last executing test programs: 2m39.858144726s ago: executing program 0 (id=2050): mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x11, 0x80003, 0xab) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4) r1 = socket(0x10, 0x2, 0x4) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0xfe, 0x6fb3, 0x8a, 0x9, 0xffffffffffffffff, [0x100, 0x9, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0x4, 0xf08a2b3}, {0x0, 0xfc, 0x6, 0x0, 0x0, 0xf89, 0x9, 0x837, 0x8}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb) socket(0x11, 0x80003, 0x300) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = epoll_create$auto(0x8800001) epoll_ctl$auto(r3, 0x1, 0xffffffffffffffff, 0x0) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000800) ioctl$auto_FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) ioctl$auto_UBI_IOCATT(0xffffffffffffffff, 0x40186f40, 0x0) 2m39.546967493s ago: executing program 0 (id=2051): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0) write$auto(r0, &(0x7f0000000180)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6', 0x5) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) preadv$auto(0x3, 0x0, 0x3, 0xf8, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) readv$auto(0x3, 0x0, 0x1) io_uring_setup$auto(0x59, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clock_adjtime$auto(0x354d, 0x0) syz_clone3(&(0x7f0000000100)={0x2100000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) rt_sigsuspend$auto(0x0, 0x8) 2m38.439242488s ago: executing program 0 (id=2057): ioctl$auto_UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x8}) mmap$auto(0x0, 0x40009, 0xdf, 0x400000000009b72, r0, 0x28002) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) semctl$auto(0x7, 0x2, 0x13, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0xfffffffe, 0x44f, 0xa, 0x10, 0x100717d, 0x0, 0x62, 0x7, 0x800, 0x0, 0x26, 0x4, 0x200003fffffe, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x401, 0x862, 0xf, 0x22002, 0x2f1a, 0x0, 0x7fff, 0x6, 0xa3, 0x0, 0x0, 0xb626, [0xfffffffffffffffe, 0xffffffffffff04ef, 0x4, 0x7, 0x0, 0x0, 0x52d2, 0x0, 0x0, 0x9e, 0x0, 0xa7, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x40, 0x81, 0x8a0, 0xb, 0x81, 0x0, 0x4, 0xfffffffffffffffa, 0x0, 0x1004, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100002, 0x0, 0x3ff, 0x6, 0x0, 0x0, 0x7ff, 0x0, 0x4000000000000]}, 0x800000000000b, 0xb9) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffff7effffd0d, &(0x7f00000001c0)) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0xff00) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x200480d4}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) 2m38.19297357s ago: executing program 0 (id=2059): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D3\x00', 0x200a41, 0x0) bpf$auto(0x8000000, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/mem\x00', 0x40, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000002c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1d\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"P\x8a\xbbY8@Z5`\xa2\x9aSVd\x1d\xac\xe8\x90e\x9d\x03tm\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7.\xbe\x01\x98\xd7l\x00\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfa\xf0\xd9\xc0K\x8b\xa3c\x00'/160, 0xa9) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x20000054) write$auto(0xffffffffffffffff, 0x0, 0x81) write$auto(0xffffffffffffffff, 0x0, 0x98c7) ppoll$auto(0x0, 0x5, &(0x7f00000002c0)={0x1, 0x8000000000000001}, 0x0, 0x8) mmap$auto(0x0, 0x2000d, 0x4, 0xeb1, 0xffffffffffffffff, 0x6000000000) shmctl$auto_SHM_LOCK(0x2, 0xb, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x4c2080, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x400008000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r0, 0x8000) ioctl$auto_BLKRRPART(r0, 0x125f, 0x2a) madvise$auto(0x0, 0x400053, 0x9) 2m37.609458157s ago: executing program 0 (id=2062): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x5, 0x4, 0x7) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x42800, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x22002, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/mem\x00', 0x200, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2, 0x5, 0x0) r0 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) io_uring_enter$auto(r0, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) move_pages$auto(0x0, 0xa, 0x0, 0x0, 0x0, 0x2) writev$auto(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040), 0xfff}, 0x3) io_uring_enter$auto(0x3, 0x5, 0x5f3, 0x3, 0x0, 0x2) 2m35.589671836s ago: executing program 0 (id=2065): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x2c, 0x3, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x101202, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) prctl$auto(0x41, 0x7, 0x0, 0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x10, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4048) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/net/xfrm_stat\x00', 0x5612c1, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x5}, 0xa) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x7, 0x28000) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) socketpair$auto(0x200001e, 0x8, 0x80000000, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x3, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0x7, 0xd, 0x1, 0x948d, 0x5, 0x7, 0x3, 0x8003, 0x65, 0x8000001f, 0x1000, 0x100000000006d3e, 0x9, 0x1, 0x8]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 2m20.15587522s ago: executing program 32 (id=2065): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x2c, 0x3, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x101202, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) prctl$auto(0x41, 0x7, 0x0, 0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x10, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4048) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/net/xfrm_stat\x00', 0x5612c1, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x5}, 0xa) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x7, 0x28000) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) socketpair$auto(0x200001e, 0x8, 0x80000000, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x3, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0x7, 0xd, 0x1, 0x948d, 0x5, 0x7, 0x3, 0x8003, 0x65, 0x8000001f, 0x1000, 0x100000000006d3e, 0x9, 0x1, 0x8]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 2m8.005467947s ago: executing program 4 (id=2152): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffffff, &(0x7f0000000000)="706f3a82d9e5cc7c2ceda8d50bfc94be9fe6c22ffaf8493a38", 0x19) r0 = socket(0xa, 0x5, 0x84) sendto$auto(r0, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "000000000000fe8000"}, 0x1f) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) timer_create$auto(0x0, 0x0, 0x0) timer_gettime$auto(0x0, 0x0) timer_getoverrun$auto(0xc) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r2, 0x301, 0x70bd2c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x15}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4019}, 0x0) r3 = pidfd_open$auto(0x1, 0x0) ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) mmap$auto(0x0, 0x2000b, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) sendmsg$auto_NL80211_CMD_SET_BEACON(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xffffffffffffff51, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x605, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_BSS_SELECT={0x8, 0xe3, 0x0, 0x1, [@typed={0x4, 0x30}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x22040040) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x4605, 0x0) 2m7.67928558s ago: executing program 4 (id=2153): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x1000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) recvmmsg$auto(r2, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0) r5 = openat$auto_fops_x16_ro_(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/dormant_links\x00', 0x8040, 0x0) io_uring_register$auto_IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000280)="b4dc694efa1149efce5bd03c592600a75e6cc91e39f5aebeed", 0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) r6 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r6, 0x80004507, 0x10000000000402) madvise$auto(0x8000, 0x87fff, 0xc) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)={0x20, r1, 0x27c9d9d5b13b6c03, 0x70bd25, 0x25dfdbfe, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x2}, @HWSIM_ATTR_MULTI_RADIO={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x404c884}, 0x64004890) fcntl$getown(r0, 0x9) poll$auto(&(0x7f0000000000)={r0, 0x2, 0x1}, 0x4, 0x9cff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 2m6.974745517s ago: executing program 4 (id=2155): openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x80042, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}, 0x1, 0x0, 0x0, 0x48080}, 0x4c100) recvmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r1, 0x0, 0xffffff4b) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, r0, 0x0) epoll_create$auto(0x3e) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$auto(0x5, 0x0, 0x171) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) capset$auto(0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001d40), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc031}, 0x44) 2m6.276251023s ago: executing program 4 (id=2157): prctl$auto(0x3e, 0x800000000001, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) open(0x0, 0x0, 0x110) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x680, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, 0x0, 0x40, 0x0) syz_genetlink_get_family_id$auto_nlbl_cipsov4(0x0, 0xffffffffffffffff) r0 = prctl$auto(0x29206, 0x1, 0x4, 0x6, 0x8) mmap$auto(0x2, 0x1, 0x8000000000000003, 0x8000000000000010, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4000, 0x0) 2m5.331176821s ago: executing program 4 (id=2164): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xa4602, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r1, &(0x7f0000000340)="28a4", 0x2) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r2 = socket(0x2, 0x1, 0x106) ioctl$auto_NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x3, 0xb, 0x210, 0x4008df3, 0x6) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000380), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r2) capset$auto(&(0x7f0000000100)={0x1, 0x0}, &(0x7f0000000180)={0x8, 0xe00, 0x7fff}) getpgid$auto(r3) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400b0}, 0x800) connect$auto(0x3, 0x0, 0x55) 2m4.327320032s ago: executing program 4 (id=2167): unshare$auto(0x40000080) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000000)) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = io_uring_setup$auto(0x5, 0x0) close_range$auto(0x2, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d) listen$auto(0x3, 0x81) socket(0x2, 0x1, 0x0) socket(0x29, 0x2, 0x0) r2 = socket(0x2b, 0x1, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x8d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x6, 0x62, 0x4000008000001d, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(r2, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 1m49.11423735s ago: executing program 33 (id=2167): unshare$auto(0x40000080) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000000)) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = io_uring_setup$auto(0x5, 0x0) close_range$auto(0x2, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d) listen$auto(0x3, 0x81) socket(0x2, 0x1, 0x0) socket(0x29, 0x2, 0x0) r2 = socket(0x2b, 0x1, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x8d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x6, 0x62, 0x4000008000001d, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(r2, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 1m33.090828308s ago: executing program 3 (id=2227): unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/mtd/mtd0/mtdblock0/queue/write_cache\x00', 0x182b02, 0x0) sendfile$auto(r0, r0, 0x0, 0xea) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x24048084) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/system/node/node1/distance\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) userfaultfd$auto(0x1) epoll_create$auto(0x0) r2 = socket(0x15, 0x5, 0x0) setsockopt$auto(r2, 0x114, 0x1, 0x0, 0x1b) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80302, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/mm/ksm/max_page_sharing\x00', 0x400, 0x0) 1m32.489954086s ago: executing program 3 (id=2230): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) r1 = epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) socket(0x2, 0x1, 0x106) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdc, 0xeb5, 0x401, 0x41) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) renameat2$auto(r3, 0x0, r3, 0x0, 0x5) ioctl$auto_USB_RAW_IOCTL_EP_SET_HALT(r1, 0x4004550d, &(0x7f0000000180)=0x798) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0xf}, 0x3, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0xe07, 0x8000000000000001, 0x80000001, 0x7, 0x6d3f, 0x9, 0x8, 0x4]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000440)={[0x10000000001ff, 0x4, 0xd, 0xffffffffffffffff, 0x3, 0x10, 0x2, 0x2, 0x5, 0x62, 0x80000026, 0x7, 0x6d3e, 0x8, 0xd, 0x40000000001]}, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x1a5d80, 0x0) socket(0xa, 0x3, 0x3b) select$auto(0xf, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0xfffffffffffffffe, 0x8f, 0x3, 0x9487, 0x0, 0x15f4da09, 0x0, 0xfffffffffffffffa, 0x20000000000005f, 0x6, 0x1040000000000007, 0x6d41, 0x0, 0x5, 0x7]}, 0x0) 1m31.354475596s ago: executing program 3 (id=2233): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x5, 0xfffffffe, 0x0) madvise$auto(0x80, 0x9, 0x1a) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0xffffffffffffffff, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80000, 0x0) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) timerfd_create$auto(0xb, 0x5) mq_timedsend$auto(r0, &(0x7f00000001c0)='\x00', 0x6, 0x5, &(0x7f0000000200)={0x12000000000000, 0x7}) mmap$auto(0x0, 0x3, 0x1000000000001, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto(0xca, &(0x7f0000000140)='\x042\x01\f\r\a\x00\xf6OL\xc8\xbe\x94\xf2\xa2\x00\xfb\x84(\x83\";\xa8\xd7\x05uXR\xa3\xb3@T\x89\x8e\xd4Q\xdd\xb80\xc7\xad\\\xf7C\xb3\x8f\r?\xb3>r\xdf\x99%\xd6s\xe3\x8b*\xe2\xbc\xc9\x8bV\xf0\xb7\xec.\xae\xe1\x04\x00\x00\x00\xaa', 0x2da) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x29, 0x2, 0x0) accept$auto(0x3, 0x0, 0x0) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r1) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)={0x2e20, r2, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2e07}]}, 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) lsm_list_modules$auto(&(0x7f0000000000)=0x2, &(0x7f0000000040)=0x5, 0x6) 1m30.740234466s ago: executing program 3 (id=2237): unshare$auto(0x40000080) r0 = gettid() kill$auto(r0, 0x11) prctl$auto(0x3e, 0x7, r0, 0x3, 0xfffe0000) r1 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) signalfd4$auto(r1, &(0x7f0000000000)={0x7f}, 0x5, 0x4) madvise$auto(0x0, 0xffffffffffff0005, 0x19) rt_sigprocmask$auto(0xffffffff, 0x0, 0x0, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/ptp/ptp0/max_vclocks\x00', 0x103841, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/nullb0/queue/nr_requests\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) write$auto(0x3, 0x0, 0x5c8) r3 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000003640)='/proc/self/numa_maps\x00', 0x40080, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) lseek$auto(r3, 0x7ff, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 1m25.759121608s ago: executing program 3 (id=2252): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r0, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) pwrite64$auto(0xc8, 0x0, 0x4e, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/fs/ocfs2/cluster_stack\x00', 0x88282, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0x100, 0x0) fanotify_init$auto(0x65, 0x2) socket(0x22, 0x3, 0x0) clone$auto(0x7fff, 0xff, 0x0, 0x0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r2, &(0x7f0000000000)='-\xd3', 0xfdef) 1m24.859809965s ago: executing program 3 (id=2256): r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) setsockopt$auto(r0, 0x1, 0x12, 0x0, 0xeb66) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/net_prio.ifpriomap\x00', 0x10b142, 0x0) sendfile$auto(r1, r1, 0x0, 0x5) unshare$auto(0x40000080) socket(0x18, 0x800, 0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) prctl$auto(0x35, 0x0, 0x10, 0x0, 0x0) prctl$auto(0x34, 0x0, 0x0, 0x0, 0x0) getsockopt$auto_SO_RCVLOWAT(r3, 0x0, 0x12, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_BTRFS_IOC_ENCODED_WRITE_32(r3, 0x40789440, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000240)="de199e246bdea868eda64397c044c6e6ef4e6128b7", 0x12, 0x0, 0x9, 0x0, 0x1f, 0xa}, 0x800009}, 0x0, 0x20000000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg1\x00', 0x800, 0x0) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x6, 0x0) 1m9.736228632s ago: executing program 34 (id=2256): r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) setsockopt$auto(r0, 0x1, 0x12, 0x0, 0xeb66) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/net_prio.ifpriomap\x00', 0x10b142, 0x0) sendfile$auto(r1, r1, 0x0, 0x5) unshare$auto(0x40000080) socket(0x18, 0x800, 0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) prctl$auto(0x35, 0x0, 0x10, 0x0, 0x0) prctl$auto(0x34, 0x0, 0x0, 0x0, 0x0) getsockopt$auto_SO_RCVLOWAT(r3, 0x0, 0x12, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_BTRFS_IOC_ENCODED_WRITE_32(r3, 0x40789440, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000240)="de199e246bdea868eda64397c044c6e6ef4e6128b7", 0x12, 0x0, 0x9, 0x0, 0x1f, 0xa}, 0x800009}, 0x0, 0x20000000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg1\x00', 0x800, 0x0) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x6, 0x0) 1m2.822041854s ago: executing program 6 (id=2307): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x20011, 0x0, 0x0, 0x0, 0x0, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r0 = socket(0x1d, 0x2, 0x7) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r3}, 0x18) sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2a742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r4, 0x28000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, 0x0) prctl$auto_PR_SET_MM_START_BRK(0x200, 0x6, 0x0, 0x1ff, 0x3c0) 1m0.95443416s ago: executing program 6 (id=2330): mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x40000b, 0xdf, 0x9b72, 0x2, 0x108000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) futex$auto(0x0, 0x1, 0x40000006, 0x0, 0x0, 0x80000001) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r1 = socket(0xa, 0x3, 0xff) connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) shmget$auto(0x8, 0x10563, 0x568d1af2) write$auto_proc_mem_operations_base(r0, &(0x7f0000001680)="a7", 0xfffffc96) mmap$auto(0x0, 0x400, 0xfffffffffffffffa, 0xeb1, 0x401, 0x8000) madvise$auto(0x4, 0x2004, 0x15) 59.227300901s ago: executing program 5 (id=2336): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3914) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:480/min_ratio_fine\x00', 0x2062, 0x0) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) socket(0xa, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003040), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x20008800) mbind$auto(0x0, 0x2091d2, 0x1, 0x0, 0x7, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) ioctl$auto_SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, 0x0) brk$auto(0x8) fstat$auto(0xffffffffffffffff, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) mmap$auto(0x0, 0x4, 0x4000000000e3, 0x40eb1, 0x401, 0x300000000000) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') socket(0x2, 0xa, 0x1) statx$auto(0xffffff9c, 0x0, 0x1000, 0x0, 0x0) ioctl$auto(0x1, 0x890b, 0x8) 58.523054003s ago: executing program 5 (id=2340): madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x5, 0x4, 0x7) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x42800, 0x0) r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x200, 0x0) read$auto_proc_mem_operations_base(r0, &(0x7f0000000200)=""/81, 0x51) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2, 0x5, 0x0) r1 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x80) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) io_uring_enter$auto(r1, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) move_pages$auto(0x0, 0xa, 0x0, 0x0, 0x0, 0x2) writev$auto(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040), 0xfff}, 0x3) write$auto(0xffffffffffffffff, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) io_setup$auto(0xe, &(0x7f0000000080)) 58.030562554s ago: executing program 6 (id=2343): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0xffffffffffffffff, 0x4018620d, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/platform/vhci_hcd.5/usb20/manufacturer\x00', 0x102b42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) unshare$auto(0x40000080) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000001080)='/proc/self/mountinfo\x00', 0x121302, 0x0) socket(0x10, 0x2, 0x6) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) write$auto(0x3, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) 56.83219024s ago: executing program 5 (id=2345): mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) close_range$auto(0x2, 0x8000, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x26dc2, 0x84) io_uring_setup$auto(0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_ADD_NAN_FUNCTION(r0, 0x0, 0x4000000) close_range$auto(0x2, 0x8000, 0x0) r2 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x401, r2, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x2, 0x0, 0xc) bpf$auto(0x0, 0x0, 0x8a4) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x0, 0x1, 0x42, 0x200000000065f, 0x401ffde, 0x7, 0x3, 0x2, 0x100, 0x3eb, 0x5, 0x2, 0x3000, 0x2, 0x6, 0x10003, 0x82, 0x4, 0x0, 0x5, 0x1ffb, 0x203, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x80000000, 0x4, 