 8338 Comm: syz.4.439 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.291225][ T8338] Tainted: [L]=SOFTLOCKUP [ 272.291233][ T8338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 272.291249][ T8338] Call Trace: [ 272.291258][ T8338] [ 272.291267][ T8338] dump_stack_lvl+0x100/0x190 [ 272.291314][ T8338] should_fail_ex.cold+0x5/0xa [ 272.291345][ T8338] should_failslab+0xc2/0x120 [ 272.291374][ T8338] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 272.291400][ T8338] ? do_getname+0x35/0x390 [ 272.291422][ T8338] do_getname+0x35/0x390 [ 272.291443][ T8338] do_sys_openat2+0xc5/0x1e0 [ 272.291465][ T8338] ? __pfx_do_sys_openat2+0x10/0x10 [ 272.291490][ T8338] __x64_sys_openat+0x12d/0x210 [ 272.291510][ T8338] ? __pfx___x64_sys_openat+0x10/0x10 [ 272.291536][ T8338] do_syscall_64+0x106/0xf80 [ 272.291556][ T8338] ? clear_bhb_loop+0x40/0x90 [ 272.291574][ T8338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.291589][ T8338] RIP: 0033:0x7fc41315cfce [ 272.291602][ T8338] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 272.291617][ T8338] RSP: 002b:00007fc410fb1ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 272.291632][ T8338] RAX: ffffffffffffffda RBX: 00007fc410fb26c0 RCX: 00007fc41315cfce [ 272.291641][ T8338] RDX: 0000000000000002 RSI: 00007fc410fb1f90 RDI: ffffffffffffff9c [ 272.291650][ T8338] RBP: 00007fc413232c99 R08: 0000000000000000 R09: 0000000000000000 [ 272.291659][ T8338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.291667][ T8338] R13: 00007fc413416308 R14: 00007fc413416270 R15: 00007fff1396ec48 [ 272.291686][ T8338] [ 273.043155][ T5826] Bluetooth: hci4: unexpected event 0x1c length: 725 > 5 [ 273.540999][ T5826] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 273.552767][ T5826] Bluetooth: hci4: unexpected subevent 0x0d length: 725 > 260 [ 273.567973][ T5826] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 273.568033][ T5826] Bluetooth: hci4: adv larger than maximum supported [ 273.575424][ T5826] Bluetooth: hci4: Unknown advertising packet type: 0x19 [ 273.582160][ T5826] Bluetooth: hci4: adv larger than maximum supported [ 273.591965][ T5826] Bluetooth: hci4: Unknown advertising packet type: 0x5d [ 273.598798][ T5826] Bluetooth: hci4: Malformed LE Event: 0x0d [ 281.122776][ T8449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.462'. [ 281.903053][ T8461] FAULT_INJECTION: forcing a failure. [ 281.903053][ T8461] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 282.055993][ T8461] CPU: 0 UID: 0 PID: 8461 Comm: syz.3.462 Tainted: G L syzkaller #0 PREEMPT(full) [ 282.056034][ T8461] Tainted: [L]=SOFTLOCKUP [ 282.056043][ T8461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 282.056058][ T8461] Call Trace: [ 282.056066][ T8461] [ 282.056077][ T8461] dump_stack_lvl+0x100/0x190 [ 282.056123][ T8461] should_fail_ex.cold+0x5/0xa [ 282.056149][ T8461] ? prepare_alloc_pages+0x16d/0x5f0 [ 282.056181][ T8461] should_fail_alloc_page+0xeb/0x140 [ 282.056212][ T8461] prepare_alloc_pages+0x1f0/0x5f0 [ 282.056248][ T8461] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 282.056301][ T8461] ? __pfx_css_rstat_updated+0x10/0x10 [ 282.056333][ T8461] ? lock_acquire+0x1cf/0x380 [ 282.056370][ T8461] ? find_held_lock+0x2b/0x80 [ 282.056395][ T8461] ? free_unref_folios+0xd3f/0x1790 [ 282.056433][ T8461] ? free_unref_folios+0xd3f/0x1790 [ 282.056478][ T8461] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 282.056539][ T8461] ? lock_acquire+0x1cf/0x380 [ 282.056575][ T8461] ? find_held_lock+0x2b/0x80 [ 282.056599][ T8461] ? page_table_check_set+0x49a/0xa10 [ 282.056627][ T8461] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 282.056675][ T8461] ? policy_nodemask+0xed/0x4f0 [ 282.056708][ T8461] alloc_pages_mpol+0x1fb/0x550 [ 282.056740][ T8461] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 282.056780][ T8461] folio_alloc_mpol_noprof+0x36/0x340 [ 282.056816][ T8461] vma_alloc_folio_noprof+0xed/0x1d0 [ 282.056851][ T8461] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 282.056898][ T8461] do_anonymous_page+0xb3a/0x1fb0 [ 282.056951][ T8461] __handle_mm_fault+0x1d42/0x2b60 [ 282.056999][ T8461] ? __pfx___handle_mm_fault+0x10/0x10 [ 282.057037][ T8461] ? pte_offset_map_lock+0x174/0x320 [ 282.057066][ T8461] ? find_held_lock+0x2b/0x80 [ 282.057105][ T8461] ? follow_page_pte+0x5b3/0x1400 [ 282.057144][ T8461] handle_mm_fault+0x36d/0xa20 [ 282.057190][ T8461] __get_user_pages+0xf9c/0x34d0 [ 282.057234][ T8461] ? __pfx___get_user_pages+0x10/0x10 [ 282.057276][ T8461] populate_vma_page_range+0x267/0x3f0 [ 282.057322][ T8461] ? __pfx_populate_vma_page_range+0x10/0x10 [ 282.057356][ T8461] ? __pfx_find_vma_intersection+0x10/0x10 [ 282.057388][ T8461] ? do_mmap+0x93f/0x12f0 [ 282.057423][ T8461] __mm_populate+0x107/0x3a0 [ 282.057458][ T8461] ? __pfx___mm_populate+0x10/0x10 [ 282.057494][ T8461] ? up_write+0x290/0x4f0 [ 282.057538][ T8461] vm_mmap_pgoff+0x37f/0x470 [ 282.057584][ T8461] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 282.057619][ T8461] ? do_futex+0x192/0x350 [ 282.057657][ T8461] ? __pfx_do_futex+0x10/0x10 [ 282.057690][ T8461] ? __pfx_do_sys_openat2+0x10/0x10 [ 282.057734][ T8461] ksys_mmap_pgoff+0xe1/0x650 [ 282.057765][ T8461] ? __x64_sys_futex+0x34f/0x4d0 [ 282.057798][ T8461] ? __x64_sys_futex+0x358/0x4d0 [ 282.057835][ T8461] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 282.057866][ T8461] ? xfd_validate_state+0x129/0x190 [ 282.057913][ T8461] __x64_sys_mmap+0x125/0x190 [ 282.057959][ T8461] do_syscall_64+0x106/0xf80 [ 282.057996][ T8461] ? clear_bhb_loop+0x40/0x90 [ 282.058029][ T8461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.058058][ T8461] RIP: 0033:0x7f4abe59c799 [ 282.058083][ T8461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.058110][ T8461] RSP: 002b:00007f4abc3f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 282.058137][ T8461] RAX: ffffffffffffffda RBX: 00007f4abe816270 RCX: 00007f4abe59c799 [ 282.058156][ T8461] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 282.058173][ T8461] RBP: 00007f4abe632c99 R08: 0000000000000002 R09: 0000000000008000 [ 282.058191][ T8461] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 282.058207][ T8461] R13: 00007f4abe816308 R14: 00007f4abe816270 R15: 00007ffed2672e38 [ 282.058244][ T8461] [ 284.646130][ T8488] FAULT_INJECTION: forcing a failure. [ 284.646130][ T8488] name failslab, interval 1, probability 0, space 0, times 0 [ 284.714043][ T8488] CPU: 1 UID: 0 PID: 8488 Comm: syz.3.467 Tainted: G L syzkaller #0 PREEMPT(full) [ 284.714095][ T8488] Tainted: [L]=SOFTLOCKUP [ 284.714104][ T8488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 284.714120][ T8488] Call Trace: [ 284.714129][ T8488] [ 284.714138][ T8488] dump_stack_lvl+0x100/0x190 [ 284.714185][ T8488] should_fail_ex.cold+0x5/0xa [ 284.714221][ T8488] should_failslab+0xc2/0x120 [ 284.714254][ T8488] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 284.714298][ T8488] ? alloc_empty_file+0x55/0x1c0 [ 284.714333][ T8488] ? __pfx_stack_trace_save+0x10/0x10 [ 284.714375][ T8488] alloc_empty_file+0x55/0x1c0 [ 284.714413][ T8488] path_openat+0xe8/0x31a0 [ 284.714440][ T8488] ? kasan_save_stack+0x3f/0x50 [ 284.714478][ T8488] ? kasan_save_stack+0x30/0x50 [ 284.714514][ T8488] ? kasan_save_track+0x14/0x30 [ 284.714565][ T8488] ? __kasan_slab_alloc+0x89/0x90 [ 284.714592][ T8488] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 284.714634][ T8488] ? do_getname+0x35/0x390 [ 284.714668][ T8488] ? do_sys_openat2+0xc5/0x1e0 [ 284.714705][ T8488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.714744][ T8488] ? __pfx_path_openat+0x10/0x10 [ 284.714787][ T8488] do_file_open+0x20e/0x430 [ 284.714821][ T8488] ? __pfx_do_file_open+0x10/0x10 [ 284.714875][ T8488] ? alloc_fd+0x476/0x790 [ 284.714908][ T8488] ? do_getname+0x191/0x390 [ 284.714947][ T8488] do_sys_openat2+0x10d/0x1e0 [ 284.714994][ T8488] ? __pfx_do_sys_openat2+0x10/0x10 [ 284.715046][ T8488] __x64_sys_openat+0x12d/0x210 [ 284.715086][ T8488] ? __pfx___x64_sys_openat+0x10/0x10 [ 284.715139][ T8488] do_syscall_64+0x106/0xf80 [ 284.715178][ T8488] ? clear_bhb_loop+0x40/0x90 [ 284.715224][ T8488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.715255][ T8488] RIP: 0033:0x7f4abe55cfce [ 284.715279][ T8488] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 284.715308][ T8488] RSP: 002b:00007f4abc3f3ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 284.715335][ T8488] RAX: ffffffffffffffda RBX: 00007f4abc3f46c0 RCX: 00007f4abe55cfce [ 284.715360][ T8488] RDX: 0000000000000002 RSI: 00007f4abc3f3f90 RDI: ffffffffffffff9c [ 284.715386][ T8488] RBP: 00007f4abe632c99 R08: 0000000000000000 R09: 0000000000000000 [ 284.715403][ T8488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.715421][ T8488] R13: 00007f4abe816308 R14: 00007f4abe816270 R15: 00007ffed2672e38 [ 284.715460][ T8488] [ 287.237326][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.5.482'. [ 288.652686][ T8550] random: crng reseeded on system resumption [ 290.544329][ T8578] FAULT_INJECTION: forcing a failure. [ 290.544329][ T8578] name failslab, interval 1, probability 0, space 0, times 0 [ 290.557389][ T8578] CPU: 0 UID: 0 PID: 8578 Comm: syz.1.478 Tainted: G L syzkaller #0 PREEMPT(full) [ 290.557431][ T8578] Tainted: [L]=SOFTLOCKUP [ 290.557442][ T8578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 290.557459][ T8578] Call Trace: [ 290.557468][ T8578] [ 290.557477][ T8578] dump_stack_lvl+0x100/0x190 [ 290.557525][ T8578] should_fail_ex.cold+0x5/0xa [ 290.557558][ T8578] should_failslab+0xc2/0x120 [ 290.557577][ T8578] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 290.557599][ T8578] ? do_getname+0x35/0x390 [ 290.557620][ T8578] do_getname+0x35/0x390 [ 290.557640][ T8578] do_sys_openat2+0xc5/0x1e0 [ 290.557659][ T8578] ? __pfx_do_sys_openat2+0x10/0x10 [ 290.557693][ T8578] __x64_sys_openat+0x12d/0x210 [ 290.557714][ T8578] ? __pfx___x64_sys_openat+0x10/0x10 [ 290.557742][ T8578] do_syscall_64+0x106/0xf80 [ 290.557762][ T8578] ? clear_bhb_loop+0x40/0x90 [ 290.557780][ T8578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.557800][ T8578] RIP: 0033:0x7f8935f5cfce [ 290.557821][ T8578] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 290.557848][ T8578] RSP: 002b:00007f8936e0dec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 290.557873][ T8578] RAX: ffffffffffffffda RBX: 00007f8936e0e6c0 RCX: 00007f8935f5cfce [ 290.557891][ T8578] RDX: 0000000000000002 RSI: 00007f8936e0df90 RDI: ffffffffffffff9c [ 290.557907][ T8578] RBP: 00007f8936032c99 R08: 0000000000000000 R09: 0000000000000000 [ 290.557924][ T8578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.557938][ T8578] R13: 00007f8936216308 R14: 00007f8936216270 R15: 00007ffc1ed40d08 [ 290.557974][ T8578] [ 293.116284][ T8600] can: request_module (can-proto-0) failed. [ 295.219570][ T8641] process 'syz.4.495' launched './file0' with NULL argv: empty string added [ 297.547480][ T8658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.501'. [ 297.734476][ T8660] FAULT_INJECTION: forcing a failure. [ 297.734476][ T8660] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 297.843836][ T8660] CPU: 1 UID: 0 PID: 8660 Comm: syz.3.502 Tainted: G L syzkaller #0 PREEMPT(full) [ 297.843882][ T8660] Tainted: [L]=SOFTLOCKUP [ 297.843891][ T8660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 297.843907][ T8660] Call Trace: [ 297.843916][ T8660] [ 297.843925][ T8660] dump_stack_lvl+0x100/0x190 [ 297.843955][ T8660] should_fail_ex.cold+0x5/0xa [ 297.843971][ T8660] ? prepare_alloc_pages+0x16d/0x5f0 [ 297.843991][ T8660] should_fail_alloc_page+0xeb/0x140 [ 297.844007][ T8660] prepare_alloc_pages+0x1f0/0x5f0 [ 297.844029][ T8660] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 297.844056][ T8660] ? __lock_acquire+0x4a5/0x2630 [ 297.844077][ T8660] ? __lock_acquire+0x4a5/0x2630 [ 297.844096][ T8660] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 297.844119][ T8660] ? __lock_acquire+0x4a5/0x2630 [ 297.844147][ T8660] ? find_held_lock+0x2b/0x80 [ 297.844160][ T8660] ? is_bpf_text_address+0x8a/0x1a0 [ 297.844181][ T8660] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 297.844206][ T8660] ? policy_nodemask+0xed/0x4f0 [ 297.844223][ T8660] alloc_pages_mpol+0x1fb/0x550 [ 297.844240][ T8660] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 297.844254][ T8660] ? arch_stack_walk+0xa6/0xf0 [ 297.844273][ T8660] folio_alloc_mpol_noprof+0x36/0x340 [ 297.844293][ T8660] shmem_alloc_folio+0x135/0x160 [ 297.844312][ T8660] shmem_alloc_and_add_folio+0x371/0xd40 [ 297.844338][ T8660] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 297.844361][ T8660] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 297.844388][ T8660] shmem_get_folio_gfp+0x6ab/0x1900 [ 297.844413][ T8660] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 297.844436][ T8660] ? filemap_map_pages+0xe69/0x2020 [ 297.844460][ T8660] shmem_fault+0x1f9/0xa20 [ 297.844481][ T8660] ? __lock_acquire+0x4a5/0x2630 [ 297.844498][ T8660] ? __pfx_shmem_fault+0x10/0x10 [ 297.844532][ T8660] ? rcu_is_watching+0x12/0xc0 [ 297.844555][ T8660] ? __pfx_filemap_map_pages+0x10/0x10 [ 297.844583][ T8660] __do_fault+0x10d/0x550 [ 297.844600][ T8660] do_fault+0xabb/0x1990 [ 297.844617][ T8660] ? __pmd_alloc+0x3fb/0x950 [ 297.844635][ T8660] __handle_mm_fault+0x180f/0x2b60 [ 297.844658][ T8660] ? mt_find+0x45e/0x8e0 [ 297.844679][ T8660] ? __pfx___handle_mm_fault+0x10/0x10 [ 297.844697][ T8660] ? __pfx_mt_find+0x10/0x10 [ 297.844728][ T8660] ? find_vma+0xbf/0x140 [ 297.844741][ T8660] ? __pfx_find_vma+0x10/0x10 [ 297.844758][ T8660] handle_mm_fault+0x36d/0xa20 [ 297.844782][ T8660] do_user_addr_fault+0x74c/0x12f0 [ 297.844811][ T8660] exc_page_fault+0x6f/0xd0 [ 297.844831][ T8660] asm_exc_page_fault+0x26/0x30 [ 297.844846][ T8660] RIP: 0010:__get_user_4+0x14/0x20 [ 297.844862][ T8660] Code: 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 297.844878][ T8660] RSP: 0018:ffffc9000512fda8 EFLAGS: 00050287 [ 297.844891][ T8660] RAX: 0000000000000000 RBX: ffffc9000512ff48 RCX: ffffc90006c99000 [ 297.844900][ T8660] RDX: 00007ffffffff000 RSI: ffffffff8255fcd1 RDI: ffffffff8c1b03a0 [ 297.844910][ T8660] RBP: 0000000000000000 R08: 0000000000000001 R09: 00000000000001c5 [ 297.844918][ T8660] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000000 [ 297.844926][ T8660] R13: ffffc9000512fe08 R14: 0000000000000000 R15: 0000000000000000 [ 297.844941][ T8660] ? __might_fault+0x111/0x140 [ 297.844964][ T8660] cap_validate_magic+0x2a/0x1d0 [ 297.844980][ T8660] __do_sys_capset+0xe1/0x460 [ 297.844994][ T8660] ? __pfx___do_sys_capset+0x10/0x10 [ 297.845010][ T8660] ? __x64_sys_futex+0x358/0x4d0 [ 297.845031][ T8660] ? xfd_validate_state+0x129/0x190 [ 297.845058][ T8660] do_syscall_64+0x106/0xf80 [ 297.845077][ T8660] ? clear_bhb_loop+0x40/0x90 [ 297.845095][ T8660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.845110][ T8660] RIP: 0033:0x7f4abe59c799 [ 297.845123][ T8660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.845137][ T8660] RSP: 002b:00007f4abf3ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 297.845150][ T8660] RAX: ffffffffffffffda RBX: 00007f4abe815fa0 RCX: 00007f4abe59c799 [ 297.845159][ T8660] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 297.845168][ T8660] RBP: 00007f4abe632c99 R08: 0000000000000000 R09: 0000000000000000 [ 297.845176][ T8660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.845185][ T8660] R13: 00007f4abe816038 R14: 00007f4abe815fa0 R15: 00007ffed2672e38 [ 297.845206][ T8660] [ 298.592338][ T8658] FAULT_INJECTION: forcing a failure. [ 298.592338][ T8658] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 298.655859][ T8658] CPU: 1 UID: 0 PID: 8658 Comm: syz.1.501 Tainted: G L syzkaller #0 PREEMPT(full) [ 298.655904][ T8658] Tainted: [L]=SOFTLOCKUP [ 298.655914][ T8658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 298.655930][ T8658] Call Trace: [ 298.655939][ T8658] [ 298.655949][ T8658] dump_stack_lvl+0x100/0x190 [ 298.655996][ T8658] should_fail_ex.cold+0x5/0xa [ 298.656024][ T8658] ? prepare_alloc_pages+0x16d/0x5f0 [ 298.656068][ T8658] should_fail_alloc_page+0xeb/0x140 [ 298.656101][ T8658] prepare_alloc_pages+0x1f0/0x5f0 [ 298.656141][ T8658] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 298.656189][ T8658] ? lock_acquire+0x1cf/0x380 [ 298.656226][ T8658] ? find_held_lock+0x2b/0x80 [ 298.656252][ T8658] ? free_unref_folios+0xd3f/0x1790 [ 298.656291][ T8658] ? free_unref_folios+0xd3f/0x1790 [ 298.656337][ T8658] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 298.656398][ T8658] ? lock_acquire+0x1cf/0x380 [ 298.656434][ T8658] ? find_held_lock+0x2b/0x80 [ 298.656460][ T8658] ? page_table_check_set+0x49a/0xa10 [ 298.656486][ T8658] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 298.656535][ T8658] ? policy_nodemask+0xed/0x4f0 [ 298.656566][ T8658] alloc_pages_mpol+0x1fb/0x550 [ 298.656598][ T8658] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 298.656637][ T8658] folio_alloc_mpol_noprof+0x36/0x340 [ 298.656675][ T8658] vma_alloc_folio_noprof+0xed/0x1d0 [ 298.656710][ T8658] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 298.656757][ T8658] do_anonymous_page+0xb3a/0x1fb0 [ 298.656809][ T8658] __handle_mm_fault+0x1d42/0x2b60 [ 298.656858][ T8658] ? __pfx___handle_mm_fault+0x10/0x10 [ 298.656899][ T8658] ? pte_offset_map_lock+0x174/0x320 [ 298.656929][ T8658] ? find_held_lock+0x2b/0x80 [ 298.656967][ T8658] ? follow_page_pte+0x5b3/0x1400 [ 298.657006][ T8658] handle_mm_fault+0x36d/0xa20 [ 298.657052][ T8658] __get_user_pages+0xf9c/0x34d0 [ 298.657109][ T8658] ? __pfx___get_user_pages+0x10/0x10 [ 298.657153][ T8658] populate_vma_page_range+0x267/0x3f0 [ 298.657190][ T8658] ? __pfx_populate_vma_page_range+0x10/0x10 [ 298.657223][ T8658] ? __pfx_find_vma_intersection+0x10/0x10 [ 298.657264][ T8658] __mm_populate+0x107/0x3a0 [ 298.657299][ T8658] ? __pfx___mm_populate+0x10/0x10 [ 298.657334][ T8658] ? up_write+0x290/0x4f0 [ 298.657378][ T8658] vm_mmap_pgoff+0x37f/0x470 [ 298.657415][ T8658] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 298.657449][ T8658] ? do_futex+0x192/0x350 [ 298.657486][ T8658] ? __pfx_do_futex+0x10/0x10 [ 298.657518][ T8658] ? __pfx_do_sys_openat2+0x10/0x10 [ 298.657560][ T8658] ksys_mmap_pgoff+0xe1/0x650 [ 298.657591][ T8658] ? __x64_sys_futex+0x34f/0x4d0 [ 298.657624][ T8658] ? __x64_sys_futex+0x358/0x4d0 [ 298.657659][ T8658] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 298.657689][ T8658] ? xfd_validate_state+0x129/0x190 [ 298.657736][ T8658] __x64_sys_mmap+0x125/0x190 [ 298.657781][ T8658] do_syscall_64+0x106/0xf80 [ 298.657817][ T8658] ? clear_bhb_loop+0x40/0x90 [ 298.657850][ T8658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.657879][ T8658] RIP: 0033:0x7f8935f9c799 [ 298.657902][ T8658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.657929][ T8658] RSP: 002b:00007f8936e71028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 298.657957][ T8658] RAX: ffffffffffffffda RBX: 00007f8936215fa0 RCX: 00007f8935f9c799 [ 298.657977][ T8658] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 298.657994][ T8658] RBP: 00007f8936032c99 R08: 0000000000000002 R09: 0000000000008000 [ 298.658011][ T8658] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 298.658027][ T8658] R13: 00007f8936216038 R14: 00007f8936215fa0 R15: 00007ffc1ed40d08 [ 298.658076][ T8658] [ 301.731839][ T8693] could not allocate digest TFM handle [ 302.167882][ T8706] Console: switching to colour VGA+ 80x25 [ 302.466156][ T8713] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 302.897958][ T8720] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input13 [ 303.741409][ T8744] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 304.127222][ T8745] Console: switching to colour frame buffer device 128x48 [ 304.549838][ T8746] could not allocate digest TFM handle [ 304.936029][ T8760] input: f as /devices/virtual/input/input14 [ 306.167942][ T8781] netlink: 350 bytes leftover after parsing attributes in process `syz.4.529'. [ 310.165968][ T8844] FAULT_INJECTION: forcing a failure. [ 310.165968][ T8844] name failslab, interval 1, probability 0, space 0, times 0 [ 310.205030][ T8844] CPU: 0 UID: 0 PID: 8844 Comm: syz.4.551 Tainted: G L syzkaller #0 PREEMPT(full) [ 310.205078][ T8844] Tainted: [L]=SOFTLOCKUP [ 310.205088][ T8844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 310.205106][ T8844] Call Trace: [ 310.205115][ T8844] [ 310.205125][ T8844] dump_stack_lvl+0x100/0x190 [ 310.205172][ T8844] should_fail_ex.cold+0x5/0xa [ 310.205205][ T8844] should_failslab+0xc2/0x120 [ 310.205236][ T8844] __kmalloc_cache_noprof+0x7a/0x6f0 [ 310.205278][ T8844] ? __do_sys_fanotify_init+0x5cf/0xe50 [ 310.205320][ T8844] ? get_mem_cgroup_from_mm+0x88/0x600 [ 310.205360][ T8844] ? get_mem_cgroup_from_mm+0x132/0x600 [ 310.205405][ T8844] __do_sys_fanotify_init+0x5cf/0xe50 [ 310.205454][ T8844] do_syscall_64+0x106/0xf80 [ 310.205492][ T8844] ? clear_bhb_loop+0x40/0x90 [ 310.205527][ T8844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.205557][ T8844] RIP: 0033:0x7fc41319c799 [ 310.205581][ T8844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.205608][ T8844] RSP: 002b:00007fc4113f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 310.205635][ T8844] RAX: ffffffffffffffda RBX: 00007fc413416090 RCX: 00007fc41319c799 [ 310.205664][ T8844] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 310.205681][ T8844] RBP: 00007fc413232c99 R08: 0000000000000000 R09: 0000000000000000 [ 310.205699][ T8844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.205716][ T8844] R13: 00007fc413416128 R14: 00007fc413416090 R15: 00007fff1396ec48 [ 310.205749][ T8844] [ 312.395967][ T8862] could not allocate digest TFM handle [ 312.463719][ T8865] netlink: 816 bytes leftover after parsing attributes in process `syz.1.549'. [ 315.563327][ T8897] could not allocate digest TFM handle [ 316.140657][ T8914] delete_channel: no stack [ 316.194646][ T8919] Console: switching to colour VGA+ 80x25 [ 316.374507][ T8909] delete_channel: no stack [ 317.164484][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.170886][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.895809][ T8944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.566'. [ 318.909225][ T5826] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 322.435360][ T5822] Bluetooth: hci3: unexpected event 0x3e length: 720 > 260 [ 323.024416][ T9005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.580'. [ 323.502778][ T8994] Invalid ELF header magic: != ELF [ 328.632609][ T9067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.593'. [ 329.648681][ T29] audit: type=1800 audit(1773444075.457:4): pid=9080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.595" name="dbroot" dev="configfs" ino=173415 res=0 errno=0 [ 330.735334][ T9087] random: crng reseeded on system resumption [ 330.934543][ T9087] futex_wake_op: syz.3.598 tries to shift op by -2048; fix this program [ 330.996647][ T9087] futex_wake_op: syz.3.598 tries to shift op by -2048; fix this program [ 331.001331][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.599'. [ 331.073208][ T9087] 0x000000000001-0x000000020000 : "" [ 331.179794][ T9087] ftl_cs: FTL header corrupt! [ 331.553418][ T9094] could not allocate digest TFM handle [ 332.208383][ T9108] netlink: 342 bytes leftover after parsing attributes in process `syz.5.601'. [ 332.488868][ T9110] can: request_module (can-proto-4) failed. [ 334.828969][ T9147] zswap: compressor not available [ 336.964996][ T9180] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 337.028340][ T9180] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 337.037062][ T9180] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 337.302930][ T9180] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 337.332207][ T9180] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 337.636729][ T9192] futex_wake_op: syz.5.617 tries to shift op by -2048; fix this program [ 337.753995][ T9192] futex_wake_op: syz.5.617 tries to shift op by -2048; fix this program [ 337.765357][ T9192] 0x000000000001-0x000000020000 : "" [ 337.877714][ T9192] ftl_cs: FTL header corrupt! [ 338.354501][ T5822] Bluetooth: hci2: command 0x0c1a tx timeout [ 339.074109][ T5822] Bluetooth: hci3: command 0x0c1a tx timeout [ 339.315170][ T5822] Bluetooth: hci4: command 0x0c1a tx timeout [ 339.394328][ T5822] Bluetooth: hci0: command 0x0c1a tx timeout [ 339.459125][ T9205] binder: 9204:9205 ioctl c0306201 200000000000 returned -11 [ 341.154964][ T5822] Bluetooth: hci3: command 0x0c1a tx timeout [ 341.909685][ T9225] could not allocate digest TFM handle [ 342.015218][ T9226] could not allocate digest TFM handle [ 343.596573][ T9254] zswap: compressor not available [ 345.787764][ T9283] could not allocate digest TFM handle [ 346.324265][ T9290] ptrace attach of "./syz-executor exec"[7838] was attempted by "./syz-executor exec"[9290] [ 348.179546][ T9299] could not allocate digest TFM handle [ 348.397461][ T9307] random: crng reseeded on system resumption [ 348.607514][ T9307] futex_wake_op: syz.4.640 tries to shift op by -2048; fix this program [ 348.762598][ T9307] futex_wake_op: syz.4.640 tries to shift op by -2048; fix this program [ 354.943050][ T9363] FAULT_INJECTION: forcing a failure. [ 354.943050][ T9363] name failslab, interval 1, probability 0, space 0, times 0 [ 354.943159][ T9363] CPU: 0 UID: 0 PID: 9363 Comm: syz.4.653 Tainted: G L syzkaller #0 PREEMPT(full) [ 354.943200][ T9363] Tainted: [L]=SOFTLOCKUP [ 354.943209][ T9363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 354.943224][ T9363] Call Trace: [ 354.943232][ T9363] [ 354.943243][ T9363] dump_stack_lvl+0x100/0x190 [ 354.943369][ T9363] should_fail_ex.cold+0x5/0xa [ 354.943420][ T9363] should_failslab+0xc2/0x120 [ 354.943472][ T9363] __kmalloc_cache_noprof+0x7a/0x6f0 [ 354.943523][ T9363] ? smc_stats_init+0x4e/0x160 [ 354.943684][ T9363] ? __pfx_smc_net_stat_init+0x10/0x10 [ 354.943749][ T9363] smc_stats_init+0x4e/0x160 [ 354.943784][ T9363] ? smc_net_init+0x39/0x50 [ 354.943810][ T9363] ops_init+0x1e2/0x5f0 [ 354.943929][ T9363] setup_net+0x118/0x3a0 [ 354.943967][ T9363] ? __pfx_setup_net+0x10/0x10 [ 354.944001][ T9363] ? lockdep_init_map_type+0x5c/0x250 [ 354.944063][ T9363] ? mutex_init_lockep+0x110/0x150 [ 354.944110][ T9363] copy_net_ns+0x46f/0x7c0 [ 354.944184][ T9363] create_new_namespaces+0x3ea/0xac0 [ 354.944226][ T9363] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 354.944261][ T9363] ksys_unshare+0x473/0xad0 [ 354.944308][ T9363] ? __pfx_ksys_unshare+0x10/0x10 [ 354.944358][ T9363] __x64_sys_unshare+0x31/0x40 [ 354.944393][ T9363] do_syscall_64+0x106/0xf80 [ 354.944508][ T9363] ? clear_bhb_loop+0x40/0x90 [ 354.944554][ T9363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.944585][ T9363] RIP: 0033:0x7fc41319c799 [ 354.944610][ T9363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.944638][ T9363] RSP: 002b:00007fc413f74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 354.944667][ T9363] RAX: ffffffffffffffda RBX: 00007fc413415fa0 RCX: 00007fc41319c799 [ 354.944686][ T9363] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 354.944704][ T9363] RBP: 00007fc413232c99 R08: 0000000000000000 R09: 0000000000000000 [ 354.944722][ T9363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.944739][ T9363] R13: 00007fc413416038 R14: 00007fc413415fa0 R15: 00007fff1396ec48 [ 354.944779][ T9363] [ 355.963057][ T9379] could not allocate digest TFM handle [ 356.967438][ T9387] can: request_module (can-proto-4) failed. [ 357.293956][ T9391] zswap: compressor not available [ 361.003560][ T9433] could not allocate digest TFM handle [ 361.403065][ T9439] FAULT_INJECTION: forcing a failure. [ 361.403065][ T9439] name failslab, interval 1, probability 0, space 0, times 0 [ 361.408700][ T5822] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 361.435126][ T9439] CPU: 1 UID: 0 PID: 9439 Comm: syz.1.667 Tainted: G L syzkaller #0 PREEMPT(full) [ 361.435153][ T9439] Tainted: [L]=SOFTLOCKUP [ 361.435158][ T9439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 361.435167][ T9439] Call Trace: [ 361.435172][ T9439] [ 361.435179][ T9439] dump_stack_lvl+0x100/0x190 [ 361.435206][ T9439] should_fail_ex.cold+0x5/0xa [ 361.435225][ T9439] ? __register_sysctl_table+0xac/0x1650 [ 361.435285][ T9439] should_failslab+0xc2/0x120 [ 361.435302][ T9439] __kmalloc_noprof+0xe0/0x850 [ 361.435329][ T9439] __register_sysctl_table+0xac/0x1650 [ 361.435352][ T9439] ? is_module_address+0x5f/0xf0 [ 361.435383][ T9439] ? __pfx___register_sysctl_table+0x10/0x10 [ 361.435405][ T9439] ? is_module_address+0x69/0xf0 [ 361.435422][ T9439] ? register_net_sysctl_sz+0x222/0x430 [ 361.435521][ T9439] ? __asan_memcpy+0x3c/0x60 [ 361.435543][ T9439] smc_sysctl_net_init+0xbb/0x450 [ 361.435568][ T9439] ? __pfx_smc_net_init+0x10/0x10 [ 361.435583][ T9439] smc_net_init+0x16/0x50 [ 361.435597][ T9439] ops_init+0x1e2/0x5f0 [ 361.435621][ T9439] setup_net+0x118/0x3a0 [ 361.435642][ T9439] ? __pfx_setup_net+0x10/0x10 [ 361.435662][ T9439] ? lockdep_init_map_type+0x5c/0x250 [ 361.435682][ T9439] ? mutex_init_lockep+0x110/0x150 [ 361.435704][ T9439] copy_net_ns+0x46f/0x7c0 [ 361.435735][ T9439] create_new_namespaces+0x3ea/0xac0 [ 361.435757][ T9439] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 361.435776][ T9439] ksys_unshare+0x473/0xad0 [ 361.435796][ T9439] ? __pfx_ksys_unshare+0x10/0x10 [ 361.435823][ T9439] __x64_sys_unshare+0x31/0x40 [ 361.435841][ T9439] do_syscall_64+0x106/0xf80 [ 361.435861][ T9439] ? clear_bhb_loop+0x40/0x90 [ 361.435879][ T9439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.435894][ T9439] RIP: 0033:0x7f8935f9c799 [ 361.435908][ T9439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.435922][ T9439] RSP: 002b:00007f8936e50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 361.435937][ T9439] RAX: ffffffffffffffda RBX: 00007f8936216090 RCX: 00007f8935f9c799 [ 361.435948][ T9439] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 361.435957][ T9439] RBP: 00007f8936032c99 R08: 0000000000000000 R09: 0000000000000000 [ 361.435977][ T9439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.435986][ T9439] R13: 00007f8936216128 R14: 00007f8936216090 R15: 00007ffc1ed40d08 [ 361.436006][ T9439] [ 362.424835][ T9442] can: request_module (can-proto-4) failed. [ 364.148522][ T9465] zswap: compressor not available [ 367.022573][ T9503] could not allocate digest TFM handle [ 367.894631][ T9523] FAULT_INJECTION: forcing a failure. [ 367.894631][ T9523] name failslab, interval 1, probability 0, space 0, times 0 [ 367.938379][ T9522] syz.4.684: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 367.987292][ T9523] CPU: 1 UID: 0 PID: 9523 Comm: syz.3.683 Tainted: G L syzkaller #0 PREEMPT(full) [ 367.987335][ T9523] Tainted: [L]=SOFTLOCKUP [ 367.987344][ T9523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 367.987360][ T9523] Call Trace: [ 367.987369][ T9523] [ 367.987380][ T9523] dump_stack_lvl+0x100/0x190 [ 367.987429][ T9523] should_fail_ex.cold+0x5/0xa [ 367.987460][ T9523] should_failslab+0xc2/0x120 [ 367.987490][ T9523] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 367.987531][ T9523] ? __anon_vma_prepare+0xae/0x5e0 [ 367.987575][ T9523] __anon_vma_prepare+0xae/0x5e0 [ 367.987618][ T9523] madvise_guard_install+0x62e/0x7c0 [ 367.987646][ T9523] ? look_up_lock_class+0x55/0x120 [ 367.987687][ T9523] ? register_lock_class+0x40/0x560 [ 367.987727][ T9523] ? __pfx_madvise_guard_install+0x10/0x10 [ 367.987774][ T9523] ? __pfx_guard_install_pud_entry+0x10/0x10 [ 367.987802][ T9523] ? __pfx_guard_install_pmd_entry+0x10/0x10 [ 367.987832][ T9523] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 367.987870][ T9523] ? __pfx_guard_install_set_pte+0x10/0x10 [ 367.987910][ T9523] madvise_vma_behavior+0x11f1/0x3050 [ 367.987950][ T9523] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 367.987982][ T9523] ? mas_prev_setup.constprop.0+0xb6/0x9c0 [ 367.988102][ T9523] ? mas_prev+0x9b/0xf0 [ 367.988167][ T9523] ? __pfx_mas_prev+0x10/0x10 [ 367.988218][ T9523] ? find_vma_prev+0xd8/0x150 [ 367.988246][ T9523] ? lock_vma_under_rcu+0x1f9/0x590 [ 367.988288][ T9523] ? __pfx_find_vma_prev+0x10/0x10 [ 367.988328][ T9523] ? find_held_lock+0x2b/0x80 [ 367.988355][ T9523] ? madvise_do_behavior+0x1ea/0x510 [ 367.988384][ T9523] ? madvise_do_behavior+0x1ea/0x510 [ 367.988421][ T9523] madvise_walk_vmas+0x2fe/0xa90 [ 367.988462][ T9523] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 367.988495][ T9523] ? find_held_lock+0x2b/0x80 [ 367.988524][ T9523] madvise_do_behavior+0x1ea/0x510 [ 367.988555][ T9523] ? futex_private_hash_put+0x107/0x1c0 [ 367.988591][ T9523] ? __pfx_madvise_do_behavior+0x10/0x10 [ 367.988623][ T9523] ? futex_wake+0x1ad/0x530 [ 367.988665][ T9523] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 367.988720][ T9523] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 367.988810][ T9523] do_madvise+0x195/0x240 [ 367.988843][ T9523] ? __pfx_do_madvise+0x10/0x10 [ 367.988874][ T9523] ? do_futex+0x192/0x350 [ 367.988915][ T9523] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 367.989070][ T9523] __x64_sys_madvise+0xa9/0x110 [ 367.989104][ T9523] ? lockdep_hardirqs_on+0x78/0x100 [ 367.989144][ T9523] do_syscall_64+0x106/0xf80 [ 367.989180][ T9523] ? clear_bhb_loop+0x40/0x90 [ 367.989217][ T9523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.989246][ T9523] RIP: 0033:0x7f4abe59c799 [ 367.989269][ T9523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.989298][ T9523] RSP: 002b:00007f4abf388028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 367.989326][ T9523] RAX: ffffffffffffffda RBX: 00007f4abe816180 RCX: 00007f4abe59c799 [ 367.989346][ T9523] RDX: 0000000000000066 RSI: 0000000002021000 RDI: 0000000000000000 [ 367.989363][ T9523] RBP: 00007f4abe632c99 R08: 0000000000000000 R09: 0000000000000000 [ 367.989380][ T9523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.989397][ T9523] R13: 00007f4abe816218 R14: 00007f4abe816180 R15: 00007ffed2672e38 [ 367.989432][ T9523] [ 368.016508][ T9522] CPU: 0 UID: 0 PID: 9522 Comm: syz.4.684 Tainted: G L syzkaller #0 PREEMPT(full) [ 368.016555][ T9522] Tainted: [L]=SOFTLOCKUP [ 368.016565][ T9522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 368.016581][ T9522] Call Trace: [ 368.016591][ T9522] [ 368.016602][ T9522] dump_stack_lvl+0x100/0x190 [ 368.016651][ T9522] warn_alloc.cold+0x95/0x1c1 [ 368.016699][ T9522] ? __pfx_warn_alloc+0x10/0x10 [ 368.016742][ T9522] ? __lock_acquire+0x4a5/0x2630 [ 368.016797][ T9522] __vmalloc_node_range_noprof+0x1252/0x1530 [ 368.016835][ T9522] ? rcu_is_watching+0x12/0xc0 [ 368.016876][ T9522] ? trace_contention_end+0x140/0x180 [ 368.016915][ T9522] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 368.017093][ T9522] ? dvb_dvr_do_ioctl+0x7e/0x270 [ 368.017137][ T9522] ? tomoyo_path_number_perm+0x28f/0x580 [ 368.017205][ T9522] ? tomoyo_path_number_perm+0x28f/0x580 [ 368.017239][ T9522] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 368.017282][ T9522] ? __pfx___mutex_lock+0x10/0x10 [ 368.017361][ T9522] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 368.017391][ T9522] ? futex_wait+0x125/0x380 [ 368.017439][ T9522] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 368.017482][ T9522] __vmalloc_node_noprof+0xad/0xf0 [ 368.017517][ T9522] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 368.017563][ T9522] dvb_dvr_do_ioctl+0x15d/0x270 [ 368.017613][ T9522] dvb_usercopy+0x167/0x340 [ 368.017653][ T9522] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 368.017699][ T9522] ? __pfx_dvb_usercopy+0x10/0x10 [ 368.017753][ T9522] ? __fget_files+0x21f/0x3d0 [ 368.017799][ T9522] dvb_dvr_ioctl+0x29/0x40 [ 368.017840][ T9522] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 368.017884][ T9522] __x64_sys_ioctl+0x18e/0x210 [ 368.017933][ T9522] do_syscall_64+0x106/0xf80 [ 368.017969][ T9522] ? clear_bhb_loop+0x40/0x90 [ 368.018005][ T9522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.018034][ T9522] RIP: 0033:0x7fc41319c799 [ 368.018057][ T9522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.018084][ T9522] RSP: 002b:00007fc413f74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 368.018112][ T9522] RAX: ffffffffffffffda RBX: 00007fc413415fa0 RCX: 00007fc41319c799 [ 368.018132][ T9522] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000007 [ 368.018149][ T9522] RBP: 00007fc413232c99 R08: 0000000000000000 R09: 0000000000000000 [ 368.018166][ T9522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.018183][ T9522] R13: 00007fc413416038 R14: 00007fc413415fa0 R15: 00007fff1396ec48 [ 368.018222][ T9522] [ 368.018238][ T9522] Mem-Info: [ 368.136189][ T9517] netlink: 'syz.3.683': attribute type 11 has an invalid length. [ 368.449891][ T9522] active_anon:10119 inactive_anon:0 isolated_anon:0 [ 368.449891][ T9522] active_file:8910 inactive_file:54323 isolated_file:0 [ 368.449891][ T9522] unevictable:768 dirty:737 writeback:0 [ 368.449891][ T9522] slab_reclaimable:15162 slab_unreclaimable:95688 [ 368.449891][ T9522] mapped:27109 shmem:1383 pagetables:1488 [ 368.449891][ T9522] sec_pagetables:0 bounce:0 [ 368.449891][ T9522] kernel_misc_reclaimable:0 [ 368.449891][ T9522] free:1298378 free_pcp:17194 free_cma:0 [ 368.676183][ T9510] FAULT_INJECTION: forcing a failure. [ 368.676183][ T9510] name failslab, interval 1, probability 0, space 0, times 0 [ 368.750339][ T9510] CPU: 0 UID: 0 PID: 9510 Comm: syz.5.681 Tainted: G L syzkaller #0 PREEMPT(full) [ 368.750386][ T9510] Tainted: [L]=SOFTLOCKUP [ 368.750396][ T9510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 368.750412][ T9510] Call Trace: [ 368.750420][ T9510] [ 368.750431][ T9510] dump_stack_lvl+0x100/0x190 [ 368.750480][ T9510] should_fail_ex.cold+0x5/0xa [ 368.750515][ T9510] ? __register_sysctl_table+0xac/0x1650 [ 368.750560][ T9510] should_failslab+0xc2/0x120 [ 368.750591][ T9510] __kmalloc_noprof+0xe0/0x850 [ 368.750640][ T9510] __register_sysctl_table+0xac/0x1650 [ 368.750686][ T9510] ? is_module_address+0x5f/0xf0 [ 368.750728][ T9510] ? __pfx___register_sysctl_table+0x10/0x10 [ 368.750771][ T9510] ? is_module_address+0x69/0xf0 [ 368.750806][ T9510] ? register_net_sysctl_sz+0x222/0x430 [ 368.750851][ T9510] ? __asan_memcpy+0x3c/0x60 [ 368.750892][ T9510] sctp_sysctl_net_register+0x15e/0x200 [ 368.751047][ T9510] ? __pfx_sctp_defaults_init+0x10/0x10 [ 368.751111][ T9510] sctp_defaults_init+0x6d2/0xd90 [ 368.751151][ T9510] ? __pfx_sctp_defaults_init+0x10/0x10 [ 368.751190][ T9510] ops_init+0x1e2/0x5f0 [ 368.751234][ T9510] setup_net+0x118/0x3a0 [ 368.751273][ T9510] ? __pfx_setup_net+0x10/0x10 [ 368.751310][ T9510] ? lockdep_init_map_type+0x5c/0x250 [ 368.751359][ T9510] ? mutex_init_lockep+0x110/0x150 [ 368.751403][ T9510] copy_net_ns+0x46f/0x7c0 [ 368.751451][ T9510] create_new_namespaces+0x3ea/0xac0 [ 368.751491][ T9510] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 368.751524][ T9510] ksys_unshare+0x473/0xad0 [ 368.751563][ T9510] ? __pfx_ksys_unshare+0x10/0x10 [ 368.751612][ T9510] __x64_sys_unshare+0x31/0x40 [ 368.751647][ T9510] do_syscall_64+0x106/0xf80 [ 368.751685][ T9510] ? clear_bhb_loop+0x40/0x90 [ 368.751720][ T9510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.751750][ T9510] RIP: 0033:0x7f5207b9c799 [ 368.751774][ T9510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.751801][ T9510] RSP: 002b:00007f5208a00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 368.751828][ T9510] RAX: ffffffffffffffda RBX: 00007f5207e15fa0 RCX: 00007f5207b9c799 [ 368.751846][ T9510] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 368.751863][ T9510] RBP: 00007f5207c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 368.751881][ T9510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.751908][ T9510] R13: 00007f5207e16038 R14: 00007f5207e15fa0 R15: 00007fff537ff3b8 [ 368.751953][ T9510] [ 368.823710][ T9522] Node 0 active_anon:40216kB inactive_anon:0kB active_file:35640kB inactive_file:217160kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:108436kB dirty:2984kB writeback:0kB shmem:3996kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12616kB pagetables:5840kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 369.073170][ T9528] random: crng reseeded on system resumption [ 369.163904][ T9522] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 369.332379][ T9522] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 369.396379][ T9522] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 369.489598][ T9522] Node 0 DMA32 free:1266364kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43628kB inactive_anon:0kB active_file:35640kB inactive_file:217160kB unevictable:1536kB writepending:3036kB zspages:0kB present:3129332kB managed:2537400kB mlocked:0kB bounce:0kB free_pcp:34124kB local_pcp:21292kB free_cma:0kB [ 369.556184][ T9522] lowmem_reserve[]: 0 0 1 1 1 [ 369.560979][ T9522] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1060kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 369.658610][ T9522] lowmem_reserve[]: 0 0 0 0 0 [ 369.663408][ T9522] Node 1 Normal free:3912964kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:32760kB local_pcp:19912kB free_cma:0kB [ 369.729714][ T9522] lowmem_reserve[]: 0 0 0 0 0 [ 369.735692][ T9522] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 369.750657][ T9522] Node 0 DMA32: 3789*4kB (UM) 2467*8kB (UME) 826*16kB (UME) 890*32kB (UME) 597*64kB (UME) 440*128kB (UME) 222*256kB (UM) 180*512kB (UM) 96*1024kB (UM) 20*2048kB (UME) 197*4096kB (UM) = 1266284kB [ 369.770229][ T9522] Node 0 Normal: 3*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 369.782697][ T9522] Node 1 Normal: 1*4kB (M) 0*8kB 2*16kB (U) 1*32kB (U) 5*64kB (UM) 7*128kB (UM) 0*256kB 2*512kB (UM) 1*1024kB (U) 3*2048kB (UM) 953*4096kB (M) = 3912964kB [ 369.817680][ T9522] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 369.827911][ T9522] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 369.837894][ T9522] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 369.848413][ T9522] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 369.858096][ T9522] 66662 total pagecache pages [ 369.862910][ T9522] 0 pages in swap cache [ 369.867564][ T9522] Free swap = 124996kB [ 369.873152][ T9522] Total swap = 124996kB [ 369.877839][ T9522] 2097051 pages RAM [ 369.881753][ T9522] 0 pages HighMem/MovableOnly [ 370.084034][ T9522] 430821 pages reserved [ 370.088251][ T9522] 0 pages cma reserved [ 370.950384][ T9541] zswap: compressor not available [ 374.155982][ T9597] FAULT_INJECTION: forcing a failure. [ 374.155982][ T9597] name failslab, interval 1, probability 0, space 0, times 0 [ 374.173752][ T9597] CPU: 1 UID: 0 PID: 9597 Comm: syz.4.701 Tainted: G L syzkaller #0 PREEMPT(full) [ 374.173796][ T9597] Tainted: [L]=SOFTLOCKUP [ 374.173804][ T9597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 374.173819][ T9597] Call Trace: [ 374.173827][ T9597] [ 374.173837][ T9597] dump_stack_lvl+0x100/0x190 [ 374.173883][ T9597] should_fail_ex.cold+0x5/0xa [ 374.173913][ T9597] ? vb2_core_allocated_buffers_storage+0xc4/0x220 [ 374.174027][ T9597] should_failslab+0xc2/0x120 [ 374.174056][ T9597] __kmalloc_noprof+0xe0/0x850 [ 374.174106][ T9597] vb2_core_allocated_buffers_storage+0xc4/0x220 [ 374.174138][ T9597] vb2_core_reqbufs+0x382/0xf30 [ 374.174172][ T9597] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 374.174223][ T9597] __vb2_init_fileio+0x32d/0x1000 [ 374.174253][ T9597] ? lockdep_hardirqs_on+0x78/0x100 [ 374.174295][ T9597] ? __pollwait+0x276/0x470 [ 374.174342][ T9597] vb2_core_poll+0x611/0x740 [ 374.174375][ T9597] vb2_poll+0x4b/0xe0 [ 374.174417][ T9597] vb2_fop_poll+0x10e/0x350 [ 374.174504][ T9597] ? __pfx_vb2_fop_poll+0x10/0x10 [ 374.174548][ T9597] v4l2_poll+0x15f/0x220 [ 374.174644][ T9597] ? __pfx_v4l2_poll+0x10/0x10 [ 374.174684][ T9597] do_sys_poll+0x6e5/0xeb0 [ 374.174724][ T9597] ? finish_task_switch.isra.0+0x205/0xb80 [ 374.174768][ T9597] ? __pfx_do_sys_poll+0x10/0x10 [ 374.174845][ T9597] ? preempt_schedule_common+0x42/0xc0 [ 374.174885][ T9597] ? preempt_schedule_thunk+0x16/0x30 [ 374.174919][ T9597] ? __pfx___pollwait+0x10/0x10 [ 374.174965][ T9597] ? __pfx_pollwake+0x10/0x10 [ 374.175066][ T9597] ? ktime_get_ts64+0x2d2/0x3f0 [ 374.175099][ T9597] ? read_tsc+0x9/0x20 [ 374.175141][ T9597] ? ktime_get_ts64+0x256/0x3f0 [ 374.175175][ T9597] ? poll_select_set_timeout+0xcc/0x160 [ 374.175218][ T9597] ? __x64_sys_futex+0x358/0x4d0 [ 374.175257][ T9597] __x64_sys_poll+0x1b3/0x420 [ 374.175284][ T9597] ? __pfx___x64_sys_poll+0x10/0x10 [ 374.175321][ T9597] do_syscall_64+0x106/0xf80 [ 374.175362][ T9597] ? clear_bhb_loop+0x40/0x90 [ 374.175397][ T9597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.175426][ T9597] RIP: 0033:0x7fc41319c799 [ 374.175458][ T9597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.175486][ T9597] RSP: 002b:00007fc4113f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 374.175512][ T9597] RAX: ffffffffffffffda RBX: 00007fc413416090 RCX: 00007fc41319c799 [ 374.175530][ T9597] RDX: 0000000000000007 RSI: 0000000000000003 RDI: 0000200000000480 [ 374.175546][ T9597] RBP: 00007fc413232c99 R08: 0000000000000000 R09: 0000000000000000 [ 374.175562][ T9597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.175577][ T9597] R13: 00007fc413416128 R14: 00007fc413416090 R15: 00007fff1396ec48 [ 374.175615][ T9597] [ 377.347370][ T9642] can: request_module (can-proto-4) failed. [ 378.450835][ T9658] sysfs_service_op_store: Client not running :-5: [ 