last executing test programs: 3m50.659939567s ago: executing program 0 (id=2134): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(r0, &(0x7f0000000300)=@generic={0x23, "0000e100"}, 0x58) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async, rerun: 32) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async, rerun: 32) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0xc) (async) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/batadv_slave_0/proxy_ndp\x00', 0x382, 0x0) sendfile$auto(r1, r1, 0x0, 0x2) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async, rerun: 32) ioctl$auto(r2, 0xae41, 0xffffffffffffffff) (async, rerun: 32) ioctl$auto_KVM_GET_MSRS(r3, 0x4008ae89, 0x0) (async, rerun: 64) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) (async, rerun: 64) statmount$auto(0x0, &(0x7f0000000480)={0x5ffc2f43, 0x4, 0x8000, 0xf, 0x8, 0x6, 0x15e, 0x8, 0x5, 0xffffffff, 0x3fb, 0x4688, 0x0, 0x6, 0x7, 0x8000000000000000, 0xfffffffffffffffa, 0x8, 0x6, 0x6, 0x2cf2, 0x0, 0x2, 0x8, 0x8001, 0x9, 0x5, 0xffffff53, 0x9, 0x3, 0x0, [0x2, 0xc5, 0x200, 0x0, 0x800, 0x15, 0x3, 0x200, 0x7, 0x8, 0x8000000000000001, 0x800, 0x6, 0x0, 0x5, 0x9, 0x8, 0x40, 0x80000087, 0x800, 0x3, 0x5, 0x1, 0x1f0b, 0x200, 0x1ff, 0x9, 0x0, 0x2, 0x7, 0x3, 0x1, 0x6, 0x100, 0x0, 0x1, 0x7, 0x2000000000000, 0xd5, 0x2, 0x7ff, 0x5, 0x8], "548d8ea698997f834de0f18213dd3b52214026ce4187935c0c77717f3e44f3f00f1a8f2d30b91d4e80e45ab184bba619e17ef29993af7cb9867ed24679cb4ef88c32af5dc2f73167ae"}, 0x9f, 0x7) unshare$auto(0x40000080) (async) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24048004) (async) futex$auto(0x0, 0x9, 0x3e, 0x0, 0x0, 0x0) (async) r6 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, 0x0, 0x400, 0x70bd2a, 0x2, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x401}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000401) (async) ioctl$auto_UI_DEV_SETUP(r6, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fb4a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f00", 0xa}) ioctl$auto_UI_DEV_CREATE(r6, 0x5501, 0x0) writev$auto(r6, &(0x7f0000000340)={0x0, 0x500000}, 0x3) process_madvise$auto_MADV_WILLNEED(r5, &(0x7f0000000140)={&(0x7f0000000040)="52b5e20a67ccd3c276f4ebb53e93b7c319b45a8e6635094a734d4238e5cab3e9f4c8029a506a3247da4dee85afce3bf983d16cbff44fd7bbeafd0afe5ab7abfe6f8d463a4e39ff8b5f766ac94c5100ab2495ab56503156923d86c8777d69b255e2186cd00f5d1218388a64988654c9fd4c", 0x6}, 0x5, 0x3, 0x4) 3m47.153558479s ago: executing program 0 (id=2145): r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000240)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="80022bbd7000fcdbdf300f000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) rt_sigqueueinfo$auto(0x0, 0x1, &(0x7f00000000c0)={@siginfo_0_0={0x4, 0x5, 0xbb, @_sigsys={0x0, 0x50000000, 0x6}}}) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f0000000080)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0) socket(0x11, 0x2, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x7, 0x10000006, 0x48}) mmap$auto(0x0, 0x6, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) eventfd$auto(0x1) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(r2, 0x4, r3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x29, 0x80002, 0xcd) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r4) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000850}, 0xc08c) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram0\x00', 0x10ba02, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop5\x00', 0x101202, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r5, 0x4c00, 0x0) prctl$auto(0x59616d61, 0xffffffffffffffff, 0x1, 0x1004, 0xfffffffffffffffb) 3m46.731486303s ago: executing program 0 (id=2147): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000380)=ANY=[@ANYBLOB="d9d9d67f9a90785ae8b3610a1bcb32975ebd6d696a204dfc60f5ba74917ef74e4c46d89d8d465203513bfb51ff1c3ea5e7f7aa7573dd0d3abc64b47479c5315e35e05f7a32f8131ff8ab79b86c831e3ffdfa5f75c6817ab4ead83d0890deef36edb4f149c1d5e16e55bd4913a96d2acb465dc4d8dd86e125b7cb120baf5c2ceb5411115143cebae2ac0cbdbf585da216ccc7c415ccb005ee46052ada0b106f8617badf474cbbafa6f5271287bbe1268809dd13fe79d727001483e8165008d520dd26d808c4d2d7233e6335438a073f6b5d1ff72c92a0c21047ec7fb8654014", @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf2504000000080017000800000004000e00"], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0xe8) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) write$auto(0xffffffffffffffff, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x10\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00', 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffdcb, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x4, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x10001, 0x7, 0x8001, 0x7ffffff8, 0x5, 0x7, 0x5, 0x61, 0x103}) socket$nl_generic(0x10, 0x3, 0x10) 3m45.089469344s ago: executing program 0 (id=2152): socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, 0x0, 0x40000) (async) sendmsg$auto_NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, 0x0, 0x40000) r0 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$auto_IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000000500)={@config_section=&(0x7f0000000140)={"3f7fe9b03445776973313f40ceea8604487a06254c9f35843295c8e6a79630fd6453ae9e4b5b1fa74bbfbb7b32c4a486087d23b9cc2e5feed3681104779d32eb", @padding1, @next=&(0x7f0000000300)={"baee825e6d3f0f91f7c574656f34bb3665f82e82423e32dd30a00eab7b8b92a96790ccc2b11ccc536a9ae90d99ed2683b1a5083692e3f77f03cb24af30d47f3f", @padding1, @next=&(0x7f0000000280)={"b8ba7f838af6dc0e244780fa5a8890bb31f8fd2c72b4b6e2f0fd2fec811d532ce0d385bd7a886caa7850cae36417eab6eb8190d3550a6852b06b8020c1737efe", @params=&(0x7f00000001c0)={"8a00ba4977346a3662d559b8bc4e720d39994a668e370e88ab740aba8d533026f9c89d5213a35821f13f57ced0736574f6bc8ac8716c0a178d74452279c4fcf0", "d6360c0f8379fe45e4e8333e042b95f9bf928b1601020e3e2317d5cad86381fc9f623a07671d5b8d00d2fbb5554681e5f8d473daafb2980aa919be98d3764698", @padding3, 0x1}}}}, 0x6}) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) set_mempolicy_home_node$auto(0x0, 0x200fffd, 0x5, 0x0) io_setup$auto(0x1, 0x0) (async) io_setup$auto(0x1, 0x0) r1 = socket(0x2c, 0x3, 0x0) getsockopt$auto(r1, 0x11b, 0x8, 0x0, 0x0) read$auto_proc_sessionid_operations_base(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r1, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0xfffffffffffffffd, 0xe273, 0x15) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000006c0)={{0x0, 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000006c0)={{0x0, 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) (async) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) prctl$auto(0x37, 0x1, 0x4, 0x5, 0x7) (async) prctl$auto(0x37, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0xa, 0x3, 0xeb1, 0x7, 0x8000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/raw\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x5) (async) read$auto(r3, 0x0, 0x5) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 3m43.624325048s ago: executing program 0 (id=2157): mmap$auto(0x0, 0x20009, 0x9, 0xeb1, 0x401, 0x8004) socket(0x10, 0x2, 0x0) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x80000001, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x80000000081, 0x8, 0x2, 0xfffffffffffffff8}) openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000040), 0x22b80, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008040}, 0x40000c0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3m43.443851061s ago: executing program 0 (id=2159): madvise$auto_MADV_DONTNEED_LOCKED(0xf, 0x0, 0x18) mmap$auto(0x2, 0x20009, 0x8005, 0xeb5, 0x8, 0x1008000) unshare$auto(0x40000080) getrusage$auto_RUSAGE_SELF(0x0, &(0x7f0000000180)={{0x3, 0x4}, {0x2c75, 0x3}, 0x8000000000000000, 0x9, 0x6, 0xa653, 0x7, 0x4, 0x5, 0x80, 0xa, 0x0, 0x2, 0x8, 0x3, 0x1}) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x7ffe) close_range$auto(0x1, 0x8000, 0x0) socket(0x2, 0x5, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ttyS1\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000840)="13") open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) open(&(0x7f0000000080)='./file0\x00', 0x200101, 0x51) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(0x4, 0x1, 0x10, 0xfffffffffffffffd, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x161342, 0x100) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) socket(0xa, 0x3, 0x3a) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0) syz_clone(0x80000000, &(0x7f0000000000)="085a1056b6aa2f10d8ddee0633aea682a5ff", 0x12, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xe, 0xb5b, 0xebf, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) r2 = socket(0x10, 0x2, 0xa) mmap$auto(0xfffffffffffffffe, 0x40009, 0x9, 0x9b72, 0x7, 0xb) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mtd/mtd0/erasesize\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) setsockopt$auto(r2, 0x104000000000010e, 0x1, 0x0, 0x16) r4 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf8d5feacf8510"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001) write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb) setsockopt$auto(0x400000000000003, 0x29, 0xd2, 0x0, 0x567) 3m28.284547834s ago: executing program 32 (id=2159): madvise$auto_MADV_DONTNEED_LOCKED(0xf, 0x0, 0x18) mmap$auto(0x2, 0x20009, 0x8005, 0xeb5, 0x8, 0x1008000) unshare$auto(0x40000080) getrusage$auto_RUSAGE_SELF(0x0, &(0x7f0000000180)={{0x3, 0x4}, {0x2c75, 0x3}, 0x8000000000000000, 0x9, 0x6, 0xa653, 0x7, 0x4, 0x5, 0x80, 0xa, 0x0, 0x2, 0x8, 0x3, 0x1}) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x7ffe) close_range$auto(0x1, 0x8000, 0x0) socket(0x2, 0x5, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ttyS1\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000840)="13") open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) open(&(0x7f0000000080)='./file0\x00', 0x200101, 0x51) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(0x4, 0x1, 0x10, 0xfffffffffffffffd, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x161342, 0x100) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) socket(0xa, 0x3, 0x3a) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0) syz_clone(0x80000000, &(0x7f0000000000)="085a1056b6aa2f10d8ddee0633aea682a5ff", 0x12, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xe, 0xb5b, 0xebf, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) r2 = socket(0x10, 0x2, 0xa) mmap$auto(0xfffffffffffffffe, 0x40009, 0x9, 0x9b72, 0x7, 0xb) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mtd/mtd0/erasesize\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) setsockopt$auto(r2, 0x104000000000010e, 0x1, 0x0, 0x16) r4 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf8d5feacf8510"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001) write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb) setsockopt$auto(0x400000000000003, 0x29, 0xd2, 0x0, 0x567) 2m43.340135078s ago: executing program 2 (id=2302): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x39db00, 0x0) io_uring_setup$auto(0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$auto(0x8000000, 0x0, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/mem\x00', 0x40, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x194) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x20000054) write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000003cc0)='/dev/bus/usb/016/001\x00', 0x1, 0x0) ioctl$auto_USBDEVFS_FREE_STREAMS(r1, 0x8008551d, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x202003, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) mmap$auto(0xfffffffffffffffb, 0x1, 0xdf, 0xdb74, 0xffffffffffffffff, 0x10001) io_uring_setup$auto(0x8008, 0x0) close_range$auto(0x2, 0x8, 0x0) clock_nanosleep$auto(0x2, 0x6, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) close_range$auto(0x2, 0x8, 0x0) 2m42.167001345s ago: executing program 2 (id=2305): socket(0x15, 0x5, 0x0) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002d0008000700"/18, @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="000126bd7000fbdbdf2502000000080001"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) (async) r0 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="06000000", @ANYRES16=0x0, @ANYBLOB="0100"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0x96bc}, 0x2, &(0x7f0000000380), 0x7, 0xa505}, 0x9}, 0x7, 0x4008) (async) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) (async) ioctl$auto(0x3, 0x89e0, 0x38) 2m41.831816265s ago: executing program 2 (id=2306): r0 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000), 0x14280, 0x0) mmap$auto(0x0, 0x20006, 0x4000000000dd, 0x13, r0, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mbind$auto(0x8000000000000002, 0x100000004, 0x100000000, 0x0, 0x9, 0x2) socket(0x29, 0x1, 0x0) mmap$auto(0x0, 0x100, 0x4020000000df, 0x13, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x28}}, 0x4c810) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd9650200"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) setreuid$auto(0x3, 0x7) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) socket(0x15, 0x5, 0x0) close_range$auto(0x0, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socketcall$auto(0x17f, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0xdf, 0x0, [{0x40000071, 0x3ff, 0x2}]}) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 2m38.163104235s ago: executing program 1 (id=2308): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x2, 0x1) setsockopt$auto(r0, 0x0, 0x81, 0x0, 0x78) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000580)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xa8\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9\x83\xb3h$\xeb\xad\xa4P\x8f\xc3bM{\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9\xe8\xb2\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6E*\xc9\xdd.q\xdbAX\xf6\xfaD\xcdz\xbc~\xf30LE\xb5\x18Wf\xd3\x9b\\\x1c\xbb^\xfb9\xe5\x1b:\xa4\xdd\x81\x91\\\xbc\x1fUl\xfa)\xbf\x9dPV\xae\xa9\x9c)\x01|\xfe\xd0!Rx\a\xc4\xb1$\x8eE\xc2j\x83sLS\xa8H\xf6\xf2,R\x90:\x8fx\xab\x90\xfe$h\x80!\xe2\nY#\xee\x1b}O=\x8bn\xd7zZ\x18\xa7\x9e~\x94k\x8e\xdba\xf2\xc3G\x8egR3\x1d\x01J\x87\x14(}\f\xb1}%N|z,\xbe\x1fB\xd3\xeb\xec\x83X\x8f\x97\x95\xfd\xed\xe6wt\x1d\xb3\xa8\xfb)L~}\x9f\xbf\xd0\xc9\x9d\x82-C\xc3Ez@\x8c\xbf\xa2 \x88\\\r6M\x83', 0x4, 0x0) 2m37.884187283s ago: executing program 1 (id=2310): openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) mmap$auto(0x0, 0xe983, 0xa3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/md_mod/parameters/new_array\x00', 0xa001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/scsi_mod/parameters/default_dev_flags\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/loop9/queue/nr_zones\x00', 0x942, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x19, 0x0, 0xfb3) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) ioctl$auto_KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x4b564d00, 0x400, 0x9}]}) socket(0x2, 0x801, 0x106) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) ioctl$auto(r3, 0x541c, r4) 2m37.800688915s ago: executing program 2 (id=2311): write$auto(0xca, 0x0, 0x7f) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0x4}}, 0x6a) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x4802, 0x0) statx$auto(r4, 0x0, 0x6d7, 0x80000008, 0x0) mlockall$auto(0x800000000000005) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) listxattrat$auto(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x2000000001) close_range$auto(0x2, r5, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x0, 0x0) r6 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) sendfile$auto(r6, r6, 0x0, 0x10000c00000003) 2m37.387523835s ago: executing program 1 (id=2312): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) r0 = syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4001, @loopback}, 0x6b) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)=ANY=[@ANYBLOB="05000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xb5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) sendmsg$auto(r1, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon7\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r4) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00ab29dc931f0e02b7745be74fb8e8255f614f85f94bc5ef8facda4b1cb3e135ef23203752a9a06f5adc02fe10fd6059eb5ec860fbb39453d7ba92bd5a73e0e45ce2d585cccf203901d41ed36536bffcadc5fa27dbe72d209b4c922ee03aba35fb65731b21d405c9def0a3765c9b0ff8fbbff63336633bec215ead541e5766cb7e6a546c58ddbc3cbd84697b73ae", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000001140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="080027bd0300fddbdf2569000000"], 0x14}, 0x1, 0x0, 0x0, 0x8091}, 0x10) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, 0x0) mlockall$auto(0x7) mprotect$auto(0x0, 0x806121, 0x6) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) ptrace$auto(0x10, r0, 0x2, 0x1007ff) ptrace$auto_PTRACE_SETREGSET(0x4205, r0, 0x2, 0x9193) 2m35.177320285s ago: executing program 2 (id=2315): r0 = open(&(0x7f0000000800)='./file1\x00', 0x62240, 0x154) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) execveat$auto(r0, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x11000) 2m34.912276517s ago: executing program 2 (id=2317): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto(r0, 0x0, 0xe) io_uring_setup$auto(0x1, 0x0) futex$auto(&(0x7f0000000080)=0x1, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) futex$auto(&(0x7f0000000080)=0xfffffffa, 0xc, 0x1, 0x0, 0x0, 0xfffffffa) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) r1 = socket(0xa, 0x3, 0x3a) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) setsockopt$auto(r1, 0x29, 0x4b, &(0x7f00000000c0)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x98\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5', 0x10000110) bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "02d0ac0c00e435826339c7328903"}, 0x6a) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) execveat$auto(r2, 0x0, &(0x7f0000000080)=0x0, 0x0, 0x7) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0x4) close_range$auto(r3, 0x8, 0x0) socket(0x10, 0x2, 0xc) 2m32.609406113s ago: executing program 1 (id=2322): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/mounts\x00', 0x105442, 0x0) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/statistics/rx_crc_errors\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000100)=""/4096, 0x1000) setsockopt$auto_SO_CNX_ADVICE(r0, 0xfff, 0x35, &(0x7f0000001500)='\x00', 0x9) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001180), r1) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000014c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001340)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_FILS_CACHE_ID={0x4}, @NL80211_ATTR_FREQ_FIXED={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x40011) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) ioctl$auto_SNDRV_PCM_IOCTL_INFO(r1, 0x81204101, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r4 = socket(0x1e, 0x1, 0x0) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001580), r0) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) statx$auto(r1, &(0x7f0000001240)=':,\x00', 0x0, 0x9000000, &(0x7f0000001280)={0x4, 0xac, 0xfffffffffffffffb, 0x1, 0xee00, 0x0, 0x7, 0x100, 0xa, 0x8001, 0x2, 0x0, {0x402, 0x7}, {0x3, 0x3274925}, {0x1, 0x40005}, {0x180000000000000, 0x400}, 0x10001, 0x3, 0x8, 0x727, 0x33, 0x8, 0xfffffffd, 0xfffffffffffffffd, 0xfffffffe, 0x401, 0x3, 0xc58, [0x5, 0xa71d, 0x7df5, 0x6, 0x9, 0x0, 0x8000, 0x6, 0x81]}) r8 = wait4$auto(0x0, &(0x7f0000001380)=0x7, 0x6, &(0x7f00000013c0)={{0xc000000, 0x4}, {0x48, 0x7}, 0x55f, 0xa4ac, 0x12, 0x1, 0x2, 0x1, 0x100, 0x9, 0x45, 0x7, 0x6, 0xfffffffffffffeff, 0x81, 0x1b}) shmctl$auto_IPC_INFO(0x2, 0x3, &(0x7f0000001580)={{0x8, 0x0, r7, 0x7bf, 0x19, 0x7ff, 0x8001}, 0x3, 0x1, 0x3, 0x4, @inferred=r8, @inferred=r6, 0xe641, 0x0, 0x0, &(0x7f0000001540)="65c8e2dc93f86ac11fb36326c1fbced2a465fc8969632a9a94465951ed56a5d6ef64ccdae2420078f6c4cdcf"}) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001d40)={&(0x7f00000015c0)={0x460, r5, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x58, 0x2, 0x0, 0x1, [@nested={0x4, 0x157}, @nested={0x24, 0x8c, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @pid=r6}, @nested={0x4, 0x77}, @typed={0x6, 0xc6, 0x0, 0x0, @str='[\x00'}, @typed={0xc, 0x12a, 0x0, 0x0, @u64=0x6}]}, @typed={0x8, 0xdd, 0x0, 0x0, @u32=0x2}, @nested={0x20, 0x5b, 0x0, 0x1, [@typed={0x8, 0x5e, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x11c, 0x0, 0x0, @fd=r1}, @typed={0xc, 0xc9, 0x0, 0x0, @u64=0xcb8}, @generic]}, @typed={0x4, 0xa8}, @generic]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xfffffffe}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x3e4, 0x2, 0x0, 0x1, [@nested={0x95, 0x4d, 0x0, 0x1, [@typed={0x8, 0xcd, 0x0, 0x0, @uid=0xee00}, @generic="35e778354a4cbbe66767af46447c2a916be188961f60217bca921fb75729764a6c7c3c120f4d577e9ef3d031944d9c536edb68f32c9ffe8b406f97b09c0a3c210ab31952e376889c028b0295537be8b7696fb76083a2a1994cbfc50516f0434c90dca8ab94bd1b8fb9087388090224ffade4e1d4361349d2a9c05b02ae9d12f990d878ec8207ea419f"]}, @generic="55d67aa9eb50baa8b549389e99869b7ccf334d1f0593450b7551ef04576384c88763ebbe06254ae6fc75", @nested={0x28f, 0x92, 0x0, 0x1, [@typed={0x101, 0x156, 0x0, 0x0, @binary="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"}, @nested={0x4, 0x22}, @generic="97068e7d5cad19da5fb2a0d6c5dc42c5359eee09e3f7dd215547d2e5ef6b011eee641e2bedad396d9182e5a88934df667f3adc8ba9d6d60f7a42d5d0afd2e7490eee1ed6f428d3cb1325bb0b2a78e24cf3549c36a298a80a0e056de075d7489d642a57dfdd3b0330a2e4428582baddc22ed661f0defa944000851fe9a1414066a8ae6031a216728e4d3b09701f0b9f3e4215df76adf7dc2a15de3991fc4c26f03b8a0dcdd661e1482e8dc4e1ac1300ed466b8ec79917a934834912b7c6548150df9e859cb3509639cc", @generic="cbf10c685484165bf14589d7ab869dbd02a585daca2674a5c6a484130cc079e8b133e75558f3ad1d7802c8252112c9630eb13c5a8aa557f995d2eb2e5a64d9aa5c45496c4340f2df3704636313fd4b277242ab751255a3814fef6c2e105a9f366ab8f26409ad6b4376d4a9aefa9d46a60ac80177c9e31814aed29fcdb7895d4bc2f0bfe444ddce9b7951295ca992dcdc518e55e71eaeed49daae", @typed={0x8, 0x15a, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x9}, @generic, @typed={0x14, 0xd8, 0x0, 0x0, @ipv6=@loopback}]}, @typed={0x8, 0x121, 0x0, 0x0, @fd=r4}, @generic="48932c880e4a69a2b993548a860cb8d041b8cfb5941b0bd7f25a6fd03e299ee697f5cc93236f2d97", @generic="e67e66be2b", @generic="50800a78bd77ec33e28a7c42d257e4ef70059c3f2bbd4a1af7d79c914232a119552bbe460eda5ee650aa17e9592f3e3a1f7b9bbbf3c095851139de2855dcb69b7136fcd4ad5ebe64dbf897f79a68845e056ab4c048de94af8f"]}]}, 0x460}, 0x1, 0x0, 0x0, 0x20000800}, 0x1000) r9 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vbi0\x00', 0x80382, 0x0) ioctl$auto(r9, 0xc0045627, r4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 2m30.496090033s ago: executing program 1 (id=2326): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mlockall$auto(0x7) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) remap_file_pages$auto(0x6, 0x19, 0x2fe, 0x5, 0x1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/dummy0/addr_gen_mode\x00', 0x1, 0x0) r1 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(r1, 0x10000000084, 0x9, 0x0, 0x9c) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) tgkill$auto(0x0, 0x0, 0x11) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = getuid() keyctl$auto(0x6, 0x0, r3, 0x0, 0x4000002) setreuid$auto(r3, 0x0) shmctl$auto_SHM_STAT(0x4, 0xd, &(0x7f0000000300)={{0x800, 0xee00, 0xffffffffffffffff, 0xd404, 0xebbc, 0x58, 0x2}, 0x0, 0x9, 0x16c3, 0xb, @inferred=0xffffffffffffffff, @raw=0x10, 0xbce, 0x0, &(0x7f0000000140)="5851e7772380f48e0c556118b0c82efdaa9d5655e318755c33becad258317a52a0650f833cf922f8a072d039988370d400172942085ae0dae9cc7affd31351756c3fe7fbeb37baf303099e8779ab600e070fadc0bb1219e022ba3e7d64f90bb67b8eaf52477328c454737075332dbc3d379a7a025da8eb5f663f6b72603f1422a7a4d56cbc8789260bfc4a1cf5ec6604c36d8c5f8c2f10636bf735c4f6b36dcd75293656aedc6e1b1c5651ca79", &(0x7f0000000200)="5f3eada11dd43d9c7022b66b3f817c2590e4a3202c68b7a121cef6dd3d99d593c3edbfbb8210b326293e08b42f3d4d2ec16344b4fdaf42270c070d05fc42ea76eca21b60b0f95615c338cad2c8cba75ecdbdbf917ae6d6fc5778fc2cc195b4e93f16f84d4cea7f93b1e09914fc8640d86351aa1fc6f208b1ae68a24f3c696272645fd3bd042d1a3d90107bdaca6e3115a1bcbf59c371da8591c71d94299955418d5516866805a79c31380668c261ba86b246f92ead4a9afbc922a625509695866a07ff6ffd0d559b5c0d927cfaef7b9aa85a1885208c"}) sendmsg$auto_NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000d80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x9dc, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY_CAPS={0x723, 