last executing test programs: 7.604462394s ago: executing program 3 (id=2815): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x96141, 0x0) socket(0x2b, 0x800, 0x76) r0 = socket(0x2, 0x1, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000b00), r0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000140)=""/122, 0x7a) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8600, 0x0) fcntl$auto(0x3, 0x4, 0xa553) write$auto(0xffffffffffffffff, 0x0, 0x80000000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x14, r2, 0x2, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/ip_vs_conn\x00', 0x121040, 0x0) pread64$auto(r3, 0x0, 0x87ff, 0x5) 6.621815971s ago: executing program 3 (id=2822): r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) socket(0x2, 0x801, 0x100) setsockopt$auto_SO_TIMESTAMPING_OLD(r0, 0x3, 0x1f, 0x0, 0x3ff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x200000000000000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) setresuid$auto(0x8, 0x0, 0x4) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/net/bond0/bonding/slaves\x00', 0x0, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) semctl$auto(0x7, 0x2, 0x13, 0x1) r3 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r3, 0x3b94, r2) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x842, 0x0) 5.23823171s ago: executing program 3 (id=2827): madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0xffffffffffffffff, 0x8, 0xffffffff) mmap$auto(0x0, 0xcb5, 0x7, 0x2000000000000eb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) semtimedop$auto(0x0, 0x0, 0x1f4, 0x0) mmap$auto(0x8000000000000001, 0x200000000040000c, 0xdf, 0xfffffffffffffff5, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) madvise$auto(0x4, 0x7, 0x2) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x8}, 0x6}, 0x440001, 0x20000000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x1020009, 0xdf, 0x4000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0x5, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000440)="671d2647dd69b6440843b6e6688a2b5ad9df2669e6f9cd2365", 0xfdef) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x28900, 0x0) socket(0x10, 0x2, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/audio\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_RESET(r3, 0x5000, 0x0) r4 = socketpair$auto(0x3, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x541c, r4) madvise$auto(0x5dcbae72, 0x3, 0xfa) connect$auto(0x3, 0x0, 0x55) set_mempolicy$auto(0x3, &(0x7f0000000040)=0x7, 0x3) mbind$auto(0x2000, 0x800000100000004, 0x100000000, 0x0, 0x1003, 0x2) 4.435437958s ago: executing program 0 (id=2832): migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) r0 = socketcall$auto(0x8000, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/fib/nexthop_bucket_activity\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x80, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001fc, 0x7, 0xd3e, 0x1, 0x9687, 0xf6, 0x95f4da0a, 0x6, 0x3, 0x62, 0x5, 0x5, 0x6d3f, 0x7, 0x6, 0x6]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x3, 0x3, 0x3, 0x3, 0x8000000000000000, 0x2, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1, 0x4, 0x73) r3 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6a) syz_genetlink_get_family_id$auto_psample(&(0x7f0000007a40), 0xffffffffffffffff) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r4 = syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000100), r3) sendmsg$auto_NET_DM_CMD_CONFIG_GET(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="0c010000", @ANYRES16=r4, @ANYBLOB="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"], 0x10c}}, 0x40000) close_range$auto(0x2, 0x8, 0x0) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x10ffffffff}, 0x6, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) 4.171187692s ago: executing program 3 (id=2833): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) waitid$auto_P_ALL(0x0, 0x0, &(0x7f00000003c0)={@siginfo_0_0={0x2, 0x1, 0x1, @_kill={0xffffffffffffffff}}}, 0x0, &(0x7f0000000440)={{0x1000, 0x100000001}, {0xabf, 0x4}, 0x5, 0xffff800000000000, 0x8, 0x80000001, 0xffffffff, 0xf2, 0x3, 0xfffffffffffffffe, 0x8, 0x4, 0x0, 0x4, 0x78d7912e, 0x4}) r2 = clone3$auto(&(0x7f0000000500)={0x7f, 0x9, 0x1, 0x8, 0x3, 0x1e3, 0xe4, 0x0, 0x0, 0x1, 0x1}, 0x9) sendmsg$auto_NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000002980)=ANY=[@ANYBLOB="9df7952bb02fb06f67a787a612f7be464513aca8af56f96f31101397625ab035511af4ecbe28478773e4997c96986ca2f5761cf87c2b571aaf57dda4f786a6d957f36bf7df4e86805990f852462379e7ad2e6eb56a6a3ab504dc6d78cdab049aa430e9cd", @ANYRES16=0x0, @ANYBLOB="04042abd7000fbdbdf256a000000a31825803f03a080ff04e34650107832cbba9ddb0cf75d32c686d08b57e75b19ad5290840549ee8f03007d53e94c32cae5757e56f47058633e3893893498adb922c44f0c44218d1040e060f400027ffaefdf904033b8996e9f0402e2f260c673467fd9de615d67e061e384c60f33252f80f0bec28c8c906705ae116eda44172ca2b60a9c4a80d6ef96a15d2545e5c403849c46c907c1b29d477eb75d106088dcc521f48fb40fb270314fd88626b4884996159e8da875ecdb28fa3fcbf725a048e544940533dc1df77e4ed8722f11f12e95dd7981b5e5168d0231e98dce9edabb4f44ba2c57ef4975ddae4e2dbf5d65f42e5f333f8273de6dfefeada7225148d7681de42d1fce6c0c31010df85b50a1f0f5db936b2adcbf06f71375000d10962d3bedee570368884afb9c9b3b6f653b5dd1a19d66a64865de28bc437ca27e6f7b8e24b0bb8f9a32bf5fd78fd5fe43ba528c6002880686bb3f541e179c5237dca5bad385edcf43f05326b46a2bd2a2c6722e10e70b85447f69d42551fb3de24e5f2aeab5606d224ceefba3143a489023371761101250f74248201f3ddd67b89fc8d5e01f12a57fec0b2ec810f923a3169efcc0de7f78b340de33e97d4b9237ff61761be53edaf6babaedfdad2c04a47b1920f3309a2fe5fcbebd1062c40d24cbaab06dba4bffe0ba57d609fd74500a3e23dea7bfe4ad399ec5558b1260473d56fc5f48426feb01b4610651eba26dbf0f26f898139d3a32f50eb604006180903d3198eb8f70a4b030bf6115a3613caf47e9faa8b2cf604dc9590b5a376ee1ac105fa3e288fbb7c62dceed3cf27b8c63a091c7e7776d058b65e6cf5796337120d8b53ad7805a5578262b4c6cd407faafd8ecb5013111655e6e91b233b99bd0523152a6c2682249e9a2bbf9a71d676447485742710750fac14210ffce1d9a71393675e422f497dfb27f7448e9d785017e7e5da4634588e7660db3da3b0d1ec48fc87bcaf6acb43bd2e790b3b7c94f245109b6948dbf74cac04c24de0487172477aa6c49610e7e1bd3dca5db4c66bd0d27c03c8dfb65cd736cf7cfb464e334874c2365503ca845c23be22755aaec9680a7a09c2d1e77e6eb0f6943e63c4b11f90a7f64b057f0ebdbb0abe26bf981dca6bbc793f9a59c1064d12199143b1859dbf15104000080003affef4aead6dd059186a27be298e24a6bdde2cd974182b606f1654d863d4009a45115c266bbd11064cc5075535b4a97ef8d1bd0353e4ec1ade1ca7224b2e31c621bd136f366a701de3e114adf49f7c2904ee05aad5106fa402c0dbc62b466e4ea0666ea9f1b8c9ef7308e666829a8c5f2bb8c5fae171d5b7dee7a7ddb3719f9a23675fbcbfb48ed873cb319c8e58402bceae08a0146bd26dff957ca7eeee1fa8a499ced9ffef07c5c09e89fbc06afa5aca756741b469be295fd6809a32b326300b03890545a4f67afa09bd1365c0374308b522701f69f101e1ed529141e123bebbb6a03b874f7f62db1f9ea72a16580be9d6fe6efa04d78a118484e337478c7f50a93f23946d46a2d86c5417ecb4e9d2a7ce0e59439110f6cfa7d14007600fe8800000000000000000000000001012400fe800400868014006400fe8000000000000000000000000000bb08002a00", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0400a08084fb9b94fdf8cea841d80e4068c3377ab2e784d6d7afdc0a8001a9ed8f17a3b30000590015010e211cc4ce7d2dc03c447c23166a4ea4af495548c15b8d48b5ea56bd098254796408a217fa8ffe6c79ece1c0becd71ad4f4cdae95f4a7a12b6b238b5bdf97230bdb17bd49cdfb4e2a43c0a4c594f73308beebded66000000"], 0x1914}}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/options/blk_classic\x00', 0x5, 0x0) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/net/teql0/statistics/rx_dropped\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x9) write$auto(0xffffffffffffffff, 0x0, 0x5) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x5, &(0x7f00000000c0)="e15ee553ec2196a28ebf55e5f5d174e63fc2add7f16252c1a777942fabffd11a366aaf5100528ba863f373fd279f7076a79aa49534e6ad7a1a01abf29f95d44610787dbf206db23cdc064373") connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) mmap$auto(0x0, 0x7, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x2, 0x9, 0x3, 0x16, 0x93f, 0x6, 0x3, 0x2, 0x2, 0x0, 0x5, 0xfff, 0xf, 0xb0, 0x1, 0x4, 0x7, 0x9, 0x7, 0x0, 0x0, 0x0, 0x200, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, [0x6, 0x0, 0xfffffffffffffffc, 0x7ff, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x6, 0x3, 0x0, 0x0, 0x0, 0x2, 0x3043, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x10000000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x11, 0x8000000000000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x1000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa503}, 0x800}, 0x7, 0x4008) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4.168871304s ago: executing program 2 (id=2843): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x5, 0x1000000002020009, 0xde, 0x17, 0xffffffffffffffff, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r0 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$auto(r0, 0x0, 0x7) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtd0\x00', 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/workqueue/nf_ft_offload_stats/affinity_scope\x00', 0x8000, 0x0) read$auto(r1, 0x0, 0xffff) r2 = socket(0x23, 0x5, 0x0) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x80) close_range$auto(0x0, r1, 0x4000000000002) r3 = socket(0x2, 0x801, 0x106) socketpair$auto(0x1a, 0x9, 0x8000000000000000, 0x0) r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtd0ro\x00', 0x0, 0x0) ioctl$auto_BLKPG2(r4, 0x1269, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40014}, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r7, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ptrace$auto(0x10, 0x0, 0x4, 0x8000040006) ptrace$auto_PTRACE_GET_RSEQ_CONFIGURATION(0x420f, 0x0, 0x3, 0x5) 3.564055581s ago: executing program 0 (id=2835): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) openat$auto_bridges_fops_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/dri/vkms/encoder-0/bridges\x00', 0x100, 0x0) pread64$auto(r0, 0x0, 0x8, 0xffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x141241, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129102, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd6000fddbdf2502000000080001004a000000080002000b000000"], 0x24}}, 0x4000) sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x800, 0x70bd2d, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x40011) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f40)={'syzkaller1\x00', 0x0}) eventfd$auto(0x2) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_SET_MESH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="010025bd7000fbf5df253e663a643a1f258f0f00000008003900", @ANYBLOB, @ANYBLOB="24f7ff553a6ac523fc96c4000d71e794cd1fda895ca236cc1654cfc940bed3f12ed8f4ea19f0aa4f3c49acc8211305d243ae0cc0722465a75b8c43fd3532386e261dfc6210ffaef3de796d8d6a3572aa294a8b89f4d60e9ee58aee1e7e8e8b5edd31e2", @ANYRES32=r7, @ANYRES16=r5, @ANYRES64, @ANYRES16=r2], 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x140080e4) ioctl$auto_BLKTRACETEARDOWN(r6, 0x1276, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x405, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x1ac}}, 0x801) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000fedbdf2503000000040008000c00018008001000040010"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, r3, 0x8000) inotify_init1$auto(0x3000000000000) 3.542783325s ago: executing program 1 (id=2836): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101482, 0x0) r1 = ioctl$auto_TUNGETVNETHDRSZ2(r0, 0x800454d7, &(0x7f0000000040)=0x1) r2 = prctl$auto_SECCOMP_MODE_STRICT(0x200, 0x1, 0x0, 0x8, 0xca8c) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/irq/14/affinity_hint\x00', 0xb80, 0x0) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r1) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x98, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_COORDINATOR={0x79, 0x1e, 0x0, 0x1, [@generic="ca939dd6b04a831a5b7151ca6f761870506df310a0ecc26b4e053cb7b90252f182b0be5e31af3e3a7efa4811e878154e9edbbfbc51c18275a6c40c5124a5ba44716994034f1322221d6bed7460b967d3910a42845bdce7b20b0a8dfbd5c5381ae16a0510d8097cdcfe81687539939f60f38cb8ad6c"]}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x4044040) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), r1) r6 = getpgid$auto(0xffffffffffffffff) msgctl$auto(0x1, 0x8, &(0x7f0000000380)={{0x1, 0xee01, 0xee00, 0x9, 0x1, 0x3, 0x9}, &(0x7f0000000300)=0x62, &(0x7f0000000340)=0x6, 0x7, 0x7, 0x9, 0x2, 0x1ff, 0x8, 0x5, 0x9, @raw=0xf25, @raw=0xb6e}) ioctl$auto_VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000400)=r0) sendmsg$auto_NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000880)={&(0x7f0000000440)={0x408, r5, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_CQM={0x3e2, 0x5e, 0x0, 0x1, [@nested={0x138, 0x11a, 0x0, 0x1, [@typed={0x8, 0xdc, 0x0, 0x0, @pid=r6}, @generic="37d3a6d266063f4729a18214dc775b139f1b1f7cec84931be383b602580a16f0adfa34c89d40d91347a6b47a33d13460975ce5c8ac2ebecfe39af3e8b5c7a501c2d932fee2da754773a7aafe62974c25d0452471075581ef6e2aa33a0dc75ea12230505c13df09b49a671e842f91fec54e", @generic="ef1834fe97ad13f77f38451dd1108dc8b2dc412c37b5dd2e804d555577", @generic="9ed8654d349791963d49b6b199473c976ca9ba32b91ff5ab17621741f7fe91fc81c6a81a89f98078ee2ca866ee4fc241f4e6e079c63acf7718417e0d4ac894bb766a7d5a495e1ff26eb794d3f921730b9121caa1708cf69ceb8cc7b9a0a169316a90befddc28da368591c750ba371f89818ebe822e9b977ace55f7ef9f58e96d59bd5b30e5ae2ced05f2865ada8f21dc3345d3e547e3f226d943608c9931"]}, @nested={0x82, 0xb5, 0x0, 0x1, [@nested={0x4, 0x10e}, @generic="ab87da50f9c3aac6b74f6a2f9a10a7d762e0c3a6f66ff521b1f34038991a537e18cc9533d03c1e7f2d", @generic="2121d62013af83acd5415c2a962f47a8968b0cced721dd8d614e4a2783053888d982e9c4bfbfe97a4e34c0c0f6d03ba9f84bfe10dac1f31da2197f1fb5c5bfb5f4bae33243814708d79a785ec42982fe32"]}, @nested={0x14f, 0x6e, 0x0, 0x1, [@generic="cf81f483a17abeb0fc1c71247261501821801e04da8274ca0479bc099610db01f1a11eb2018128f6b7d01b96d6781a3767978426f3ffeeaa4b8e3d797f03f484192d4152806a6006d69ac0aa5d193a3cee3b240af56e3277acfb9f7d0a6bf149bfb75fbe1ce9c7a3aeac21f718d9abe0453d5b748a696d35b7b68aee63126f009797e99ae25b81235fc9ea0de0f0ed4376", @nested={0x4, 0xa}, @generic="f224696ec5c7c9fc6d7df89375b5a5cc55f30b81ab0c697581701bf97ac93a904b52b2cf9afb0f8c4429bf6ff6ade3873c1a35ea8f040eec558a", @generic="fadee305125db1fdf1447ab6f889d34f2dde39234be2f79224d926c7b2ad5c5bd696f6b14c5d6cf145ac646eb4fd9bc538f555111dd749fb9f9b5d4fd582be580af3e6566a37cf9e21bf0c36ad34eec3b506861954b860a9001225787d79351fcff89325", @typed={0x5, 0x8f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0xea, 0x0, 0x0, @uid=r7}, @typed={0x8, 0xeb, 0x0, 0x0, @fd=r8}]}, @generic="31c18198352698c4a14e0010445f927b3ef91b82f148dca3036c21027f237f497ea7faae953703d44e12783fd6dc963376eed01d0fcb53f901023ee56645f8c3bbc3d98b5663", @generic="a9c06a4b9739a8b2d8ac9dd642a2b81e010bab74b37509b1ff99ed0ec0f2ce664aa2ee91df4dc95bf9fb39ee658a7b44d55aadc9aba97a78e1e6b7c4d65d51c998532f54fe809a87b40bc929d54196ee781b7aeafef8ab1d6dd385f4bff4101283c316103f0f439b411b883cc783352dcc0c166e7303ccf8", @typed={0x14, 0x8e, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x4}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "1c8d51"}]}, 0x408}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000900)='/dev/snd/controlC0\x00', 0x408000, 0x0) r9 = openat$auto_deferred_devs_fops_(0xffffffffffffff9c, &(0x7f0000000940), 0x20400, 0x0) bpf$auto_BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000980)=@info={r9, 0x3, 0x5}, 0x80) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000a40), r2) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/thread-self/fail-nth\x00', 0x400000, 0x0) connect$auto(r3, &(0x7f0000000ac0)=@hci={0x1f, 0x3}, 0x401) ioctl$auto_VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) r11 = openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/kernel/debug/cec/cec5/status\x00', 0x2ec400, 0x0) ioctl$auto_XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000b40)={r11, 0x0, 0x40, 0x400, 0x1, 0x0, [0x0, 0x8, 0xfa1b, 0x9, 0x6, 0x401]}) adjtimex$auto(&(0x7f0000000bc0)={0x8, 0x0, 0x7ff, 0x5, 0x1000, 0x0, 0x1, 0x0, 0x9, 0x80000000, 0xffffffffffffff1d, {0x7}, 0x7, 0xf, 0x87, 0xfffffffc, 0x0, 0xf, 0x9, 0x2037, 0x100, 0x1, 0x6}) ioctl$auto_FS_IOC_GET_ENCRYPTION_POLICY2(r10, 0x400c6615, &(0x7f0000000cc0)={0xf9, 0x7d, 0xff, 0xc, "7017337b892b2362"}) r12 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000d40), r10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000d80)={'veth1_vlan\x00', 0x0}) r14 = openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000dc0)='/proc/thread-self/mounts\x00', 0x309002, 0x0) r15 = setfsuid$auto(r7) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000e00)={'vxcan1\x00', 0x0}) r17 = openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/kernel/debug/tracing/free_buffer\x00', 0x80, 0x0) sendmsg$auto_MACSEC_CMD_GET_TXSC(r2, &(0x7f0000005a80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000005a40)={&(0x7f0000000e80)={0x4b98, r12, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r13}, @MACSEC_ATTR_RXSC_CONFIG={0x157e, 0x2, 0x0, 0x1, [@typed={0x13, 0x8, 0x0, 0x0, @str='],][]-,-\'.\'(}+\x00'}, @nested={0x24c, 0x22, 0x0, 0x1, [@nested={0x4, 0x118}, @nested={0x4, 0x12c}, @typed={0xa, 0x103, 0x0, 0x0, @str=',-%@+\x00'}, @nested={0x4, 0x14d}, @generic="7b6bcdb5369de5cc823804852f4fd53307b3a036a98bd070f40af74fb31e903618ca5d7da59fff53aa4dc6653b09e52598aa0cefc58a24083f6a7fde34f8b99637695d6628c6f337f408ea94dba85427c54b123e215547328cd9fc8ff19b0dac5980bf422c428cebdaa85b1c751628d98907f1e0acb3381bff1c53d38841c7d332430f9dfabd92c4b71f2b5746459c94a65a2a363b38a84f917523539d1c53421ef586e09394db9e8814a70af3268d8add3f74efb0feb12ceb04a2a7932a2dc3342858a206d78109785e45efb78030dfd74ee88b0c863e5d61866f5e3d40348ca21c1799486fe0adc5259bca4dac7a6887a4ad549d8e268e51", @typed={0x8, 0xfa, 0x0, 0x0, @u32=0x1}, @nested={0x4, 0x85}, @nested={0x4, 0x100}, @generic="e60699e0adede0fb63ad8d0ef7d827cbc996404ec22b7bc008c172ee0ab9ded386ff817d889c90e7fdd2d67b8f8861bd0e0a42d73ffa6ec01f2c4d45a0abd916431f4f7b1c89e48e9b2ad7c4c7f3a8bcff4157f03dd496c838adea2f85851fbfeb1aadf967b1783d5b77ac2cd44593b84a56223828d0f5f496e4665d8260617c20bf23bda8eaa65ebbad76918dc9156df1f69ca89ad5392e6904a59fe1fcfa69669c757fe34924ff12e0b6e525fd7bc1", @generic="8410b98cf963557e86577c8c5c2a0a011499b7d729726ccd55df076dd2145634c100917c3922e2b1c1575226733a51b59077edd7d1c645d68f2ac2678404bac1ad88a2776dfaf2164f3a128d39661ae42dcc6807ac409f96377cd7579f2d8cc35105e34d6d9762a9013ea6468d0c6138aa3b7eaae91e77"]}, @generic="cfdec29aff687607659ff0a8a38804cd8bc440e0bd0c7ca6c4a45c9c1ad3b28cb679c9da4c8c7eee85ebdef555fe0c73197de7f6ef907ee38f9de9f315ab1dcacbdbdf371d6ff0e2bc39aca5e66a7dfc15b17ee82b5fc4fede2bbf0fb1a925ac8e5ee07904db77805b4a9e119f3a22962d33", @generic="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", @typed={0x6a, 0xef, 0x0, 0x0, @binary="343b4ed4be069e202063690082b92d456cb1e91b8b65de918ebdcf4803d5f7e65be4ee80b0fe33671cf06d54526a337f921b3f3734131fff80a7f1af63234f667773c756889baee36e43e0e2442b9a2d97389f5461dfaa33317a8935dcca5e8cd95aa41d1b5c"}, @nested={0x22c, 0x5f, 0x0, 0x1, [@generic="d958407607315eea2f2ed16116cbf258fe5c573746e6e2be7634ac08cc16c565a7f2a5748eb5c085ed009289fa0776b7a46f821bc7633e8f89af0945da9e167e6e30cc751a175a0f88e398a7cbe1289002095816ecbde5f4a9a60d5dc5f1dca274c3bd452532632f1231742d62d97bd7b119701812259ea99f277b42ffbd28b9ac80c32af3f712e7455eaf5096bdf9cc5f17c00761d1b98c78344508b31c2e4ec7eb2a600405291f46ecf47bdd8b2800d999be7b4ca128a6f883b16acefc3b30f6f7e0242069064d5c4173d8eb7c92dac12de63fa92b6c9660fd7b6eed2d166d59a56536a8", @generic="d275d727c977c3ed0e01fcdcd7c277d5ee1d7f9337dece77935dbf39f73f225b3e26dcfacc81e066e7f3ecd64f6d321feacad319a0b6c0eb544216e90775fd28fce0ef9f2fa188f034d3586e934c95", @nested={0x4, 0xa8}, @nested={0x4, 0x54}, @generic="6ba13c04bfa2c2ecc7246cf4f1d6ba9cfc3b588664ada0e13c885c34b37b1c4780950df8a89038611f46fa4d3a8cbb9c6925360bea4054eb2ddf915e2d30bd191b0dc4acfa646676c2fa2efb395faaec7ec7e142524dce2a0fe0a2e611f3eb08028b4b12b325e7c2de9ddd54f9429617903c98e6493d144d7ae428468e6b13572600620c2c09311d71e789d13b6a43cb40fec21c16c655c44c63b0aa3c01d573f7c6869a113f8309ffbb43d8b3924e52ed928a99a70b7baae503db78255f7f76c6c5db2a659475c571a66e160cb9147a06f26d7d401d95433a304b8d670c49870225852c", @nested={0x4, 0xd6}, @typed={0x4, 0x127}]}, @nested={0x10, 0xe9, 0x0, 0x1, [@typed={0x8, 0x14c, 0x0, 0x0, @fd=r11}, @nested={0x4, 0x9f}]}]}, @MACSEC_ATTR_OFFLOAD={0x137e, 0x9, 0x0, 0x1, [@nested={0x18, 0xa4, 0x0, 0x1, [@nested={0x4, 0x88}, @nested={0x4, 0x26}, @typed={0x8, 0x98, 0x0, 0x0, @u32=0x101}, @nested={0x4, 0x122}]}, @typed={0xd4, 0x11d, 0x0, 0x0, @binary="d0f4af88a84fbe85f2dd3cc9bce3e66f4717941a50f35a1f134f90ccc27e46ca08c95b8c485f94d5a33e8a095417cdd98ac9c09d58ca8cc3318570fd7b98cf00b36be81168df2cc24d03fe5b4fd2d8b356557756ebe54530b3f0b7394a91eba9e67a4161459c99e9d77d92bfa81e78a3d466efed39cec42e3729b72abdd7fd9bbb03eaccbbdd4c60f1708f7ddd831f2a4920b51c52c6fa38b41c4620ff8c589a7624d7d6fb30169f82939cc4d7c9f0f9d39d172dde3bf63c911e04c32d73f6fbe94df6675b877057ed193fa0f4d7b03e"}, @nested={0x14, 0xba, 0x0, 0x1, [@typed={0x8, 0xd9, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0xb7, 0x0, 0x0, @u32}]}, @nested={0x8, 0xb9, 0x0, 0x1, [@nested={0x4, 0xf1}]}, @typed={0x8, 0xdf, 0x0, 0x0, @fd=r14}, @nested={0x65, 0x61, 0x0, 0x1, [@typed={0x8, 0x72, 0x0, 0x0, @uid=r15}, @generic="ecb2bb3f2361b35f3e9bcaf670535a7979485db574d3e003b14129736e968a8fea0ef07c57558457dc9c55935955a97eaabfe67af87d2c8eae798dec8f159811aef02aca4479713334c5cdcc0f6431fd435aa03db3", @nested={0x4, 0x103}]}, @nested={0x1020, 0x26, 0x0, 0x1, [@nested={0x4, 0x35}, @nested={0x4, 0x73}, @typed={0xc, 0x7c, 0x0, 0x0, @u64=0x80000001}, @generic="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", @typed={0x8, 0xa7, 0x0, 0x0, @fd=r9}]}, @nested={0x1a7, 0x11, 0x0, 0x1, [@nested={0x4, 0x123}, @generic="b7c78f726c7bfe5da4da3bc5a96fca4966c2c56c9f8d05d0fa25110c3ff24d7d23d0b1836d38b2c4434fc8f4e080a416837dd30f8e332c1937fb16588643af9efaf2464d227ea15880678bab298f476c07918f05c69568fa96e7c5bdc1e5a2b0f2250b2a0f734297e8da0c2301fe923c78c7b1b23ba2ea65780aa3478824", @nested={0x4, 