last executing test programs: 7m18.427782672s ago: executing program 3 (id=1169): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x121040, 0x0) mmap$auto(0x800000000000000, 0x20009, 0x103, 0x40000400000eb1, r0, 0x210) socket(0x10, 0x2, 0x14) (async) socket(0x11, 0x80003, 0x300) (async) socket(0x1d, 0x2, 0x7) (async) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) (async) socket(0x2, 0x1, 0x0) (async) socket(0x10, 0x2, 0x0) (async) socket(0x1d, 0x2, 0x7) (async) socket(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) (async) socket(0x10, 0xd, 0x14) (async) socket(0x11, 0x80003, 0x300) (async) socket(0x1d, 0x2, 0x7) (async) socket(0x2, 0x80000, 0x0) socket(0x10, 0x2, 0x0) (async) socket(0x1d, 0x2, 0x7) socket(0xa, 0x2, 0x0) socket(0xa, 0x801, 0x106) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x1, 0x0) (async) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r1], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) 7m18.079360898s ago: executing program 3 (id=1170): unshare$auto(0x40000080) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x40090) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (rerun: 32) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async, rerun: 64) bind$auto(0x3, 0x0, 0x6a) (async, rerun: 64) connect$auto(0x3, &(0x7f0000000080)=@ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1}, 0x54) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) io_uring_setup$auto(0x59, &(0x7f0000000000)={0x3, 0x3ff, 0x2, 0x1, 0x6, 0xa, 0xffffffffffffffff, [], {0x8, 0x1, 0x1, 0x22b, 0x8000100, 0x581, 0x104, 0x1000006, 0xffffffffffffffff}, {0xbfc7, 0x1001, 0x52, 0x8, 0x3, 0x3d, 0x8, 0x7, 0x100000000}}) (async) bind$auto(0x3, 0x0, 0x6c) mmap$auto(0x0, 0x2020009, 0x400000000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) getresuid$auto(0x0, 0x0, 0x0) (async, rerun: 64) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={0x0, 0x1ffffffff}, 0x6, 0x0) (rerun: 64) socket(0x11, 0x3, 0x2) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000140)='/dev/binderfs/binder1\x00', 0x0, 0x0) ioctl$auto_BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)) (async) clone$auto(0x8, 0x7, &(0x7f00000000c0)=0x6, &(0x7f0000000100)=0x80b, 0x800) 7m17.710874061s ago: executing program 3 (id=1171): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x10001, 0x8, 0xc, 0xffffffffffffffff, 0x9, 0x7ff}, 0xee) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') syz_genetlink_get_family_id$auto_nl80211(0x0, r0) chown$auto(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto(0xff80000000000000, 0x409, 0x13) close_range$auto(0x2, 0xffffffffffffffff, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x80840, 0x0) openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r1 = socket(0x1e, 0x804, 0x0) connect$auto(r1, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = io_uring_setup$auto(0x6, 0x0) r3 = socketpair$auto(0x1e, 0x2, 0x8000000000000000, 0x0) ioctl$auto(0xc8, 0x400454cb, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) ioctl$auto(r4, 0x8912, 0x24) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) madvise$auto(0x0, 0x2003f2, 0x15) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_STEREO(r5, 0xc0045003, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r3) sendmsg$auto_NL80211_CMD_ADD_LINK_STA(r2, 0x0, 0x40815) 7m15.249211597s ago: executing program 3 (id=1176): openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000200)='/proc/meminfo\x00', 0x2800, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000000c0), r0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000006240)='/dev/admmidi2\x00', 0x28c00, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x402000d, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) r2 = openat$auto_fops_u16_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim6/psample/out_tc\x00', 0x50000, 0x0) openat$auto_hwsim_fops_group_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy4/hwsim/group\x00', 0x210000, 0x0) close_range$auto(0xffffffffffffffff, r2, 0xffff0003) r3 = io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x7, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82042, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x7, 0x81, 0x11, 0x401, 0x8000) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_ASSOC_MLO_RECONF(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20000006) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x4001) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r5, 0xc0045002, 0x0) read$auto(0x3, 0x0, 0x8080) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000006280)=0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x108101}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r7, 0x2, 0x70bd28, 0x25dfcbfc, {}, [@ETHTOOL_A_WOL_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc1d4}]}, @ETHTOOL_A_WOL_MODES={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x137, 0x0, 0x0, @fd=r4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendfile$auto(0x2, 0x3, &(0x7f0000000040)=0x80, 0xc3e0) 7m13.482704468s ago: executing program 3 (id=1183): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x443001f86cb35905, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) (async, rerun: 32) socketpair$auto(0x1e, 0x5, 0xfffffffe, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/damon_reclaim/parameters/enabled\x00', 0x1eb842, 0x0) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) (async) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x400040, 0x104, 0x8, 0x100000000}}) (async) mlockall$auto(0x7) (async) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) unshare$auto(0x40000080) (async, rerun: 64) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) 7m10.407389476s ago: executing program 3 (id=1191): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x8, 0x8, 0xeb1, 