0x18, 0x0, 0x1, [@nested={0xbd, 0x70, 0x0, 0x1, [@nested={0x4, 0xe0}, @nested={0x4, 0x56}, @generic="6f4cb34377fe1df3bb87c1b5f1ca6504bd7646c8da1c4dc0ee9f54a214f0dab0441276e4ff130a186fec6a7cbadb5b2a0f2c766720f65479181e83629acee38178aef430454e52f3b0b0676c839479d28484ca0491ad5c5a24c68f40b8ebbdba509dada3ae84fc71114fd31e275c7ee64a3939d3ef313771c1b814df728d0c0793b41dc197d062cd86df9e8f652daa18bd1409cdbb565a76f64999249c5240f845faa3a013c8735419", @typed={0x8, 0x95, 0x0, 0x0, @u32=0x400}]}, @typed={0xf3, 0xee, 0x0, 0x0, @binary="39fdc6ca35062a5afa832332f6adad99a3c8d9d2885d60bd05f45e3d974d7952b54314cf4f821a086b2cdebe6c69d9c91c32e329be89ca880e92e07aee03dee62de3b5040da9ab51e1bae8d393f602c76c47b819e67ee8a0ebc47da2cf3807a264ea9fced7eabad54b0da3a967da1edb47aa91a0e94917623f05cfae180b0407b523587f2527c523264df8939aeb99db5895a97d9c364ddcc746b797b0212f024aa6fecf368bd7619cc5244ab0bcfb8b8fd5f068fa180402e998ecdc989249f434d6f2ab6bc788990dcf68bf22224ff7ca1914c7f9af57e9cb6cdf7ab2ce27fd2b837de58e1483c05d6462d05ff89c"}, @generic="d2", @nested={0xd8, 0xcd, 0x0, 0x1, [@nested={0x4, 0x1d}, @typed={0xc3, 0xbf, 0x0, 0x0, @binary="5ac364e9ee9720ae9632b1744dbf938e772c44a1e0d7ea778d4516c11579a7c30e28ae83965bf57e7a3154231534a2cfd02a6e20320439a8c2b9c9b0d0d560755789935ac8461eb6fba875537e997da71badac7228be9cb4e9e0c757cc7460d512bb38b1ae03a7b82ae7f3b7f6a775b2e3673d5a0ccfa0c97dd754efd778becf9712d669c4f6b18ea6209d0d8773e3a1f4c4239020d4e57110cf57ecbbeea9e7d0e9d781c53854c82be7f50c8fccc42428317951b8e33111ab67789770c08e"}, @typed={0xc, 0x71, 0x0, 0x0, @u64=0x4}]}, @nested={0x1c, 0x14e, 0x0, 0x1, [@typed={0x4, 0x54, 0x0, 0x0, @binary}, @typed={0x8, 0x153, 0x0, 0x0, @uid=r3}, @typed={0xc, 0x4, 0x0, 0x0, @u64=0x153b0c12}]}, @generic="c94749eb4397bdfc45b2e3d1fd5b5abb7e634014e1446654475edd4367da36b468ba055f401755bb04e060853cfa3a2d1a572d91ae0d93b07498d72efbb2790ccb01cb6834222e7dd8b91eba30905b44f746989e51d273f0efeca10589b931fb2c3a0815e781709ff6e8cd72a51251546c6a0ee0f31bb20d17194f64af59d783b45d17b9408c58e4cdd23a049fd1c9272a30bea532c4dc72015c457d084c78f88a4f5aeb98f0ce8f7249c6836afe72c22044d6d76d8c6b8c87dfdeceb2b690cc17c96aa2ebb37d7e70bc21e5e5367c65b6f547804721ac35f848cb04ff0fc0fa5148c7fd3f22bdde2f2708c7d209", @generic="b243ece09e4a35fc27f8b309ecc47f5b", @nested={0x36c, 0x50, 0x0, 0x1, [@generic="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", @nested={0x4, 0xad}, @nested={0x4, 0x122}, @generic="f883244ffd116a5907888f28aec56236715e6b453c34bccc9198ac184b390a72f0e22db409d4c8974ae6048e65b137550aad9a9e08ba89994a1e7b0f8c955fb1534250732b0126a36faef6b8b3e895b748c1012b9f4dd1bae0325072de21afd2450db0041f87b0d6e9c7fe7c85c8e818955f64642444cee2e9bcef94428891c0dd31d0a3", @generic="a600f6f60c89bc0993cdbdd6712ba1418f31bd0794ef99f9f5dcaeae2840f9fe26890bf04855d8cc8d5248388d8860d5befd278cbde0ab435fbd4acd540f58828217048bf259a01a5c2c7f83ca6e6a71e47ad8ff57ce87b386442377513a0ca91b9f36982a462ef455384c39358e85d25ad705ffce827761d988b11d1f7ed65598339665594c95b7673bedcba5971ebda05250539327be865d88b92568845ff29bfcb9a073ea55897f82a3251a94a71ffd9471dfb8975276b6b1da25336f1d", @nested={0x4, 0x7b}, @generic="2882e7d3303fcd470ab28641e980a606341b3e6777f63c5623d92d06fc109532175332209943156c29ea4e16f53e9a879c5611df6118f7a4f5f005128cc765183a0c2eb7bbb9e8ac824785866854e37be0dd913b150360344f0e0d764ca1818c1e835cdee6c58054bef54053d4c525bf6fc9bad5f9d6636e62d594bd7264f89c37e43780bf5a695db7a0a976909bff5952990dac414a0a3ddf1fc937262c577defdfc19fcb3d74e55ea58014d37ee6e17e583f6be1973036513a5f804e8e2381e9481c2088ea205034aa8297062c612a71390897395a2c168ecdb5775a7a", @generic="43108cdf6da395d0f57d6d91e2e0c31f8162f7461e9442a089a3c35e6a2e6e480c89df7059a60e16b0833d50bd55f8db39ed40dbb9cef5f5cf15bdb347ecec4269"]}, @typed={0xc, 0x16, 0x0, 0x0, @u64=0xffff}]}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x2}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x29c, 0x2b, 0x0, 0x1, [@nested={0x28f, 0x11, 0x0, 0x1, [@nested={0x4, 0x14c}, @generic="cf29560f1b2dae4c1c4754d21370bedfbb595286aca63332c7adc4fcda86dd58e9342a89e3b3979cbeb5c6f8b0ea66559ba3359b23c5a3de81b55075", @typed={0x31, 0x2d, 0x0, 0x0, @str='/proc/sys/net/ipv6/conf/dummy0/addr_gen_mode\x00'}, @generic="18bf13d4da80bee9dee828d72dbd3b36710e671cb77369df2dfe680823ed16fd7dbf3d985c779041cb9f388c7612aad5c4dfc385af2b98dbabec11115983e515803cbc7ef240954ded2b2b1506cddcfee9d2a6de1c1551a454bccf4b1e63c418eb7d4b0f884eed1f61221307bf005bac67ea793e88fb90f9", @nested={0x4, 0x8}, @generic="5c7207b1b0153ef7e563229a0458dee30b195edc5f003a2551d855fcc80ca7adedf6dcd1360a8ae9e28ae80fae405a2c106312f5b1ba53e6adc5bd752f8a2a5a952643589e77ac4077baf0518c69d9dec6cd76dd1aede6289dd29783bbc6e0f492f9b4b659bbe9b5fdf21d00bc70a7527d5f976961d3bc6cfa129127c9524d172ff0a03e33a1ad3aef64609561f9031ac8c4ada92bebb27c8a45d38cdb263c24b4", @nested={0x4, 0x63}, @typed={0x5, 0xfc, 0x0, 0x0, @str='\x00'}, @generic="c4", @generic="371c4f39a3ae4ca76914fce22056ecb9699ffb64725c13bc518dbf9a6d900f3553ff826f9d2498390c6e9071970a40e90c3357f4aade446d17da68fa34989130e7bf429a2fd22bb1ec34c7ae99812d3ce0aa47810abb657745025e24da40db5138f21f008adee8af42846a1119308d5e5083e04dba0d2733483e088979476deb1ce0eba68a68a3600daa6272f402658d36e5ac3fd490e06e992e9ac855f5a8324dbf80edc808ccbe7570bc4b1ec09fbd7848bd8a453a6c64c235d801acda25a5c9470ac13e99a8c93ce736e57ffc644c37f41046126c1aabbeb21b0d9f374d907272a5067290d47479fd16beda"]}, @typed={0x8, 0xaf, 0x0, 0x0, @uid=r4}]}]}, 0x9dc}, 0x1, 0x0, 0x0, 0x20048090}, 0xc0c0) 2m27.740950713s ago: executing program 1 (id=2330): getrlimit$auto(0xffff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x400) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon13\x00', 0x2702, 0x0) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xd, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0xff, 0x2000000000000002, 0x9, 0xfffffffffffff761, 0x103, 0xa, 0x4, 0x7fff, 0x5, 0x4006]}, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x8, 0xfffffffffff70001, 0x15) prctl$auto(0x1000000003b, 0x0, 0x4, 0x15, 0x7) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) pselect6$auto(0x5, 0x0, &(0x7f0000000180)={[0x2, 0x8, 0x9, 0x3, 0x80000000101, 0x1c00000, 0xa1, 0x400000008, 0xfffffffffffffffe, 0x8, 0x1, 0x4, 0x1, 0x0, 0x80e, 0x9]}, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x8019) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(0x3, 0x0, 0x6) acct$auto(0x0) 2m12.600191028s ago: executing program 33 (id=2330): getrlimit$auto(0xffff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x400) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon13\x00', 0x2702, 0x0) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xd, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0xff, 0x2000000000000002, 0x9, 0xfffffffffffff761, 0x103, 0xa, 0x4, 0x7fff, 0x5, 0x4006]}, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x8, 0xfffffffffff70001, 0x15) prctl$auto(0x1000000003b, 0x0, 0x4, 0x15, 0x7) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) pselect6$auto(0x5, 0x0, &(0x7f0000000180)={[0x2, 0x8, 0x9, 0x3, 0x80000000101, 0x1c00000, 0xa1, 0x400000008, 0xfffffffffffffffe, 0x8, 0x1, 0x4, 0x1, 0x0, 0x80e, 0x9]}, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x8019) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(0x3, 0x0, 0x6) acct$auto(0x0) 1m35.465368351s ago: executing program 4 (id=2451): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x13, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x1, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x6548, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x81) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r0, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x2000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28b42, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0xffff8000, 0x280009, 0xb, 0x8000000008011, r1, 0x0) mremap$auto(0x1ff000, 0x8, 0x843, 0x3, 0xfffff000) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = pipe$auto(0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/4096, 0x1000) msgctl$auto_IPC_SET(0x9, 0x1, &(0x7f0000000400)={{0x6, 0xee01, 0x0, 0x9, 0x10000000, 0xc5, 0x73}, &(0x7f0000000380), &(0x7f00000003c0)=0xc, 0x8, 0xcc5, 0x5, 0x10001, 0x2, 0x3, 0x4d2, 0x6, @raw=0x3, @inferred=0xffffffffffffffff}) ioctl$auto_EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000480)={r4, 0x3, 0x2, 0x200, 0x0, 0x94}) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f0000000040)="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", 0x147) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003b40)={'xfrm0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYRES16=r6], 0x1ac}}, 0x40001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4040044}, 0x40000) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x60, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000080), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1m33.871323537s ago: executing program 4 (id=2454): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.3/usb4/urbnum\x00', 0xa0420, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)=""/15, 0xf) io_uring_setup$auto(0x59, &(0x7f0000000200)={0x0, 0x1d, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6, 0xfffffffffffffffd}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x9, 0x100000000}}) io_uring_register$auto(0x2, 0x21, &(0x7f0000000240), 0x1f) socket(0x1e, 0x1, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nbd11\x00', 0x101000, 0x0) pipe$auto(&(0x7f0000001480)=0xffffffffffffffff) read$auto_console_fops_tty_io(r3, &(0x7f00000001c0)=""/142, 0x8e) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(r2, 0x5, 0x3, &(0x7f00000000c0)='#}\x00', 0x3f) ioctl$auto_BLKROGET(r2, 0x125e, 0x0) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) ioctl$auto_tracing_buffers_fops_trace(r4, 0x5220, 0x0) ioctl$auto_UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000180)={0x1, 0xd52, {0x6, 0x7, 0x5, {0x3, 0xfff8}, {0x0, 0x7}, @rumble={0xe, 0x6}}, {0x6, 0x2, 0x7, {0xba, 0xb}, {0x6, 0x4}, @ramp={0x8, 0x9, {0x40, 0x6a, 0xfe00, 0x7}}}}) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) bpf$auto(0xd, &(0x7f0000000000)=@test={r5, 0x71c, 0xfaab, 0x468, 0x2, 0x8000000000000001, 0x80, 0x7, 0x2, 0x1fc, 0xfd, 0xb5, 0x4, 0x40004, 0xd96e}, 0xe3) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x200) 1m32.781759797s ago: executing program 4 (id=2456): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) (rerun: 64) r1 = openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, 0x0, 0x400, 0x0) (async) ioctl$auto_TIOCCBRK2(r0, 0x5428, &(0x7f00000001c0)="4ace9e608b6eaad16633798c390fd3af5f5281a563dd") r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv$auto(r2, 0x0, 0x40000000001, 0x0, 0xa, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) ioctl$auto_TCSBRKP2(r0, 0x5425, 0x0) (async) syz_genetlink_get_family_id$auto_nl80211(0x0, r3) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/tcp\x00', 0x400, 0x0) close_range$auto(r4, r0, 0x6) pread64$auto(r4, 0x0, 0x202, 0xfffff000) close_range$auto(r1, 0xa, 0x0) (async, rerun: 64) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) (rerun: 64) ioctl$auto_TCFLSH2(r5, 0x5408, 0x0) 1m31.888002286s ago: executing program 4 (id=2457): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) sysfs$auto(0x2, 0x100000000000033, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/pagemap\x00', 0x80800, 0x0) read$auto(r2, 0x0, 0x39b8) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/user\x00') ioctl$auto(0x3, 0xc0383e04, r3) setsockopt$auto_SO_BSDCOMPAT(0xffffffffffffffff, 0x7, 0xe, &(0x7f0000000000)='.:&\x00', 0x5eeb) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r4 = io_uring_setup$auto(0xe, &(0x7f0000000100)={0xffffffff, 0x1, 0x0, 0xa4c, 0x1, 0x10, r0, [0x0, 0x1, 0xa], {0x4, 0x8, 0x0, 0xff, 0xa, 0x5, 0x130, 0x1ff, 0x3}, {0xd5, 0x0, 0xff, 0x4, 0x4f54, 0x80002, 0x4, 0x6, 0x99a}}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="db002cbd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) ioctl$auto_SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000180)={0x0, r0, 0xc4, "985125836359ba00630fa4a4cc510036"}) msgctl$auto_IPC_INFO(0x7, 0x3, &(0x7f0000000340)={{0x1, 0xee00, 0x0, 0xfffeffff, 0x101, 0xd8, 0xbad}, &(0x7f0000000280)=0x2, &(0x7f0000000300)=0x8, 0x100000000, 0xff, 0x100000000, 0xff, 0xfc, 0x1, 0x62b, 0x7f, @raw=0xffffff81}) waitid$auto(0x8, r4, &(0x7f00000004c0)={@siginfo_0_0={0x4, 0xc0, 0x7, @_sigfault={&(0x7f00000003c0)="406be702d8071cecf662c77cff442a1818d01a2d62cbc04ac234dc5569b06c5536d0aa1401ddb087cf752ec2bee1dcae82a46a346a7d0ec77a53baf78e707d9ee8fecc49b17d19bddd324062c2d42492c86aab8b3707cee809967f0ed756a85062145741a93f2f6da2370def817bfd92108613e4ed2d38919517e546e42c569b92a7a8c616b881d2933aba306eda58e78631fd7da1b4d2da4dcb5e69ae5c572e4db67a4fd282e6d7e8e1571882c27b6eff60ab40d47c8d14c66f7049aa258fe95c", @_perf={0x200, 0x9, 0x3}}}}, 0x80, &(0x7f0000000540)={{0x2, 0x6}, {0x5}, 0x2, 0x8, 0x800, 0x10, 0x4, 0x7, 0x0, 0x814, 0x1, 0x5, 0xf5b2, 0xdc3, 0x9, 0x8}) r5 = gettid() kcmp$auto(0x1, r5, 0x1, 0x4, 0x24000) openat$auto_tracing_thresh_fops_trace(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/debug/tracing/tracing_thresh\x00', 0x20000, 0x0) r6 = landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa0, 0x1, 0x8}, 0x9, 0x0) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="130026bd7000ffffffff0200000008000300", @ANYRES32=r9, @ANYBLOB="08000c01"], 0x24}, 0x1, 0x0, 0x0, 0x440c0}, 0x20040894) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'veth1_vlan\x00'}) clone3$auto(&(0x7f0000000680)={0x3ff, 0x3, 0x1, 0x49, 0x3ff, 0x2, 0x1, 0x4, 0x4, 0x299c0000000000, 0x7}, 0x9) setregid$auto(0xffffffffffffffff, 0xfffe) 1m31.565695028s ago: executing program 4 (id=2458): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, 0x0, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x4000000) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r1, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) unshare$auto(0x40000080) ioprio_get$auto(0x3, 0x0) 1m28.026162857s ago: executing program 4 (id=2462): r0 = socket(0x28, 0x1, 0x0) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="200027ac7000fddbdf250a00000008000100023ffcfeeb4246389136f03fc939186b6bc001d748d070f7d953fa922882a349015b6e0ce6cdd60246dcd88fc437978cf7ac9bd7e5eb3edf0658a75d98edc760d3645b71db299d3f12d8433d04e2243856ca754f67f10100000001000000e37e402c8ec48b4c0ab9144ae81fea", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES16=0x0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="f100098008000800", @ANYRES32, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="4c1109804001d380040018807b2f6b22a4f340557b2f0f44862f980d77a6e16ef6bb80f26debb4634d9e62fe4d20f66a541ca3bd7c53ff2fa01c81d7037647b0be27ddffcf1c23c38eeba882d55017711ab5e0d2a422539d41c60f8eb8a8231a13121c984908001d00", @ANYRES32=0x0, @ANYBLOB="08001800fbb021bc39ee176d5f22af3041b1ed4133b7e5c27c386adc7f7baef3ae270603cbc66178bb0321", @ANYRES32, @ANYBLOB="0800c200", @ANYRES32=0x0, @ANYBLOB="d4e60eab2196047df1482064fb0d4d7143fb0d12db3d08855f897b7c42840f9f1bbc12df4e903f8f56d999c2f73612b3a37200cb55cd3e673e3fdbebe434f93767ce", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES8, @ANYBLOB="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"], 0x1284}, 0x1, 0x0, 0x0, 0x4040801}, 0xc5) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, 0x68) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$auto_NS_GET_PID_IN_PIDNS(0xffffffffffffffff, 0x8004b708, &(0x7f0000000140)=0xc4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) connect$auto(r4, &(0x7f0000000440)=@xdp={0x2c, 0x4, r5, 0x30}, 0xdf5) r6 = syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'geneve1\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="20040000", @ANYRES16=r6, @ANYBLOB="110b27bd7000fbdbdf250900000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x9800) r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) socket(0x2b, 0x1, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x0, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x4, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0x15, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r9 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r9, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x2, "f74d086d6600f5daa47fca1f1a0730a2f629350000000000000008600418af10", @inferred=r8}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r10 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) r11 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/psched\x00', 0x40102, 0x0) pread64$auto(r11, 0x0, 0x100000001, 0x100) read$auto(r10, 0x0, 0x1ff) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x4) 1m12.114184408s ago: executing program 34 (id=2462): r0 = socket(0x28, 0x1, 0x0) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="200027ac7000fddbdf250a00000008000100023ffcfeeb4246389136f03fc939186b6bc001d748d070f7d953fa922882a349015b6e0ce6cdd60246dcd88fc437978cf7ac9bd7e5eb3edf0658a75d98edc760d3645b71db299d3f12d8433d04e2243856ca754f67f10100000001000000e37e402c8ec48b4c0ab9144ae81fea", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES16=0x0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="f100098008000800", @ANYRES32, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="4c1109804001d380040018807b2f6b22a4f340557b2f0f44862f980d77a6e16ef6bb80f26debb4634d9e62fe4d20f66a541ca3bd7c53ff2fa01c81d7037647b0be27ddffcf1c23c38eeba882d55017711ab5e0d2a422539d41c60f8eb8a8231a13121c984908001d00", @ANYRES32=0x0, @ANYBLOB="08001800fbb021bc39ee176d5f22af3041b1ed4133b7e5c27c386adc7f7baef3ae270603cbc66178bb0321", @ANYRES32, @ANYBLOB="0800c200", @ANYRES32=0x0, @ANYBLOB="d4e60eab2196047df1482064fb0d4d7143fb0d12db3d08855f897b7c42840f9f1bbc12df4e903f8f56d999c2f73612b3a37200cb55cd3e673e3fdbebe434f93767ce", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES8, @ANYBLOB="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"], 0x1284}, 0x1, 0x0, 0x0, 0x4040801}, 0xc5) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, 0x68) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$auto_NS_GET_PID_IN_PIDNS(0xffffffffffffffff, 0x8004b708, &(0x7f0000000140)=0xc4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) connect$auto(r4, &(0x7f0000000440)=@xdp={0x2c, 0x4, r5, 0x30}, 0xdf5) r6 = syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'geneve1\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="20040000", @ANYRES16=r6, @ANYBLOB="110b27bd7000fbdbdf250900000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x9800) r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) socket(0x2b, 0x1, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x0, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x4, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0x15, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r9 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r9, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x2, "f74d086d6600f5daa47fca1f1a0730a2f629350000000000000008600418af10", @inferred=r8}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r10 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) r11 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/psched\x00', 0x40102, 0x0) pread64$auto(r11, 0x0, 0x100000001, 0x100) read$auto(r10, 0x0, 0x1ff) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x4) 1.452147176s ago: executing program 3 (id=2566): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/gpio/drivers_probe\x00', 0xa081, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) move_pages$auto(0x0, 0x7fffffff, &(0x7f0000000100)=&(0x7f00000000c0)="ab1d33dbaa74f53089920a3bcb08a58c80cbd4410d24ff4904d38517f36fb49c1d7dd4fd20446822ceec79a912ac", &(0x7f0000000140), &(0x7f0000000180)=0x9, 0xd132) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 1.368970478s ago: executing program 3 (id=2567): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/device_info\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001080)=""/244, 0xf4) r1 = socket(0xf, 0x5, 0x0) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="8b0500000000fedbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) sendmsg$auto_BATADV_CMD_SET_VLAN(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x25000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, r2, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ACTIVE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) read$auto(r1, &(0x7f0000000000)='::\x00', 0x4) getsockopt$auto(r1, 0x84, 0x10, 0x0, &(0x7f0000000240)=0x10009b) 1.258906157s ago: executing program 3 (id=2568): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0xfffffffffffffffe, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) msgctl$auto_IPC_RMID(0xfffffffc, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x8, 0xe) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mincore$auto(0x1000, 0x8001, 0x0) madvise$auto(0xffffffffffffffff, 0xffff, 0x800) 375.558475ms ago: executing program 3 (id=2569): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000c40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000080)={0xb50, r1, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_IE_PROBE_RESP={0x301, 0x7f, "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"}, @NL80211_ATTR_MLD_ADDR={0x9d, 0x13a, "6e76cafb6bb338ef85dd2cd345ab17090821f688e1294f9e0d60f84238a68dafa9129d1eff15390d3665a85c48a298aa233d40b58c62b06d9ac3b7a4ba2020823672260ca0cfe9f69a7115be57adade6897236234549155daa28f9e15d4f77e93a42ce0867ecbecab1b359a65767ad6f2546c6d8399687ea0e669064e3d5803eca44c1d89ac05aa9a9d956464c4c2da0d834baeeaef2e43bee"}, @NL80211_ATTR_NAN_FUNC={0x1ae, 0xf0, 0x0, 0x1, [@generic="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", @nested={0x79, 0x33, 0x0, 0x1, [@nested={0x4, 0xf5}, @generic="65590fafa0ac275d3283c6aa49acd6b64168e3dd30b1", @typed={0x8, 0x8c, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x34}}, @generic="630cb744d72da6580acb420273bb9b9b80722149f5f541b07815dc096d13e3ea993306bc7b57554c396db92f390d466e3380eab37010d2a944dc08d1d2a4d107479c0ee241c59bfc8ccee4d16d4db7", @nested={0x4, 0x56}]}, @generic="2d7a16f15fcc2afc355339a6de048380d34579d13c00691902d1e2980a817e19adeb7f01a852", @typed={0xa, 0x5c, 0x0, 0x0, @str='})}([\x00'}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x8001}, @NL80211_ATTR_BEACON_TAIL={0x5d2, 0xf, "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"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8}, @NL80211_ATTR_DISABLE_HE={0x4}]}, 0xb50}, 0x1, 0x0, 0x0, 0x8090}, 0x800) r2 = socketpair$auto(0x0, 0x2, 0x8, &(0x7f0000000c80)=0xffffff00) ioctl$auto_SNAPSHOT_FREE(r2, 0x3305, 0x0) r3 = open(&(0x7f0000000cc0)='./file0\x00', 0x240, 0x90) r4 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000d40), r0) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0xa8, r4, 0x4, 0x70bd28, 0x25dfdbfd, {}, "d37df89b7c9d9ff5b62fea6d0e330a2cef77c90acdabb819452ab2c57749381bb46fea757810ebc00b92bba331c2eb7900535faaf38b786c6be3f207d3d501a4120f45ec551146266ee49df3b42807cdb74a2961811cf389579c8272f286b2ca7ce6cec61e00d09874ccb66f2ffea96af8c81a802c956cad0dc0a1e7a3c4ce683cd38d736472a97932a4ade43ab3ec21c1"}, 0xa8}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000f00), r0) r6 = wait4$auto(0xffffffffffffffff, &(0x7f0000000f40)=0x5, 0xfffffff3, &(0x7f0000000f80)={{0x2, 0x9}, {0x9e91, 0x4}, 0x3, 0x0, 0x101, 0x6, 0x8000000000000000, 0x3, 0x5, 0x10, 0x7, 0xfffffffffffffffa, 0x8, 0x8, 0x4, 0x3e3c}) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000001440)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001400)={&(0x7f0000001040)={0x39c, r5, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x388, 0x6, 0x0, 0x1, [@typed={0x14, 0xdb, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x3d, 0x0, 0x0, @pid=r6}, @generic="ebe1d2deec07e67d43c3dc5801f7e2e91520c7b61e734ce275faca7ea1f7688d4eb6bee5f6308a697d6a58e7502c9a5c16354e89736febe8b7c80feef46cbf0b7b4074541c769c1a49b7cde8479357d5c415c82a8aca10b7468eecbc9a03a5bff1d5d4ac31e81ada6f9785dadd1e5edc", @typed={0xd2, 