378.520906][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.527425][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.534801][ T9699] can: request_module (can-proto-4) failed. [ 382.994589][ T9730] netlink: 'syz.1.732': attribute type 29 has an invalid length. [ 383.002594][ T9730] netlink: 334 bytes leftover after parsing attributes in process `syz.1.732'. [ 383.366745][ T9730] vivid-007: ================= START STATUS ================= [ 383.407828][ T9730] vivid-007: Generate PTS: true [ 383.442746][ T9730] vivid-007: Generate SCR: true [ 383.493772][ T9730] tpg source WxH: 320x240 (Y'CbCr) [ 383.540980][ T9730] tpg field: 1 [ 383.544930][ T9730] tpg crop: (0,0)/320x240 [ 383.549284][ T9730] tpg compose: (0,0)/320x240 [ 383.604035][ T9730] tpg colorspace: 8 [ 383.607983][ T9730] tpg transfer function: 0/0 [ 383.612594][ T9730] tpg Y'CbCr encoding: 0/0 [ 383.635615][ T9730] tpg quantization: 0/0 [ 383.673393][ T9730] tpg RGB range: 0/2 [ 383.736959][ T9730] vivid-007: ================== END STATUS ================== [ 385.824842][ T9755] could not allocate digest TFM handle [ 390.760409][ T9816] could not allocate digest TFM handle [ 391.259629][ T9820] can: request_module (can-proto-4) failed. [ 393.133176][ T9844] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 394.764406][ T9873] can: request_module (can-proto-4) failed. [ 394.868846][ T9868] can: request_module (can-proto-4) failed. [ 396.627949][ T9900] can: request_module (can-proto-4) failed. [ 399.583520][ T9945] can: request_module (can-proto-4) failed. [ 400.353396][ T9958] bond0: no command found in slaves file - use +ifname or -ifname [ 403.482146][ T9990] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 404.150005][ T5822] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 404.150057][ T5822] Bluetooth: hci3: unexpected subevent 0x06 length: 725 > 10 [ 406.193890][ T5822] Bluetooth: hci3: command 0x0c1a tx timeout [ 406.404289][T10011] could not allocate digest TFM handle [ 407.667231][T10020] could not allocate digest TFM handle [ 408.669960][T10037] can: request_module (can-proto-4) failed. [ 412.413945][T10073] could not allocate digest TFM handle [ 413.502184][T10077] netlink: 'syz.1.804': attribute type 14 has an invalid length. [ 413.510065][T10077] netlink: 330 bytes leftover after parsing attributes in process `syz.1.804'. [ 415.968441][T10096] could not allocate digest TFM handle [ 419.274160][T10120] can: request_module (can-proto-4) failed. [ 421.908353][T10152] can: request_module (can-proto-4) failed. [ 422.076338][T10155] could not allocate digest TFM handle [ 424.590425][T10196] random: crng reseeded on system resumption [ 424.649349][T10188] can: request_module (can-proto-4) failed. [ 428.113052][T10239] can: request_module (can-proto-4) failed. [ 428.444585][T10242] can: request_module (can-proto-4) failed. [ 429.342920][T10267] could not allocate digest TFM handle [ 430.875035][T10287] can: request_module (can-proto-4) failed. [ 432.682039][T10310] can: request_module (can-proto-4) failed. [ 433.509978][T10321] can: request_module (can-proto-4) failed. [ 435.667844][T10342] could not allocate digest TFM handle [ 437.453547][T10380] can: request_module (can-proto-4) failed. [ 437.663511][T10379] can: request_module (can-proto-4) failed. [ 438.455794][T10388] program syz.5.872 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 438.503930][T10388] FAULT_INJECTION: forcing a failure. [ 438.503930][T10388] name failslab, interval 1, probability 0, space 0, times 0 [ 438.534120][T10388] CPU: 0 UID: 0 PID: 10388 Comm: syz.5.872 Tainted: G L syzkaller #0 PREEMPT(full) [ 438.534167][T10388] Tainted: [L]=SOFTLOCKUP [ 438.534177][T10388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 438.534194][T10388] Call Trace: [ 438.534204][T10388] [ 438.534215][T10388] dump_stack_lvl+0x100/0x190 [ 438.534264][T10388] should_fail_ex.cold+0x5/0xa [ 438.534300][T10388] should_failslab+0xc2/0x120 [ 438.534330][T10388] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 438.534372][T10388] ? security_inode_alloc+0x3b/0x2c0 [ 438.534479][T10388] ? lockdep_init_map_type+0x5c/0x250 [ 438.534523][T10388] security_inode_alloc+0x3b/0x2c0 [ 438.534553][T10388] inode_init_always_gfp+0xced/0x1040 [ 438.534588][T10388] alloc_inode+0x8e/0x250 [ 438.534624][T10388] path_from_stashed+0x25b/0x750 [ 438.534654][T10388] ? do_raw_spin_unlock+0x145/0x1e0 [ 438.534701][T10388] ns_get_path+0x60/0x80 [ 438.534729][T10388] proc_ns_get_link+0x121/0x230 [ 438.534768][T10388] ? __pfx_proc_ns_get_link+0x10/0x10 [ 438.534808][T10388] ? __pfx___might_resched+0x10/0x10 [ 438.534856][T10388] pick_link+0xd17/0x13c0 [ 438.534895][T10388] ? __pfx_proc_ns_get_link+0x10/0x10 [ 438.534938][T10388] step_into_slowpath+0x9ba/0xf90 [ 438.534985][T10388] ? __pfx_step_into_slowpath+0x10/0x10 [ 438.535026][T10388] ? find_held_lock+0x2b/0x80 [ 438.535064][T10388] path_openat+0xf95/0x31a0 [ 438.535105][T10388] ? __pfx_path_openat+0x10/0x10 [ 438.535160][T10388] do_file_open+0x20e/0x430 [ 438.535193][T10388] ? __pfx_do_file_open+0x10/0x10 [ 438.535249][T10388] ? alloc_fd+0x476/0x790 [ 438.535280][T10388] ? do_getname+0x191/0x390 [ 438.535319][T10388] do_sys_openat2+0x10d/0x1e0 [ 438.535357][T10388] ? __pfx_do_sys_openat2+0x10/0x10 [ 438.535396][T10388] ? __fget_files+0x21f/0x3d0 [ 438.535430][T10388] __x64_sys_openat+0x12d/0x210 [ 438.535474][T10388] ? __pfx___x64_sys_openat+0x10/0x10 [ 438.535526][T10388] do_syscall_64+0x106/0xf80 [ 438.535565][T10388] ? clear_bhb_loop+0x40/0x90 [ 438.535599][T10388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.535629][T10388] RIP: 0033:0x7f5207b5cfce [ 438.535653][T10388] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 438.535680][T10388] RSP: 002b:00007f52089ffec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 438.535707][T10388] RAX: ffffffffffffffda RBX: 00007f5208a006c0 RCX: 00007f5207b5cfce [ 438.535726][T10388] RDX: 0000000000000002 RSI: 00007f52089fff90 RDI: ffffffffffffff9c [ 438.535745][T10388] RBP: 00007f5207c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 438.535762][T10388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.535779][T10388] R13: 00007f5207e16038 R14: 00007f5207e15fa0 R15: 00007fff537ff3b8 [ 438.535818][T10388] [ 439.959527][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.965973][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.110437][T10405] could not allocate digest TFM handle [ 442.264310][T10435] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 442.938569][T10465] could not allocate digest TFM handle [ 443.314092][T10224] Bluetooth: hci2: command 0x0c1a tx timeout [ 443.314100][T10296] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 448.268591][T10537] could not allocate digest TFM handle [ 452.593975][T10585] could not allocate digest TFM handle [ 456.282771][T10630] can: request_module (can-proto-4) failed. [ 457.068496][T10649] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 457.077023][T10649] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 457.087276][T10649] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 457.095915][T10649] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 457.104958][T10649] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 457.324088][T10642] could not allocate digest TFM handle [ 458.353501][T10647] chnl_net:caif_netlink_parms(): no params data found [ 458.625231][T10647] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.654030][T10647] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.661245][T10647] bridge_slave_0: entered allmulticast mode [ 458.676098][T10647] bridge_slave_0: entered promiscuous mode [ 458.693015][T10647] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.733852][T10647] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.741050][T10647] bridge_slave_1: entered allmulticast mode [ 458.771019][T10647] bridge_slave_1: entered promiscuous mode [ 458.979848][T10671] can: request_module (can-proto-4) failed. [ 459.085618][T10647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.157029][T10224] Bluetooth: hci1: command tx timeout [ 459.161529][T10647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.266997][T10647] team0: Port device team_slave_0 added [ 459.288704][T10647] team0: Port device team_slave_1 added [ 459.374823][T10647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.403284][T10647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.607489][T10647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.620957][T10647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.628209][T10647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.667023][T10647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.683184][T10647] hsr_slave_0: entered promiscuous mode [ 460.699840][T10647] hsr_slave_1: entered promiscuous mode [ 460.718357][T10647] debugfs: 'hsr0' already exists in 'hsr' [ 460.740383][T10647] Cannot create hsr debugfs directory [ 461.105891][T10647] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 461.136095][T10647] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 461.164708][T10647] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 461.234273][T10224] Bluetooth: hci1: command tx timeout [ 461.255264][T10647] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 462.338105][T10647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.426107][T10705] could not allocate digest TFM handle [ 462.874389][T10647] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.929685][T10647] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 462.984639][T10647] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 463.021932][T10232] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.029121][T10232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.095512][T10232] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.102698][T10232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.316063][T10224] Bluetooth: hci1: command tx timeout [ 464.243766][T10647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.779641][T10647] veth0_vlan: entered promiscuous mode [ 464.792642][T10647] veth1_vlan: entered promiscuous mode [ 464.907534][T10647] veth0_macvtap: entered promiscuous mode [ 464.933709][T10647] veth1_macvtap: entered promiscuous mode [ 465.028643][T10647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.141046][T10647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.230415][T10678] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.239693][T10678] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.315751][T10678] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.394234][T10224] Bluetooth: hci1: command tx timeout [ 465.445021][T10678] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.597892][T10211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.608859][T10211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.708349][T10678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.720347][T10678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.982604][T10750] can: request_module (can-proto-4) failed. [ 467.115299][T10768] can: request_module (can-proto-4) failed. [ 467.865254][T10759] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 467.871479][T10759] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 467.877753][T10759] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 467.884196][T10759] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 467.890164][T10759] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 467.898736][T10759] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 468.276044][T10224] Bluetooth: hci3: command 0x0c1a tx timeout [ 468.368830][T10777] could not allocate digest TFM handle [ 469.874762][T10224] Bluetooth: hci4: command 0x0c1a tx timeout [ 469.969089][T10224] Bluetooth: hci1: command 0x0c1a tx timeout [ 469.975253][T10224] Bluetooth: hci0: command 0x0c1a tx timeout [ 470.480448][T10807] can: request_module (can-proto-4) failed. [ 470.782370][T10816] can: request_module (can-proto-4) failed. syzkaller syzkaller login: [ 471.532729][T10832] could not allocate digest TFM handle [ 472.033896][T10649] Bluetooth: hci1: command 0x0c1a tx timeout [ 472.415091][ T29] audit: type=1800 audit(1773444218.227:5): pid=10841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=252296 res=0 errno=0 [ 472.693924][T10841] could not allocate digest TFM handle [ 472.730428][T10854] input: f as /devices/virtual/input/input20 [ 472.980029][T10863] blktrace: Concurrent blktraces are not allowed on loop2 [ 473.690344][T10873] can: request_module (can-proto-4) failed. [ 473.801499][T10883] smpboot: CPU 1 is now offline [ 473.967748][T10881] .^: entered promiscuous mode [ 474.114010][T10649] Bluetooth: hci1: command 0x0c1a tx timeout [ 474.440018][T10884] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 474.457560][T10884] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 474.484196][T10884] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 474.494402][T10884] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 474.521247][T10884] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 474.763514][T10895] blkio.reset_stats is deprecated [ 474.899025][T10894] NFSD: Failed to start, no listeners configured. [ 475.612448][T10899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.961'. [ 476.194101][T10649] Bluetooth: hci2: command 0x0c1a tx timeout [ 476.433133][T10224] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 476.448901][T10224] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 476.456970][T10224] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 476.464984][T10224] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 476.476195][T10224] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 476.519542][T10649] Bluetooth: hci0: command 0x0c1a tx timeout [ 476.526172][T10224] Bluetooth: hci4: command 0x0c1a tx timeout [ 476.532163][T10224] Bluetooth: hci3: command 0x0c1a tx timeout [ 476.594304][T10944] Bluetooth: hci1: command 0x0c1a tx timeout [ 477.936873][T10941] chnl_net:caif_netlink_parms(): no params data found [ 478.513983][T10944] Bluetooth: hci5: command tx timeout [ 479.184033][T10968] could not allocate digest TFM handle [ 479.216979][T10941] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.257922][T10941] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.333946][T10941] bridge_slave_0: entered allmulticast mode [ 479.353973][T10941] bridge_slave_0: entered promiscuous mode [ 479.386474][T10941] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.393574][T10941] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.447306][T10941] bridge_slave_1: entered allmulticast mode [ 479.765859][T10941] bridge_slave_1: entered promiscuous mode [ 480.311186][T10941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.430637][T10941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.576857][T10941] team0: Port device team_slave_0 added [ 480.594005][T10944] Bluetooth: hci5: command tx timeout [ 480.610477][T10941] team0: Port device team_slave_1 added [ 