0xffffffffffffffff, 0xa800000000000000) r0 = syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) sendmsg$auto_NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r0, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x20000804) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x6}, 0x8) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00\x00\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x48080}, 0x8000) mmap$auto(0x0, 0x8000000000000000, 0xdb, 0xebd, 0x401, 0x800000008002) modify_ldt$auto(0x1, 0x0, 0x10) modify_ldt$auto(0x1, 0x0, 0x10) readv$auto(0x3, &(0x7f0000001100)={0x0, 0x400000000000fffe}, 0x1) r4 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r5 = socket(0x18, 0x5, 0x1) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 6m55.062588133s ago: executing program 32 (id=1191): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x8, 0x8, 0xeb1, 0xffffffffffffffff, 0xa800000000000000) r0 = syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) sendmsg$auto_NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r0, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x20000804) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x6}, 0x8) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00\x00\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x48080}, 0x8000) mmap$auto(0x0, 0x8000000000000000, 0xdb, 0xebd, 0x401, 0x800000008002) modify_ldt$auto(0x1, 0x0, 0x10) modify_ldt$auto(0x1, 0x0, 0x10) readv$auto(0x3, &(0x7f0000001100)={0x0, 0x400000000000fffe}, 0x1) r4 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r5 = socket(0x18, 0x5, 0x1) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 2m52.22986029s ago: executing program 2 (id=1796): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x2040, 0x0) mknod$auto(&(0x7f0000000080)='}[,&*}\x00', 0xe6c, 0x17) llistxattr$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x0, 0x7) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/v4l-subdev5\x00', 0x0, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, &(0x7f00000001c0)="f24592c1c552a7e8b8218b63337b51366dd3540ccc07f6ff43d9507a05392e46020ed724964e7d48c244c6ea119cc2e1e55098eeeb1dee61d6f6e95723a58c637d93c3a654be347e55b910bb9ed76e3ec260e2d27e29b54b6662be734c7746a0017e2f0f2d7246dac05857651003865b05f3d602950afac9920ccedf84c80ec42b54ea3a812a7397b80722c0c03031f357f21f2701f8ec01d73791535a09d1f2287ad0065870f96f7203e009e1c3ea9ca3b6da831d2830e34546ecd47319cf77a70cc72d55eeb610dff90decf120693caf7679f31952ff20eac39e1f05bfb994eabc7c3a1921985e0e2e8ce16e11fb") ioctl$auto(r2, 0x80405600, r1) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) io_uring_setup$auto(0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x3, 0x1) sysfs$auto(0x2, 0x4, 0x0) fsopen$auto(0x0, 0x1) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80140, 0x0) read$auto(r3, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x0) io_uring_setup$auto(0x401, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, 0x0, 0x55) r4 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r4, 0x29, 0x6, 0x0, 0xcf9) 2m49.709823331s ago: executing program 2 (id=1801): mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = socket(0xa, 0x3, 0x3a) prctl$auto(0x41555856, 0x3f, 0x2008, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r1, 0x0, 0x2) getdents$auto(r2, 0x0, 0xa2b0) setsockopt$auto(0x400000000000003, 0x29, 0xcc, 0x0, 0x567) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4000050) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000001a00), 0x88000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000e40), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r4) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r6, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, 0x6}, @NL80211_ATTR_FILS_KEK={0x1e, 0xf2, "ea676a053cf9c397cccecb756ef0574bf31ab2e2290d7f194499"}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000040)={0x18, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HWSIM_ATTR_NO_VIF={0x4, 0x1f}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000084}, 0x10) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_CGROUPSTATS_CMD_GET(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200080d1}, 0x4040040) ioctl$auto_RTC_IRQP_SET(r3, 0x4008700c, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) 2m47.140249082s ago: executing program 2 (id=1810): mmap$auto(0x8, 0x4020009, 0xdf, 0x19, 0x401, 0x808000) r0 = socket(0x2, 0x1, 0x0) bind$auto(r0, &(0x7f0000000180)=@qipcrtr={0x2a, 0x0, 0x7fff}, 0x8c7) pread64$auto(r0, 0x0, 0x8001, 0x400000000000413e) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio1\x00', 0x0, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000001280)) sendmmsg$auto(r0, 0x0, 0x6, 0x4) write$auto(0x3, 0x0, 0xfdef) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/asound/card1/pcm0c/sub6/status\x00', 0x2000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x9, 0x200000, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x640, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x2000, 0x0) write$auto(r1, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0x84f) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x8801, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$auto_BPF_MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)=@test={r2, 0xe0000000, 0x1, 0x7, 0x7, 0x2, 0x8, 0x404, 0x3, 0x8, 0x4, 0x3, 0xc271, 0x3, 0xfffffffe}, 0x8) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0xffffffffffffffff, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) msgrcv$auto(0x0, 0x0, 0x7, 0x9, 0x3) msgsnd$auto(0x0, &(0x7f0000000080)={0x9, 0x2}, 0x12, 0xfffffff8) 2m45.332199971s ago: executing program 2 (id=1816): mmap$auto(0xfffffffffffffffd, 0x2020009, 0x4, 0x10, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim2/psample/enable\x00', 