0xfffffffffffffffc, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffbfffc, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x7fff]}, 0x7, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000040)={0x0, 0x8d}, 0x1, 0x0, 0x7, 0xa505}, 0x800}, 0x400, 0x4004) 55.668322222s ago: executing program 5 (id=2347): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0x8030ae7c, 0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, 0x0, 0x202, 0xd) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x100000003, 0xd77, 0x7, 0x7181, 0x81, 0x7, 0x3, 0x9a89, 0x5, 0x80005, 0x800, 0x1fffffffffff, 0xb4, 0x3, 0x2, 0x10007, 0x80, 0xfffffffffffffffc, 0x0, 0xa, 0x22004, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1, [0x0, 0x0, 0xea4, 0x9cf, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x100000000, 0x40000000000, 0x3, 0x4, 0x5, 0x80800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xcc, 0x4000000002, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x100000000]}, 0x1fe, 0xe) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x3f, &(0x7f0000000380)={&(0x7f0000001040), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xda5c}, 0x80000000}, 0x7, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) 55.496787308s ago: executing program 5 (id=2348): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x80802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x103280, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/01.3\x00', 0x40d01, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001bc0)='/dev/sequencer2\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/012/001\x00', 0x360240, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28b42, 0x0) clone$auto(0x20003b46, 0x7, 0x0, 0x0, 0x4) open(0x0, 0x261c2, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r0, 0x0, 0xc3) 55.386993451s ago: executing program 5 (id=2349): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) unshare$auto(0x2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x4, 0x3, 0x3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x102, 0x0) bpf$auto(0x2, 0x0, 0x1) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) 42.939027166s ago: executing program 35 (id=2343): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0xffffffffffffffff, 0x4018620d, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/platform/vhci_hcd.5/usb20/manufacturer\x00', 0x102b42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) unshare$auto(0x40000080) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000001080)='/proc/self/mountinfo\x00', 0x121302, 0x0) socket(0x10, 0x2, 0x6) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) write$auto(0x3, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) 39.94044003s ago: executing program 36 (id=2349): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) unshare$auto(0x2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x4, 0x3, 0x3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x102, 0x0) bpf$auto(0x2, 0x0, 0x1) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) 9.420012066s ago: executing program 7 (id=2497): syz_clone(0x2c108411, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400dac82d030897ad01778b1a4a0e570000", @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r1, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0x2) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) prctl$auto(0x1000000003b, 0x800000000000001, 0x0, 0xfffffffffffffffd, 0x7) fcntl$auto_F_CREATED_QUERY(r1, 0x404, 0x0) getcpu$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/binderfs/binder0\x00', 0x8100, 0x0) ioctl$auto_BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) read$auto_state_fops_(r3, &(0x7f0000000280)=""/75, 0x4b) 8.271566178s ago: executing program 8 (id=2501): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = bpf$auto(0x8000000, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xa9) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r0, 0x0, 0x24044044) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000d, 0x4, 0xeb1, 0xffffffffffffffff, 0x6000000000) shmctl$auto_SHM_LOCK(0x2, 0xb, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x4c2080, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x400008000) r2 = socketpair$auto(0x0, 0x1000, 0x7fffffff, 0x0) close_range$auto(r2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) ioctl$auto(0x3, 0x6f50, 0xffffffffffffffff) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r1, 0x8000) ioctl$auto_BLKRRPART(r1, 0x125f, 0x0) madvise$auto(0x0, 0x400053, 0x9) 8.063368726s ago: executing program 7 (id=2502): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x14, 0x0, 0x1b, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44000884}, 0xc880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/fib_multipath_hash_fields\x00', 0x202, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0xff) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\b\x05s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 7.098700873s ago: executing program 8 (id=2508): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) ioctl$auto_BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000500)={0x8, 0x3, 0x3ac, 0x8, {0x1, 0x8000, 0xb, 0x3, 0x8, 0x4, 0x9, 0x2, 0xe, 0xa5, 0x1, 0x4, 0x0, 0xf, 0xff}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto_proc_oom_adj_operations_base(r0, &(0x7f00000000c0), 0x0) r2 = socket(0x2, 0x1, 0x0) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={r2, 0x0, 0x856, 0x189, 0x8, 0x7fff, 0x7fff, 0x10000, 0xc91a, 0x7, 0x5, 0x3, 0x3, 0x3, 0x6}, 0x1) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) r3 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000080), 0x20140, 0x0) ioctl$auto_IOCTL_STOP_ACCEL_DEV(r3, 0x40096101, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r4, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680), 0x0) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) 6.576840364s ago: executing program 7 (id=2509): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = socket(0x1d, 0x1, 0x7fff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) r3 = socket(0x18, 0x5, 0x1) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), r0) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r3, 0x0, 0x30004850) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r4, 0x4b47, 0x1) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bus/usb/037/001\x00', 0x40001, 0x0) mmap$auto(0x0, 0x404008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_USBDEVFS_CONTROL(r5, 0xc0185500, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x4c440, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) 5.718990815s ago: executing program 8 (id=2512): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x80002, 0x0) mmap$auto(0x8, 0x2020009, 0x3, 0x800002000000eb1, r0, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000080)={@siginfo_0_0={0x7, 0x0, 0xfffff801, @_timer={0x0, 0x1, @sival_ptr=&(0x7f0000000000)="e8b77a75819188771133f92b02e5f9da100917d58607decd5d99ae2624b99b8e05b0c7a2749e4d2f6ece18ac186b1469e4919b32ef02136578c8d06d8092721e28e57db007d6c8bcc9888e620cef0e18932fbdb6194835131632f41e1684aecde7cd0fcf5196d03339e2f789c45b69", 0x8001}}}, 0x1000, &(0x7f0000000100)={{0x3, 0x3}, {0x4, 0x100000001}, 0x4, 0xe2d, 0x2, 0xfc, 0x2f, 0x4, 0x62c3, 0xa, 0xff, 0xffffffffffff6fdd, 0x9, 0x7, 0xf0}) r2 = prctl$auto(0x1000000003b, 0x1000000000000001, r1, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) acct$auto(0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0xc800) r3 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x40482, 0x0) writev$auto(r3, &(0x7f0000000000)={&(0x7f0000000000), 0x4}, 0x2) r4 = openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$auto_VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f00000001c0)={0x1, r4}) r5 = epoll_create$auto(0x3e) epoll_ctl$auto(r5, 0x1, 0xffffffffffffffff, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r6, 0x40084d02, r6) quotactl_fd$auto(0x0, 0x80000201, 0x0, 0xfffffffffffffffd) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) acct$auto(&(0x7f0000000200)='/*/-\x00') 3.520968791s ago: executing program 7 (id=2517): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x5, 0x4, 0x7) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x42800, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x22002, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/mem\x00', 0x200, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2, 0x5, 0x0) r0 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) io_uring_enter$auto(r0, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) move_pages$auto(0x0, 0xa, 0x0, 0x0, 0x0, 0x2) writev$auto(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040), 0xfff}, 0x3) io_uring_enter$auto(0x3, 0x5, 0x5f3, 0x3, 0x0, 0x2) 3.505220723s ago: executing program 2 (id=2526): openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x403, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000881}, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r0, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x28000, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) open(0x0, 0x163340, 0x6a) setsockopt$auto(0xffffffffffffffff, 0x1, 0x6, 0x0, 0xc089) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x40200, 0x0) 3.495130654s ago: executing program 8 (id=2519): mmap$auto(0x0, 0x2020009, 0x3, 0x1bc, 0xfffffffffffffffa, 0x8000) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x2001, 0x0) syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x7, 0x0) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x8640, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) preadv$auto(0x3, 0x0, 0x3, 0x2, 0x13) r1 = setfsuid$auto(0xee00) setreuid$auto(r1, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x582, 0x0) acct$auto(0x0) pread64$auto(r0, 0x0, 0xffffffff, 0x200) r2 = openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$auto_TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)=0x5) 3.114317716s ago: executing program 1 (id=2520): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D3\x00', 0x200a41, 0x0) bpf$auto(0x8000000, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000002c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1d\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"P\x8a\xbbY8@Z5`\xa2\x9aSVd\x1d\xac\xe8\x90e\x9d\x03tm\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7.\xbe\x01\x98\xd7l\x00\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfa\xf0\xd9\xc0K\x8b\xa3c\x00'/160, 0xa9) write$auto(0xffffffffffffffff, 0x0, 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2000d, 0x4, 0xeb1, 0xffffffffffffffff, 0x6000000000) shmctl$auto_SHM_LOCK(0x2, 0xb, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x4c2080, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x400008000) r1 = socketpair$auto(0x0, 0x1000, 0x7fffffff, 0x0) close_range$auto(r1, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) ioctl$auto(0x3, 0x6f50, 0xffffffffffffffff) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r0, 0x8000) ioctl$auto_BLKRRPART(r0, 0x125f, 0x0) madvise$auto(0x0, 0x400053, 0x9) 2.527199186s ago: executing program 1 (id=2521): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1}, 0x6a) sendto$auto(r0, 0x0, 0x6fffff9, 0xfffffff8, &(0x7f0000000440)=@can, 0x36) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r2 = socket(0x1d, 0x2, 0x7) r3 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r2, &(0x7f0000000000)=@can={0x1d, r4}, 0x6a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@can, 0x18) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x1ffcc}, 0x1, 0x0, 0x0, 0x6b6}, 0x7}, 0x3, 0xff) 2.411852637s ago: executing program 8 (id=2522): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x3, 0x2, 0x73) socket(0xa, 0x1, 0x84) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0x8) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyv8\x00', 0x8040, 0x0) read$auto(0xffffffffffffffff, &(0x7f00000001c0)='/dev/ptyv8\x00', 0x6) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socketpair$auto(0x7, 0x5, 0x8000000000000000, 0x0) acct$auto(0x0) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/pci_bus/0000:00/rescan\x00', 0xc2801, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) unshare$auto(0x40000080) 1.896464442s ago: executing program 7 (id=2523): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r0, 0x0, 0x81) write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) clock_nanosleep$auto(0x2, 0x6, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) syz_clone(0x80f400, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0xffffffffffffffff, 0x64cf, 0x1df) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), r1) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r2, 0x1b, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000080), 0xffffffffffffffff) getpid() setresuid$auto(0xffffffffffffffff, 0x0, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 1.893705423s ago: executing program 2 (id=2532): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0x8030ae7c, 0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/schedstat\x00', 0x100800, 0x0) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, 0x0, 0x202, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x100000003, 0xd77, 0x7, 0x7181, 0x81, 0x7, 0x3, 0x9a89, 0x5, 0x80005, 0x800, 0x1fffffffffff, 0xb4, 0x3, 0x2, 0x10007, 0x80, 0xfffffffffffffffc, 0x0, 0xa, 0x22004, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1, [0x0, 0x0, 0xea4, 0x9cf, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x100000000, 0x40000000000, 0x3, 0x4, 0x5, 0x80800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xcc, 0x4000000002, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x100000000]}, 0x1fe, 0xe) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x3f, &(0x7f0000000380)={&(0x7f0000001040), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xda5c}, 0x80000000}, 0x7, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) 1.531971089s ago: executing program 1 (id=2524): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x103281, 0x0) mmap$auto(0x0, 0x20009, 0x4000000001df, 0xeb1, 0x401, 0x8000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) unshare$auto(0x8000400) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) open(0x0, 0x261c2, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r0, 0x0, 0xc3) 1.5130088s ago: executing program 2 (id=2525): r0 = socket(0x10, 0x2, 0x14) sendmsg$auto_NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x4c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x4}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1000}, @NLBL_MGMT_A_VERSION={0x8, 0x3, 0x68d}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x4}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x400008d) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cec4\x00', 0x10b703, 0x0) ioctl$auto_CEC_S_MODE(r1, 0x40046109, &(0x7f0000002c40)=0xd0) r2 = open(0x0, 0x22240, 0x55) statx$auto(r2, 0x0, 0x2001003, 0x4005, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CQM(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026b29d4669aa39733d00000004005e8008000300", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40800) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x150, r4, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0xfc, 0x21, "ab7955ebff1d077bac847c945aeadbc991b86560157156160e3562f811f2cce660b3205e562e9ef78b713c8bb28f758309cddc197e0c59d1214f6f7d53ede91e4c487370b7858281f45b82525f327a9f7ac91c50e33c480d76850e0ff956fb1da6df2dce88c84f97b0c89ad89687d996e1adc673313c91ad98d87dc260fbac20a8e31e3e612cceb303b7c0d7a1fe17f87c42564ed36ff7914ea4799ef825e1b0e0979aa97cf3ecefb0907b0316e4f7938fe48a0d666014d3a1dd7bc6d5d98c5a294c8ce0bca008bbc5e1915b7518ecf8c7ec5fcd531df28573b44c0618f406fc19f3f21f13c445e3f4b91a639f2986500f95174f734d1ecc"}, @NL80211_ATTR_PMK={0x26, 0xfe, "b8fadc99f059537633fc5e94b3fc198a3fc7e0579f9230e934f1af6fa237619075de"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_TDLS_SUPPORT={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, 0x9}]}, 0x150}, 0x1, 0x0, 0x0, 0x11}, 0x48) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000abe3bbb5d24ad5b89c53128fcd6ecfaca6c64fe1767c693b7beedc890a3011c728026197c3165dac65634035033df59d55a1e896ccfc9603f0753ff615", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fcdbdf251f00000004008300"], 0x18}, 0x1, 0x0, 0x0, 0x84}, 0x45) r7 = prctl$auto_PR_SET_VMA_ANON_NAME(0xffffffab, 0x0, 0xffffffffffffffff, 0x5, 0xa) sendmmsg$auto(r7, &(0x7f0000000640)={{&(0x7f0000000500)="7ab1462c9f3ee1f546549c5f2ba3e5f9ebb03a0c034d1b65cd176f8be430960d67e9687638fe7960d3e9e22abc24e5e088d8b626ca556eeba438444f6f8c4d47fe063929e847df64c1eb6db83c6ef154fb174a0d30fcf46f03dc93e40378c6632ff7593ae3285a2df6a5267780cc6afc012614b15c1a39f5e9", 0x0, &(0x7f00000005c0)={&(0x7f0000000580)="a4191b1a4ffc2c58e5859661b9a313df9d19552d3c1a9a6067d0b554c448e981dd568167172bfdc3e5235c3ae78ef1a0c9374c9af16f005aba317148", 0x5}, 0xfffffffffffffff2, &(0x7f0000000600)="fd256ce6b7d736b5fe0313ba1370b654a11cb9a69cfa6ab823fe36aeb8372db21d7f357f83636e7ae2477282c236", 0x9, 0x4}, 0xffffffff}, 0x7, 0xffffffff) timer_settime$auto(0x4, 0x9, &(0x7f00000000c0)={{0x9, 0x10000}, {0x10000, 0xde}}, &(0x7f0000000280)={{0x5, 0x7fff}, {0xe000000, 0x8}}) 1.353410933s ago: executing program 2 (id=2527): r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000) r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r2) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="ffff2abd7000fedbdf25010000000c0006001000000000000000"], 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setxattrat$auto(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1000, &(0x7f00000000c0)='ns/mnt\x00', 0x0, 0xa7) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) socketcall$auto(0x6, &(0x7f0000000000)=0x6) sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090027bd7000fbdbdf250200000008000800", @ANYRES32=r5, @ANYBLOB="140001800800020006000000080001"], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x3, 0x0, 0x7, 0xa505}, 0x8800}, 0x7, 0x4008) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:01.3/power/control\x00', 0xe3102, 0x0) sendfile$auto(r6, r6, 0x0, 0x2) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x80002, 0x0) write$auto_proc_reg_file_ops_compat_inode(r7, &(0x7f0000000280)="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"/4096, 0x1000) listen$auto(r7, 0x8000) 1.246279166s ago: executing program 8 (id=2528): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x14, r2, 0x1, 0x70bd31, 0x25dfdbfd}, 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) keyctl$auto_KEYCTL_CAPABILITIES(0x1f, 0x3, 0x7, 0x7, 0xbe9) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r4, 0x4001af84, 0x0) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x0) 1.243815546s ago: executing program 1 (id=2537): r0 = socket(0x10, 0x2, 0x14) sendmsg$auto_NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x4c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x4}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1000}, @NLBL_MGMT_A_VERSION={0x8, 0x3, 0x68d}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x4}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x400008d) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cec4\x00', 0x10b703, 0x0) ioctl$auto_CEC_S_MODE(r1, 0x40046109, &(0x7f0000002c40)=0xd0) r2 = open(0x0, 0x22240, 0x55) statx$auto(r2, 0x0, 0x2001003, 0x4005, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_SET_CQM(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026b29d4669aa39733d00000004005e8008000300", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40800) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x150, r4, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0xfc, 0x21, "ab7955ebff1d077bac847c945aeadbc991b86560157156160e3562f811f2cce660b3205e562e9ef78b713c8bb28f758309cddc197e0c59d1214f6f7d53ede91e4c487370b7858281f45b82525f327a9f7ac91c50e33c480d76850e0ff956fb1da6df2dce88c84f97b0c89ad89687d996e1adc673313c91ad98d87dc260fbac20a8e31e3e612cceb303b7c0d7a1fe17f87c42564ed36ff7914ea4799ef825e1b0e0979aa97cf3ecefb0907b0316e4f7938fe48a0d666014d3a1dd7bc6d5d98c5a294c8ce0bca008bbc5e1915b7518ecf8c7ec5fcd531df28573b44c0618f406fc19f3f21f13c445e3f4b91a639f2986500f95174f734d1ecc"}, @NL80211_ATTR_PMK={0x26, 0xfe, "b8fadc99f059537633fc5e94b3fc198a3fc7e0579f9230e934f1af6fa237619075de"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_TDLS_SUPPORT={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, 0x9}]}, 0x150}, 0x1, 0x0, 0x0, 0x11}, 0x48) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000abe3bbb5d24ad5b89c53128fcd6ecfaca6c64fe1767c693b7beedc890a3011c728026197c3165dac65634035033df59d55a1e896ccfc9603f0753ff615", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fcdbdf251f00000004008300"], 0x18}, 0x1, 0x0, 0x0, 0x84}, 0x45) r6 = prctl$auto_PR_SET_VMA_ANON_NAME(0xffffffab, 0x0, 0xffffffffffffffff, 0x5, 0xa) sendmmsg$auto(r6, &(0x7f0000000640)={{&(0x7f0000000500)="7ab1462c9f3ee1f546549c5f2ba3e5f9ebb03a0c034d1b65cd176f8be430960d67e9687638fe7960d3e9e22abc24e5e088d8b626ca556eeba438444f6f8c4d47fe063929e847df64c1eb6db83c6ef154fb174a0d30fcf46f03dc93e40378c6632ff7593ae3285a2df6a5267780cc6afc012614b15c1a39f5e9", 0x0, &(0x7f00000005c0)={&(0x7f0000000580)="a4191b1a4ffc2c58e5859661b9a313df9d19552d3c1a9a6067d0b554c448e981dd568167172bfdc3e5235c3ae78ef1a0c9374c9af16f005aba317148", 0x5}, 0xfffffffffffffff2, &(0x7f0000000600)="fd256ce6b7d736b5fe0313ba1370b654a11cb9a69cfa6ab823fe36aeb8372db21d7f357f83636e7ae2477282c236", 0x9, 0x4}, 0xffffffff}, 0x7, 0xffffffff) timer_settime$auto(0x4, 0x9, &(0x7f00000000c0)={{0x9, 0x10000}, {0x10000, 0xde}}, &(0x7f0000000280)={{0x5, 0x7fff}, {0xe000000, 0x8}}) 1.101334539s ago: executing program 2 (id=2529): mmap$auto(0x20000000000, 0x2000c, 0xdd, 0x20eb1, 0x40000000000a5, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x3) r0 = socket(0x29, 0x2, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x11c602, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) poll$auto(&(0x7f0000000480)={r1, 0xffff, 0x29}, 0x3, 0x8) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x445880, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) lseek$auto(0xffffffffffffffff, 0xffffffffffffbaeb, 0xcd06) sendmsg$auto_ETHTOOL_MSG_EEE_SET(r0, 0x0, 0x4048010) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x5, 0x0) write$auto(r3, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) capset$auto(0x0, &(0x7f00000002c0)={0x1, 0x6, 0x48}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r5, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @inferred=r0}}) write$auto(r5, 0x0, 0x6) process_vm_readv$auto(0x0, &(0x7f0000000180)={0x0, 0x4}, 0x3fffffffffe, 0x0, 0xb, 0x0) ioctl$auto(r4, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) 914.496763ms ago: executing program 1 (id=2530): socket(0xa, 0x3, 0x3a) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x61, 0x100001000000003, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x1, 0x0) r0 = socket(0xa, 0x801, 0x106) setsockopt$auto(r0, 0x6, 0x25, 0x0, 0x9) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8003, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) setfsuid$auto(0xee00) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15a}, 0x6, 0x8, 0x5) write$auto(0x3, 0x0, 0xffd8) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/rpc/use-gss-proxy\x00', 0x0, 0x0) prctl$auto(0x29, 0x17000000, 0x0, 0x0, 0x0) acct$auto(0x0) read$auto(0xffffffffffffffff, 0x0, 0x39b8) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE2(0xffffffffffffffff, 0xc2604110, 0x0) openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, 0x0, 0x40, 0x0) 430.467µs ago: executing program 7 (id=2531): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D3\x00', 0x200a41, 0x0) bpf$auto(0x8000000, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000002c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1d\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"P\x8a\xbbY8@Z5`\xa2\x9aSVd\x1d\xac\xe8\x90e\x9d\x03tm\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7.