0x71, 0x0, 0x0, @binary="4f576d34656d94bdb35063f51ec175c6688ba78a828cebb52fbad4b4090decf091428261ba37924a27c7c8d74f6bd99db6931de9c1dc510804aba63879e53d26529af571e435ded3903537952e42614bd57358927b9a0b622a3101a3019c2b0dab55f4816488226bbde6e3ac5867c1d76de0a22b8cb1b97bef72b8049fa4f4bd860a6098af462d09575b1b415481b4f9e6146e47158a310c84a463501f98f833c7ce7a08cda920b283594f35375b764e2a299482e1f9ba9ab0ecc9058b0d90799ed4a53de083841aec7d2798f2b6"}, @nested={0x20d, 0xbc, 0x0, 0x1, [@typed={0x8, 0x46, 0x0, 0x0, @u32=0x3}, @generic="c8b9213e56063dc799126dff967693d5ace842ab6a124d4290085640bc03831473e6d6a4fbc9672986ca5fa61b29047c7e3dcc489ceddc9570b9c39cee7625647b1619f4b88ef5249c220b27164aff7fd92d603270e561042fcc7c16d711211785b297f748ad481d79693d13d981da9e640001ec8792585eafec691658f61dc44dfe93c91c30fc9504d52386a70ac858733b2a94d736ddda888ced7338b0bd14df24151c0fe993bd486d8f416d1bdb2155c131a0f02f9c9aa201", @typed={0xd3, 0x3a, 0x0, 0x0, @binary="d1179da0996327ee2097da18cc40040f95abb59e9044561943addc27cc9aff5d98e4f6b4bbf07327fac67c5d74d378b4d4ace6749466b1c9fead8c4012c11f9f93914ea84836ef01f3e69d3db4ecbcf7fea654e8c82be48ca61d3e2a539a92ba3ee89fa63ea5ca2f736ffc2bafe693ef362734020bd4fb38a0a096c8f59a31e480336b35cf8bc67940351bc1a505b053929ae48ef8e0d348321a5948c4e50c4d03bfe03ee3d2b5b1d21bcc69b766479f1b7d83e7fdfac729e5d0bd2576c854123ae3e03cd71f4613cbd1cd5bea845b"}, @generic="6dad6fd39fa7df15c84a6a54c79c64ddf678e457f68dc4613c6ea9df05a27e4b62d2a252714f98227d7663882e153c0c0dce9be7c6519c5fbbef26c4527b25c205210ed1cdef42d9a4ade5b2c03766570b34c9d2484c801c892109be31933ce2c448cf433b1afe", @typed={0x4, 0x4a}, @nested={0x4, 0x32}, @typed={0x4, 0x11}]}, @nested={0x10, 0x113, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @nested={0x4, 0xec}]}, @typed={0x4, 0xd3}]}]}, 0x39c}}, 0x20004000) r7 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000014c0), r2) shmctl$auto_SHM_LOCK(0x1, 0xb, &(0x7f0000001680)={{0x1, 0x0, 0x0, 0xff, 0x10001, 0x9, 0x7f}, 0x5, 0x9, 0x1, 0x7, @inferred, @raw=0x8000, 0x200, 0x0, &(0x7f0000001500)="948c5cc224ccc6af1c05c7af3103676c9cf3a6a596ff38148e89ea2f6223f64ff798af7eb0f7e090904d4a104c41f91a5d88c5599274827f200e4d9c989e4fa8cf1a30804e316b2b51456cc43a93576f1ab8ce9a9e54b0b06876a1c34f0d63af9620412c51027c918484890f750f9ec13284416728e6185d775915b2dbc515d8e02a3bbfaeafd8dfd7a900c98d2b824ef1455a14136d96e549f4f48c80adf57a71207f4a9df126ee9f120783dd314600d32177e58cfaf5649f27ec90da", &(0x7f00000015c0)="9ed45c976ba74afa7b8e86d3f53487f8993e34d77886c48374b894f12afbe169ee60f74e86adb5f8de152737d4829b6e20f56df5ee797ef6b20599260508f929ed2352b880a787ccc6cbe0abd0f6e7ab1d1676d1450e4c2d74b50553dc5ac30902e350f901156c515a98a4567fea9343efb30c07e5a847cb5245a29009adf98a29dd015fceec809ab26416b7cd1e9d8cef9b231ffb95aa1763"}) sendmsg$auto_TIPC_NL_LINK_SET(r0, &(0x7f0000003d80)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003d40)={&(0x7f0000001700)={0x262c, r7, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NAME_TABLE={0x11f0, 0x8, 0x0, 0x1, [@typed={0x8, 0xfd, 0x0, 0x0, @fd=r3}, @generic="25bca9e9b7c7596edf9224e4ac40b6725085aa10cfc2371b7f536504eb5f34c5e5657bebecbcc9289fab6a0fe96645081ad6b0da8bc03a4c25da90bbf2deb16c629c2b73b4c6069e227d4fdf24f099fd4c9f029c5627c51d6c1410860da62d837b680a165a04b73bf85cf1e9dae02b41ea39b812ac91421f1792f97c1f7e32d375e6ba2ad14b563184139f808c0dd369d6861378f3914b346f2f87b2c970d3de023dae33c87198bc", @nested={0x42, 0xf0, 0x0, 0x1, [@typed={0x8, 0x106, 0x0, 0x0, @pid=r6}, @generic="db48cf49a8c2", @nested={0x4, 0x5f}, @nested={0x4, 0xaf}, @typed={0x14, 0xfd, 0x0, 0x0, @ipv6=@private1}, @typed={0x8, 0x105, 0x0, 0x0, @fd=r2}, @nested={0x4, 0x3}, @typed={0x8, 0x22, 0x0, 0x0, @ipv4=@local}]}, @nested={0x10ef, 0x3, 0x0, 0x1, [@generic="9e4a0c058f0c59dae2880d241de2211b2e535c9f2a1b527513e86c76ce9e0bd453ba6985e9854ff23295403220ca156525853d022a7ae3ab6dd4f8c9e2365831daad80dcfefe7dffbba7d06e1a8ee69ec56cc8a97723c7c34e67cab2f0ff08c3e903de9214485c6fc3c728d17b4341a09b0f53bcdb101adde0183ef81748c69c4d63d191869fcaa7042865cafba541a3818b1bbdb6d8584370a92ea7c4236fed4ab30c52665e6d9026550a750c75a7860825b0c77a3c824c98615cb8bb9759804149c0ef4f1e3b0074df90d10989f8ee11d298b96b06919ee3cbc9", @typed={0x8, 0xb9, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x71}, @generic="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", @nested={0x4, 0x88}]}, @typed={0x8, 0x43, 0x0, 0x0, @uid=r8}]}, @TIPC_NLA_LINK={0x1379, 0x4, 0x0, 0x1, [@generic="7e8aad7a50d390618426d16e6d616942d62404d30bf15da86e87e71e84beeb60b2c868bce64400d1fa22f9e11663d4943b2bb39eb590f8517fbf96d58e1c26d9c62ea46976d7511c564904551b0f17f1792b409ba25626fae2d56110893bb72abddef2fb769a4965f357844376fbe44b7f0d", @generic="bfc4c0e110459eedc9e515fa965c048182", @generic="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", @generic="3e5899c0d541e70aff2487e7c11b5b2450057292cc00b809ab3774173e7d995946f5d17de937d7e8d33c30ed2f03125364a5a688b1b9662056cd373d6f5fb9fba957c3ebe23c6119a3a4a559ecfa4bce7f915136d8b704bd3bf24969a272db32f23b54c36e916aef1d728436d27e33ab9112fb6013f3e7e192dbe81e2343d2d4cceecea42696cfa9b2bd375fba88e6c8db89d20009c933f70228f67582995a9d0f1eb1d29f4823a31a1f35e44316a64c5e72633b1c2308262e39ea74db8480da79f49251f365ab2013ee1907f59a4c4430ce048db9f47d86fb38", @nested={0xc, 0x78, 0x0, 0x1, [@nested={0x4, 0x145}, @typed={0x4, 0x139}]}, @nested={0x8e, 0xa6, 0x0, 0x1, [@generic="9528bc1283d7f9aea80c285dce8ecdc2ccf4aa64e2f1c00225155e30bfa0471388fe2f9cf3cd435354674d0722b0b93bdd87219f52750cde83e3c23fe8cbaabee0f548c9599bb7b6884886107a84612ed332b52212d94b4dbb7fe78c721ceda3f5570c8bf9c76eaa5b7e3c561b134df2bb2fd5c6bcf0a42a89e0", @nested={0x4}, @generic, @nested={0x4, 0x36}, @nested={0x4, 0x112}, @nested={0x4, 0x5}]}, @typed={0xb, 0x155, 0x0, 0x0, @str='TIPCv2\x00'}, @nested={0x16e, 0x105, 0x0, 0x1, [@generic="43a7eb7ce7ed5a5ff61b8f6917c6ab15c2400c85d57ab457bb6efd7ae694a6a713a884a70bdfc2bb27ea907946441e1c693588b696371c9a28e452fb9fc818fbfff2e6d010dfc2a53cd0a1df8aab65eb9e4ebc0f6ee876665e6e4cb2c0457d1f93ff7d650eed0f9ae51e5be8e942a5a1df821d9df333947a66f60f3a4dcbdda6041c1b10085ba397f450775e8a6d1b7aa9e816954e104763debddf87809f961d5361bb33d4a6e53fbd3f2845b5133eee507ee0ea33e71921954bb23b99438211d22e0951b6595c2a91d7066deedd986ec7bfa625b8072e0eb8a07ea6200b02fba001191cb217b1cf86b7f255d0", @generic="c24283dfc65f0780a505f44bb8063aeb72d8a339824269e4e31db0c4f9184653ab7b06a505ceb536e9c91b98334bbeae3db9b58f1f3018c4756d419dc30937c1c7498cc8bdb12b202d8a26ac9c4e6a4c5553a9643b1711958fba3545604be92bea19f9dc6b", @typed={0xc, 0x60, 0x0, 0x0, @u64=0xfffffffffffffef8}, @typed={0xa, 0x38, 0x0, 0x0, @str=':/b},\x00'}]}]}, @TIPC_NLA_NET={0xaa, 0x7, 0x0, 0x1, [@generic="44d7238b329d469c5d9fbb58fbe83c76ddc1f93002086504d23db73f40dd31dc60ead0c873289211a7754dd8c3f8292e050189855c2600192f757a820f2cd0b323521b0ff414e11a1f8c7e6861fa9d9af15b48cae0795b731f65329227ef9e955826a8abde1f79e1352fabec7c59587d7158a68350acab2fe6d1ad730b30b8542f439a047c7dff6ece2c43c43b60a0e338c10694f4047eb63221", @typed={0xc, 0x115, 0x0, 0x0, @u64=0x2}]}]}, 0x262c}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003dc0)=@test={r3, 0x5645, 0x1b, 0x2, 0x2, 0x7, 0x7ff, 0x10, 0x0, 0x0, 0x100000000, 0x1, 0xe, 0x2, 0x7fffffff}, 0x6) io_submit$auto(0x1, 0x0, &(0x7f0000003ec0)=&(0x7f0000003e80)={0x57, 0x3ff, 0xf3f, 0xfffc, 0x0, r10, 0x4, 0x80000000, 0x100000001, 0x0, 0x75, r2}) r12 = openat2$auto(r2, &(0x7f0000003f00)='./file0/file0\x00', &(0x7f0000003f40)={0x1, 0x7f7c, 0x5}, 0x7) bpf$auto(0x4, &(0x7f0000003f80)=@bpf_attr_4={0x100000001, r11, 0xe, r12}, 0x4) pipe2$auto(&(0x7f0000004040)=r3, 0x0) r13 = syz_genetlink_get_family_id$auto_thermal(&(0x7f00000040c0), r0) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_ADD(r2, &(0x7f0000004180)={&(0x7f0000004080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004140)={&(0x7f0000004100)={0x1c, r13, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@THERMAL_GENL_ATTR_CDEV_MAX_STATE={0x8, 0x11, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000}, 0x8004) keyctl$auto(0x4, r8, r8, r9, 0x8) write$auto(r3, &(0x7f00000041c0)='SMC_GEN_NETLINK\x00', 0x4) ioctl$auto_SNDRV_PCM_IOCTL_STATUS_EXT322(r10, 0xc06c4124, &(0x7f0000004200)={0xfffffffb, 0x9, 0x3, 0x1c4, 0xfffffff8, 0x7ac, 0x3, 0x5, 0x7, 0x9, 0x200, 0x7, 0x9, 0x8, 0x8, 0xd, 0x5, 0x5, "54cf8e2fd09d7c56e8de45e368165c69251fca99a9e959db69d8d919227b5d7c567199ae"}) r14 = socket$nl_generic(0x10, 0x3, 0x10) write$auto(r14, &(0x7f0000004280)=')@\x00', 0x7) setsockopt$auto(r11, 0x776, 0x7, &(0x7f00000042c0)='^\'-\'\x00', 0x1) sendmmsg$auto(r0, &(0x7f0000004500)={{&(0x7f0000004300)="6ef5e6a95a4164ce0c722397a7146f950d2fe0ade6e16b78d245f83823f6efb9ad2838286f62f604b28a5dc1a678d63c8d6245e21ddc4a433617f05119e27acce84fc9d301a94355458eb918060b1e9908cf0e45799cfce73e1a839098201c795898fd6ca898cf663ea95d4bc6d66f0f2b5f04b654a4143d2b38a34154afc2809a7a6f68a11e8af40775b883cd5210e0e869e6391964685794cf21", 0x5, &(0x7f0000004400)={&(0x7f00000043c0)="e70a54584744f2f602014e2919814fd03784a2908c0134d05c544856374ae5353b3a0888100ed6aa3dd1d164b6d1502677b9687759c054cf03e651528cb0", 0xb0e}, 0x1, &(0x7f0000004440)="4995f22d1d3f9ed89ebb3e9e29061b6e2821dcd2514519d4ea62193f5b96b5502b9714d90f45380244fb661f7a57901e803d10be91d42a1349ee0d7abb30ddb9ab77d76f807f536107e5a6fb568d3e5aca98b34802c129d7b5f37b9caf35f09455a48eff94165098c0d7ad6cf490b98c2d0b2c36c70a3dfb56a9474267efb5d1888fd5c0afbc18ab3c7497f30c3e3bcca7ce73d1", 0x8, 0x2}, 0x9}, 0x5, 0x7fffffff) shmctl$auto_IPC_RMID(0x478, 0x0, &(0x7f0000004680)={{0x0, 0xee00, r9, 0x1, 0xfffffffb, 0x47, 0x7}, 0x8001, 0x6, 0x43fd, 0x4, @raw=0x4, @raw=0xf4, 0xfff7, 0x0, &(0x7f0000004540)="6b22bfc58a41b4fd1bfafe216e0b4f989c1b2e0f55ed01e34636460857391ed079f4a77459e120f618e5f4ae1170ef5abf09bd9b8779c6c32475a30cd86ef981b6799f1d711c40374d43c29dea66060ddd2e4772980701695229472097074a3d83360b4c7595b74fe28c024b8b375ad57a1ea432fa441309ff4f9a5cebd91ca975b6ce9ca27f665ddf6f7eb1c7fd2f12b31d5ec6d1589985", &(0x7f0000004600)="0a1455ee0dca58b7d859c700127f074ff1a55b01dba32a650e303ffd841690cc4e87c1a68daeb381c88006bff4480b4b41bd2cdaddcee557088794b3abac02a42404dea49b1fa7d1ed8b9719023297d762b1c3afc7588934689f"}) execve$auto(&(0x7f0000004700)='./file0/file0\x00', &(0x7f0000004780)=&(0x7f0000004740)='SMC_GEN_NETLINK\x00', &(0x7f0000004800)=&(0x7f00000047c0)='^\'-\'\x00') 178.579961ms ago: executing program 3 (id=2570): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x2, 0x88) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x401, r2, @relative_id=0x13, 0xe600}, 0xf) (async) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000300), r0) sendmsg$auto_CTRL_CMD_GETFAMILY(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_NAME={0x7, 0x2, ':[\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x3}, @CTRL_ATTR_FAMILY_NAME={0x5, 0x2, '\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x240}, @CTRL_ATTR_FAMILY_NAME={0x5, 0x2, '\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0xfffd}, @CTRL_ATTR_FAMILY_ID={0x6}, @CTRL_ATTR_FAMILY_NAME={0xb, 0x2, '{!{-\'\'\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x2}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0xe1}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) r6 = open(&(0x7f00000001c0)='./file0\x00', 0x4242, 0x0) fanotify_mark$auto(0x0, 0x1, 0x3a, r6, 0x0) (async) write$auto_fuse_conn_congestion_threshold_ops_control(r6, &(0x7f0000000580)="bd9337eb594a72faddb2b3e42f2c4634d9bb2dbed6a9cc76c0f037f0ba06ed9ee25402e595ebacf0e12d740b628dc76f1c019eae97357ed44591906644f1b852", 0x40) (async) read$auto(r0, &(0x7f0000000000)='\x00', 0x91e2) (async) r7 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) readv$auto(0x3, &(0x7f0000001700)={0x0, 0xfdf3}, 0x41db) (async) ioctl$auto_SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000200)) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002ec0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000040)={0x34, r9, 0x1, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x24000802) (async) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80400000}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r9, @ANYBLOB="000325bd7000ffdbdf251500000038000180080003000400000008000300010001001400020076657468315f746f5f626f6e6400000008000300d6b3000008000300060000003400018014000200766c616e3000000000000000000000001400020076657468305f746f5f6261746164760008000100", @ANYRES32=r4, @ANYBLOB="2ddaf6d426238b44fbbd2ecd118c821f0bdab5bd31a277f727ca9ba72248cccc51e2244b832a6c929262092edb620c210e57a9ab0cbb8c42963e98f317a39a1ecd4a4431649b2f47218799a6446146c23413f67ab51cbb4feefcdbf69bed761232f22a27783f98"], 0x80}, 0x1, 0x0, 0x0, 0x20004800}, 0x10) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) (async) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1d"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x804) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x89}, 0x7}, 0x3, 0x0) 0s ago: executing program 3 (id=2571): unshare$auto(0x40000080) unshare$auto(0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x400000000001, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) msgctl$auto(0x6, 0x944, &(0x7f0000000440)={{0xe025, 0x0, 0x0, 0xef5, 0x0, 0x5, 0x56a}, 0x0, 0x0, 0x9, 0x4, 0x541c, 0x6, 0x1, 0xfff7, 0x8, 0x7, @inferred, @raw=0xa6}) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9}, 0x3) r2 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r2, &(0x7f0000000400)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000440)="661b0cbd4aeb33", 0x49}, 0x1, &(0x7f0000000200), 0x5, 0x3}, 0x5}, 0x2, 0x100) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = ioctl$auto_SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000080)=0x77) r4 = prctl$auto(0x5, 0x80000000, 0x0, 0x78, 0x8) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008010, 0x3, 0x400000000000200) openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, 0x0, 0x40002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000804) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000000), r5) sendmsg$auto_NL802154_CMD_GET_INTERFACE(r5, &(0x7f0000000300)={0x0, 0xa6, &(0x7f0000000100)={&(0x7f0000000840)={0x14, r6, 0x305, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004010}, 0x4040008) sendmsg$auto_NL802154_CMD_DEL_SEC_DEV(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r6, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x2d}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x5}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_SCAN_DONE_REASON={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x8}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0) r7 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/cmdline\x00', 0x163502, 0x0) read$auto_proc_pid_cmdline_ops_base(r7, &(0x7f0000000040)=""/159, 0x9f) kernel console output (not intermixed with test programs): 588.261824][T15812] name failslab, interval 1, probability 0, space 0, times 0 [ 588.301464][T15812] CPU: 0 UID: 0 PID: 15812 Comm: syz.3.2100 Tainted: G U L syzkaller #0 PREEMPT(full) [ 588.301492][T15812] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 588.301498][T15812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 588.301507][T15812] Call Trace: [ 588.301512][T15812] [ 588.301518][T15812] dump_stack_lvl+0x100/0x190 [ 588.301545][T15812] should_fail_ex.cold+0x5/0xa [ 588.301563][T15812] should_failslab+0xc2/0x120 [ 588.301577][T15812] __kmalloc_cache_noprof+0x7a/0x6f0 [ 588.301595][T15812] ? refill_pi_state_cache+0x91/0x260 [ 588.301620][T15812] refill_pi_state_cache+0x91/0x260 [ 588.301642][T15812] futex_lock_pi+0x177/0x7b0 [ 588.301665][T15812] ? __pfx_futex_lock_pi+0x10/0x10 [ 588.301704][T15812] ? __pfx_futex_wake_mark+0x10/0x10 [ 588.301729][T15812] ? find_held_lock+0x2b/0x80 [ 588.301753][T15812] ? ksys_write+0x190/0x250 [ 588.301774][T15812] ? ksys_write+0x190/0x250 [ 588.301798][T15812] do_futex+0x18a/0x350 [ 588.301816][T15812] ? __pfx_do_futex+0x10/0x10 [ 588.301839][T15812] __x64_sys_futex+0x34f/0x4d0 [ 588.301859][T15812] ? fput+0x79/0x100 [ 588.301873][T15812] ? __pfx___x64_sys_futex+0x10/0x10 [ 588.301890][T15812] ? ksys_write+0x1ac/0x250 [ 588.301911][T15812] ? __pfx_ksys_write+0x10/0x10 [ 588.301937][T15812] do_syscall_64+0x106/0xf80 [ 588.301953][T15812] ? clear_bhb_loop+0x40/0x90 [ 588.301971][T15812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.301986][T15812] RIP: 0033:0x7f971339c629 [ 588.301999][T15812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.302013][T15812] RSP: 002b:00007f971432a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 588.302028][T15812] RAX: ffffffffffffffda RBX: 00007f9713615fa0 RCX: 00007f971339c629 [ 588.302037][T15812] RDX: 000000000000001f RSI: 0000000000000006 RDI: 0000000000000000 [ 588.302046][T15812] RBP: 00007f971432a090 R08: 0000000000000000 R09: 000000008000fff5 [ 588.302054][T15812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.302062][T15812] R13: 00007f9713616038 R14: 00007f9713615fa0 R15: 00007ffcc0044588 [ 588.302081][T15812] [ 589.086724][T12356] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 591.474116][T15843] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2108'. [ 592.185139][T15855] FAULT_INJECTION: forcing a failure. [ 592.185139][T15855] name failslab, interval 1, probability 0, space 0, times 0 [ 592.394046][T15855] CPU: 0 UID: 0 PID: 15855 Comm: syz.0.2111 Tainted: G U L syzkaller #0 PREEMPT(full) [ 592.394073][T15855] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 592.394078][T15855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 592.394088][T15855] Call Trace: [ 592.394093][T15855] [ 592.394099][T15855] dump_stack_lvl+0x100/0x190 [ 592.394127][T15855] should_fail_ex.cold+0x5/0xa [ 592.394144][T15855] should_failslab+0xc2/0x120 [ 592.394159][T15855] __kmalloc_cache_noprof+0x7a/0x6f0 [ 592.394176][T15855] ? proc_thread_self_get_link+0x1a6/0x210 [ 592.394200][T15855] proc_thread_self_get_link+0x1a6/0x210 [ 592.394222][T15855] pick_link+0xac2/0x13c0 [ 592.394242][T15855] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 592.394264][T15855] step_into_slowpath+0x9ba/0xf90 [ 592.394288][T15855] ? __pfx_step_into_slowpath+0x10/0x10 [ 592.394311][T15855] ? lookup_fast+0x2da/0x600 [ 592.394329][T15855] ? inode_permission+0x374/0x620 [ 592.394348][T15855] link_path_walk+0xf28/0x1cc0 [ 592.394375][T15855] path_openat+0x1be/0x31a0 [ 592.394387][T15855] ? kasan_save_stack+0x3f/0x50 [ 592.394407][T15855] ? kasan_save_stack+0x30/0x50 [ 592.394432][T15855] ? kasan_save_track+0x14/0x30 [ 592.394452][T15855] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 592.394476][T15855] ? __pfx_path_openat+0x10/0x10 [ 592.394497][T15855] do_file_open+0x20e/0x430 [ 592.394512][T15855] ? __pfx_do_file_open+0x10/0x10 [ 592.394539][T15855] ? alloc_fd+0x476/0x790 [ 592.394563][T15855] ? do_getname+0x191/0x390 [ 592.394581][T15855] do_sys_openat2+0x10d/0x1e0 [ 592.394599][T15855] ? __pfx_do_sys_openat2+0x10/0x10 [ 592.394623][T15855] __x64_sys_openat+0x12d/0x210 [ 592.394642][T15855] ? __pfx___x64_sys_openat+0x10/0x10 [ 592.394667][T15855] do_syscall_64+0x106/0xf80 [ 592.394682][T15855] ? clear_bhb_loop+0x40/0x90 [ 592.394700][T15855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.394715][T15855] RIP: 0033:0x7fd29575cece [ 592.394728][T15855] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 592.394742][T15855] RSP: 002b:00007fd29672cf98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 592.394757][T15855] RAX: ffffffffffffffda RBX: 00007fd29672d6c0 RCX: 00007fd29575cece [ 592.394767][T15855] RDX: 0000000000000002 RSI: 00007fd295832440 RDI: ffffffffffffff9c [ 592.394775][T15855] RBP: 00007fd295832b39 R08: 0000000000000000 R09: 0000000000000000 [ 592.394784][T15855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 592.394792][T15855] R13: 00007fd295a16038 R14: 00007fd295a15fa0 R15: 00007ffd31554fb8 [ 592.394811][T15855] [ 592.808186][T15855] FAULT_INJECTION: forcing a failure. [ 592.808186][T15855] name fail_futex, interval 1, probability 0, space 0, times 0 [ 592.821798][T15855] CPU: 0 UID: 0 PID: 15855 Comm: syz.0.2111 Tainted: G U L syzkaller #0 PREEMPT(full) [ 592.821825][T15855] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 592.821831][T15855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 592.821839][T15855] Call Trace: [ 592.821844][T15855] [ 592.821850][T15855] dump_stack_lvl+0x100/0x190 [ 592.821876][T15855] should_fail_ex.cold+0x5/0xa [ 592.821893][T15855] get_futex_key+0x1d2/0x1620 [ 592.821913][T15855] ? __pfx_get_futex_key+0x10/0x10 [ 592.821931][T15855] ? kasan_save_track+0x14/0x30 [ 592.821952][T15855] ? __kasan_kmalloc+0xaa/0xb0 [ 592.821975][T15855] futex_lock_pi+0x1d3/0x7b0 [ 592.821998][T15855] ? __pfx_futex_lock_pi+0x10/0x10 [ 592.822038][T15855] ? __pfx_futex_wake_mark+0x10/0x10 [ 592.822063][T15855] ? find_held_lock+0x2b/0x80 [ 592.822076][T15855] ? ksys_write+0x190/0x250 [ 592.822097][T15855] ? ksys_write+0x190/0x250 [ 592.822121][T15855] do_futex+0x18a/0x350 [ 592.822140][T15855] ? __pfx_do_futex+0x10/0x10 [ 592.822163][T15855] __x64_sys_futex+0x34f/0x4d0 [ 592.822182][T15855] ? fput+0x79/0x100 [ 592.822196][T15855] ? __pfx___x64_sys_futex+0x10/0x10 [ 592.822214][T15855] ? ksys_write+0x1ac/0x250 [ 592.822234][T15855] ? __pfx_ksys_write+0x10/0x10 [ 592.822260][T15855] do_syscall_64+0x106/0xf80 [ 592.822276][T15855] ? clear_bhb_loop+0x40/0x90 [ 592.822294][T15855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.822309][T15855] RIP: 0033:0x7fd29579c629 [ 592.822322][T15855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.822336][T15855] RSP: 002b:00007fd29672d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 592.822350][T15855] RAX: ffffffffffffffda RBX: 00007fd295a15fa0 RCX: 00007fd29579c629 [ 592.822359][T15855] RDX: 000000000000001f RSI: 0000000000000006 RDI: 0000000000000000 [ 592.822367][T15855] RBP: 00007fd29672d090 R08: 0000000000000000 R09: 000000008000fff5 [ 592.822381][T15855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.822389][T15855] R13: 00007fd295a16038 R14: 00007fd295a15fa0 R15: 00007ffd31554fb8 [ 592.822408][T15855] [ 593.905259][T15871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2115'. [ 594.466013][T15876] netlink: 62 bytes leftover after parsing attributes in process `syz.3.2117'. [ 595.119212][T15889] NFSD: Failed to start, no listeners configured. [ 595.625080][T15885] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 595.663746][T15885] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 595.695266][T15885] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 595.747126][T15885] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 595.862913][T15898] FAULT_INJECTION: forcing a failure. [ 595.862913][T15898] name fail_futex, interval 1, probability 0, space 0, times 0 [ 595.875828][T15898] CPU: 0 UID: 0 PID: 15898 Comm: syz.2.2124 Tainted: G U L syzkaller #0 PREEMPT(full) [ 595.875854][T15898] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 595.875860][T15898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 595.875870][T15898] Call Trace: [ 595.875875][T15898] [ 595.875880][T15898] dump_stack_lvl+0x100/0x190 [ 595.875906][T15898] should_fail_ex.cold+0x5/0xa [ 595.875924][T15898] should_fail_futex+0x4c/0x60 [ 595.875941][T15898] futex_lock_pi_atomic+0xe7/0xaf0 [ 595.875967][T15898] futex_lock_pi+0x246/0x7b0 [ 595.875990][T15898] ? __pfx_futex_lock_pi+0x10/0x10 [ 595.876013][T15898] ? __pfx___futex_wait+0x10/0x10 [ 595.876033][T15898] ? lockdep_hardirqs_on+0x78/0x100 [ 595.876066][T15898] ? __pfx_futex_wake_mark+0x10/0x10 [ 595.876092][T15898] ? ksys_write+0x190/0x250 [ 595.876112][T15898] ? ksys_write+0x190/0x250 [ 595.876137][T15898] do_futex+0x18a/0x350 [ 595.876155][T15898] ? __pfx_do_futex+0x10/0x10 [ 595.876185][T15898] __x64_sys_futex+0x34f/0x4d0 [ 595.876206][T15898] ? __pfx___x64_sys_futex+0x10/0x10 [ 595.876232][T15898] do_syscall_64+0x106/0xf80 [ 595.876248][T15898] ? clear_bhb_loop+0x40/0x90 [ 595.876266][T15898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.876280][T15898] RIP: 0033:0x7febfd39c629 [ 595.876294][T15898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.876308][T15898] RSP: 002b:00007febfe26d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 595.876323][T15898] RAX: ffffffffffffffda RBX: 00007febfd615fa0 RCX: 