0x169a02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/tracing/set_event\x00', 0x5c9f03, 0x0) r1 = io_uring_setup$auto(0x59, 0x0) getpid() unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, r2) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'geneve0\x00'}) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="00000a00004e8f0bc0c6e581f300"], 0xfdef}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) madvise$auto(0x1000, 0x200007, 0x19) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) madvise$auto(0x207, 0x2, 0x6) unshare$auto(0xf) syz_clone3(&(0x7f0000000380)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="00c2000f188d1b8eb9afb0c89fa8ce06a652cfbd8caf", @ANYRES8=r4, @ANYBLOB="000429bd7000fddbdf250f00000008001d000010000005000a0008000000", @ANYRES32=r0], 0x24}, 0x1, 0x0, 0x0, 0x40054}, 0x1) sendmsg$auto_NFC_CMD_VENDOR(r2, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040006000000000000003d00000006001100ff7f000008000100ff010000"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x4090) r5 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pread64$auto(r5, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\xf4\x00\x00\x00\x00\xf4\x00\x00\x00\x00\x00\x00', 0x100000002, 0x100000001) 2m42.011908027s ago: executing program 2 (id=1822): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x8000000000000003, 0x5, 0x1b, 0x401, 0x14) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x101b42, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x10, 0x2) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000380)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a672") openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0)=@iter_create={r0, 0x5}, 0x1) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r2, 0x200, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x4) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x123002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x138, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_FD={0x8, 0x17, r3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xcc}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xa}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x4}, @L2TP_ATTR_NONE={0xda, 0x0, "4ec58996519341caa9a804483535c4523235e3a7ffc6ffdfc92d5bf5792a5c23b4504c693dcb111a48dfd904acf5ce54a75bf545bad7cce8bc6643584e5c4c339904851ddea9f49e3607e4741746326c553e00f8620542f418a6c07ddc7eaaf4ea061f97bf1c7c40921ec93af2a5f26ef03b77a7e8a4ffab8c8e175f448d6e824cbdb44f938896738d6164e40815aee0540208f8e7176e7363a4047711bc25a062824acd44fa6a3b73186000570cdbe1f33fa0d99319a6eee7c0f9467e3a6fdb26669963a6d1392bd6c3dcf01b40b4ebc52d2f73ae43"}]}, 0x138}, 0x1, 0x0, 0x0, 0x24040085}, 0x4000) write$auto(r3, 0x0, 0x80000000) 2m40.521730947s ago: executing program 2 (id=1829): mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC2\x00', 0x101802, 0x0) ioctl$auto(0x3, 0x80045530, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2, 0xe2, 0xeb1, 0x405, 0xfffffffffffffff9) socket(0xa, 0x5, 0x0) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x18, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0xffffffffffffff47, 0x2, '/dev/snd/timer\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), r2) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) pread64$auto(0xffffffffffffffff, 0x0, 0x3ef, 0x9) mmap$auto(0x0, 0x2000d, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mremap$auto(0x4000, 0x8000b8, 0x13fd4, 0x3, 0xfffff000) unshare$auto(0x40000080) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r3, 0x400454a4, 0x0) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video54\x00', 0x42942, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000040), 0x7111}, 0x8) write$auto_proc_page_owner_threshold_(r4, &(0x7f0000000140), 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r5) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="07031abd70250c0058"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40800) writev$auto(0x3, &(0x7f0000000140)={&(0x7f0000000000), 0xdc7}, 0x4) 2m33.109131445s ago: executing program 4 (id=1848): rseq$auto(&(0x7f0000000080)={0xe, 0x401, 0x0, 0x806, 0xffffffff, 0x2}, 0x8000, 0x0, 0x8000006) (async) sysfs$auto(0x1, 0xfffffffffffffff4, 0x9) (async) rseq$auto(&(0x7f00000002c0)={0x7, 0x4, 0xffffffffffff0000, 0xa, 0x0, 0x10, "0bdf98835933ba0e2e9ed6d9aaf3855bc4117f0a2931d16bf7e16e1d68a21b50a861d6a01a39dc9eedaf609c10713888745f47"}, 0x0, 0x0, 0x10001) (async) mmap$auto(0x0, 0x20006, 0x4000000000dd, 0x13, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) (async) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) (async) r0 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r0, 0xb) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) ioctl$auto_TIOCCONS(r1, 0x541d, 0x0) unshare$auto(0x40000080) (async) mbind$auto(0x8000000000000002, 0x100000004, 0x100000000, 0x0, 0x9, 0x2) (async, rerun: 32) mmap$auto(0x0, 0x100, 0x4020000000df, 0x13, 0xffffffffffffffff, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) (async) mmap$auto(0x1, 0xa00006, 0x4, 0x40eb2, 0xffffffffffffffff, 0x8000) (async) socket(0x27, 0x2, 0x106) (async) connect$auto(r1, &(0x7f0000000000)=@llc={0x1a, 0x0, 0x94, 0xe, 0x0, 0xba, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x56a) ioprio_set$auto(0x4, 0xffffffffffffffff, 0x1b) (async) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/mtdblock0/sched/read0_fifo_list\x00', 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) (async) unshare$auto(0x40000080) mmap$auto(0x8, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x2fffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xb02, 0x0) (async) read$auto(0xffffffffffffffff, 0x0, 0x20) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) (async) mmap$auto(0x0, 0x7d, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) r2 = memfd_create$auto(0x0, 0xe) (async, rerun: 