\xbe\x01\x98\xd7l\x00\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfa\xf0\xd9\xc0K\x8b\xa3c\x00'/160, 0xa9) write$auto(0xffffffffffffffff, 0x0, 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2000d, 0x4, 0xeb1, 0xffffffffffffffff, 0x6000000000) shmctl$auto_SHM_LOCK(0x2, 0xb, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x4c2080, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x400008000) r1 = socketpair$auto(0x0, 0x1000, 0x7fffffff, 0x0) close_range$auto(r1, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) ioctl$auto(0x3, 0x6f50, 0xffffffffffffffff) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r0, 0x8000) ioctl$auto_BLKRRPART(r0, 0x125f, 0x0) madvise$auto(0x0, 0x400053, 0x9) 204.314µs ago: executing program 1 (id=2533): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x5, 0x4, 0x7) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x42800, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x22002, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/mem\x00', 0x200, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2, 0x5, 0x0) r0 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) io_uring_enter$auto(r0, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) move_pages$auto(0x0, 0xa, 0x0, 0x0, 0x0, 0x2) writev$auto(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040), 0xfff}, 0x3) io_uring_enter$auto(0x3, 0x5, 0x5f3, 0x3, 0x0, 0x2) 0s ago: executing program 2 (id=2534): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1}, 0x6a) sendto$auto(r0, 0x0, 0x6fffff9, 0xfffffff8, &(0x7f0000000440)=@can, 0x36) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r2 = socket(0x1d, 0x2, 0x7) r3 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r2, &(0x7f0000000000)=@can={0x1d, r4}, 0x6a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@can, 0x18) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x1ffcc}, 0x1, 0x0, 0x0, 0x6b6}, 0x7}, 0x3, 0xff) kernel console output (not intermixed with test programs): 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.862983][ T8983] RSP: 002b:00007fa762c4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 273.863010][ T8983] RAX: ffffffffffffffda RBX: 00007fa762015fa0 RCX: 00007fa761d9c629 [ 273.863029][ T8983] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 273.863046][ T8983] RBP: 00007fa761e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 273.863068][ T8983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.863084][ T8983] R13: 00007fa762016038 R14: 00007fa762015fa0 R15: 00007ffdf699ad48 [ 273.863122][ T8983] [ 276.025752][ T9010] Setting dangerous option i915.mitigations - tainting kernel [ 276.033453][ T9010] Bad "i915.mitigations=€", '€' is unknown [ 278.005824][ T9039] device-mapper: ioctl: Unable to rename non-existent device,  to ME‘`­i6Ã@fÄCÜ_q{jŸÝOÿ [ 278.270344][ T9042] FAULT_INJECTION: forcing a failure. [ 278.270344][ T9042] name failslab, interval 1, probability 0, space 0, times 0 [ 278.322217][ T9042] CPU: 1 UID: 0 PID: 9042 Comm: syz.0.886 Tainted: G U syzkaller #0 PREEMPT(full) [ 278.322265][ T9042] Tainted: [U]=USER [ 278.322275][ T9042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 278.322291][ T9042] Call Trace: [ 278.322300][ T9042] [ 278.322311][ T9042] dump_stack_lvl+0x100/0x190 [ 278.322358][ T9042] should_fail_ex.cold+0x5/0xa [ 278.322390][ T9042] should_failslab+0xc2/0x120 [ 278.322436][ T9042] __kmalloc_cache_node_noprof+0x7d/0x770 [ 278.322480][ T9042] ? sbitmap_queue_init_node+0x291/0x4a0 [ 278.322521][ T9042] sbitmap_queue_init_node+0x291/0x4a0 [ 278.322561][ T9042] blk_mq_init_tags+0x184/0x300 [ 278.322603][ T9042] blk_mq_alloc_map_and_rqs+0x218/0xeb0 [ 278.322642][ T9042] ? trace_kmalloc+0x101/0x130 [ 278.322675][ T9042] __blk_mq_alloc_map_and_rqs+0x128/0x1f0 [ 278.322715][ T9042] blk_mq_alloc_tag_set+0x7bd/0x1260 [ 278.322771][ T9042] loop_add+0x3b7/0xb60 [ 278.322801][ T9042] ? __pfx_loop_add+0x10/0x10 [ 278.322854][ T9042] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 278.322906][ T9042] loop_control_ioctl+0xae/0x620 [ 278.322938][ T9042] ? __pfx_loop_control_ioctl+0x10/0x10 [ 278.322968][ T9042] ? xfd_validate_state+0x129/0x190 [ 278.323010][ T9042] ? __pfx_loop_control_ioctl+0x10/0x10 [ 278.323042][ T9042] __x64_sys_ioctl+0x18e/0x210 [ 278.323082][ T9042] do_syscall_64+0x106/0xf80 [ 278.323112][ T9042] ? clear_bhb_loop+0x40/0x90 [ 278.323148][ T9042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.323178][ T9042] RIP: 0033:0x7fa761d9c629 [ 278.323201][ T9042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.323227][ T9042] RSP: 002b:00007fa762c4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.323253][ T9042] RAX: ffffffffffffffda RBX: 00007fa762015fa0 RCX: 00007fa761d9c629 [ 278.323272][ T9042] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000002 [ 278.323290][ T9042] RBP: 00007fa761e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 278.323306][ T9042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.323322][ T9042] R13: 00007fa762016038 R14: 00007fa762015fa0 R15: 00007ffdf699ad48 [ 278.323360][ T9042] [ 278.323580][ T9042] blk-mq: reduced tag depth (128 -> 64) [ 278.482992][ T9043] [U] ^\ [ 280.311269][ T9059] FAULT_INJECTION: forcing a failure. [ 280.311269][ T9059] name failslab, interval 1, probability 0, space 0, times 0 [ 280.332131][ T9059] CPU: 1 UID: 0 PID: 9059 Comm: syz.0.894 Tainted: G U syzkaller #0 PREEMPT(full) [ 280.332175][ T9059] Tainted: [U]=USER [ 280.332183][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 280.332199][ T9059] Call Trace: [ 280.332208][ T9059] [ 280.332218][ T9059] dump_stack_lvl+0x100/0x190 [ 280.332264][ T9059] should_fail_ex.cold+0x5/0xa [ 280.332294][ T9059] should_failslab+0xc2/0x120 [ 280.332339][ T9059] __kmalloc_cache_noprof+0x7a/0x6f0 [ 280.332370][ T9059] ? alloc_netdev_mqs+0xe01/0x14f0 [ 280.332405][ T9059] alloc_netdev_mqs+0xe01/0x14f0 [ 280.332444][ T9059] ppp_ioctl+0x906/0x2800 [ 280.332476][ T9059] ? find_held_lock+0x2b/0x80 [ 280.332520][ T9059] ? __pfx_ppp_ioctl+0x10/0x10 [ 280.332552][ T9059] ? __fget_files+0x21f/0x3d0 [ 280.332606][ T9059] ? __pfx_ppp_ioctl+0x10/0x10 [ 280.332634][ T9059] __x64_sys_ioctl+0x18e/0x210 [ 280.332669][ T9059] do_syscall_64+0x106/0xf80 [ 280.332697][ T9059] ? clear_bhb_loop+0x40/0x90 [ 280.332732][ T9059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.332762][ T9059] RIP: 0033:0x7fa761d9c629 [ 280.332784][ T9059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.332810][ T9059] RSP: 002b:00007fa762c4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.332837][ T9059] RAX: ffffffffffffffda RBX: 00007fa762015fa0 RCX: 00007fa761d9c629 [ 280.332856][ T9059] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000008 [ 280.332873][ T9059] RBP: 00007fa761e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 280.332890][ T9059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.332904][ T9059] R13: 00007fa762016038 R14: 00007fa762015fa0 R15: 00007ffdf699ad48 [ 280.332941][ T9059] [ 281.656308][ T9077] netlink: 13 bytes leftover after parsing attributes in process `syz.1.898'. [ 283.450647][ T9085] netlink: 25 bytes leftover after parsing attributes in process `syz.1.901'. [ 283.971588][ T9089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.903'. [ 284.633737][ T9101] netlink: 25 bytes leftover after parsing attributes in process `syz.0.906'. [ 284.719870][ T9103] netlink: 29 bytes leftover after parsing attributes in process `syz.3.908'. [ 284.807437][ T5826] Bluetooth: hci2: unexpected event 0x02 length: 726 > 260 [ 285.151556][ T9100] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 285.188155][ T9100] File: /dev/nullb0 PID: 9100 Comm: syz.1.907 [ 285.209914][ T9106] netlink: 25 bytes leftover after parsing attributes in process `syz.0.909'. [ 285.680240][ T9108] netlink: 354 bytes leftover after parsing attributes in process `syz.3.910'. [ 289.199481][ T9165] FAULT_INJECTION: forcing a failure. [ 289.199481][ T9165] name failslab, interval 1, probability 0, space 0, times 0 [ 289.269063][ T9165] CPU: 0 UID: 0 PID: 9165 Comm: syz.1.926 Tainted: G U syzkaller #0 PREEMPT(full) [ 289.269108][ T9165] Tainted: [U]=USER [ 289.269117][ T9165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 289.269133][ T9165] Call Trace: [ 289.269142][ T9165] [ 289.269152][ T9165] dump_stack_lvl+0x100/0x190 [ 289.269199][ T9165] should_fail_ex.cold+0x5/0xa [ 289.269233][ T9165] should_failslab+0xc2/0x120 [ 289.269278][ T9165] __kmalloc_cache_noprof+0x7a/0x6f0 [ 289.269312][ T9165] ? append_filter_err+0xb8/0x620 [ 289.269350][ T9165] ? process_preds+0x937/0x1e10 [ 289.269395][ T9165] append_filter_err+0xb8/0x620 [ 289.269446][ T9165] apply_subsystem_event_filter+0x73d/0x17d0 [ 289.269501][ T9165] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 289.269549][ T9165] ? _copy_from_user+0x59/0xd0 [ 289.269592][ T9165] ? __pfx_subsystem_filter_write+0x10/0x10 [ 289.269631][ T9165] subsystem_filter_write+0x95/0x120 [ 289.269682][ T9165] vfs_writev+0x5ea/0xe10 [ 289.269718][ T9165] ? rcu_is_watching+0x12/0xc0 [ 289.269762][ T9165] ? __pfx_vfs_writev+0x10/0x10 [ 289.269798][ T9165] ? fdget_pos+0x2aa/0x380 [ 289.269850][ T9165] ? __fget_files+0x21f/0x3d0 [ 289.269897][ T9165] ? do_writev+0x13e/0x340 [ 289.269932][ T9165] do_writev+0x13e/0x340 [ 289.269972][ T9165] ? __pfx_do_writev+0x10/0x10 [ 289.270017][ T9165] do_syscall_64+0x106/0xf80 [ 289.270047][ T9165] ? clear_bhb_loop+0x40/0x90 [ 289.270083][ T9165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.270112][ T9165] RIP: 0033:0x7f40c0f9c629 [ 289.270135][ T9165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.270161][ T9165] RSP: 002b:00007f40c1ec7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 289.270189][ T9165] RAX: ffffffffffffffda RBX: 00007f40c1216090 RCX: 00007f40c0f9c629 [ 289.270208][ T9165] RDX: 0000000000000005 RSI: 0000200000000140 RDI: 0000000000000006 [ 289.270225][ T9165] RBP: 00007f40c1032b39 R08: 0000000000000000 R09: 0000000000000000 [ 289.270241][ T9165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.270257][ T9165] R13: 00007f40c1216128 R14: 00007f40c1216090 R15: 00007fff9ff9f238 [ 289.270296][ T9165] [ 290.352996][ T9178] netlink: 294 bytes leftover after parsing attributes in process `syz.0.930'. [ 290.970970][ T5826] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 290.971008][ T5826] Bluetooth: hci2: unexpected subevent 0x03 length: 725 > 9 [ 291.129679][ T9186] zswap: compressor not available [ 292.422267][ T9216] program syz.2.940 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.616451][ T9233] FAULT_INJECTION: forcing a failure. [ 293.616451][ T9233] name failslab, interval 1, probability 0, space 0, times 0 [ 293.691003][ T9233] CPU: 1 UID: 0 PID: 9233 Comm: syz.0.945 Tainted: G U syzkaller #0 PREEMPT(full) [ 293.691049][ T9233] Tainted: [U]=USER [ 293.691058][ T9233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 293.691074][ T9233] Call Trace: [ 293.691084][ T9233] [ 293.691095][ T9233] dump_stack_lvl+0x100/0x190 [ 293.691141][ T9233] should_fail_ex.cold+0x5/0xa [ 293.691174][ T9233] should_failslab+0xc2/0x120 [ 293.691217][ T9233] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 293.691255][ T9233] ? vm_area_dup+0x27/0x8e0 [ 293.691293][ T9233] vm_area_dup+0x27/0x8e0 [ 293.691327][ T9233] __split_vma+0x18c/0xd90 [ 293.691368][ T9233] ? __pfx___split_vma+0x10/0x10 [ 293.691401][ T9233] ? finish_task_switch.isra.0+0x200/0xb80 [ 293.691438][ T9233] ? lockdep_hardirqs_on+0x78/0x100 [ 293.691476][ T9233] vma_modify+0x1121/0x2250 [ 293.691528][ T9233] ? __pfx_vma_modify+0x10/0x10 [ 293.691574][ T9233] vma_modify_flags+0x257/0x3d0 [ 293.691613][ T9233] ? __pfx_vma_modify_flags+0x10/0x10 [ 293.691665][ T9233] ? mtree_range_walk+0x6ce/0xcd0 [ 293.691720][ T9233] mlock_fixup+0x302/0xf00 [ 293.691761][ T9233] ? __pfx_mlock_fixup+0x10/0x10 [ 293.691805][ T9233] apply_vma_lock_flags+0x256/0x370 [ 293.691848][ T9233] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 293.691884][ T9233] ? __pfx___might_resched+0x10/0x10 [ 293.691933][ T9233] ? __pfx_down_write_killable+0x10/0x10 [ 293.691971][ T9233] ? do_futex+0x192/0x350 [ 293.692010][ T9233] do_mlock+0x261/0x7f0 [ 293.692049][ T9233] ? __pfx_do_mlock+0x10/0x10 [ 293.692083][ T9233] ? __x64_sys_futex+0x34f/0x4d0 [ 293.692116][ T9233] ? __x64_sys_futex+0x358/0x4d0 [ 293.692152][ T9233] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 293.692195][ T9233] ? xfd_validate_state+0x129/0x190 [ 293.692246][ T9233] __x64_sys_mlock+0x59/0x80 [ 293.692285][ T9233] do_syscall_64+0x106/0xf80 [ 293.692313][ T9233] ? clear_bhb_loop+0x40/0x90 [ 293.692348][ T9233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.692378][ T9233] RIP: 0033:0x7fa761d9c629 [ 293.692402][ T9233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.692428][ T9233] RSP: 002b:00007fa762c4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 293.692454][ T9233] RAX: ffffffffffffffda RBX: 00007fa762015fa0 RCX: 00007fa761d9c629 [ 293.692473][ T9233] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000fbe8 [ 293.692489][ T9233] RBP: 00007fa761e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 293.692512][ T9233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.692529][ T9233] R13: 00007fa762016038 R14: 00007fa762015fa0 R15: 00007ffdf699ad48 [ 293.692567][ T9233] [ 294.753534][ T9245] netlink: 28 bytes leftover after parsing attributes in process `syz.2.949'. [ 295.152756][ T9245] veth1_macvtap: left promiscuous mode [ 295.633348][ T9255] ======================================================= [ 295.633348][ T9255] WARNING: The mand mount option has been deprecated and [ 295.633348][ T9255] and is ignored by this kernel. Remove the mand [ 295.633348][ T9255] option from the mount to silence this warning. [ 295.633348][ T9255] ======================================================= [ 298.763719][ T5826] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 299.541676][ T9302] netlink: 354 bytes leftover after parsing attributes in process `syz.2.963'. [ 300.240841][ T9312] netlink: 20 bytes leftover after parsing attributes in process `syz.3.966'. [ 302.124302][ T9325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.970'. [ 302.409656][ T9325] i: entered promiscuous mode [ 302.529666][ T9330] HfR: entered promiscuous mode [ 302.590993][ T9335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.971'. [ 302.646234][ T9335] netlink: 'syz.3.971': attribute type 1 has an invalid length. [ 302.712221][ T9335] netlink: 'syz.3.971': attribute type 6 has an invalid length. [ 302.811266][ T9339] netlink: 'syz.0.972': attribute type 1 has an invalid length. [ 302.836875][ T9339] netlink: 9 bytes leftover after parsing attributes in process `syz.0.972'. [ 303.106814][ T9343] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 304.080084][ T9352] netlink: 354 bytes leftover after parsing attributes in process `syz.0.974'. [ 305.990909][ T9391] Dead loop on virtual device ip6_vti0, fix it urgently! [ 305.999465][ T9391] Dead loop on virtual device ip6_vti0, fix it urgently! [ 306.007963][ T9391] Dead loop on virtual device ip6_vti0, fix it urgently! [ 306.015714][ T9391] Dead loop on virtual device ip6_vti0, fix it urgently! [ 306.023755][ T9391] Dead loop on virtual device ip6_vti0, fix it urgently! [ 306.031483][ T9391] Dead loop on virtual device ip6_vti0, fix it urgently! [ 306.082718][ T9391] Dead loop on virtual device ip6_vti0, fix it urgently! [ 307.142422][ T51] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 307.142485][ T51] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 307.157367][ T51] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 307.157414][ T51] Bluetooth: hci0: adv larger than maximum supported [ 307.165150][ T51] Bluetooth: hci0: adv larger than maximum supported [ 307.171939][ T51] Bluetooth: hci0: Malformed LE Event: 0x0d [ 307.830966][ T9403] netlink: 342 bytes leftover after parsing attributes in process `syz.2.990'. [ 307.973911][ T9408] FAULT_INJECTION: forcing a failure. [ 307.973911][ T9408] name failslab, interval 1, probability 0, space 0, times 0 [ 308.003702][ T9408] CPU: 0 UID: 0 PID: 9408 Comm: syz.1.991 Tainted: G U syzkaller #0 PREEMPT(full) [ 308.003749][ T9408] Tainted: [U]=USER [ 308.003759][ T9408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 308.003776][ T9408] Call Trace: [ 308.003784][ T9408] [ 308.003795][ T9408] dump_stack_lvl+0x100/0x190 [ 308.003842][ T9408] should_fail_ex.cold+0x5/0xa [ 308.003875][ T9408] should_failslab+0xc2/0x120 [ 308.003920][ T9408] __kmalloc_cache_noprof+0x7a/0x6f0 [ 308.003953][ T9408] ? alloc_netdev_mqs+0xd95/0x14f0 [ 308.003983][ T9408] ? __asan_memset+0x23/0x50 [ 308.004024][ T9408] alloc_netdev_mqs+0xd95/0x14f0 [ 308.004064][ T9408] ppp_ioctl+0x906/0x2800 [ 308.004097][ T9408] ? find_held_lock+0x2b/0x80 [ 308.004143][ T9408] ? __pfx_ppp_ioctl+0x10/0x10 [ 308.004180][ T9408] ? __fget_files+0x21f/0x3d0 [ 308.004231][ T9408] ? __pfx_ppp_ioctl+0x10/0x10 [ 308.004262][ T9408] __x64_sys_ioctl+0x18e/0x210 [ 308.004302][ T9408] do_syscall_64+0x106/0xf80 [ 308.004332][ T9408] ? clear_bhb_loop+0x40/0x90 [ 308.004368][ T9408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.004397][ T9408] RIP: 0033:0x7f40c0f9c629 [ 308.004422][ T9408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.004449][ T9408] RSP: 002b:00007f40c1ee8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.004476][ T9408] RAX: ffffffffffffffda RBX: 00007f40c1215fa0 RCX: 00007f40c0f9c629 [ 308.004496][ T9408] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000008 [ 308.004512][ T9408] RBP: 00007f40c1032b39 R08: 0000000000000000 R09: 0000000000000000 [ 308.004529][ T9408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.004546][ T9408] R13: 00007f40c1216038 R14: 00007f40c1215fa0 R15: 00007fff9ff9f238 [ 308.004585][ T9408] [ 308.074108][ T5826] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 310.720416][ T9442] FAULT_INJECTION: forcing a failure. [ 310.720416][ T9442] name failslab, interval 1, probability 0, space 0, times 0 [ 310.733270][ T9442] CPU: 1 UID: 0 PID: 9442 Comm: syz.1.997 Tainted: G U syzkaller #0 PREEMPT(full) [ 310.733315][ T9442] Tainted: [U]=USER [ 310.733325][ T9442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 310.733342][ T9442] Call Trace: [ 310.733352][ T9442] [ 310.733363][ T9442] dump_stack_lvl+0x100/0x190 [ 310.733411][ T9442] should_fail_ex.cold+0x5/0xa [ 310.733443][ T9442] should_failslab+0xc2/0x120 [ 310.733490][ T9442] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 310.733529][ T9442] ? __kernfs_new_node+0xd2/0x960 [ 310.733572][ T9442] __kernfs_new_node+0xd2/0x960 [ 310.733606][ T9442] ? kernfs_add_one+0x583/0x850 [ 310.733649][ T9442] ? __pfx___kernfs_new_node+0x10/0x10 [ 310.733695][ T9442] ? find_held_lock+0x2b/0x80 [ 310.733738][ T9442] ? kernfs_root+0xee/0x2a0 [ 310.733772][ T9442] ? kernfs_root+0xee/0x2a0 [ 310.733815][ T9442] kernfs_new_node+0x11b/0x1a0 [ 310.733862][ T9442] __kernfs_create_file+0x53/0x350 [ 310.733896][ T9442] sysfs_add_file_mode_ns+0x207/0x3c0 [ 310.733939][ T9442] sysfs_create_file_ns+0x145/0x1e0 [ 310.733971][ T9442] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 310.734007][ T9442] ? __pfx___up_read+0x10/0x10 [ 310.734045][ T9442] ? acpi_device_notify+0x464/0x500 [ 310.734081][ T9442] ? kobject_put+0xb9/0x640 [ 310.734119][ T9442] device_create_file+0xf2/0x1d0 [ 310.734154][ T9442] device_add+0x2cb/0x1950 [ 310.734196][ T9442] ? kfree_const+0x5a/0x70 [ 310.734246][ T9442] ? __pfx_device_add+0x10/0x10 [ 310.734284][ T9442] ? kfree_const+0x5a/0x70 [ 310.734320][ T9442] ? kfree+0x2ec/0x6b0 [ 310.734366][ T9442] device_create_groups_vargs+0x1f8/0x270 [ 310.734415][ T9442] device_create+0xed/0x130 [ 310.734459][ T9442] ? __pfx_device_create+0x10/0x10 [ 310.734499][ T9442] ? lockdep_init_map_type+0x5c/0x250 [ 310.734535][ T9442] ? timer_init_key+0x150/0x340 [ 310.734570][ T9442] ? ieee80211_roc_setup+0x136/0x270 [ 310.734615][ T9442] ? ieee80211_alloc_hw_nm+0x19c3/0x22a0 [ 310.734656][ T9442] mac80211_hwsim_new_radio+0x37f/0x57d0 [ 310.734709][ T9442] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 310.734758][ T9442] ? __nla_validate_parse+0x1e7/0x28b0 [ 310.734793][ T9442] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 310.734843][ T9442] hwsim_new_radio_nl+0xc1f/0x1340 [ 310.734883][ T9442] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 310.734931][ T9442] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 