0x62}, @generic="f156f4ee3e2e993af50a317e8744afd145253b13ffa5190a04d0216e5f0f870085f089e02beb0a09c22c1cad57219e9c765bb2089ac45b0edf9d6fc7762e97d08fce4d9ce556896ba67a3b0e246370423cee720511efff4a27a7027ea0019c5f4f620bda6ec5a3cf30805093a73c3a65757fc1654ffb1dcee979cfda27d33bbbfd5f599f3787ccbdf63eae345da0426fa267b247173df9b99966b44199222e", @typed={0xc, 0x13, 0x0, 0x0, @str='\\[&(,()\x00'}, @generic="c424b78222e73acf3d9ee5eea9077c57e8faa6890533c9ce1cf0ff5781913e5eef41333d3b927c4ef054e8e532dd37c5e721642729ca5d836980b4395cf0b32d79d1b5ba36374b0de57482fdef22c136d260a8840ba4b0a5cc075092f38a", @nested={0x4, 0x117}, @typed={0x8, 0x120, 0x0, 0x0, @uid=r7}, @nested={0x4, 0x8d}, @nested={0x4, 0x130}]}, @generic="e1a09730393c192b57b8ff116e3e20e2c64fa72c064a16af9d93018b7197de8a25e6ea6b0e54575ce89df20d7275", @typed={0xc, 0x9a, 0x0, 0x0, @u64=0x4}]}, @MACSEC_ATTR_RXSC_CONFIG={0xbf, 0x2, 0x0, 0x1, [@typed={0x8, 0x6b, 0x0, 0x0, @ipv4=@loopback}, @generic="9a2c8b5bd01684c5aa7ef0915b4b3e859adf28238bb9a7c6c3018122c4e45c22c891bde890a99a8605a7b315a70a5cb9f5cc9b1172bc1b9913cf0805fe7611b48482053073fcf206d765b9426c6af10159603d8151a133087aa680aa1231ced1521d46e160da54517c148df5e9569ecdf68f4ac96595477cf9759e1e9977af41da339cea718d25a520dfd3478825609ec33700477d50d1e1d875be440bb9ac511113b5e08b55f4f65b60083cf5becca6f61233"]}, @MACSEC_ATTR_RXSC_CONFIG={0x49, 0x2, 0x0, 0x1, [@generic="47eca46752a79c28b3583ef09a4e690cedcf11d449b4a2374d390a5c3d7a31a2e634c687dbd6ca86f4b82dc15a0f5a1f8237dfa398c182d9d740d49fd152e18bd3d42e6c42"]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r16}, @MACSEC_ATTR_RXSC_CONFIG={0x2168, 0x2, 0x0, 0x1, [@generic="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", @nested={0xde, 0xb4, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @pid=r6}, @typed={0xc, 0xee, 0x0, 0x0, @u64}, @typed={0x4, 0xeb, 0x0, 0x0, @binary}, @typed={0x8, 0xd8, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x56, 0x0, 0x0, @fd=r17}, @generic="b806c2e00b09b82614b4d03fe66edaf37a1007663350c5bc9c867bb9bb3382f1fa0811e7f5fdf1fad76db11a945b695c94f4289ba4c5a36ecb227ee81b02df8be39c4331b1783f4ba8ff0d878647a4e2bc5302c0c93f95afcd945b42e2b49b70ea25ec0af5c6a6c2d91fbd5214262d230d929702ea7247665d134e3cc3cf07eef1aee7f89deba3df05d6cf2ecec0f9fdda15649d38e2f29dd79e4391b6050d9d5c741f1cf6a76be82eee0fc1656079bad83d"]}, @typed={0x7e, 0xf9, 0x0, 0x0, @binary="ff788fb98b2514751236cbbac5da60a42664d37f528834f420d7e2d10b5531fa52cdd811d6520e15148b7a11d0b4de6d40db473a26588ee9982654d480d83d7c1c53edd1f67f4a670578b0b9baf139a298706c7250d3192f5c84c3accf6e4fcfea67e04feb8f17989826949d675b21d1f5200881bb42a4ddc8de"}, @typed={0x4, 0x136}, @generic="83daf095e6ead1d3b9a656982ed5708d1b422d12efaf6c20cf838a07e108a33153ec573ec600616bafa13c8700c2384064799bb6b223a14a04056fff07509c15bc3cd9c124d8378e1f0997bdaa795c1efb1c12a96339922ea91efab0ab41e1291e452b0b794b9edb54d67df8d17c262b287092c4a177c918ae82fd4e83355424f04be7d30d763c8b2e6a49bf8dc1a809588b926c164bb1c7b6a9c1735d4a3faacc9e560ccff29093bcaed62114334f5a02d655593aa51cf0b968dd1ccf4f5fcdf03bdf4bbe080a4c20205b19db1717563997c7257bcc58c79149fdaa4c5742f82eeb2f74be9a872cb3db281b7a54541ab9832e712e8f4a86f4daf2ac759e86a7ff1057f62d2b30874f45be171d6373c09b46bbfc9e9f11e68789e53d0609c8ea9d23a86063b46b08a74a3c453a63f99d3a65d34c3cb8fb38d961bcd1e36a1ecd348c15407c55916c6c83ed8b01e7db80b1006d8a396323e08e2d901d044f5c1871fddddce9f8e95fc30460dd6446b2cb4e0a5021d2200e78fa1228921ffea033bec0737c37e8dd262cfdbec01d8a2445d3d84384bfb1554162fd98178086bf831ebc29cb4f09e88965fa3a77786be89b1febbb4cb33bdabe82cc6f3b828eed28978b16d775f0e1424970c659f10dca5f467ff56b70d27e1d82ebda21f33bbb3ebb0d171aadafc1799f731a09007d5194c506fc05c6ccaf9cb72eedf8cf58c295f601bd55c9bd78e2ad48ae7284b21aa2faede24d7578933500fffe780956050c3008b80ccfb8cf6d6a4b35b5ab56d9b3527e7293f07b4c042f3be7a4a05c35efbd43e78f8ee095c317cb011553716ba6e1a3fe1dedbeb963e79d5f484c097c5e5ba29554750b37dc86e4c5bff374dc775a9f10cc8b5519b8e24d0c41e5077806b8a6491622348bbd1a37992954573e04ad5a77259fd832e22c9cfcc611baa0e081ac9a675cf640754af9ba4390dca5ba9f31668c05e23792a760aae6b8599406e14af7349852162e95ffc541b8a8b91699294fb74e3f0990c547bf498f4632bbaa2d5303e1ad5eac87cbab68e29c4514ca4d7a2e655f76782260e7785340281d331c13cbf757606c4b8e50022c1fb2c56b4b5af7fbe6ae324b8b657dc2e37f0adeda39a15680c4b3555b19da9021ad3fa3f72d33d8278061b767f6820ced4f079e82f2312e78a700e0585661f9f576ef72ecb4151fd967899d097776b3da196ab738992c491e4608a9a5b57cabbfc917a5169e34f487f1bf666b22ccc8bc5f7a9b03007381f75ec0031f9247a5dfa5b36c8cf285ce1d6d651ed7087d9373257391c29af37b31459f651a27feaeec3a52e1ef36d4cb80d6cea2db17bf93edf517b87c0d4f85ef41fb96083e0f2d6b25e311326cca55a6cb1141be91e43f58dc78d60da686a02b65358d8308ddd4b38b0593edb212b537eec0a920e32beea21f63d0f319ca374ee8db725dd760e43bdc4709ee69c707d215e239bbc9d290194749508222d0e8dc29f8a311e4578a8c43c68ad445a973d49d469e307c0d164c5f684dba12dae39aa020d5d271f7005d82140e9a87b8fede145f2fcd5026babb8b6df030427dd398bc14d14b7cfc28ce7d13589a860fa4dc534607a81ebfd3b1ccfa1f5d226decc3f45b0a9c20ce22a26fb2f90e97f1efcefb8efceac433a3dace63f6531b816663e0853020ec5ceeff1a061690e088b234952c3dc56273082a4b96f47643acdf025d5db3679a0a34706450b6c84999a59ea82348a34a2316a671dd895a488effe164e549dae7e63b7d5c89d24d33465fd30e91d18a4a199775940db12d550f09f6ac39b964637308945cbf9437801eac6fe0903c1d4390ba7842bd92002302191d01aae2fefc817b4a30e1739f3a710ff16cee3f625b749dbc47eef4ddd72657d28025114a985faa5b602ab6c7e8773a5912c380bc4bc537287bb53122667f105e4a5fed7fcf7c456c80f7b94a273d6481ca07a037c83fe0a8d85bee913bdc8f6890a9a22183aee080f16ff24c91fb956d24acc3011f2cbb71a90d34eb3fc56996cfdbe6524cbd291ac9404faa693b5acded7e8fa8979f360769d13fb0bc2aa6f93d3fd2f2420d33d242f0ac92aa3833d0c1c4c8d53363c694ea0054b73ccb90045fab43daeaef03bc59de697be017ac6d4683bd52587b5a61f0ee4c6c41ae77a47374abf988f905d2c775fce802208fe0c44e14d023f661feab153ca186050eed6a77987a2c71fbdf5b53f0feca78a9e52f426974e23bda58c206ee1a26da9d7527fa72473f2f2728c2dbdca6ef8d5e45922945f4758601cabe301dcf9120c522358521571d2f01137084a49be96d512641841ab75160968db6d17adc1a10198d796d19848e53cb236f6230333bafb02daf2fd91e2e9afa40e93e2a04277495368dfa7e34f81f8a3e86b8a8bca43da37ef6fea837790779b488b97091283cd317e2bfca0ba5c06db31bc26cc6c06106f93f45e8f0b115bfffcc624ece0097fb282ccc61e9a456053646e40eeba82b998b925b96070e8dcad11f4f3185fd467b8cf277a3a9ae467a7468077e2cf4f4e30cd0b03a0d6c91245068bbec4094e123ec3d78b6afdb5766c54f62dd863a2ca4b611b31ae29e43176cbde5ae398dca590dca791d505b1eb936e19454216086aeab06f984bc60d7a4bc35730931b5f9830b7f4c8da8687e1b5e8953679dee3d90a5b372a365e7d7a743d10284c79d038b52d023821639cdaac66e2a71b44d2901867bb9d074f92b1013126340085a92813052c079717ed8f65a6a9f05137b61cea8fa0eb6cafa304805f4b8db0e3bb49beedee37d78b3be73faac410498ce8cbe9d1e82f6924b8568460f0953a7a24fc997a3e1666b9f9296b16fbeafdfc9950520d4f0ce80165fc8af437bd04db112c2686779aee3c537a893126ef99ac15714680b81203a49e54ee446a8b83b569aed214ca2a37c1ba0636641144d9778c8b2e5b1064ee913a1eb51c6a3191a51cb300361558e04d2a1ff704b27608e5039379f9087cb75ccb57faa252e0196d0d72a2120b2f20db666a96c32325c0b5245d94859941db19fc97cc673c6f5eea3fc2bfb1c4ceccfd6e3b70397c1014f3f47e8bb943997655213256dcd5c44978fea9e2880ed000fa42054d2eeee0a3095b9d8135a97b5eff880a3b58b886f97344184032d1b65d3f9fb43b8899853c47c8ddadd72f89bcfd84a4b29cb261d1ea8e819370b380784e616a8d8a93f3d8e56537d78c67c00950699d27fef99c2d7545ecc931a5324c69fa19e4e68ec38758a5590b86610b027ea3eec304d820021d7946ff628d58dc5fab79869a6b26e789c5d942d6634935592db9f2fc88fe34d2e74f0dfb112f0f23f19d83235d48fc146ea56c35ef75c9c929c731ebf7cad5ed5ccc62a17343179bb472ae7b1a35af58ab4e4fbd15ac05e9edab712271e73f0ed753217c00f43f808058fcb28514c301a47b23cae362f8b13ed5074e845fa8e199954b334b18af2830b4a0701227ea41d3e96a52105aa61e749dd8a45f720c02919c45760e8401e6d13de2d08f3255ed4c4e63875d0804daba13f15ba0e5ff1c707dfab00f50fd49c8310b9533cdb6b48aa6f94f0dbac00b0f62abb3ce9489820d784cf393fed7f6efcf43d1ff5ad3e392206c6a1d11d1ff6e7a6920743fb732a26446e9ce48864e55d389871511bcfae95328d791e68d84a63fea873f95a11c866f4370fcca032e7288c0eed786face33494c5cf7f92065208c81cae052141d30853bd3c0dda21d43a30858db8176eb6e935d1ab376e7a5e0a2b708f69deb19078d5309e75d6dcfe0140f82774b5ecb9a05ae31d0ff9579af457556f426b9dfb4b4b14913c3b012d135d9b9c49d44bc75138e53bff2657a802b66f3502b84f7c485fb658141260c891b50fbca103720602611deb7d9ae0e8ead952f3fde2c95bffbf038462a0563062a4d6d7bc5e9f38b0c373e5985a62e8c1f0de1698d46b55e7d3ef82f1eb502104c818a9461add51f8ebdf67ef2ee5ff11b180c58e8ce17fbd2634e107a5171a3aa0302a5b0877010503b76737b361ae318704bf8f70c4b7c7cd3dc680a34eeff33ba7e8b088b06545dfbab41062a6ccbaa87ca8b04fc40bafc7af19f44632a7f0563108e67aac9664c1b9cdec34c460c16a7e078ddaee0225e05da639fc6932f773d223fee27b0e25a53c6531ca69b79e3009880ac2e460aa7f0cf50d01397072278c2afe03b288510ea90beed9cd9ea0321d1749a7aa188d7b4f196c79e29ed2ea68138ff84304604431101872b03a7fa3dc2d3092f0e7381a222d2f75a3e578b602a33f2dfd100e3c6e3ab3edb34480d78d1cd24a78388d63f725708bdd6e32c8f100953df2a9eb8df5f52c53d299fe8e0e10ca0743f615504cc7a80e9bf8de3eb974ebed61a566f69c05625450b859505b3f8a4cd07fe0b004ac770b4fe4bfebdb409afab86e265cbd197280534519ae77913048a988e91419faa18fd0a2c1f8c77155ef88e61175698136133d1a4e835d74035aa5d3dbd25d9d56501a21995adccf235c898435b3597c0f1246cc30a0e7cc7d0faae1035db5090564b29244ac1e81f8b6a618f56f4e8b88145341388ed5924c40d7bbdb0f4bb6e510ae08cf25bfd52fb85d944d5f278788e7d8ecc94379d1f24189bbd991e2a6e7f571b17b78ca51e21c4c90411c373127860f973dce25440fdd28485c22ceaa76b51ac7a11c73d7f11d11c971739ef64cc734e024a2fef4b9e4b93a08a2e509078d1b634e0d4bb0143c0d4658333bc96288f786d23031b756b54860656a7afea5b985b35d3027179d2985804254969d07d9f411d49d0173150650a04216deaf04c2a2570e3258beab0e9aa274c87b0828878fe15441bd56fe366e460d465770264e2d78ba7faeb97c7b5baad7923a9551b7ff4ba99d196b40e71450517279da1f5e023908d88998542e74efc0be11c56bab306d3ac055ced1bcc155e0a48942d2babc44986996bb0df8d63c7c95dd37ebaa706f724d2d4db01ebb8374ab066083f219cf609c6677b46d4faf6115f6147150ad0fe28501d514c67cf60f4d11453260f682bec9f82448c1657a57052dbc844353bbf9be33bd7e9b369f44c08d0b702e6506ca8cb68eedfce81a7e3ab2fe7cb7c79b072b3b7b43042446607a606a3f056d6f3cd5d471e453c5569dd3a42eec59fd068aeb4df961156113e33a790728e54726dac69e97b007af3c2d370b0a02d75ca0e61c4322c6ef05aff2c0902317c4806d1f0db5a9435fdcd53ca94bb9c5770687c815be38054cfb3b5bdc3eb1a0a19bbe3684deb466f9553bac0f8beb5a72a31ce7806ab9e1fdb75e03dab8b3543b4ef2650232aabd59a2d3cb4925c0560fd40bc7f6de9a16b2ccb10fda32338805cc09c94f1d50aa39a2f036ce271573c9bf4a704768e4875e4f530c161ffb7824e2f1bc0007f98cbadf71665ed99a5986a12f10935c4464207c4189a2bc13cc324b22e0b8946375dc3083ff6b4715f2481b2f49445ea8cf77b8c2ab61e199f3ed694314d27c1d978f95666298ab87f14f9caa3e6119e44f0d9c22786c7e1ae306209f22fdc23e1773ded2878230c6cf5dc56bc9d8ba577c6942b8de124113981e3aabae31cd575ed4355de22d8af2ac0e4b539e51c50b5e8bc0423fb7a7f0734b2a64b8f02c5c618bcc3d90f179458a95b26f5c38f7f3bab69998528bbe90aefccab24f3f3f15c87b9f2b267fe3e13ae41ca333235831e12c9fb01922b94c0e84888f8a76af5b16715ca344496f84ea875175a7e3ba5d38"]}]}, 0x4b98}, 0x1, 0x0, 0x0, 0x4048000}, 0x20000000) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000005ac0), r1) 3.515227324s ago: executing program 2 (id=2837): r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) socket(0x2, 0x801, 0x100) setsockopt$auto_SO_TIMESTAMPING_OLD(r0, 0x3, 0x1f, 0x0, 0x3ff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x200000000000000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) setresuid$auto(0x8, 0x0, 0x4) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/net/bond0/bonding/slaves\x00', 0x0, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) semctl$auto(0x7, 0x2, 0x13, 0x1) r3 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r3, 0x3b94, r2) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x842, 0x0) 3.401697287s ago: executing program 1 (id=2838): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = getpgid(0x0) rt_tgsigqueueinfo$auto(0xffffffffffffffff, r0, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={r0, 0x0, 0x401, 0x5, 0x3}}}) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) mmap$auto(0x0, 0x1, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff036}}) execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', &(0x7f0000000000)=&(0x7f0000000200)=' ') 2.636895733s ago: executing program 3 (id=2839): r0 = socket(0x27, 0x4, 0xb56a) setsockopt$auto(r0, 0x11, 0x64, 0x0, 0x7) mmap$auto(0x3, 0x2020009, 0x80000000000000a, 0xeb1, r0, 0x8410) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x28adc1, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) clone$auto(0x21, 0xe7, 0x0, 0x0, 0x200000000000002) (async) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x7, 0x8) (async) r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r1, &(0x7f00000001c0), 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) (async) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) (async) socket(0xa, 0x3, 0x3b) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) (async) fcntl$auto(0xffffffffffffffff, 0x26, 0x8) (async) close_range$auto(0x2, 0x8, 0x0) (async) r2 = openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/oom_score_adj\x00', 0x20202, 0x0) read$auto_proc_oom_score_adj_operations_base(r2, 0x0, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0) (async) mmap$auto(0x0, 0x3, 0xde, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x3, 0x7) (async) fanotify_init$auto(0x5, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x25, 0x5, 0x2) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/v4l-subdev3\x00', 0x16ba00, 0x0) ioctl$auto(r3, 0x80885659, r3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) (async) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x20040894) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) 2.608761484s ago: executing program 1 (id=2840): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x9, 0x2, 0xb, 0x0) r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000006380), 0x101101, 0x0) writev$auto(r0, &(0x7f0000007240)={0x0, 0x9dc}, 0x1ff) ppoll$auto(&(0x7f0000000200)={r0, 0x4, 0xb}, 0x2, &(0x7f0000000240)={0xff, 0x5}, &(0x7f00000002c0)={0x100}, 0x8) sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) r1 = open(0x0, 0x14927f, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x40086602, 0x0) lstat$auto(0x0, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x106) io_uring_setup$auto(0x6, 0x0) r3 = epoll_create$auto(0x6cd) epoll_ctl$auto(r3, 0x1, r2, 0x0) r4 = socket(0x9, 0x80000, 0x6832142c) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) r6 = epoll_create1$auto(0x9) writev$auto(r6, &(0x7f00000001c0)={&(0x7f0000000100)="fb4d893968ad520ee6f8292f8d35c9b6adbd3bfb3867cad98b3ebad7a5", 0x504}, 0x0) setsockopt$auto(r4, 0x85, 0x80008009, 0x0, 0x2) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r7, 0x4008ae89, &(0x7f0000000180)={0x2}) mq_timedsend$auto(r7, &(0x7f0000000040)='\xd3\xe7#\x00', 0x8d0d, 0xd0, &(0x7f00000000c0)={0x600000000, 0x4000}) 2.377782785s ago: executing program 2 (id=2842): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB='J'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x200, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x44000809}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='H'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.162083521s ago: executing program 2 (id=2844): socket(0x2, 0x3, 0xa) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) write$auto(r2, &(0x7f0000000440)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x8}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) (async) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x9) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x64, r4, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x80}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) (async) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) (async) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="11000000", 0x4) socket(0xf, 0x3, 0x2) preadv$auto(r0, &(0x7f0000000140)={&(0x7f00000000c0)="293579062140d23bb49d2abd081f7392047a10cccc095fd021ce22b40555aecc873a7641f5ccae4aec0ed080cf7e9e8faa9e14ec7829e6f428404b3b3bad76d9f1200238c0ec9d2224704e46b7", 0x2}, 0x2, 0x1000, 0x9) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20401, 0x0) (async) io_uring_setup$auto(0x8000f92c, 0x0) (async) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) (async) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) (async) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) (async) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r5, r6, 0x0, 0x1000200) 1.777352044s ago: executing program 0 (id=2845): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x96141, 0x0) socket(0x2b, 0x800, 0x76) r0 = socket(0x2, 0x1, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000b00), r0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000140)=""/122, 0x7a) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8600, 0x0) fcntl$auto(0x3, 0x4, 0xa553) write$auto(0xffffffffffffffff, 0x0, 0x80000000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x14, r2, 0x2, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/ip_vs_conn\x00', 0x121040, 0x0) pread64$auto(r3, 0x0, 0x87ff, 0x5) 1.634297701s ago: executing program 1 (id=2846): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x96141, 0x0) socket(0x2b, 0x800, 0x76) r0 = socket(0x2, 0x1, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000b00), r0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000140)=""/122, 0x7a) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8600, 0x0) fcntl$auto(0x3, 0x4, 0xa553) write$auto(0xffffffffffffffff, 0x0, 0x80000000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0xe0, r2, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@THERMAL_GENL_ATTR_TZ_ID={0x8, 0x2, 0x7}, @THERMAL_GENL_ATTR_TZ_GOV_NAME={0xa7, 0xd, '/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc'}, @THERMAL_GENL_ATTR_CDEV_NAME={0x14, 0x12, 'virt_wifi0\x00'}, @THERMAL_GENL_ATTR_TZ_NAME={0x7, 0xa, '\xa5$)'}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/ip_vs_conn\x00', 0x121040, 0x0) pread64$auto(r3, 0x0, 0x87ff, 0x5) 1.55578608s ago: executing program 3 (id=2847): rseq$auto(&(0x7f0000000140)={0xe, 0x5, 0x2c2, 0x23, 0x8007d, 0xfffffffe, "26c788a7a5024a9859acd35804093ad080405e5667c1ebdf247e1520d2c4f723c82081928a325dde6dcc8b245461261f1e847bfe4289c4a3d8893fe91794c1a983b7dec4715155f202bcb0489c4e8c9a1391f75a1e4c289bd6c51ca54f1d"}, 0x8000, 0x2000, 0x6) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000400)={{0xc, 0x23, 0xa6, 0x83}, "66ac010005000000000068d190eb0d4a4cada7272464294b9183349eef4c1f028fdcc8ecc66fdd02316f064ebd893007abb4c0bbc3b822f66eaf240963110d61771552c03de65800", 0x2}) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) ioctl$auto_UI_SET_MSCBIT(r0, 0x40045568, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event\x00', 0x220442, 0x0) mmap$auto(0x6, 0x202000b, 0x9, 0x17, r1, 0x8000) close_range$auto(0x2, 0x8, 0x0) mkdir$auto(0x0, 0x8001) lseek$auto(r1, 0x200006, 0x6) r2 = io_uring_setup$auto(0xfffff7fc, 0x0) mmap$auto(0x0, 0xc, 0x3, 0xeb1, r1, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000240)={0x123062000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) mremap$auto(0x110c230000, 0x0, 0x101, 0x3, 0xfffffffffffffffc) fsconfig$auto(r2, 0x0, &(0x7f0000000040)='/dev/vcsu\x00', &(0x7f00000002c0)="e7c7f117fb2bf4b07d323e43f002a23799d8fee015755f2be3484ca290372f0333429aed8aff5f9f0ae4d3bab26daedbefdb8d8c0fac81034d425e949c10934f99b3890ed7cafa292b7221c561462b6c0f8d08236593fd8ca1f73cafba368d1fb2769532394c10794b3b14578cad63a61180954b707cf994635544cb3c2caf782fcfac00157d8508826b91ef70059c1e2b1bfaf63aeb94fc1a244b4d45e1834a3a578816d2abe584400f8992f0609794b85967f30ac3bc92dd435138754bd1ef9bf766458e6cffc29d5ab471eb39ea2c803eaaccc662f50daee085b256c047ed7dfbbc30eafb090b769f26", 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv6/conf/netdevsim2/hop_limit\x00', 0x5014c0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004814}, 0x8800) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0xd02, 0x0) sendfile$auto(r4, r5, 0x0, 0x800048) close_range$auto(r5, 0x8, 0x0) mmap$auto(0x1000000000, 0x0, 0xf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/mice\x00', 0x181383, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x544282, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.53701892s ago: executing program 0 (id=2848): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x5, 0x1000000002020009, 0xde, 0x17, 0xffffffffffffffff, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r0 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$auto(r0, 0x0, 0x7) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtd0\x00', 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/workqueue/nf_ft_offload_stats/affinity_scope\x00', 0x8000, 0x0) read$auto(r1, 0x0, 0xffff) r2 = socket(0x23, 0x5, 0x0) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x80) close_range$auto(0x0, r1, 0x4000000000002) r3 = socket(0x2, 0x801, 0x106) socketpair$auto(0x1a, 0x9, 0x8000000000000000, 0x0) r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtd0ro\x00', 0x0, 0x0) ioctl$auto_BLKPG2(r4, 0x1269, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40014}, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r7, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ptrace$auto(0x10, 0x0, 0x4, 0x8000040006) ptrace$auto_PTRACE_GET_RSEQ_CONFIGURATION(0x420f, 0x0, 0x3, 0x5) 1.310021439s ago: executing program 0 (id=2849): migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) r0 = socketcall$auto(0x8000, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/fib/nexthop_bucket_activity\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x80, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001fc, 0x7, 0xd3e, 0x1, 0x9687, 0xf6, 0x95f4da0a, 0x6, 0x3, 0x62, 0x5, 0x5, 0x6d3f, 0x7, 0x6, 0x6]}, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x3, 0x3, 0x3, 0x3, 0x8000000000000000, 0x2, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1, 0x4, 0x73) r3 