32) socket(0x2b, 0x1, 0x1) (rerun: 32) read$auto_proc_pagemap_operations_internal(r2, 0x0, 0x0) 2m30.494791603s ago: executing program 4 (id=1855): close_range$auto(0x0, 0xfffffffffffff000, 0x2) eventfd$auto(0x2) bpf$auto_BPF_ITER_CREATE(0x21, &(0x7f0000000140)=@batch={0x0, 0x80, 0x5, 0x7f, 0x8, 0xffffffffffffffff, 0xcf8, 0x7}, 0x7) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/arp_missed_max\x00', 0x63102, 0x0) sendfile$auto(r0, r0, 0x0, 0x2) 2m29.992825585s ago: executing program 4 (id=1857): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x42, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto_JFFS2_COMPR_MODE_NONE(r0, 0x4, &(0x7f0000000100)='/dev/fuse\x00', &(0x7f0000001580), 0x0) pipe$auto(0x0) (async) r1 = pipe$auto(0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc4}, 0x0) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x40482, 0x0) (async) r2 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x40482, 0x0) preadv$auto(r1, &(0x7f00000001c0)={&(0x7f0000000140)="0d9e1d480e897bc25e0e3b335ff4d37fcca2836e75c3a2ef16e381dddd2564c8426d56e96e6c42fc99b605416cd17e6fd747482e1fd32055f48cbeb143ffb124bc766a5963d5f45021103b4066936556755e385fdbbb7c123cfc86751af83a9a0c5212f7da5b8c2ccc3f5cb1d71f73a1e614a421ba13"}, 0x10000, 0x7, 0x7f2) ioctl$auto_CEC_ADAP_G_CAPS(r1, 0xc04c6100, &(0x7f0000000040)={"a28b020b10110d9c93342e2b2bf9dcf50b9a31e0c28e4477ad03aee0026e3905", "b233f7847f68b8e034cfdd38623173787241f09018d73a262ee0fb6b75ed099a", 0xfff, 0x6, 0x23c}) writev$auto(r2, &(0x7f0000000000)={&(0x7f0000000000), 0x101}, 0x2) 2m29.67975434s ago: executing program 4 (id=1860): kill$auto(0x0, 0x11) msgctl$auto_IPC_INFO(0x7, 0x3, 0x0) ptrace$auto(0x10, 0x0, 0x1, 0x7ff) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sr0\x00', 0x60742, 0x0) fallocate$auto(r0, 0x3, 0x4e88, 0x4cbd5d) memfd_secret$auto(0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) ftruncate$auto(0x3, 0x700) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) sendmsg$auto_HWSIM_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae8a, &(0x7f00000000c0)={0xfc}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="2e175236cd610000c725010000ff00"], 0x1c}, 0x1, 0x0, 0x0, 0x1000}, 0x64810) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x1, 0x2000c, 0x401, 0x20eb1, 0x40000000000a5, 0x1ff) lseek$auto(0x3, 0x10000000002, 0x20000005) r5 = socket(0x2a, 0x2, 0x1) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/workqueue/parameters/default_affinity_scope\x00', 0x1a9242, 0x0) sendfile$auto(r5, r6, 0x0, 0x5) 2m29.017483525s ago: executing program 4 (id=1862): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/midiC2D0\x00', 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xed\xf8\xe1\xbc\x1d\x91D\xe7R\x12\xc4\xcd\xc6\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY2@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(', 0x100000a3dd) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) close_range$auto(0x2, 0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x281, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/queues\x00', 0x20000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000180)=""/218, 0xda) write$auto(0xffffffffffffffff, 0x0, 0x8) write$auto(0xca, &(0x7f00000002c0)='\x04\x10\x00\x00\x00\x00\x00\x00\x00\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c\f\xb6,NS\xa2(Q\xcc\x04\x7f\x9f\xb1\xb6\x17\x80f\xf2P\xe1/?\xec z\xcbM\x05\xc84\xfc .\xf8\xc2\f9(\xd5\x02\"\x05\xcd\xeb\xa5\xd6\xe0\x9f\xbb]W\xc1\xbc;\n\xc8\xb3\xa6\xb7+\xcc\xf2/\x96H\xee$=\xe8-\bpV\xd4a\x91\x8f\xb9\xe4L[\x99g\xe1\x95-{\xf8\x8d\xb6\x82\x85Y.}lg\xbb/\xdf\xd3zJ\xf2', 0x7f) statmount$auto(0x0, 0x0, 0x9, 0xd) r4 = ioctl$auto_TIOCGPTPEER2(0xffffffffffffffff, 0x5441, 0x0) io_uring_setup$auto(0x7fffffff, &(0x7f0000000380)={0x3, 0x2, 0x8, 0x2, 0x4, 0xd, r4, [0x4, 0x1, 0x6], {0x3, 0x813, 0x0, 0x9, 0x18, 0x0, 0x3, 0x7, 0xfffffffffffff800}, {0x896, 0x5, 0x666c, 0x400, 0x48000, 0xd4, 0x3, 0x9, 0xffffffffffffffff}}) read$auto(0xffffffffffffffff, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket(0x1, 0x5, 0x0) getsockname$auto(r5, 0x0, 0x0) write$auto(0xca, &(0x7f0000000140)='\x04\x0e\x06\xd5\x89|d\v\x00\x00@\x00\x81\x00\x00\x00\xf6\xf5\x00\xdf\xff\x00', 0x10) mmap$auto(0x0, 0x202000d, 0x4, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) adjtimex$auto(0x0) 2m28.114733698s ago: executing program 4 (id=1865): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) socketcall$auto(0x9, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x0, 0x0) wait4$auto(0xffffffffffffffff, &(0x7f0000000440)=0x8001, 0x100, &(0x7f0000000480)={{0x3, 0x3}, {0x0, 0x1000}, 0x800, 0x2, 0x5, 0x4, 0x6, 0xde, 0x5a, 0xed, 0xfcc1, 0x80000000, 0x8, 0xfffffffffffffffc, 0xb7a6, 0x3}) (async) r0 = wait4$auto(0xffffffffffffffff, &(0x7f0000000440)=0x8001, 0x100, &(0x7f0000000480)={{0x3, 0x3}, {0x0, 0x1000}, 0x800, 0x2, 0x5, 0x4, 0x6, 0xde, 0x5a, 0xed, 0xfcc1, 0x80000000, 0x8, 0xfffffffffffffffc, 0xb7a6, 0x3}) timer_create$auto_CLOCK_TAI(0xb, &(0x7f0000000540)={@sival_ptr=&(0x7f0000000380)="c73b0b7812419b9fd495ca6f4e48dc83ae0de1e114687db9ab36ad1850c9f55b9f196fd8d9209a297960b620e04d6fcfd5a088d85faf6a953600ccb6b0137b16045e858e8e3cda5047624a7c04fd49e8b0fa68395363c2343189fb3685a4adc630c622a12f46da8b2e602a5ad47105eabec6ba2f50a006ad87fede36895c67e23b79f64732f24fa6918625029e979a182d479ee6eeaeed211665c678f17495bb61a679a1ba1c45cf146557d0a799c16b", @raw, 0x1, @_tid=r0}, &(0x7f0000000580)=0x4) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) prctl$auto(0x1000000003b, 0xfffffffffffffffd, 0x4, 0x2, 0x1ff) (async) prctl$auto(0x1000000003b, 0xfffffffffffffffd, 0x4, 0x2, 0x1ff) unshare$auto(0x8000000) sendmsg$auto_MACSEC_CMD_DEL_RXSA(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async) sendmsg$auto_MACSEC_CMD_DEL_RXSA(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80) semget$auto(0x0, 