310.734971][ T9442] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 310.735017][ T9442] genl_family_rcv_msg_doit+0x214/0x300 [ 310.735061][ T9442] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 310.735098][ T9442] ? genl_get_cmd+0x3ef/0x720 [ 310.735141][ T9442] ? bpf_lsm_capable+0x9/0x10 [ 310.735167][ T9442] ? security_capable+0x80/0x260 [ 310.735203][ T9442] ? ns_capable+0xd2/0xf0 [ 310.735259][ T9442] genl_rcv_msg+0x560/0x800 [ 310.735301][ T9442] ? __pfx_genl_rcv_msg+0x10/0x10 [ 310.735340][ T9442] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 310.735389][ T9442] netlink_rcv_skb+0x159/0x420 [ 310.735422][ T9442] ? __pfx_genl_rcv_msg+0x10/0x10 [ 310.735463][ T9442] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 310.735512][ T9442] ? netlink_deliver_tap+0x1ae/0xcc0 [ 310.735549][ T9442] genl_rcv+0x28/0x40 [ 310.735583][ T9442] netlink_unicast+0x5aa/0x870 [ 310.735623][ T9442] ? __pfx_netlink_unicast+0x10/0x10 [ 310.735668][ T9442] netlink_sendmsg+0x8b0/0xda0 [ 310.735703][ T9442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.735729][ T9442] ? __import_iovec+0x1d2/0x640 [ 310.735774][ T9442] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 310.735814][ T9442] ____sys_sendmsg+0xa54/0xc30 [ 310.735854][ T9442] ? __pfx_____sys_sendmsg+0x10/0x10 [ 310.735898][ T9442] ? __pfx_futex_wake_mark+0x10/0x10 [ 310.735942][ T9442] ___sys_sendmsg+0x190/0x1e0 [ 310.735980][ T9442] ? __pfx____sys_sendmsg+0x10/0x10 [ 310.736062][ T9442] __sys_sendmsg+0x170/0x220 [ 310.736093][ T9442] ? __pfx___sys_sendmsg+0x10/0x10 [ 310.736121][ T9442] ? __x64_sys_futex+0x34f/0x4d0 [ 310.736175][ T9442] do_syscall_64+0x106/0xf80 [ 310.736202][ T9442] ? clear_bhb_loop+0x40/0x90 [ 310.736257][ T9442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.736284][ T9442] RIP: 0033:0x7f40c0f9c629 [ 310.736306][ T9442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.736332][ T9442] RSP: 002b:00007f40c1ee8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.736357][ T9442] RAX: ffffffffffffffda RBX: 00007f40c1215fa0 RCX: 00007f40c0f9c629 [ 310.736375][ T9442] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000006 [ 310.736392][ T9442] RBP: 00007f40c1032b39 R08: 0000000000000000 R09: 0000000000000000 [ 310.736408][ T9442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.736423][ T9442] R13: 00007f40c1216038 R14: 00007f40c1215fa0 R15: 00007fff9ff9f238 [ 310.736460][ T9442] [ 310.814571][ T5826] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 310.814602][ T5826] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 311.238391][ T5826] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 311.238424][ T5826] Bluetooth: hci3: adv larger than maximum supported [ 311.245703][ T5826] Bluetooth: hci3: adv larger than maximum supported [ 311.252437][ T5826] Bluetooth: hci3: Malformed LE Event: 0x0d [ 311.567803][ T9460] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 311.844450][ T9460] FAULT_INJECTION: forcing a failure. [ 311.844450][ T9460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.944037][ T9460] CPU: 0 UID: 0 PID: 9460 Comm: syz.2.1001 Tainted: G U syzkaller #0 PREEMPT(full) [ 311.944083][ T9460] Tainted: [U]=USER [ 311.944092][ T9460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 311.944108][ T9460] Call Trace: [ 311.944118][ T9460] [ 311.944137][ T9460] dump_stack_lvl+0x100/0x190 [ 311.944187][ T9460] should_fail_ex.cold+0x5/0xa [ 311.944219][ T9460] _copy_from_iter+0x1f4/0x1690 [ 311.944272][ T9460] ? __pfx__copy_from_iter+0x10/0x10 [ 311.944320][ T9460] ? __pfx___might_resched+0x10/0x10 [ 311.944368][ T9460] file_tty_write.isra.0+0x45b/0x890 [ 311.944412][ T9460] redirected_tty_write+0xd4/0x120 [ 311.944447][ T9460] vfs_write+0x6ac/0x1070 [ 311.944491][ T9460] ? __pfx_redirected_tty_write+0x10/0x10 [ 311.944529][ T9460] ? __pfx_vfs_write+0x10/0x10 [ 311.944567][ T9460] ? find_held_lock+0x2b/0x80 [ 311.944633][ T9460] ksys_write+0x12a/0x250 [ 311.944674][ T9460] ? __pfx_ksys_write+0x10/0x10 [ 311.944726][ T9460] do_syscall_64+0x106/0xf80 [ 311.944757][ T9460] ? clear_bhb_loop+0x40/0x90 [ 311.944794][ T9460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.944825][ T9460] RIP: 0033:0x7fbe69d9c629 [ 311.944849][ T9460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.944876][ T9460] RSP: 002b:00007fbe6ab7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 311.944905][ T9460] RAX: ffffffffffffffda RBX: 00007fbe6a015fa0 RCX: 00007fbe69d9c629 [ 311.944925][ T9460] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000008 [ 311.944942][ T9460] RBP: 00007fbe69e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 311.944960][ T9460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.944977][ T9460] R13: 00007fbe6a016038 R14: 00007fbe6a015fa0 R15: 00007fff24ff7818 [ 311.945017][ T9460] [ 312.231594][ T9465] can: request_module (can-proto-4) failed. [ 316.073182][ T9500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1010'. [ 316.122438][ T9500] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1010'. [ 317.326468][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.333007][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.380942][ T9522] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 317.592824][ T9522] FAULT_INJECTION: forcing a failure. [ 317.592824][ T9522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.652149][ T9522] CPU: 0 UID: 0 PID: 9522 Comm: syz.0.1015 Tainted: G U syzkaller #0 PREEMPT(full) [ 317.652194][ T9522] Tainted: [U]=USER [ 317.652203][ T9522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 317.652219][ T9522] Call Trace: [ 317.652229][ T9522] [ 317.652240][ T9522] dump_stack_lvl+0x100/0x190 [ 317.652286][ T9522] should_fail_ex.cold+0x5/0xa [ 317.652322][ T9522] _copy_from_iter+0x1f4/0x1690 [ 317.652374][ T9522] ? __pfx__copy_from_iter+0x10/0x10 [ 317.652425][ T9522] ? __pfx___might_resched+0x10/0x10 [ 317.652472][ T9522] file_tty_write.isra.0+0x45b/0x890 [ 317.652512][ T9522] redirected_tty_write+0xd4/0x120 [ 317.652548][ T9522] vfs_write+0x6ac/0x1070 [ 317.652591][ T9522] ? __pfx_redirected_tty_write+0x10/0x10 [ 317.652628][ T9522] ? __pfx_vfs_write+0x10/0x10 [ 317.652668][ T9522] ? find_held_lock+0x2b/0x80 [ 317.652739][ T9522] ksys_write+0x12a/0x250 [ 317.652780][ T9522] ? __pfx_ksys_write+0x10/0x10 [ 317.652836][ T9522] do_syscall_64+0x106/0xf80 [ 317.652866][ T9522] ? clear_bhb_loop+0x40/0x90 [ 317.652903][ T9522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.652934][ T9522] RIP: 0033:0x7fa761d9c629 [ 317.652958][ T9522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.652986][ T9522] RSP: 002b:00007fa762c4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 317.653013][ T9522] RAX: ffffffffffffffda RBX: 00007fa762015fa0 RCX: 00007fa761d9c629 [ 317.653033][ T9522] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000008 [ 317.653052][ T9522] RBP: 00007fa761e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 317.653070][ T9522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.653087][ T9522] R13: 00007fa762016038 R14: 00007fa762015fa0 R15: 00007ffdf699ad48 [ 317.653127][ T9522] [ 320.155531][ T9535] can: request_module (can-proto-4) failed. [ 324.594378][ T9569] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1021'. [ 324.740511][ T9572] [U] ^\ [ 324.962584][ T9578] netlink: 306 bytes leftover after parsing attributes in process `syz.0.1025'. [ 329.439267][ T9628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1042'. [ 329.493997][ T9628] netlink: 'syz.1.1042': attribute type 1 has an invalid length. [ 329.516171][ T9628] netlink: 'syz.1.1042': attribute type 6 has an invalid length. [ 329.576668][ T9625] [U] [ 329.745050][ T9637] can: request_module (can-proto-4) failed. [ 330.690172][ T9655] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input12 [ 331.642254][ T9667] snd_virmidi snd_virmidi.0: control 61678:131081:268435459:yª:1 is already present [ 331.933989][ T9674] [U] ^\ [ 332.211837][ T9685] can: request_module (can-proto-4) failed. [ 332.371360][ T5826] Bluetooth: hci2: unexpected event 0x1c length: 725 > 5 [ 332.524740][ T9690] netlink: 306 bytes leftover after parsing attributes in process `syz.1.1067'. [ 335.662260][ T9746] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 335.712048][ T9746] File: /dev/nullb0 PID: 9746 Comm: syz.2.1068 [ 336.052777][ T9756] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1078'. [ 336.352424][ T9756] veth1_macvtap: left promiscuous mode [ 337.827954][ T9773] can: request_module (can-proto-4) failed. [ 340.809403][ T9810] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1082'. [ 340.866162][ T9810] veth1_macvtap: left promiscuous mode [ 343.540245][ T9836] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input13 [ 349.113514][ T9912] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input14 [ 351.078271][ T9945] netlink: 'syz.1.1118': attribute type 4 has an invalid length. [ 351.112420][ T9945] netlink: 'syz.1.1118': attribute type 5 has an invalid length. [ 351.141205][ T9945] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1118'. [ 354.079287][ T9985] HfR: entered promiscuous mode [ 356.162181][T10009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1125'. [ 356.188063][T10009] netlink: 'syz.1.1125': attribute type 1 has an invalid length. [ 356.197682][T10009] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1125'. [ 356.210615][T10009] netlink: 'syz.1.1125': attribute type 1 has an invalid length. [ 356.396336][T10011] netlink: 2468 bytes leftover after parsing attributes in process `syz.3.1128'. [ 357.672880][T10032] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1133'. [ 360.004800][T10063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1141'. [ 360.047714][T10063] netlink: 354 bytes leftover after parsing attributes in process `syz.2.1141'. [ 360.873911][T10067] random: crng reseeded on system resumption [ 361.351314][T10086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1145'. [ 361.403681][T10085] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1143'. [ 361.442746][T10086] netlink: 'syz.2.1145': attribute type 1 has an invalid length. [ 361.450554][T10086] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1145'. [ 362.091745][T10094] Invalid ELF header magic: != ELF [ 363.142442][T10111] : Can't lookup blockdev [ 363.689363][T10117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1155'. [ 364.411246][T10130] can: request_module (can-proto-4) failed. [ 368.516294][T10185] can: request_module (can-proto-4) failed. [ 372.687313][T10243] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1180'. [ 372.775355][T10243] vlan1: entered promiscuous mode [ 372.780630][T10243] vlan1: entered allmulticast mode [ 372.795526][T10243] veth0_vlan: entered allmulticast mode [ 373.319311][T10252] can: request_module (can-proto-4) failed. [ 374.702040][T10275] futex_wake_op: syz.2.1194 tries to shift op by -2048; fix this program [ 374.748704][T10275] futex_wake_op: syz.2.1194 tries to shift op by -2048; fix this program [ 375.130309][T10283] FAULT_INJECTION: forcing a failure. [ 375.130309][T10283] name failslab, interval 1, probability 0, space 0, times 0 [ 375.143393][T10283] CPU: 1 UID: 0 PID: 10283 Comm: syz.1.1197 Tainted: G U syzkaller #0 PREEMPT(full) [ 375.143441][T10283] Tainted: [U]=USER [ 375.143452][T10283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 375.143470][T10283] Call Trace: [ 375.143479][T10283] [ 375.143491][T10283] dump_stack_lvl+0x100/0x190 [ 375.143541][T10283] should_fail_ex.cold+0x5/0xa [ 375.143576][T10283] should_failslab+0xc2/0x120 [ 375.143622][T10283] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 375.143663][T10283] ? acpi_ut_create_generic_state+0x61/0xc0 [ 375.143705][T10283] ? __pfx_acpi_ut_trace+0x10/0x10 [ 375.143756][T10283] acpi_ut_create_generic_state+0x61/0xc0 [ 375.143798][T10283] acpi_ps_init_scope+0x3a/0x240 [ 375.143844][T10283] acpi_ds_init_aml_walk+0x1f6/0x680 [ 375.143890][T10283] acpi_ps_execute_method+0x39d/0xe90 [ 375.143940][T10283] acpi_ns_evaluate+0x640/0x1670 [ 375.143973][T10283] acpi_evaluate_object+0x420/0xe00 [ 375.144008][T10283] ? kasan_save_stack+0x30/0x50 [ 375.144044][T10283] ? kasan_save_track+0x14/0x30 [ 375.144088][T10283] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 375.144136][T10283] acpi_evaluate_integer+0xdf/0x220 [ 375.144168][T10283] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 375.144216][T10283] ? __pfx_status_show+0x10/0x10 [ 375.144253][T10283] status_show+0xa0/0x120 [ 375.144286][T10283] ? __pfx_status_show+0x10/0x10 [ 375.144342][T10283] dev_attr_show+0x52/0xa0 [ 375.144385][T10283] ? __pfx_dev_attr_show+0x10/0x10 [ 375.144422][T10283] sysfs_kf_seq_show+0x217/0x3a0 [ 375.144461][T10283] seq_read_iter+0x32f/0x1270 [ 375.144518][T10283] kernfs_fop_read_iter+0x46c/0x610 [ 375.144547][T10283] ? rw_verify_area+0xce/0x6d0 [ 375.144581][T10283] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 375.144612][T10283] vfs_read+0x825/0xb30 [ 375.144657][T10283] ? __pfx_vfs_read+0x10/0x10 [ 375.144719][T10283] ksys_read+0x12a/0x250 [ 375.144759][T10283] ? __pfx_ksys_read+0x10/0x10 [ 375.144809][T10283] do_syscall_64+0x106/0xf80 [ 375.144837][T10283] ? clear_bhb_loop+0x40/0x90 [ 375.144872][T10283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.144901][T10283] RIP: 0033:0x7f40c0f9c629 [ 375.144926][T10283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.144953][T10283] RSP: 002b:00007f40c1ee8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 375.144979][T10283] RAX: ffffffffffffffda RBX: 00007f40c1215fa0 RCX: 00007f40c0f9c629 [ 375.144998][T10283] RDX: 000000000000007a RSI: 0000200000000240 RDI: 0000000000000005 [ 375.145014][T10283] RBP: 00007f40c1032b39 R08: 0000000000000000 R09: 0000000000000000 [ 375.145030][T10283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.145045][T10283] R13: 00007f40c1216038 R14: 00007f40c1215fa0 R15: 00007fff9ff9f238 [ 375.145083][T10283] [ 377.498528][T10311] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1205'. [ 377.513789][T10311] netlink: 350 bytes leftover after parsing attributes in process `syz.2.1205'. [ 378.757162][T10329] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1208'. [ 378.777774][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.784206][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.546553][T10348] WARNING! power/level is deprecated; use power/control instead [ 381.240250][T10357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1216'. [ 381.271326][T10357] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1216'. [ 382.921172][T10381] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1220'. [ 382.982453][T10381] vlan1: entered promiscuous mode [ 382.988354][T10381] vlan1: entered allmulticast mode [ 383.013635][T10381] veth0_vlan: entered allmulticast mode [ 384.757999][T10399] netlink: 'syz.2.1229': attribute type 2 has an invalid length. [ 384.822232][T10399] netlink: 'syz.2.1229': attribute type 3 has an invalid length. [ 384.896548][T10399] netlink: 158 bytes leftover after parsing attributes in process `syz.2.1229'. [ 384.958224][T10399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1229'. [ 385.367610][T10408] bonding: no command found in bonding_masters - use +ifname or -ifname [ 385.388175][T10408] bonding: no command found in bonding_masters - use +ifname or -ifname [ 388.722220][T10458] can: request_module (can-proto-5) failed. [ 388.750180][T10458] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1243'. [ 392.093563][T10495] Invalid ELF header magic: != ELF [ 393.484551][T10501] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1251'. [ 397.205533][T10557] Invalid ELF header magic: != ELF [ 400.329647][T10591] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 401.165496][T10604] netlink: 350 bytes leftover after parsing attributes in process `syz.1.1278'. [ 401.552334][T10608] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1279'. [ 404.147664][T10647] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1292'. [ 405.526599][T10676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1299'. [ 405.551171][T10674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1298'. [ 405.570520][T10676] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1299'. [ 411.102100][T10735] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 411.109934][T10735] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 411.841075][T10735] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 411.896884][T10735] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 411.922217][T10735] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 412.075478][T10735] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 412.120483][T10735] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 412.130857][T10735] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 412.156829][T10735] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 412.193460][T10735] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 412.199493][T10735] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 412.229782][T10735] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 412.843377][ T5826] Bluetooth: hci0: command 0x0406 tx timeout [ 413.962137][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 414.202376][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 414.284000][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 414.922107][ T5826] Bluetooth: hci0: command 0x0406 tx timeout [ 416.042157][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 416.282328][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 416.366768][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 417.002087][ T5826] Bluetooth: hci0: command 0x0406 tx timeout [ 418.124618][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 418.362270][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 418.463422][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 418.604248][T10832] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 419.319267][T10848] netlink: 'syz.2.1343': attribute type 4 has an invalid length. [ 419.343869][T10848] netlink: 314 bytes leftover after parsing attributes in process `syz.2.1343'. [ 425.807808][T10925] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1364'. [ 426.922785][ T5826] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 426.961205][T10937] random: crng reseeded on system resumption [ 430.755272][T10975] netlink: 50 bytes leftover after parsing attributes in process `syz.2.1376'. [ 435.693104][T11038] syz.0.1390(11038): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 438.541880][T11068] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1398'. [ 438.672646][T11068] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.706621][T11068] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.869330][T11068] bond0 (unregistering): Released all slaves [ 440.209958][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.224748][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.198984][T11078] delete_channel: no stack [ 441.627189][T11106] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1407'. [ 441.904225][T11110] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1410'. [ 445.067423][T11141] netlink: 'syz.2.1418': attribute type 3 has an invalid length. [ 445.076478][T11141] netlink: 306 bytes leftover after parsing attributes in process `syz.2.1418'. [ 447.222453][T11155] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 447.222873][T11164] netlink: 62 bytes leftover after parsing attributes in process `syz.2.1425'. [ 448.972586][T11188] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 450.569526][T11202] kexec: Could not allocate control_code_buffer [ 453.374137][T11244] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1445'. [ 455.306133][T11260] kexec: Could not allocate control_code_buffer [ 460.005194][T11323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1462'. [ 460.071590][T11323] netlink: 354 bytes leftover after parsing attributes in process `syz.2.1462'. [ 461.715402][T11346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1468'. [ 461.789166][T11348] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1468'. [ 468.533019][T11429] netlink: 354 bytes leftover after parsing attributes in process `syz.3.1490'. [ 472.424868][T11446] kexec: Could not allocate control_code_buffer [ 475.344977][T11481] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1508'. [ 477.186244][T11504] random: crng reseeded on system resumption [ 477.474636][T11507] hub 1-0:1.0: USB hub found [ 477.574261][T11507] hub 1-0:1.0: 1 port detected [ 478.394698][T11513] netlink: 'syz.2.1516': attribute type 2 has an invalid length. [ 478.404073][T11513] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1516'. [ 484.117433][T11585] input: f¬ as /devices/virtual/input/input16 [ 484.969482][T11596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1543'. [ 485.081652][T11596] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1543'. [ 485.505919][T11590] hub 1-0:1.0: USB hub found [ 485.512121][T11590] hub 1-0:1.0: 1 port detected [ 486.151184][T11613] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1547'. [ 486.659316][T11614] Invalid ELF header magic: != ELF [ 489.141204][T11657] input: f¬ as /devices/virtual/input/input17 [ 490.260227][T11662] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1565'. [ 493.780079][T11723] synth uevent: /module/orangefs: unknown uevent action string [ 496.149754][T11753] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1593'. [ 497.075636][T11758] netlink: 206 bytes leftover after parsing attributes in process `syz.1.1595'. [ 497.777750][T11773] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1599'. [ 499.013447][T11785] tipc: Started in network mode [ 499.018448][T11785] tipc: Node identity ee00, cluster identity 4711 [ 499.041991][T11785] tipc: Node number set to 60928 [ 500.160637][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803303e400: rx timeout, send abort [ 500.175739][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803303e400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 500.385818][T11795] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1606'. [ 