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6a) syz_genetlink_get_family_id$auto_psample(&(0x7f0000007a40), 0xffffffffffffffff) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r4 = syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000100), r3) sendmsg$auto_NET_DM_CMD_CONFIG_GET(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="0c010000", @ANYRES16=r4, @ANYBLOB="00022cbd7000fbdbdf25ecfffffff7000000ed90302a62da811d7237d689bbb3ece2e7c264988d94ae9fc743d9901d3355c94090694a730dbabf8697c1689771755289783ac75fdf1d6b62aeed275666bf7b37dba9997533ca18e912f37adef651d374a57522f9393c3ac38aa169055496d10b4fa071292666ddba453707dfd7f9b2842edda87c49ab95ed95c856d0e576de71fd2a915ff87dbadf76b8687fd18e77cc5e1e4dbbc6ed558df7848145f94957fc0ba0f9e5a8b489bf51947e091b1b56e6d9d0eff61504da2bf815683f60069fcc0140ca35c8f6509eb988eca4fdefb94df10c29cda28f23964e324a902e8ae9926206cdd322c8145ea0cba4958ab072c8274200"], 0x10c}}, 0x40000) close_range$auto(0x2, 0x8, 0x0) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x10ffffffff}, 0x6, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, r2) 1.192227809s ago: executing program 2 (id=2850): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000001c0), r3) sendmsg$auto_TIPC_NL_PUBL_GET(r3, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003900)={&(0x7f0000000300)={0x2c, r4, 0xf01, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@mcast2}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x840) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(r0, 0x8, 0x0) (async) brk$auto(0xffffffffffffff66) (async) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r5, 0x0, 0x800003, 0x270) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) io_uring_setup$auto(0x9, &(0x7f0000000080)={0x7fffffff, 0xd, 0xc000, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0x1000000f, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x10000}, {0x5, 0x1, 0x21bb800, 0x5, 0x6f, 0x2, 0x1, 0x8, 0x100002000}}) (async) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000100), 0x202, 0x0) (async) personality$auto(0xfffff032) (async) ppoll$auto(&(0x7f0000001ac0)={0xffffffffffffffff, 0x9, 0x7}, 0x8, &(0x7f0000001b00)={0xf2, 0x9}, &(0x7f00000002c0)={0x10000}, 0x8) (async) mprotect$auto(0x110c230000, 0xa588, 0x6) (async) mremap$auto(0x110c231000, 0x0, 0x101, 0x3, 0x0) (async) move_pages$auto(0x0, 0x9, 0x0, 0x0, 0x0, 0x2) (async) msgctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000001600)={{0x7b0, 0x0, 0x0, 0xd, 0x3ff, 0x7, 0xb}, &(0x7f0000000400)=0x9, &(0x7f0000000440)=0x10, 0x1, 0xd80, 0x9, 0x0, 0x8000000000000000, 0x6, 0xa, 0xfff9, @raw=0x80, @raw=0x9}) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004c18}, 0x8894) 639.289602ms ago: executing program 1 (id=2851): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/system/cpu/vulnerabilities/itlb_multihit\x00', 0x103200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/17, 0x11) r1 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) mount_setattr$auto(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000340)={0x1000000008, 0x6d5c, 0x0, @raw=0x80}, 0x3) read$auto_proc_page_owner_operations_page_owner(r1, &(0x7f0000000080)=""/28, 0x1c) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r0, 0xffffffffffffffff, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x420a80, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0xa, 0x0, [{0x587, 0x3ff, 0x2}]}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000380)='/dev/tty17\x00', 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdc, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0xc040}, 0x40000) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), r3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8810) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/loop15/queue/atomic_write_boundary_bytes\x00', 0x141900, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) 354.936393ms ago: executing program 0 (id=2852): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) unshare$auto(0x40000080) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x10400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x7fffffff, 0x0, 0x9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) memfd_secret$auto(0x6) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) bpf$auto(0x1, &(0x7f0000000140)=@info={r1, 0x80000000, 0x2}, 0x870b) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) ioctl$auto_EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)=0x2) close_range$auto(0x2, 0x8, 0x0) 283.965002ms ago: executing program 1 (id=2853): unshare$auto(0x40000082) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x4) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x4000000000001f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg0\x00'}) sendmsg$auto_WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x810) write$auto(0x3, 0x0, 0x7fffffff) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) memfd_secret$auto(0x0) socket(0xa, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x6, 0xfffffffd) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) socket(0x28, 0x5, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x4, 0x6, 0xeb1, r1, 0x8000) madvise$auto(0xfffffffeffffffff, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x13b, 0x1, 0x4, 0x5, 0x2) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop6\x00', 0x1, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r3, 0x4c07, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) ioctl$auto(r2, 0x4008af13, r2) 0s ago: executing program 2 (id=2854): mmap$auto(0x0, 0xf92e, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x7) close_range$auto(0x0, 0xffffffffffffffff, 0x2) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bluetooth/hci6/hci6:200/power/runtime_active_time\x00', 0x80900, 0x0) epoll_create$auto(0x3e) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/block/loop5/pm_only\x00', 0x189e42, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) ustat$auto(0x801, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r1 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x0, 0x29f, 0x100, 0x7f, 0xffffffff, 0x6, 0x2}, {0x8000100, 0x1, 0x8000052, 0x5, 0x1, 0x40, 0x76c5, 0x9a, 0x100000000}}) socket(0x2b, 0x1, 0x0) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) listen$auto(0x3, 0x81) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) write$auto(0x3, 0x0, 0x81) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', 0xc8002, 0x0) read$auto(0x3, 0x0, 0x80) ptrace$auto_PTRACE_SETREGSET(0x4205, r0, 0x1, 0x9) kernel console output (not intermixed with test programs): ered blocking state [ 572.929297][T16520] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.939194][T16524] tpg transfer function: 0/0 [ 572.951520][T16520] bridge_slave_0: entered allmulticast mode [ 572.968123][T16520] bridge_slave_0: entered promiscuous mode [ 572.995923][T16524] tpg Y'CbCr encoding: 0/0 [ 573.000390][T16524] tpg quantization: 0/0 [ 573.004565][T16524] tpg RGB range: 0/2 [ 573.065531][T16524] vivid-007: ================== END STATUS ================== [ 573.125583][T16520] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.132807][T16520] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.163733][T16520] bridge_slave_1: entered allmulticast mode [ 573.176914][T16520] bridge_slave_1: entered promiscuous mode [ 573.602625][T16520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.646380][T16520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.809651][T16542] netlink: 3197 bytes leftover after parsing attributes in process `syz.1.2328'. [ 573.851890][ T9800] Bluetooth: hci2: command tx timeout [ 574.139252][T16520] team0: Port device team_slave_0 added [ 574.180099][T16520] team0: Port device team_slave_1 added [ 574.246279][ T9805] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.398976][T16520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.416439][T16520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.470935][T16520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.536815][ T9805] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.630142][T16520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.689134][T16520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.767553][T16520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.043507][ T9805] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.231368][ T9805] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.383809][T16520] hsr_slave_0: entered promiscuous mode [ 575.391943][T16520] hsr_slave_1: entered promiscuous mode [ 575.405751][T16520] debugfs: 'hsr0' already exists in 'hsr' [ 575.411623][T16520] Cannot create hsr debugfs directory [ 575.603904][T16561] kexec: Could not allocate control_code_buffer [ 575.765370][ T9805] bridge_slave_0: left allmulticast mode [ 575.771062][ T9805] bridge_slave_0: left promiscuous mode [ 575.778941][ T9805] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.922232][ T9800] Bluetooth: hci2: command tx timeout [ 576.718753][T16576] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2339'. [ 577.091645][T16362] delete_channel: no stack [ 577.657036][ T9805] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.714807][ T9805] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.738612][ T9805] bond0 (unregistering): Released all slaves [ 577.994508][ T9800] Bluetooth: hci2: command tx timeout [ 578.112978][ T9805] HfR: left promiscuous mode [ 578.573759][T16615] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 578.733131][T16613] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2346'. [ 579.587069][T16520] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 579.717764][T16520] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 579.801672][T16520] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 579.845837][T16646] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2350'. [ 579.880319][T16646] ipvlan0: entered promiscuous mode [ 579.889043][T16646] ipvlan0: entered allmulticast mode [ 579.928978][T16646] veth0_vlan: entered allmulticast mode [ 579.994637][T16520] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 580.067892][ T9800] Bluetooth: hci2: command tx timeout [ 580.337727][T16520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.469297][T16520] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.485550][ T9872] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.492740][ T9872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.536562][T16628] kexec: Could not allocate control_code_buffer [ 580.576594][T14250] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.583825][T14250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.739486][T16661] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 580.754073][ T9805] hsr_slave_0: left promiscuous mode [ 580.761358][T16661] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 580.771437][ T9805] hsr_slave_1: left promiscuous mode [ 580.809834][ T9805] veth1_macvtap: left promiscuous mode [ 580.819311][ T9805] veth0_macvtap: left promiscuous mode [ 580.836931][ T9805] veth1_vlan: left promiscuous mode [ 580.871217][ T9805] veth0_vlan: left promiscuous mode [ 581.188032][T16671] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888078025000 pfn:0x78020 [ 581.236039][T16671] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 581.251473][T16671] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 581.270461][T16671] page_type: f5(slab) [ 581.291458][T16671] raw: 00fff00000000240 ffff88813ff27000 ffffea00009f2e10 ffffea00007eb210 [ 581.321028][T16671] raw: ffff888078025000 0000000000080006 00000000f5000000 0000000000000000 [ 581.349582][T16671] head: 00fff00000000240 ffff88813ff27000 ffffea00009f2e10 ffffea00007eb210 [ 581.398878][T16671] head: ffff888078025000 0000000000080006 00000000f5000000 0000000000000000 [ 581.418889][T16671] head: 00fff00000000003 ffffea0001e00801 00000000ffffffff 00000000ffffffff [ 581.436738][T16671] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 581.464343][T16671] page dumped because: unmovable page [ 581.487154][T16671] page_owner tracks the page as allocated [ 581.500896][T16671] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10204, tgid 10204 (kworker/u10:19), ts 296972644325, free_ts 296819715959 [ 581.567766][T16671] post_alloc_hook+0x1af/0x220 [ 581.572597][T16671] get_page_from_freelist+0xd0b/0x31a0 [ 581.615786][T16671] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 581.621734][T16671] alloc_pages_mpol+0x1fb/0x550 [ 581.643779][T16671] new_slab+0x2c3/0x430 [ 581.656301][T16671] ___slab_alloc+0xe18/0x1c90 [ 581.661024][T16671] __slab_alloc.constprop.0+0x63/0x110 [ 581.685731][T16671] __kmalloc_node_track_caller_noprof+0x4d6/0x930 [ 581.692184][T16671] kmalloc_reserve+0xef/0x2c0 [ 581.714794][T16671] __alloc_skb+0x186/0x410 [ 581.724457][T16671] rtmsg_ifinfo_build_skb+0x81/0x280 [ 581.745234][T16671] unregister_netdevice_many_notify+0x1026/0x2590 [ 581.751728][T16671] ops_undo_list+0x8fc/0xab0 [ 581.776913][T16671] cleanup_net+0x41b/0x830 [ 581.781371][T16671] process_one_work+0x9ba/0x1b20 [ 581.803185][T16671] worker_thread+0x6c8/0xf10 [ 581.820918][T16671] page last free pid 0 tgid 0 stack trace: [ 581.844264][T16671] __free_frozen_pages+0x7df/0x1170 [ 581.849530][T16671] __folio_put+0x329/0x450 [ 581.853963][T16671] put_netmem+0x28b/0x300 [ 581.867424][T16671] __pskb_trim_head+0x5c7/0x7b0 [ 581.880092][T16671] tcp_trim_head+0x85/0x5f0 [ 581.892498][T16671] tcp_ack+0x1dad/0x6150 [ 581.903504][T16671] tcp_rcv_established+0x10b6/0x36e0 [ 581.915480][T16671] tcp_v4_do_rcv+0xc65/0x10a0 [ 581.925614][T16671] tcp_v4_rcv+0x3077/0x4db0 [ 581.935704][T16671] ip_protocol_deliver_rcu+0xba/0x4c0 [ 581.948948][T16671] ip_local_deliver_finish+0x3f2/0x720 [ 581.962309][T16671] ip_local_deliver+0x18e/0x1f0 [ 581.973523][T16671] ip_sublist_rcv_finish+0x2ce/0x660 [ 581.984466][T16671] ip_list_rcv_finish+0x590/0x780 [ 581.996237][T16671] ip_list_rcv+0x335/0x450 [ 582.006269][T16671] __netif_receive_skb_list_core+0x752/0x950 [ 582.027566][T16676] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2353'. [ 582.598422][ T9805] team0 (unregistering): Port device team_slave_1 removed [ 582.925945][T16520] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 582.936787][T16520] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 583.009945][T16678] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 583.033345][T16678] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 583.062150][T16678] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 583.089484][T16678] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 583.096022][T16678] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 583.160542][T16678] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 583.375899][T16688] zswap: compressor 000 not available [ 583.408835][T16698] ima: policy update failed [ 583.414268][ T30] audit: type=1802 audit(4294969465.160:23): pid=16698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2357" res=0 errno=0 [ 583.471998][T16698] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 583.528679][T16520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.829572][T16520] veth0_vlan: entered promiscuous mode [ 583.865967][T16718] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2362'. [ 583.948724][T16520] veth1_vlan: entered promiscuous mode [ 584.079728][T16520] veth0_macvtap: entered promiscuous mode [ 584.102677][T16520] veth1_macvtap: entered promiscuous mode [ 584.142022][T16520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 584.156989][T16520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.170408][T14250] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.181424][T14250] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.192780][T14250] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.207149][T14250] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.289231][T14250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.308113][T14250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.334954][T14244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.343596][T14244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.435477][T16726] ICMPv6: process `syz.2.2327' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 585.084799][ T9814] Bluetooth: hci0: command 0x0c1a tx timeout [ 585.090981][T10458] Bluetooth: hci3: command 0x0c1a tx timeout [ 585.097042][ T9800] Bluetooth: hci4: command 0x0c1a tx timeout [ 585.121849][T16741] zswap: compressor not available [ 585.161537][ T9800] Bluetooth: hci2: command 0x0c1a tx timeout [ 585.189405][T16753] usb usb37: usbfs: process 16753 (syz.2.2367) did not claim interface 0 before use [ 585.271198][T16751] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 585.277455][T16751] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 585.305745][T16736] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2363'. [ 585.375125][T16751] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 585.392300][T16751] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 586.219229][T16770] cougar: G6 mapped to space [ 586.973011][T16789] zswap: compressor not available [ 587.057001][T16796] ubi0: attaching mtd0 [ 587.066384][T16796] ubi0: scanning is finished [ 587.096206][T16796] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 587.308918][ T9814] Bluetooth: hci0: command 0x0c1a tx timeout [ 587.315008][ T9800] Bluetooth: hci3: command 0x0c1a tx timeout [ 587.389220][ T9814] Bluetooth: hci4: command 0x0c1a tx timeout [ 587.395305][ T9800] Bluetooth: hci2: command 0x0c1a tx timeout [ 587.434806][T16796] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 587.776659][T16807] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 587.799243][T16807] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 587.816145][T16807] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 587.829718][T16807] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 588.308897][T16812] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 588.356333][T16812] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 588.432430][T16814] FAULT_INJECTION: forcing a failure. [ 588.432430][T16814] name failslab, interval 1, probability 0, space 0, times 0 [ 588.654315][T16814] CPU: 1 UID: 0 PID: 16814 Comm: syz.0.2384 Tainted: G L syzkaller #0 PREEMPT(full) [ 588.654344][T16814] Tainted: [L]=SOFTLOCKUP [ 588.654350][T16814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 588.654360][T16814] Call Trace: [ 588.654366][T16814] [ 588.654372][T16814] dump_stack_lvl+0x16c/0x1f0 [ 588.654394][T16814] should_fail_ex+0x512/0x640 [ 588.654416][T16814] ? __kmalloc_cache_noprof+0x5f/0x800 [ 588.654436][T16814] should_failslab+0xc2/0x120 [ 588.654459][T16814] __kmalloc_cache_noprof+0x80/0x800 [ 588.654475][T16814] ? net_alloc_generic+0x1e/0x70 [ 588.654489][T16814] ? copy_net_ns+0xe8/0x7c0 [ 588.654503][T16814] ? copy_net_ns+0x135/0x7c0 [ 588.654521][T16814] ? copy_net_ns+0x135/0x7c0 [ 588.654536][T16814] copy_net_ns+0x135/0x7c0 [ 588.654550][T16814] ? copy_cgroup_ns+0x71/0x980 [ 588.654568][T16814] create_new_namespaces+0x3ea/0xab0 [ 588.654593][T16814] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 588.654615][T16814] ksys_unshare+0x45b/0xa40 [ 588.654639][T16814] ? __pfx_ksys_unshare+0x10/0x10 [ 588.654663][T16814] ? xfd_validate_state+0x61/0x180 [ 588.654682][T16814] __x64_sys_unshare+0x31/0x40 [ 588.654705][T16814] do_syscall_64+0xcd/0xf80 [ 588.654722][T16814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.654738][T16814] RIP: 0033:0x7ff207b8f7c9 [ 588.654751][T16814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.654766][T16814] RSP: 002b:00007ff205dcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 588.654781][T16814] RAX: ffffffffffffffda RBX: 00007ff207de6090 RCX: 00007ff207b8f7c9 [ 588.654791][T16814] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 588.654801][T16814] RBP: 00007ff207c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 588.654810][T16814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 588.654819][T16814] R13: 00007ff207de6128 R14: 00007ff207de6090 R15: 00007ffefee5c748 [ 588.654838][T16814] [ 589.092510][ T9800] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 589.228128][T16827] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 589.263406][T16827] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 589.282863][T16827] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 589.856923][ T9897] Bluetooth: hci3: command 0x0c1a tx timeout [ 589.863281][ T9814] Bluetooth: hci2: command 0x0c1a tx timeout [ 589.869387][T10458] Bluetooth: hci4: command 0x0c1a tx timeout [ 590.255465][T16839] cougar: G6 mapped to space [ 590.836009][T16847] nvme_fcloop: unknown parameter or missing value '7' [ 591.211847][ T9897] Bluetooth: hci0: command 0x0c1a tx timeout [ 591.290305][T16861] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 591.308407][T16825] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 591.314751][T16825] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 591.321418][T16825] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 591.328387][T16825] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 591.338393][T16861] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 591.871054][T16868] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 592.161586][T16875] FAULT_INJECTION: forcing a failure. [ 592.161586][T16875] name fail_futex, interval 1, probability 0, space 0, times 0 [ 592.295108][T16875] CPU: 0 UID: 0 PID: 16875 Comm: syz.1.2397 Tainted: G L syzkaller #0 PREEMPT(full) [ 592.295153][T16875] Tainted: [L]=SOFTLOCKUP [ 592.295162][T16875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 592.295176][T16875] Call Trace: [ 592.295185][T16875] [ 592.295194][T16875] dump_stack_lvl+0x16c/0x1f0 [ 592.295224][T16875] should_fail_ex+0x512/0x640 [ 592.295257][T16875] get_futex_key+0x1d0/0x15f0 [ 592.295286][T16875] ? __pfx_get_futex_key+0x10/0x10 [ 