480.727944][T10941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.759510][T10941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.876418][T10941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.964123][T10941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.991630][T10941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.084603][T10941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.105985][T10996] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 481.216527][T10941] hsr_slave_0: entered promiscuous mode [ 481.235287][T10941] hsr_slave_1: entered promiscuous mode [ 481.241333][T10941] debugfs: 'hsr0' already exists in 'hsr' [ 481.274993][T10941] Cannot create hsr debugfs directory [ 481.351595][T10985] netlink: 'syz.3.974': attribute type 14 has an invalid length. [ 481.401936][T10985] netlink: 330 bytes leftover after parsing attributes in process `syz.3.974'. [ 482.095483][T10941] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 482.236937][T10941] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 482.293848][T10941] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 482.322590][T10941] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 482.336790][T10997] netlink: 'syz.1.975': attribute type 14 has an invalid length. [ 482.392172][T10997] netlink: 330 bytes leftover after parsing attributes in process `syz.1.975'. [ 482.676207][T10944] Bluetooth: hci5: command tx timeout [ 482.702303][T10941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.902771][T10941] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.030263][T10914] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.037423][T10914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.215871][T10914] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.223020][T10914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.333851][ T29] audit: type=1800 audit(1773444229.137:6): pid=11028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=254407 res=0 errno=0 [ 483.642597][T10941] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 483.655663][T11028] could not allocate digest TFM handle [ 483.714130][T10941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 484.360100][T10941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.756384][T10944] Bluetooth: hci5: command tx timeout [ 485.963854][T11053] could not allocate digest TFM handle [ 486.137528][T10941] veth0_vlan: entered promiscuous mode [ 486.198151][T10941] veth1_vlan: entered promiscuous mode [ 486.316804][T10941] veth0_macvtap: entered promiscuous mode [ 486.357276][T10941] veth1_macvtap: entered promiscuous mode [ 486.427967][T10941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.481380][T10941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.544424][T10913] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.584223][T10913] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.592935][T10913] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.617571][T11066] netlink: 'syz.3.985': attribute type 14 has an invalid length. [ 486.645871][T11066] netlink: 330 bytes leftover after parsing attributes in process `syz.3.985'. [ 486.670445][T10913] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.923517][T10913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.957967][T10913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.041059][T10913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.084295][T10913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.104939][ T29] audit: type=1800 audit(1773444233.907:7): pid=11102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=254992 res=0 errno=0 [ 488.364538][T11090] netlink: 'syz.3.989': attribute type 14 has an invalid length. [ 488.406255][T11090] netlink: 330 bytes leftover after parsing attributes in process `syz.3.989'. [ 488.437842][T11102] could not allocate digest TFM handle syzkaller syzkaller login: [ 489.681221][T11112] could not allocate digest TFM handle [ 490.192200][T11128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.994'. [ 490.231836][T11129] FAULT_INJECTION: forcing a failure. [ 490.231836][T11129] name failslab, interval 1, probability 0, space 0, times 0 [ 490.314688][T11129] CPU: 0 UID: 0 PID: 11129 Comm: syz.3.994 Tainted: G L syzkaller #0 PREEMPT(full) [ 490.314716][T11129] Tainted: [L]=SOFTLOCKUP [ 490.314722][T11129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 490.314731][T11129] Call Trace: [ 490.314736][T11129] [ 490.314742][T11129] dump_stack_lvl+0x100/0x190 [ 490.314772][T11129] should_fail_ex.cold+0x5/0xa [ 490.314791][T11129] should_failslab+0xc2/0x120 [ 490.314809][T11129] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 490.314832][T11129] ? skb_clone+0x190/0x400 [ 490.314938][T11129] skb_clone+0x190/0x400 [ 490.314959][T11129] netlink_deliver_tap+0xaed/0xcc0 [ 490.315034][T11129] netlink_unicast+0x650/0x870 [ 490.315059][T11129] ? __pfx_netlink_unicast+0x10/0x10 [ 490.315080][T11129] ? __pfx___might_resched+0x10/0x10 [ 490.315102][T11129] ? rcu_read_unlock+0x2d/0xb0 [ 490.315129][T11129] netlink_sendmsg+0x8b0/0xda0 [ 490.315154][T11129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.315178][T11129] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 490.315232][T11129] __sys_sendto+0x468/0x4b0 [ 490.315289][T11129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.315312][T11129] ? __pfx___sys_sendto+0x10/0x10 [ 490.315337][T11129] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 490.315360][T11129] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 490.315400][T11129] __x64_sys_sendto+0xe0/0x1c0 [ 490.315418][T11129] ? do_syscall_64+0x95/0xf80 [ 490.315441][T11129] ? lockdep_hardirqs_on+0x78/0x100 [ 490.315461][T11129] do_syscall_64+0x106/0xf80 [ 490.315480][T11129] ? clear_bhb_loop+0x40/0x90 [ 490.315499][T11129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.315514][T11129] RIP: 0033:0x7f4abe55cfce [ 490.315527][T11129] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 490.315541][T11129] RSP: 002b:00007f4abf386e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 490.315562][T11129] RAX: ffffffffffffffda RBX: 00007f4abf3886c0 RCX: 00007f4abe55cfce [ 490.315572][T11129] RDX: 0000000000000024 RSI: 00007f4abf387000 RDI: 0000000000000003 [ 490.315580][T11129] RBP: 0000000000000000 R08: 00007f4abf386f04 R09: 000000000000000c [ 490.315589][T11129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 490.315598][T11129] R13: 00007f4abf386f58 R14: 00007f4abf387000 R15: 0000000000000000 [ 490.315617][T11129] [ 490.563516][T11129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.994'. [ 491.084989][T11138] FAULT_INJECTION: forcing a failure. [ 491.084989][T11138] name failslab, interval 1, probability 0, space 0, times 0 [ 491.171708][T11138] CPU: 0 UID: 0 PID: 11138 Comm: syz.6.1004 Tainted: G L syzkaller #0 PREEMPT(full) [ 491.171735][T11138] Tainted: [L]=SOFTLOCKUP [ 491.171741][T11138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 491.171751][T11138] Call Trace: [ 491.171756][T11138] [ 491.171762][T11138] dump_stack_lvl+0x100/0x190 [ 491.171789][T11138] should_fail_ex.cold+0x5/0xa [ 491.171809][T11138] should_failslab+0xc2/0x120 [ 491.171825][T11138] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 491.171846][T11138] ? mas_alloc_nodes+0x280/0x390 [ 491.171868][T11138] mas_alloc_nodes+0x280/0x390 [ 491.171888][T11138] mas_preallocate+0x39c/0xf10 [ 491.171908][T11138] ? __memcg_slab_post_alloc_hook+0x4c0/0x990 [ 491.171930][T11138] ? __pfx_mas_preallocate+0x10/0x10 [ 491.171957][T11138] ? anon_vma_name+0x5a/0x250 [ 491.171977][T11138] __split_vma+0x33d/0xd90 [ 491.172000][T11138] ? __pfx___split_vma+0x10/0x10 [ 491.172024][T11138] ? __pfx_mas_prev+0x10/0x10 [ 491.172050][T11138] vms_gather_munmap_vmas+0x39f/0x1500 [ 491.172069][T11138] ? find_held_lock+0x2b/0x80 [ 491.172088][T11138] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 491.172108][T11138] ? move_page_tables+0xe1d/0x4500 [ 491.172138][T11138] do_vmi_align_munmap+0x287/0x5f0 [ 491.172161][T11138] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 491.172209][T11138] do_vmi_munmap+0x1f8/0x3e0 [ 491.172232][T11138] move_vma+0xd99/0x1890 [ 491.172256][T11138] ? __pfx_move_vma+0x10/0x10 [ 491.172277][T11138] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 491.172301][T11138] ? vrm_set_new_addr+0x204/0x290 [ 491.172323][T11138] mremap_to+0x1b7/0x450 [ 491.172344][T11138] do_mremap+0xb76/0x2130 [ 491.172373][T11138] ? __pfx_do_mremap+0x10/0x10 [ 491.172397][T11138] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 491.172427][T11138] __do_sys_mremap+0x126/0x170 [ 491.172448][T11138] ? __pfx___do_sys_mremap+0x10/0x10 [ 491.172473][T11138] ? __x64_sys_futex+0x34f/0x4d0 [ 491.172504][T11138] do_syscall_64+0x106/0xf80 [ 491.172523][T11138] ? clear_bhb_loop+0x40/0x90 [ 491.172541][T11138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.172566][T11138] RIP: 0033:0x7fc9fb39c799 [ 491.172580][T11138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.172595][T11138] RSP: 002b:00007fc9f95d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 491.172611][T11138] RAX: ffffffffffffffda RBX: 00007fc9fb616090 RCX: 00007fc9fb39c799 [ 491.172621][T11138] RDX: 0000000000000037 RSI: 0000000000000008 RDI: 0000200000001000 [ 491.172630][T11138] RBP: 00007fc9fb432c99 R08: 000000110c230000 R09: 0000000000000000 [ 491.172639][T11138] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 491.172648][T11138] R13: 00007fc9fb616128 R14: 00007fc9fb616090 R15: 00007ffea56f3bb8 [ 491.172668][T11138] [ 492.019440][T11139] .^: entered promiscuous mode [ 492.188439][T11143] netlink: 'syz.7.998': attribute type 14 has an invalid length. [ 492.232518][T11143] netlink: 330 bytes leftover after parsing attributes in process `syz.7.998'. [ 492.435397][T11139] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 492.463576][T11139] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 492.489150][T11139] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 492.518897][T11139] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 492.550273][T11139] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 492.578975][T11139] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 492.608038][T11139] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 492.633390][T11139] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 493.469979][T11177] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input21 [ 493.936940][T11176] netlink: 'syz.1.1012': attribute type 14 has an invalid length. [ 493.978786][T11176] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1012'. [ 494.211483][T11175] netlink: 'syz.7.1003': attribute type 14 has an invalid length. [ 494.253771][T11175] netlink: 330 bytes leftover after parsing attributes in process `syz.7.1003'. [ 494.273895][T10214] Bluetooth: hci2: command 0x0c1a tx timeout [ 494.518060][T10214] Bluetooth: hci4: command 0x0c1a tx timeout [ 494.524153][T10944] Bluetooth: hci3: command 0x0c1a tx timeout [ 494.594482][T10214] Bluetooth: hci5: command 0x0c1a tx timeout [ 494.600514][T10214] Bluetooth: hci1: command 0x0c1a tx timeout [ 494.606980][T10944] Bluetooth: hci0: command 0x0c1a tx timeout [ 494.788265][T11205] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 494.972499][T11214] .^: entered promiscuous mode [ 495.361803][T11229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1015'. [ 495.585776][T11237] binder: 11236:11237 ioctl 4018620d 9 returned -22 [ 495.676337][T11214] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 495.702226][T11214] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 495.721868][T11214] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 495.748709][T11214] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 495.759147][T11241] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1017'. [ 495.778790][T11214] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 495.800219][T11214] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 496.579265][T11251] Setting dangerous option i915.mitigations - tainting kernel [ 496.680745][T11263] netlink: 672 bytes leftover after parsing attributes in process `syz.6.1023'. [ 497.237053][T10214] Bluetooth: hci2: command 0x0c1a tx timeout [ 497.714009][T10214] Bluetooth: hci3: command 0x0c1a tx timeout [ 497.794485][T10224] Bluetooth: hci0: command 0x0c1a tx timeout [ 497.800551][T10944] Bluetooth: hci4: command 0x0c1a tx timeout [ 497.806690][T10214] Bluetooth: hci1: command 0x0c1a tx timeout [ 497.872335][T11292] openvswitch: .^: Dropping previously announced user features [ 497.880385][T10214] Bluetooth: hci5: command 0x0c1a tx timeout [ 498.206763][T11306] vivid-007: ================= START STATUS ================= [ 498.206796][T11306] vivid-007: Generate PTS: true [ 498.206818][T11306] vivid-007: Generate SCR: true [ 498.206835][T11306] tpg source WxH: 320x240 (Y'CbCr) [ 498.206845][T11306] tpg field: 1 [ 498.206850][T11306] tpg crop: (0,0)/320x240 [ 498.206860][T11306] tpg compose: (0,0)/320x240 [ 498.206870][T11306] tpg colorspace: 8 [ 498.206876][T11306] tpg transfer function: 0/0 [ 498.206883][T11306] tpg Y'CbCr encoding: 0/0 [ 498.206891][T11306] tpg quantization: 0/0 [ 498.206898][T11306] tpg RGB range: 0/2 [ 498.206906][T11306] vivid-007: ================== END STATUS ================== [ 498.973905][T11303] could not allocate digest TFM handle [ 499.837150][T11324] netlink: 'syz.3.1034': attribute type 1 has an invalid length. [ 499.852802][T11325] netlink: 'syz.3.1034': attribute type 1 has an invalid length. [ 499.953877][T10214] Bluetooth: hci5: command 0x0c1a tx timeout [ 500.007266][T11327] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input22 [ 500.121354][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.127814][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.613224][T11354] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 500.641233][T11335] netlink: 'syz.3.1036': attribute type 14 has an invalid length. [ 500.675487][T11335] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1036'. [ 500.696343][T11354] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 500.987645][T11339] netlink: 'syz.1.1037': attribute type 14 has an invalid length. [ 501.036379][T11339] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1037'. [ 502.333918][T11369] binder: 11368:11369 ioctl 4018620d 9 returned -22 [ 502.740187][T11369] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1042'. [ 504.437874][ T29] audit: type=1800 audit(1773444250.247:8): pid=11396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1046" name="dbroot" dev="configfs" ino=256391 res=0 errno=0 [ 504.925515][T11406] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input23 [ 506.184332][T11418] binder: 11415:11418 ioctl 4018620d 9 returned -22 [ 506.365721][T11418] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1053'. [ 507.898880][T11453] nfsd: Unknown parameter '%3ZVgAtL-p4 [ 507.898880][T11453] oJgg' [ 509.256377][T11467] can: request_module (can-proto-4) failed. [ 509.944227][T11465] netlink: 'syz.6.1064': attribute type 14 has an invalid length. [ 509.986049][T11465] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1064'. [ 515.393836][T11530] netlink: 'syz.7.1077': attribute type 14 has an invalid length. [ 515.475572][T11530] netlink: 330 