501.656271][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.662755][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.891844][T11810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1609'. [ 501.929959][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803303e000: rx timeout, send abort [ 502.438362][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803303e000: abort rx timeout. Force session deactivation [ 503.242674][ T5826] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 503.313523][T11819] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1611'. [ 503.375650][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880591e4000: rx timeout, send abort [ 503.884022][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880591e4000: abort rx timeout. Force session deactivation [ 505.405846][T11857] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1621'. [ 505.996702][T11844] kexec: Could not allocate control_code_buffer [ 506.261595][ T5826] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 513.386441][T11955] can0: slcan on ttyS2. [ 513.765456][T11953] can0 (unregistered): slcan off ttyS2. [ 514.713971][T11972] Invalid ELF header magic: != ELF [ 514.829643][T11971] delete_channel: no stack [ 515.202143][T11986] tipc: Started in network mode [ 515.242055][T11986] tipc: Node identity ee00, cluster identity 4711 [ 515.402583][T11986] tipc: Node number set to 60928 [ 515.656950][T11974] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1653'. [ 515.800395][T11999] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1656'. [ 516.364285][T12013] netlink: 306 bytes leftover after parsing attributes in process `syz.2.1658'. [ 516.779498][T12031] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1670'. [ 519.140309][T12044] kexec: Could not allocate control_code_buffer [ 519.315291][ T51] Bluetooth: Frame is too long (len 253, expected len 4) [ 521.308448][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802ca19800: rx timeout, send abort [ 521.322049][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802ca19800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 522.567252][T12086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1678'. [ 522.667616][T12092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1678'. [ 523.260646][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880333e7800: rx timeout, send abort [ 523.769037][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880333e7800: abort rx timeout. Force session deactivation [ 524.427318][T12133] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1691'. [ 525.471442][ T51] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 526.036221][T12161] Invalid ELF header magic: != ELF [ 527.307554][T12185] Invalid ELF header magic: != ELF [ 528.573450][T12201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1707'. [ 528.593992][T12201] netlink: 'syz.3.1707': attribute type 1 has an invalid length. [ 528.601731][T12201] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1707'. [ 528.612562][T12201] netlink: 'syz.3.1707': attribute type 1 has an invalid length. [ 529.310824][T12212] netlink: 'syz.2.1710': attribute type 2 has an invalid length. [ 530.153151][T12237] binder: 12232:12237 ioctl c0306201 0 returned -14 [ 531.421193][T12251] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1719'. [ 533.342562][T12279] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1726'. [ 536.728138][T12317] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1738'. [ 537.279194][T12329] netlink: 'syz.1.1741': attribute type 2 has an invalid length. [ 537.294509][T12329] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1741'. [ 537.594966][T12335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1744'. [ 539.958931][T12387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1756'. [ 541.399917][T12409] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1773'. [ 543.461354][T12448] zswap: compressor not available [ 545.736707][T12496] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1788'. [ 552.136977][T12563] usb usb3: usbfs: interface 0 claimed by hub while 'syz.3.1808' sets config #16 [ 553.383062][T12586] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1812'. [ 554.699877][T12599] can0: slcan on pty82. [ 555.063127][T12598] can0 (unregistered): slcan off pty82. [ 557.052449][T12634] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1822'. [ 557.989484][T12654] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1827'. [ 562.364171][ T5826] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 563.089062][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.097416][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.428140][T12750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1844'. [ 563.485958][T12750] netlink: 354 bytes leftover after parsing attributes in process `syz.2.1844'. [ 565.152670][T12793] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1852'. [ 567.355107][T12842] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 569.976477][T12884] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1871'. [ 572.833192][T12921] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1879'. [ 573.238432][ T29] audit: type=1800 audit(2147491739.669:9): pid=12926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1881" name="dbroot" dev="configfs" ino=297173 res=0 errno=0 [ 573.777429][T12918] usb usb3: usbfs: interface 0 claimed by hub while 'syz.2.1878' sets config #16 [ 574.909421][T12947] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 576.259741][T12962] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1889'. [ 576.460663][ T5826] Bluetooth: hci0: ACL packet too small [ 577.337431][T12970] random: crng reseeded on system resumption [ 577.444814][T12974] netlink: 'syz.0.1901': attribute type 2 has an invalid length. [ 577.547904][ T5826] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 581.121722][ T29] audit: type=1800 audit(2147491747.549:10): pid=13031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1907" name="dbroot" dev="configfs" ino=303447 res=0 errno=0 [ 581.176715][T13036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1910'. [ 581.190157][T13036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1910'. [ 582.731863][T13055] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1915'. [ 583.982766][T13077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1921'. [ 584.031156][T13077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1921'. [ 584.956240][T13087] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1923'. [ 586.483815][T13109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1931'. [ 586.513615][T13109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1931'. [ 586.802477][T13118] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input18 [ 586.926641][T13121] netlink: 'syz.2.1935': attribute type 2 has an invalid length. [ 589.046271][T13146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1941'. [ 589.231811][T13147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1941'. [ 589.797280][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807cebc800: rx timeout, send abort [ 589.805728][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807cebc800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 591.679000][T13176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1947'. [ 591.950454][T13176] netlink: 'syz.3.1947': attribute type 1 has an invalid length. [ 592.018371][T13176] netlink: 'syz.3.1947': attribute type 6 has an invalid length. [ 597.247206][T13249] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1962'. [ 597.631429][T13249] mac80211_hwsim hwsim2 ›: renamed from wlan0 (while UP) [ 600.727091][T13292] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1969'. [ 601.466589][T13302] can0: slcan on ttyS2. [ 601.705164][T13302] can0 (unregistered): slcan off ttyS2. [ 602.210976][T13312] futex_wake_op: syz.3.1975 tries to shift op by -1; fix this program [ 602.427885][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805811c000: rx timeout, send abort [ 602.436487][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805811c000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 602.792834][T13334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1978'. [ 604.260155][T13358] netlink: 'syz.3.1983': attribute type 2 has an invalid length. [ 606.094441][T13353] kexec: Could not allocate control_code_buffer [ 606.511605][T13387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1994'. [ 607.974234][T13404] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1990'. [ 611.267273][T13445] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2000'. [ 611.299001][T13445] mac80211_hwsim hwsim6 ›: renamed from wlan0 (while UP) [ 612.316491][T13465] netlink: 'syz.1.2005': attribute type 11 has an invalid length. [ 612.348685][T13465] netlink: 'syz.1.2005': attribute type 11 has an invalid length. [ 612.392087][T13465] netlink: 'syz.1.2005': attribute type 11 has an invalid length. [ 612.431854][T13465] netlink: 'syz.1.2005': attribute type 11 has an invalid length. [ 614.322092][T13491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2011'. [ 614.864087][T13497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2012'. [ 614.916475][T13498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2012'. [ 615.986301][T13509] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 617.130042][ T5826] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 620.406628][T13553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2025'. [ 620.463083][T13554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2025'. [ 623.580552][T13581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2032'. [ 623.707883][T13584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2032'. [ 624.315986][T13592] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 624.530565][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.537177][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.630793][T13598] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 626.349708][T13621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2041'. [ 626.425230][T13620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2041'. [ 630.581461][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b3e4c00: rx timeout, send abort [ 630.589913][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b3e6000: rx timeout, send abort [ 630.598465][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805b3e6000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 630.880163][T13663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2052'. [ 631.007474][ T5826] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 631.047221][T13663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2052'. [ 635.617119][T13742] futex_wake_op: syz.1.2069 tries to shift op by -2048; fix this program [ 635.735608][T13742] futex_wake_op: syz.1.2069 tries to shift op by -2048; fix this program [ 639.024563][T13780] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 639.030985][T13780] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 639.040015][T13780] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 639.055058][T13780] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 639.062965][T13780] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 639.089788][T13780] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 640.522461][T13746] Bluetooth: hci0: command 0x0406 tx timeout [ 641.095600][T13808] Bluetooth: hci3: command 0x0406 tx timeout [ 641.101668][T13808] Bluetooth: hci2: command 0x0406 tx timeout [ 641.110548][T13738] Bluetooth: hci1: command 0x0406 tx timeout [ 642.814167][T13831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2090'. [ 643.162036][T13808] Bluetooth: hci1: command 0x0406 tx timeout [ 643.172630][T13746] Bluetooth: hci3: command 0x0406 tx timeout [ 643.231645][T13836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2091'. [ 643.243808][T13836] netlink: 354 bytes leftover after parsing attributes in process `syz.1.2091'. [ 644.529759][T13833] kexec: Could not allocate control_code_buffer [ 648.230033][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802ca27c00: rx timeout, send abort [ 648.738320][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802ca27c00: abort rx timeout. Force session deactivation [ 649.212995][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880330bb800: rx timeout, send abort [ 649.590794][T13880] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 649.721283][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880330bb800: abort rx timeout. Force session deactivation [ 650.179499][T13746] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 650.189607][T13746] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 650.210474][T13746] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 650.221080][T13746] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 650.262154][T13746] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 650.382634][ T29] audit: type=1806 audit(2147491816.809:11): xattr="." res=0 [ 650.514903][T13897] tipc: Started in network mode [ 650.519897][T13897] tipc: Node identity ee00, cluster identity 4711 [ 650.527321][T13897] tipc: Node number set to 60928 [ 650.691739][T13897] netlink: 18 bytes leftover after parsing attributes in process `syz.2.2107'. [ 651.099754][T13890] chnl_net:caif_netlink_parms(): no params data found [ 651.380922][T13890] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.414017][T13890] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.442499][T13890] bridge_slave_0: entered allmulticast mode [ 651.452156][T13890] bridge_slave_0: entered promiscuous mode [ 651.465392][T13890] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.480723][T13894] kexec: Could not allocate control_code_buffer [ 651.487275][T13890] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.496843][T13890] bridge_slave_1: entered allmulticast mode [ 651.504910][T13890] bridge_slave_1: entered promiscuous mode [ 651.587104][T13890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.614413][T13890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.759381][T13890] team0: Port device team_slave_0 added [ 651.807746][T13890] team0: Port device team_slave_1 added [ 651.880411][T13890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.888875][T13890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.946601][T13890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.003656][T13890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.152656][T13890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.192097][T13890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 652.362273][T13808] Bluetooth: hci4: command tx timeout [ 652.543591][T13890] hsr_slave_0: entered promiscuous mode [ 652.592525][T13890] hsr_slave_1: entered promiscuous mode [ 652.610612][T13890] debugfs: 'hsr0' already exists in 'hsr' [ 652.630249][T13890] Cannot create hsr debugfs directory [ 652.885387][T13931] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 653.382811][T13890] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 653.436257][T13890] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 653.466400][T13890] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 653.484324][T13890] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 653.946013][T13890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.192075][T13808] Bluetooth: hci4: command tx timeout [ 655.245813][T13890] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.289320][T13749] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.296464][T13749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.345768][T13749] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.352982][T13749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.593337][T13890] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 655.624023][T13890] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 655.930683][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079949c00: rx timeout, send abort [ 655.939422][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079949800: rx timeout, send abort [ 655.947958][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888079949c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 655.962414][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888079949800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 656.037787][T13971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2123'. [ 656.051407][T13971] netlink: 'syz.2.2123': attribute type 1 has an invalid length. [ 656.070807][T13890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.132884][T13971] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2123'. [ 656.486287][T13977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2125'. [ 656.518859][T13977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2125'. [ 656.851252][T13890] veth0_vlan: entered promiscuous mode [ 656.866743][T13890] veth1_vlan: entered promiscuous mode [ 657.016495][T13890] veth0_macvtap: entered promiscuous mode [ 657.072447][T13890] veth1_macvtap: entered promiscuous mode [ 657.155346][T13890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.195368][T13890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.243475][T13808] Bluetooth: hci4: command tx timeout [ 657.319493][T13957] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.353977][T13957] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.432979][T13957] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.464141][T13957] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.992496][T13957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.000468][T13957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.100063][T13857] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.152464][T13857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.176012][T14012] netlink: 'syz.3.2134': attribute type 1 has an invalid length. [ 658.878774][ T29] audit: type=1326 audit(2147491825.309:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14025 comm="syz.1.2136" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f40c0f9c629 code=0x0 [ 659.322453][T13808] Bluetooth: hci4: command tx timeout [ 659.486027][T14033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2138'. [ 659.496352][T14033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2138'. [ 659.754459][T14044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2140'. [ 661.155543][T14073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2148'. [ 661.190124][T14073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2148'. [ 663.849091][T14124] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 664.007984][T14127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2159'. [ 664.017733][T14127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2159'. [ 664.326011][T14098] kexec: Could not allocate control_code_buffer [ 664.666358][T14141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2163'. [ 664.709763][T14141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2163'. [ 681.141336][T13746] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 681.156832][T13746] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 681.166108][T13746] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 681.183930][T13746] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 681.194882][T13746] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 681.745444][T14192] chnl_net:caif_netlink_parms(): no params data found [ 681.946407][T14192] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.962440][T14192] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.975261][T14192] bridge_slave_0: entered allmulticast mode [ 681.989617][T14192] bridge_slave_0: entered promiscuous mode [ 681.998775][T14192] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.006208][T14192] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.013612][T14192] bridge_slave_1: entered allmulticast mode [ 682.023730][T14192] bridge_slave_1: entered promiscuous mode [ 682.042372][T13746] Bluetooth: hci0: unexpected event 0x34 length: 11 > 6 [ 682.103585][T14192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.133903][T14192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.268774][T14192] team0: Port device team_slave_0 added [ 682.290069][T14192] team0: Port device team_slave_1 added [ 682.321297][T14213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2178'. [ 682.337080][T14213] netlink: 'syz.3.2178': attribute type 1 has an invalid length. [ 682.340289][T14192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 682.352443][T14192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 682.355240][T14213] netlink: 'syz.3.2178': attribute type 6 has an invalid length. [ 682.380047][T14192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 682.407655][T14192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.415165][T14192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 682.455518][T14192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.627287][T14192] hsr_slave_0: entered promiscuous mode [ 682.653315][T14192] hsr_slave_1: entered promiscuous mode [ 682.659846][T14192] debugfs: 'hsr0' already exists in 'hsr' [ 682.686570][T14192] Cannot create hsr debugfs directory [ 683.194166][T14192] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 683.210589][T14192] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 683.241495][T14192] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 683.248580][T13746] Bluetooth: hci5: command tx timeout [ 683.309292][T14192] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 683.752721][T14192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.804731][T14192] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.859442][T13749] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.866580][T13749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.907884][T13957] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.915098][T13957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.990571][T14243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2185'. [ 