0x2e4a, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x2, 0x0) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x7d4, 0x1, 0x401c1, 0x2081, 0x3f, 0x7ffc, 0x1ffde, 0x8001, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x200000003004, 0x9, 0x6, 0x10002, 0x80, 0x400, 0xa9, 0x1000, 0x401ffc, 0x8203, 0x400, 0x2, 0x1, 0x0, 0x40, 0x4, 0x2, [0x7249, 0xa9d, 0x0, 0x1000000000000000, 0x0, 0x7, 0x800002, 0x0, 0x0, 0x200000000000000, 0xfc6a, 0x1000000, 0x10000, 0x40000000000, 0x0, 0x500000000000, 0x80000000000000, 0x0, 0xffffffffff7ffffc, 0x5, 0x0, 0x2, 0xfff, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xb, 0xfffffffffffffffc, 0x400000000000002, 0xfffffffffffffffc, 0x3, 0x1, 0x5, 0xfffffffffffffffc, 0x4]}, 0x1fe, 0xd) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r4, 0x1, 0x70bd2f, 0x25dfdbfd, {0xc, 0x0, 0x700}}, 0x14}}, 0x24048084) (async) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r4, 0x1, 0x70bd2f, 0x25dfdbfd, {0xc, 0x0, 0x700}}, 0x14}}, 0x24048084) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000019}, 0x40001) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000019}, 0x40001) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f, &(0x7f0000000100)={0x0, 0x5}, 0x2, 0x0, 0x7, 0xa505}, 0x2}, 0x7, 0x4008) 2m25.437862822s ago: executing program 33 (id=1829): mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC2\x00', 0x101802, 0x0) ioctl$auto(0x3, 0x80045530, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2, 0xe2, 0xeb1, 0x405, 0xfffffffffffffff9) socket(0xa, 0x5, 0x0) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x18, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0xffffffffffffff47, 0x2, '/dev/snd/timer\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), r2) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) pread64$auto(0xffffffffffffffff, 0x0, 0x3ef, 0x9) mmap$auto(0x0, 0x2000d, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mremap$auto(0x4000, 0x8000b8, 0x13fd4, 0x3, 0xfffff000) unshare$auto(0x40000080) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r3, 0x400454a4, 0x0) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video54\x00', 0x42942, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000040), 0x7111}, 0x8) write$auto_proc_page_owner_threshold_(r4, &(0x7f0000000140), 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r5) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="07031abd70250c0058"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40800) writev$auto(0x3, &(0x7f0000000140)={&(0x7f0000000000), 0xdc7}, 0x4) 2m12.917489769s ago: executing program 34 (id=1865): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) socketcall$auto(0x9, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x0, 0x0) wait4$auto(0xffffffffffffffff, &(0x7f0000000440)=0x8001, 0x100, &(0x7f0000000480)={{0x3, 0x3}, {0x0, 0x1000}, 0x800, 0x2, 0x5, 0x4, 0x6, 0xde, 0x5a, 0xed, 0xfcc1, 0x80000000, 0x8, 0xfffffffffffffffc, 0xb7a6, 0x3}) (async) r0 = wait4$auto(0xffffffffffffffff, &(0x7f0000000440)=0x8001, 0x100, &(0x7f0000000480)={{0x3, 0x3}, {0x0, 0x1000}, 0x800, 0x2, 0x5, 0x4, 0x6, 0xde, 0x5a, 0xed, 0xfcc1, 0x80000000, 0x8, 0xfffffffffffffffc, 0xb7a6, 0x3}) timer_create$auto_CLOCK_TAI(0xb, &(0x7f0000000540)={@sival_ptr=&(0x7f0000000380)="c73b0b7812419b9fd495ca6f4e48dc83ae0de1e114687db9ab36ad1850c9f55b9f196fd8d9209a297960b620e04d6fcfd5a088d85faf6a953600ccb6b0137b16045e858e8e3cda5047624a7c04fd49e8b0fa68395363c2343189fb3685a4adc630c622a12f46da8b2e602a5ad47105eabec6ba2f50a006ad87fede36895c67e23b79f64732f24fa6918625029e979a182d479ee6eeaeed211665c678f17495bb61a679a1ba1c45cf146557d0a799c16b", @raw, 0x1, @_tid=r0}, &(0x7f0000000580)=0x4) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) prctl$auto(0x1000000003b, 0xfffffffffffffffd, 0x4, 0x2, 0x1ff) (async) prctl$auto(0x1000000003b, 0xfffffffffffffffd, 0x4, 0x2, 0x1ff) unshare$auto(0x8000000) sendmsg$auto_MACSEC_CMD_DEL_RXSA(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async) sendmsg$auto_MACSEC_CMD_DEL_RXSA(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80) semget$auto(0x0, 0x2e4a, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x2, 0x0) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x7d4, 0x1, 0x401c1, 0x2081, 0x3f, 0x7ffc, 0x1ffde, 0x8001, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x200000003004, 0x9, 0x6, 0x10002, 0x80, 0x400, 0xa9, 0x1000, 0x401ffc, 0x8203, 0x400, 0x2, 0x1, 0x0, 0x40, 0x4, 0x2, [0x7249, 0xa9d, 0x0, 0x1000000000000000, 0x0, 0x7, 0x800002, 0x0, 0x0, 0x200000000000000, 0xfc6a, 0x1000000, 0x10000, 0x40000000000, 0x0, 0x500000000000, 0x80000000000000, 0x0, 0xffffffffff7ffffc, 0x5, 0x0, 0x2, 0xfff, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xb, 0xfffffffffffffffc, 0x400000000000002, 0xfffffffffffffffc, 0x3, 0x1, 0x5, 0xfffffffffffffffc, 0x4]}, 0x1fe, 0xd) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r4, 0x1, 0x70bd2f, 0x25dfdbfd, {0xc, 0x0, 0x700}}, 0x14}}, 0x24048084) (async) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r4, 0x1, 0x70bd2f, 0x25dfdbfd, {0xc, 0x0, 0x700}}, 0x14}}, 0x24048084) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000019}, 0x40001) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000019}, 0x40001) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f, &(0x7f0000000100)={0x0, 0x5}, 0x2, 0x0, 0x7, 0xa505}, 0x2}, 0x7, 0x4008) 2m7.039556096s ago: executing program 1 (id=1921): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000001100), 0x40000, 0x0) unshare$auto(0x40000080) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x20800, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) setsockopt$auto(r0, 0x1, 0x2c, 0x0, 0xd) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) mmap$auto(0x100000000000080, 0x7ff, 0x2, 0x11, 0xffffffffffffffff, 0x8007) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x80802, 0x0) ioctl$auto(r1, 0x800064bd, r1) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/projid_map\x00', 0x402, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) write$auto(r2, &(0x7f0000000500)='odev/\xdf\x00\x00\x00\x00H\xde\xe1\xcf\x8ch:\x11\xeah\xf4\xcc\xc6\xa6\xd9\xc3Y\xcb\xf4v6u\\\xd7hD\xfcw\xdb\x05\x11\x96ZP\x81\x87d\xa1#98\xcc\x9d\xc8\x8d\xf6\xdd\x11v(\xb0>$\x96-\xdf\x85(\xa0cq\xc5q\xa4\xad\xae\r\xb5\x8d\x81\xc6?