bytes leftover after parsing attributes in process `syz.7.1077'. [ 516.809057][T11583] FAULT_INJECTION: forcing a failure. [ 516.809057][T11583] name failslab, interval 1, probability 0, space 0, times 0 [ 517.351921][T11583] CPU: 0 UID: 0 PID: 11583 Comm: syz.3.1086 Tainted: G U L syzkaller #0 PREEMPT(full) [ 517.351951][T11583] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 517.351957][T11583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 517.351967][T11583] Call Trace: [ 517.351972][T11583] [ 517.351979][T11583] dump_stack_lvl+0x100/0x190 [ 517.352007][T11583] should_fail_ex.cold+0x5/0xa [ 517.352025][T11583] should_failslab+0xc2/0x120 [ 517.352042][T11583] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 517.352064][T11583] ? alloc_inode+0x183/0x250 [ 517.352083][T11583] ? find_inode_fast+0x1fa/0x910 [ 517.352104][T11583] alloc_inode+0x183/0x250 [ 517.352123][T11583] iget_locked+0x1d9/0x6d0 [ 517.352143][T11583] ? __pfx_iget_locked+0x10/0x10 [ 517.352161][T11583] ? kernfs_root+0xee/0x2a0 [ 517.352181][T11583] ? kernfs_root+0xee/0x2a0 [ 517.352204][T11583] kernfs_get_inode+0x46/0x470 [ 517.352224][T11583] kernfs_iop_lookup+0x1a7/0x2d0 [ 517.352247][T11583] __lookup_slow+0x251/0x460 [ 517.352266][T11583] ? __pfx___lookup_slow+0x10/0x10 [ 517.352296][T11583] ? __d_lookup+0x266/0x4a0 [ 517.352320][T11583] lookup_slow+0x50/0x70 [ 517.352346][T11583] link_path_walk+0x1377/0x1cc0 [ 517.352375][T11583] path_openat+0x1be/0x31a0 [ 517.352389][T11583] ? kasan_save_stack+0x3f/0x50 [ 517.352411][T11583] ? kasan_save_stack+0x30/0x50 [ 517.352432][T11583] ? kasan_save_track+0x14/0x30 [ 517.352452][T11583] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 517.352488][T11583] ? __pfx_path_openat+0x10/0x10 [ 517.352511][T11583] do_file_open+0x20e/0x430 [ 517.352529][T11583] ? __pfx_do_file_open+0x10/0x10 [ 517.352560][T11583] ? alloc_fd+0x476/0x790 [ 517.352576][T11583] ? do_getname+0x191/0x390 [ 517.352597][T11583] do_sys_openat2+0x10d/0x1e0 [ 517.352617][T11583] ? __pfx_do_sys_openat2+0x10/0x10 [ 517.352643][T11583] __x64_sys_openat+0x12d/0x210 [ 517.352663][T11583] ? __pfx___x64_sys_openat+0x10/0x10 [ 517.352689][T11583] do_syscall_64+0x106/0xf80 [ 517.352709][T11583] ? clear_bhb_loop+0x40/0x90 [ 517.352728][T11583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.352743][T11583] RIP: 0033:0x7f4abe59c799 [ 517.352757][T11583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.352771][T11583] RSP: 002b:00007f4abf3a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 517.352786][T11583] RAX: ffffffffffffffda RBX: 00007f4abe816090 RCX: 00007f4abe59c799 [ 517.352796][T11583] RDX: 0000000000183841 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 517.352806][T11583] RBP: 00007f4abe632c99 R08: 0000000000000000 R09: 0000000000000000 [ 517.352815][T11583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 517.352823][T11583] R13: 00007f4abe816128 R14: 00007f4abe816090 R15: 00007ffed2672e38 [ 517.352844][T11583] [ 517.710205][T11579] could not allocate digest TFM handle [ 518.478940][T11583] FAULT_INJECTION: forcing a failure. [ 518.478940][T11583] name failslab, interval 1, probability 0, space 0, times 0 [ 518.540414][T11583] CPU: 0 UID: 0 PID: 11583 Comm: syz.3.1086 Tainted: G U L syzkaller #0 PREEMPT(full) [ 518.540443][T11583] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 518.540449][T11583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 518.540458][T11583] Call Trace: [ 518.540464][T11583] [ 518.540470][T11583] dump_stack_lvl+0x100/0x190 [ 518.540498][T11583] should_fail_ex.cold+0x5/0xa [ 518.540517][T11583] should_failslab+0xc2/0x120 [ 518.540532][T11583] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 518.540556][T11583] ? register_pidns_sysctls+0x48/0x1c0 [ 518.540576][T11583] ? rcu_is_watching+0x12/0xc0 [ 518.540600][T11583] kmemdup_noprof+0x29/0x60 [ 518.540646][T11583] register_pidns_sysctls+0x48/0x1c0 [ 518.540666][T11583] ? __ns_common_init+0x299/0x4b0 [ 518.540690][T11583] copy_pid_ns+0x680/0x10a0 [ 518.540708][T11583] ? __pfx_copy_pid_ns+0x10/0x10 [ 518.540725][T11583] ? rcu_is_watching+0x12/0xc0 [ 518.540747][T11583] ? copy_mnt_ns+0x106/0xc30 [ 518.540764][T11583] ? create_new_namespaces+0x30/0xac0 [ 518.540783][T11583] create_new_namespaces+0x2aa/0xac0 [ 518.540803][T11583] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 518.540820][T11583] ksys_unshare+0x473/0xad0 [ 518.540840][T11583] ? __pfx_ksys_unshare+0x10/0x10 [ 518.540865][T11583] __x64_sys_unshare+0x31/0x40 [ 518.540882][T11583] do_syscall_64+0x106/0xf80 [ 518.540901][T11583] ? clear_bhb_loop+0x40/0x90 [ 518.540919][T11583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.540935][T11583] RIP: 0033:0x7f4abe59c799 [ 518.540948][T11583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.540964][T11583] RSP: 002b:00007f4abf3a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 518.540978][T11583] RAX: ffffffffffffffda RBX: 00007f4abe816090 RCX: 00007f4abe59c799 [ 518.540988][T11583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 518.540997][T11583] RBP: 00007f4abe632c99 R08: 0000000000000000 R09: 0000000000000000 [ 518.541006][T11583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 518.541014][T11583] R13: 00007f4abe816128 R14: 00007f4abe816090 R15: 00007ffed2672e38 [ 518.541035][T11583] [ 519.202683][T11621] can: request_module (can-proto-4) failed. [ 519.707401][T11619] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 519.720448][T11619] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 519.727935][T11619] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 519.742463][T11619] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 519.758208][T11619] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 519.772491][T11619] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 520.402524][ T29] audit: type=1800 audit(1773445289.214:9): pid=11652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1102" name="dbroot" dev="configfs" ino=257425 res=0 errno=0 [ 520.624406][T11668] FAULT_INJECTION: forcing a failure. [ 520.624406][T11668] name failslab, interval 1, probability 0, space 0, times 0 [ 520.652521][T11652] zswap: compressor not available [ 521.044531][T11668] CPU: 0 UID: 0 PID: 11668 Comm: syz.6.1105 Tainted: G U L syzkaller #0 PREEMPT(full) [ 521.044562][T11668] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 521.044568][T11668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 521.044577][T11668] Call Trace: [ 521.044582][T11668] [ 521.044589][T11668] dump_stack_lvl+0x100/0x190 [ 521.044616][T11668] should_fail_ex.cold+0x5/0xa [ 521.044635][T11668] should_failslab+0xc2/0x120 [ 521.044651][T11668] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 521.044674][T11668] ? sk_prot_alloc+0x60/0x2a0 [ 521.044688][T11668] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 521.044708][T11668] ? security_inode_alloc+0x3b/0x2c0 [ 521.044726][T11668] sk_prot_alloc+0x60/0x2a0 [ 521.044741][T11668] sk_alloc+0x36/0xe80 [ 521.044760][T11668] __vsock_create.constprop.0+0x3c/0xba0 [ 521.044847][T11668] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 521.044873][T11668] vsock_create+0x126/0x510 [ 521.044893][T11668] __sock_create+0x339/0x860 [ 521.044913][T11668] __sys_socket+0x14d/0x260 [ 521.044929][T11668] ? __pfx___sys_socket+0x10/0x10 [ 521.044951][T11668] __x64_sys_socket+0x72/0xb0 [ 521.044966][T11668] ? lockdep_hardirqs_on+0x78/0x100 [ 521.044985][T11668] do_syscall_64+0x106/0xf80 [ 521.045003][T11668] ? clear_bhb_loop+0x40/0x90 [ 521.045021][T11668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.045036][T11668] RIP: 0033:0x7fc9fb39c799 [ 521.045050][T11668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.045064][T11668] RSP: 002b:00007fc9f95f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 521.045079][T11668] RAX: ffffffffffffffda RBX: 00007fc9fb615fa0 RCX: 00007fc9fb39c799 [ 521.045090][T11668] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000028 [ 521.045098][T11668] RBP: 00007fc9fb432c99 R08: 0000000000000000 R09: 0000000000000000 [ 521.045107][T11668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.045116][T11668] R13: 00007fc9fb616038 R14: 00007fc9fb615fa0 R15: 00007ffea56f3bb8 [ 521.045137][T11668] [ 521.339275][T10214] Bluetooth: hci2: command 0x0c1a tx timeout [ 521.504624][T11674] can: request_module (can-proto-4) failed. [ 521.794727][T10944] Bluetooth: hci5: command 0x0c1a tx timeout [ 521.800740][T10944] Bluetooth: hci1: command 0x0c1a tx timeout [ 521.809314][T10214] Bluetooth: hci0: command 0x0c1a tx timeout [ 521.815523][T10214] Bluetooth: hci4: command 0x0c1a tx timeout [ 521.821521][T10214] Bluetooth: hci3: command 0x0c1a tx timeout [ 522.034163][T11688] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 522.741106][ T29] audit: type=1326 audit(1773445291.552:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11712 comm="syz.1.1114" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8935f9c799 code=0x0 [ 522.815597][T11714] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 524.368478][ T29] audit: type=1800 audit(1773445293.122:11): pid=11724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1117" name="dbroot" dev="configfs" ino=257761 res=0 errno=0 [ 524.634571][T11724] zswap: compressor not available [ 524.745817][T11722] netlink: 'syz.7.1125': attribute type 14 has an invalid length. [ 524.782690][T11722] netlink: 330 bytes leftover after parsing attributes in process `syz.7.1125'. [ 527.692576][T11802] can: request_module (can-proto-4) failed. [ 528.757046][T11808] could not allocate digest TFM handle [ 530.900783][T11863] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1142'. [ 532.007431][T11877] could not allocate digest TFM handle [ 532.738103][T11896] nbd: must specify at least one socket [ 534.400183][T11926] FAULT_INJECTION: forcing a failure. [ 534.400183][T11926] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 534.450321][T11926] CPU: 0 UID: 0 PID: 11926 Comm: syz.7.1153 Tainted: G U L syzkaller #0 PREEMPT(full) [ 534.450352][T11926] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 534.450358][T11926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 534.450368][T11926] Call Trace: [ 534.450373][T11926] [ 534.450379][T11926] dump_stack_lvl+0x100/0x190 [ 534.450408][T11926] should_fail_ex.cold+0x5/0xa [ 534.450423][T11926] ? prepare_alloc_pages+0x16d/0x5f0 [ 534.450442][T11926] should_fail_alloc_page+0xeb/0x140 [ 534.450460][T11926] prepare_alloc_pages+0x1f0/0x5f0 [ 534.450478][T11926] ? __pfx___might_resched+0x10/0x10 [ 534.450498][T11926] ? prepare_alloc_pages+0x16d/0x5f0 [ 534.450516][T11926] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 534.450539][T11926] ? rcu_is_watching+0x12/0xc0 [ 534.450561][T11926] ? trace_mm_page_alloc+0x17a/0x1d0 [ 534.450578][T11926] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 534.450599][T11926] ? prepare_alloc_pages+0x16d/0x5f0 [ 534.450618][T11926] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 534.450640][T11926] ? rcu_is_watching+0x12/0xc0 [ 534.450664][T11926] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 534.450693][T11926] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 534.450717][T11926] ? policy_nodemask+0xed/0x4f0 [ 534.450734][T11926] alloc_pages_mpol+0x1fb/0x550 [ 534.450750][T11926] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 534.450764][T11926] ? policy_nodemask+0xed/0x4f0 [ 534.450783][T11926] ? __pfx_alloc_pgt_page+0x10/0x10 [ 534.450827][T11926] alloc_pages_noprof+0x131/0x390 [ 534.450844][T11926] kimage_alloc_pages+0x72/0x380 [ 534.450871][T11926] ? __pfx_alloc_pgt_page+0x10/0x10 [ 534.450897][T11926] kimage_alloc_control_pages+0x157/0xa20 [ 534.450918][T11926] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 534.450933][T11926] ? kimage_alloc_control_pages+0x3f7/0xa20 [ 534.450953][T11926] ? __pfx_alloc_pgt_page+0x10/0x10 [ 534.450971][T11926] alloc_pgt_page+0x17/0xb0 [ 534.450989][T11926] ident_pud_init+0x203/0x3d0 [ 534.451014][T11926] ident_p4d_init+0xd8/0x330 [ 534.451038][T11926] kernel_ident_mapping_init+0x334/0x4c0 [ 534.451063][T11926] machine_kexec_prepare+0x392/0x14d0 [ 534.451087][T11926] ? __pfx_machine_kexec_prepare+0x10/0x10 [ 534.451107][T11926] ? __pfx_alloc_pgt_page+0x10/0x10 [ 534.451127][T11926] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 534.451148][T11926] do_kexec_load+0x32c/0x810 [ 534.451166][T11926] ? __pfx_do_kexec_load+0x10/0x10 [ 534.451183][T11926] ? _copy_from_user+0x59/0xd0 [ 534.451262][T11926] __x64_sys_kexec_load+0x1bf/0x230 [ 534.451281][T11926] do_syscall_64+0x106/0xf80 [ 534.451302][T11926] ? clear_bhb_loop+0x40/0x90 [ 534.451321][T11926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.451337][T11926] RIP: 0033:0x7fc0e8b9c799 [ 534.451351][T11926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.451365][T11926] RSP: 002b:00007fc0e998e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 534.451380][T11926] RAX: ffffffffffffffda RBX: 00007fc0e8e16090 RCX: 00007fc0e8b9c799 [ 534.451390][T11926] RDX: 0000200000000080 RSI: 0000000000000002 RDI: 00000000ffffffff [ 534.451400][T11926] RBP: 00007fc0e8c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 534.451409][T11926] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 534.451419][T11926] R13: 00007fc0e8e16128 R14: 00007fc0e8e16090 R15: 00007fff2d5f81c8 [ 534.451438][T11926] [ 535.623176][T11930] can: request_module (can-proto-4) failed. [ 536.616485][T11936] could not allocate digest TFM handle [ 537.288133][T11952] nbd: must specify at least one socket [ 540.527769][T11994] could not allocate digest TFM handle [ 540.726263][T12011] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1171'. [ 540.760329][T12011] macsec0: entered promiscuous mode [ 540.783173][T12011] macsec0: entered allmulticast mode [ 540.803241][T12011] veth1_macvtap: entered allmulticast mode [ 542.597844][T12040] can: request_module (can-proto-4) failed. [ 544.538284][T12053] could not allocate digest TFM handle [ 545.153318][T12079] NFSD: Failed to start, no listeners configured. [ 546.179665][T12097] FAULT_INJECTION: forcing a failure. [ 546.179665][T12097] name fail_futex, interval 1, probability 0, space 0, times 0 [ 546.243102][T12103] can: request_module (can-proto-4) failed. [ 546.251470][T12097] CPU: 0 UID: 0 PID: 12097 Comm: syz.1.1189 Tainted: G U L syzkaller #0 PREEMPT(full) [ 546.251498][T12097] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 546.251504][T12097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 546.251513][T12097] Call Trace: [ 546.251519][T12097] [ 546.251525][T12097] dump_stack_lvl+0x100/0x190 [ 546.251552][T12097] should_fail_ex.cold+0x5/0xa [ 546.251571][T12097] get_futex_key+0x1d2/0x1620 [ 546.251592][T12097] ? __pfx_get_futex_key+0x10/0x10 [ 546.251615][T12097] futex_wait_setup+0x83/0x510 [ 546.251642][T12097] __futex_wait+0x19f/0x300 [ 546.251666][T12097] ? __pfx___futex_wait+0x10/0x10 [ 546.251691][T12097] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 546.251712][T12097] ? lockdep_hardirqs_on+0x78/0x100 [ 546.251734][T12097] ? __pfx_futex_wake_mark+0x10/0x10 [ 546.251760][T12097] ? futex_hash+0x2c5/0x380 [ 546.251783][T12097] futex_wait+0xed/0x380 [ 546.251805][T12097] ? __pfx_futex_wait+0x10/0x10 [ 546.251837][T12097] do_futex+0x1ef/0x350 [ 546.251856][T12097] ? __pfx_do_futex+0x10/0x10 [ 546.251873][T12097] ? __fget_files+0x215/0x3d0 [ 546.251892][T12097] __x64_sys_futex+0x34f/0x4d0 [ 546.251913][T12097] ? __pfx___x64_sys_futex+0x10/0x10 [ 546.251931][T12097] ? __sys_setsockopt+0x139/0x190 [ 546.251957][T12097] do_syscall_64+0x106/0xf80 [ 546.251976][T12097] ? clear_bhb_loop+0x40/0x90 [ 546.251994][T12097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.252010][T12097] RIP: 0033:0x7f8935f9c799 [ 546.252023][T12097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.252037][T12097] RSP: 002b:00007f8936e500e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 546.252052][T12097] RAX: ffffffffffffffda RBX: 00007f8936216098 RCX: 00007f8935f9c799 [ 546.252062][T12097] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8936216098 [ 546.252070][T12097] RBP: 00007f8936216090 R08: 0000000000000000 R09: 0000000000000000 [ 546.252079][T12097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 546.252087][T12097] R13: 00007f8936216128 R14: 00007ffc1ed40c20 R15: 00007ffc1ed40d08 [ 546.252106][T12097] [ 548.269862][T10649] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 548.280006][T10649] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 548.288294][T10649] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 548.296480][T10649] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 548.305059][T10649] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 549.033758][T12133] chnl_net:caif_netlink_parms(): no params data found [ 549.060050][T12153] FAULT_INJECTION: forcing a failure. [ 549.060050][T12153] name failslab, interval 1, probability 0, space 0, times 0 [ 549.097086][T12144] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1199'. [ 549.110072][T12153] CPU: 0 UID: 0 PID: 12153 Comm: syz.7.1201 Tainted: G U L syzkaller #0 PREEMPT(full) [ 549.110110][T12153] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 549.110116][T12153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 549.110126][T12153] Call Trace: [ 549.110131][T12153] [ 549.110137][T12153] dump_stack_lvl+0x100/0x190 [ 549.110166][T12153] should_fail_ex.cold+0x5/0xa [ 549.110185][T12153] should_failslab+0xc2/0x120 [ 549.110201][T12153] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 549.110223][T12153] ? __kernfs_new_node+0xd2/0x960 [ 549.110243][T12153] ? __lock_acquire+0x4a5/0x2630 [ 549.110265][T12153] __kernfs_new_node+0xd2/0x960 [ 549.110283][T12153] ? __kernel_text_address+0xd/0x30 [ 549.110307][T12153] ? __pfx___kernfs_new_node+0x10/0x10 [ 549.110326][T12153] ? do_raw_spin_lock+0x128/0x260 [ 549.110351][T12153] ? find_held_lock+0x2b/0x80 [ 549.110364][T12153] ? kernfs_root+0xee/0x2a0 [ 549.110383][T12153] ? kernfs_root+0xee/0x2a0 [ 549.110407][T12153] kernfs_new_node+0x11b/0x1a0 [ 549.110432][T12153] kernfs_create_dir_ns+0x4c/0x1a0 [ 549.110457][T12153] sysfs_create_dir_ns+0x13a/0x2b0 [ 549.110478][T12153] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 549.110498][T12153] ? kfree_const+0x5a/0x70 [ 549.110519][T12153] ? rcu_is_watching+0x12/0xc0 [ 549.110540][T12153] ? kfree_const+0x5a/0x70 [ 549.110559][T12153] ? kfree+0x2ec/0x6b0 [ 549.110579][T12153] kobject_add_internal+0x2c8/0x930 [ 549.110606][T12153] kobject_add+0x16a/0x1e0 [ 549.110628][T12153] ? __pfx_kobject_add+0x10/0x10 [ 549.110661][T12153] kobject_create_and_add+0x7a/0xc0 [ 549.110676][T12153] __add_disk+0x66f/0xe40 [ 549.110700][T12153] ? find_held_lock+0x2b/0x80 [ 549.110716][T12153] add_disk_fwnode+0x3d4/0x5c0 [ 549.110742][T12153] zram_add+0x4d2/0x610 [ 549.110832][T12153] ? __pfx_zram_add+0x10/0x10 [ 549.110865][T12153] ? find_held_lock+0x2b/0x80 [ 549.110879][T12153] ? sysfs_file_kobj+0xe4/0x290 [ 549.110899][T12153] ? __pfx_hot_add_show+0x10/0x10 [ 549.110919][T12153] hot_add_show+0x21/0x80 [ 549.110938][T12153] class_attr_show+0x72/0xa0 [ 549.110955][T12153] ? __pfx_class_attr_show+0x10/0x10 [ 549.110970][T12153] sysfs_kf_seq_show+0x217/0x3a0 [ 549.110992][T12153] seq_read_iter+0x32f/0x1270 [ 549.111022][T12153] kernfs_fop_read_iter+0x46c/0x610 [ 549.111039][T12153] ? rw_verify_area+0xce/0x6d0 [ 549.111059][T12153] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 549.111077][T12153] vfs_read+0x825/0xb30 [ 549.111111][T12153] ? __pfx_vfs_read+0x10/0x10 [ 549.111147][T12153] ksys_read+0x12a/0x250 [ 549.111171][T12153] ? __pfx_ksys_read+0x10/0x10 [ 549.111200][T12153] do_syscall_64+0x106/0xf80 [ 549.111218][T12153] ? clear_bhb_loop+0x40/0x90 [ 549.111237][T12153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.111252][T12153] RIP: 0033:0x7fc0e8b9c799 [ 549.111266][T12153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.111280][T12153] RSP: 002b:00007fc0e99af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 549.111295][T12153] RAX: ffffffffffffffda RBX: 00007fc0e8e15fa0 RCX: 00007fc0e8b9c799 [ 549.111305][T12153] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000005 [ 549.111315][T12153] RBP: 00007fc0e8c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 549.111324][T12153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 549.111333][T12153] R13: 00007fc0e8e16038 R14: 00007fc0e8e15fa0 R15: 00007fff2d5f81c8 [ 549.111354][T12153] [ 549.111363][T12153] kobject: kobject_add_internal failed for holders (error: -12 parent: zram1) [ 550.403065][T10649] Bluetooth: hci6: command tx timeout [ 550.416420][T12133] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.423616][T12133] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.431209][T12133] bridge_slave_0: entered allmulticast mode [ 550.438291][T12133] bridge_slave_0: entered promiscuous mode [ 550.454661][T12133] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.464738][T12133] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.482830][T12133] bridge_slave_1: entered allmulticast mode [ 550.503362][T12133] bridge_slave_1: entered promiscuous mode [ 550.567342][T12153] kobject: kobject_create_and_add: kobject_add error: -12 [ 550.622500][T12133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.688058][T12133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.568721][T12171] could not allocate digest TFM handle [ 551.629920][T12133] team0: Port device team_slave_0 added [ 551.662942][T12133] team0: Port device team_slave_1 added [ 551.801127][T12133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.833227][T12133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.942348][T12133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.982034][T12178] FAULT_INJECTION: forcing a failure. [ 551.982034][T12178] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 552.011323][T12133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.018274][T12133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.079073][T12178] CPU: 0 UID: 0 PID: 12178 Comm: syz.6.1206 Tainted: G U L syzkaller #0 PREEMPT(full) [ 552.079101][T12178] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 552.079107][T12178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 552.079117][T12178] Call Trace: [ 552.079122][T12178] [ 552.079128][T12178] dump_stack_lvl+0x100/0x190 [ 552.079155][T12178] should_fail_ex.cold+0x5/0xa [ 552.079170][T12178] ? prepare_alloc_pages+0x16d/0x5f0 [ 552.079189][T12178] should_fail_alloc_page+0xeb/0x140 [ 552.079206][T12178] prepare_alloc_pages+0x1f0/0x5f0 [ 552.079225][T12178] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 552.079250][T12178] ? get_page_from_freelist+0x111d/0x3140 [ 552.079276][T12178] ? __pfx___might_resched+0x10/0x10 [ 552.079296][T12178] ? prepare_alloc_pages+0x16d/0x5f0 [ 552.079313][T12178] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 552.079337][T12178] ? rcu_is_watching+0x12/0xc0 [ 552.079358][T12178] ? trace_mm_page_alloc+0x17a/0x1d0 [ 552.079376][T12178] ? is_bpf_text_address+0x8a/0x1a0 [ 552.079398][T12178] ? is_bpf_text_address+0x8a/0x1a0 [ 552.079419][T12178] ? bpf_ksym_find+0x124/0x1c0 [ 552.079436][T12178] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 552.079452][T12178] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 552.079477][T12178] ? policy_nodemask+0xed/0x4f0 [ 552.079494][T12178] alloc_pages_mpol+0x1fb/0x550 [ 552.079510][T12178] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 552.079530][T12178] alloc_pages_noprof+0x131/0x390 [ 552.079551][T12178] kimage_alloc_pages+0x72/0x380 [ 552.079577][T12178] kimage_alloc_control_pages+0x157/0xa20 [ 552.079593][T12178] ? policy_nodemask+0xa0/0x4f0 [ 552.079612][T12178] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 552.079627][T12178] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 552.079647][T12178] alloc_pgt_page+0x17/0xb0 [ 552.079666][T12178] machine_kexec_prepare+0x1a7/0x14d0 [ 552.079691][T12178] ? __pfx_machine_kexec_prepare+0x10/0x10 [ 552.079711][T12178] ? __pfx_alloc_pgt_page+0x10/0x10 [ 552.079731][T12178] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 552.079752][T12178] do_kexec_load+0x32c/0x810 [ 552.079770][T12178] ? __pfx_do_kexec_load+0x10/0x10 [ 552.079787][T12178] ? _copy_from_user+0x59/0xd0 [ 552.079806][T12178] __x64_sys_kexec_load+0x1bf/0x230 [ 552.079824][T12178] do_syscall_64+0x106/0xf80 [ 552.079844][T12178] ? clear_bhb_loop+0x40/0x90 [ 552.079863][T12178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.079878][T12178] RIP: 0033:0x7fc9fb39c799 [ 552.079899][T12178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.079914][T12178] RSP: 002b:00007fc9f95f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 552.079929][T12178] RAX: ffffffffffffffda RBX: 00007fc9fb615fa0 RCX: 00007fc9fb39c799 [ 552.079939][T12178] RDX: 0000200000000080 RSI: 0000000000000002 RDI: 00000000ffffffff [ 552.079949][T12178] RBP: 00007fc9fb432c99 R08: 0000000000000000 R09: 0000000000000000 [ 552.079957][T12178] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 552.079966][T12178] R13: 00007fc9fb616038 R14: 00007fc9fb615fa0 R15: 00007ffea56f3bb8 [ 552.079987][T12178] [ 552.477953][T12133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.514636][T12133] hsr_slave_0: entered promiscuous mode [ 552.521086][T12133] hsr_slave_1: entered promiscuous mode [ 552.527159][T12133] debugfs: 'hsr0' already exists in 'hsr' [ 552.533021][T12133] Cannot create hsr debugfs directory [ 552.662545][T10649] Bluetooth: hci6: command tx timeout [ 552.670489][T12190] FAULT_INJECTION: forcing a failure. [ 552.670489][T12190] name failslab, interval 1, probability 0, space 0, times 0 [ 552.683171][T12190] CPU: 0 UID: 0 PID: 12190 Comm: syz.7.1209 Tainted: G U L syzkaller #0 PREEMPT(full) [ 552.683197][T12190] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 552.683203][T12190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 552.683212][T12190] Call Trace: [ 552.683218][T12190] [ 552.683224][T12190] dump_stack_lvl+0x100/0x190 [ 552.683252][T12190] should_fail_ex.cold+0x5/0xa [ 552.683271][T12190] should_failslab+0xc2/0x120 [ 552.683287][T12190] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 552.683309][T12190] ? __proc_create+0x2cb/0x8c0 [ 552.683336][T12190] __proc_create+0x2cb/0x8c0 [ 552.683358][T12190] ? __pfx___proc_create+0x10/0x10 [ 552.683384][T12190] ? _raw_spin_unlock+0x28/0x50 [ 552.683405][T12190] proc_create_reg+0x75/0x170 [ 552.683421][T12190] proc_create_net_data+0x8e/0x1c0 [ 552.683436][T12190] ? __pfx_proc_create_net_data+0x10/0x10 [ 552.683455][T12190] ? __pfx_arp_net_init+0x10/0x10 [ 552.683471][T12190] arp_net_init+0x53/0x80 [ 552.683484][T12190] ops_init+0x1e2/0x5f0 [ 552.683508][T12190] setup_net+0x118/0x3a0 [ 552.683529][T12190] ? __pfx_setup_net+0x10/0x10 [ 552.683548][T12190] ? lockdep_init_map_type+0x5c/0x250 [ 552.683568][T12190] ? mutex_init_lockep+0x110/0x150 [ 552.683590][T12190] copy_net_ns+0x46f/0x7c0 [ 552.683614][T12190] create_new_namespaces+0x3ea/0xac0 [ 552.683635][T12190] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 552.683653][T12190] ksys_unshare+0x473/0xad0 [ 552.683672][T12190] ? __pfx_ksys_unshare+0x10/0x10 [ 552.683697][T12190] __x64_sys_unshare+0x31/0x40 [ 552.683715][T12190] do_syscall_64+0x106/0xf80 [ 552.683733][T12190] ? clear_bhb_loop+0x40/0x90 [ 552.683752][T12190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.683767][T12190] RIP: 0033:0x7fc0e8b9c799 [ 552.683780][T12190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.683795][T12190] RSP: 002b:00007fc0e99af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 552.683809][T12190] RAX: ffffffffffffffda RBX: 00007fc0e8e15fa0 RCX: 00007fc0e8b9c799 [ 552.683819][T12190] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 552.683828][T12190] RBP: 00007fc0e8c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 552.683837][T12190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.683845][T12190] R13: 00007fc0e8e16038 R14: 00007fc0e8e15fa0 R15: 00007fff2d5f81c8 [ 552.683866][T12190] [ 553.025040][T12133] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 553.045124][T12133] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 553.060345][T12133] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 553.147060][T12196] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 553.200576][T12133] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 554.500720][T12133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.691529][T10944] Bluetooth: hci6: command tx timeout [ 555.259963][T12133] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.268026][T12213] could not allocate digest TFM handle [ 555.346704][T10921] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.353861][T10921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.498361][T10921] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.505553][T10921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.985735][T12228] NFSD: Failed to start, no listeners configured. [ 556.406281][T12133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 556.777333][T10944] Bluetooth: hci6: command tx timeout [ 557.264197][T12133] veth0_vlan: entered promiscuous mode [ 557.318376][T12133] veth1_vlan: entered promiscuous mode [ 557.437587][T12133] veth0_macvtap: entered promiscuous mode [ 557.488103][T12133] veth1_macvtap: entered promiscuous mode [ 557.546906][T12133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 557.606001][T12133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 557.689239][T10921] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.725416][T10921] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.785060][T10921] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.814502][T10921] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.843861][T12266] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1223'. [ 558.131052][T10916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.157439][T12269] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1224'. [ 558.167610][T10916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.261465][T12269] bond0: (slave bond_slave_0): Releasing backup interface [ 558.377193][T10921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.422933][T10921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.709455][T12326] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1234'. [ 