684.040207][T14243] netlink: 354 bytes leftover after parsing attributes in process `syz.3.2185'. [ 684.737454][T14192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.348285][T13746] Bluetooth: hci5: command tx timeout [ 685.619567][T14274] serio: Serial port pty6 [ 685.704757][T14192] veth0_vlan: entered promiscuous mode [ 685.759218][T14192] veth1_vlan: entered promiscuous mode [ 685.903929][T14192] veth0_macvtap: entered promiscuous mode [ 685.937607][T14192] veth1_macvtap: entered promiscuous mode [ 685.998537][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.010205][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.026194][T14192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 686.110522][T14192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 686.184563][T13743] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.229624][T13743] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.257875][T13743] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.283225][T13743] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.564385][T13743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.576393][T13743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.709146][T13957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.718418][T13957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.403229][T13808] Bluetooth: hci5: command tx timeout [ 687.798154][T13808] Bluetooth: hci0: unexpected subevent 0x18 length: 123 > 19 [ 687.806334][T13808] Bluetooth: hci0: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 687.872176][T14304] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2197'. [ 688.258507][T14312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2199'. [ 688.633232][T14302] kexec: Could not allocate control_code_buffer [ 688.841840][T13808] Bluetooth: hci5: unexpected event 0x3e length: 726 > 260 [ 688.841882][T13808] Bluetooth: hci5: unexpected subevent 0x0e length: 725 > 15 [ 688.870295][T13808] Bluetooth: hci5: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 689.482202][T13808] Bluetooth: hci5: command tx timeout [ 690.497970][T14347] Invalid ELF header magic: != ELF [ 691.242726][T14359] vivid-007: ================= START STATUS ================= [ 691.250581][T14359] vivid-007: Generate PTS: true [ 691.255548][T14359] vivid-007: Generate SCR: true [ 691.260501][T14359] tpg source WxH: 320x240 (Y'CbCr) [ 691.265789][T14359] tpg field: 1 [ 691.269860][T14359] tpg crop: (0,0)/320x240 [ 691.274358][T14359] tpg compose: (0,0)/320x240 [ 691.279282][T14359] tpg colorspace: 8 [ 691.287636][T14359] tpg transfer function: 0/0 [ 691.303685][T14359] tpg Y'CbCr encoding: 0/0 [ 691.308162][T14359] tpg quantization: 0/0 [ 691.322103][T14359] tpg RGB range: 0/2 [ 691.326123][T14359] vivid-007: ================== END STATUS ================== [ 692.199164][T14366] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2210'. [ 692.214016][T14372] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2213'. [ 692.415467][T14370] binder: BINDER_SET_CONTEXT_MGR already set [ 692.472071][T14370] binder: 14368:14370 ioctl 4018620d 9 returned -16 [ 693.727347][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b4a4800: rx timeout, send abort [ 693.748085][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805b4a4800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 694.887238][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b4a4000: rx timeout, send abort [ 694.895662][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ad4bc00: rx timeout, send abort [ 694.905000][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805b4a4000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 694.919398][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ad4bc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 697.655328][T14460] Invalid ELF header magic: != ELF [ 698.890774][T13746] Bluetooth: hci2: unexpected event 0x32 length: 727 > 9 [ 699.008198][T14479] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 699.034906][T14476] netlink: set zone limit has 8 unknown bytes [ 699.292646][T14484] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2235'. [ 699.317722][T14484] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2235'. [ 699.410523][T13808] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 699.901193][T14496] zswap: compressor not available [ 700.046485][T14510] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2241'. [ 701.579452][T14534] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2245'. [ 701.594770][T14534] veth0_macvtap: left promiscuous mode [ 701.600983][T14534] macvtap0: entered promiscuous mode [ 701.606414][T14534] macvtap0: entered allmulticast mode [ 702.010519][T14540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2247'. [ 702.041008][T14538] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(12) [ 702.055491][T14540] netlink: 354 bytes leftover after parsing attributes in process `syz.1.2247'. [ 702.321690][T14550] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2248'. [ 702.332637][T14550] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2248'. [ 702.617277][T13808] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 703.441265][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805af03000: rx timeout, send abort [ 703.452018][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805af03000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 704.338550][T14561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2252'. [ 704.381123][T14561] netlink: 54041 bytes leftover after parsing attributes in process `syz.3.2252'. [ 704.489433][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805af00800: rx timeout, send abort [ 704.497980][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805af00400: rx timeout, send abort [ 704.506670][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805af00800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 704.521151][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805af00400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 704.749848][T14566] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 705.617062][T14581] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 705.617062][T14581] The task syz.5.2255 (14581) triggered the difference, watch for misbehavior. [ 711.905568][T14659] openvswitch: netlink: Key type 261 is out of range max 32 [ 712.335648][T14666] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 713.811447][ T29] audit: type=1804 audit(2147510224.243:13): pid=14685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2276" name="/newroot/26/file0" dev="tmpfs" ino=155 res=1 errno=0 [ 713.900598][ T29] audit: type=1804 audit(2147510224.333:14): pid=14688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2276" name="/newroot/26/file0" dev="tmpfs" ino=155 res=1 errno=0 [ 715.498949][T14718] Invalid ELF header magic: != ELF [ 715.870795][T14724] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2286'. [ 715.921987][ T29] audit: type=1804 audit(2147510226.353:15): pid=14725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2285" name="file0" dev="tmpfs" ino=3235 res=1 errno=0 [ 716.153614][ T29] audit: type=1804 audit(2147510226.593:16): pid=14721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2285" name="file0" dev="tmpfs" ino=3235 res=1 errno=0 [ 717.154652][T14748] tipc: Started in network mode [ 717.159613][T14748] tipc: Node identity ee00, cluster identity 4711 [ 717.166297][T14748] tipc: Node number set to 60928 [ 720.581669][T13746] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 720.590500][T13746] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 720.613550][T13746] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 720.629777][T13746] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 720.637594][T13746] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 721.140512][T14813] chnl_net:caif_netlink_parms(): no params data found [ 721.480121][T14821] FAULT_INJECTION: forcing a failure. [ 721.480121][T14821] name failslab, interval 1, probability 0, space 0, times 0 [ 721.512138][T14821] CPU: 1 UID: 0 PID: 14821 Comm: syz.5.2309 Tainted: G U L syzkaller #0 PREEMPT(full) [ 721.512189][T14821] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 721.512200][T14821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 721.512217][T14821] Call Trace: [ 721.512226][T14821] [ 721.512238][T14821] dump_stack_lvl+0x100/0x190 [ 721.512290][T14821] should_fail_ex.cold+0x5/0xa [ 721.512322][T14821] should_failslab+0xc2/0x120 [ 721.512369][T14821] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 721.512412][T14821] ? kstrdup_const+0x63/0x80 [ 721.512459][T14821] kstrdup+0x51/0xe0 [ 721.512500][T14821] kstrdup_const+0x63/0x80 [ 721.512534][T14821] alloc_vfsmnt+0xe5/0x6a0 [ 721.512561][T14821] ? __pfx___might_resched+0x10/0x10 [ 721.512603][T14821] clone_mnt+0x4b/0x930 [ 721.512642][T14821] copy_tree+0xfc/0xbf0 [ 721.512667][T14821] ? __pfx_down_write+0x10/0x10 [ 721.512710][T14821] copy_mnt_ns+0x2bd/0xc30 [ 721.512738][T14821] ? create_new_namespaces+0x30/0xac0 [ 721.512765][T14821] ? rcu_is_watching+0x12/0xc0 [ 721.512809][T14821] create_new_namespaces+0xd3/0xac0 [ 721.512835][T14821] ? bpf_lsm_capable+0x9/0x10 [ 721.512861][T14821] ? security_capable+0x80/0x260 [ 721.512903][T14821] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 721.512937][T14821] ksys_unshare+0x455/0xab0 [ 721.512974][T14821] ? __pfx_ksys_unshare+0x10/0x10 [ 721.513024][T14821] __x64_sys_unshare+0x31/0x40 [ 721.513066][T14821] do_syscall_64+0x106/0xf80 [ 721.513096][T14821] ? clear_bhb_loop+0x40/0x90 [ 721.513131][T14821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.513159][T14821] RIP: 0033:0x7f594019c629 [ 721.513183][T14821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 721.513211][T14821] RSP: 002b:00007f5941056028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 721.513238][T14821] RAX: ffffffffffffffda RBX: 00007f5940415fa0 RCX: 00007f594019c629 [ 721.513256][T14821] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 721.513273][T14821] RBP: 00007f5940232b39 R08: 0000000000000000 R09: 0000000000000000 [ 721.513290][T14821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 721.513307][T14821] R13: 00007f5940416038 R14: 00007f5940415fa0 R15: 00007fff86e93f68 [ 721.513346][T14821] [ 721.530550][T14813] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.772398][T14813] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.779718][T14813] bridge_slave_0: entered allmulticast mode [ 721.789222][T14813] bridge_slave_0: entered promiscuous mode [ 721.798194][T14813] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.808520][T14813] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.815923][T14813] bridge_slave_1: entered allmulticast mode [ 721.825090][T14813] bridge_slave_1: entered promiscuous mode [ 721.903675][T14813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 721.943008][T14813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 722.068142][T14813] team0: Port device team_slave_0 added [ 722.136318][T14813] team0: Port device team_slave_1 added [ 722.180761][T14831] netlink: 'syz.5.2311': attribute type 1 has an invalid length. [ 722.186798][T14813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.196679][T14813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.224317][T14813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.237227][T14813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.244538][T14813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.270569][T14813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.378572][T14813] hsr_slave_0: entered promiscuous mode [ 722.395500][T14813] hsr_slave_1: entered promiscuous mode [ 722.406561][T14813] debugfs: 'hsr0' already exists in 'hsr' [ 722.420735][T14813] Cannot create hsr debugfs directory [ 722.682131][T13808] Bluetooth: hci6: command tx timeout [ 723.241310][T14813] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 723.331035][T14813] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 723.421999][T14813] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 723.485410][T14813] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 723.975651][T14813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.235322][T14813] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.271885][T13957] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.279051][T13957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.387458][T13957] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.394733][T13957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.772533][T13808] Bluetooth: hci6: command tx timeout [ 724.991304][T14813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.076381][T14813] veth0_vlan: entered promiscuous mode [ 726.088307][T14813] veth1_vlan: entered promiscuous mode [ 726.209271][T14813] veth0_macvtap: entered promiscuous mode [ 726.260864][T14813] veth1_macvtap: entered promiscuous mode [ 726.314567][T14883] kexec: Could not allocate control_code_buffer [ 726.337381][T14813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 726.433756][T14813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 726.487581][T13734] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.502552][T13734] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.538856][T13734] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.569678][T13734] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.739242][T13734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.764395][T13734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.852141][T13808] Bluetooth: hci6: command tx timeout [ 726.940619][T13957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.949665][T13957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.573215][T14943] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 728.727982][T14943] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 728.734334][T14943] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 728.740626][T14943] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 728.746974][T14943] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 728.754224][T14943] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 728.923958][T13746] Bluetooth: hci6: command tx timeout [ 729.074944][T14943] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 729.183166][T14943] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 729.211795][T14943] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 729.404954][T14943] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 729.481388][T14943] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 729.488191][T14943] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 729.541328][T14943] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 730.603753][T13808] Bluetooth: hci0: command 0x0406 tx timeout [ 730.842359][T13808] Bluetooth: hci4: command 0x0c1a tx timeout [ 730.848393][T13808] Bluetooth: hci3: command 0x0406 tx timeout [ 730.854543][T13746] Bluetooth: hci2: command 0x0406 tx timeout [ 730.861127][T13808] Bluetooth: hci1: command 0x0406 tx timeout [ 731.242956][T13808] Bluetooth: hci5: command 0x0c1a tx timeout [ 731.567718][T13808] Bluetooth: hci6: command 0x0c1a tx timeout [ 731.851626][T15014] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 733.009191][T13808] Bluetooth: hci4: command 0x0c1a tx timeout [ 733.407853][T13808] Bluetooth: hci5: command 0x0c1a tx timeout [ 733.556597][T15032] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2345'. [ 733.642091][T13808] Bluetooth: hci6: command 0x0c1a tx timeout [ 734.850288][ C1] vcan0: j1939_tp_rxtimer: 0xffff888012cb6400: rx timeout, send abort [ 735.083293][T13808] Bluetooth: hci4: command 0x0c1a tx timeout [ 735.358618][ C1] vcan0: j1939_tp_rxtimer: 0xffff888012cb6400: abort rx timeout. Force session deactivation [ 735.482514][T13808] Bluetooth: hci5: command 0x0c1a tx timeout [ 735.512208][T15062] bridge0: port 3(gretap0) entered blocking state [ 735.536146][T15062] bridge0: port 3(gretap0) entered disabled state [ 735.554896][T15062] gretap0: entered allmulticast mode [ 735.571758][T15062] gretap0: entered promiscuous mode [ 735.581845][T15062] bridge0: port 3(gretap0) entered blocking state [ 735.588412][T15062] bridge0: port 3(gretap0) entered forwarding state [ 735.722031][T13808] Bluetooth: hci6: command 0x0c1a tx timeout [ 736.913054][T15079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2355'. [ 736.931119][T15079] netlink: 354 bytes leftover after parsing attributes in process `syz.1.2355'. [ 737.781825][T15088] Invalid ELF header magic: != ELF [ 741.502905][T15147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2372'. [ 741.516502][T15147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2372'. [ 742.485108][T15160] block nbd8: shutting down sockets [ 744.110849][T15193] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2381'. [ 745.168343][T15214] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2386'. [ 745.204371][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.210989][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.217642][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.224276][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.230853][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.237476][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.244087][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.250674][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.257362][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.263979][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.270567][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.277206][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.283878][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.290473][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.297092][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.303723][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.310320][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.316957][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.323573][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.330169][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.336890][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.343509][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.350104][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.356767][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.363416][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.370019][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.376648][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.383275][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.389871][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.396588][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.403211][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.409787][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.416433][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.423085][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.429684][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.436303][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.442923][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.449531][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.456168][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.462793][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.469373][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.475977][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.482583][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.489181][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.495803][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.502421][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.509019][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.515657][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.522276][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.528799][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.535396][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.542002][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.548552][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.555087][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.561654][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.568197][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.574709][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.581195][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.587696][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.594208][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.600679][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.607200][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.613735][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.620223][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.628487][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.635009][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.641477][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.647980][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.654481][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.660948][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.667497][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.673989][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.680469][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.686981][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.693471][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.699948][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.706502][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.713000][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.719468][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.725959][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.732452][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.738929][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.745420][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.751999][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.758511][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.765021][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.771503][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.778013][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.784598][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.791135][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.797655][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.804172][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.810656][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.817156][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.823672][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.830182][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.836704][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.843241][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.849729][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.856334][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.862902][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.869475][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.876000][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.882568][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.889090][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.895674][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.902240][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.908747][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.915254][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.921735][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.928238][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.934814][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.941402][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.947960][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.954480][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.960956][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.967459][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.973963][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.980438][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.986951][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.993480][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 