592.295321][T16875] futex_wait_setup+0x9d/0x570 [ 592.295360][T16875] __futex_wait+0x193/0x2f0 [ 592.295391][T16875] ? __pfx___futex_wait+0x10/0x10 [ 592.295426][T16875] ? __pfx_futex_wake_mark+0x10/0x10 [ 592.295460][T16875] ? find_held_lock+0x2b/0x80 [ 592.295492][T16875] ? futex_private_hash_put+0x160/0x1b0 [ 592.295517][T16875] futex_wait+0xe8/0x380 [ 592.295546][T16875] ? __pfx_futex_wait+0x10/0x10 [ 592.295595][T16875] do_futex+0x229/0x350 [ 592.295623][T16875] ? __pfx_do_futex+0x10/0x10 [ 592.295647][T16875] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 592.295689][T16875] __x64_sys_futex+0x1e0/0x4c0 [ 592.295720][T16875] ? __fget_files+0x20e/0x3c0 [ 592.295753][T16875] ? __pfx___x64_sys_futex+0x10/0x10 [ 592.295783][T16875] ? syscall_user_dispatch+0x78/0x140 [ 592.295833][T16875] do_syscall_64+0xcd/0xf80 [ 592.295863][T16875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.295888][T16875] RIP: 0033:0x7fdd1ff8f7c9 [ 592.295910][T16875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.295935][T16875] RSP: 002b:00007fdd20d650e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 592.295961][T16875] RAX: ffffffffffffffda RBX: 00007fdd201e6098 RCX: 00007fdd1ff8f7c9 [ 592.295980][T16875] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdd201e6098 [ 592.295995][T16875] RBP: 00007fdd201e6090 R08: 0000000000000000 R09: 0000000000000000 [ 592.296010][T16875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 592.296025][T16875] R13: 00007fdd201e6128 R14: 00007ffcef9933c0 R15: 00007ffcef9934a8 [ 592.296060][T16875] [ 592.861068][T16895] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 592.917000][T16895] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 593.190963][T16906] FAULT_INJECTION: forcing a failure. [ 593.190963][T16906] name fail_futex, interval 1, probability 0, space 0, times 0 [ 593.218955][T16906] CPU: 0 UID: 0 PID: 16906 Comm: syz.0.2403 Tainted: G L syzkaller #0 PREEMPT(full) [ 593.219004][T16906] Tainted: [L]=SOFTLOCKUP [ 593.219026][T16906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 593.219043][T16906] Call Trace: [ 593.219054][T16906] [ 593.219066][T16906] dump_stack_lvl+0x16c/0x1f0 [ 593.219103][T16906] should_fail_ex+0x512/0x640 [ 593.219146][T16906] get_futex_key+0x1d0/0x15f0 [ 593.219182][T16906] ? __pfx_get_futex_key+0x10/0x10 [ 593.219225][T16906] futex_wait_setup+0x9d/0x570 [ 593.219272][T16906] __futex_wait+0x193/0x2f0 [ 593.219310][T16906] ? __pfx___futex_wait+0x10/0x10 [ 593.219357][T16906] ? __pfx_futex_wake_mark+0x10/0x10 [ 593.219399][T16906] ? find_held_lock+0x2b/0x80 [ 593.219439][T16906] ? futex_private_hash_put+0x160/0x1b0 [ 593.219472][T16906] futex_wait+0xe8/0x380 [ 593.219509][T16906] ? __pfx_futex_wait+0x10/0x10 [ 593.219553][T16906] ? putname+0xf5/0x1a0 [ 593.219586][T16906] do_futex+0x229/0x350 [ 593.219617][T16906] ? __pfx_do_futex+0x10/0x10 [ 593.219658][T16906] __x64_sys_futex+0x1e0/0x4c0 [ 593.219692][T16906] ? __x64_sys_openat+0x174/0x210 [ 593.219727][T16906] ? __pfx___x64_sys_futex+0x10/0x10 [ 593.219758][T16906] ? xfd_validate_state+0x61/0x180 [ 593.219796][T16906] do_syscall_64+0xcd/0xf80 [ 593.219829][T16906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.219857][T16906] RIP: 0033:0x7ff207b8f7c9 [ 593.219880][T16906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 593.219907][T16906] RSP: 002b:00007ff205dee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 593.219933][T16906] RAX: ffffffffffffffda RBX: 00007ff207de5fa8 RCX: 00007ff207b8f7c9 [ 593.219953][T16906] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff207de5fa8 [ 593.219972][T16906] RBP: 00007ff207de5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 593.219990][T16906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 593.220006][T16906] R13: 00007ff207de6038 R14: 00007ffefee5c660 R15: 00007ffefee5c748 [ 593.220052][T16906] [ 593.581403][T16906] binder: 16905:16906 ioctl c00c620f 200000000b80 returned -22 [ 593.595697][ T9814] Bluetooth: hci3: command 0x0c1a tx timeout [ 593.620261][ T9800] Bluetooth: hci0: command 0x0c1a tx timeout [ 593.654643][T10458] Bluetooth: hci4: command 0x0c1a tx timeout [ 593.660759][ T9897] Bluetooth: hci2: command 0x0c1a tx timeout [ 593.767525][T16911] netlink: 186 bytes leftover after parsing attributes in process `syz.0.2406'. [ 593.967678][T16917] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2408'. [ 594.475715][T16914] cougar: G6 mapped to space [ 595.067938][T16932] FAULT_INJECTION: forcing a failure. [ 595.067938][T16932] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 595.133577][T16932] CPU: 0 UID: 0 PID: 16932 Comm: syz.0.2411 Tainted: G L syzkaller #0 PREEMPT(full) [ 595.133623][T16932] Tainted: [L]=SOFTLOCKUP [ 595.133633][T16932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 595.133651][T16932] Call Trace: [ 595.133661][T16932] [ 595.133672][T16932] dump_stack_lvl+0x16c/0x1f0 [ 595.133708][T16932] should_fail_ex+0x512/0x640 [ 595.133756][T16932] should_fail_alloc_page+0xe7/0x130 [ 595.133811][T16932] prepare_alloc_pages+0x401/0x670 [ 595.133858][T16932] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 595.133903][T16932] ? folio_remove_rmap_ptes+0x391/0xfb0 [ 595.133941][T16932] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 595.133997][T16932] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 595.134040][T16932] ? policy_nodemask+0xea/0x4e0 [ 595.134081][T16932] alloc_pages_mpol+0x1fb/0x550 [ 595.134121][T16932] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 595.134171][T16932] folio_alloc_mpol_noprof+0x36/0x2f0 [ 595.134202][T16932] alloc_migration_target_by_mpol+0x246/0x500 [ 595.134235][T16932] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 595.134264][T16932] ? __pfx_folio_lock_anon_vma_read+0x10/0x10 [ 595.134295][T16932] ? __pfx___might_resched+0x10/0x10 [ 595.134333][T16932] ? folio_get_anon_vma+0x130/0x7d0 [ 595.134366][T16932] migrate_pages_batch+0x3bc/0x3bb0 [ 595.134399][T16932] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 595.134443][T16932] ? __pfx_migrate_pages_batch+0x10/0x10 [ 595.134478][T16932] ? __pfx_walk_pgd_range+0x10/0x10 [ 595.134515][T16932] migrate_pages_sync+0x12d/0x8a0 [ 595.134545][T16932] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 595.134591][T16932] ? queue_pages_test_walk+0x279/0x410 [ 595.134635][T16932] ? __pfx_migrate_pages_sync+0x10/0x10 [ 595.134664][T16932] ? walk_page_test+0x9b/0x180 [ 595.134709][T16932] migrate_pages+0x1b0b/0x2350 [ 595.134740][T16932] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 595.134782][T16932] ? __pfx_migrate_pages+0x10/0x10 [ 595.134808][T16932] ? mas_next_slot+0x12d3/0x1cb0 [ 595.134842][T16932] ? find_held_lock+0x2b/0x80 [ 595.134885][T16932] ? up_write+0x282/0x4e0 [ 595.134917][T16932] do_mbind+0x6e2/0xf20 [ 595.134955][T16932] ? __pfx_do_mbind+0x10/0x10 [ 595.135003][T16932] ? __pfx_get_nodes+0x10/0x10 [ 595.135047][T16932] kernel_mbind+0x1e3/0x1f0 [ 595.135079][T16932] ? __pfx_kernel_mbind+0x10/0x10 [ 595.135117][T16932] do_syscall_64+0xcd/0xf80 [ 595.135149][T16932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.135178][T16932] RIP: 0033:0x7ff207b8f7c9 [ 595.135202][T16932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.135229][T16932] RSP: 002b:00007ff205dcd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 595.135256][T16932] RAX: ffffffffffffffda RBX: 00007ff207de6090 RCX: 00007ff207b8f7c9 [ 595.135289][T16932] RDX: 0000000100000000 RSI: 8000000000000001 RDI: 000000000000f000 [ 595.135307][T16932] RBP: 00007ff207c13f91 R08: 0000000000000006 R09: 0000000000000002 [ 595.135325][T16932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 595.135341][T16932] R13: 00007ff207de6128 R14: 00007ff207de6090 R15: 00007ffefee5c748 [ 595.135372][T16932] [ 595.671592][ T9897] Bluetooth: hci0: command 0x0c1a tx timeout [ 595.987365][T16951] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 596.062264][T16951] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 597.043258][T16968] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 597.052856][T16968] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 597.059034][T16968] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 597.082983][T16968] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 597.313439][T16977] FAULT_INJECTION: forcing a failure. [ 597.313439][T16977] name failslab, interval 1, probability 0, space 0, times 0 [ 597.528832][T16977] CPU: 0 UID: 0 PID: 16977 Comm: syz.3.2418 Tainted: G L syzkaller #0 PREEMPT(full) [ 597.528878][T16977] Tainted: [L]=SOFTLOCKUP [ 597.528889][T16977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 597.528907][T16977] Call Trace: [ 597.528917][T16977] [ 597.528929][T16977] dump_stack_lvl+0x16c/0x1f0 [ 597.528965][T16977] should_fail_ex+0x512/0x640 [ 597.529003][T16977] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 597.529042][T16977] should_failslab+0xc2/0x120 [ 597.529082][T16977] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 597.529115][T16977] ? __d_lookup+0x25c/0x4a0 [ 597.529147][T16977] ? __d_alloc+0x35/0xa80 [ 597.529191][T16977] ? __d_alloc+0x35/0xa80 [ 597.529228][T16977] __d_alloc+0x35/0xa80 [ 597.529272][T16977] d_alloc+0x4a/0x1e0 [ 597.529314][T16977] lookup_one_qstr_excl+0x175/0x250 [ 597.529348][T16977] start_dirop+0x59/0xb0 [ 597.529385][T16977] simple_start_creating+0xf4/0x100 [ 597.529421][T16977] ? __pfx_simple_start_creating+0x10/0x10 [ 597.529456][T16977] ? do_raw_spin_unlock+0x172/0x230 [ 597.529500][T16977] ? simple_pin_fs+0xa3/0x190 [ 597.529535][T16977] debugfs_start_creating.part.0+0x86/0x1c0 [ 597.529579][T16977] __debugfs_create_file+0xb3/0x530 [ 597.529624][T16977] debugfs_create_file_full+0x41/0x60 [ 597.529666][T16977] ref_tracker_dir_debugfs+0x19d/0x2f0 [ 597.529707][T16977] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 597.529780][T16977] ? lockdep_init_map_type+0x5c/0x270 [ 597.529814][T16977] preinit_net.part.0+0x24e/0x8f0 [ 597.529844][T16977] copy_net_ns+0x4cd/0x7c0 [ 597.529877][T16977] create_new_namespaces+0x3ea/0xab0 [ 597.529922][T16977] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 597.529962][T16977] ksys_unshare+0x45b/0xa40 [ 597.530002][T16977] ? __pfx_ksys_unshare+0x10/0x10 [ 597.530044][T16977] ? xfd_validate_state+0x61/0x180 [ 597.530080][T16977] __x64_sys_unshare+0x31/0x40 [ 597.530124][T16977] do_syscall_64+0xcd/0xf80 [ 597.530158][T16977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.530187][T16977] RIP: 0033:0x7fa8f8f8f7c9 [ 597.530210][T16977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.530237][T16977] RSP: 002b:00007fa8f71f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 597.530265][T16977] RAX: ffffffffffffffda RBX: 00007fa8f91e6090 RCX: 00007fa8f8f8f7c9 [ 597.530284][T16977] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 597.530300][T16977] RBP: 00007fa8f9013f91 R08: 0000000000000000 R09: 0000000000000000 [ 597.530317][T16977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.530334][T16977] R13: 00007fa8f91e6128 R14: 00007fa8f91e6090 R15: 00007ffd5c91e068 [ 597.530369][T16977] [ 598.285534][ T9897] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 598.599328][T16982] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 598.605913][T16982] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 599.093280][ T9897] Bluetooth: hci2: command 0x0c1a tx timeout [ 599.537616][T17000] cougar: G6 mapped to space [ 600.236564][T17004] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2424'. [ 600.606207][ T9800] Bluetooth: hci0: command 0x0c1a tx timeout [ 600.614104][ T9814] Bluetooth: hci3: command 0x0c1a tx timeout [ 600.625968][ T9897] Bluetooth: hci4: command 0x0c1a tx timeout [ 600.641743][T16982] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 600.648824][T16982] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 601.515743][T17010] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 601.900803][T17028] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 601.917502][T17028] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 601.969840][T17028] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 601.991604][T17028] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 602.797340][T17036] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 602.826951][T17036] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 603.094519][T17047] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 603.101575][T17047] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 603.119387][T17047] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 603.145553][T17047] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 603.224824][T17049] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2439'. [ 605.147926][ T9897] Bluetooth: hci0: command 0x0c1a tx timeout [ 605.153988][ T9800] Bluetooth: hci3: command 0x0c1a tx timeout [ 605.160019][ T9814] Bluetooth: hci4: command 0x0c1a tx timeout [ 605.166030][T10458] Bluetooth: hci2: command 0x0c1a tx timeout [ 605.310719][T17107] FAULT_INJECTION: forcing a failure. [ 605.310719][T17107] name failslab, interval 1, probability 0, space 0, times 0 [ 605.343609][T17107] CPU: 0 UID: 0 PID: 17107 Comm: syz.1.2446 Tainted: G L syzkaller #0 PREEMPT(full) [ 605.343661][T17107] Tainted: [L]=SOFTLOCKUP [ 605.343671][T17107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 605.343685][T17107] Call Trace: [ 605.343694][T17107] [ 605.343704][T17107] dump_stack_lvl+0x16c/0x1f0 [ 605.343741][T17107] should_fail_ex+0x512/0x640 [ 605.343778][T17107] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 605.343815][T17107] should_failslab+0xc2/0x120 [ 605.343854][T17107] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 605.343883][T17107] ? __d_alloc+0x35/0xa80 [ 605.343934][T17107] ? __d_alloc+0x35/0xa80 [ 605.343968][T17107] __d_alloc+0x35/0xa80 [ 605.344009][T17107] d_alloc_pseudo+0x1c/0xc0 [ 605.344040][T17107] alloc_file_pseudo+0xcf/0x230 [ 605.344072][T17107] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 605.344101][T17107] ? alloc_fd+0x471/0x7d0 [ 605.344144][T17107] sock_alloc_file+0x50/0x210 [ 605.344171][T17107] __sys_socket+0x1c0/0x260 [ 605.344204][T17107] ? __pfx___sys_socket+0x10/0x10 [ 605.344236][T17107] ? xfd_validate_state+0x61/0x180 [ 605.344270][T17107] __x64_sys_socket+0x72/0xb0 [ 605.344301][T17107] ? lockdep_hardirqs_on+0x7c/0x110 [ 605.344336][T17107] do_syscall_64+0xcd/0xf80 [ 605.344368][T17107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.344401][T17107] RIP: 0033:0x7fdd1ff8f7c9 [ 605.344425][T17107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.344454][T17107] RSP: 002b:00007fdd20d86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 605.344482][T17107] RAX: ffffffffffffffda RBX: 00007fdd201e5fa0 RCX: 00007fdd1ff8f7c9 [ 605.344503][T17107] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 605.344520][T17107] RBP: 00007fdd20013f91 R08: 0000000000000000 R09: 0000000000000000 [ 605.344539][T17107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 605.344557][T17107] R13: 00007fdd201e6038 R14: 00007fdd201e5fa0 R15: 00007ffcef9934a8 [ 605.344596][T17107] [ 605.630284][T17109] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 605.636755][T17109] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 605.643012][T17109] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 605.649360][T17109] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 607.692828][T10458] Bluetooth: hci0: command 0x0c1a tx timeout [ 607.698926][ T9800] Bluetooth: hci3: command 0x0c1a tx timeout [ 607.705008][ T9814] Bluetooth: hci4: command 0x0c1a tx timeout [ 607.711085][ T9897] Bluetooth: hci2: command 0x0c1a tx timeout [ 609.077009][T17118] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 609.083187][T17118] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 609.108435][T17118] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 609.119873][T17118] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 609.460367][ T9800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 609.472111][ T9800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 609.482739][ T9800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 609.490876][ T9800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 609.498798][ T9800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 610.039134][T17123] chnl_net:caif_netlink_parms(): no params data found [ 610.302132][T15942] bond0: left allmulticast mode [ 610.307063][T15942] bond_slave_0: left allmulticast mode [ 610.312611][T15942] bond_slave_1: left allmulticast mode [ 610.318144][T15942] bond0: left promiscuous mode [ 610.327359][T15942] bond_slave_0: left promiscuous mode [ 610.333168][T15942] bond_slave_1: left promiscuous mode [ 610.339081][T15942] bridge0: port 3(bond0) entered disabled state [ 610.352084][T15942] bridge_slave_1: left allmulticast mode [ 610.357782][T15942] bridge_slave_1: left promiscuous mode [ 610.370905][T15942] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.413520][T15942] bridge_slave_0: left allmulticast mode [ 610.419216][T15942] bridge_slave_0: left promiscuous mode [ 610.428795][T15942] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.117413][ T9800] Bluetooth: hci4: command 0x0c1a tx timeout [ 611.123511][ T9897] Bluetooth: hci3: command 0x0c1a tx timeout [ 611.160886][T15942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.173782][T15942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.188048][T15942] bond0 (unregistering): Released all slaves [ 611.196288][ T9897] Bluetooth: hci2: command 0x0c1a tx timeout [ 611.282466][T17123] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.316340][T17123] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.323622][T17123] bridge_slave_0: entered allmulticast mode [ 611.353350][T17123] bridge_slave_0: entered promiscuous mode [ 611.368823][T15942] HSR: left promiscuous mode [ 611.455895][T17123] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.463057][T17123] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.470798][T17123] bridge_slave_1: entered allmulticast mode [ 611.484193][T17123] bridge_slave_1: entered promiscuous mode [ 611.514910][ T9897] Bluetooth: hci1: command tx timeout [ 611.590166][T17123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.612492][T17123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.785227][T17123] team0: Port device team_slave_0 added [ 611.795559][T17123] team0: Port device team_slave_1 added [ 611.895737][T17123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.938646][T17123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.965445][T17123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.992299][T17123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.010793][T17123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.074038][T17123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.255279][T17123] hsr_slave_0: entered promiscuous mode [ 612.283325][T17123] hsr_slave_1: entered promiscuous mode [ 612.303404][T17123] debugfs: 'hsr0' already exists in 'hsr' [ 612.309172][T17123] Cannot create hsr debugfs directory [ 612.805592][T15942] hsr_slave_0: left promiscuous mode [ 612.820604][T15942] hsr_slave_1: left promiscuous mode [ 612.828221][T15942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 612.844771][T15942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 612.883551][T15942] veth0_macvtap: left promiscuous mode [ 612.893992][T15942] veth1_vlan: left promiscuous mode [ 612.904507][T15942] veth0_vlan: left promiscuous mode [ 613.590178][ T9897] Bluetooth: hci1: command tx timeout [ 613.894303][T15942] team0 (unregistering): Port device team_slave_1 removed [ 614.960207][T17123] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 615.015661][T17123] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 615.035138][T17123] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 615.071541][T17123] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 615.323553][T17123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.529856][T17123] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.559341][T15944] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.566496][T15944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.636649][T15944] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.643833][T15944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.660167][ T9897] Bluetooth: hci1: command tx timeout [ 616.079773][T17174] bond0: option all_slaves_active: invalid value () [ 616.138430][T17174] bond0: option all_slaves_active: invalid value (15) [ 616.253874][T17123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.484211][T17185] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 616.497175][T17185] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 616.519363][T17185] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 616.535292][T17185] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 616.545903][T17185] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 616.560460][T17123] veth0_vlan: entered promiscuous mode [ 616.613342][T17123] veth1_vlan: entered promiscuous mode [ 616.628792][T17185] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 616.693124][T17123] veth0_macvtap: entered promiscuous mode [ 616.719217][T17123] veth1_macvtap: entered promiscuous mode [ 616.774461][T17123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.827061][T17123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 616.874323][T15941] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.894720][T15941] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.920918][T15941] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.945240][T15941] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.218147][ T9872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.266235][ T9872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.328518][T14250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.340014][T14250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.456996][T17192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2461'. [ 