00007febfd39c629 [ 595.876333][T15898] RDX: 000000000000001f RSI: 0000000000000006 RDI: 0000000000000000 [ 595.876342][T15898] RBP: 00007febfd432b39 R08: 0000000000000000 R09: 000000008000fff5 [ 595.876351][T15898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 595.876359][T15898] R13: 00007febfd616038 R14: 00007febfd615fa0 R15: 00007ffe31b195b8 [ 595.876378][T15898] [ 596.344478][T15885] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 596.365389][T15885] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 596.390544][T15907] FAULT_INJECTION: forcing a failure. [ 596.390544][T15907] name failslab, interval 1, probability 0, space 0, times 0 [ 596.425419][T15907] CPU: 0 UID: 0 PID: 15907 Comm: syz.1.2126 Tainted: G U L syzkaller #0 PREEMPT(full) [ 596.425446][T15907] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 596.425452][T15907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 596.425461][T15907] Call Trace: [ 596.425466][T15907] [ 596.425472][T15907] dump_stack_lvl+0x100/0x190 [ 596.425497][T15907] should_fail_ex.cold+0x5/0xa [ 596.425514][T15907] ? tomoyo_realpath_from_path+0xb6/0x690 [ 596.425535][T15907] should_failslab+0xc2/0x120 [ 596.425550][T15907] __kmalloc_noprof+0xe0/0x850 [ 596.425575][T15907] tomoyo_realpath_from_path+0xb6/0x690 [ 596.425594][T15907] tomoyo_check_open_permission+0x2af/0x3c0 [ 596.425617][T15907] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 596.425656][T15907] ? lock_acquire+0x1cf/0x380 [ 596.425674][T15907] ? find_held_lock+0x2b/0x80 [ 596.425692][T15907] tomoyo_file_open+0x6b/0x90 [ 596.425710][T15907] security_file_open+0xb5/0x1e0 [ 596.425724][T15907] do_dentry_open+0x5aa/0x1660 [ 596.425753][T15907] vfs_open+0x82/0x3f0 [ 596.425772][T15907] path_openat+0x208c/0x31a0 [ 596.425792][T15907] ? __pfx_path_openat+0x10/0x10 [ 596.425813][T15907] do_file_open+0x20e/0x430 [ 596.425828][T15907] ? __pfx_do_file_open+0x10/0x10 [ 596.425848][T15907] ? __pfx_kfree_link+0x10/0x10 [ 596.425873][T15907] ? alloc_fd+0x476/0x790 [ 596.425897][T15907] ? do_getname+0x191/0x390 [ 596.425915][T15907] do_sys_openat2+0x10d/0x1e0 [ 596.425933][T15907] ? __pfx_do_sys_openat2+0x10/0x10 [ 596.425957][T15907] __x64_sys_openat+0x12d/0x210 [ 596.425975][T15907] ? __pfx___x64_sys_openat+0x10/0x10 [ 596.426001][T15907] do_syscall_64+0x106/0xf80 [ 596.426017][T15907] ? clear_bhb_loop+0x40/0x90 [ 596.426035][T15907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.426050][T15907] RIP: 0033:0x7fa8f535cece [ 596.426063][T15907] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 596.426076][T15907] RSP: 002b:00007fa8f6331f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 596.426091][T15907] RAX: ffffffffffffffda RBX: 00007fa8f63326c0 RCX: 00007fa8f535cece [ 596.426101][T15907] RDX: 0000000000000002 RSI: 00007fa8f5432440 RDI: ffffffffffffff9c [ 596.426109][T15907] RBP: 00007fa8f5432b39 R08: 0000000000000000 R09: 0000000000000000 [ 596.426123][T15907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 596.426131][T15907] R13: 00007fa8f5616038 R14: 00007fa8f5615fa0 R15: 00007ffdde00a458 [ 596.426150][T15907] [ 596.426156][T15907] ERROR: Out of memory at tomoyo_realpath_from_path. [ 597.096177][T12356] Bluetooth: hci1: command 0x0c1a tx timeout [ 597.151525][T15913] FAULT_INJECTION: forcing a failure. [ 597.151525][T15913] name failslab, interval 1, probability 0, space 0, times 0 [ 597.229448][T15913] CPU: 0 UID: 0 PID: 15913 Comm: syz.3.2128 Tainted: G U L syzkaller #0 PREEMPT(full) [ 597.229474][T15913] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 597.229480][T15913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 597.229488][T15913] Call Trace: [ 597.229493][T15913] [ 597.229499][T15913] dump_stack_lvl+0x100/0x190 [ 597.229525][T15913] should_fail_ex.cold+0x5/0xa [ 597.229543][T15913] should_failslab+0xc2/0x120 [ 597.229558][T15913] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 597.229580][T15913] ? kstrdup_const+0x63/0x80 [ 597.229606][T15913] kstrdup+0x51/0xe0 [ 597.229627][T15913] kstrdup_const+0x63/0x80 [ 597.229648][T15913] alloc_vfsmnt+0xe5/0x6a0 [ 597.229664][T15913] ? __pfx___might_resched+0x10/0x10 [ 597.229686][T15913] clone_mnt+0x4b/0x930 [ 597.229707][T15913] copy_tree+0xfc/0xbf0 [ 597.229719][T15913] ? __pfx_down_write+0x10/0x10 [ 597.229742][T15913] copy_mnt_ns+0x2bd/0xc30 [ 597.229757][T15913] ? create_new_namespaces+0x30/0xac0 [ 597.229771][T15913] ? rcu_is_watching+0x12/0xc0 [ 597.229796][T15913] create_new_namespaces+0xd3/0xac0 [ 597.229810][T15913] ? bpf_lsm_capable+0x9/0x10 [ 597.229823][T15913] ? security_capable+0x80/0x260 [ 597.229844][T15913] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 597.229861][T15913] ksys_unshare+0x455/0xab0 [ 597.229880][T15913] ? __pfx_ksys_unshare+0x10/0x10 [ 597.229905][T15913] __x64_sys_unshare+0x31/0x40 [ 597.229922][T15913] do_syscall_64+0x106/0xf80 [ 597.229937][T15913] ? clear_bhb_loop+0x40/0x90 [ 597.229955][T15913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.229969][T15913] RIP: 0033:0x7f971339c629 [ 597.229982][T15913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.229997][T15913] RSP: 002b:00007f971432a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 597.230011][T15913] RAX: ffffffffffffffda RBX: 00007f9713615fa0 RCX: 00007f971339c629 [ 597.230021][T15913] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 597.230029][T15913] RBP: 00007f9713432b39 R08: 0000000000000000 R09: 0000000000000000 [ 597.230037][T15913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.230046][T15913] R13: 00007f9713616038 R14: 00007f9713615fa0 R15: 00007ffcc0044588 [ 597.230065][T15913] [ 597.828651][T12356] Bluetooth: hci2: command 0x0c1a tx timeout [ 597.834700][T12356] Bluetooth: hci0: command 0x0c1a tx timeout [ 597.864775][T15907] FAULT_INJECTION: forcing a failure. [ 597.864775][T15907] name fail_futex, interval 1, probability 0, space 0, times 0 [ 597.916188][T15907] CPU: 0 UID: 0 PID: 15907 Comm: syz.1.2126 Tainted: G U L syzkaller #0 PREEMPT(full) [ 597.916216][T15907] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 597.916222][T15907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 597.916234][T15907] Call Trace: [ 597.916239][T15907] [ 597.916245][T15907] dump_stack_lvl+0x100/0x190 [ 597.916271][T15907] should_fail_ex.cold+0x5/0xa [ 597.916288][T15907] get_futex_key+0x295/0x1620 [ 597.916307][T15907] ? __pfx_get_futex_key+0x10/0x10 [ 597.916325][T15907] ? kasan_save_track+0x14/0x30 [ 597.916346][T15907] ? __kasan_kmalloc+0xaa/0xb0 [ 597.916369][T15907] futex_lock_pi+0x1d3/0x7b0 [ 597.916392][T15907] ? __pfx_futex_lock_pi+0x10/0x10 [ 597.916432][T15907] ? __pfx_futex_wake_mark+0x10/0x10 [ 597.916457][T15907] ? find_held_lock+0x2b/0x80 [ 597.916469][T15907] ? ksys_write+0x190/0x250 [ 597.916491][T15907] ? ksys_write+0x190/0x250 [ 597.916515][T15907] do_futex+0x18a/0x350 [ 597.916533][T15907] ? __pfx_do_futex+0x10/0x10 [ 597.916556][T15907] __x64_sys_futex+0x34f/0x4d0 [ 597.916576][T15907] ? fput+0x79/0x100 [ 597.916590][T15907] ? __pfx___x64_sys_futex+0x10/0x10 [ 597.916607][T15907] ? ksys_write+0x1ac/0x250 [ 597.916628][T15907] ? __pfx_ksys_write+0x10/0x10 [ 597.916654][T15907] do_syscall_64+0x106/0xf80 [ 597.916669][T15907] ? clear_bhb_loop+0x40/0x90 [ 597.916687][T15907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.916702][T15907] RIP: 0033:0x7fa8f539c629 [ 597.916715][T15907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.916729][T15907] RSP: 002b:00007fa8f6332028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 597.916743][T15907] RAX: ffffffffffffffda RBX: 00007fa8f5615fa0 RCX: 00007fa8f539c629 [ 597.916753][T15907] RDX: 000000000000001f RSI: 0000000000000006 RDI: 0000000000000000 [ 597.916761][T15907] RBP: 00007fa8f6332090 R08: 0000000000000000 R09: 000000008000fff5 [ 597.916770][T15907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.916778][T15907] R13: 00007fa8f5616038 R14: 00007fa8f5615fa0 R15: 00007ffdde00a458 [ 597.916800][T15907] [ 598.566635][T10466] Bluetooth: hci3: command 0x0c1a tx timeout [ 599.017160][T15928] zswap: compressor not available [ 599.859872][T10466] Bluetooth: hci0: command 0x0c1a tx timeout [ 599.916968][T15946] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input22 [ 600.578684][T10466] Bluetooth: hci3: command 0x0c1a tx timeout [ 602.358464][T15977] zswap: compressor „1ÐŽ¸ not available [ 603.817621][T16005] FAULT_INJECTION: forcing a failure. [ 603.817621][T16005] name fail_futex, interval 1, probability 0, space 0, times 0 [ 603.830543][T16005] CPU: 0 UID: 0 PID: 16005 Comm: syz.3.2148 Tainted: G U L syzkaller #0 PREEMPT(full) [ 603.830568][T16005] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 603.830574][T16005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 603.830583][T16005] Call Trace: [ 603.830588][T16005] [ 603.830594][T16005] dump_stack_lvl+0x100/0x190 [ 603.830625][T16005] should_fail_ex.cold+0x5/0xa [ 603.830644][T16005] should_fail_futex+0x4c/0x60 [ 603.830662][T16005] lock_pi_update_atomic+0x20/0x130 [ 603.830685][T16005] futex_lock_pi_atomic+0x3c5/0xaf0 [ 603.830710][T16005] futex_lock_pi+0x246/0x7b0 [ 603.830733][T16005] ? __pfx_futex_lock_pi+0x10/0x10 [ 603.830752][T16005] ? preempt_schedule_common+0x42/0xc0 [ 603.830768][T16005] ? preempt_schedule_thunk+0x16/0x30 [ 603.830792][T16005] ? __pfx_try_to_wake_up+0x10/0x10 [ 603.830813][T16005] ? futex_private_hash_put+0x107/0x1c0 [ 603.830833][T16005] ? __pfx_futex_wake_mark+0x10/0x10 [ 603.830859][T16005] ? ksys_write+0x190/0x250 [ 603.830880][T16005] ? ksys_write+0x190/0x250 [ 603.830904][T16005] do_futex+0x18a/0x350 [ 603.830922][T16005] ? __pfx_do_futex+0x10/0x10 [ 603.830944][T16005] __x64_sys_futex+0x34f/0x4d0 [ 603.830965][T16005] ? __pfx___x64_sys_futex+0x10/0x10 [ 603.830984][T16005] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 603.831003][T16005] ? syscall_user_dispatch+0x76/0x130 [ 603.831025][T16005] do_syscall_64+0x106/0xf80 [ 603.831040][T16005] ? clear_bhb_loop+0x40/0x90 [ 603.831058][T16005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.831072][T16005] RIP: 0033:0x7f971339c629 [ 603.831085][T16005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.831099][T16005] RSP: 002b:00007f971432a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 603.831114][T16005] RAX: ffffffffffffffda RBX: 00007f9713615fa0 RCX: 00007f971339c629 [ 603.831123][T16005] RDX: 000000000000001f RSI: 0000000000000006 RDI: 0000000000000000 [ 603.831131][T16005] RBP: 00007f9713432b39 R08: 0000000000000000 R09: 000000008000fff5 [ 603.831140][T16005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 603.831149][T16005] R13: 00007f9713616038 R14: 00007f9713615fa0 R15: 00007ffcc0044588 [ 603.831168][T16005] [ 604.653593][T16016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2150'. [ 608.853685][T16085] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2162'. [ 609.179350][T16087] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2163'. [ 612.305057][T16142] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2175'. [ 614.198638][T16168] net_ratelimit: 8 callbacks suppressed [ 614.198653][T16168] netlink: zone id is out of range [ 614.265362][T16168] netlink: zone id is out of range [ 614.304591][T16168] netlink: zone id is out of range [ 615.109129][T16187] netlink: 306 bytes leftover after parsing attributes in process `syz.1.2188'. [ 615.446576][T10962] netdevsim netdevsim10000 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.717988][T10466] Bluetooth: hci3: unexpected event 0x34 length: 11 > 6 [ 619.153262][T16234] overlayfs: missing 'lowerdir' [ 619.682209][T16257] FAULT_INJECTION: forcing a failure. [ 619.682209][T16257] name failslab, interval 1, probability 0, space 0, times 0 [ 619.910187][T16257] CPU: 0 UID: 0 PID: 16257 Comm: syz.1.2199 Tainted: G U L syzkaller #0 PREEMPT(full) [ 619.910216][T16257] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 619.910223][T16257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 619.910232][T16257] Call Trace: [ 619.910237][T16257] [ 619.910243][T16257] dump_stack_lvl+0x100/0x190 [ 619.910270][T16257] should_fail_ex.cold+0x5/0xa [ 619.910289][T16257] should_failslab+0xc2/0x120 [ 619.910303][T16257] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 619.910325][T16257] ? __d_alloc+0x34/0xa80 [ 619.910344][T16257] __d_alloc+0x34/0xa80 [ 619.910360][T16257] d_alloc_pseudo+0x1c/0xc0 [ 619.910379][T16257] alloc_file_pseudo+0xcf/0x230 [ 619.910399][T16257] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 619.910416][T16257] ? alloc_fd+0x476/0x790 [ 619.910440][T16257] sock_alloc_file+0x50/0x210 [ 619.910459][T16257] __sys_socket+0x1c0/0x260 [ 619.910480][T16257] ? __pfx___sys_socket+0x10/0x10 [ 619.910506][T16257] __x64_sys_socket+0x72/0xb0 [ 619.910532][T16257] ? lockdep_hardirqs_on+0x78/0x100 [ 619.910549][T16257] do_syscall_64+0x106/0xf80 [ 619.910564][T16257] ? clear_bhb_loop+0x40/0x90 [ 619.910582][T16257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.910597][T16257] RIP: 0033:0x7fa8f539c629 [ 619.910611][T16257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.910626][T16257] RSP: 002b:00007fa8f62ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 619.910641][T16257] RAX: ffffffffffffffda RBX: 00007fa8f5616360 RCX: 00007fa8f539c629 [ 619.910650][T16257] RDX: 0000000000000106 RSI: 000000000000000a RDI: 0000000000000002 [ 619.910659][T16257] RBP: 00007fa8f5432b39 R08: 0000000000000000 R09: 0000000000000000 [ 619.910667][T16257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.910675][T16257] R13: 00007fa8f56163f8 R14: 00007fa8f5616360 R15: 00007ffdde00a458 [ 619.910694][T16257] [ 622.154939][T16287] FAULT_INJECTION: forcing a failure. [ 622.154939][T16287] name failslab, interval 1, probability 0, space 0, times 0 [ 622.221063][T16287] CPU: 0 UID: 0 PID: 16287 Comm: syz.2.2209 Tainted: G U L syzkaller #0 PREEMPT(full) [ 622.221091][T16287] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 622.221097][T16287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 622.221107][T16287] Call Trace: [ 622.221112][T16287] [ 622.221119][T16287] dump_stack_lvl+0x100/0x190 [ 622.221145][T16287] should_fail_ex.cold+0x5/0xa [ 622.221163][T16287] ? sk_prot_alloc+0x10b/0x2a0 [ 622.221181][T16287] should_failslab+0xc2/0x120 [ 622.221196][T16287] __kmalloc_noprof+0xe0/0x850 [ 622.221220][T16287] sk_prot_alloc+0x10b/0x2a0 [ 622.221240][T16287] sk_alloc+0x36/0xe80 [ 622.221255][T16287] mISDN_sock_create+0x267/0x420 [ 622.221279][T16287] __sock_create+0x339/0x860 [ 622.221302][T16287] __sys_socket+0x14d/0x260 [ 622.221330][T16287] ? __pfx___sys_socket+0x10/0x10 [ 622.221357][T16287] __x64_sys_socket+0x72/0xb0 [ 622.221378][T16287] ? lockdep_hardirqs_on+0x78/0x100 [ 622.221395][T16287] do_syscall_64+0x106/0xf80 [ 622.221410][T16287] ? clear_bhb_loop+0x40/0x90 [ 622.221427][T16287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.221443][T16287] RIP: 0033:0x7febfd39c629 [ 622.221457][T16287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.221471][T16287] RSP: 002b:00007febfe26d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 622.221485][T16287] RAX: ffffffffffffffda RBX: 00007febfd615fa0 RCX: 00007febfd39c629 [ 622.221495][T16287] RDX: 0000000000000024 RSI: 0000000000000002 RDI: 0000000000000022 [ 622.221504][T16287] RBP: 00007febfd432b39 R08: 0000000000000000 R09: 0000000000000000 [ 622.221513][T16287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 622.221521][T16287] R13: 00007febfd616038 R14: 00007febfd615fa0 R15: 00007ffe31b195b8 [ 622.221540][T16287] [ 622.969277][T12356] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 622.982189][T12356] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 623.012760][T12356] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 623.071973][T12356] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 623.079690][T12356] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 624.191543][T16297] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 624.221386][T16297] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 624.249518][T16297] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 624.275497][T16297] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 624.320274][T16297] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 624.351245][T16297] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 624.435050][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.445075][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.761768][T16288] zswap: compressor not available [ 625.160160][T16293] chnl_net:caif_netlink_parms(): no params data found [ 625.697129][T16337] netlink: zone id is out of range [ 625.722082][T16293] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.741853][T16293] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.749013][T16293] bridge_slave_0: entered allmulticast mode [ 625.763604][T16337] netlink: zone id is out of range [ 625.843102][T16293] bridge_slave_0: entered promiscuous mode [ 625.921504][T16293] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.956778][T12356] Bluetooth: hci1: command 0x0c1a tx timeout [ 626.010436][T16293] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.062395][T16293] bridge_slave_1: entered allmulticast mode [ 626.123981][T16293] bridge_slave_1: entered promiscuous mode [ 626.272393][T12356] Bluetooth: hci3: command 0x0c1a tx timeout [ 626.278649][T10466] Bluetooth: hci2: command 0x0c1a tx timeout [ 626.348337][T16293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.358014][T12356] Bluetooth: hci4: command 0x041b tx timeout [ 626.442162][T16293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.618941][T16293] team0: Port device team_slave_0 added [ 626.666441][T16293] team0: Port device team_slave_1 added [ 626.680799][T16351] zswap: compressor û not available [ 626.813723][T16293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.850127][T16293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.022971][T16293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.098683][T16293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.170533][T16293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.346923][T16293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.722061][T16293] hsr_slave_0: entered promiscuous mode [ 627.769580][T16293] hsr_slave_1: entered promiscuous mode [ 627.804025][T16293] debugfs: 'hsr0' already exists in 'hsr' [ 627.843066][T16293] Cannot create hsr debugfs directory [ 628.282783][T16371] FAULT_INJECTION: forcing a failure. [ 628.282783][T16371] name fail_futex, interval 1, probability 0, space 0, times 0 [ 628.377387][T16371] CPU: 0 UID: 0 PID: 16371 Comm: syz.2.2228 Tainted: G U L syzkaller #0 PREEMPT(full) [ 628.377416][T16371] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 628.377421][T16371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 628.377430][T16371] Call Trace: [ 628.377435][T16371] [ 628.377442][T16371] dump_stack_lvl+0x100/0x190 [ 628.377468][T16371] should_fail_ex.cold+0x5/0xa [ 628.377487][T16371] get_futex_key+0x1d2/0x1620 [ 628.377506][T16371] ? __pfx_get_futex_key+0x10/0x10 [ 628.377531][T16371] futex_wait_setup+0x81/0x500 [ 628.377567][T16371] __futex_wait+0x19f/0x300 [ 628.377591][T16371] ? __pfx___futex_wait+0x10/0x10 [ 628.377616][T16371] ? __pfx_futex_wake_mark+0x10/0x10 [ 628.377641][T16371] ? futex_hash+0x2c5/0x380 [ 628.377663][T16371] futex_wait+0xed/0x380 [ 628.377685][T16371] ? __pfx_futex_wait+0x10/0x10 [ 628.377711][T16371] ? find_held_lock+0x2b/0x80 [ 628.377724][T16371] ? __might_fault+0xc5/0x140 [ 628.377742][T16371] ? __might_fault+0xc5/0x140 [ 628.377762][T16371] do_futex+0x1ef/0x350 [ 628.377780][T16371] ? __pfx_do_futex+0x10/0x10 [ 628.377798][T16371] ? _copy_from_user+0x59/0xd0 [ 628.377818][T16371] ? mntput+0x70/0xa0 [ 628.377838][T16371] ? do_handle_open+0x2ca/0xce0 [ 628.377855][T16371] __x64_sys_futex+0x34f/0x4d0 [ 628.377876][T16371] ? __pfx___x64_sys_futex+0x10/0x10 [ 628.377894][T16371] ? __task_pid_nr_ns+0x1ca/0x510 [ 628.377945][T16371] ? __task_pid_nr_ns+0x1ca/0x510 [ 628.377970][T16371] do_syscall_64+0x106/0xf80 [ 628.377987][T16371] ? clear_bhb_loop+0x40/0x90 [ 628.378005][T16371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.378020][T16371] RIP: 0033:0x7febfd39c629 [ 628.378035][T16371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 628.378049][T16371] RSP: 002b:00007febfe26d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 628.378064][T16371] RAX: ffffffffffffffda RBX: 00007febfd615fa8 RCX: 00007febfd39c629 [ 628.378075][T16371] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007febfd615fa8 [ 628.378084][T16371] RBP: 00007febfd615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 628.378093][T16371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 628.378101][T16371] R13: 00007febfd616038 R14: 00007ffe31b194d0 R15: 00007ffe31b195b8 [ 628.378121][T16371] [ 628.440266][T12356] Bluetooth: hci4: command 0x041b tx timeout [ 628.610233][T16375] netlink: zone id is out of range [ 628.778487][T16293] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 628.824333][T16293] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 628.852899][T16293] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 628.897331][T16293] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 629.315549][T16293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.361785][T16293] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.437315][T10937] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.437409][T10937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.438616][T10937] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.438678][T10937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.191662][T16293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 630.526234][T12356] Bluetooth: hci4: command 0x041b tx timeout [ 631.425531][T16293] veth0_vlan: entered promiscuous mode [ 631.503820][T16293] veth1_vlan: entered promiscuous mode [ 631.670219][T16293] veth0_macvtap: entered promiscuous mode [ 631.787152][T16293] veth1_macvtap: entered promiscuous mode [ 631.947779][T16293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.950337][T16293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 632.092816][T10922] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.092872][T10922] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.092898][T10922] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.092923][T10922] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.383853][T10962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.383884][T10962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.533492][T13387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.533510][T13387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.593709][T12356] Bluetooth: hci4: command 0x041b tx timeout [ 632.679697][T16293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 632.975122][T16432] FAULT_INJECTION: forcing a failure. [ 632.975122][T16432] name fail_futex, interval 1, probability 0, space 0, times 0 [ 632.988776][T16432] CPU: 0 UID: 0 PID: 16432 Comm: syz.4.2207 Tainted: G U L syzkaller #0 PREEMPT(full) [ 632.988804][T16432] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 632.988810][T16432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 632.988820][T16432] Call Trace: [ 632.988825][T16432] [ 632.988831][T16432] dump_stack_lvl+0x100/0x190 [ 632.988858][T16432] should_fail_ex.cold+0x5/0xa [ 632.988876][T16432] should_fail_futex+0x4c/0x60 [ 632.988894][T16432] futex_lock_pi_atomic+0x12d/0xaf0 [ 632.988919][T16432] futex_lock_pi+0x246/0x7b0 [ 632.988942][T16432] ? __pfx_futex_lock_pi+0x10/0x10 [ 632.988961][T16432] ? preempt_schedule_common+0x42/0xc0 [ 632.988977][T16432] ? preempt_schedule_thunk+0x16/0x30 [ 632.989002][T16432] ? __pfx_try_to_wake_up+0x10/0x10 [ 632.989021][T16432] ? futex_private_hash_put+0x107/0x1c0 [ 632.989041][T16432] ? __pfx_futex_wake_mark+0x10/0x10 [ 632.989067][T16432] ? ksys_write+0x190/0x250 [ 632.989088][T16432] ? ksys_write+0x190/0x250 [ 632.989112][T16432] do_futex+0x18a/0x350 [ 632.989130][T16432] ? __pfx_do_futex+0x10/0x10 [ 632.989152][T16432] __x64_sys_futex+0x34f/0x4d0 [ 632.989173][T16432] ? __pfx___x64_sys_futex+0x10/0x10 [ 