745.999977][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.006528][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.013027][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.019508][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.026035][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.032554][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.039066][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.046122][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.052633][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.059124][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.065616][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.072105][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.078578][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.085076][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.091618][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.098154][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.104672][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.111165][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.117670][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.124241][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.130785][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.137326][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.143843][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.150414][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.156923][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.163468][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.169934][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.176450][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.183004][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.189477][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.196046][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.202538][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.209020][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.215510][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.222041][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.228514][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.235004][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.241463][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.247955][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.254450][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.260926][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.267427][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.274004][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.280470][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.286965][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.293453][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.299934][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.306431][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.312944][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.319408][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.325935][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.332474][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.338974][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.345493][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.352030][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.358509][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.365019][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.371491][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.377987][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.384498][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.390970][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.397463][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.403969][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.410470][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.416982][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.423513][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.430044][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.436652][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.443148][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.449631][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.456118][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 746.463313][ C1] vcan0: j1939_tp_txtimer: 0xffff888069da0400: tx aborted with unknown reason: -2 [ 746.590762][T15221] futex_wake_op: syz.1.2388 tries to shift op by -2048; fix this program [ 746.599552][T15221] futex_wake_op: syz.1.2388 tries to shift op by -2048; fix this program [ 746.676548][T15223] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2389'. [ 746.717365][T15216] Invalid ELF header magic: != ELF [ 746.748555][T15223] bond0: (slave bond_slave_0): Releasing backup interface [ 746.972568][ C1] vcan0: j1939_tp_rxtimer: 0xffff888069da0400: abort rx timeout. Force session deactivation [ 747.373474][T14988] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 747.399810][T14988] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 747.416313][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.423401][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.427226][T14988] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 747.439916][T14988] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 747.447542][T14988] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 747.866485][T15230] chnl_net:caif_netlink_parms(): no params data found [ 748.109674][T15230] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.116991][T15230] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.135059][T15230] bridge_slave_0: entered allmulticast mode [ 748.145523][T15230] bridge_slave_0: entered promiscuous mode [ 748.196024][T15230] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.212193][T15230] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.230537][T15230] bridge_slave_1: entered allmulticast mode [ 748.247289][T15230] bridge_slave_1: entered promiscuous mode [ 748.385115][T15230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 748.416044][T15230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 748.540418][T15230] team0: Port device team_slave_0 added [ 748.574737][T15230] team0: Port device team_slave_1 added [ 748.703987][T15230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 748.727626][T15230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.818896][T15230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 748.832627][T15230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 748.840321][T15230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.867732][T15230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 748.931862][T15230] hsr_slave_0: entered promiscuous mode [ 748.939724][T15230] hsr_slave_1: entered promiscuous mode [ 748.946842][T15230] debugfs: 'hsr0' already exists in 'hsr' [ 748.953026][T15230] Cannot create hsr debugfs directory [ 749.268962][T15230] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 749.349744][T15230] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 749.381865][T15230] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 749.397456][T15230] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 749.440459][T15230] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.447701][T15230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 749.455237][T15230] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.462420][T15230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 749.504907][T13808] Bluetooth: hci7: command tx timeout [ 749.538508][T15230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 749.566556][T15230] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.576340][T13808] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 750.585848][T13808] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 750.594865][T13808] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 750.634756][T13808] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 750.649359][T13808] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 750.843206][T15282] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2400'. [ 751.005964][T15230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.047439][T15277] chnl_net:caif_netlink_parms(): no params data found [ 751.177059][T15277] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.184429][T15277] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.193113][T15277] bridge_slave_0: entered allmulticast mode [ 751.201556][T15277] bridge_slave_0: entered promiscuous mode [ 751.215120][T15277] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.223317][T15277] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.230840][T15277] bridge_slave_1: entered allmulticast mode [ 751.241878][T15277] bridge_slave_1: entered promiscuous mode [ 751.278095][ C0] vcan0: j1939_tp_rxtimer: 0xffff888083d56c00: rx timeout, send abort [ 751.278953][T15277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 751.286542][ C0] vcan0: j1939_tp_rxtimer: 0xffff888083d56800: rx timeout, send abort [ 751.300970][T15277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 751.303949][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888083d56c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 751.327573][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888083d56800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 751.431704][T15277] team0: Port device team_slave_0 added [ 751.453906][T15277] team0: Port device team_slave_1 added [ 751.513335][T15277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 751.521000][T15277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 751.547739][T15277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 751.562562][T13808] Bluetooth: hci7: command tx timeout [ 751.611716][T15277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 751.629134][T15277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 751.672083][T15277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 751.878169][T15277] hsr_slave_0: entered promiscuous mode [ 751.893411][T15277] hsr_slave_1: entered promiscuous mode [ 751.910267][T15277] debugfs: 'hsr0' already exists in 'hsr' [ 751.923255][T15277] Cannot create hsr debugfs directory [ 752.007339][T15230] veth0_vlan: entered promiscuous mode [ 752.113407][T15230] veth1_vlan: entered promiscuous mode [ 752.341177][T15230] veth0_macvtap: entered promiscuous mode [ 752.398162][T15230] veth1_macvtap: entered promiscuous mode [ 752.505448][T15230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 752.553096][T15230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 752.581488][T15277] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 752.625543][T13857] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.642259][T15277] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 752.733378][T13857] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.763611][T13808] Bluetooth: hci8: command tx timeout [ 752.771132][T15277] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 752.807713][T15277] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 752.831609][T13743] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.841282][T13743] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.996326][T13857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.008851][T13857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.100431][T13734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.122571][T13734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.267469][T15277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.326868][T15277] 8021q: adding VLAN 0 to HW filter on device team0 [ 753.346039][T13743] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.353226][T13743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 753.388157][T13743] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.395305][T13743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.647240][T13808] Bluetooth: hci7: command tx timeout [ 753.670610][T15277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 754.466465][T15277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 754.853569][T13808] Bluetooth: hci8: command tx timeout [ 755.751600][T13808] Bluetooth: hci7: command tx timeout [ 756.719916][T15277] veth0_vlan: entered promiscuous mode [ 756.747650][T15277] veth1_vlan: entered promiscuous mode [ 756.791400][T15277] veth0_macvtap: entered promiscuous mode [ 756.810939][T15277] veth1_macvtap: entered promiscuous mode [ 756.843874][T15277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 756.860118][T15277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 756.883728][T13743] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.914392][T13743] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.924411][T14988] Bluetooth: hci8: command tx timeout [ 756.949020][T13743] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.976011][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880493c4c00: rx timeout, send abort [ 756.977049][T13743] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.984413][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880493c6800: rx timeout, send abort [ 756.984702][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880493c4c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 757.015915][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880493c6800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 757.119308][T13734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.127434][T13734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.187734][T13743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.199915][T13743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.404467][T15400] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 758.463480][T15408] FAULT_INJECTION: forcing a failure. [ 758.463480][T15408] name failslab, interval 1, probability 0, space 0, times 0 [ 758.532890][T15408] CPU: 1 UID: 0 PID: 15408 Comm: syz.8.2416 Tainted: G U L syzkaller #0 PREEMPT(full) [ 758.532957][T15408] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 758.532969][T15408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 758.532988][T15408] Call Trace: [ 758.532998][T15408] [ 758.533010][T15408] dump_stack_lvl+0x100/0x190 [ 758.533060][T15408] should_fail_ex.cold+0x5/0xa [ 758.533095][T15408] should_failslab+0xc2/0x120 [ 758.533142][T15408] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 758.533183][T15408] ? ptlock_alloc+0x1f/0x70 [ 758.533225][T15408] ptlock_alloc+0x1f/0x70 [ 758.533260][T15408] pte_alloc_one+0x84/0x3e0 [ 758.533293][T15408] __pte_alloc+0x6d/0x3f0 [ 758.533339][T15408] ? __pfx___pte_alloc+0x10/0x10 [ 758.533383][T15408] ? __pfx___might_resched+0x10/0x10 [ 758.533423][T15408] ? copy_page_range+0x1e9d/0x6570 [ 758.533465][T15408] copy_page_range+0x3e51/0x6570 [ 758.533547][T15408] ? __pfx_copy_page_range+0x10/0x10 [ 758.533598][T15408] ? __pfx___might_resched+0x10/0x10 [ 758.533654][T15408] ? up_write+0x290/0x4f0 [ 758.533699][T15408] dup_mmap+0xd25/0x2180 [ 758.533746][T15408] ? __pfx_dup_mmap+0x10/0x10 [ 758.533774][T15408] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 758.533833][T15408] ? __lock_acquire+0x4a5/0x2630 [ 758.533870][T15408] ? find_held_lock+0x2b/0x80 [ 758.533913][T15408] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 758.533999][T15408] copy_process+0x73d7/0x7a10 [ 758.534054][T15408] ? __pfx_copy_process+0x10/0x10 [ 758.534088][T15408] ? find_held_lock+0x2b/0x80 [ 758.534140][T15408] ? futex_private_hash_put+0x107/0x1c0 [ 758.534182][T15408] kernel_clone+0xfc/0x9a0 [ 758.534218][T15408] ? __pfx_kernel_clone+0x10/0x10 [ 758.534274][T15408] __do_sys_clone+0xd9/0x120 [ 758.534308][T15408] ? __pfx___do_sys_clone+0x10/0x10 [ 758.534376][T15408] do_syscall_64+0x106/0xf80 [ 758.534407][T15408] ? clear_bhb_loop+0x40/0x90 [ 758.534443][T15408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.534474][T15408] RIP: 0033:0x7efe5f79c629 [ 758.534498][T15408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 758.534527][T15408] RSP: 002b:00007efe60616fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 758.534557][T15408] RAX: ffffffffffffffda RBX: 00007efe5fa15fa0 RCX: 00007efe5f79c629 [ 758.534577][T15408] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 758.534594][T15408] RBP: 00007efe5f832b39 R08: 0000000000000000 R09: 0000000000000000 [ 758.534612][T15408] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 758.534630][T15408] R13: 00007efe5fa16038 R14: 00007efe5fa15fa0 R15: 00007ffc79050688 [ 758.534671][T15408] [ 759.008857][T14988] Bluetooth: hci8: command tx timeout [ 761.577165][T15439] Process accounting resumed [ 761.881093][T15463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2430'. [ 761.891446][T15463] netlink: 354 bytes leftover after parsing attributes in process `syz.2.2430'. [ 762.178544][T15470] FAULT_INJECTION: forcing a failure. [ 762.178544][T15470] name failslab, interval 1, probability 0, space 0, times 0 [ 762.191424][T15470] CPU: 1 UID: 0 PID: 15470 Comm: syz.7.2431 Tainted: G U L syzkaller #0 PREEMPT(full) [ 762.191476][T15470] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 762.191488][T15470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 762.191506][T15470] Call Trace: [ 762.191517][T15470] [ 762.191527][T15470] dump_stack_lvl+0x100/0x190 [ 762.191576][T15470] should_fail_ex.cold+0x5/0xa [ 762.191611][T15470] should_failslab+0xc2/0x120 [ 762.191682][T15470] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 762.191722][T15470] ? ptlock_alloc+0x1f/0x70 [ 762.191766][T15470] ptlock_alloc+0x1f/0x70 [ 762.191800][T15470] pte_alloc_one+0x84/0x3e0 [ 762.191832][T15470] __pte_alloc+0x6d/0x3f0 [ 762.191876][T15470] ? __pfx___pte_alloc+0x10/0x10 [ 762.191922][T15470] ? __pfx___might_resched+0x10/0x10 [ 762.191955][T15470] ? copy_page_range+0x1e9d/0x6570 [ 762.191992][T15470] copy_page_range+0x3e51/0x6570 [ 762.192060][T15470] ? __pfx_copy_page_range+0x10/0x10 [ 762.192101][T15470] ? mas_store+0x666/0xac0 [ 762.192152][T15470] ? __pfx___vma_start_write+0x10/0x10 [ 762.192196][T15470] dup_mmap+0xd25/0x2180 [ 762.192242][T15470] ? __pfx_dup_mmap+0x10/0x10 [ 762.192269][T15470] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 762.192325][T15470] ? __lock_acquire+0x4a5/0x2630 [ 762.192362][T15470] ? find_held_lock+0x2b/0x80 [ 762.192404][T15470] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 762.192475][T15470] copy_process+0x73d7/0x7a10 [ 762.192528][T15470] ? __pfx_copy_process+0x10/0x10 [ 762.192560][T15470] ? find_held_lock+0x2b/0x80 [ 762.192620][T15470] kernel_clone+0xfc/0x9a0 [ 762.192649][T15470] ? __pfx_futex_wait+0x10/0x10 [ 762.192703][T15470] ? __pfx_kernel_clone+0x10/0x10 [ 762.192758][T15470] __do_sys_clone+0xd9/0x120 [ 762.192791][T15470] ? __pfx___do_sys_clone+0x10/0x10 [ 762.192856][T15470] do_syscall_64+0x106/0xf80 [ 762.192886][T15470] ? clear_bhb_loop+0x40/0x90 [ 762.192923][T15470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.192953][T15470] RIP: 0033:0x7f3c2259c629 [ 762.192978][T15470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.193007][T15470] RSP: 002b:00007f3c234c3fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 762.193035][T15470] RAX: ffffffffffffffda RBX: 00007f3c22816090 RCX: 00007f3c2259c629 [ 762.193055][T15470] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 762.193073][T15470] RBP: 00007f3c22632b39 R08: 0000000000000000 R09: 0000000000000000 [ 762.193091][T15470] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 762.193106][T15470] R13: 00007f3c22816128 R14: 00007f3c22816090 R15: 00007ffdc2f5e1f8 [ 762.193139][T15470] [ 762.866197][T15456] rtc_cmos 00:00: Alarms can be up to one day in the future [ 763.446829][ T5882] rtc_cmos 00:00: Alarms