617.481663][T17196] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 617.498708][T17196] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 617.543623][T17194] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 617.571755][T17196] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 618.149830][T17191] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 618.165874][T17191] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 618.179942][T17191] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 618.187148][T17210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2465'. [ 618.203968][T17191] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 618.390685][T17215] FAULT_INJECTION: forcing a failure. [ 618.390685][T17215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 618.421732][T17215] CPU: 0 UID: 0 PID: 17215 Comm: syz.2.2466 Tainted: G L syzkaller #0 PREEMPT(full) [ 618.421779][T17215] Tainted: [L]=SOFTLOCKUP [ 618.421791][T17215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 618.421808][T17215] Call Trace: [ 618.421818][T17215] [ 618.421829][T17215] dump_stack_lvl+0x16c/0x1f0 [ 618.421866][T17215] should_fail_ex+0x512/0x640 [ 618.421909][T17215] _copy_from_user+0x2e/0xd0 [ 618.421947][T17215] get_itimerspec64+0x15b/0x2d0 [ 618.421977][T17215] ? __pfx_get_itimerspec64+0x10/0x10 [ 618.422008][T17215] ? _copy_from_user+0x59/0xd0 [ 618.422047][T17215] __x64_sys_timerfd_settime+0x15f/0x280 [ 618.422080][T17215] ? __pfx___x64_sys_timerfd_settime+0x10/0x10 [ 618.422132][T17215] do_syscall_64+0xcd/0xf80 [ 618.422163][T17215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.422190][T17215] RIP: 0033:0x7fb2a0f8f7c9 [ 618.422218][T17215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 618.422244][T17215] RSP: 002b:00007fb2a1d69038 EFLAGS: 00000246 ORIG_RAX: 000000000000011e [ 618.422268][T17215] RAX: ffffffffffffffda RBX: 00007fb2a11e5fa0 RCX: 00007fb2a0f8f7c9 [ 618.422286][T17215] RDX: 0000200000000000 RSI: 0000000000000008 RDI: ffffffffffffffff [ 618.422303][T17215] RBP: 00007fb2a1013f91 R08: 0000000000000000 R09: 0000000000000000 [ 618.422319][T17215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.422335][T17215] R13: 00007fb2a11e6038 R14: 00007fb2a11e5fa0 R15: 00007fffd21a0018 [ 618.422371][T17215] [ 618.773035][T17221] FAULT_INJECTION: forcing a failure. [ 618.773035][T17221] name failslab, interval 1, probability 0, space 0, times 0 [ 618.786174][T17221] CPU: 1 UID: 0 PID: 17221 Comm: syz.2.2466 Tainted: G L syzkaller #0 PREEMPT(full) [ 618.786220][T17221] Tainted: [L]=SOFTLOCKUP [ 618.786231][T17221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 618.786248][T17221] Call Trace: [ 618.786259][T17221] [ 618.786267][T17221] dump_stack_lvl+0x16c/0x1f0 [ 618.786297][T17221] should_fail_ex+0x512/0x640 [ 618.786329][T17221] ? __kmalloc_cache_node_noprof+0x62/0x830 [ 618.786364][T17221] should_failslab+0xc2/0x120 [ 618.786396][T17221] __kmalloc_cache_node_noprof+0x83/0x830 [ 618.786425][T17221] ? __xas_nomem+0x1b4/0x670 [ 618.786445][T17221] ? blkg_alloc+0xb7/0xb60 [ 618.786478][T17221] ? blkg_alloc+0xb7/0xb60 [ 618.786502][T17221] ? __pfx___xa_insert+0x10/0x10 [ 618.786526][T17221] blkg_alloc+0xb7/0xb60 [ 618.786553][T17221] ? find_held_lock+0x2b/0x80 [ 618.786585][T17221] blkcg_init_disk+0x51/0x580 [ 618.786617][T17221] __alloc_disk_node+0x2f6/0x6b0 [ 618.786645][T17221] __blk_mq_alloc_disk+0x89/0x120 [ 618.786666][T17221] nbd_dev_add+0x492/0xbb0 [ 618.786708][T17221] ? __pfx_nbd_dev_add+0x10/0x10 [ 618.786759][T17221] ? bpf_lsm_capable+0x9/0x10 [ 618.786789][T17221] ? __radix_tree_lookup+0x21f/0x2c0 [ 618.786829][T17221] nbd_genl_connect+0x8b0/0x1c60 [ 618.786867][T17221] ? __pfx_nbd_genl_connect+0x10/0x10 [ 618.786901][T17221] ? __nla_parse+0x40/0x60 [ 618.786925][T17221] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 618.786953][T17221] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 618.786992][T17221] genl_family_rcv_msg_doit+0x209/0x2f0 [ 618.787022][T17221] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 618.787055][T17221] ? genl_get_cmd+0x194/0x580 [ 618.787088][T17221] ? __radix_tree_lookup+0x21f/0x2c0 [ 618.787125][T17221] genl_rcv_msg+0x55c/0x800 [ 618.787154][T17221] ? __pfx_genl_rcv_msg+0x10/0x10 [ 618.787180][T17221] ? __pfx_nbd_genl_connect+0x10/0x10 [ 618.787223][T17221] netlink_rcv_skb+0x158/0x420 [ 618.787245][T17221] ? __pfx_genl_rcv_msg+0x10/0x10 [ 618.787272][T17221] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 618.787306][T17221] ? netlink_deliver_tap+0x1ae/0xd30 [ 618.787344][T17221] genl_rcv+0x28/0x40 [ 618.787365][T17221] netlink_unicast+0x5aa/0x870 [ 618.787391][T17221] ? __pfx_netlink_unicast+0x10/0x10 [ 618.787424][T17221] netlink_sendmsg+0x8c8/0xdd0 [ 618.787450][T17221] ? __pfx_netlink_sendmsg+0x10/0x10 [ 618.787476][T17221] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 618.787508][T17221] ____sys_sendmsg+0xa5d/0xc30 [ 618.787534][T17221] ? copy_msghdr_from_user+0x10a/0x160 [ 618.787565][T17221] ? __pfx_____sys_sendmsg+0x10/0x10 [ 618.787588][T17221] ? preempt_schedule_thunk+0x16/0x30 [ 618.787614][T17221] ? try_to_wake_up+0xa67/0x1860 [ 618.787646][T17221] ___sys_sendmsg+0x134/0x1d0 [ 618.787679][T17221] ? __pfx____sys_sendmsg+0x10/0x10 [ 618.787711][T17221] ? futex_private_hash_put+0x160/0x1b0 [ 618.787766][T17221] __sys_sendmsg+0x16d/0x220 [ 618.787798][T17221] ? __pfx___sys_sendmsg+0x10/0x10 [ 618.787830][T17221] ? __x64_sys_futex+0x1e0/0x4c0 [ 618.787870][T17221] do_syscall_64+0xcd/0xf80 [ 618.787895][T17221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.787918][T17221] RIP: 0033:0x7fb2a0f8f7c9 [ 618.787936][T17221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 618.787956][T17221] RSP: 002b:00007fb2a1d48038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 618.787985][T17221] RAX: ffffffffffffffda RBX: 00007fb2a11e6090 RCX: 00007fb2a0f8f7c9 [ 618.788001][T17221] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000002 [ 618.788016][T17221] RBP: 00007fb2a1013f91 R08: 0000000000000000 R09: 0000000000000000 [ 618.788030][T17221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.788044][T17221] R13: 00007fb2a11e6128 R14: 00007fb2a11e6090 R15: 00007fffd21a0018 [ 618.788075][T17221] [ 619.239714][T17221] nbd: failed to add new device [ 619.318774][ T9897] Bluetooth: hci3: command 0x0c1a tx timeout [ 619.597321][T17230] zswap: compressor not available [ 619.694138][T17241] futex_wake_op: syz.0.2472 tries to shift op by -2048; fix this program [ 619.716104][T17241] futex_wake_op: syz.0.2472 tries to shift op by -2048; fix this program [ 619.747838][T17241] 0x000000000001-0x000000020000 : "" [ 619.767591][T17241] ftl_cs: FTL header corrupt! [ 619.966093][ T9897] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 619.966130][ T9897] Bluetooth: hci3: unexpected subevent 0x0e length: 725 > 15 [ 619.994084][ T9897] Bluetooth: hci3: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 620.142579][T17250] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 620.194568][ T9800] Bluetooth: hci4: command 0x0c1a tx timeout [ 620.209724][ T9897] Bluetooth: hci2: command 0x0c1a tx timeout [ 620.274295][ T9800] Bluetooth: hci1: command 0x0c1a tx timeout [ 620.347422][T17257] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 620.372638][T17257] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 620.381119][T17257] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 620.389943][T17257] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 621.502076][T17276] FAULT_INJECTION: forcing a failure. [ 621.502076][T17276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 621.536279][T17276] CPU: 1 UID: 0 PID: 17276 Comm: syz.1.2483 Tainted: G L syzkaller #0 PREEMPT(full) [ 621.536326][T17276] Tainted: [L]=SOFTLOCKUP [ 621.536337][T17276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 621.536355][T17276] Call Trace: [ 621.536364][T17276] [ 621.536375][T17276] dump_stack_lvl+0x16c/0x1f0 [ 621.536411][T17276] should_fail_ex+0x512/0x640 [ 621.536453][T17276] _copy_from_user+0x2e/0xd0 [ 621.536490][T17276] get_itimerspec64+0x15b/0x2d0 [ 621.536520][T17276] ? __pfx_get_itimerspec64+0x10/0x10 [ 621.536566][T17276] ? _copy_from_user+0x59/0xd0 [ 621.536608][T17276] __x64_sys_timerfd_settime+0x15f/0x280 [ 621.536644][T17276] ? __pfx___x64_sys_timerfd_settime+0x10/0x10 [ 621.536697][T17276] do_syscall_64+0xcd/0xf80 [ 621.536727][T17276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.536753][T17276] RIP: 0033:0x7fdd1ff8f7c9 [ 621.536785][T17276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.536814][T17276] RSP: 002b:00007fdd20d86038 EFLAGS: 00000246 ORIG_RAX: 000000000000011e [ 621.536838][T17276] RAX: ffffffffffffffda RBX: 00007fdd201e5fa0 RCX: 00007fdd1ff8f7c9 [ 621.536857][T17276] RDX: 0000200000000000 RSI: 0000000000000008 RDI: ffffffffffffffff [ 621.536873][T17276] RBP: 00007fdd20013f91 R08: 0000000000000000 R09: 0000000000000000 [ 621.536890][T17276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 621.536906][T17276] R13: 00007fdd201e6038 R14: 00007fdd201e5fa0 R15: 00007ffcef9934a8 [ 621.536941][T17276] [ 621.817988][T17276] FAULT_INJECTION: forcing a failure. [ 621.817988][T17276] name failslab, interval 1, probability 0, space 0, times 0 [ 621.879413][T17276] CPU: 0 UID: 0 PID: 17276 Comm: syz.1.2483 Tainted: G L syzkaller #0 PREEMPT(full) [ 621.879444][T17276] Tainted: [L]=SOFTLOCKUP [ 621.879450][T17276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 621.879460][T17276] Call Trace: [ 621.879466][T17276] [ 621.879472][T17276] dump_stack_lvl+0x16c/0x1f0 [ 621.879493][T17276] should_fail_ex+0x512/0x640 [ 621.879515][T17276] ? fs_reclaim_acquire+0xae/0x150 [ 621.879540][T17276] should_failslab+0xc2/0x120 [ 621.879564][T17276] kmem_cache_alloc_noprof+0x83/0x770 [ 621.879582][T17276] ? __pfx_map_id_range_down+0x10/0x10 [ 621.879603][T17276] ? security_inode_alloc+0x3b/0x2b0 [ 621.879627][T17276] ? security_inode_alloc+0x3b/0x2b0 [ 621.879645][T17276] security_inode_alloc+0x3b/0x2b0 [ 621.879666][T17276] inode_init_always_gfp+0xced/0x1040 [ 621.879698][T17276] alloc_inode+0x86/0x240 [ 621.879715][T17276] new_inode+0x22/0x1c0 [ 621.879733][T17276] bdev_alloc+0x2b/0x420 [ 621.879757][T17276] __alloc_disk_node+0x116/0x6b0 [ 621.879777][T17276] __blk_mq_alloc_disk+0x89/0x120 [ 621.879792][T17276] nbd_dev_add+0x492/0xbb0 [ 621.879816][T17276] ? __pfx_nbd_dev_add+0x10/0x10 [ 621.879849][T17276] ? bpf_lsm_capable+0x9/0x10 [ 621.879870][T17276] ? __radix_tree_lookup+0x21f/0x2c0 [ 621.879897][T17276] nbd_genl_connect+0x8b0/0x1c60 [ 621.879924][T17276] ? __pfx_nbd_genl_connect+0x10/0x10 [ 621.879948][T17276] ? __nla_parse+0x40/0x60 [ 621.879965][T17276] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 621.879985][T17276] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 621.880008][T17276] genl_family_rcv_msg_doit+0x209/0x2f0 [ 621.880027][T17276] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 621.880046][T17276] ? genl_get_cmd+0x194/0x580 [ 621.880068][T17276] ? __radix_tree_lookup+0x21f/0x2c0 [ 621.880094][T17276] genl_rcv_msg+0x55c/0x800 [ 621.880115][T17276] ? __pfx_genl_rcv_msg+0x10/0x10 [ 621.880133][T17276] ? __pfx_nbd_genl_connect+0x10/0x10 [ 621.880163][T17276] netlink_rcv_skb+0x158/0x420 [ 621.880179][T17276] ? __pfx_genl_rcv_msg+0x10/0x10 [ 621.880198][T17276] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 621.880221][T17276] ? netlink_deliver_tap+0x1ae/0xd30 [ 621.880248][T17276] genl_rcv+0x28/0x40 [ 621.880263][T17276] netlink_unicast+0x5aa/0x870 [ 621.880281][T17276] ? __pfx_netlink_unicast+0x10/0x10 [ 621.880304][T17276] netlink_sendmsg+0x8c8/0xdd0 [ 621.880323][T17276] ? __pfx_netlink_sendmsg+0x10/0x10 [ 621.880341][T17276] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 621.880364][T17276] ____sys_sendmsg+0xa5d/0xc30 [ 621.880382][T17276] ? copy_msghdr_from_user+0x10a/0x160 [ 621.880405][T17276] ? __pfx_____sys_sendmsg+0x10/0x10 [ 621.880421][T17276] ? preempt_schedule_thunk+0x16/0x30 [ 621.880440][T17276] ? try_to_wake_up+0xa67/0x1860 [ 621.880463][T17276] ___sys_sendmsg+0x134/0x1d0 [ 621.880487][T17276] ? __pfx____sys_sendmsg+0x10/0x10 [ 621.880510][T17276] ? futex_private_hash_put+0x160/0x1b0 [ 621.880548][T17276] __sys_sendmsg+0x16d/0x220 [ 621.880571][T17276] ? __pfx___sys_sendmsg+0x10/0x10 [ 621.880594][T17276] ? __x64_sys_futex+0x1e0/0x4c0 [ 621.880622][T17276] do_syscall_64+0xcd/0xf80 [ 621.880640][T17276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.880656][T17276] RIP: 0033:0x7fdd1ff8f7c9 [ 621.880670][T17276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.880685][T17276] RSP: 002b:00007fdd20d86038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 621.880707][T17276] RAX: ffffffffffffffda RBX: 00007fdd201e5fa0 RCX: 00007fdd1ff8f7c9 [ 621.880718][T17276] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000002 [ 621.880728][T17276] RBP: 00007fdd20013f91 R08: 0000000000000000 R09: 0000000000000000 [ 621.880738][T17276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 621.880747][T17276] R13: 00007fdd201e6038 R14: 00007fdd201e5fa0 R15: 00007ffcef9934a8 [ 621.880768][T17276] [ 622.345852][ T9800] Bluetooth: hci3: command 0x0c1a tx timeout [ 622.424525][ T9814] Bluetooth: hci2: command 0x0c1a tx timeout [ 622.431857][ T9897] Bluetooth: hci4: command 0x0c1a tx timeout [ 622.443920][ T9800] Bluetooth: hci1: command 0x0c1a tx timeout [ 622.464758][T17276] nbd: failed to add new device [ 622.502195][T17288] futex_wake_op: syz.2.2485 tries to shift op by -2048; fix this program [ 622.528880][T17288] futex_wake_op: syz.2.2485 tries to shift op by -2048; fix this program [ 622.576867][ T9800] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 622.580498][T17288] 0x000000000001-0x000000020000 : "" [ 622.641236][T17288] ftl_cs: FTL header corrupt! [ 623.637905][T17314] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 623.651867][T17314] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 623.658506][T17314] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 623.664581][T17314] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 624.536545][T17329] FAULT_INJECTION: forcing a failure. [ 624.536545][T17329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.550975][T17329] CPU: 1 UID: 0 PID: 17329 Comm: syz.2.2495 Tainted: G L syzkaller #0 PREEMPT(full) [ 624.551020][T17329] Tainted: [L]=SOFTLOCKUP [ 624.551030][T17329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 624.551048][T17329] Call Trace: [ 624.551058][T17329] [ 624.551070][T17329] dump_stack_lvl+0x16c/0x1f0 [ 624.551105][T17329] should_fail_ex+0x512/0x640 [ 624.551146][T17329] _copy_from_user+0x2e/0xd0 [ 624.551180][T17329] vcs_write+0x2e7/0xdb0 [ 624.551226][T17329] ? __pfx_vcs_write+0x10/0x10 [ 624.551264][T17329] ? bpf_lsm_file_permission+0x9/0x10 [ 624.551293][T17329] ? security_file_permission+0x71/0x210 [ 624.551331][T17329] ? rw_verify_area+0xcf/0x6c0 [ 624.551361][T17329] ? __pfx_vcs_write+0x10/0x10 [ 624.551393][T17329] vfs_write+0x2a0/0x11d0 [ 624.551431][T17329] ? __pfx_vfs_write+0x10/0x10 [ 624.551462][T17329] ? find_held_lock+0x2b/0x80 [ 624.551496][T17329] ? __fget_files+0x204/0x3c0 [ 624.551549][T17329] ? __fget_files+0x20e/0x3c0 [ 624.551596][T17329] ksys_write+0x12a/0x250 [ 624.551632][T17329] ? __pfx_ksys_write+0x10/0x10 [ 624.551680][T17329] do_syscall_64+0xcd/0xf80 [ 624.551712][T17329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.551741][T17329] RIP: 0033:0x7fb2a0f8f7c9 [ 624.551764][T17329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.551791][T17329] RSP: 002b:00007fb2a1d69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 624.551818][T17329] RAX: ffffffffffffffda RBX: 00007fb2a11e5fa0 RCX: 00007fb2a0f8f7c9 [ 624.551837][T17329] RDX: 00000004fffffdf2 RSI: 0000000000000000 RDI: 0000000000000003 [ 624.551854][T17329] RBP: 00007fb2a1013f91 R08: 0000000000000000 R09: 0000000000000000 [ 624.551870][T17329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.551886][T17329] R13: 00007fb2a11e6038 R14: 00007fb2a11e5fa0 R15: 00007fffd21a0018 [ 624.551921][T17329] [ 625.163876][T17342] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 625.164079][T17342] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 625.164264][T17342] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 625.164440][T17342] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 625.524009][T17347] futex_wake_op: syz.1.2500 tries to shift op by -2048; fix this program [ 625.533502][T17347] futex_wake_op: syz.1.2500 tries to shift op by -2048; fix this program [ 625.568274][T17347] 0x000000000001-0x000000020000 : "" [ 625.610917][T17347] ftl_cs: FTL header corrupt! [ 625.918689][T17359] zswap: compressor not available [ 626.240170][T17368] FAULT_INJECTION: forcing a failure. [ 626.240170][T17368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 626.281635][T17368] CPU: 1 UID: 0 PID: 17368 Comm: syz.2.2505 Tainted: G L syzkaller #0 PREEMPT(full) [ 626.281685][T17368] Tainted: [L]=SOFTLOCKUP [ 626.281696][T17368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 626.281715][T17368] Call Trace: [ 626.281724][T17368] [ 626.281736][T17368] dump_stack_lvl+0x16c/0x1f0 [ 626.281772][T17368] should_fail_ex+0x512/0x640 [ 626.281815][T17368] _copy_from_iter+0x2a4/0x16c0 [ 626.281858][T17368] ? _copy_from_iter+0x161/0x16c0 [ 626.281895][T17368] ? __pfx__copy_from_iter+0x10/0x10 [ 626.281935][T17368] ? __pfx__copy_from_iter+0x10/0x10 [ 626.281980][T17368] copy_page_from_iter+0xde/0x180 [ 626.282021][T17368] skb_copy_datagram_from_iter+0x2a0/0x740 [ 626.282071][T17368] tun_get_user+0x1850/0x3cc0 [ 626.282123][T17368] ? __pfx_tun_get_user+0x10/0x10 [ 626.282157][T17368] ? try_to_wake_up+0xa67/0x1860 [ 626.282192][T17368] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 626.282242][T17368] ? find_held_lock+0x2b/0x80 [ 626.282277][T17368] ? tun_get+0x191/0x370 [ 626.282315][T17368] tun_chr_write_iter+0xdc/0x210 [ 626.282352][T17368] vfs_write+0x7d3/0x11d0 [ 626.282391][T17368] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 626.282433][T17368] ? __pfx_vfs_write+0x10/0x10 [ 626.282466][T17368] ? find_held_lock+0x2b/0x80 [ 626.282522][T17368] __x64_sys_pwrite64+0x1eb/0x250 [ 626.282560][T17368] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 626.282596][T17368] ? syscall_user_dispatch+0x78/0x140 [ 626.282648][T17368] do_syscall_64+0xcd/0xf80 [ 626.282681][T17368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.282709][T17368] RIP: 0033:0x7fb2a0f8f7c9 [ 626.282733][T17368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 626.282760][T17368] RSP: 002b:00007fb2a1d69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 626.282788][T17368] RAX: ffffffffffffffda RBX: 00007fb2a11e5fa0 RCX: 00007fb2a0f8f7c9 [ 626.282807][T17368] RDX: 000000000000fdef RSI: 0000200000000340 RDI: 00000000000000c8 [ 626.282825][T17368] RBP: 00007fb2a1013f91 R08: 0000000000000000 R09: 0000000000000000 [ 626.282844][T17368] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 626.282862][T17368] R13: 00007fb2a11e6038 R14: 00007fb2a11e5fa0 R15: 00007fffd21a0018 [ 626.282901][T17368] [ 626.902433][T17375] FAULT_INJECTION: forcing a failure. [ 626.902433][T17375] name fail_futex, interval 1, probability 0, space 0, times 0 [ 626.952321][T17375] CPU: 1 UID: 0 PID: 17375 Comm: syz.2.2507 Tainted: G L syzkaller #0 PREEMPT(full) [ 626.952361][T17375] Tainted: [L]=SOFTLOCKUP [ 626.952369][T17375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 626.952382][T17375] Call Trace: [ 626.952391][T17375] [ 626.952402][T17375] dump_stack_lvl+0x16c/0x1f0 [ 626.952435][T17375] should_fail_ex+0x512/0x640 [ 626.952474][T17375] get_futex_key+0x1d0/0x15f0 [ 626.952505][T17375] ? __lock_acquire+0x436/0x2890 [ 626.952529][T17375] ? __pfx_get_futex_key+0x10/0x10 [ 626.952560][T17375] ? lock_acquire+0x179/0x330 [ 626.952598][T17375] futex_wait_setup+0x9d/0x570 [ 626.952642][T17375] __futex_wait+0x193/0x2f0 [ 626.952678][T17375] ? __pfx___futex_wait+0x10/0x10 [ 626.952718][T17375] ? __pfx_futex_wake_mark+0x10/0x10 [ 626.952756][T17375] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 626.952786][T17375] ? __hrtimer_setup+0x176/0x280 [ 626.952820][T17375] ? ktime_add_safe+0x60/0x70 [ 626.952855][T17375] futex_wait+0xe8/0x380 [ 626.952888][T17375] ? __pfx_futex_wait+0x10/0x10 [ 626.952918][T17375] ? __lock_acquire+0x436/0x2890 [ 626.952946][T17375] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 626.952990][T17375] do_futex+0x229/0x350 [ 626.953020][T17375] ? __pfx_do_futex+0x10/0x10 [ 626.953046][T17375] ? rcu_is_watching+0x12/0xc0 [ 626.953078][T17375] ? ktime_get+0x200/0x310 [ 626.953100][T17375] ? lockdep_hardirqs_on+0x7c/0x110 [ 626.953124][T17375] ? read_tsc+0x9/0x20 [ 626.953149][T17375] __x64_sys_futex+0x1e0/0x4c0 [ 626.953168][T17375] ? __pfx___x64_sys_futex+0x10/0x10 [ 626.953192][T17375] do_syscall_64+0xcd/0xf80 [ 626.953209][T17375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.953224][T17375] RIP: 0033:0x7fb2a0f8f7c9 [ 626.953238][T17375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 626.953252][T17375] RSP: 002b:00007fffd21a0178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 626.953267][T17375] RAX: ffffffffffffffda RBX: 000000000009932c RCX: 00007fb2a0f8f7c9 [ 626.953277][T17375] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb2a11e5fac [ 626.953286][T17375] RBP: 0000000000000032 R08: 00007fb2a1d6a000 R09: 0000001dd21a046f [ 626.953295][T17375] R10: 00007fffd21a0270 R11: 0000000000000246 R12: 00007fb2a11e5fac [ 626.953305][T17375] R13: 00007fffd21a0270 R14: 000000000009935e R15: 00007fffd21a0290 [ 626.953323][T17375] [ 627.218592][ T9814] Bluetooth: hci2: command 0x0c1a tx timeout [ 627.224855][ T9800] Bluetooth: hci1: command 0x0c1a tx timeout [ 627.231052][T10458] Bluetooth: hci3: command 0x0c1a tx timeout [ 627.237284][T17343] Bluetooth: hci4: command 0x0c1a tx timeout [ 