\xd4\x7f\xd3\x1a\xe9\':\xe4\xebd\x97\x8bW^r\xe0\xc8\x85\x03\x04L:\x06\xb6\xe5\x91M\x82\xfeKM\xe0y\xd0\xd5\xb2\xfa\x1do\xa4 \xf6\xdaB\xef\xa6\x1a\x9f\xb6\\\xeb\xa9\x7f\xb3*\xaa9I\x8c,\xefD\x90\x97L!A\xbe\xd13\xc99\x8fF\xc8t\x9c\x06\x90\xb8 \xdc\x9f\x9d\xcaqc4\x10\xc5\xdd\x8c\xe7f{\\D\x86\x10\xe3%n\xbci,:\x8a#', 0x80000000) r3 = socketcall$auto_SYS_GETSOCKOPT(0xf, &(0x7f0000000140)=0xb) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f00000000c0), r3) ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/uid_map\x00', 0x2240, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0) io_uring_setup$auto(0x1000, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 2m5.352655963s ago: executing program 1 (id=1927): mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = socket(0xa, 0x3, 0x3a) prctl$auto(0x41555856, 0x3f, 0x2008, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r1, 0x0, 0x2) getdents$auto(r2, 0x0, 0xa2b0) setsockopt$auto(0x400000000000003, 0x29, 0xcc, 0x0, 0x567) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4000050) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000001a00), 0x88000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000e40), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r4) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r6, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, 0x6}, @NL80211_ATTR_FILS_KEK={0x1e, 0xf2, "ea676a053cf9c397cccecb756ef0574bf31ab2e2290d7f194499"}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000040)={0x18, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HWSIM_ATTR_NO_VIF={0x4, 0x1f}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000084}, 0x10) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_CGROUPSTATS_CMD_GET(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200080d1}, 0x4040040) ioctl$auto_RTC_IRQP_SET(r3, 0x4008700c, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) io_uring_register$auto(0x2, 0x6, 0x0, 0xfffffffe) 2m2.178469318s ago: executing program 1 (id=1937): socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x25, 0x0, 0x94) 2m1.88120082s ago: executing program 1 (id=1940): close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x4) r0 = socket(0x1, 0x80000, 0x100) r1 = socket(0x840000000002, 0x3, 0xff) connect$auto(r1, &(0x7f0000000080)=@phonet={0x23, 0x4, 0x9, 0x10}, 0x55) mmap$auto(0x0, 0x240009, 0xdf, 0x8000009b72, 0x7, 0x28000) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x402000c, 0x5f, 0x100000010, r0, 0x2000008000) r2 = socket(0x2, 0x1, 0x0) bind$auto(r2, &(0x7f0000000040)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x32}, 0x7}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendto$auto(0x3, 0x0, 0xfffffffffffffff8, 0x103, 0x0, 0x1c) ioctl$auto(0x3, 0x541b, 0x38) syz_genetlink_get_family_id$auto_tcp_metrics(0x0, r1) lseek$auto(r2, 0x1a, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smbd_genl(0x0, r3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x2000, 0x0) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_L2TP_CMD_SESSION_MODIFY(r0, 0x0, 0x408a4) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0x4, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x2, 0x10, 0x8000001c, 0xcd7, 0xb, 0x401, 0x234, 0xd8]}, 0x0) select$auto(0x10, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000040001fd, 0x2, 0x4, 0x8, 0x9dc, 0x200000006, 0x101, 0x10004, 0x5, 0x3, 0x5, 0x2, 0x80000000, 0x9, 0xffffdfffffffff81, 0x5]}, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0)="f2196031d81edaa2a63257467347df73576663e6e17f6cd970add5071c2a200d9356513551ca2f3f2418f4af3d4c7e9b06c3250a74c44ce92eeb9d1c03c3b4ce6139510000000000000000") ioctl$auto_SNDCTL_DSP_STEREO(r4, 0xc0045003, 0x0) close_range$auto(0x2, 0x8000, 0x0) 2m0.891426581s ago: executing program 1 (id=1944): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x3b) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram0\x00', 0x16f300, 0x0) sendfile$auto(0x3, r1, 0x0, 0x400000000006) 1m59.645568847s ago: executing program 1 (id=1948): unshare$auto(0x40000080) mmap$auto(0xffffffffffffffff, 0x2020004, 0x203, 0xeb1, 0xffffffffffffffff, 0x208000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x2, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x101000, 0x0) write$auto(r0, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\xf5\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\t\x00\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85\x00 /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00\r\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) bind$auto(0x3, 0x0, 0x6d) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), 0xffffffffffffffff) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/free_buffer\x00', 0x2d04c0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) socket(0x2, 0x801, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x17) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="05082dbd7000ecdbdf257e000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r3 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r3, &(0x7f00000000c0)="632d1bfe595046ab5c40bd6163307acb6d16baef6176e669a216aae1836674fdd80500ffffffffffdfff1a0e00"/56, 0x38) fanotify_init$auto(0xf, 0x0) mmap$auto(0x0, 0x5, 0x7, 0x400ff, 0xffffffffffffffff, 0x10008003) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) io_uring_setup$auto(0x5, 