can be up to one day in the future [ 763.474675][ T5882] rtc_cmos 00:00: Alarms can be up to one day in the future [ 763.512609][ T5882] rtc_cmos 00:00: Alarms can be up to one day in the future [ 763.520239][ T5882] rtc_cmos 00:00: Alarms can be up to one day in the future [ 763.572009][ T5882] rtc rtc0: __rtc_set_alarm: err=-22 [ 764.703327][T15511] bridge0: port 3(gretap0) entered blocking state [ 764.710042][T15511] bridge0: port 3(gretap0) entered disabled state [ 764.716901][T15511] gretap0: entered allmulticast mode [ 764.723977][T15511] FAULT_INJECTION: forcing a failure. [ 764.723977][T15511] name failslab, interval 1, probability 0, space 0, times 0 [ 764.737576][T15511] CPU: 0 UID: 0 PID: 15511 Comm: syz.8.2442 Tainted: G U L syzkaller #0 PREEMPT(full) [ 764.737626][T15511] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 764.737638][T15511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 764.737654][T15511] Call Trace: [ 764.737664][T15511] [ 764.737673][T15511] dump_stack_lvl+0x100/0x190 [ 764.737722][T15511] should_fail_ex.cold+0x5/0xa [ 764.737763][T15511] should_failslab+0xc2/0x120 [ 764.737809][T15511] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 764.737851][T15511] ? __kernfs_new_node+0xd2/0x960 [ 764.737895][T15511] __kernfs_new_node+0xd2/0x960 [ 764.737937][T15511] ? __pfx___kernfs_new_node+0x10/0x10 [ 764.737983][T15511] ? find_held_lock+0x2b/0x80 [ 764.738026][T15511] ? kernfs_root+0xee/0x2a0 [ 764.738061][T15511] ? kernfs_root+0xee/0x2a0 [ 764.738106][T15511] kernfs_new_node+0x11b/0x1a0 [ 764.738153][T15511] kernfs_create_link+0xcc/0x240 [ 764.738186][T15511] sysfs_do_create_link_sd+0x90/0x140 [ 764.738225][T15511] sysfs_create_link+0x61/0xc0 [ 764.738261][T15511] __netdev_adjacent_dev_insert+0x43e/0xbf0 [ 764.738314][T15511] ? __pfx___netdev_adjacent_dev_insert+0x10/0x10 [ 764.738377][T15511] __netdev_upper_dev_link+0x3d8/0x7e0 [ 764.738421][T15511] ? __pfx___netdev_upper_dev_link+0x10/0x10 [ 764.738456][T15511] ? kernfs_root+0xf8/0x2a0 [ 764.738494][T15511] ? kernfs_add_one+0x214/0x850 [ 764.738542][T15511] netdev_master_upper_dev_link+0x9f/0xd0 [ 764.738584][T15511] ? __pfx_netdev_master_upper_dev_link+0x10/0x10 [ 764.738626][T15511] ? lockdep_rtnl_is_held+0x26/0x40 [ 764.738665][T15511] ? netdev_is_rx_handler_busy+0x83/0x140 [ 764.738701][T15511] br_add_if+0x9fd/0x1b40 [ 764.738838][T15511] ? security_capable+0x80/0x260 [ 764.738884][T15511] add_del_if+0x114/0x160 [ 764.738916][T15511] br_dev_siocdevprivate+0x8ac/0x1650 [ 764.738950][T15511] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 764.738995][T15511] ? lock_acquire+0x1cf/0x380 [ 764.739053][T15511] ? netdev_name_node_lookup+0x107/0x150 [ 764.739095][T15511] ? __mutex_lock+0x26a/0x1b90 [ 764.739133][T15511] dev_ifsioc+0xc1e/0x1e90 [ 764.739163][T15511] ? __pfx_dev_ifsioc+0x10/0x10 [ 764.739188][T15511] ? __pfx___mutex_lock+0x10/0x10 [ 764.739231][T15511] ? dev_load+0x8e/0x240 [ 764.739272][T15511] ? dev_load+0x8e/0x240 [ 764.739323][T15511] dev_ioctl+0x70e/0x1070 [ 764.739353][T15511] sock_ioctl+0x494/0x6b0 [ 764.739394][T15511] ? __pfx_sock_ioctl+0x10/0x10 [ 764.739430][T15511] ? hook_file_ioctl_common+0x146/0x410 [ 764.739478][T15511] ? __fget_files+0x21f/0x3d0 [ 764.739525][T15511] ? __pfx_sock_ioctl+0x10/0x10 [ 764.739566][T15511] __x64_sys_ioctl+0x18e/0x210 [ 764.739607][T15511] do_syscall_64+0x106/0xf80 [ 764.739636][T15511] ? clear_bhb_loop+0x40/0x90 [ 764.739672][T15511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.739726][T15511] RIP: 0033:0x7efe5f79c629 [ 764.739752][T15511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 764.739781][T15511] RSP: 002b:00007efe605d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 764.739807][T15511] RAX: ffffffffffffffda RBX: 00007efe5fa16180 RCX: 00007efe5f79c629 [ 764.739827][T15511] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000008 [ 764.739843][T15511] RBP: 00007efe5f832b39 R08: 0000000000000000 R09: 0000000000000000 [ 764.739860][T15511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 764.739877][T15511] R13: 00007efe5fa16218 R14: 00007efe5fa16180 R15: 00007ffc79050688 [ 764.739913][T15511] [ 765.131056][T15511] gretap0: left allmulticast mode [ 766.932118][T15517] Process accounting resumed [ 773.059472][T15622] futex_wake_op: syz.2.2469 tries to shift op by -2048; fix this program [ 773.080217][T15622] futex_wake_op: syz.2.2469 tries to shift op by -2048; fix this program [ 773.184451][T15622] 0x000000000001-0x000000020000 : "" [ 773.232943][T15622] ftl_cs: FTL header corrupt! [ 774.802193][T15659] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 775.497495][T15659] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 775.677020][T15669] Process accounting resumed [ 778.403943][T15734] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 779.457557][T15736] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 779.846197][T15753] futex_wake_op: syz.8.2494 tries to shift op by -2048; fix this program [ 779.861700][T15753] futex_wake_op: syz.8.2494 tries to shift op by -2048; fix this program [ 780.019629][T15752] 0x000000000001-0x000000020000 : "" [ 780.096430][T15752] ftl_cs: FTL header corrupt! [ 781.142766][T15769] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 781.441104][T15776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2500'. [ 782.290643][T15791] netlink: 18 bytes leftover after parsing attributes in process `syz.1.2503'. [ 783.071456][T15805] QAT: Device 0 not found [ 783.803701][T15805] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 783.814548][T15805] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 783.858449][T15805] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 783.871286][T15805] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 783.909161][T15805] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 783.917738][T15805] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 783.945317][T15805] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 783.976205][T15805] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 783.993137][T15805] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 784.103046][T15805] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 784.114790][T15805] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 784.126407][T15805] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 784.143467][T15805] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 784.354812][T15821] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 785.242005][T14988] Bluetooth: hci0: command 0x0406 tx timeout [ 785.508880][T15836] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 785.882231][T13808] Bluetooth: hci2: command 0x0406 tx timeout [ 785.889935][T13746] Bluetooth: hci1: command 0x0406 tx timeout [ 785.900703][T14988] Bluetooth: hci3: command 0x0406 tx timeout [ 785.962788][T14988] Bluetooth: hci6: command 0x0c1a tx timeout [ 785.964568][T13746] Bluetooth: hci4: command 0x0c1a tx timeout [ 785.976749][T13808] Bluetooth: hci5: command 0x0c1a tx timeout [ 786.042334][T13746] Bluetooth: hci7: command 0x0c1a tx timeout [ 786.122198][T13746] Bluetooth: hci8: command 0x0c1a tx timeout [ 787.326129][T15855] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 787.333575][T15855] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 787.353849][T15855] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 787.372519][T15855] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 787.379090][T15855] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 787.422169][T15855] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 787.428386][T15855] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 787.444827][T15855] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 787.450898][T15855] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 788.184044][T15881] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26 [ 788.842433][T14988] Bluetooth: hci0: command 0x0406 tx timeout [ 789.402479][T14988] Bluetooth: hci4: command 0x0c1a tx timeout [ 789.409168][T14988] Bluetooth: hci3: command 0x0406 tx timeout [ 789.415256][T13746] Bluetooth: hci2: command 0x0406 tx timeout [ 789.421368][T13808] Bluetooth: hci1: command 0x0406 tx timeout [ 789.482308][T15911] Bluetooth: hci8: command 0x0c1a tx timeout [ 789.488422][T13738] Bluetooth: hci7: command 0x0c1a tx timeout [ 789.494666][T14988] Bluetooth: hci6: command 0x0c1a tx timeout [ 789.500740][T14988] Bluetooth: hci5: command 0x0c1a tx timeout [ 789.550343][T15885] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27 [ 790.282143][ T30] INFO: task kworker/u8:5:10304 blocked for more than 143 seconds. [ 790.302996][ T30] Tainted: G U L syzkaller #0 [ 790.310053][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 790.360415][ T30] task:kworker/u8:5 state:D stack:20648 pid:10304 tgid:10304 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 790.422785][ T30] Workqueue: netns cleanup_net [ 790.462018][ T30] Call Trace: [ 790.465339][ T30] [ 790.468275][ T30] __schedule+0xfee/0x60e0 [ 790.512243][ T30] ? __lock_acquire+0x4a5/0x2630 [ 790.517870][ T30] ? __pfx___schedule+0x10/0x10 [ 790.522811][ T30] ? find_held_lock+0x2b/0x80 [ 790.542016][ T30] ? schedule+0x2bf/0x390 [ 790.560065][ T30] schedule+0xdd/0x390 [ 790.583702][ T30] schedule_timeout+0x1b2/0x280 [ 790.608262][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 790.633628][ T30] ? mark_held_locks+0x40/0x70 [ 790.702181][ T30] __wait_for_common+0x2e7/0x4c0 [ 790.738974][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 790.781972][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 790.787470][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 790.831988][ T30] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 790.852432][ T30] __flush_workqueue+0x3f7/0x1200 [ 790.857540][ T30] ? __lock_acquire+0x4a5/0x2630 [ 790.877445][ T30] ? __lock_acquire+0x4a5/0x2630 [ 790.901978][ T30] ? __pfx___flush_workqueue+0x10/0x10 [ 790.908406][ T30] ? reacquire_held_locks+0xce/0x1e0 [ 790.916639][ T30] ? __pfx_sock_def_readable+0x10/0x10 [ 790.927846][ T30] ? __pfx_sock_def_readable+0x10/0x10 [ 790.933430][ T30] rds_tcp_listen_stop+0x104/0x160 [ 790.938570][ T30] rds_tcp_exit_net+0xe0/0x870 [ 790.945101][ T30] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 790.950519][ T30] ? __pfx___might_resched+0x10/0x10 [ 790.955865][ T30] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 790.961262][ T30] ops_undo_list+0x2ee/0xab0 [ 790.965917][ T30] ? __pfx_ops_undo_list+0x10/0x10 [ 790.971037][ T30] ? cleanup_net+0x332/0x920 [ 790.975705][ T30] ? idr_destroy+0x62/0x2e0 [ 790.980254][ T30] cleanup_net+0x499/0x920 [ 790.989359][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 790.994372][ T30] ? rcu_is_watching+0x12/0xc0 [ 790.999164][ T30] process_one_work+0x9d7/0x1920 [ 791.004185][ T30] ? __pfx_process_one_work+0x10/0x10 [ 791.010404][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 791.015504][ T30] worker_thread+0x5da/0xe40 [ 791.020124][ T30] ? __pfx_worker_thread+0x10/0x10 [ 791.026159][ T30] ? kthread+0x13a/0x450 [ 791.030407][ T30] ? __pfx_worker_thread+0x10/0x10 [ 791.037326][ T30] kthread+0x370/0x450 [ 791.041404][ T30] ? __pfx_kthread+0x10/0x10 [ 791.047288][ T30] ret_from_fork+0x754/0xd80 [ 791.051957][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 791.057098][ T30] ? __switch_to+0x7b4/0x1120 [ 791.061788][ T30] ? __pfx_kthread+0x10/0x10 [ 791.071950][ T30] ret_from_fork_asm+0x1a/0x30 [ 791.076763][ T30] [ 791.108195][ T30] INFO: task syz.0.2065:13722 blocked for more than 144 seconds. [ 791.117118][ T30] Tainted: G U L syzkaller #0 [ 791.126744][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 791.187575][ T30] task:syz.0.2065 state:D stack:27504 pid:13722 tgid:13720 ppid:5829 task_flags:0x400140 flags:0x00080002 [ 791.251338][ T30] Call Trace: [ 791.254807][ T30] [ 791.257760][ T30] __schedule+0xfee/0x60e0 [ 791.302034][ T30] ? __lock_acquire+0x4a5/0x2630 [ 791.307058][ T30] ? __pfx___schedule+0x10/0x10 [ 791.312003][ T30] ? find_held_lock+0x2b/0x80 [ 791.318027][ T30] ? schedule+0x2bf/0x390 [ 791.332177][ T30] schedule+0xdd/0x390 [ 791.336516][ T30] schedule_timeout+0x1b2/0x280 [ 791.341409][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 791.362081][ T30] ? mark_held_locks+0x40/0x70 [ 791.366918][ T30] __wait_for_common+0x2e7/0x4c0 [ 791.371883][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 791.378898][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 791.389043][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 791.396303][ T30] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 791.412283][ T30] __flush_workqueue+0x3f7/0x1200 [ 791.418765][ T30] ? __pfx___flush_workqueue+0x10/0x10 [ 791.424752][ T30] ? reacquire_held_locks+0xce/0x1e0 [ 791.430071][ T30] ? release_sock+0x21/0x220 [ 791.452146][ T30] ? __pfx_sock_def_readable+0x10/0x10 [ 791.466086][ T30] ? __local_bh_enable_ip+0x9e/0x120 [ 791.471428][ T30] ? __pfx_sock_def_readable+0x10/0x10 [ 791.496267][ T30] rds_tcp_listen_stop+0x104/0x160 [ 791.501409][ T30] rds_tcp_exit_net+0xe0/0x870 [ 791.519799][ T30] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 791.552129][ T30] ? __pfx___might_resched+0x10/0x10 [ 791.562479][ T30] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 791.567914][ T30] ops_undo_list+0x2ee/0xab0 [ 791.577421][T15911] Bluetooth: hci8: command 0x0c1a tx timeout [ 791.583578][T14988] Bluetooth: hci7: command 0x0c1a tx timeout [ 791.606954][ T30] ? kfree+0x120/0x6b0 [ 791.611089][ T30] ? __pfx_ops_undo_list+0x10/0x10 [ 791.622034][ T30] ? ops_init+0x2fa/0x5f0 [ 791.626430][ T30] setup_net+0x1fa/0x3a0 [ 791.630729][ T30] ? __pfx_setup_net+0x10/0x10 [ 791.652418][ T30] ? lockdep_init_map_type+0x5c/0x250 [ 791.657853][ T30] ? mutex_init_lockep+0x110/0x150 [ 791.682038][ T30] copy_net_ns+0x46f/0x7c0 [ 791.686532][ T30] create_new_namespaces+0x3ea/0xac0 [ 791.691846][ T30] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 791.711986][ T30] ksys_unshare+0x455/0xab0 [ 791.716557][ T30] ? kfree+0x2ec/0x6b0 [ 791.720650][ T30] ? rcu_is_watching+0x12/0xc0 [ 791.742328][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 791.747421][ T30] ? kcov_ioctl+0x16a/0x720 [ 791.762033][ T30] __x64_sys_unshare+0x31/0x40 [ 791.766865][ T30] do_syscall_64+0x106/0xf80 [ 791.771485][ T30] ? clear_bhb_loop+0x40/0x90 [ 791.792037][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.797992][ T30] RIP: 0033:0x7fa761d9c629 [ 791.811987][ T30] RSP: 002b:00007fa762c4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 791.820462][ T30] RAX: ffffffffffffffda RBX: 00007fa762015fa0 RCX: 00007fa761d9c629 [ 791.852036][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 791.860065][ T30] RBP: 00007fa761e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 791.892023][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 791.900134][ T30] R13: 00007fa762016038 R14: 00007fa762015fa0 R15: 00007ffdf699ad48 [ 791.914036][ T30] [ 791.917253][ T30] [ 791.917253][ T30] Showing all locks held in the system: [ 791.926513][ T30] 1 lock held by khungtaskd/30: [ 791.954418][ T30] #0: ffffffff8e7e9220 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 791.992480][ T30] 3 locks held by kworker/1:5/5882: [ 791.997719][ T30] #0: ffff88813fe63548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 792.010215][ T30] #1: ffffc900042b7d08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 792.024054][ T30] #2: ffffffff8e7f4e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 792.045948][ T30] 3 locks held by kworker/u8:5/10304: [ 792.051675][ T30] #0: ffff88801c6ae948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 792.077579][ T30] #1: ffffc90003807d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 792.087881][ T30] #2: ffffffff905f8f70 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 792.098693][ T30] 1 lock held by syz.0.2065/13722: [ 792.106750][ T30] #0: ffffffff905f8f70 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 792.132224][ T30] 3 locks held by kworker/u10:1/13743: [ 792.142678][ T30] #0: ffff88813fea4148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 792.182385][ T30] #1: ffffc900000f7d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 792.232815][ T30] #2: ffffffff906118a8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 792.264036][ T30] 1 lock held by syz.4.2167/14164: [ 792.269150][ T30] #0: ffffffff905f8f70 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 792.280222][ T30] 2 locks held by getty/14551: [ 792.285189][ T30] #0: ffff8880388da0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 792.297281][ T30] #1: ffffc9000dd372f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 792.309833][ T30] 1 lock held by syz.3.2256/14576: [ 792.316196][ T30] #0: ffffffff905f8f70 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 792.326451][ T30] 1 lock held by syz.6.2343/15023: [ 792.331555][ T30] #0: ffffffff905f8f70 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 792.342432][ T30] 1 lock held by syz.5.2349/15049: [ 792.347540][ T30] #0: ffffffff905f8f70 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 792.357981][ T30] 1 lock held by syz.8.2528/15894: [ 792.363161][ T30] #0: ffffffff906118a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 792.373996][ T30] 1 lock held by syz.1.2533/15920: [ 792.380146][ T30] #0: ffffffff906118a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 792.389195][ T30] 2 locks held by syz.7.2531/15933: [ 792.394451][ T30] #0: ffffffff906118a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 792.403450][ T30] #1: ffffffff8e7f4e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 792.416663][ T30] [ 792.419019][ T30] ============================================= [ 792.419019][ T30] [ 792.430057][ T30] NMI backtrace for cpu 0 [ 792.430082][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 792.430123][ T30] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 792.430132][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 792.430147][ T30] Call Trace: [ 792.430155][ T30] [ 792.430165][ T30] dump_stack_lvl+0x100/0x190 [ 792.430208][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 792.430249][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 792.430287][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 792.430330][ T30] sys_info+0x141/0x190 [ 792.430363][ T30] watchdog+0xd25/0x1050 [ 792.430404][ T30] ? __pfx_watchdog+0x10/0x10 [ 792.430444][ T30] ? __kthread_parkme+0x18c/0x230 [ 792.430477][ T30] ? kthread+0x13a/0x450 [ 792.430508][ T30] ? __pfx_watchdog+0x10/0x10 [ 792.430545][ T30] kthread+0x370/0x450 [ 792.430576][ T30] ? __pfx_kthread+0x10/0x10 [ 792.430611][ T30] ret_from_fork+0x754/0xd80 [ 792.430649][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 792.430689][ T30] ? __switch_to+0x7b4/0x1120 [ 792.430717][ T30] ? __pfx_kthread+0x10/0x10 [ 792.430751][ T30] ret_from_fork_asm+0x1a/0x30 [ 792.430796][ T30] [ 792.430811][ T30] Sending NMI from CPU 0 to CPUs 1: [ 792.559783][ C1] NMI backtrace for cpu 1 [ 792.559805][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G U L syzkaller #0 PREEMPT(full) [ 792.559843][ C1] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 792.559852][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 792.559867][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 792.559897][ C1] Code: c8 85 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 ba 1e 00 fb f4 bc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 792.559920][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246 [ 792.559939][ C1] RAX: 000000000030d199 RBX: ffff88801e6e0000 RCX: ffffffff8b8ccc75 [ 792.559956][ C1] RDX: 0000000000000000 RSI: ffffffff8de7a16b RDI: ffffffff8c1aeb20 [ 792.559972][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed10170a6795 [ 792.559987][ C1] R10: ffff8880b8533cab R11: 0000000000000000 R12: ffffed1003cdc000 [ 792.560002][ C1] R13: 0000000000000001 R14: ffffffff90d98910 R15: 0000000000000000 [ 792.560017][ C1] FS: 0000000000000000(0000) GS:ffff888124451000(0000) knlGS:0000000000000000 [ 792.560040][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 792.560056][ C1] CR2: 0000000000036680 CR3: 000000003759a000 CR4: 00000000003526f0 [ 792.560071][ C1] Call Trace: [ 792.560078][ C1] [ 792.560086][ C1] default_idle+0x9/0x10 [ 792.560114][ C1] default_idle_call+0x6c/0xb0 [ 792.560144][ C1] do_idle+0x35b/0x4b0 [ 792.560182][ C1] ? __pfx_do_idle+0x10/0x10 [ 792.560221][ C1] cpu_startup_entry+0x4f/0x60 [ 792.560257][ C1] start_secondary+0x21d/0x2d0 [ 792.560287][ C1] ? __pfx_start_secondary+0x10/0x10 [ 792.560321][ C1] common_startup_64+0x13e/0x148 [ 792.560353][ C1] [ 792.761758][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 792.768655][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 792.779329][ T30] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 792.784515][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 792.794559][ T30] Call Trace: [ 792.797825][ T30] [ 792.800738][ T30] dump_stack_lvl+0x100/0x190 [ 792.805414][ T30] vpanic+0x552/0x970 [ 792.809412][ T30] ? __pfx_vpanic+0x10/0x10 [ 792.813906][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 792.820073][ T30] panic+0xd1/0xe0 [ 792.823799][ T30] ? __pfx_panic+0x10/0x10 [ 792.828235][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 792.834407][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 792.840574][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 792.846721][ T30] ? watchdog.cold+0x198/0x1ca [ 792.851485][ T30] ? watchdog+0xd35/0x1050 [ 792.855893][ T30] watchdog.cold+0x1a9/0x1ca [ 792.860480][ T30] ? __pfx_watchdog+0x10/0x10 [ 792.865150][ T30] ? __kthread_parkme+0x18c/0x230 [ 792.870165][ T30] ? kthread+0x13a/0x450 [ 792.874411][ T30] ? __pfx_watchdog+0x10/0x10 [ 792.879110][ T30] kthread+0x370/0x450 [ 792.883170][ T30] ? __pfx_kthread+0x10/0x10 [ 792.887749][ T30] ret_from_fork+0x754/0xd80 [ 792.892330][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 792.897437][ T30] ? __switch_to+0x7b4/0x1120 [ 792.902100][ T30] ? __pfx_kthread+0x10/0x10 [ 792.906682][ T30] ret_from_fork_asm+0x1a/0x30 [ 792.911444][ T30] [ 792.914840][ T30] Kernel Offset: disabled [ 792.919157][ T30] Rebooting in 86400 seconds..