632.989198][T16432] do_syscall_64+0x106/0xf80 [ 632.989213][T16432] ? clear_bhb_loop+0x40/0x90 [ 632.989231][T16432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.989246][T16432] RIP: 0033:0x7fabb219c629 [ 632.989260][T16432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.989273][T16432] RSP: 002b:00007fabb2fb9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 632.989289][T16432] RAX: ffffffffffffffda RBX: 00007fabb2415fa0 RCX: 00007fabb219c629 [ 632.989298][T16432] RDX: 000000000000001f RSI: 0000000000000006 RDI: 0000000000000000 [ 632.989307][T16432] RBP: 00007fabb2232b39 R08: 0000000000000000 R09: 000000008000fff5 [ 632.989315][T16432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.989324][T16432] R13: 00007fabb2416038 R14: 00007fabb2415fa0 R15: 00007fff1a762338 [ 632.989342][T16432] [ 633.437079][T16434] netlink: zone id is out of range [ 634.684572][T12356] Bluetooth: hci4: command 0x041b tx timeout [ 635.276291][T16462] FAULT_INJECTION: forcing a failure. [ 635.276291][T16462] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 635.517345][T16462] CPU: 0 UID: 0 PID: 16462 Comm: syz.4.2243 Tainted: G U L syzkaller #0 PREEMPT(full) [ 635.517373][T16462] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 635.517378][T16462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 635.517387][T16462] Call Trace: [ 635.517392][T16462] [ 635.517398][T16462] dump_stack_lvl+0x100/0x190 [ 635.517431][T16462] should_fail_ex.cold+0x5/0xa [ 635.517446][T16462] ? prepare_alloc_pages+0x16d/0x5f0 [ 635.517463][T16462] should_fail_alloc_page+0xeb/0x140 [ 635.517478][T16462] prepare_alloc_pages+0x1f0/0x5f0 [ 635.517496][T16462] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 635.517518][T16462] ? try_to_migrate_one+0x142e/0x37f0 [ 635.517546][T16462] ? __pfx_try_to_migrate_one+0x10/0x10 [ 635.517564][T16462] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 635.517596][T16462] ? __up_read+0x2c5/0x700 [ 635.517616][T16462] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 635.517641][T16462] ? policy_nodemask+0xed/0x4f0 [ 635.517656][T16462] alloc_pages_mpol+0x1fb/0x550 [ 635.517671][T16462] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 635.517689][T16462] folio_alloc_mpol_noprof+0x36/0x340 [ 635.517707][T16462] alloc_migration_target_by_mpol+0x2c1/0x650 [ 635.517727][T16462] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 635.517745][T16462] ? __pfx___might_resched+0x10/0x10 [ 635.517770][T16462] migrate_pages_batch+0x4f2/0x4530 [ 635.517787][T16462] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 635.517811][T16462] ? walk_pgd_range+0x1115/0x1eb0 [ 635.517831][T16462] ? __pfx_migrate_pages_batch+0x10/0x10 [ 635.517861][T16462] migrate_pages_sync+0x12c/0x880 [ 635.517878][T16462] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 635.517900][T16462] ? __pfx_migrate_pages_sync+0x10/0x10 [ 635.517914][T16462] ? __pfx_queue_pages_test_walk+0x10/0x10 [ 635.517938][T16462] migrate_pages+0x1aae/0x28a0 [ 635.517956][T16462] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 635.517978][T16462] ? __pfx_migrate_pages+0x10/0x10 [ 635.517994][T16462] ? mas_next_slot+0x1003/0x18b0 [ 635.518012][T16462] ? find_held_lock+0x2b/0x80 [ 635.518025][T16462] ? do_mbind+0x557/0xfd0 [ 635.518044][T16462] ? up_write+0x290/0x4f0 [ 635.518065][T16462] do_mbind+0x5a6/0xfd0 [ 635.518087][T16462] ? __pfx_do_mbind+0x10/0x10 [ 635.518103][T16462] ? ksys_write+0x190/0x250 [ 635.518123][T16462] ? ksys_write+0x190/0x250 [ 635.518152][T16462] ? __pfx_get_nodes+0x10/0x10 [ 635.518178][T16462] kernel_mbind+0x1b7/0x200 [ 635.518195][T16462] ? __pfx_kernel_mbind+0x10/0x10 [ 635.518217][T16462] do_syscall_64+0x106/0xf80 [ 635.518232][T16462] ? clear_bhb_loop+0x40/0x90 [ 635.518250][T16462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.518265][T16462] RIP: 0033:0x7fabb219c629 [ 635.518279][T16462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.518294][T16462] RSP: 002b:00007fabb2fb9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 635.518308][T16462] RAX: ffffffffffffffda RBX: 00007fabb2415fa0 RCX: 00007fabb219c629 [ 635.518317][T16462] RDX: 0000002100000000 RSI: 0000000100000008 RDI: 0000000000002000 [ 635.518326][T16462] RBP: 00007fabb2232b39 R08: 0000000000000006 R09: 0000000000000002 [ 635.518335][T16462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.518343][T16462] R13: 00007fabb2416038 R14: 00007fabb2415fa0 R15: 00007fff1a762338 [ 635.518362][T16462] [ 636.606789][T16487] netlink: zone id is out of range [ 636.812908][T12356] Bluetooth: hci4: command 0x041b tx timeout [ 638.173202][T16508] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2252'. [ 639.296155][T10466] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 639.309092][T10466] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 639.316731][T10466] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 639.324640][T10466] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 639.332546][T10466] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 639.546756][T10922] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.049619][T10922] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.405679][T10922] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.629182][T10922] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.366726][T16551] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2262'. [ 641.439414][T10922] team0: left allmulticast mode [ 641.466855][T10922] team_slave_0: left allmulticast mode [ 641.478271][T10466] Bluetooth: hci5: command tx timeout [ 641.522940][T10922] team_slave_1: left allmulticast mode [ 641.565939][T10922] team0: left promiscuous mode [ 641.585166][T10922] team_slave_0: left promiscuous mode [ 641.653641][T10922] team_slave_1: left promiscuous mode [ 641.699870][T10922] bridge0: port 3(team0) entered disabled state [ 641.802227][T10922] bridge_slave_1: left allmulticast mode [ 641.843890][T10922] bridge_slave_1: left promiscuous mode [ 641.887439][T10922] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.974158][T10922] bridge_slave_0: left allmulticast mode [ 642.015601][T10922] bridge_slave_0: left promiscuous mode [ 642.058783][T10922] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.806546][T10922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 642.891527][T10922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.984767][T10922] bond0 (unregistering): Released all slaves [ 643.332585][T16520] chnl_net:caif_netlink_parms(): no params data found [ 643.561291][T10466] Bluetooth: hci5: command tx timeout [ 645.142251][T16520] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.149350][T16520] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.222077][T16520] bridge_slave_0: entered allmulticast mode [ 645.269915][T16520] bridge_slave_0: entered promiscuous mode [ 645.301323][T16520] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.308405][T16520] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.410408][T16520] bridge_slave_1: entered allmulticast mode [ 645.423342][T16520] bridge_slave_1: entered promiscuous mode [ 645.541192][T16600] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2265'. [ 645.640297][T10466] Bluetooth: hci5: command tx timeout [ 645.820821][T16600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.854719][T16600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.906780][T16600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.958685][T16600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.206228][T16520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.275370][T16520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.832026][T16615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2268'. [ 646.863930][T16520] team0: Port device team_slave_0 added [ 646.942936][T16520] team0: Port device team_slave_1 added [ 647.128905][T16616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2268'. [ 647.486445][T16520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.519888][T16615] syz.2.2268(16615): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 647.548441][T16520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 647.705203][T16520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.723661][T10466] Bluetooth: hci5: command tx timeout [ 647.798917][T16520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.883955][T16520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.123527][T16520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.236877][T16645] FAULT_INJECTION: forcing a failure. [ 648.236877][T16645] name fail_futex, interval 1, probability 0, space 0, times 0 [ 648.250468][T16645] CPU: 0 UID: 0 PID: 16645 Comm: syz.4.2272 Tainted: G U L syzkaller #0 PREEMPT(full) [ 648.250519][T16645] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 648.250530][T16645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 648.250549][T16645] Call Trace: [ 648.250557][T16645] [ 648.250563][T16645] dump_stack_lvl+0x100/0x190 [ 648.250597][T16645] should_fail_ex.cold+0x5/0xa [ 648.250615][T16645] should_fail_futex+0x4c/0x60 [ 648.250632][T16645] futex_lock_pi_atomic+0xe7/0xaf0 [ 648.250657][T16645] futex_lock_pi+0x246/0x7b0 [ 648.250680][T16645] ? __pfx_futex_lock_pi+0x10/0x10 [ 648.250702][T16645] ? __pfx___futex_wait+0x10/0x10 [ 648.250741][T16645] ? __pfx_futex_wake_mark+0x10/0x10 [ 648.250766][T16645] ? ksys_write+0x190/0x250 [ 648.250786][T16645] ? ksys_write+0x190/0x250 [ 648.250810][T16645] do_futex+0x18a/0x350 [ 648.250828][T16645] ? __pfx_do_futex+0x10/0x10 [ 648.250851][T16645] __x64_sys_futex+0x34f/0x4d0 [ 648.250871][T16645] ? __pfx___x64_sys_futex+0x10/0x10 [ 648.250896][T16645] do_syscall_64+0x106/0xf80 [ 648.250911][T16645] ? clear_bhb_loop+0x40/0x90 [ 648.250929][T16645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.250944][T16645] RIP: 0033:0x7fabb219c629 [ 648.250959][T16645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.250973][T16645] RSP: 002b:00007fabb2f98028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 648.250987][T16645] RAX: ffffffffffffffda RBX: 00007fabb2416090 RCX: 00007fabb219c629 [ 648.250996][T16645] RDX: 000000000000001f RSI: 0000000000000006 RDI: 0000000000000000 [ 648.251005][T16645] RBP: 00007fabb2232b39 R08: 0000000000000000 R09: 000000008000fff5 [ 648.251014][T16645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 648.251022][T16645] R13: 00007fabb2416128 R14: 00007fabb2416090 R15: 00007fff1a762338 [ 648.251042][T16645] [ 648.879091][T10922] hsr_slave_0: left promiscuous mode [ 648.922089][T10922] hsr_slave_1: left promiscuous mode [ 648.951522][T10922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.971046][T10922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.992577][T10922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 649.018559][T10922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.080492][T10922] veth1_macvtap: left promiscuous mode [ 649.097074][T10922] veth0_macvtap: left promiscuous mode [ 649.852493][T10922] team0 (unregistering): Port device team_slave_1 removed [ 649.947903][T10922] team0 (unregistering): Port device team_slave_0 removed [ 650.720042][T16520] hsr_slave_0: entered promiscuous mode [ 650.778597][T16520] hsr_slave_1: entered promiscuous mode [ 650.815172][T16659] blktrace: Concurrent blktraces are not allowed on loop2 [ 650.854668][T16520] debugfs: 'hsr0' already exists in 'hsr' [ 650.860417][T16520] Cannot create hsr debugfs directory [ 651.489334][ T9] Process accounting resumed [ 652.480633][T16520] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.920795][T16697] overlayfs: missing 'lowerdir' [ 653.048712][T16520] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.122938][T10950] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.208347][T16520] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.366438][T16520] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.402164][T10922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 654.478772][T10922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 654.691023][T10922] bond0 (unregistering): Released all slaves [ 654.903434][T10922] HfR: left promiscuous mode [ 655.236200][T16717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2282'. [ 655.295975][T10922] tipc: Left network mode [ 655.326763][T16520] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 655.345035][T16719] netlink: 'syz.4.2282': attribute type 1 has an invalid length. [ 655.352766][T16719] netlink: 'syz.4.2282': attribute type 4 has an invalid length. [ 655.488716][T16719] netlink: 'syz.4.2282': attribute type 5 has an invalid length. [ 655.559636][T16719] netlink: 2029 bytes leftover after parsing attributes in process `syz.4.2282'. [ 655.835337][T16520] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 656.131039][T16520] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 656.339440][T16520] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 656.872015][T16736] FAULT_INJECTION: forcing a failure. [ 656.872015][T16736] name failslab, interval 1, probability 0, space 0, times 0 [ 656.954015][T16736] CPU: 0 UID: 0 PID: 16736 Comm: syz.4.2284 Tainted: G U L syzkaller #0 PREEMPT(full) [ 656.954043][T16736] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 656.954049][T16736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 656.954057][T16736] Call Trace: [ 656.954062][T16736] [ 656.954069][T16736] dump_stack_lvl+0x100/0x190 [ 656.954096][T16736] should_fail_ex.cold+0x5/0xa [ 656.954114][T16736] should_failslab+0xc2/0x120 [ 656.954128][T16736] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 656.954149][T16736] ? skb_clone+0x190/0x400 [ 656.954175][T16736] skb_clone+0x190/0x400 [ 656.954192][T16736] netlink_deliver_tap+0xaed/0xcc0 [ 656.954214][T16736] netlink_unicast+0x650/0x870 [ 656.954234][T16736] ? __pfx_netlink_unicast+0x10/0x10 [ 656.954251][T16736] ? __pfx___might_resched+0x10/0x10 [ 656.954271][T16736] ? __lock_acquire+0x4a5/0x2630 [ 656.954294][T16736] netlink_sendmsg+0x8b0/0xda0 [ 656.954319][T16736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.954335][T16736] ? __import_iovec+0x1d2/0x640 [ 656.954360][T16736] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 656.954382][T16736] ____sys_sendmsg+0xa54/0xc30 [ 656.954405][T16736] ? __pfx_____sys_sendmsg+0x10/0x10 [ 656.954428][T16736] ? __pfx_futex_wake_mark+0x10/0x10 [ 656.954453][T16736] ___sys_sendmsg+0x190/0x1e0 [ 656.954475][T16736] ? __pfx____sys_sendmsg+0x10/0x10 [ 656.954519][T16736] __sys_sendmsg+0x170/0x220 [ 656.954535][T16736] ? __pfx___sys_sendmsg+0x10/0x10 [ 656.954551][T16736] ? __x64_sys_futex+0x34f/0x4d0 [ 656.954580][T16736] do_syscall_64+0x106/0xf80 [ 656.954596][T16736] ? clear_bhb_loop+0x40/0x90 [ 656.954613][T16736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.954629][T16736] RIP: 0033:0x7fabb219c629 [ 656.954642][T16736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.954656][T16736] RSP: 002b:00007fabb2f98028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 656.954670][T16736] RAX: ffffffffffffffda RBX: 00007fabb2416090 RCX: 00007fabb219c629 [ 656.954680][T16736] RDX: 0000000000000800 RSI: 0000200000000000 RDI: 0000000000000025 [ 656.954688][T16736] RBP: 00007fabb2232b39 R08: 0000000000000000 R09: 0000000000000000 [ 656.954697][T16736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 656.954705][T16736] R13: 00007fabb2416128 R14: 00007fabb2416090 R15: 00007fff1a762338 [ 656.954724][T16736] [ 657.829542][T16520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 657.867185][T16520] 8021q: adding VLAN 0 to HW filter on device team0 [ 657.894621][T10950] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.901769][T10950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.124495][T10937] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.131681][T10937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.169556][T16752] FAULT_INJECTION: forcing a failure. [ 658.169556][T16752] name failslab, interval 1, probability 0, space 0, times 0 [ 658.236526][T16752] CPU: 0 UID: 0 PID: 16752 Comm: syz.1.2287 Tainted: G U L syzkaller #0 PREEMPT(full) [ 658.236556][T16752] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 658.236561][T16752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 658.236570][T16752] Call Trace: [ 658.236576][T16752] [ 658.236583][T16752] dump_stack_lvl+0x100/0x190 [ 658.236609][T16752] should_fail_ex.cold+0x5/0xa [ 658.236627][T16752] ? sk_prot_alloc+0x10b/0x2a0 [ 658.236645][T16752] should_failslab+0xc2/0x120 [ 658.236660][T16752] __kmalloc_noprof+0xe0/0x850 [ 658.236684][T16752] sk_prot_alloc+0x10b/0x2a0 [ 658.236704][T16752] sk_alloc+0x36/0xe80 [ 658.236720][T16752] caif_create+0x10b/0x430 [ 658.236736][T16752] __sock_create+0x339/0x860 [ 658.236759][T16752] __sys_socket+0x14d/0x260 [ 658.236781][T16752] ? __pfx___sys_socket+0x10/0x10 [ 658.236818][T16752] __x64_sys_socket+0x72/0xb0 [ 658.236839][T16752] ? lockdep_hardirqs_on+0x78/0x100 [ 658.236862][T16752] do_syscall_64+0x106/0xf80 [ 658.236877][T16752] ? clear_bhb_loop+0x40/0x90 [ 658.236897][T16752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.236913][T16752] RIP: 0033:0x7fa8f539c629 [ 658.236926][T16752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.236940][T16752] RSP: 002b:00007fa8f6332028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 658.236955][T16752] RAX: ffffffffffffffda RBX: 00007fa8f5615fa0 RCX: 00007fa8f539c629 [ 658.236965][T16752] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000025 [ 658.236973][T16752] RBP: 00007fa8f5432b39 R08: 0000000000000000 R09: 0000000000000000 [ 658.236982][T16752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 658.236990][T16752] R13: 00007fa8f5616038 R14: 00007fa8f5615fa0 R15: 00007ffdde00a458 [ 658.237009][T16752] [ 658.791909][T16752] openvswitch: netlink: Key type 512 is out of range max 32 [ 661.407340][T10922] hsr_slave_0: left promiscuous mode [ 661.538482][T10922] hsr_slave_1: left promiscuous mode [ 661.860320][T16771] vivid-007: ================= START STATUS ================= [ 661.867981][T16771] vivid-007: Generate PTS: true [ 661.932544][T10922] veth1_macvtap: left promiscuous mode [ 662.024235][T10922] veth0_macvtap: left promiscuous mode [ 662.059372][T16771] vivid-007: Generate SCR: true [ 662.088877][T10922] veth1_vlan: left promiscuous mode [ 662.094334][T10922] veth0_vlan: left promiscuous mode [ 662.111632][T16771] tpg source WxH: 320x240 (Y'CbCr) [ 662.442633][T16771] tpg field: 1 [ 662.446023][T16771] tpg crop: (0,0)/320x240 [ 662.483302][T16771] tpg compose: (0,0)/320x240 [ 662.532124][T16771] tpg colorspace: 8 [ 662.535949][T16771] tpg transfer function: 0/0 [ 662.578561][T16771] tpg Y'CbCr encoding: 0/0 [ 662.582992][T16771] tpg quantization: 0/0 [ 662.587125][T16771] tpg RGB range: 0/2 [ 662.683964][T16771] vivid-007: ================== END STATUS ================== [ 663.330620][T10922] team0 (unregistering): Port device team_slave_1 removed [ 663.399828][T10922] team0 (unregistering): Port device team_slave_0 removed [ 664.005643][T16520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 664.094799][T16784] syz.4.2294 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 664.469048][T16520] veth0_vlan: entered promiscuous mode [ 664.549824][T16787] ovs_: entered promiscuous mode [ 664.596591][T16520] veth1_vlan: entered promiscuous mode [ 664.945308][T16520] veth0_macvtap: entered promiscuous mode [ 664.955556][T16795] FAULT_INJECTION: forcing a failure. [ 664.955556][T16795] name fail_futex, interval 1, probability 0, space 0, times 0 [ 664.968513][T16795] CPU: 0 UID: 0 PID: 16795 Comm: syz.1.2298 Tainted: G U L syzkaller #0 PREEMPT(full) [ 664.968542][T16795] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 664.968548][T16795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 664.968558][T16795] Call Trace: [ 664.968564][T16795] [ 664.968570][T16795] dump_stack_lvl+0x100/0x190 [ 664.968597][T16795] should_fail_ex.cold+0x5/0xa [ 664.968616][T16795] should_fail_futex+0x4c/0x60 [ 664.968634][T16795] futex_lock_pi_atomic+0x12d/0xaf0 [ 664.968661][T16795] futex_lock_pi+0x246/0x7b0 [ 664.968688][T16795] ? __pfx_futex_lock_pi+0x10/0x10 [ 664.968707][T16795] ? preempt_schedule_common+0x42/0xc0 [ 664.968724][T16795] ? preempt_schedule_thunk+0x16/0x30 [ 664.968749][T16795] ? __pfx_try_to_wake_up+0x10/0x10 [ 664.968768][T16795] ? futex_private_hash_put+0x107/0x1c0 [ 664.968788][T16795] ? __pfx_futex_wake_mark+0x10/0x10 [ 664.968815][T16795] ? ksys_write+0x190/0x250 [ 664.968836][T16795] ? ksys_write+0x190/0x250 [ 664.968861][T16795] do_futex+0x18a/0x350 [ 664.968879][T16795] ? __pfx_do_futex+0x10/0x10 [ 664.968903][T16795] __x64_sys_futex+0x34f/0x4d0 [ 664.968923][T16795] ? __pfx___x64_sys_futex+0x10/0x10 [ 664.968949][T16795] do_syscall_64+0x106/0xf80 [ 664.968964][T16795] ? clear_bhb_loop+0x40/0x90 [ 664.968982][T16795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.968998][T16795] RIP: 0033:0x7fa8f539c629 [ 664.969012][T16795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.969026][T16795] RSP: 002b:00007fa8f6332028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 664.969042][T16795] RAX: ffffffffffffffda RBX: 00007fa8f5615fa0 RCX: 00007fa8f539c629 [ 664.969052][T16795] RDX: 000000000000001f RSI: 0000000000000006 RDI: 0000000000000000 [ 664.969061][T16795] RBP: 00007fa8f5432b39 R08: 0000000000000000 R09: 000000008000fff5 [ 664.969070][T16795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 664.969079][T16795] R13: 00007fa8f5616038 R14: 00007fa8f5615fa0 R15: 00007ffdde00a458 [ 664.969100][T16795] [ 665.734079][T16807] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2299'. [ 665.800671][T16520] veth1_macvtap: entered promiscuous mode [ 666.031459][T16807] bridge_slave_1 (unregistering): left allmulticast mode [ 666.038982][T16807] bridge_slave_1 (unregistering): left promiscuous mode [ 666.111252][T16807] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.518491][T16520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.636310][T16520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.742200][T13387] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.781410][T13387] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.790217][T13387] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.069276][T16828] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 667.118796][T13387] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.476195][T16831] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 667.877178][T10922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.941160][T10922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.273924][T16847] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2305'. [ 668.511605][T10950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.562384][T10950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.042294][T16863] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2306'. [ 671.493079][T10466] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 678.147778][T16968] netlink: 'syz.4.2321': attribute type 33 has an invalid length. [ 678.302839][T16968] netlink: 322 bytes leftover after parsing attributes in process `syz.4.2321'. [ 679.654258][T12356] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 679.667231][T12356] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 679.676397][T12356] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 679.684392][T12356] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 679.701591][T12356] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 679.717674][T16983] futex_wake_op: syz.3.2325 tries to shift op by -2048; fix this program [ 681.720175][T10962] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.818541][T12356] Bluetooth: hci3: command tx timeout [ 681.858730][T16984] chnl_net:caif_netlink_parms(): no params data found [ 682.039315][T10962] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.391142][T10962] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.693499][T10962] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.121567][T10962] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.256226][T16984] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.297679][T16984] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.342794][T16984] bridge_slave_0: entered allmulticast mode [ 683.379517][T16984] bridge_slave_0: entered promiscuous mode [ 683.406562][T17022] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2332'. [ 683.435126][T16984] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.480433][T16984] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.524152][T16984] bridge_slave_1: entered allmulticast mode [ 683.565571][T16984] bridge_slave_1: entered promiscuous mode [ 683.722021][T16984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.797459][T16984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.899892][T12356] Bluetooth: hci3: command tx timeout [ 684.229832][T16984] team0: Port device team_slave_0 added [ 684.283097][T16984] team0: Port device team_slave_1 added [ 684.558690][T16984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.651110][T17038] input: f¬ as /devices/virtual/input/input25 [ 684.663542][T16984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.851813][T16984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.949467][T16984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.008587][T16984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.163031][T16984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.417678][T16984] hsr_slave_0: entered promiscuous mode [ 685.503559][T16984] hsr_slave_1: entered promiscuous mode [ 685.509611][T16984] debugfs: 'hsr0' already exists in 'hsr' [ 685.568176][T16984] Cannot create hsr debugfs directory [ 685.903627][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.909913][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.980847][T12356] Bluetooth: hci3: command tx timeout [ 686.309511][T17053] FAULT_INJECTION: forcing a failure. [ 686.309511][T17053] name failslab, interval 1, probability 0, space 0, times 0 [ 686.412887][T17053] CPU: 0 UID: 0 PID: 17053 Comm: syz.3.2341 Tainted: G U L syzkaller #0 PREEMPT(full) [ 686.412924][T17053] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 686.412930][T17053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 686.412940][T17053] Call Trace: [ 686.412945][T17053] [ 686.412952][T17053] dump_stack_lvl+0x100/0x190 [ 686.412982][T17053] should_fail_ex.cold+0x5/0xa [ 686.413002][T17053] should_failslab+0xc2/0x120 [ 686.413017][T17053] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 686.413038][T17053] ? __proc_create+0x2cb/0x8c0 [ 686.413064][T17053] __proc_create+0x2cb/0x8c0 [ 686.413087][T17053] ? __pfx___proc_create+0x10/0x10 [ 686.413116][T17053] _proc_mkdir+0xb9/0x210 [ 686.413137][T17053] ? __pfx__proc_mkdir+0x10/0x10 [ 686.413158][T17053] ? net_generic+0xea/0x2a0 [ 686.413183][T17053] ? __pfx_vlan_init_net+0x10/0x10 [ 686.413200][T17053] vlan_proc_init+0x93/0x160 [ 686.413223][T17053] ops_init+0x1e2/0x5f0 [ 686.413243][T17053] setup_net+0x118/0x3a0 [ 686.413260][T17053] ? __pfx_setup_net+0x10/0x10 [ 686.413275][T17053] ? lockdep_init_map_type+0x5c/0x250 [ 686.413296][T17053] ? mutex_init_lockep+0x110/0x150 [ 686.413318][T17053] copy_net_ns+0x46f/0x7c0 [ 686.413339][T17053] create_new_namespaces+0x3ea/0xac0 [ 686.413359][T17053] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 686.413377][T17053] ksys_unshare+0x455/0xab0 [ 686.413397][T17053] ? __pfx_ksys_unshare+0x10/0x10 [ 686.413423][T17053] __x64_sys_unshare+0x31/0x40 [ 686.413440][T17053] do_syscall_64+0x106/0xf80 [ 686.413456][T17053] ? clear_bhb_loop+0x40/0x90 [ 686.413474][T17053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.413490][T17053] RIP: 0033:0x7f205c59c629 [ 686.413504][T17053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.413519][T17053] RSP: 002b:00007f205d4a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 686.413535][T17053] RAX: ffffffffffffffda RBX: 00007f205c815fa0 RCX: 00007f205c59c629 [ 686.413546][T17053] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 686.413555][T17053] RBP: 00007f205c632b39 R08: 0000000000000000 R09: 0000000000000000 [ 686.413564][T17053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 686.413573][T17053] R13: 00007f205c816038 R14: 00007f205c815fa0 R15: 00007fffe3545a28 [ 686.413594][T17053] [ 686.413754][T17053] 8021q: can't create entry in proc filesystem! [ 688.062635][T12356] Bluetooth: hci3: command tx timeout [ 692.594155][T17096] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 693.461540][T17102] netlink: zone id is out of range [ 693.554788][T17102] netlink: zone id is out of range [ 693.596929][T17102] netlink: zone id is out of range [ 693.718969][T17102] netlink: set zone limit has 8 unknown bytes [ 695.067817][T17119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2355'. [ 695.168226][T17121] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(12) [ 696.618114][T17139] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 696.986864][T17144] netlink: 'syz.3.2363': attribute type 4 has an invalid length. [ 696.995142][T17144] netlink: 'syz.3.2363': attribute type 5 has an invalid length. [ 697.034904][T17144] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2363'. [ 698.194573][T10466] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 698.206668][T10466] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 698.214803][T10466] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 698.234178][T10466] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 698.242693][T10466] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 698.848234][T17159] chnl_net:caif_netlink_parms(): no params data found [ 699.196479][T17159] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.205476][T17159] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.212785][T17159] bridge_slave_0: entered allmulticast mode [ 699.277029][T17159] bridge_slave_0: entered promiscuous mode [ 699.325410][T17159] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.333215][T17159] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.397575][T17159] bridge_slave_1: entered allmulticast mode [ 699.439552][T17159] bridge_slave_1: entered promiscuous mode [ 699.585825][T17159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.647293][T17159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.808291][T17159] team0: Port device team_slave_0 added [ 699.853024][T17159] team0: Port device team_slave_1 added [ 700.004871][T17159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.011831][T17159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.169520][T17159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.228604][T17159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.267397][T17159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.314010][T10466] Bluetooth: hci2: command tx timeout [ 700.424220][T17159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.635911][T17159] hsr_slave_0: entered promiscuous mode [ 700.675435][T17159] hsr_slave_1: entered promiscuous mode [ 700.681454][T17159] debugfs: 'hsr0' already exists in 'hsr' [ 700.745482][T17159] Cannot create hsr debugfs directory [ 702.385096][T10466] Bluetooth: hci2: command tx timeout [ 703.167895][T10466] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 704.265585][T17200] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 704.349518][T17200] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 704.465346][T10466] Bluetooth: hci2: command tx timeout [ 704.472136][T17200] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 704.595905][T17200] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 704.716275][T17200] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 704.836370][T17200] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 704.874574][T17200] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 705.011671][T17200] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 705.057150][T17200] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 705.080988][T17200] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 705.127879][T17200] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 705.533149][T17213] bond0: option lp_interval: invalid value () [ 705.582836][T17213] bond0: option lp_interval: allowed values 1 - 2147483647 [ 706.235697][T17225] FAULT_INJECTION: forcing a failure. [ 706.235697][T17225] name failslab, interval 1, probability 0, space 0, times 0 [ 706.298162][T17225] CPU: 0 UID: 0 PID: 17225 Comm: syz.4.2377 Tainted: G U L syzkaller #0 PREEMPT(full) [ 706.298191][T17225] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 706.298196][T17225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 706.298206][T17225] Call Trace: [ 706.298211][T17225] [ 706.298218][T17225] dump_stack_lvl+0x100/0x190 [ 706.298245][T17225] should_fail_ex.cold+0x5/0xa [ 706.298263][T17225] should_failslab+0xc2/0x120 [ 706.298278][T17225] __kmalloc_cache_noprof+0x7a/0x6f0 [ 706.298297][T17225] ? alloc_pipe_info+0x10e/0x590 [ 706.298310][T17225] ? find_held_lock+0x2b/0x80 [ 706.298326][T17225] alloc_pipe_info+0x10e/0x590 [ 706.298342][T17225] splice_direct_to_actor+0x78f/0xa30 [ 706.298366][T17225] ? __lock_acquire+0x4a5/0x2630 [ 706.298383][T17225] ? __pfx_direct_splice_actor+0x10/0x10 [ 706.298407][T17225] ? __pfx_aa_file_perm+0x10/0x10 [ 706.298424][T17225] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 706.298452][T17225] do_splice_direct+0x174/0x240 [ 706.298484][T17225] ? __pfx_do_splice_direct+0x10/0x10 [ 706.298507][T17225] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 706.298532][T17225] ? rw_verify_area+0xce/0x6d0 [ 706.298553][T17225] do_sendfile+0xadc/0xe20 [ 706.298577][T17225] ? __pfx_do_sendfile+0x10/0x10 [ 706.298598][T17225] ? __fget_files+0x21f/0x3d0 [ 706.298625][T17225] __x64_sys_sendfile64+0x1d8/0x220 [ 706.298640][T17225] ? ksys_write+0x1ac/0x250 [ 706.298661][T17225] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 706.298682][T17225] do_syscall_64+0x106/0xf80 [ 706.298699][T17225] ? clear_bhb_loop+0x40/0x90 [ 706.298717][T17225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.298733][T17225] RIP: 0033:0x7fabb219c629 [ 706.298746][T17225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.298761][T17225] RSP: 002b:00007fabb2fb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 706.298776][T17225] RAX: ffffffffffffffda RBX: 00007fabb2415fa0 RCX: 00007fabb219c629 [ 706.298786][T17225] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 706.298795][T17225] RBP: 00007fabb2fb9090 R08: 0000000000000000 R09: 0000000000000000 [ 706.298804][T17225] R10: 000000000000000d R11: 0000000000000246 R12: 0000000000000001 [ 706.298813][T17225] R13: 00007fabb2416038 R14: 00007fabb2415fa0 R15: 00007fff1a762338 [ 706.298832][T17225] [ 706.853786][T10466] Bluetooth: hci1: command 0x0c1a tx timeout [ 706.859843][T10466] Bluetooth: hci4: command 0x041b tx timeout [ 706.865969][T10466] Bluetooth: hci5: command 0x0c1a tx timeout [ 706.872072][T10466] Bluetooth: hci3: command 0x0c1a tx timeout [ 707.144100][T12356] Bluetooth: hci2: command 0x0c1a tx timeout [ 708.810472][T17231] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 708.944036][T12356] Bluetooth: hci3: command 0x0c1a tx timeout [ 708.950053][T12356] Bluetooth: hci5: command 0x0c1a tx timeout [ 709.187532][T12356] Bluetooth: hci2: command 0x0c1a tx timeout [ 711.024051][T12356] Bluetooth: hci5: command 0x0c1a tx timeout [ 711.030084][T10466] Bluetooth: hci3: command 0x0c1a tx timeout [ 711.264264][T12356] Bluetooth: hci2: command 0x0c1a tx timeout [ 711.435251][T17281] FAULT_INJECTION: forcing a failure. [ 711.435251][T17281] name failslab, interval 1, probability 0, space 0, times 0 [ 711.485962][T17281] CPU: 0 UID: 0 PID: 17281 Comm: syz.4.2386 Tainted: G U L syzkaller #0 PREEMPT(full) [ 711.485991][T17281] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 711.485997][T17281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 711.486005][T17281] Call Trace: [ 711.486011][T17281] [ 711.486018][T17281] dump_stack_lvl+0x100/0x190 [ 711.486044][T17281] should_fail_ex.cold+0x5/0xa [ 711.486062][T17281] ? alloc_pipe_info+0x1ec/0x590 [ 711.486076][T17281] should_failslab+0xc2/0x120 [ 711.486112][T17281] __kmalloc_noprof+0xe0/0x850 [ 711.486138][T17281] alloc_pipe_info+0x1ec/0x590 [ 711.486154][T17281] splice_direct_to_actor+0x78f/0xa30 [ 711.486178][T17281] ? __lock_acquire+0x4a5/0x2630 [ 711.486195][T17281] ? __pfx_direct_splice_actor+0x10/0x10 [ 711.486219][T17281] ? __pfx_aa_file_perm+0x10/0x10 [ 711.486237][T17281] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 711.486265][T17281] do_splice_direct+0x174/0x240 [ 711.486288][T17281] ? __pfx_do_splice_direct+0x10/0x10 [ 711.486311][T17281] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 711.486336][T17281] ? rw_verify_area+0xce/0x6d0 [ 711.486357][T17281] do_sendfile+0xadc/0xe20 [ 711.486381][T17281] ? __pfx_do_sendfile+0x10/0x10 [ 711.486402][T17281] ? __fget_files+0x21f/0x3d0 [ 711.486429][T17281] __x64_sys_sendfile64+0x1d8/0x220 [ 711.486444][T17281] ? ksys_write+0x1ac/0x250 [ 711.486464][T17281] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 711.486486][T17281] do_syscall_64+0x106/0xf80 [ 711.486502][T17281] ? clear_bhb_loop+0x40/0x90 [ 711.486521][T17281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.486536][T17281] RIP: 0033:0x7fabb219c629 [ 711.486550][T17281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 711.486564][T17281] RSP: 002b:00007fabb2fb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 711.486579][T17281] RAX: ffffffffffffffda RBX: 00007fabb2415fa0 RCX: 00007fabb219c629 [ 711.486590][T17281] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 711.486598][T17281] RBP: 00007fabb2fb9090 R08: 0000000000000000 R09: 0000000000000000 [ 711.486607][T17281] R10: 000000000000000d R11: 0000000000000246 R12: 0000000000000001 [ 711.486616][T17281] R13: 00007fabb2416038 R14: 00007fabb2415fa0 R15: 00007fff1a762338 [ 711.486635][T17281] [ 712.447185][T17287] FAULT_INJECTION: forcing a failure. [ 712.447185][T17287] name failslab, interval 1, probability 0, space 0, times 0 [ 712.504100][T17287] CPU: 0 UID: 0 PID: 17287 Comm: syz.3.2388 Tainted: G U L syzkaller #0 PREEMPT(full) [ 712.504130][T17287] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 712.504136][T17287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 712.504146][T17287] Call Trace: [ 712.504152][T17287] [ 712.504159][T17287] dump_stack_lvl+0x100/0x190 [ 712.504187][T17287] should_fail_ex.cold+0x5/0xa [ 712.504205][T17287] should_failslab+0xc2/0x120 [ 712.504221][T17287] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 712.504242][T17287] ? __kernfs_new_node+0xd2/0x960 [ 712.504267][T17287] __kernfs_new_node+0xd2/0x960 [ 712.504288][T17287] ? __pfx___kernfs_new_node+0x10/0x10 [ 712.504313][T17287] ? find_held_lock+0x2b/0x80 [ 712.504327][T17287] ? kernfs_root+0xee/0x2a0 [ 712.504344][T17287] ? kernfs_root+0xee/0x2a0 [ 712.504367][T17287] kernfs_new_node+0x11b/0x1a0 [ 712.504391][T17287] __kernfs_create_file+0x53/0x350 [ 712.504410][T17287] sysfs_add_file_mode_ns+0x207/0x3c0 [ 712.504433][T17287] internal_create_group+0x593/0xf40 [ 712.504457][T17287] ? __pfx_internal_create_group+0x10/0x10 [ 712.504480][T17287] ? kernfs_create_link+0x1bd/0x240 [ 712.504499][T17287] internal_create_groups+0x9d/0x150 [ 712.504520][T17287] device_add+0x7c8/0x1950 [ 712.504545][T17287] ? __pfx_device_add+0x10/0x10 [ 712.504567][T17287] ? lockdep_init_map_type+0x5c/0x250 [ 712.504587][T17287] ? __init_waitqueue_head+0xca/0x150 [ 712.504613][T17287] netdev_register_kobject+0x1a9/0x3d0 [ 712.504636][T17287] register_netdevice+0x12e0/0x2210 [ 712.504656][T17287] ? idr_alloc+0xdd/0x130 [ 712.504672][T17287] ? __pfx_register_netdevice+0x10/0x10 [ 712.504689][T17287] ? net_generic+0xea/0x2a0 [ 712.504709][T17287] ppp_dev_configure+0x986/0xcb0 [ 712.504730][T17287] ppp_ioctl+0x985/0x2800 [ 712.504748][T17287] ? find_held_lock+0x2b/0x80 [ 712.504761][T17287] ? __pfx_ppp_ioctl+0x10/0x10 [ 712.504780][T17287] ? __fget_files+0x21f/0x3d0 [ 712.504805][T17287] ? __pfx_ppp_ioctl+0x10/0x10 [ 712.504821][T17287] __x64_sys_ioctl+0x18e/0x210 [ 712.504843][T17287] do_syscall_64+0x106/0xf80 [ 712.504858][T17287] ? clear_bhb_loop+0x40/0x90 [ 712.504877][T17287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.504892][T17287] RIP: 0033:0x7f205c59c629 [ 712.504907][T17287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.504921][T17287] RSP: 002b:00007f205d4a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 712.504936][T17287] RAX: ffffffffffffffda RBX: 00007f205c815fa0 RCX: 00007f205c59c629 [ 712.504946][T17287] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 000000000000000d [ 712.504955][T17287] RBP: 00007f205c632b39 R08: 0000000000000000 R09: 0000000000000000 [ 712.504965][T17287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 712.504974][T17287] R13: 00007f205c816038 R14: 00007f205c815fa0 R15: 00007fffe3545a28 [ 712.504995][T17287] [ 713.339665][T17309] netlink: 25 bytes leftover after parsing attributes in process `syz.4.2394'. [ 713.381185][T17311] FAULT_INJECTION: forcing a failure. [ 713.381185][T17311] name failslab, interval 1, probability 0, space 0, times 0 [ 713.411605][T17311] CPU: 0 UID: 0 PID: 17311 Comm: syz.3.2395 Tainted: G U L syzkaller #0 PREEMPT(full) [ 713.411633][T17311] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 713.411639][T17311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 713.411649][T17311] Call Trace: [ 713.411654][T17311] [ 713.411661][T17311] dump_stack_lvl+0x100/0x190 [ 713.411687][T17311] should_fail_ex.cold+0x5/0xa [ 713.411704][T17311] ? copy_splice_read+0x1a3/0xb90 [ 713.411726][T17311] should_failslab+0xc2/0x120 [ 713.411741][T17311] __kmalloc_noprof+0xe0/0x850 [ 713.411766][T17311] copy_splice_read+0x1a3/0xb90 [ 713.411792][T17311] ? __pfx_copy_splice_read+0x10/0x10 [ 713.411816][T17311] ? look_up_lock_class+0x55/0x120 [ 713.411836][T17311] ? lockdep_init_map_type+0x5c/0x250 [ 713.411857][T17311] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 713.411880][T17311] ? __pfx_copy_splice_read+0x10/0x10 [ 713.411902][T17311] do_splice_read+0x285/0x370 [ 713.411926][T17311] splice_direct_to_actor+0x2a1/0xa30 [ 713.411951][T17311] ? __pfx_direct_splice_actor+0x10/0x10 [ 713.411976][T17311] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 713.412004][T17311] do_splice_direct+0x174/0x240 [ 713.412033][T17311] ? __pfx_do_splice_direct+0x10/0x10 [ 713.412056][T17311] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 713.412081][T17311] ? rw_verify_area+0xce/0x6d0 [ 713.412102][T17311] do_sendfile+0xadc/0xe20 [ 713.412126][T17311] ? __pfx_do_sendfile+0x10/0x10 [ 713.412147][T17311] ? __fget_files+0x21f/0x3d0 [ 713.412174][T17311] __x64_sys_sendfile64+0x1d8/0x220 [ 713.412189][T17311] ? ksys_write+0x1ac/0x250 [ 713.412210][T17311] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 713.412231][T17311] do_syscall_64+0x106/0xf80 [ 713.412247][T17311] ? clear_bhb_loop+0x40/0x90 [ 713.412265][T17311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.412280][T17311] RIP: 0033:0x7f205c59c629 [ 713.412294][T17311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.412308][T17311] RSP: 002b:00007f205d4a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 713.412323][T17311] RAX: ffffffffffffffda RBX: 00007f205c815fa0 RCX: 00007f205c59c629 [ 713.412333][T17311] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 713.412342][T17311] RBP: 00007f205d4a6090 R08: 0000000000000000 R09: 0000000000000000 [ 713.412351][T17311] R10: 000000000000000d R11: 0000000000000246 R12: 0000000000000001 [ 713.412360][T17311] R13: 00007f205c816038 R14: 00007f205c815fa0 R15: 00007fffe3545a28 [ 713.412379][T17311] [ 714.398776][T17317] FAULT_INJECTION: forcing a failure. [ 714.398776][T17317] name failslab, interval 1, probability 0, space 0, times 0 [ 714.428051][T17317] CPU: 0 UID: 0 PID: 17317 Comm: syz.4.2397 Tainted: G U L syzkaller #0 PREEMPT(full) [ 714.428080][T17317] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 714.428087][T17317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 714.428097][T17317] Call Trace: [ 714.428102][T17317] [ 714.428109][T17317] dump_stack_lvl+0x100/0x190 [ 714.428136][T17317] should_fail_ex.cold+0x5/0xa [ 714.428155][T17317] should_failslab+0xc2/0x120 [ 714.428171][T17317] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 714.428192][T17317] ? alloc_empty_file+0x55/0x1c0 [ 714.428209][T17317] ? __pfx_stack_trace_save+0x10/0x10 [ 714.428227][T17317] alloc_empty_file+0x55/0x1c0 [ 714.428245][T17317] path_openat+0xe8/0x31a0 [ 714.428258][T17317] ? kasan_save_stack+0x3f/0x50 [ 714.428278][T17317] ? kasan_save_stack+0x30/0x50 [ 714.428298][T17317] ? kasan_save_track+0x14/0x30 [ 714.428317][T17317] ? __kasan_slab_alloc+0x89/0x90 [ 714.428338][T17317] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 714.428357][T17317] ? do_getname+0x35/0x390 [ 714.428372][T17317] ? do_sys_openat2+0xc5/0x1e0 [ 714.428389][T17317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.428407][T17317] ? __pfx_path_openat+0x10/0x10 [ 714.428427][T17317] do_file_open+0x20e/0x430 [ 714.428443][T17317] ? __pfx_do_file_open+0x10/0x10 [ 714.428470][T17317] ? alloc_fd+0x476/0x790 [ 714.428494][T17317] ? do_getname+0x191/0x390 [ 714.428512][T17317] do_sys_openat2+0x10d/0x1e0 [ 714.428530][T17317] ? __pfx_do_sys_openat2+0x10/0x10 [ 714.428554][T17317] __x64_sys_openat+0x12d/0x210 [ 714.428573][T17317] ? __pfx___x64_sys_openat+0x10/0x10 [ 714.428597][T17317] do_syscall_64+0x106/0xf80 [ 714.428614][T17317] ? clear_bhb_loop+0x40/0x90 [ 714.428632][T17317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.428647][T17317] RIP: 0033:0x7fabb219c629 [ 714.428662][T17317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.428677][T17317] RSP: 002b:00007fabb2f98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 714.428692][T17317] RAX: ffffffffffffffda RBX: 00007fabb2416090 RCX: 00007fabb219c629 [ 714.428702][T17317] RDX: 0000000000080000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 714.428711][T17317] RBP: 00007fabb2232b39 R08: 0000000000000000 R09: 0000000000000000 [ 714.428720][T17317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 714.428728][T17317] R13: 00007fabb2416128 R14: 00007fabb2416090 R15: 00007fff1a762338 [ 714.428747][T17317] [ 715.415310][T17321] mkiss: ax0: crc mode is auto. [ 716.995088][T17344] FAULT_INJECTION: forcing a failure. [ 716.995088][T17344] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 717.068346][T17344] CPU: 0 UID: 0 PID: 17344 Comm: syz.4.2404 Tainted: G U L syzkaller #0 PREEMPT(full) [ 717.068374][T17344] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 717.068380][T17344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 717.068390][T17344] Call Trace: [ 717.068395][T17344] [ 717.068402][T17344] dump_stack_lvl+0x100/0x190 [ 717.068429][T17344] should_fail_ex.cold+0x5/0xa [ 717.068444][T17344] ? prepare_alloc_pages+0x16d/0x5f0 [ 717.068462][T17344] should_fail_alloc_page+0xeb/0x140 [ 717.068478][T17344] prepare_alloc_pages+0x1f0/0x5f0 [ 717.068493][T17344] ? kernel_text_address+0x8d/0x100 [ 717.068517][T17344] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 717.068545][T17344] ? copy_splice_read+0x1a3/0xb90 [ 717.068567][T17344] ? stack_trace_save+0x8e/0xc0 [ 717.068581][T17344] ? __pfx_stack_trace_save+0x10/0x10 [ 717.068596][T17344] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 717.068619][T17344] ? copy_splice_read+0x1a3/0xb90 [ 717.068640][T17344] ? kasan_save_stack+0x3f/0x50 [ 717.068660][T17344] ? kasan_save_stack+0x30/0x50 [ 717.068680][T17344] ? kasan_save_track+0x14/0x30 [ 717.068700][T17344] ? __kasan_kmalloc+0xaa/0xb0 [ 717.068725][T17344] ? __kmalloc_noprof+0x301/0x850 [ 717.068745][T17344] ? copy_splice_read+0x1a3/0xb90 [ 717.068766][T17344] ? do_splice_read+0x285/0x370 [ 717.068788][T17344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.068814][T17344] alloc_pages_bulk_noprof+0x782/0x1490 [ 717.068842][T17344] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 717.068869][T17344] ? __kmalloc_noprof+0x320/0x850 [ 717.068892][T17344] copy_splice_read+0x1e1/0xb90 [ 717.068919][T17344] ? __pfx_copy_splice_read+0x10/0x10 [ 717.068942][T17344] ? look_up_lock_class+0x55/0x120 [ 717.068963][T17344] ? lockdep_init_map_type+0x5c/0x250 [ 