0x0) mknod$auto(&(0x7f0000000680)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x1082, 0x2005) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\'\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') open(0x0, 0x214280, 0xd7) socket$nl_generic(0x10, 0x3, 0x10) 1m44.346682051s ago: executing program 35 (id=1948): unshare$auto(0x40000080) mmap$auto(0xffffffffffffffff, 0x2020004, 0x203, 0xeb1, 0xffffffffffffffff, 0x208000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x2, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x101000, 0x0) write$auto(r0, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\xf5\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\t\x00\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85\x00 /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00\r\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) bind$auto(0x3, 0x0, 0x6d) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), 0xffffffffffffffff) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/free_buffer\x00', 0x2d04c0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) socket(0x2, 0x801, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x17) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="05082dbd7000ecdbdf257e000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r3 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r3, &(0x7f00000000c0)="632d1bfe595046ab5c40bd6163307acb6d16baef6176e669a216aae1836674fdd80500ffffffffffdfff1a0e00"/56, 0x38) fanotify_init$auto(0xf, 0x0) mmap$auto(0x0, 0x5, 0x7, 0x400ff, 0xffffffffffffffff, 0x10008003) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) io_uring_setup$auto(0x5, 0x0) mknod$auto(&(0x7f0000000680)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x1082, 0x2005) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\'\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') open(0x0, 0x214280, 0xd7) socket$nl_generic(0x10, 0x3, 0x10) 17.946663882s ago: executing program 0 (id=2195): close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x23) socket(0xa, 0x5, 0x84) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, 0x0, 0x6, 0xfffffffffffffffb, 0x4, 0x800) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = open$dir(0x0, 0x10000, 0x6) r2 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) pwritev$auto(r1, 0x0, 0x2, 0xfffffffffffff274, 0x6) msgget$auto(0xc, 0x77d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) mmap$auto(0xfffff000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000040)=0x1) sendto$auto(0x3, 0x0, 0x1, 0x101, 0x0, 0x1c) ioctl$auto(r2, 0x3, 0x38) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/user\x00') getdents$auto(r3, 0x0, 0xa2b0) msync$auto(0x0, 0x80002000000005, 0x6) msgrcv$auto(0x0, 0x0, 0xff9, 0x0, 0x3) syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000180), 0xffffffffffffffff) prctl$auto(0x41, 0x7, 0x0, 0x0, 0x0) mprotect$auto(0xd, 0x1, 0x4) madvise$auto(0x110c230000, 0x8031ca, 0x9) close_range$auto(0x2, 0xa, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYRES64=r0, @ANYBLOB="a8f05f19889d33759527d031c5f8c4648b7cb4fd3c9875e55b6d013cf967f27e7986cdff682678f64236aae413f84716e7db4875deecec5c6ffa96f1cc080e55ce7e4681417c8a0dd188ebaa717d0912169852febedc10492866650eb9992a3081044bd3181425f322055caad19267b9cb19faa4b90bfa1a68f76abf471a7a557568b5d9d1b5da9d40423744b99c43f395b7c9874c2928271b67783f3f09764eb9f77762ca06badd7dba252d3a3da18dc2c4b777876f066e3958d1a34e41ac435bcbc8f4950ff4d94268997b6e48dc5f5a69db3e25c08648733ebbcd301dada984f265ddb6d8a6c35d9bbd98a9400820ca8c1e21fe"], 0x1ac}}, 0x19) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x42000, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0xfffffffc, &(0x7f0000000100)={0x0, 0xfbe}, 0x4, 0x0, 0xa, 0x1}, 0x2}, 0xc, 0x4008) 17.199383219s ago: executing program 0 (id=2190): mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) rseq$auto(0x0, 0x20, 0x0, 0x8000006) socketcall$auto_SYS_SOCKET(0x1, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram3\x00', 0x159e02, 0x0) r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r1, 0x40186f40, &(0x7f0000000140)={0xfffffffd, 0x5, 0x7, 0x0, 0x1, 0x1}) mmap$auto(0x0, 0x2, 0xffe, 0x8000000008011, r0, 0x8000) preadv2$auto(r0, &(0x7f0000000140)={0x0, 0x6}, 0xa, 0x3, 0x7, 0x2e) read$auto_zero_fops_mem(0xffffffffffffffff, &(0x7f0000000380)=""/187, 0xbb) inotify_init1$auto(0x41) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x1000000010000, 0x4, 0x9f, 0x12, 0xffffffffffffffff, 0x8) mprotect$auto(0xffd, 0x20000000401003, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) gettid() socket(0xb, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/034/001\x00', 0x20882, 0x0) rt_sigqueueinfo$auto(0x0, 0x20000009, &(0x7f00000000c0)={@_si_pad}) ioctl$auto_VHOST_SET_MEM_TABLE(r2, 0x4001af84, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x0) 15.120650856s ago: executing program 0 (id=2198): mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = socket(0xa, 0x3, 0x3a) prctl$auto(0x41555856, 0x3f, 0x2008, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r1, 0x0, 0x2) getdents$auto(r2, 0x0, 0xa2b0) setsockopt$auto(0x400000000000003, 0x29, 0xcc, 0x0, 0x567) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4000050) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000001a00), 0x88000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000e40), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r4) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r5, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, 0x6}, @NL80211_ATTR_FILS_KEK={0x1e, 0xf2, "ea676a053cf9c397cccecb756ef0574bf31ab2e2290d7f194499"}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_CGROUPSTATS_CMD_GET(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200080d1}, 0x4040040) ioctl$auto_RTC_IRQP_SET(r3, 0x4008700c, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) io_uring_register$auto(0x2, 