562.618832][T12356] could not allocate digest TFM handle [ 562.868770][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.877282][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.480646][T12383] ptp ptp0: new virtual clock ptp1 [ 563.506968][T12383] ptp ptp0: guarantee physical clock free running [ 564.655384][T12397] could not allocate digest TFM handle [ 566.587095][T12438] FAULT_INJECTION: forcing a failure. [ 566.587095][T12438] name failslab, interval 1, probability 0, space 0, times 0 [ 566.641230][T12438] CPU: 0 UID: 0 PID: 12438 Comm: syz.6.1261 Tainted: G U L syzkaller #0 PREEMPT(full) [ 566.641258][T12438] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 566.641263][T12438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 566.641272][T12438] Call Trace: [ 566.641277][T12438] [ 566.641283][T12438] dump_stack_lvl+0x100/0x190 [ 566.641311][T12438] should_fail_ex.cold+0x5/0xa [ 566.641329][T12438] should_failslab+0xc2/0x120 [ 566.641345][T12438] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 566.641367][T12438] ? ptlock_alloc+0x1f/0x70 [ 566.641390][T12438] ptlock_alloc+0x1f/0x70 [ 566.641408][T12438] pte_alloc_one+0x82/0x3d0 [ 566.641426][T12438] do_fault+0x88e/0x1990 [ 566.641442][T12438] ? __pmd_alloc+0x3fb/0x950 [ 566.641460][T12438] __handle_mm_fault+0x180f/0x2b60 [ 566.641483][T12438] ? mt_find+0x45e/0x8e0 [ 566.641506][T12438] ? __pfx___handle_mm_fault+0x10/0x10 [ 566.641524][T12438] ? __pfx_mt_find+0x10/0x10 [ 566.641556][T12438] ? find_vma+0xbf/0x140 [ 566.641569][T12438] ? __pfx_find_vma+0x10/0x10 [ 566.641585][T12438] handle_mm_fault+0x36d/0xa20 [ 566.641609][T12438] do_user_addr_fault+0x74c/0x12f0 [ 566.641638][T12438] exc_page_fault+0x6f/0xd0 [ 566.641658][T12438] asm_exc_page_fault+0x26/0x30 [ 566.641673][T12438] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 566.641689][T12438] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 93 04 00 66 66 [ 566.641703][T12438] RSP: 0018:ffffc900048c7ab8 EFLAGS: 00050202 [ 566.641715][T12438] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000007 [ 566.641724][T12438] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc900048c7b18 [ 566.641733][T12438] RBP: 0000000000000007 R08: 0000000000000001 R09: fffff52000918f63 [ 566.641750][T12438] R10: ffffc900048c7b1e R11: 0000000000000000 R12: 0000000000000000 [ 566.641758][T12438] R13: ffffc900048c7b18 R14: ffffc900048c7be0 R15: ffffc900048c7b18 [ 566.641778][T12438] _copy_from_user+0x98/0xd0 [ 566.641797][T12438] kstrtouint_from_user+0xd6/0x1d0 [ 566.641818][T12438] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 566.641838][T12438] ? __lock_acquire+0x4a5/0x2630 [ 566.641859][T12438] ? iovec_from_user+0xda/0x140 [ 566.641880][T12438] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 566.641898][T12438] proc_fail_nth_write+0x83/0x220 [ 566.641916][T12438] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 566.641939][T12438] vfs_writev+0x5ea/0xe10 [ 566.641961][T12438] ? rcu_is_watching+0x12/0xc0 [ 566.641988][T12438] ? __pfx_vfs_writev+0x10/0x10 [ 566.642008][T12438] ? fdget_pos+0x2aa/0x380 [ 566.642038][T12438] ? __fget_files+0x21f/0x3d0 [ 566.642056][T12438] ? do_writev+0x13e/0x340 [ 566.642076][T12438] do_writev+0x13e/0x340 [ 566.642098][T12438] ? __pfx_do_writev+0x10/0x10 [ 566.642125][T12438] do_syscall_64+0x106/0xf80 [ 566.642144][T12438] ? clear_bhb_loop+0x40/0x90 [ 566.642162][T12438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.642177][T12438] RIP: 0033:0x7fc9fb39c799 [ 566.642189][T12438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.642203][T12438] RSP: 002b:00007fc9f95f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 566.642216][T12438] RAX: ffffffffffffffda RBX: 00007fc9fb615fa0 RCX: 00007fc9fb39c799 [ 566.642225][T12438] RDX: 0000000000000003 RSI: 0000200000000200 RDI: 0000000000000005 [ 566.642234][T12438] RBP: 00007fc9fb432c99 R08: 0000000000000000 R09: 0000000000000000 [ 566.642242][T12438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 566.642250][T12438] R13: 00007fc9fb616038 R14: 00007fc9fb615fa0 R15: 00007ffea56f3bb8 [ 566.642270][T12438] [ 567.264921][T12443] could not allocate digest TFM handle [ 569.689835][T12470] ptp ptp0: guarantee physical clock free running [ 569.787397][T12473] could not allocate digest TFM handle [ 569.829794][T12484] .^: entered promiscuous mode [ 571.625652][T12512] ;^ʳ [ 571.625652][T12512] _WN &NQ: KtRukB%̓]>n2JX)Q56BHy:*EIӔ[_p]=F3יmDRX hqJZ0uBTZ3k [ 571.625652][T12512] 3'Ǩk ͂ς4\Ģ~}4 [ 571.875464][T12519] futex_wake_op: syz.8.1282 tries to shift op by -2048; fix this program [ 572.020089][T12519] futex_wake_op: syz.8.1282 tries to shift op by -2048; fix this program [ 572.852361][T12525] could not allocate digest TFM handle [ 572.900976][T12534] openvswitch: .^: Dropping previously announced user features [ 574.105338][T12541] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 574.269968][T12540] ptp ptp0: guarantee physical clock free running [ 574.609031][T12549] Invalid ELF header magic: != ELF [ 575.956606][T12567] could not allocate digest TFM handle [ 576.160732][T12583] openvswitch: .^: Dropping previously announced user features [ 577.343454][T12634] aoe: could not set interface list: too many interfaces [ 577.732479][T12649] .^: entered promiscuous mode [ 578.117635][T12640] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 578.163752][T12640] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 578.184187][T12640] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 578.206708][T12640] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 578.236259][T12640] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 578.252547][T12640] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 578.271539][T12640] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 578.294799][T12640] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 578.495855][T12665] netlink: 'syz.7.1314': attribute type 11 has an invalid length. [ 579.488081][T12683] openvswitch: .^: Dropping previously announced user features [ 579.743852][T10944] Bluetooth: hci2: command 0x0c1a tx timeout [ 580.224062][T10944] Bluetooth: hci1: command 0x0c1a tx timeout [ 580.230131][T10649] Bluetooth: hci0: command 0x0c1a tx timeout [ 580.236298][T10214] Bluetooth: hci4: command 0x0c1a tx timeout [ 580.305342][T10944] Bluetooth: hci6: command 0x0c1a tx timeout [ 580.311387][T10649] Bluetooth: hci5: command 0x0c1a tx timeout [ 580.694440][T12703] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 580.729461][T12703] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 580.755589][T12703] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 580.782009][T12703] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 580.816934][T12703] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 580.834280][T12703] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 582.226656][T10944] Bluetooth: hci2: command 0x0c1a tx timeout [ 582.790030][T10944] Bluetooth: hci1: command 0x0c1a tx timeout [ 582.797603][T10649] Bluetooth: hci0: command 0x0c1a tx timeout [ 582.803604][T10649] Bluetooth: hci4: command 0x0c1a tx timeout [ 582.872165][T10944] Bluetooth: hci6: command 0x0c1a tx timeout [ 582.878268][T10649] Bluetooth: hci5: command 0x0c1a tx timeout [ 584.434926][T12766] openvswitch: .^: Dropping previously announced user features [ 584.629631][ T30] INFO: task kworker/u10:3:10220 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 584.900462][ T30] Tainted: G U L syzkaller #0 [ 584.947810][T10649] Bluetooth: hci6: command 0x0c1a tx timeout [ 585.330529][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 585.466335][ T30] task:kworker/u10:3 state:D stack:27448 pid:10220 tgid:10220 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 585.535397][ T30] Workqueue: netns cleanup_net [ 585.557458][ T30] Call Trace: [ 585.571698][ T30] [ 585.584451][ T30] __schedule+0xfee/0x6120 [ 585.631143][ T30] ? __lock_acquire+0x4a5/0x2630 [ 585.636139][ T30] ? __pfx___schedule+0x10/0x10 [ 585.667797][ T30] ? find_held_lock+0x2b/0x80 [ 585.672506][ T30] ? schedule+0x2bf/0x390 [ 585.696445][ T30] schedule+0xdd/0x390 [ 585.713974][ T30] schedule_timeout+0x1b2/0x280 [ 585.727885][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 585.746975][ T30] ? mark_held_locks+0x40/0x70 [ 585.751772][ T30] __wait_for_common+0x2e7/0x4c0 [ 585.856530][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 585.861939][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 585.934284][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 585.986737][ T30] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 585.992583][ T30] __flush_workqueue+0x3f7/0x1200 [ 586.007617][ T30] ? __lock_acquire+0x4a5/0x2630 [ 586.012589][ T30] ? __lock_acquire+0x4a5/0x2630 [ 586.028590][ T30] ? __pfx___flush_workqueue+0x10/0x10 [ 586.034078][ T30] ? reacquire_held_locks+0xce/0x1e0 [ 586.050549][ T30] ? __pfx_sock_def_readable+0x10/0x10 [ 586.056043][ T30] ? __pfx_sock_def_readable+0x10/0x10 [ 586.063804][ T30] rds_tcp_listen_stop+0x104/0x160 [ 586.070368][ T30] rds_tcp_exit_net+0xe0/0x870 [ 586.075142][ T30] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 586.080915][ T30] ? __pfx___might_resched+0x10/0x10 [ 586.086210][ T30] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 586.091881][ T30] ops_undo_list+0x2ee/0xab0 [ 586.096482][ T30] ? __pfx_ops_undo_list+0x10/0x10 [ 586.101870][ T30] ? cleanup_net+0x332/0x920 [ 586.106465][ T30] ? idr_destroy+0x62/0x2e0 [ 586.111228][ T30] cleanup_net+0x499/0x920 [ 586.115649][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 586.122438][ T30] ? rcu_is_watching+0x12/0xc0 [ 586.127434][ T30] process_one_work+0x9d7/0x1920 [ 586.132401][ T30] ? __pfx_process_one_work+0x10/0x10 [ 586.139451][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 586.147631][ T30] worker_thread+0x5da/0xe40 [ 586.152251][ T30] ? __pfx_worker_thread+0x10/0x10 [ 586.157700][ T30] ? kthread+0x13a/0x450 [ 586.161953][ T30] ? __pfx_worker_thread+0x10/0x10 [ 586.169282][ T30] kthread+0x370/0x450 [ 586.173365][ T30] ? __pfx_kthread+0x10/0x10 [ 586.179479][ T30] ret_from_fork+0x754/0xd80 [ 586.184158][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 586.189591][ T30] ? rcu_is_watching+0x12/0xc0 [ 586.194360][ T30] ? __switch_to+0x7b4/0x1120 [ 586.199510][ T30] ? __pfx_kthread+0x10/0x10 [ 586.204121][ T30] ret_from_fork_asm+0x1a/0x30 [ 586.209283][ T30] [ 586.323132][ T30] [ 586.323132][ T30] Showing all locks held in the system: [ 586.368860][ T30] 1 lock held by khungtaskd/30: [ 586.373730][ T30] #0: ffffffff8e7e73e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 586.486846][ T30] 3 locks held by kworker/u10:3/10220: [ 586.492328][ T30] #0: ffff88801c6ae948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 586.596918][ T30] #1: ffffc9000f7dfd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 586.638316][ T30] #2: ffffffff905fb550 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 586.707114][ T30] 1 lock held by syz.4.878/10461: [ 586.712155][ T30] #0: ffffffff905fb550 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 586.797003][ T30] 1 lock held by syz.5.925/10687: [ 586.802048][ T30] #0: ffffffff905fb550 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 586.894380][ T30] 2 locks held by getty/11108: [ 586.907231][ T30] #0: ffff8880389110a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 586.942738][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 586.987601][ T30] 1 lock held by syz.6.1105/11672: [ 586.992730][ T30] #0: ffffffff90613da8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 587.002193][ T30] 1 lock held by syz.3.1148/11893: [ 587.007531][ T30] #0: ffffffff905fb550 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 587.016936][ T30] 2 locks held by syz.7.1212/12206: [ 587.022401][ T30] #0: ffffffff90613da8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 587.034258][ T30] #1: ffffffff8e7f2ff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 587.045082][ T30] 1 lock held by syz.8.1288/12552: [ 587.050368][ T30] #0: ffffffff90613da8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 587.059607][ T30] 1 lock held by syz.1.1325/12715: [ 587.069018][ T30] #0: ffffffff90613da8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 587.108904][ T30] [ 587.111251][ T30] ============================================= [ 587.111251][ T30] [ 587.148993][ T30] NMI backtrace for cpu 0 [ 587.149012][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 587.149035][ T30] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 587.149040][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 587.149049][ T30] Call Trace: [ 587.149054][ T30] [ 587.149060][ T30] dump_stack_lvl+0x100/0x190 [ 587.149088][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 587.149111][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 587.149134][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 587.149153][ T30] sys_info+0x141/0x190 [ 587.149176][ T30] watchdog+0xd25/0x1050 [ 587.149195][ T30] ? __pfx_watchdog+0x10/0x10 [ 587.149216][ T30] ? __kthread_parkme+0x18c/0x230 [ 587.149235][ T30] ? kthread+0x13a/0x450 [ 587.149253][ T30] ? __pfx_watchdog+0x10/0x10 [ 587.149265][ T30] kthread+0x370/0x450 [ 587.149283][ T30] ? __pfx_kthread+0x10/0x10 [ 587.149302][ T30] ret_from_fork+0x754/0xd80 [ 587.149325][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 587.149348][ T30] ? __switch_to+0x7b4/0x1120 [ 587.149364][ T30] ? __pfx_kthread+0x10/0x10 [ 587.149384][ T30] ret_from_fork_asm+0x1a/0x30 [ 587.149408][ T30] [ 587.388181][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 587.395059][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 587.405727][ T30] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 587.410903][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 587.420964][ T30] Call Trace: [ 587.424247][ T30] [ 587.427181][ T30] dump_stack_lvl+0x100/0x190 [ 587.431888][ T30] vpanic+0x552/0x970 [ 587.435885][ T30] ? __pfx_vpanic+0x10/0x10 [ 587.440414][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 587.446579][ T30] panic+0xd1/0xe0 [ 587.450303][ T30] ? __pfx_panic+0x10/0x10 [ 587.454725][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 587.460890][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 587.467058][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 587.473226][ T30] ? watchdog.cold+0x198/0x1ca [ 587.478016][ T30] ? watchdog+0xd35/0x1050 [ 587.482435][ T30] watchdog.cold+0x1a9/0x1ca [ 587.487029][ T30] ? __pfx_watchdog+0x10/0x10 [ 587.491708][ T30] ? __kthread_parkme+0x18c/0x230 [ 587.496737][ T30] ? kthread+0x13a/0x450 [ 587.500972][ T30] ? __pfx_watchdog+0x10/0x10 [ 587.505636][ T30] kthread+0x370/0x450 [ 587.509699][ T30] ? __pfx_kthread+0x10/0x10 [ 587.514288][ T30] ret_from_fork+0x754/0xd80 [ 587.518876][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 587.523984][ T30] ? __switch_to+0x7b4/0x1120 [ 587.528665][ T30] ? __pfx_kthread+0x10/0x10 [ 587.533262][ T30] ret_from_fork_asm+0x1a/0x30 [ 587.538048][ T30] [ 587.541128][ T30] Kernel Offset: disabled [ 587.545467][ T30] Rebooting in 86400 seconds..