717.068982][T17344] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 717.069006][T17344] ? __pfx_copy_splice_read+0x10/0x10 [ 717.069028][T17344] do_splice_read+0x285/0x370 [ 717.069051][T17344] splice_direct_to_actor+0x2a1/0xa30 [ 717.069076][T17344] ? __pfx_direct_splice_actor+0x10/0x10 [ 717.069101][T17344] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 717.069129][T17344] do_splice_direct+0x174/0x240 [ 717.069153][T17344] ? __pfx_do_splice_direct+0x10/0x10 [ 717.069175][T17344] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 717.069201][T17344] ? rw_verify_area+0xce/0x6d0 [ 717.069221][T17344] do_sendfile+0xadc/0xe20 [ 717.069246][T17344] ? __pfx_do_sendfile+0x10/0x10 [ 717.069267][T17344] ? __fget_files+0x21f/0x3d0 [ 717.069293][T17344] __x64_sys_sendfile64+0x1d8/0x220 [ 717.069308][T17344] ? ksys_write+0x1ac/0x250 [ 717.069329][T17344] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 717.069351][T17344] do_syscall_64+0x106/0xf80 [ 717.069366][T17344] ? clear_bhb_loop+0x40/0x90 [ 717.069384][T17344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.069400][T17344] RIP: 0033:0x7fabb219c629 [ 717.069413][T17344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.069428][T17344] RSP: 002b:00007fabb2fb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 717.069443][T17344] RAX: ffffffffffffffda RBX: 00007fabb2415fa0 RCX: 00007fabb219c629 [ 717.069453][T17344] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 717.069461][T17344] RBP: 00007fabb2fb9090 R08: 0000000000000000 R09: 0000000000000000 [ 717.069470][T17344] R10: 000000000000000d R11: 0000000000000246 R12: 0000000000000001 [ 717.069479][T17344] R13: 00007fabb2416038 R14: 00007fabb2415fa0 R15: 00007fff1a762338 [ 717.069499][T17344] [ 718.358070][T17350] Invalid ELF header magic: != ELF [ 719.037486][T17359] device-mapper: ioctl: Invalid ioctl structure: uuid ž, name , dev fffffffc00000000 [ 719.852266][T17370] openvswitch: netlink: IP tunnel dst address not specified [ 721.280451][T17391] FAULT_INJECTION: forcing a failure. [ 721.280451][T17391] name failslab, interval 1, probability 0, space 0, times 0 [ 721.340860][T17391] CPU: 0 UID: 0 PID: 17391 Comm: syz.4.2416 Tainted: G U L syzkaller #0 PREEMPT(full) [ 721.340887][T17391] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 721.340893][T17391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 721.340903][T17391] Call Trace: [ 721.340908][T17391] [ 721.340915][T17391] dump_stack_lvl+0x100/0x190 [ 721.340942][T17391] should_fail_ex.cold+0x5/0xa [ 721.340960][T17391] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 721.340974][T17391] should_failslab+0xc2/0x120 [ 721.340989][T17391] __kmalloc_noprof+0xe0/0x850 [ 721.341013][T17391] kernfs_fop_write_iter+0x26a/0x5f0 [ 721.341031][T17391] vfs_write+0x6ac/0x1070 [ 721.341054][T17391] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 721.341079][T17391] ? __pfx_vfs_write+0x10/0x10 [ 721.341113][T17391] ksys_write+0x12a/0x250 [ 721.341134][T17391] ? __pfx_ksys_write+0x10/0x10 [ 721.341161][T17391] do_syscall_64+0x106/0xf80 [ 721.341178][T17391] ? clear_bhb_loop+0x40/0x90 [ 721.341201][T17391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.341217][T17391] RIP: 0033:0x7fabb219c629 [ 721.341230][T17391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 721.341244][T17391] RSP: 002b:00007fabb2fb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 721.341259][T17391] RAX: ffffffffffffffda RBX: 00007fabb2415fa0 RCX: 00007fabb219c629 [ 721.341269][T17391] RDX: 0000000000000080 RSI: 0000200000000940 RDI: 0000000000000003 [ 721.341278][T17391] RBP: 00007fabb2fb9090 R08: 0000000000000000 R09: 0000000000000000 [ 721.341287][T17391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 721.341295][T17391] R13: 00007fabb2416038 R14: 00007fabb2415fa0 R15: 00007fff1a762338 [ 721.341315][T17391] [ 723.213321][T17407] FAULT_INJECTION: forcing a failure. [ 723.213321][T17407] name failslab, interval 1, probability 0, space 0, times 0 [ 723.395908][T17407] CPU: 0 UID: 0 PID: 17407 Comm: syz.3.2420 Tainted: G U L syzkaller #0 PREEMPT(full) [ 723.395937][T17407] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 723.395944][T17407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 723.395954][T17407] Call Trace: [ 723.395959][T17407] [ 723.395966][T17407] dump_stack_lvl+0x100/0x190 [ 723.395993][T17407] should_fail_ex.cold+0x5/0xa [ 723.396013][T17407] should_failslab+0xc2/0x120 [ 723.396029][T17407] __kmalloc_cache_noprof+0x7a/0x6f0 [ 723.396047][T17407] ? __v4l2_subdev_state_alloc+0x53/0x410 [ 723.396074][T17407] __v4l2_subdev_state_alloc+0x53/0x410 [ 723.396099][T17407] subdev_open+0xa6/0x510 [ 723.396121][T17407] v4l2_open+0x1d2/0x490 [ 723.396139][T17407] ? __pfx_v4l2_open+0x10/0x10 [ 723.396157][T17407] chrdev_open+0x234/0x6a0 [ 723.396170][T17407] ? __pfx_apparmor_file_open+0x10/0x10 [ 723.396191][T17407] ? __pfx_chrdev_open+0x10/0x10 [ 723.396206][T17407] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 723.396233][T17407] do_dentry_open+0x6d8/0x1660 [ 723.396264][T17407] ? __pfx_chrdev_open+0x10/0x10 [ 723.396283][T17407] vfs_open+0x82/0x3f0 [ 723.396303][T17407] path_openat+0x208c/0x31a0 [ 723.396321][T17407] ? futex_unqueue+0x13d/0x2c0 [ 723.396338][T17407] ? stack_depot_save_flags+0x27/0x9d0 [ 723.396363][T17407] ? __pfx_path_openat+0x10/0x10 [ 723.396378][T17407] ? kasan_save_stack+0x3f/0x50 [ 723.396398][T17407] ? kasan_save_stack+0x30/0x50 [ 723.396417][T17407] ? kasan_save_track+0x14/0x30 [ 723.396436][T17407] ? __kasan_slab_alloc+0x89/0x90 [ 723.396457][T17407] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 723.396477][T17407] ? do_getname+0x35/0x390 [ 723.396495][T17407] do_file_open+0x20e/0x430 [ 723.396511][T17407] ? __pfx_do_file_open+0x10/0x10 [ 723.396540][T17407] ? find_held_lock+0x2b/0x80 [ 723.396554][T17407] ? __might_fault+0xc5/0x140 [ 723.396572][T17407] ? __might_fault+0xc5/0x140 [ 723.396593][T17407] file_open_name+0x198/0x3b0 [ 723.396611][T17407] ? __pfx_file_open_name+0x10/0x10 [ 723.396633][T17407] ? do_getname+0x191/0x390 [ 723.396651][T17407] acct_on+0xa4/0x9e0 [ 723.396676][T17407] ? __pfx_acct_on+0x10/0x10 [ 723.396697][T17407] ? bpf_lsm_capable+0x9/0x10 [ 723.396711][T17407] ? security_capable+0x80/0x260 [ 723.396733][T17407] __x64_sys_acct+0x81/0x1e0 [ 723.396753][T17407] ? lockdep_hardirqs_on+0x78/0x100 [ 723.396770][T17407] do_syscall_64+0x106/0xf80 [ 723.396785][T17407] ? clear_bhb_loop+0x40/0x90 [ 723.396804][T17407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.396820][T17407] RIP: 0033:0x7f205c59c629 [ 723.396835][T17407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.396849][T17407] RSP: 002b:00007f205d4a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 723.396865][T17407] RAX: ffffffffffffffda RBX: 00007f205c815fa0 RCX: 00007f205c59c629 [ 723.396875][T17407] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 723.396885][T17407] RBP: 00007f205c632b39 R08: 0000000000000000 R09: 0000000000000000 [ 723.396894][T17407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 723.396903][T17407] R13: 00007f205c816038 R14: 00007f205c815fa0 R15: 00007fffe3545a28 [ 723.396924][T17407] [ 724.390085][T17418] FAULT_INJECTION: forcing a failure. [ 724.390085][T17418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 724.390133][T17418] CPU: 0 UID: 0 PID: 17418 Comm: syz.4.2423 Tainted: G U L syzkaller #0 PREEMPT(full) [ 724.390156][T17418] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 724.390162][T17418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 724.390171][T17418] Call Trace: [ 724.390176][T17418] [ 724.390182][T17418] dump_stack_lvl+0x100/0x190 [ 724.390208][T17418] should_fail_ex.cold+0x5/0xa [ 724.390237][T17418] _copy_from_iter+0x1f4/0x1690 [ 724.390265][T17418] ? __pfx__copy_from_iter+0x10/0x10 [ 724.390288][T17418] ? rcu_is_watching+0x12/0xc0 [ 724.390310][T17418] ? trace_kmalloc+0x101/0x130 [ 724.390324][T17418] ? __kasan_kmalloc+0xaa/0xb0 [ 724.390346][T17418] ? __kmalloc_noprof+0x320/0x850 [ 724.390370][T17418] kernfs_fop_write_iter+0x186/0x5f0 [ 724.390388][T17418] vfs_write+0x6ac/0x1070 [ 724.390410][T17418] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 724.390436][T17418] ? __pfx_vfs_write+0x10/0x10 [ 724.390470][T17418] ksys_write+0x12a/0x250 [ 724.390491][T17418] ? __pfx_ksys_write+0x10/0x10 [ 724.390518][T17418] do_syscall_64+0x106/0xf80 [ 724.390535][T17418] ? clear_bhb_loop+0x40/0x90 [ 724.390553][T17418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.390568][T17418] RIP: 0033:0x7fabb219c629 [ 724.390581][T17418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 724.390595][T17418] RSP: 002b:00007fabb2fb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 724.390611][T17418] RAX: ffffffffffffffda RBX: 00007fabb2415fa0 RCX: 00007fabb219c629 [ 724.390621][T17418] RDX: 0000000000000080 RSI: 0000200000000940 RDI: 0000000000000003 [ 724.390629][T17418] RBP: 00007fabb2fb9090 R08: 0000000000000000 R09: 0000000000000000 [ 724.390638][T17418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 724.390647][T17418] R13: 00007fabb2416038 R14: 00007fabb2415fa0 R15: 00007fff1a762338 [ 724.390667][T17418] [ 725.676532][T17438] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 728.614283][T17459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2435'. [ 732.639205][T17513] FAULT_INJECTION: forcing a failure. [ 732.639205][T17513] name failslab, interval 1, probability 0, space 0, times 0 [ 732.792645][T17513] CPU: 0 UID: 0 PID: 17513 Comm: syz.4.2445 Tainted: G U L syzkaller #0 PREEMPT(full) [ 732.792682][T17513] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 732.792688][T17513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 732.792698][T17513] Call Trace: [ 732.792704][T17513] [ 732.792711][T17513] dump_stack_lvl+0x100/0x190 [ 732.792738][T17513] should_fail_ex.cold+0x5/0xa [ 732.792758][T17513] should_failslab+0xc2/0x120 [ 732.792772][T17513] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 732.792793][T17513] ? security_file_alloc+0x34/0x2c0 [ 732.792816][T17513] ? trace_kmem_cache_alloc+0xf3/0x120 [ 732.792834][T17513] security_file_alloc+0x34/0x2c0 [ 732.792857][T17513] init_file+0x95/0x480 [ 732.792874][T17513] alloc_empty_file+0x73/0x1c0 [ 732.792891][T17513] alloc_file_pseudo+0x13a/0x230 [ 732.792909][T17513] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 732.792925][T17513] ? alloc_fd+0x476/0x790 [ 732.792948][T17513] ? do_raw_spin_unlock+0x145/0x1e0 [ 732.792972][T17513] __anon_inode_getfile+0xe8/0x280 [ 732.792991][T17513] anon_inode_getfile_fmode+0x37/0xa0 [ 732.793008][T17513] do_signalfd4+0x1ed/0x480 [ 732.793027][T17513] __x64_sys_signalfd+0x120/0x1a0 [ 732.793044][T17513] ? __pfx___x64_sys_signalfd+0x10/0x10 [ 732.793067][T17513] do_syscall_64+0x106/0xf80 [ 732.793082][T17513] ? clear_bhb_loop+0x40/0x90 [ 732.793101][T17513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.793116][T17513] RIP: 0033:0x7fabb219c629 [ 732.793130][T17513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.793144][T17513] RSP: 002b:00007fabb2fb9028 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 732.793159][T17513] RAX: ffffffffffffffda RBX: 00007fabb2415fa0 RCX: 00007fabb219c629 [ 732.793169][T17513] RDX: 0000000000000008 RSI: 00002000000000c0 RDI: ffffffffffffffff [ 732.793178][T17513] RBP: 00007fabb2232b39 R08: 0000000000000000 R09: 0000000000000000 [ 732.793187][T17513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 732.793195][T17513] R13: 00007fabb2416038 R14: 00007fabb2415fa0 R15: 00007fff1a762338 [ 732.793215][T17513] [ 733.398143][T17519] netlink: zone id is out of range [ 733.403265][T17519] netlink: zone id is out of range [ 733.448440][T17519] netlink: zone id is out of range [ 733.474963][T17519] netlink: set zone limit has 8 unknown bytes [ 735.224561][T17532] netlink: 334 bytes leftover after parsing attributes in process `syz.4.2451'. [ 739.749682][T17559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2458'. [ 739.854639][T17564] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2458'. [ 739.881645][T12356] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 739.892293][T12356] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 739.900747][T12356] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 739.916441][T12356] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 739.925571][T12356] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 740.808675][T17568] chnl_net:caif_netlink_parms(): no params data found [ 741.294212][T17568] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.326149][T17568] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.333336][T17568] bridge_slave_0: entered allmulticast mode [ 741.405360][T17568] bridge_slave_0: entered promiscuous mode [ 741.449201][T17568] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.495160][T17568] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.502360][T17568] bridge_slave_1: entered allmulticast mode [ 741.569394][T17568] bridge_slave_1: entered promiscuous mode [ 741.984645][T10466] Bluetooth: hci6: command tx timeout [ 742.024598][T17568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.088396][T17568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 742.418884][T17568] team0: Port device team_slave_0 added [ 742.576793][T17568] team0: Port device team_slave_1 added [ 742.695886][T17568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.702846][T17568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 742.879660][T17568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.963606][T17568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.014057][T17568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.153900][T17568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.808186][T17568] hsr_slave_0: entered promiscuous mode [ 743.844811][T17568] hsr_slave_1: entered promiscuous mode [ 743.871269][T17568] debugfs: 'hsr0' already exists in 'hsr' [ 743.897449][T17568] Cannot create hsr debugfs directory [ 744.063928][T10466] Bluetooth: hci6: command tx timeout [ 745.342132][T17590] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 746.145042][T10466] Bluetooth: hci6: command tx timeout [ 746.634833][T17594] hub 1-0:1.0: USB hub found [ 746.748262][T17594] hub 1-0:1.0: 1 port detected [ 747.348237][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.355676][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.552508][T17602] kAFS: unparsable volume name [ 748.224634][T10466] Bluetooth: hci6: command tx timeout [ 749.306417][T17612] Invalid ELF header magic: != ELF [ 751.746368][T17616] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2468'. [ 751.810123][T17616] bridge_slave_1: left allmulticast mode [ 751.872619][T17616] bridge_slave_1: left promiscuous mode [ 751.928283][T17616] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.036789][T17616] bridge_slave_0: left allmulticast mode [ 752.121480][T17616] bridge_slave_0: left promiscuous mode [ 752.149294][T17616] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.604386][T17641] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2473'. [ 756.888724][T17642] futex_wake_op: syz.3.2473 tries to shift op by -2048; fix this program [ 757.324139][T17640] 0x000000000001-0x000000020000 : "" [ 757.443973][T17640] ftl_cs: FTL header corrupt! [ 758.661014][T12356] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 758.672451][T12356] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 758.681648][T12356] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 758.691667][T12356] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 758.699534][T12356] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 758.811594][T10466] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 758.821116][T10466] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 758.830360][T10466] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 758.846670][T10466] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 758.854192][T10466] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 759.687982][T17651] chnl_net:caif_netlink_parms(): no params data found [ 759.989580][T17655] chnl_net:caif_netlink_parms(): no params data found [ 760.501788][T17651] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.546149][T17651] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.553353][T17651] bridge_slave_0: entered allmulticast mode [ 760.616183][T17651] bridge_slave_0: entered promiscuous mode [ 760.667169][T17655] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.716476][T17655] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.753843][T17655] bridge_slave_0: entered allmulticast mode [ 760.787824][T10466] Bluetooth: hci7: command tx timeout [ 760.797444][T17655] bridge_slave_0: entered promiscuous mode [ 760.828419][T17655] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.875225][T17655] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.882433][T17655] bridge_slave_1: entered allmulticast mode [ 760.943909][T10466] Bluetooth: hci8: command tx timeout [ 760.955163][T17655] bridge_slave_1: entered promiscuous mode [ 760.995920][T17651] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.003005][T17651] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.054690][T17651] bridge_slave_1: entered allmulticast mode [ 761.096771][T17651] bridge_slave_1: entered promiscuous mode [ 761.276541][T17651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.417434][T17655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.478313][T17651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.551638][T17655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.763306][T17655] team0: Port device team_slave_0 added [ 761.791362][T17655] team0: Port device team_slave_1 added [ 761.834177][T17651] team0: Port device team_slave_0 added [ 761.897622][T17651] team0: Port device team_slave_1 added [ 762.010617][T17655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 762.063785][T17655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.196550][T17655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 762.306003][T17651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 762.312959][T17651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.494441][T17651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 762.528826][T17655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 762.563920][T17655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.672515][T17655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.755022][T17651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 762.786596][T17651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.864994][T10466] Bluetooth: hci7: command tx timeout [ 762.894426][T17651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 763.024742][T10466] Bluetooth: hci8: command tx timeout [ 763.105606][T17655] hsr_slave_0: entered promiscuous mode [ 763.119984][T17655] hsr_slave_1: entered promiscuous mode [ 763.155555][T17655] debugfs: 'hsr0' already exists in 'hsr' [ 763.174138][T17655] Cannot create hsr debugfs directory [ 763.289747][T17651] hsr_slave_0: entered promiscuous mode [ 763.325039][T17651] hsr_slave_1: entered promiscuous mode [ 763.331825][T17651] debugfs: 'hsr0' already exists in 'hsr' [ 763.380825][T17651] Cannot create hsr debugfs directory [ 764.943888][T10466] Bluetooth: hci7: command tx timeout [ 765.103868][T10466] Bluetooth: hci8: command tx timeout [ 767.023948][T10466] Bluetooth: hci7: command tx timeout [ 767.183939][T10466] Bluetooth: hci8: command tx timeout [ 772.401248][T17728] zero sized request [ 772.431861][T17728] MTRR 1 not used [ 772.942715][T17733] usb usb15: usbfs: process 17733 (syz.3.2489) did not claim interface 0 before use [ 773.025818][T12356] Bluetooth: hci5: unexpected event 0x3e length: 726 > 260 [ 773.025843][T12356] Bluetooth: hci5: unexpected subevent 0x0d length: 725 > 260 [ 773.041132][T12356] Bluetooth: hci5: Unknown advertising packet type: 0x7f [ 773.041174][T12356] Bluetooth: hci5: Unknown advertising packet type: 0x5c [ 773.051304][T12356] Bluetooth: hci5: Unknown advertising packet type: 0x7d [ 773.059699][T12356] Bluetooth: hci5: Malformed LE Event: 0x0d [ 774.808244][T17742] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 775.974227][T12356] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 786.925236][T17824] zswap: compressor not available [ 790.158545][T12356] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 790.167046][T12356] Bluetooth: hci5: Invalid handle: 0x3a4a > 0x0eff [ 791.376668][T17861] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2516'. [ 791.420564][T17861] vhci_hcd vhci_hcd.2: invalid port number 194 [ 791.442319][T17861] vhci_hcd vhci_hcd.2: invalid port number 194 [ 793.227703][T17880] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700000007 [ 797.649938][T17929] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2528'. [ 800.250263][T12356] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 800.260384][T12356] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 800.268706][T12356] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 800.276523][T12356] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 800.284480][T12356] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 800.824402][T17962] chnl_net:caif_netlink_parms(): no params data found [ 801.129583][T17962] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.172829][T17962] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.209421][T17962] bridge_slave_0: entered allmulticast mode [ 801.239504][T17962] bridge_slave_0: entered promiscuous mode [ 801.273224][T17962] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.312826][T17962] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.313041][T17962] bridge_slave_1: entered allmulticast mode [ 801.331535][T17962] bridge_slave_1: entered promiscuous mode [ 801.411929][T17962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.429766][T17962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.521191][T17962] team0: Port device team_slave_0 added [ 801.531606][T17962] team0: Port device team_slave_1 added [ 801.611458][T17962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.611476][T17962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.611496][T17962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.627751][T17962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.627767][T17962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.627795][T17962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.743444][T17962] hsr_slave_0: entered promiscuous mode [ 801.755061][T17962] hsr_slave_1: entered promiscuous mode [ 801.758779][T17962] debugfs: 'hsr0' already exists in 'hsr' [ 801.758799][T17962] Cannot create hsr debugfs directory [ 802.385341][T12356] Bluetooth: hci9: command tx timeout [ 804.464388][T12356] Bluetooth: hci9: command tx timeout [ 806.392380][T18007] rtc_cmos 00:00: Alarms can be up to one day in the future [ 806.428966][T15335] rtc_cmos 00:00: Alarms can be up to one day in the future [ 806.454002][T15335] rtc_cmos 00:00: Alarms can be up to one day in the future [ 806.461452][T15335] rtc_cmos 00:00: Alarms can be up to one day in the future [ 806.524117][T15335] rtc_cmos 00:00: Alarms can be up to one day in the future [ 806.531412][T15335] rtc rtc0: __rtc_set_alarm: err=-22 [ 806.544325][T12356] Bluetooth: hci9: command tx timeout [ 806.608193][T18016] FAULT_INJECTION: forcing a failure. [ 806.608193][T18016] name failslab, interval 1, probability 0, space 0, times 0 [ 806.650268][T18016] CPU: 0 UID: 0 PID: 18016 Comm: syz.3.2542 Tainted: G U L syzkaller #0 PREEMPT(full) [ 806.650299][T18016] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 806.650305][T18016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 806.650314][T18016] Call Trace: [ 806.650320][T18016] [ 806.650327][T18016] dump_stack_lvl+0x100/0x190 [ 806.650356][T18016] should_fail_ex.cold+0x5/0xa [ 806.650376][T18016] should_failslab+0xc2/0x120 [ 806.650392][T18016] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 806.650413][T18016] ? __d_alloc+0x34/0xa80 [ 806.650436][T18016] ? __pfx_stack_trace_save+0x10/0x10 [ 806.650455][T18016] __d_alloc+0x34/0xa80 [ 806.650474][T18016] d_alloc_parallel+0x111/0x14e0 [ 806.650501][T18016] ? find_held_lock+0x2b/0x80 [ 806.650515][T18016] ? __d_lookup+0x25c/0x4a0 [ 806.650534][T18016] ? __pfx_d_alloc_parallel+0x10/0x10 [ 806.650556][T18016] ? __d_lookup+0x266/0x4a0 [ 806.650579][T18016] lookup_open.isra.0+0x57c/0x11b0 [ 806.650604][T18016] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 806.650628][T18016] ? __pfx___might_resched+0x10/0x10 [ 806.650649][T18016] ? mnt_get_write_access+0x52/0x2f0 [ 806.650671][T18016] ? __pfx_down_write+0x10/0x10 [ 806.650689][T18016] ? mnt_get_write_access+0x1e9/0x2f0 [ 806.650710][T18016] path_openat+0x2291/0x31a0 [ 806.650728][T18016] ? entry_SYSCALL_64_after_hwframe+0x48/0x7f [ 806.650746][T18016] ? __pfx_path_openat+0x10/0x10 [ 806.650767][T18016] do_file_open+0x20e/0x430 [ 806.650782][T18016] ? __pfx_do_file_open+0x10/0x10 [ 806.650810][T18016] ? _raw_spin_unlock+0x28/0x50 [ 806.650832][T18016] ? alloc_fd+0x476/0x790 [ 806.650860][T18016] do_sys_openat2+0x10d/0x1e0 [ 806.650878][T18016] ? __pfx_do_sys_openat2+0x10/0x10 [ 806.650902][T18016] __x64_sys_open+0xfe/0x1d0 [ 806.650920][T18016] ? __pfx___x64_sys_open+0x10/0x10 [ 806.650945][T18016] do_syscall_64+0x106/0xf80 [ 806.650961][T18016] ? clear_bhb_loop+0x40/0x90 [ 806.650979][T18016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.650995][T18016] RIP: 0033:0x7f205c59c629 [ 806.651009][T18016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 806.651024][T18016] RSP: 002b:00007f205d4a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 806.651039][T18016] RAX: ffffffffffffffda RBX: 00007f205c815fa0 RCX: 00007f205c59c629 [ 806.651049][T18016] RDX: 00000000000001c0 RSI: 0000000000042b42 RDI: 0000200000000400 [ 806.651059][T18016] RBP: 00007f205c632b39 R08: 0000000000000000 R09: 0000000000000000 [ 806.651069][T18016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 806.651078][T18016] R13: 00007f205c816038 R14: 00007f205c815fa0 R15: 00007fffe3545a28 [ 806.651099][T18016] [ 808.624065][T12356] Bluetooth: hci9: command tx timeout [ 808.792982][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.802382][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.424185][T18059] [U] [ 812.426982][T18059] [U] [ 812.429653][T18059] [U] [ 812.432320][T18059] [U] [ 812.489092][T18059] [U] [ 812.491800][T18059] [U] [ 812.494472][T18059] [U] [ 812.497141][T18059] [U] [ 812.590914][T18059] [U] [ 812.593661][T18059] [U] [ 812.596334][T18059] [U] [ 812.599001][T18059] [U] [ 812.660294][T18059] [U] [ 812.663008][T18059] [U] [ 812.665677][T18059] [U] [ 812.668346][T18059] [U] [ 812.732219][T18059] [U] [ 812.734928][T18059] [U] [ 812.737603][T18059] [U] [ 812.740271][T18059] [U] [ 812.816839][T18059] [U] [ 812.819557][T18059] [U] [ 812.822229][T18059] [U] [ 812.824896][T18059] [U] [ 812.883507][T18059] [U] [ 812.886218][T18059] [U] [ 812.888891][T18059] [U] [ 812.891559][T18059] [U] [ 812.958904][T18059] [U] [ 812.961619][T18059] [U] [ 812.964291][T18059] [U] [ 812.966962][T18059] [U] [ 813.037019][T18059] [U] [ 813.039739][T18059] [U] [ 813.042407][T18059] [U] [ 813.045080][T18059] [U] [ 813.118103][T18059] [U] [ 813.120811][T18059] [U] [ 813.123479][T18059] [U] [ 813.126151][T18059] [U] [ 813.216999][T18059] [U] [ 815.301258][T12356] Bluetooth: hci5: unexpected subevent 0x01 length: 3 < 18 [ 819.153385][T10466] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 819.174308][T10466] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 819.196439][T10466] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 819.224333][T10466] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 819.231795][T10466] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 819.384799][T12356] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 819.405449][T12356] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 819.425685][T12356] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 819.433662][T12356] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 819.441373][T12356] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 820.481198][T18109] chnl_net:caif_netlink_parms(): no params data found [ 820.641275][T18112] chnl_net:caif_netlink_parms(): no params data found [ 821.103063][T18109] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.144558][T18109] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.151826][T18109] bridge_slave_0: entered allmulticast mode [ 821.226290][T18109] bridge_slave_0: entered promiscuous mode [ 821.261029][T18109] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.269921][T12356] Bluetooth: hci10: command tx timeout [ 821.317210][T18109] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.354215][T18109] bridge_slave_1: entered allmulticast mode [ 821.390194][T18109] bridge_slave_1: entered promiscuous mode [ 821.506080][T12356] Bluetooth: hci11: command tx timeout [ 821.615702][T18112] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.645907][T18112] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.693977][T18112] bridge_slave_0: entered allmulticast mode [ 821.733914][T18112] bridge_slave_0: entered promiscuous mode [ 821.775860][T18112] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.782966][T18112] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.844604][T18112] bridge_slave_1: entered allmulticast mode [ 821.889269][T18112] bridge_slave_1: entered promiscuous mode [ 822.137562][T18109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 822.207360][T18109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 822.552162][T18112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 822.628273][T18112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 822.718960][T18109] team0: Port device team_slave_0 added [ 822.761342][T18109] team0: Port device team_slave_1 added [ 822.917990][T18112] team0: Port device team_slave_0 added [ 822.986495][T18109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 823.019390][T18109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.166036][T18109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 823.228398][T18112] team0: Port device team_slave_1 added [ 823.311530][T18109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 823.345353][T12356] Bluetooth: hci10: command tx timeout [ 823.353189][T18109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.494862][T18109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 823.585171][T12356] Bluetooth: hci11: command tx timeout [ 823.646915][T18112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 823.696940][T18112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.825362][T18112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 824.022506][T18112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 824.074662][T18112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 824.203911][T18112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 824.401937][T18109] hsr_slave_0: entered promiscuous mode [ 824.444690][T18109] hsr_slave_1: entered promiscuous mode [ 824.474539][T18109] debugfs: 'hsr0' already exists in 'hsr' [ 824.480307][T18109] Cannot create hsr debugfs directory [ 824.595448][T18112] hsr_slave_0: entered promiscuous mode [ 824.627482][T18112] hsr_slave_1: entered promiscuous mode [ 824.714478][T18112] debugfs: 'hsr0' already exists in 'hsr' [ 824.720258][T18112] Cannot create hsr debugfs directory [ 825.425087][T12356] Bluetooth: hci10: command tx timeout [ 825.673850][T10466] Bluetooth: hci11: command tx timeout [ 827.503986][T10466] Bluetooth: hci10: command tx timeout [ 827.744327][T10466] Bluetooth: hci11: command tx timeout [ 831.184084][ T31] INFO: task kworker/u11:26:10962 blocked for more than 143 seconds. [ 831.199273][ T31] Tainted: G U L syzkaller #0 [ 831.222260][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 831.264469][ T31] task:kworker/u11:26 state:D stack:23528 pid:10962 tgid:10962 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 831.324061][ T31] Workqueue: netns cleanup_net [ 831.328859][ T31] Call Trace: [ 831.332142][ T31] [ 831.393821][ T31] __schedule+0xfee/0x60e0 [ 831.415270][ T31] ? __lock_acquire+0x4a5/0x2630 [ 831.420251][ T31] ? __pfx___schedule+0x10/0x10 [ 831.474940][ T31] ? find_held_lock+0x2b/0x80 [ 831.479648][ T31] ? schedule+0x2bf/0x390 [ 831.569789][ T31] schedule+0xdd/0x390 [ 831.594572][ T31] schedule_timeout+0x1b2/0x280 [ 831.599482][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 831.642898][ T31] ? mark_held_locks+0x40/0x70 [ 831.664829][ T31] __wait_for_common+0x2e7/0x4c0 [ 831.693792][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 831.699226][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 831.732521][ T31] remove_one+0x312/0x420 [ 831.753834][ T31] ? find_next_child+0x18f/0x280 [ 831.758808][ T31] __simple_recursive_removal+0x148/0x5c0 [ 831.791266][ T31] ? __pfx_remove_one+0x10/0x10 [ 831.813510][ T31] debugfs_remove+0x5d/0x80 [ 831.829870][ T31] nsim_dev_health_exit+0x3b/0xe0 [ 831.854201][ T31] nsim_dev_reload_destroy+0x144/0x4a0 [ 831.859690][ T31] nsim_dev_reload_down+0x66/0xd0 [ 831.900716][ T31] devlink_reload+0x173/0x790 [ 831.933934][ T31] ? __pfx_devlink_reload+0x10/0x10 [ 831.950444][ T31] devlink_pernet_pre_exit+0x222/0x330 [ 831.967311][ T31] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 831.973324][ T31] ? kobject_put+0xb9/0x640 [ 832.034380][ T31] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 832.048185][ T31] ops_undo_list+0x187/0xab0 [ 832.052830][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 832.078544][ T31] ? cleanup_net+0x332/0x920 [ 832.083189][ T31] ? cleanup_net+0x332/0x920 [ 832.104412][ T31] ? idr_destroy+0x62/0x2e0 [ 832.108952][ T31] cleanup_net+0x499/0x920 [ 832.113359][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 832.147304][ T31] ? rcu_is_watching+0x12/0xc0 [ 832.161677][ T31] process_one_work+0x9d7/0x1920 [ 832.176170][ T31] ? __pfx_process_one_work+0x10/0x10 [ 832.194148][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 832.199133][ T31] worker_thread+0x5da/0xe40 [ 832.223354][ T31] ? __pfx_worker_thread+0x10/0x10 [ 832.243233][ T31] ? kthread+0x13a/0x450 [ 832.256767][ T31] ? __pfx_worker_thread+0x10/0x10 [ 832.261909][ T31] kthread+0x370/0x450 [ 832.286903][ T31] ? __pfx_kthread+0x10/0x10 [ 832.291518][ T31] ret_from_fork+0x754/0xd80 [ 832.323813][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 832.328957][ T31] ? __switch_to+0x7b4/0x1120 [ 832.333644][ T31] ? __pfx_kthread+0x10/0x10 [ 832.359706][ T31] ret_from_fork_asm+0x1a/0x30 [ 832.374042][ T31] [ 832.484421][ T31] INFO: task syz-executor:16984 blocked for more than 144 seconds. [ 832.524300][ T31] Tainted: G U L syzkaller #0 [ 832.530826][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 832.575982][ T31] task:syz-executor state:D stack:24984 pid:16984 tgid:16984 ppid:1 task_flags:0x400140 flags:0x00080002 [ 832.612646][ T31] Call Trace: [ 832.628267][ T31] [ 832.631215][ T31] __schedule+0xfee/0x60e0 [ 832.649630][ T31] ? __lock_acquire+0x4a5/0x2630 [ 832.665895][ T31] ? __pfx___schedule+0x10/0x10 [ 832.670773][ T31] ? find_held_lock+0x2b/0x80 [ 832.697115][ T31] ? schedule+0x2bf/0x390 [ 832.701507][ T31] schedule+0xdd/0x390 [ 832.722082][ T31] schedule_preempt_disabled+0x13/0x30 [ 832.743798][ T31] __mutex_lock+0xc9a/0x1b90 [ 832.748446][ T31] ? device_del+0xa0/0x9b0 [ 832.752859][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 832.787483][ T31] ? mark_held_locks+0x40/0x70 [ 832.792285][ T31] ? device_del+0xa0/0x9b0 [ 832.816837][ T31] device_del+0xa0/0x9b0 [ 832.821110][ T31] ? __pfx_ida_free+0x10/0x10 [ 832.846059][ T31] ? __pfx_device_del+0x10/0x10 [ 832.850978][ T31] ? __lock_acquire+0x4a5/0x2630 [ 832.878021][ T31] device_unregister+0x1d/0xe0 [ 832.882856][ T31] del_device_store+0x346/0x480 [ 832.911580][ T31] ? __pfx_del_device_store+0x10/0x10 [ 832.928183][ T31] ? find_held_lock+0x2b/0x80 [ 832.932908][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 832.957418][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 832.974219][ T31] ? __pfx_del_device_store+0x10/0x10 [ 832.979624][ T31] bus_attr_store+0x74/0xb0 [ 833.003312][ T31] ? __pfx_bus_attr_store+0x10/0x10 [ 833.024302][ T31] sysfs_kf_write+0xf2/0x150 [ 833.028927][ T31] kernfs_fop_write_iter+0x3e0/0x5f0 [ 833.049304][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 833.083956][ T31] vfs_write+0x6ac/0x1070 [ 833.088321][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 833.113372][ T31] ? __pfx_vfs_write+0x10/0x10 [ 833.134472][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 833.139709][ T31] ksys_write+0x12a/0x250 [ 833.163990][ T31] ? __pfx_ksys_write+0x10/0x10 [ 833.178437][ T31] do_syscall_64+0x106/0xf80 [ 833.183068][ T31] ? clear_bhb_loop+0x40/0x90 [ 833.207920][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.225433][ T31] RIP: 0033:0x7f1049b5cece [ 833.229863][ T31] RSP: 002b:00007ffc103e5ba8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 833.264436][ T31] RAX: ffffffffffffffda RBX: 0000555559757500 RCX: 00007f1049b5cece [ 833.287984][ T31] RDX: 0000000000000001 RSI: 00007ffc103e5c30 RDI: 0000000000000005 [ 833.317285][ T31] RBP: 00007f1049c3343f R08: 0000000000000000 R09: 0000000000000000 [ 833.341156][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 833.367332][ T31] R13: 00007ffc103e5c30 R14: 00007f104a944620 R15: 0000000000000003 [ 833.413749][ T31] [ 833.423358][ T31] INFO: task syz.1.2330:17017 blocked for more than 145 seconds. [ 833.537137][ T31] Tainted: G U L syzkaller #0 [ 833.543658][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 833.593760][ T31] task:syz.1.2330 state:D stack:25752 pid:17017 tgid:17013 ppid:5823 task_flags:0x400140 flags:0x00080002 [ 833.634599][ T31] Call Trace: [ 833.637897][ T31] [ 833.640817][ T31] __schedule+0xfee/0x60e0 [ 833.684884][ T31] ? __lock_acquire+0x4a5/0x2630 [ 833.689864][ T31] ? __pfx___schedule+0x10/0x10 [ 833.726128][ T31] ? find_held_lock+0x2b/0x80 [ 833.730833][ T31] ? schedule+0x2bf/0x390 [ 833.773756][ T31] schedule+0xdd/0x390 [ 833.777852][ T31] schedule_preempt_disabled+0x13/0x30 [ 833.803861][ T31] __mutex_lock+0xc9a/0x1b90 [ 833.808475][ T31] ? netlink_has_listeners+0x20f/0x430 [ 833.853779][ T31] ? devlink_health_report+0x681/0xb50 [ 833.859274][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 833.914262][ T31] ? devlink_recover_notify.constprop.0+0x200/0x670 [ 833.946004][ T31] ? __lock_acquire+0x3c1/0x2630 [ 833.951011][ T31] ? devlink_health_report+0x681/0xb50 [ 833.986202][ T31] devlink_health_report+0x681/0xb50 [ 833.991520][ T31] ? __pfx_devlink_health_report+0x10/0x10 [ 834.019122][ T31] nsim_dev_health_break_write+0x166/0x210 [ 834.039188][ T31] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 834.065109][ T31] full_proxy_write+0x135/0x1a0 [ 834.069991][ T31] vfs_write+0x2aa/0x1070 [ 834.095113][ T31] ? __pfx_full_proxy_write+0x10/0x10 [ 834.100538][ T31] ? __pfx_vfs_write+0x10/0x10 [ 834.124434][ T31] ? __fget_files+0x215/0x3d0 [ 834.142008][ T31] ? __fget_files+0x21f/0x3d0 [ 834.158619][ T31] ksys_write+0x12a/0x250 [ 834.162978][ T31] ? __pfx_ksys_write+0x10/0x10 [ 834.183928][ T31] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 834.205476][ T31] ? syscall_user_dispatch+0x76/0x130 [ 834.210888][ T31] do_syscall_64+0x106/0xf80 [ 834.238758][ T31] ? clear_bhb_loop+0x40/0x90 [ 834.243465][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.275988][ T31] RIP: 0033:0x7fa8f539c629 [ 834.280429][ T31] RSP: 002b:00007fa8f6311028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 834.311901][ T31] RAX: ffffffffffffffda RBX: 00007fa8f5616090 RCX: 00007fa8f539c629 [ 834.335002][ T31] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000003 [ 834.342993][ T31] RBP: 00007fa8f5432b39 R08: 0000000000000000 R09: 0000000000000000 [ 834.380171][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 834.407139][ T31] R13: 00007fa8f5616128 R14: 00007fa8f5616090 R15: 00007ffdde00a458 [ 834.431175][ T31] [ 834.460415][ T31] [ 834.460415][ T31] Showing all locks held in the system: [ 834.565728][ T31] 1 lock held by pool_workqueue_/3: [ 834.570936][ T31] #0: ffffffff8e7f4e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 834.641393][ T31] 1 lock held by khungtaskd/31: [ 834.674157][ T31] #0: ffffffff8e7e9220 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 834.702188][ T31] 7 locks held by kworker/u11:24/10950: [ 834.732285][ T31] 6 locks held by kworker/u11:26/10962: [ 834.754419][ T31] #0: ffff88801c6ae948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 834.804454][ T31] #1: ffffc900064b7d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 834.843784][ T31] #2: ffffffff905f95d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 834.853370][ T31] #3: ffff88805e2370e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x185/0x330 [ 834.923526][ T31] #4: ffff88805e236250 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x18f/0x330 [ 834.959056][ T31] #5: ffff888052696480 (&sb->s_type->i_mutex_key#10/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0 [ 835.009382][ T31] 2 locks held by getty/15995: [ 835.027269][ T31] #0: ffff8880381310a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 835.058094][ T31] #1: ffffc900037952f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 835.088332][ T31] 5 locks held by syz-executor/16984: [ 835.107747][ T31] #0: ffff888036b0a420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 835.135448][ T31] #1: ffff888035234488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 835.162335][ T31] #2: ffff888029f131e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 835.207571][ T31] #3: ffffffff8fb6a748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 835.244161][ T31] #4: ffff88805e2370e8 (&dev->mutex){....}-{4:4}, at: device_del+0xa0/0x9b0 [ 835.272195][ T31] 3 locks held by syz.1.2330/17017: [ 835.287389][ T31] #0: ffff888026002638 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 835.317806][ T31] #1: ffff8880202ec420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 835.347691][ T31] #2: ffff88805e236250 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_health_report+0x681/0xb50 [ 835.382999][ T31] 4 locks held by syz-executor/17159: [ 835.397991][ T31] #0: ffff888036b0a420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 835.429808][ T31] #1: ffff888033b7ec88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 835.459528][ T31] #2: ffff888029f131e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 835.494070][ T31] #3: ffffffff8fb6a748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 835.526976][ T31] 4 locks held by syz-executor/17568: [ 835.532381][ T31] #0: ffff888036b0a420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 835.569601][ T31] #1: ffff88805bdf5c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 835.601597][ T31] #2: ffff888029f131e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 835.647788][ T31] #3: ffffffff8fb6a748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 835.681769][ T31] 2 locks held by syz.4.2462/17586: [ 835.696825][ T31] #0: ffff8880202ec420 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x9b1/0x31a0 [ 835.726131][ T31] #1: ffff888052696480 (&sb->s_type->i_mutex_key#18){++++}-{4:4}, at: path_openat+0xa16/0x31a0 [ 835.763569][ T31] 4 locks held by syz-executor/17651: [ 835.783467][ T31] #0: ffff888036b0a420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 835.809837][ T31] #1: ffff8880685b8888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 835.853875][ T31] #2: ffff888029f131e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 835.889028][ T31] #3: ffffffff8fb6a748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 835.921114][ T31] 4 locks held by syz-executor/17655: [ 835.938735][ T31] #0: ffff888036b0a420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 835.964600][ T31] #1: ffff888035edac88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 835.995900][ T31] #2: ffff888029f131e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 836.024613][ T31] #3: ffffffff8fb6a748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 836.056509][ T31] 4 locks held by syz-executor/17962: [ 836.061901][ T31] #0: ffff888036b0a420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 836.100448][ T31] #1: ffff88805bf0f888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 836.131163][ T31] #2: ffff888029f131e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 836.165123][ T31] #3: ffffffff8fb6a748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 836.202860][ T31] 4 locks held by syz-executor/18109: [ 836.221247][ T31] #0: ffff888036b0a420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 836.251285][ T31] #1: ffff88805e02a488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 836.282784][ T31] #2: ffff888029f131e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 836.312481][ T31] #3: ffffffff8fb6a748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 836.340678][ T31] 4 locks held by syz-executor/18112: [ 836.355523][ T31] #0: ffff888036b0a420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 836.381906][ T31] #1: ffff88803d2f8088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 836.410284][ T31] #2: ffff888029f131e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 836.440861][ T31] #3: ffffffff8fb6a748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 836.470800][ T31] [ 836.473144][ T31] ============================================= [ 836.473144][ T31] [ 836.658376][ T31] NMI backtrace for cpu 0 [ 836.658393][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 836.658416][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 836.658422][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 836.658431][ T31] Call Trace: [ 836.658436][ T31] [ 836.658442][ T31] dump_stack_lvl+0x100/0x190 [ 836.658469][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 836.658493][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 836.658515][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 836.658539][ T31] sys_info+0x141/0x190 [ 836.658557][ T31] watchdog+0xd25/0x1050 [ 836.658576][ T31] ? __pfx_watchdog+0x10/0x10 [ 836.658590][ T31] ? __kthread_parkme+0x18c/0x230 [ 836.658609][ T31] ? kthread+0x13a/0x450 [ 836.658626][ T31] ? __pfx_watchdog+0x10/0x10 [ 836.658639][ T31] kthread+0x370/0x450 [ 836.658657][ T31] ? __pfx_kthread+0x10/0x10 [ 836.658676][ T31] ret_from_fork+0x754/0xd80 [ 836.658698][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 836.658721][ T31] ? __switch_to+0x7b4/0x1120 [ 836.658737][ T31] ? __pfx_kthread+0x10/0x10 [ 836.658756][ T31] ret_from_fork_asm+0x1a/0x30 [ 836.658780][ T31] [ 837.045926][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 837.052799][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 837.063460][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 837.068629][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 837.078668][ T31] Call Trace: [ 837.081930][ T31] [ 837.084846][ T31] dump_stack_lvl+0x100/0x190 [ 837.089517][ T31] vpanic+0x552/0x970 [ 837.093481][ T31] ? __pfx_vpanic+0x10/0x10 [ 837.097964][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 837.104108][ T31] panic+0xd1/0xe0 [ 837.107813][ T31] ? __pfx_panic+0x10/0x10 [ 837.112213][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 837.118378][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 837.124526][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 837.130667][ T31] ? watchdog.cold+0x198/0x1ca [ 837.135416][ T31] ? watchdog+0xd35/0x1050 [ 837.139813][ T31] watchdog.cold+0x1a9/0x1ca [ 837.144393][ T31] ? __pfx_watchdog+0x10/0x10 [ 837.149049][ T31] ? __kthread_parkme+0x18c/0x230 [ 837.154059][ T31] ? kthread+0x13a/0x450 [ 837.158290][ T31] ? __pfx_watchdog+0x10/0x10 [ 837.162949][ T31] kthread+0x370/0x450 [ 837.167007][ T31] ? __pfx_kthread+0x10/0x10 [ 837.171582][ T31] ret_from_fork+0x754/0xd80 [ 837.176162][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 837.181264][ T31] ? __switch_to+0x7b4/0x1120 [ 837.185928][ T31] ? __pfx_kthread+0x10/0x10 [ 837.190505][ T31] ret_from_fork_asm+0x1a/0x30 [ 837.195263][ T31] [ 837.198417][ T31] Kernel Offset: disabled [ 837.202760][ T31] Rebooting in 86400 seconds..