628.505258][T17388] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 628.517324][T17388] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 628.545173][T17388] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 628.556237][T17388] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 628.787117][T17396] FAULT_INJECTION: forcing a failure. [ 628.787117][T17396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 628.800307][T17396] CPU: 0 UID: 0 PID: 17396 Comm: syz.3.2508 Tainted: G L syzkaller #0 PREEMPT(full) [ 628.800348][T17396] Tainted: [L]=SOFTLOCKUP [ 628.800357][T17396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 628.800372][T17396] Call Trace: [ 628.800380][T17396] [ 628.800389][T17396] dump_stack_lvl+0x16c/0x1f0 [ 628.800422][T17396] should_fail_ex+0x512/0x640 [ 628.800461][T17396] _copy_from_user+0x2e/0xd0 [ 628.800494][T17396] get_itimerspec64+0x15b/0x2d0 [ 628.800523][T17396] ? __pfx_get_itimerspec64+0x10/0x10 [ 628.800554][T17396] ? _copy_from_user+0x59/0xd0 [ 628.800594][T17396] __x64_sys_timerfd_settime+0x15f/0x280 [ 628.800629][T17396] ? __pfx___x64_sys_timerfd_settime+0x10/0x10 [ 628.800680][T17396] do_syscall_64+0xcd/0xf80 [ 628.800708][T17396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.800734][T17396] RIP: 0033:0x7fa8f8f8f7c9 [ 628.800753][T17396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.800773][T17396] RSP: 002b:00007fa8f9d4a038 EFLAGS: 00000246 ORIG_RAX: 000000000000011e [ 628.800797][T17396] RAX: ffffffffffffffda RBX: 00007fa8f91e5fa0 RCX: 00007fa8f8f8f7c9 [ 628.800815][T17396] RDX: 0000200000000000 RSI: 0000000000000008 RDI: ffffffffffffffff [ 628.800834][T17396] RBP: 00007fa8f9013f91 R08: 0000000000000000 R09: 0000000000000000 [ 628.800852][T17396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 628.800870][T17396] R13: 00007fa8f91e6038 R14: 00007fa8f91e5fa0 R15: 00007ffd5c91e068 [ 628.800908][T17396] [ 629.042240][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.055327][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.193111][T17405] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2512'. [ 630.252207][T17425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2518'. [ 630.559697][T10458] Bluetooth: hci3: command 0x0c1a tx timeout [ 630.565912][T17343] Bluetooth: hci4: command 0x0c1a tx timeout [ 630.573758][ T9814] Bluetooth: hci2: command 0x0c1a tx timeout [ 630.624989][ T9814] Bluetooth: hci1: command 0x0c1a tx timeout [ 632.069504][T17469] FAULT_INJECTION: forcing a failure. [ 632.069504][T17469] name failslab, interval 1, probability 0, space 0, times 0 [ 632.114276][T17469] CPU: 1 UID: 0 PID: 17469 Comm: syz.2.2527 Tainted: G L syzkaller #0 PREEMPT(full) [ 632.114319][T17469] Tainted: [L]=SOFTLOCKUP [ 632.114329][T17469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 632.114346][T17469] Call Trace: [ 632.114356][T17469] [ 632.114367][T17469] dump_stack_lvl+0x16c/0x1f0 [ 632.114404][T17469] should_fail_ex+0x512/0x640 [ 632.114441][T17469] ? kmem_cache_alloc_noprof+0x62/0x770 [ 632.114479][T17469] should_failslab+0xc2/0x120 [ 632.114517][T17469] kmem_cache_alloc_noprof+0x83/0x770 [ 632.114547][T17469] ? alloc_empty_file+0x55/0x1e0 [ 632.114580][T17469] ? alloc_empty_file+0x55/0x1e0 [ 632.114605][T17469] alloc_empty_file+0x55/0x1e0 [ 632.114634][T17469] alloc_file_pseudo+0x13a/0x230 [ 632.114665][T17469] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 632.114694][T17469] ? security_inode_init_security_anon+0x79/0x240 [ 632.114740][T17469] __anon_inode_getfile+0xe8/0x280 [ 632.114772][T17469] new_userfaultfd+0x25e/0x4d0 [ 632.114807][T17469] __x64_sys_userfaultfd+0x4b/0xb0 [ 632.114845][T17469] do_syscall_64+0xcd/0xf80 [ 632.114877][T17469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.114905][T17469] RIP: 0033:0x7fb2a0f8f7c9 [ 632.114927][T17469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.114955][T17469] RSP: 002b:00007fb2a1d48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 632.114992][T17469] RAX: ffffffffffffffda RBX: 00007fb2a11e6090 RCX: 00007fb2a0f8f7c9 [ 632.115012][T17469] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 632.115029][T17469] RBP: 00007fb2a1013f91 R08: 0000000000000000 R09: 0000000000000000 [ 632.115047][T17469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.115064][T17469] R13: 00007fb2a11e6128 R14: 00007fb2a11e6090 R15: 00007fffd21a0018 [ 632.115103][T17469] [ 633.004474][T17428] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2517'. [ 633.024741][T17428] sd 0:0:1:0: PR command failed: 1026 [ 633.030207][T17428] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 633.040777][T17428] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 633.312742][T17487] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 633.561216][T17488] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 634.507753][T17507] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 634.528006][T17507] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 634.534097][T17507] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 634.551130][T17507] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 635.901884][T17524] ptrace attach of "./syz-executor exec"[17528] was attempted by "./syz-executor exec"[17524] [ 636.527559][ T9814] Bluetooth: hci3: command 0x0c1a tx timeout [ 636.597988][T10458] Bluetooth: hci4: command 0x0c1a tx timeout [ 636.604084][T17343] Bluetooth: hci2: command 0x0c1a tx timeout [ 636.618037][ T9814] Bluetooth: hci1: command 0x0c1a tx timeout [ 636.635400][T17539] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 636.668211][T17539] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 637.745941][T17558] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2548'. [ 637.758877][T17558] sd 0:0:1:0: PR command failed: 1026 [ 637.764472][T17558] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 637.777131][T17558] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 638.161233][T17575] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 638.167326][T17575] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 638.175910][T17575] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 638.212741][T17575] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 638.885326][T17593] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 638.917490][T17593] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 639.272195][T17594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2555'. [ 639.414777][T17601] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 639.428987][T17601] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 639.524889][T17601] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 639.539067][T17601] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 639.766123][T17606] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2561'. [ 641.456019][ T9814] Bluetooth: hci3: command 0x0c1a tx timeout [ 641.462109][T17343] Bluetooth: hci4: command 0x0c1a tx timeout [ 641.534972][ T9814] Bluetooth: hci2: command 0x0c1a tx timeout [ 641.541107][T17343] Bluetooth: hci1: command 0x0c1a tx timeout [ 641.794206][T17631] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 641.800401][T17631] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 641.863678][T17631] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 641.869896][T17631] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 641.938048][T17638] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 641.950986][T17638] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 642.085468][T17641] Invalid ELF header magic: != ELF [ 643.078008][T17651] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 643.172105][T17651] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 643.298713][T17651] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 643.333011][T17651] Bluetooth: hci1: Opcode 0x0c1a failed: -4 syzkaller syzkaller login: [ 644.318350][T17678] HfR: entered promiscuous mode [ 644.508297][T17683] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 644.606302][T17683] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 645.128838][T17343] Bluetooth: hci3: command 0x0c1a tx timeout [ 645.196612][T17343] Bluetooth: hci4: command 0x0c1a tx timeout [ 645.356032][ T9814] Bluetooth: hci2: command 0x0c1a tx timeout [ 645.362122][T17343] Bluetooth: hci1: command 0x0c1a tx timeout [ 645.827223][T17708] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 645.840364][T17708] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 645.872633][T17708] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 645.890918][T17708] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 646.847931][T17698] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2585'. [ 647.241894][T17741] FAULT_INJECTION: forcing a failure. [ 647.241894][T17741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 647.302204][T17741] CPU: 1 UID: 0 PID: 17741 Comm: syz.2.2594 Tainted: G L syzkaller #0 PREEMPT(full) [ 647.302254][T17741] Tainted: [L]=SOFTLOCKUP [ 647.302264][T17741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 647.302280][T17741] Call Trace: [ 647.302289][T17741] [ 647.302300][T17741] dump_stack_lvl+0x16c/0x1f0 [ 647.302333][T17741] should_fail_ex+0x512/0x640 [ 647.302373][T17741] _copy_from_user+0x2e/0xd0 [ 647.302409][T17741] get_timespec64+0x8b/0x1b0 [ 647.302435][T17741] ? __pfx_get_timespec64+0x10/0x10 [ 647.302464][T17741] ? count_memcg_events_mm.constprop.0+0x104/0x2a0 [ 647.302504][T17741] __x64_sys_clock_nanosleep+0x1ce/0x4a0 [ 647.302545][T17741] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 647.302592][T17741] do_syscall_64+0xcd/0xf80 [ 647.302627][T17741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.302654][T17741] RIP: 0033:0x7fb2a0fc2085 [ 647.302676][T17741] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 647.302702][T17741] RSP: 002b:00007fffd21a0110 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 647.302727][T17741] RAX: ffffffffffffffda RBX: 00007fb2a11e5fa0 RCX: 00007fb2a0fc2085 [ 647.302746][T17741] RDX: 00007fffd21a0150 RSI: 0000000000000000 RDI: 0000000000000000 [ 647.302762][T17741] RBP: 00007fb2a11e7da0 R08: 0000000000000000 R09: 00007fb2a1d6a000 [ 647.302780][T17741] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000009e4ec [ 647.302796][T17741] R13: 00007fb2a11e6180 R14: ffffffffffffffff R15: 00007fffd21a0290 [ 647.302833][T17741] [ 647.824381][T17343] Bluetooth: hci3: command 0x0c1a tx timeout [ 647.906187][T10458] Bluetooth: hci4: command 0x0c1a tx timeout [ 647.912271][T17343] Bluetooth: hci1: command 0x0c1a tx timeout [ 647.918411][ T9814] Bluetooth: hci2: command 0x0c1a tx timeout [ 648.050414][T17760] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 648.064929][T17761] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2596'. [ 648.083225][T17755] binder: 17754:17755 ioctl c018620c 0 returned -1 [ 648.091713][T17760] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 649.093764][T17776] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 649.148666][T17777] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 649.470538][T17778] FAULT_INJECTION: forcing a failure. [ 649.470538][T17778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 649.666672][T17778] CPU: 1 UID: 0 PID: 17778 Comm: syz.1.2609 Tainted: G L syzkaller #0 PREEMPT(full) [ 649.666698][T17778] Tainted: [L]=SOFTLOCKUP [ 649.666704][T17778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 649.666715][T17778] Call Trace: [ 649.666721][T17778] [ 649.666727][T17778] dump_stack_lvl+0x16c/0x1f0 [ 649.666751][T17778] should_fail_ex+0x512/0x640 [ 649.666775][T17778] _copy_from_user+0x2e/0xd0 [ 649.666796][T17778] get_timespec64+0x8b/0x1b0 [ 649.666811][T17778] ? __pfx_get_timespec64+0x10/0x10 [ 649.666828][T17778] ? common_nsleep+0xa1/0xd0 [ 649.666847][T17778] __x64_sys_clock_nanosleep+0x1ce/0x4a0 [ 649.666885][T17778] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 649.666931][T17778] do_syscall_64+0xcd/0xf80 [ 649.666958][T17778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.666989][T17778] RIP: 0033:0x7fdd1ffc2085 [ 649.667003][T17778] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 649.667017][T17778] RSP: 002b:00007ffcef9935a0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 649.667032][T17778] RAX: ffffffffffffffda RBX: 00007fdd201e5fa0 RCX: 00007fdd1ffc2085 [ 649.667043][T17778] RDX: 00007ffcef9935e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 649.667052][T17778] RBP: 00007fdd201e7da0 R08: 0000000000000000 R09: 00007fdd20d87000 [ 649.667064][T17778] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000009ee06 [ 649.667073][T17778] R13: 00007fdd201e6180 R14: ffffffffffffffff R15: 00007ffcef993720 [ 649.667093][T17778] [ 650.276850][T17782] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 650.313126][T17782] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 650.349326][T17782] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 650.382601][T17782] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 651.239814][T17814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2610'. [ 651.613806][T17822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2612'. [ 652.128540][ T9814] Bluetooth: hci3: command 0x0c1a tx timeout [ 652.144042][T17830] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 652.159259][T17830] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 652.363085][ T9814] Bluetooth: hci2: command 0x0c1a tx timeout [ 652.445207][ T9814] Bluetooth: hci1: command 0x0c1a tx timeout [ 652.460142][T17830] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 652.467407][T17830] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 653.010600][T17856] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 653.045824][T17856] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 653.218315][T17857] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2618'. [ 653.747471][T17843] kexec: Could not allocate control_code_buffer [ 654.194638][T17343] Bluetooth: hci3: command 0x0c1a tx timeout [ 654.200722][ T9814] Bluetooth: hci4: command 0x0c1a tx timeout [ 654.512987][T17343] Bluetooth: hci2: command 0x0c1a tx timeout [ 654.519310][ T9814] Bluetooth: hci1: command 0x0c1a tx timeout [ 654.640855][T17343] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 654.654596][T17343] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 654.663681][T17343] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 654.673978][T17343] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 654.684732][T17343] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 655.320143][T17884] chnl_net:caif_netlink_parms(): no params data found [ 655.617020][T17884] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.650234][T17884] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.682990][T17884] bridge_slave_0: entered allmulticast mode [ 655.704491][T17884] bridge_slave_0: entered promiscuous mode [ 655.793133][T17884] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.812005][T17884] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.837084][T17884] bridge_slave_1: entered allmulticast mode [ 655.845501][T17884] bridge_slave_1: entered promiscuous mode [ 655.902568][T17884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 655.918594][T17884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.003574][T17884] team0: Port device team_slave_0 added [ 656.018956][T17884] team0: Port device team_slave_1 added [ 656.370151][T17884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 656.377350][T17884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.436824][T17884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.596658][T11300] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.742830][T17343] Bluetooth: hci0: command tx timeout [ 656.765435][T17884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.772914][T17884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.832355][T17884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.928809][T11300] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.990586][T17917] random: crng reseeded on system resumption [ 657.164034][T11300] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.265013][T17884] hsr_slave_0: entered promiscuous mode [ 657.282895][T17884] hsr_slave_1: entered promiscuous mode [ 657.754781][T11300] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.690848][T17948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2640'. [ 658.706807][T11300] bridge_slave_1: left allmulticast mode [ 658.712583][T11300] bridge_slave_1: left promiscuous mode [ 658.722651][T11300] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.739593][T11300] bridge_slave_0: left allmulticast mode [ 658.747077][T11300] bridge_slave_0: left promiscuous mode [ 658.759083][T11300] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.813267][T17343] Bluetooth: hci0: command tx timeout [ 659.080971][T17957] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2644'. [ 660.291050][T11300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 660.324387][T11300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.379606][T11300] bond0 (unregistering): Released all slaves [ 660.882992][T17343] Bluetooth: hci0: command tx timeout [ 661.866372][T17884] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 661.924870][T17884] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 661.956790][T17884] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 662.036307][T17884] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 662.711382][T11300] hsr_slave_0: left promiscuous mode [ 662.736781][T11300] hsr_slave_1: left promiscuous mode [ 662.804535][T11300] veth1_macvtap: left promiscuous mode [ 662.829176][T11300] veth0_macvtap: left promiscuous mode [ 662.844685][T11300] veth0_vlan: left promiscuous mode [ 662.953290][T17343] Bluetooth: hci0: command tx timeout [ 663.954017][T18029] binder: 18026:18029 ioctl c018620c 0 returned -22 [ 664.106828][T18027] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2654'. [ 664.461478][T11300] team0 (unregistering): Port device team_slave_1 removed [ 665.187341][T17884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.293116][T17884] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.331966][T14367] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.339145][T14367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.366048][T14369] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.373359][T14369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.257679][T17884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.381446][T17884] veth0_vlan: entered promiscuous mode [ 666.451194][T17884] veth1_vlan: entered promiscuous mode [ 666.562735][T17884] veth0_macvtap: entered promiscuous mode [ 666.618921][T17884] veth1_macvtap: entered promiscuous mode [ 666.691355][T17884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.918610][T17884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.995323][T10193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.020089][T18058] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2659'. [ 667.029081][T10193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.043784][T10193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.059368][T10193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.465999][T14369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.483241][T14369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.622283][T11300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.630158][T11300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.652209][T18065] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 667.730748][T18065] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 667.739796][T18065] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 667.755747][T18065] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 667.786200][T18065] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 667.938317][T18065] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 668.065937][T18077] tipc: Publication distribution failure [ 669.503571][T18102] random: crng reseeded on system resumption [ 669.587406][T18103] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2669'. [ 669.651872][T17343] Bluetooth: hci4: command 0x0c1a tx timeout [ 669.808153][T10458] Bluetooth: hci2: command 0x0c1a tx timeout [ 669.816405][ T9814] Bluetooth: hci1: command 0x0c1a tx timeout [ 669.822500][T17343] Bluetooth: hci0: command 0x0c1a tx timeout [ 670.751192][T18115] binder: 18114:18115 ioctl c018620c 0 returned -1 [ 670.811251][T18115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2672'. [ 671.009197][T18107] KVM: debugfs: duplicate directory 18107-4 [ 671.872130][T10458] Bluetooth: hci0: command 0x0c1a tx timeout [ 672.721737][T18145] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2679'. [ 673.111688][T18152] FAULT_INJECTION: forcing a failure. [ 673.111688][T18152] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 673.237970][T18152] CPU: 0 UID: 0 PID: 18152 Comm: syz.1.2681 Tainted: G L syzkaller #0 PREEMPT(full) [ 673.238000][T18152] Tainted: [L]=SOFTLOCKUP [ 673.238005][T18152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 673.238015][T18152] Call Trace: [ 673.238021][T18152] [ 673.238028][T18152] dump_stack_lvl+0x16c/0x1f0 [ 673.238056][T18152] should_fail_ex+0x512/0x640 [ 673.238081][T18152] should_fail_alloc_page+0xe7/0x130 [ 673.238106][T18152] prepare_alloc_pages+0x401/0x670 [ 673.238128][T18152] ? stack_depot_save_flags+0x29/0x9b0 [ 673.238149][T18152] ? rcu_is_watching+0x12/0xc0 [ 673.238171][T18152] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 673.238190][T18152] ? kasan_save_stack+0x42/0x60 [ 673.238210][T18152] ? kasan_save_track+0x14/0x30 [ 673.238227][T18152] ? __kasan_slab_alloc+0x89/0x90 [ 673.238246][T18152] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 673.238263][T18152] ? ptlock_alloc+0x1f/0x70 [ 673.238276][T18152] ? pte_alloc_one+0x84/0x3d0 [ 673.238295][T18152] ? __pte_alloc+0x6d/0x3f0 [ 673.238315][T18152] ? copy_page_range+0x3f3e/0x6780 [ 673.238328][T18152] ? dup_mmap+0xbea/0x20e0 [ 673.238349][T18152] ? copy_process+0x3b9f/0x7430 [ 673.238369][T18152] ? kernel_clone+0xfc/0x910 [ 673.238389][T18152] ? __do_sys_clone+0xce/0x120 [ 673.238409][T18152] ? do_syscall_64+0xcd/0xf80 [ 673.238424][T18152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.238443][T18152] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 673.238464][T18152] ? look_up_lock_class+0x59/0x130 [ 673.238483][T18152] ? __lock_acquire+0x436/0x2890 [ 673.238499][T18152] ? __lock_acquire+0x436/0x2890 [ 673.238511][T18152] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 673.238534][T18152] ? policy_nodemask+0xea/0x4e0 [ 673.238558][T18152] alloc_pages_mpol+0x1fb/0x550 [ 673.238581][T18152] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 673.238608][T18152] alloc_pages_noprof+0x131/0x390 [ 673.238630][T18152] pte_alloc_one+0x1e/0x3d0 [ 673.238651][T18152] __pte_alloc+0x6d/0x3f0 [ 673.238670][T18152] ? __pfx___pte_alloc+0x10/0x10 [ 673.238690][T18152] ? __pfx___might_resched+0x10/0x10 [ 673.238709][T18152] ? copy_page_range+0x22fb/0x6780 [ 673.238727][T18152] copy_page_range+0x3f3e/0x6780 [ 673.238764][T18152] ? __pfx_copy_page_range+0x10/0x10 [ 673.238786][T18152] ? __pfx___might_resched+0x10/0x10 [ 673.238805][T18152] ? __pfx_mas_store+0x10/0x10 [ 673.238826][T18152] ? dup_mmap+0xba4/0x20e0 [ 673.238847][T18152] ? down_write+0x14d/0x200 [ 673.238867][T18152] ? up_write+0x282/0x4e0 [ 673.238885][T18152] dup_mmap+0xbea/0x20e0 [ 673.238914][T18152] ? __pfx_dup_mmap+0x10/0x10 [ 673.238954][T18152] copy_process+0x3b9f/0x7430 [ 673.238975][T18152] ? preempt_schedule_thunk+0x16/0x30 [ 673.239000][T18152] ? __pfx_copy_process+0x10/0x10 [ 673.239021][T18152] ? find_held_lock+0x2b/0x80 [ 673.239044][T18152] ? futex_private_hash_put+0x160/0x1b0 [ 673.239069][T18152] kernel_clone+0xfc/0x910 [ 673.239092][T18152] ? __pfx_futex_wake+0x10/0x10 [ 673.239113][T18152] ? __pfx_kernel_clone+0x10/0x10 [ 673.239147][T18152] __do_sys_clone+0xce/0x120 [ 673.239169][T18152] ? __pfx___do_sys_clone+0x10/0x10 [ 673.239191][T18152] ? __sys_sendmsg+0x18c/0x220 [ 673.239222][T18152] ? xfd_validate_state+0x61/0x180 [ 673.239243][T18152] do_syscall_64+0xcd/0xf80 [ 673.239261][T18152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.239275][T18152] RIP: 0033:0x7fef6ed8f7c9 [ 673.239289][T18152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 673.239308][T18152] RSP: 002b:00007fef6fc4cfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 673.239323][T18152] RAX: ffffffffffffffda RBX: 00007fef6efe6180 RCX: 00007fef6ed8f7c9 [ 673.239334][T18152] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 673.239344][T18152] RBP: 00007fef6ee13f91 R08: 0000000000000000 R09: 0000000000000000 [ 673.239353][T18152] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 673.239363][T18152] R13: 00007fef6efe6218 R14: 00007fef6efe6180 R15: 00007ffc63489248 [ 673.239385][T18152] [ 673.941701][T10458] Bluetooth: hci0: command 0x0c1a tx timeout [ 674.065813][T18162] netlink: 'syz.2.2684': attribute type 11 has an invalid length. [ 674.107587][T18162] netlink: 'syz.2.2684': attribute type 11 has an invalid length. [ 674.148729][T18162] netlink: 'syz.2.2684': attribute type 11 has an invalid length. [ 674.239137][T18162] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input98 [ 675.106331][T18182] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 675.244499][T18184] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 675.851387][T18194] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2689'. [ 676.093245][T18196] FAULT_INJECTION: forcing a failure. [ 676.093245][T18196] name failslab, interval 1, probability 0, space 0, times 0 [ 676.150427][T18196] CPU: 1 UID: 0 PID: 18196 Comm: syz.1.2690 Tainted: G L syzkaller #0 PREEMPT(full) [ 676.150471][T18196] Tainted: [L]=SOFTLOCKUP [ 676.150480][T18196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 676.150497][T18196] Call Trace: [ 676.150506][T18196] [ 676.150517][T18196] dump_stack_lvl+0x16c/0x1f0 [ 676.150549][T18196] should_fail_ex+0x512/0x640 [ 676.150585][T18196] ? kmem_cache_alloc_noprof+0x62/0x770 [ 676.150619][T18196] should_failslab+0xc2/0x120 [ 676.150656][T18196] kmem_cache_alloc_noprof+0x83/0x770 [ 676.150685][T18196] ? __kernfs_new_node+0xd2/0x990 [ 676.150718][T18196] ? __kernfs_new_node+0xd2/0x990 [ 676.150743][T18196] __kernfs_new_node+0xd2/0x990 [ 676.150773][T18196] ? __pfx___kernfs_new_node+0x10/0x10 [ 676.150807][T18196] ? find_held_lock+0x2b/0x80 [ 676.150838][T18196] ? kernfs_root+0xee/0x2a0 [ 676.150876][T18196] kernfs_new_node+0x13c/0x1e0 [ 676.150917][T18196] __kernfs_create_file+0x53/0x350 [ 676.150962][T18196] sysfs_add_file_mode_ns+0x207/0x3c0 [ 676.151001][T18196] sysfs_merge_group+0x1aa/0x340 [ 676.151030][T18196] ? __pfx_sysfs_merge_group+0x10/0x10 [ 676.151067][T18196] ? __pfx_dev_add_physical_location+0x10/0x10 [ 676.151095][T18196] ? bus_to_subsys+0x131/0x160 [ 676.151135][T18196] dpm_sysfs_add+0x237/0x280 [ 676.151163][T18196] device_add+0x9cc/0x1980 [ 676.151196][T18196] ? __pfx_device_add+0x10/0x10 [ 676.151221][T18196] ? lockdep_init_map_type+0x5c/0x270 [ 676.151255][T18196] ? __init_waitqueue_head+0xca/0x150 [ 676.151297][T18196] rfkill_register+0x1ad/0xb40 [ 676.151332][T18196] nfc_register_device+0x11f/0x410 [ 676.151357][T18196] nci_register_device+0x7f1/0xb80 [ 676.151389][T18196] ? __pfx_nci_register_device+0x10/0x10 [ 676.151424][T18196] ? lockdep_init_map_type+0x5c/0x270 [ 676.151451][T18196] virtual_ncidev_open+0x141/0x220 [ 676.151479][T18196] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 676.151504][T18196] misc_open+0x26d/0x450 [ 676.151534][T18196] ? __pfx_misc_open+0x10/0x10 [ 676.151563][T18196] chrdev_open+0x234/0x6a0 [ 676.151593][T18196] ? __pfx_apparmor_file_open+0x10/0x10 [ 676.151621][T18196] ? __pfx_chrdev_open+0x10/0x10 [ 676.151653][T18196] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 676.151691][T18196] do_dentry_open+0x748/0x1590 [ 676.151720][T18196] ? __pfx_chrdev_open+0x10/0x10 [ 676.151759][T18196] vfs_open+0x82/0x3f0 [ 676.151784][T18196] path_openat+0x2078/0x3140 [ 676.151824][T18196] ? __pfx_path_openat+0x10/0x10 [ 676.151868][T18196] do_filp_open+0x20b/0x470 [ 676.151900][T18196] ? __pfx_do_filp_open+0x10/0x10 [ 676.151952][T18196] ? alloc_fd+0x471/0x7d0 [ 676.151991][T18196] do_sys_openat2+0x11f/0x280 [ 676.152013][T18196] ? __pfx_do_sys_openat2+0x10/0x10 [ 676.152048][T18196] __x64_sys_openat+0x174/0x210 [ 676.152072][T18196] ? __pfx___x64_sys_openat+0x10/0x10 [ 676.152118][T18196] do_syscall_64+0xcd/0xf80 [ 676.152150][T18196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.152173][T18196] RIP: 0033:0x7fef6ed8f7c9 [ 676.152194][T18196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 676.152215][T18196] RSP: 002b:00007fef6fc8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 676.152237][T18196] RAX: ffffffffffffffda RBX: 00007fef6efe5fa0 RCX: 00007fef6ed8f7c9 [ 676.152253][T18196] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 676.152268][T18196] RBP: 00007fef6ee13f91 R08: 0000000000000000 R09: 0000000000000000 [ 676.152282][T18196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 676.152296][T18196] R13: 00007fef6efe6038 R14: 00007fef6efe5fa0 R15: 00007ffc63489248 [ 676.152328][T18196] [ 677.043931][T18212] random: crng reseeded on system resumption [ 677.738372][T18231] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 677.772905][T18231] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 677.881942][T18236] FAULT_INJECTION: forcing a failure. [ 677.881942][T18236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 677.895604][T18236] CPU: 1 UID: 0 PID: 18236 Comm: syz.1.2701 Tainted: G L syzkaller #0 PREEMPT(full) [ 677.895630][T18236] Tainted: [L]=SOFTLOCKUP [ 677.895637][T18236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 677.895646][T18236] Call Trace: [ 677.895652][T18236] [ 677.895658][T18236] dump_stack_lvl+0x16c/0x1f0 [ 677.895680][T18236] should_fail_ex+0x512/0x640 [ 677.895705][T18236] _copy_to_user+0x32/0xd0 [ 677.895729][T18236] put_timespec64+0xb5/0x120 [ 677.895744][T18236] ? __pfx_put_timespec64+0x10/0x10 [ 677.895771][T18236] ? posix_cpu_clock_get+0x13e/0x340 [ 677.895796][T18236] __x64_sys_clock_gettime+0x1d3/0x270 [ 677.895818][T18236] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 677.895841][T18236] ? rcu_is_watching+0x12/0xc0 [ 677.895863][T18236] do_syscall_64+0xcd/0xf80 [ 677.895880][T18236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.895895][T18236] RIP: 0033:0x7fef6ed8f7c9 [ 677.895908][T18236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 677.895923][T18236] RSP: 002b:00007fef6fc6e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 677.895938][T18236] RAX: ffffffffffffffda RBX: 00007fef6efe6090 RCX: 00007fef6ed8f7c9 [ 677.895948][T18236] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000002 [ 677.895958][T18236] RBP: 00007fef6ee13f91 R08: 0000000000000000 R09: 0000000000000000 [ 677.895967][T18236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 677.895976][T18236] R13: 00007fef6efe6128 R14: 00007fef6efe6090 R15: 00007ffc63489248 [ 677.895995][T18236] [ 678.426745][T18247] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 678.433702][T18247] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 678.821049][T18255] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 678.978695][T18269] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 679.008812][T18269] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 679.581997][T18253] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 679.600370][T18253] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 679.608846][T18253] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 679.618503][T18253] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 680.212538][T18299] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 680.261199][T18299] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 680.287109][T18300] FAULT_INJECTION: forcing a failure. [ 680.287109][T18300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 680.314830][T18300] CPU: 1 UID: 0 PID: 18300 Comm: syz.2.2718 Tainted: G L syzkaller #0 PREEMPT(full) [ 680.314874][T18300] Tainted: [L]=SOFTLOCKUP [ 680.314892][T18300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 680.314908][T18300] Call Trace: [ 680.314917][T18300] [ 680.314927][T18300] dump_stack_lvl+0x16c/0x1f0 [ 680.314961][T18300] should_fail_ex+0x512/0x640 [ 680.315002][T18300] _copy_to_user+0x32/0xd0 [ 680.315043][T18300] put_timespec64+0xb5/0x120 [ 680.315070][T18300] ? __pfx_put_timespec64+0x10/0x10 [ 680.315100][T18300] ? posix_cpu_clock_get+0x13e/0x340 [ 680.315143][T18300] __x64_sys_clock_gettime+0x1d3/0x270 [ 680.315178][T18300] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 680.315218][T18300] ? rcu_is_watching+0x12/0xc0 [ 680.315254][T18300] do_syscall_64+0xcd/0xf80 [ 680.315285][T18300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.315311][T18300] RIP: 0033:0x7fb2a0f8f7c9 [ 680.315333][T18300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 680.315359][T18300] RSP: 002b:00007fb2a1d48038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 680.315385][T18300] RAX: ffffffffffffffda RBX: 00007fb2a11e6090 RCX: 00007fb2a0f8f7c9 [ 680.315403][T18300] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000002 [ 680.315419][T18300] RBP: 00007fb2a1013f91 R08: 0000000000000000 R09: 0000000000000000 [ 680.315433][T18300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 680.315449][T18300] R13: 00007fb2a11e6128 R14: 00007fb2a11e6090 R15: 00007fffd21a0018 [ 680.315484][T18300] [ 680.486030][T18301] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 681.187287][T10458] Bluetooth: hci4: command 0x0c1a tx timeout [ 681.676821][T17343] Bluetooth: hci2: command 0x0c1a tx timeout [ 681.683021][ T9814] Bluetooth: hci1: command 0x0c1a tx timeout [ 681.689114][T10458] Bluetooth: hci0: command 0x0c1a tx timeout [ 681.885941][T18329] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 681.906545][T18329] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 682.320343][T18319] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 682.395521][T18319] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 682.415675][T18319] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 682.422425][T18319] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 682.481271][T18334] FAULT_INJECTION: forcing a failure. [ 682.481271][T18334] name failslab, interval 1, probability 0, space 0, times 0 [ 682.541051][T18334] CPU: 0 UID: 0 PID: 18334 Comm: syz.2.2726 Tainted: G L syzkaller #0 PREEMPT(full) [ 682.541099][T18334] Tainted: [L]=SOFTLOCKUP [ 682.541109][T18334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 682.541126][T18334] Call Trace: [ 682.541137][T18334] [ 682.541148][T18334] dump_stack_lvl+0x16c/0x1f0 [ 682.541185][T18334] should_fail_ex+0x512/0x640 [ 682.541222][T18334] ? kmem_cache_alloc_noprof+0x62/0x770 [ 682.541260][T18334] should_failslab+0xc2/0x120 [ 682.541300][T18334] kmem_cache_alloc_noprof+0x83/0x770 [ 682.541334][T18334] ? __kernfs_new_node+0xd2/0x990 [ 682.541373][T18334] ? __kernfs_new_node+0xd2/0x990 [ 682.541402][T18334] __kernfs_new_node+0xd2/0x990 [ 682.541437][T18334] ? __pfx___kernfs_new_node+0x10/0x10 [ 682.541476][T18334] ? find_held_lock+0x2b/0x80 [ 682.541510][T18334] ? kernfs_root+0xee/0x2a0 [ 682.541547][T18334] kernfs_new_node+0x13c/0x1e0 [ 682.541592][T18334] __kernfs_create_file+0x53/0x350 [ 682.541639][T18334] sysfs_add_file_mode_ns+0x207/0x3c0 [ 682.541679][T18334] sysfs_merge_group+0x1aa/0x340 [ 682.541713][T18334] ? __pfx_sysfs_merge_group+0x10/0x10 [ 682.541760][T18334] ? __pfx_dev_add_physical_location+0x10/0x10 [ 682.541796][T18334] ? bus_to_subsys+0x131/0x160 [ 682.541833][T18334] dpm_sysfs_add+0x237/0x280 [ 682.541862][T18334] device_add+0x9cc/0x1980 [ 682.541898][T18334] ? __pfx_device_add+0x10/0x10 [ 682.541925][T18334] ? lockdep_init_map_type+0x5c/0x270 [ 682.541954][T18334] ? __init_waitqueue_head+0xca/0x150 [ 682.542000][T18334] rfkill_register+0x1ad/0xb40 [ 682.542044][T18334] nfc_register_device+0x11f/0x410 [ 682.542078][T18334] nci_register_device+0x7f1/0xb80 [ 682.542119][T18334] ? __pfx_nci_register_device+0x10/0x10 [ 682.542163][T18334] ? lockdep_init_map_type+0x5c/0x270 [ 682.542199][T18334] virtual_ncidev_open+0x141/0x220 [ 682.542233][T18334] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 682.542266][T18334] misc_open+0x26d/0x450 [ 682.542304][T18334] ? __pfx_misc_open+0x10/0x10 [ 682.542341][T18334] chrdev_open+0x234/0x6a0 [ 682.542380][T18334] ? __pfx_apparmor_file_open+0x10/0x10 [ 682.542415][T18334] ? __pfx_chrdev_open+0x10/0x10 [ 682.542456][T18334] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 682.542504][T18334] do_dentry_open+0x748/0x1590 [ 682.542541][T18334] ? __pfx_chrdev_open+0x10/0x10 [ 682.542598][T18334] vfs_open+0x82/0x3f0 [ 682.542633][T18334] path_openat+0x2078/0x3140 [ 682.542683][T18334] ? __pfx_path_openat+0x10/0x10 [ 682.542737][T18334] do_filp_open+0x20b/0x470 [ 682.542787][T18334] ? __pfx_do_filp_open+0x10/0x10 [ 682.542856][T18334] ? alloc_fd+0x471/0x7d0 [ 682.542907][T18334] do_sys_openat2+0x11f/0x280 [ 682.542938][T18334] ? __pfx_do_sys_openat2+0x10/0x10 [ 682.542984][T18334] __x64_sys_openat+0x174/0x210 [ 682.543017][T18334] ? __pfx___x64_sys_openat+0x10/0x10 [ 682.543063][T18334] do_syscall_64+0xcd/0xf80 [ 682.543097][T18334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.543126][T18334] RIP: 0033:0x7fb2a0f8f7c9 [ 682.543150][T18334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 682.543176][T18334] RSP: 002b:00007fb2a1d69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 682.543203][T18334] RAX: ffffffffffffffda RBX: 00007fb2a11e5fa0 RCX: 00007fb2a0f8f7c9 [ 682.543222][T18334] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 682.543241][T18334] RBP: 00007fb2a1013f91 R08: 0000000000000000 R09: 0000000000000000 [ 682.543258][T18334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 682.543276][T18334] R13: 00007fb2a11e6038 R14: 00007fb2a11e5fa0 R15: 00007fffd21a0018 [ 682.543317][T18334] [ 683.316818][T18346] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 683.324873][T18346] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 683.336239][T18346] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 683.358417][T18346] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 685.241699][T18382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 685.330453][T17343] Bluetooth: hci2: command 0x0c1a tx timeout [ 685.407823][ T9814] Bluetooth: hci4: command 0x0c1a tx timeout [ 685.413927][T10458] Bluetooth: hci1: command 0x0c1a tx timeout [ 685.421069][T17343] Bluetooth: hci0: command 0x0c1a tx timeout [ 685.437059][T18381] FAULT_INJECTION: forcing a failure. [ 685.437059][T18381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 685.506819][T18398] netlink: 'syz.0.2738': attribute type 11 has an invalid length. [ 685.523473][T18381] CPU: 1 UID: 0 PID: 18381 Comm: syz.3.2730 Tainted: G L syzkaller #0 PREEMPT(full) [ 685.523519][T18381] Tainted: [L]=SOFTLOCKUP [ 685.523530][T18381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 685.523547][T18381] Call Trace: [ 685.523557][T18381] [ 685.523568][T18381] dump_stack_lvl+0x16c/0x1f0 [ 685.523605][T18381] should_fail_ex+0x512/0x640 [ 685.523649][T18381] _copy_from_user+0x2e/0xd0 [ 685.523685][T18381] move_addr_to_kernel+0x65/0x170 [ 685.523722][T18381] __sys_sendto+0x1be/0x520 [ 685.523759][T18381] ? __pfx___sys_sendto+0x10/0x10 [ 685.523807][T18381] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 685.523845][T18381] ? count_memcg_events+0x122/0x290 [ 685.523903][T18381] __x64_sys_sendto+0xe0/0x1c0 [ 685.523939][T18381] ? do_syscall_64+0x91/0xf80 [ 685.523968][T18381] ? lockdep_hardirqs_on+0x7c/0x110 [ 685.523997][T18381] do_syscall_64+0xcd/0xf80 [ 685.524028][T18381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.524067][T18381] RIP: 0033:0x7fa8f8f9165c [ 685.524091][T18381] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 685.524119][T18381] RSP: 002b:00007fa8f71f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 685.524146][T18381] RAX: ffffffffffffffda RBX: 00007fa8f71f4fc0 RCX: 00007fa8f8f9165c [ 685.524164][T18381] RDX: 0000000000000028 RSI: 00007fa8f71f5010 RDI: 0000000000000004 [ 685.524180][T18381] RBP: 0000000000000000 R08: 00007fa8f71f4f14 R09: 000000000000000c [ 685.524196][T18381] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 685.524212][T18381] R13: 00007fa8f71f4f68 R14: 00007fa8f71f5010 R15: 0000000000000000 [ 685.524256][T18381] [ 685.699616][T18398] netlink: 'syz.0.2738': attribute type 11 has an invalid length. [ 685.708469][T18398] netlink: 'syz.0.2738': attribute type 11 has an invalid length. [ 686.387617][T18417] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 686.439219][T18417] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 687.273773][T18430] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2753'. [ 687.339559][T18433] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 687.364190][T18433] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 687.375982][T18433] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 687.426528][T18433] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 687.610606][T18448] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 687.638905][T18448] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 688.589837][T18467] netlink: 'syz.1.2754': attribute type 11 has an invalid length. [ 688.638713][T18467] netlink: 'syz.1.2754': attribute type 11 has an invalid length. [ 688.674213][T18467] netlink: 'syz.1.2754': attribute type 11 has an invalid length. [ 688.832758][T18467] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input99 [ 688.894356][T18476] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2757'. [ 689.227522][T18471] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input100 [ 689.393092][ T9814] Bluetooth: hci4: command 0x0c1a tx timeout [ 689.399746][T10458] Bluetooth: hci2: command 0x0c1a tx timeout [ 689.406021][T17343] Bluetooth: hci1: command 0x0c1a tx timeout [ 689.468373][T17343] Bluetooth: hci0: command 0x0c1a tx timeout [ 689.973005][T18509] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 689.983116][T18509] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 690.035581][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.042013][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.950941][T18538] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2768'. [ 690.959598][T18540] FAULT_INJECTION: forcing a failure. [ 690.959598][T18540] name failslab, interval 1, probability 0, space 0, times 0 [ 690.972857][T18540] CPU: 1 UID: 0 PID: 18540 Comm: syz.1.2769 Tainted: G L syzkaller #0 PREEMPT(full) [ 690.972898][T18540] Tainted: [L]=SOFTLOCKUP [ 690.972907][T18540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 690.972919][T18540] Call Trace: [ 690.972926][T18540] [ 690.972938][T18540] dump_stack_lvl+0x16c/0x1f0 [ 690.972969][T18540] should_fail_ex+0x512/0x640 [ 690.973004][T18540] ? __kvmalloc_node_noprof+0x129/0xa40 [ 690.973040][T18540] should_failslab+0xc2/0x120 [ 690.973076][T18540] __kvmalloc_node_noprof+0x14a/0xa40 [ 690.973107][T18540] ? trace_kmalloc+0x2b/0xb0 [ 690.973139][T18540] ? __kvmalloc_node_noprof+0x3c9/0xa40 [ 690.973173][T18540] ? io_alloc_cache_init+0x38/0x170 [ 690.973201][T18540] ? io_alloc_cache_init+0x38/0x170 [ 690.973237][T18540] ? io_alloc_cache_init+0x38/0x170 [ 690.973263][T18540] io_alloc_cache_init+0x38/0x170 [ 690.973290][T18540] ? io_alloc_cache_init+0x38/0x170 [ 690.973318][T18540] io_rsrc_cache_init+0x40/0x50 [ 690.973345][T18540] io_uring_setup+0x5e8/0x1f60 [ 690.973374][T18540] ? __pfx_io_uring_setup+0x10/0x10 [ 690.973399][T18540] ? do_futex+0x122/0x350 [ 690.973427][T18540] ? __pfx_do_futex+0x10/0x10 [ 690.973451][T18540] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 690.973497][T18540] ? xfd_validate_state+0x61/0x180 [ 690.973519][T18540] ? __pfx_do_writev+0x10/0x10 [ 690.973559][T18540] __x64_sys_io_uring_setup+0xc2/0x170 [ 690.973585][T18540] do_syscall_64+0xcd/0xf80 [ 690.973608][T18540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.973633][T18540] RIP: 0033:0x7fef6ed8f7c9 [ 690.973653][T18540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 690.973678][T18540] RSP: 002b:00007fef6fc8f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 690.973701][T18540] RAX: ffffffffffffffda RBX: 00007fef6efe5fa0 RCX: 00007fef6ed8f7c9 [ 690.973718][T18540] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 690.973735][T18540] RBP: 00007fef6ee13f91 R08: 0000000000000000 R09: 0000000000000000 [ 690.973751][T18540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 690.973766][T18540] R13: 00007fef6efe6038 R14: 00007fef6efe5fa0 R15: 00007ffc63489248 [ 690.973811][T18540] [ 690.978133][T18533] [U]  [ 691.203688][T18533] [U] [ 691.206391][T18533] [U] [ 691.209101][T18533] [U] [ 691.312366][T18533] [U] [ 691.315125][T18533] [U] [ 691.317883][T18533] [U] [ 691.320604][T18533] [U] [ 691.351031][T18533] [U] [ 691.353782][T18533] [U] [ 691.356509][T18533] [U] [ 691.359241][T18533] [U] [ 691.411043][T18533] [U] [ 691.413798][T18533] [U] [ 691.416530][T18533] [U] [ 691.419244][T18533] [U] [ 691.477224][T18533] [U] [ 691.479976][T18533] [U] [ 691.482700][T18533] [U] [ 691.485418][T18533] [U] [ 691.488523][T18533] [U] [ 691.491230][T18533] [U] [ 691.493910][T18533] [U] [ 691.496594][T18533] [U] [ 691.514039][T18533] [U] [ 691.516801][T18533] [U] [ 691.519527][T18533] [U] [ 691.522246][T18533] [U] [ 691.535313][T18533] [U] [ 691.538076][T18533] [U] [ 691.540801][T18533] [U] [ 691.543515][T18533] [U] [ 691.559312][T18533] [U] [ 691.562064][T18533] [U] [ 691.564781][T18533] [U] [ 691.567500][T18533] [U] [ 691.570890][T18533] [U] [ 692.766575][T18575] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 692.776800][T18569] can: request_module (can-proto-0) failed. [ 692.809686][T18575] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 693.747873][T18594] FAULT_INJECTION: forcing a failure. [ 693.747873][T18594] name failslab, interval 1, probability 0, space 0, times 0 [ 693.808257][T18594] CPU: 0 UID: 0 PID: 18594 Comm: syz.2.2779 Tainted: G L syzkaller #0 PREEMPT(full) [ 693.808305][T18594] Tainted: [L]=SOFTLOCKUP [ 693.808315][T18594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 693.808333][T18594] Call Trace: [ 693.808343][T18594] [ 693.808354][T18594] dump_stack_lvl+0x16c/0x1f0 [ 693.808392][T18594] should_fail_ex+0x512/0x640 [ 693.808429][T18594] ? fs_reclaim_acquire+0xae/0x150 [ 693.808474][T18594] should_failslab+0xc2/0x120 [ 693.808513][T18594] __kmalloc_noprof+0xeb/0x910 [ 693.808543][T18594] ? tomoyo_encode2+0x100/0x3e0 [ 693.808576][T18594] ? tomoyo_encode2+0x100/0x3e0 [ 693.808600][T18594] tomoyo_encode2+0x100/0x3e0 [ 693.808631][T18594] tomoyo_encode+0x29/0x50 [ 693.808667][T18594] tomoyo_realpath_from_path+0x18f/0x6e0 [ 693.808707][T18594] tomoyo_check_open_permission+0x2ab/0x3c0 [ 693.808750][T18594] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 693.808825][T18594] ? do_raw_spin_lock+0x12c/0x2b0 [ 693.808867][T18594] tomoyo_file_open+0x6b/0x90 [ 693.808899][T18594] security_file_open+0x84/0x1e0 [ 693.808939][T18594] do_dentry_open+0x597/0x1590 [ 693.808980][T18594] ? security_inode_permission+0xbf/0x260 [ 693.809023][T18594] vfs_open+0x82/0x3f0 [ 693.809056][T18594] path_openat+0x2078/0x3140 [ 693.809107][T18594] ? __pfx_path_openat+0x10/0x10 [ 693.809158][T18594] do_filp_open+0x20b/0x470 [ 693.809197][T18594] ? __pfx_do_filp_open+0x10/0x10 [ 693.809262][T18594] ? alloc_fd+0x471/0x7d0 [ 693.809309][T18594] do_sys_openat2+0x11f/0x280 [ 693.809338][T18594] ? __pfx_do_sys_openat2+0x10/0x10 [ 693.809366][T18594] ? __pfx___might_resched+0x10/0x10 [ 693.809420][T18594] ? blkcg_maybe_throttle_current+0x650/0xf30 [ 693.809470][T18594] ? _raw_spin_unlock_irq+0x23/0x50 [ 693.809520][T18594] __x64_sys_openat+0x174/0x210 [ 693.809560][T18594] ? __pfx___x64_sys_openat+0x10/0x10 [ 693.809615][T18594] do_syscall_64+0xcd/0xf80 [ 693.809665][T18594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.809703][T18594] RIP: 0033:0x7fb2a0f8f7c9 [ 693.809735][T18594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 693.809765][T18594] RSP: 002b:00007fb29edd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 693.809801][T18594] RAX: ffffffffffffffda RBX: 00007fb2a11e6270 RCX: 00007fb2a0f8f7c9 [ 693.809821][T18594] RDX: 00000000001c8340 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 693.809839][T18594] RBP: 00007fb2a1013f91 R08: 0000000000000000 R09: 0000000000000000 [ 693.809856][T18594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 693.809873][T18594] R13: 00007fb2a11e6308 R14: 00007fb2a11e6270 R15: 00007fffd21a0018 [ 693.809911][T18594] [ 693.809944][T18594] ERROR: Out of memory at tomoyo_realpath_from_path. [ 694.138218][T18605] bond0: option all_slaves_active: invalid value () [ 694.155850][T17343] Bluetooth: hci1: unexpected event 0x02 length: 726 > 260 [ 694.196409][T17343] Bluetooth: hci1: unexpected event 0x02 length: 726 > 260 [ 694.405355][T18605] blktrace: Concurrent blktraces are not allowed on ram7 [ 694.885412][T18582] kexec: Could not allocate control_code_buffer [ 697.919195][T18682] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2803'. [ 698.513992][T18635] NFSD: Failed to start, no listeners configured. [ 699.304544][T18677] [U]  [ 699.307351][T18677] [U] [ 699.310029][T18677] [U] [ 699.312732][T18677] [U] [ 699.358544][T18677] [U] [ 699.361383][T18677] [U] [ 699.364093][T18677] [U] [ 699.366799][T18677] [U] [ 699.408014][T18677] [U] [ 699.410778][T18677] [U] [ 699.413494][T18677] [U] [ 699.416200][T18677] [U] [ 699.433578][T18677] [U] [ 699.436398][T18677] [U] [ 699.439098][T18677] [U] [ 699.441799][T18677] [U] [ 699.463806][T18677] [U] [ 699.466589][T18677] [U] [ 699.469292][T18677] [U] [ 699.471991][T18677] [U] [ 699.481544][T18677] [U] [ 699.484281][T18677] [U] [ 699.486976][T18677] [U] [ 699.489665][T18677] [U] [ 699.511813][T18677] [U] [ 699.514555][T18677] [U] [ 699.517252][T18677] [U] [ 699.519947][T18677] [U] [ 699.522939][T18677] [U] [ 699.525644][T18677] [U] [ 699.528339][T18677] [U] [ 699.531037][T18677] [U] [ 699.544985][T18677] [U] [ 699.547741][T18677] [U] [ 699.550474][T18677] [U] [ 699.553196][T18677] [U] [ 699.559757][T18677] [U] [ 699.562487][T18677] [U] [ 699.565166][T18677] [U] [ 699.567845][T18677] [U] [ 699.604847][T18677] [U] [ 699.607651][T18677] [U] [ 699.610376][T18677] [U] [ 699.613079][T18677] [U] [ 699.669050][T18677] [U] [ 699.671804][T18677] [U] [ 699.674529][T18677] [U] [ 699.677257][T18677] [U] [ 699.701958][T18677] [U] [ 699.704816][T18677] [U] [ 699.707544][T18677] [U] [ 699.710269][T18677] [U] [ 699.841555][T18677] [U] [ 699.844311][T18677] [U] [ 699.847007][T18677] [U] [ 699.849708][T18677] [U] [ 699.885479][T18677] [U] [ 699.888231][T18677] [U] [ 699.890958][T18677] [U] [ 699.893678][T18677] [U] [ 699.896898][T18677] [U] [ 699.899632][T18677] [U] [ 699.902353][T18677] [U] [ 699.905067][T18677] [U] [ 699.913693][T18677] [U] [ 699.916425][T18677] [U] [ 699.919119][T18677] [U] [ 699.921814][T18677] [U] [ 699.958830][T18677] [U] [ 699.961572][T18677] [U] [ 699.964272][T18677] [U] [ 699.966961][T18677] [U] [ 699.987406][T18677] [U] [ 699.990177][T18677] [U] [ 699.992877][T18677] [U] [ 699.995578][T18677] [U] [ 700.160518][T18677] [U] [ 700.163266][T18677] [U] [ 700.165973][T18677] [U] [ 700.168668][T18677] [U] [ 700.238368][T18677] [U] [ 700.241121][T18677] [U] [ 700.243847][T18677] [U] [ 700.246567][T18677] [U] [ 700.298336][T18677] [U] [ 700.301098][T18677] [U] [ 700.303813][T18677] [U] [ 700.306527][T18677] [U] [ 700.382209][T18677] [U] [ 700.384967][T18677] [U] [ 700.387687][T18677] [U] [ 700.390379][T18677] [U] [ 700.444969][T18677] [U] [ 700.447723][T18677] [U] [ 700.450440][T18677] [U] [ 700.453151][T18677] [U] [ 700.606566][T18677] [U] [ 701.545489][T18762] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.684671][T18759] kexec: Could not allocate control_code_buffer [ 703.909205][T18799] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 703.920694][T18799] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 703.974554][T18799] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 704.000290][T18802] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 704.010957][T18802] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 704.057156][T18799] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 704.085948][T18789] NFSD: Failed to start, no listeners configured. [ 704.581903][T18813] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2819'. [ 704.906368][T18819] netlink: 'syz.1.2823': attribute type 1 has an invalid length. [ 705.342069][T18834] FAULT_INJECTION: forcing a failure. [ 705.342069][T18834] name failslab, interval 1, probability 0, space 0, times 0 [ 705.356891][T18834] CPU: 0 UID: 0 PID: 18834 Comm: syz.1.2834 Tainted: G L syzkaller #0 PREEMPT(full) [ 705.356937][T18834] Tainted: [L]=SOFTLOCKUP [ 705.356948][T18834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 705.356965][T18834] Call Trace: [ 705.356975][T18834] [ 705.356987][T18834] dump_stack_lvl+0x16c/0x1f0 [ 705.357022][T18834] should_fail_ex+0x512/0x640 [ 705.357057][T18834] ? __kmalloc_cache_noprof+0x5f/0x800 [ 705.357091][T18834] should_failslab+0xc2/0x120 [ 705.357131][T18834] __kmalloc_cache_noprof+0x80/0x800 [ 705.357163][T18834] ? kvm_pic_init+0x4f/0x380 [ 705.357189][T18834] ? is_bpf_text_address+0x94/0x1a0 [ 705.357229][T18834] ? kvm_pic_init+0x4f/0x380 [ 705.357254][T18834] kvm_pic_init+0x4f/0x380 [ 705.357285][T18834] kvm_arch_vm_ioctl+0x8f0/0x18b0 [ 705.357326][T18834] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 705.357368][T18834] ? __lock_acquire+0x436/0x2890 [ 705.357398][T18834] ? __lock_acquire+0x436/0x2890 [ 705.357433][T18834] ? __lock_acquire+0x436/0x2890 [ 705.357467][T18834] ? __lock_acquire+0x436/0x2890 [ 705.357523][T18834] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 705.357564][T18834] ? is_bpf_text_address+0x94/0x1a0 [ 705.357598][T18834] ? kernel_text_address+0x8d/0x100 [ 705.357629][T18834] ? __kernel_text_address+0xd/0x40 [ 705.357659][T18834] ? unwind_get_return_address+0x59/0xa0 [ 705.357693][T18834] ? arch_stack_walk+0xa6/0x100 [ 705.357739][T18834] ? stack_trace_save+0x8e/0xc0 [ 705.357777][T18834] ? __pfx_stack_trace_save+0x10/0x10 [ 705.357828][T18834] ? stack_depot_save_flags+0x29/0x9b0 [ 705.357866][T18834] ? __lock_acquire+0x436/0x2890 [ 705.357895][T18834] ? kasan_save_stack+0x42/0x60 [ 705.357927][T18834] ? kasan_save_stack+0x33/0x60 [ 705.357959][T18834] ? kasan_save_track+0x14/0x30 [ 705.357991][T18834] ? kasan_save_free_info+0x3b/0x60 [ 705.358018][T18834] ? __kasan_slab_free+0x5f/0x80 [ 705.358050][T18834] ? kfree+0x2f8/0x6e0 [ 705.358074][T18834] ? tomoyo_path_number_perm+0x470/0x580 [ 705.358110][T18834] ? security_file_ioctl+0x9b/0x240 [ 705.358146][T18834] ? __x64_sys_ioctl+0xb7/0x210 [ 705.358174][T18834] ? do_syscall_64+0xcd/0xf80 [ 705.358207][T18834] kvm_vm_ioctl+0x1b03/0x4090 [ 705.358254][T18834] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 705.358309][T18834] ? kasan_quarantine_put+0x10a/0x240 [ 705.358342][T18834] ? lockdep_hardirqs_on+0x7c/0x110 [ 705.358376][T18834] ? find_held_lock+0x2b/0x80 [ 705.358411][T18834] ? tomoyo_path_number_perm+0x295/0x580 [ 705.358454][T18834] ? tomoyo_path_number_perm+0x18d/0x580 [ 705.358494][T18834] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 705.358545][T18834] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 705.358585][T18834] ? do_vfs_ioctl+0x128/0x14f0 [ 705.358617][T18834] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 705.358659][T18834] ? find_held_lock+0x2b/0x80 [ 705.358691][T18834] ? hook_file_ioctl_common+0x144/0x410 [ 705.358736][T18834] ? __fget_files+0x20e/0x3c0 [ 705.358777][T18834] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 705.358820][T18834] __x64_sys_ioctl+0x18e/0x210 [ 705.358855][T18834] do_syscall_64+0xcd/0xf80 [ 705.358888][T18834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.358916][T18834] RIP: 0033:0x7fef6ed8f7c9 [ 705.358939][T18834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 705.358967][T18834] RSP: 002b:00007fef6fc6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 705.358994][T18834] RAX: ffffffffffffffda RBX: 00007fef6efe6090 RCX: 00007fef6ed8f7c9 [ 705.359014][T18834] RDX: 0010000000000402 RSI: 000000000000ae60 RDI: 0000000000000003 [ 705.359032][T18834] RBP: 00007fef6ee13f91 R08: 0000000000000000 R09: 0000000000000000 [ 705.359050][T18834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 705.359066][T18834] R13: 00007fef6efe6128 R14: 00007fef6efe6090 R15: 00007ffc63489248 [ 705.359105][T18834] [ 705.950973][T10458] Bluetooth: hci4: command 0x0c1a tx timeout [ 705.986211][ T9814] Bluetooth: hci2: command 0x0c1a tx timeout [ 706.030558][T17343] Bluetooth: hci1: command 0x0c1a tx timeout [ 706.110186][T17343] Bluetooth: hci0: command 0x0c1a tx timeout [ 706.830926][T18857] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2830'. [ 706.926754][T18859] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 706.947972][T18859] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 706.954133][T18859] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 707.002828][T18859] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 707.299754][T18869] 0x000200000001-0xa29656a63616329 : "" [ 707.319720][T18869] mtd: partition "" is out of reach -- disabled [ 707.482413][T18869] ftl_cs: FTL header not found. [ 708.313134][T18870] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2833'. [ 708.573601][T18880] NFSD: Failed to start, no listeners configured. [ 708.648617][T18890] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 708.979165][T10458] Bluetooth: hci4: command 0x0c1a tx timeout [ 708.985531][ T9814] Bluetooth: hci2: command 0x0c1a tx timeout [ 708.995738][T17343] Bluetooth: hci1: command 0x0c1a tx timeout [ 709.057206][T17343] Bluetooth: hci0: command 0x0c1a tx timeout [ 709.070537][T18903] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2842'. [ 709.848786][T18917] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 709.858291][T18917] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 709.876745][T18917] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 709.900554][T18917] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 710.202559][T18927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2850'. [ 710.400638][T18925] input: f¬ as /devices/virtual/input/input102 [ 710.855612][T18932] zram: Removed device: zram0 [ 711.452866][T18952] [ 711.455218][T18952] ====================================================== [ 711.462220][T18952] WARNING: possible circular locking dependency detected [ 711.469240][T18952] syzkaller #0 Tainted: G L [ 711.475202][T18952] ------------------------------------------------------ [ 711.482201][T18952] syz.2.2854/18952 is trying to acquire lock: [ 711.488246][T18952] ffff888028b66e58 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x4d0/0xcc0 [ 711.499716][T18952] [ 711.499716][T18952] but task is already holding lock: [ 711.507079][T18952] ffff888028b672e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 711.516061][T18952] [ 711.516061][T18952] which lock already depends on the new lock. [ 711.516061][T18952] [ 711.526458][T18952] [ 711.526458][T18952] the existing dependency chain (in reverse order) is: [ 711.535458][T18952] [ 711.535458][T18952] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 711.543175][T18952] lock_sock_nested+0x41/0xf0 [ 711.548379][T18952] smc_listen_out+0x202/0x4a0 [ 711.553578][T18952] smc_listen_work+0x5a3/0x50b0 [ 711.558946][T18952] process_one_work+0x9ba/0x1b20 [ 711.564391][T18952] worker_thread+0x6c8/0xf10 [ 711.569498][T18952] kthread+0x3c5/0x780 [ 711.574068][T18952] ret_from_fork+0x983/0xb10 [ 711.579162][T18952] ret_from_fork_asm+0x1a/0x30 [ 711.584438][T18952] [ 711.584438][T18952] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 711.594585][T18952] __lock_acquire+0x1669/0x2890 [ 711.599949][T18952] lock_acquire+0x179/0x330 [ 711.604977][T18952] __flush_work+0x4e4/0xcc0 [ 711.610006][T18952] cancel_work_sync+0xd1/0xf0 [ 711.615208][T18952] smc_clcsock_release+0x5f/0xe0 [ 711.620669][T18952] __smc_release+0x5c2/0x880 [ 711.625771][T18952] smc_close_non_accepted+0xda/0x200 [ 711.631570][T18952] smc_close_active+0xc3c/0x1070 [ 711.637016][T18952] __smc_release+0x634/0x880 [ 711.642114][T18952] smc_release+0x1fc/0x620 [ 711.647039][T18952] __sock_release+0xb3/0x270 [ 711.652136][T18952] sock_close+0x1c/0x30 [ 711.656793][T18952] __fput+0x402/0xb70 [ 711.661283][T18952] task_work_run+0x150/0x240 [ 711.666377][T18952] do_exit+0x87f/0x2bd0 [ 711.671040][T18952] do_group_exit+0xd3/0x2a0 [ 711.676046][T18952] get_signal+0x2671/0x26d0 [ 711.681062][T18952] arch_do_signal_or_restart+0x8f/0x7a0 [ 711.687118][T18952] exit_to_user_mode_loop+0x8c/0x540 [ 711.692918][T18952] do_syscall_64+0x4ee/0xf80 [ 711.698039][T18952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.704467][T18952] [ 711.704467][T18952] other info that might help us debug this: [ 711.704467][T18952] [ 711.714689][T18952] Possible unsafe locking scenario: [ 711.714689][T18952] [ 711.722120][T18952] CPU0 CPU1 [ 711.727466][T18952] ---- ---- [ 711.732816][T18952] lock(sk_lock-AF_SMC/1); [ 711.737317][T18952] lock((work_completion)(&new_smc->smc_listen_work)); [ 711.746755][T18952] lock(sk_lock-AF_SMC/1); [ 711.753768][T18952] lock((work_completion)(&new_smc->smc_listen_work)); [ 711.760686][T18952] [ 711.760686][T18952] *** DEADLOCK *** [ 711.760686][T18952] [ 711.768808][T18952] 3 locks held by syz.2.2854/18952: [ 711.773989][T18952] #0: ffff888077d9d288 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 711.784503][T18952] #1: ffff888028b672e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 711.793996][T18952] #2: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfb/0xcc0 [ 711.803124][T18952] [ 711.803124][T18952] stack backtrace: [ 711.809015][T18952] CPU: 1 UID: 0 PID: 18952 Comm: syz.2.2854 Tainted: G L syzkaller #0 PREEMPT(full) [ 711.809038][T18952] Tainted: [L]=SOFTLOCKUP [ 711.809044][T18952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 711.809053][T18952] Call Trace: [ 711.809058][T18952] [ 711.809064][T18952] dump_stack_lvl+0x116/0x1f0 [ 711.809083][T18952] print_circular_bug+0x275/0x340 [ 711.809108][T18952] check_noncircular+0x146/0x160 [ 711.809132][T18952] __lock_acquire+0x1669/0x2890 [ 711.809146][T18952] ? __debug_object_init+0x2de/0x3d0 [ 711.809164][T18952] lock_acquire+0x179/0x330 [ 711.809177][T18952] ? __flush_work+0x4d0/0xcc0 [ 711.809195][T18952] ? mark_held_locks+0x49/0x80 [ 711.809207][T18952] ? __flush_work+0x4d0/0xcc0 [ 711.809224][T18952] __flush_work+0x4e4/0xcc0 [ 711.809240][T18952] ? __flush_work+0x4d0/0xcc0 [ 711.809257][T18952] ? __pfx___flush_work+0x10/0x10 [ 711.809275][T18952] ? __pfx_wq_barrier_func+0x10/0x10 [ 711.809298][T18952] ? do_raw_spin_lock+0x12c/0x2b0 [ 711.809314][T18952] ? __pfx___might_resched+0x10/0x10 [ 711.809335][T18952] cancel_work_sync+0xd1/0xf0 [ 711.809354][T18952] smc_clcsock_release+0x5f/0xe0 [ 711.809378][T18952] __smc_release+0x5c2/0x880 [ 711.809399][T18952] ? __pfx_sock_def_readable+0x10/0x10 [ 711.809420][T18952] smc_close_non_accepted+0xda/0x200 [ 711.809448][T18952] smc_close_active+0xc3c/0x1070 [ 711.809471][T18952] __smc_release+0x634/0x880 [ 711.809492][T18952] smc_release+0x1fc/0x620 [ 711.809511][T18952] ? kmem_cache_free+0x8a/0x770 [ 711.809529][T18952] __sock_release+0xb3/0x270 [ 711.809543][T18952] ? __pfx_sock_close+0x10/0x10 [ 711.809555][T18952] sock_close+0x1c/0x30 [ 711.809567][T18952] __fput+0x402/0xb70 [ 711.809581][T18952] ? _raw_spin_unlock_irq+0x23/0x50 [ 711.809595][T18952] task_work_run+0x150/0x240 [ 711.809611][T18952] ? __pfx_task_work_run+0x10/0x10 [ 711.809626][T18952] ? do_raw_spin_unlock+0x172/0x230 [ 711.809643][T18952] do_exit+0x87f/0x2bd0 [ 711.809658][T18952] ? __pfx_do_exit+0x10/0x10 [ 711.809671][T18952] ? do_raw_spin_lock+0x12c/0x2b0 [ 711.809687][T18952] ? find_held_lock+0x2b/0x80 [ 711.809706][T18952] do_group_exit+0xd3/0x2a0 [ 711.809720][T18952] get_signal+0x2671/0x26d0 [ 711.809739][T18952] ? __pfx_futex_wake+0x10/0x10 [ 711.809760][T18952] ? __pfx_get_signal+0x10/0x10 [ 711.809780][T18952] ? do_futex+0x122/0x350 [ 711.809795][T18952] arch_do_signal_or_restart+0x8f/0x7a0 [ 711.809816][T18952] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 711.809837][T18952] ? ptrace_unfreeze_traced+0x132/0x1c0 [ 711.809857][T18952] ? ptrace_check_attach+0x2c5/0x3f0 [ 711.809876][T18952] ? __pfx___x64_sys_futex+0x10/0x10 [ 711.809894][T18952] exit_to_user_mode_loop+0x8c/0x540 [ 711.809913][T18952] do_syscall_64+0x4ee/0xf80 [ 711.809929][T18952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.809945][T18952] RIP: 0033:0x7fb2a0f8f7c9 [ 711.809956][T18952] Code: Unable to access opcode bytes at 0x7fb2a0f8f79f. [ 711.809963][T18952] RSP: 002b:00007fb2a1d690e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 711.809979][T18952] RAX: 0000000000000001 RBX: 00007fb2a11e5fa8 RCX: 00007fb2a0f8f7c9 [ 711.809988][T18952] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb2a11e5fac [ 711.809997][T18952] RBP: 00007fb2a11e5fa0 R08: 00007fb2a1d6a000 R09: 0000000000000000 [ 711.810007][T18952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 711.810015][T18952] R13: 00007fb2a11e6038 R14: 00007fffd219ff30 R15: 00007fffd21a0018 [ 711.810029][T18952] [ 711.863193][T17343] Bluetooth: hci4: command 0x0c1a tx timeout [ 712.156243][ T9800] Bluetooth: hci2: command 0x0c1a tx timeout [ 712.162353][ T9814] Bluetooth: hci0: command 0x0c1a tx timeout [ 712.168691][T10458] Bluetooth: hci1: command 0x0c1a tx timeout