0x6, 0x0, 0xfffffffe) 12.361500295s ago: executing program 5 (id=2202): mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) rseq$auto(0x0, 0x20, 0x0, 0x8000006) socketcall$auto_SYS_SOCKET(0x1, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram3\x00', 0x159e02, 0x0) r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r1, 0x40186f40, &(0x7f0000000140)={0xfffffffd, 0x5, 0x7, 0x0, 0x1, 0x1}) mmap$auto(0x0, 0x2, 0xffe, 0x8000000008011, r0, 0x8000) preadv2$auto(r0, &(0x7f0000000140)={0x0, 0x6}, 0xa, 0x3, 0x7, 0x2e) read$auto_zero_fops_mem(0xffffffffffffffff, &(0x7f0000000380)=""/187, 0xbb) inotify_init1$auto(0x41) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x1000000010000, 0x4, 0x9f, 0x12, 0xffffffffffffffff, 0x8) mprotect$auto(0xffd, 0x20000000401003, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) gettid() socket(0xb, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_VHOST_SET_MEM_TABLE(r2, 0x4001af84, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x0) 11.439114644s ago: executing program 0 (id=2203): getsockopt$auto(0xffffffffffffffff, 0x114, 0x2716, 0xfffffffffffffffc, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x2aa01, 0x0) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x84, 0x0, 0x90) mmap$auto(0x0, 0x40, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) lchown$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/orangefs/getattr_timeout_msecs\x00', 0x8a82b6a56f18970a, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000540)="258fde12f001", 0x6) utime$auto(&(0x7f0000000040)='./file0\x00', 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r2 = socket(0xa, 0x1, 0x84) getsockopt$auto(r2, 0x84, 0xb, 0x0, 0x0) r3 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) ioctl$auto_I2C_SMBUS(r3, 0x720, 0x0) r4 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) read$auto_minstrel_ht_stat_fops_rc80211_minstrel_ht_debugfs(r4, 0x0, 0x0) syz_clone(0x20011, 0x0, 0x0, 0x0, 0x0, 0x0) 11.048942185s ago: executing program 6 (id=2204): openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000001100), 0x40000, 0x0) unshare$auto(0x40000080) mlock$auto(0x1004, 0x6) mlock$auto(0x6, 0x6) r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x101000, 0x0) mmap$auto(0x0, 0x9, 0x3, 0xeb1, r0, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setdomainname$auto(0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr15/address\x00', 0x129081, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r1, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) 10.969425389s ago: executing program 5 (id=2205): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/midiC2D0\x00', 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xed\xf8\xe1\xbc\x1d\x91D\xe7R\x12\xc4\xcd\xc6\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY2@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(', 0x100000a3dd) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) close_range$auto(0x2, 0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x281, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/queues\x00', 0x20000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000180)=""/218, 0xda) write$auto(0xca, &(0x7f00000002c0)='\x04\x10\x00\x00\x00\x00\x00\x00\x00\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c\f\xb6,NS\xa2(Q\xcc\x04\x7f\x9f\xb1\xb6\x17\x80f\xf2P\xe1/?\xec z\xcbM\x05\xc84\xfc .\xf8\xc2\f9(\xd5\x02\"\x05\xcd\xeb\xa5\xd6\xe0\x9f\xbb]W\xc1\xbc;\n\xc8\xb3\xa6\xb7+\xcc\xf2/\x96H\xee$=\xe8-\bpV\xd4a\x91\x8f\xb9\xe4L[\x99g\xe1\x95-{\xf8\x8d\xb6\x82\x85Y.}lg\xbb/\xdf\xd3zJ\xf2', 0x7f) statmount$auto(0x0, 0x0, 0x9, 0xd) r4 = ioctl$auto_TIOCGPTPEER2(0xffffffffffffffff, 0x5441, 0x0) io_uring_setup$auto(0x7fffffff, &(0x7f0000000380)={0x3, 0x2, 0x8, 0x2, 0x4, 0xd, r4, [0x4, 0x1, 0x6], {0x3, 0x813, 0x0, 0x9, 0x18, 0x0, 0x3, 0x7, 0xfffffffffffff800}, {0x896, 0x5, 0x666c, 0x400, 0x48000, 0xd4, 0x3, 0x9, 0xffffffffffffffff}}) read$auto(0xffffffffffffffff, 0x0, 0x20) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockname$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto(0xca, &(0x7f0000000140)='\x04\x0e\x06\xd5\x89|d\v\x00\x00@\x00\x81\x00\x00\x00\xf6\xf5\x00\xdf\xff\x00', 0x10) mmap$auto(0x0, 0x202000d, 0x4, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) adjtimex$auto(0x0) 10.295624128s ago: executing program 0 (id=2215): mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0xa, 0x2, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x6, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000884) lstat$auto(0x0, &(0x7f0000000180)={0xb, 0xfffffffffffffffe, 0x400000100000001, 0x1000, 0x0, 0x0, 0x0, 0x200fa98, 0xc, 0x6, 0x8000000004, 0x100000007fffffff, 0xffffffffffffffff, 0x0, 0x7, 0x4, 0xb}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 10.026344343s ago: executing program 6 (id=2208): r0 = getsockopt$auto(0xffffffffffffffff, 0x114, 0x2716, 0xfffffffffffffffc, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x2aa01, 0x0) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, 0x0, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$auto_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, 0x0) syz_clone(0x20011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4$auto(0xffffffffffffffff, &(0x7f00000002c0)=0x5, 0x0, 0x0) openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, 0x0, 0x1940, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) socket(0x2c, 0x3, 0x10000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) write$auto(0xca, &(0x7f0000000140)='\x04\x0e\x06\xd5\x89|d\v\x00\x00@\x00\x81\x00\x00\x00\xf6\xf5\x00\xdf\xff\x00', 0x10) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon37\x00', 0x640, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/input/event2\x00', 0x200000, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.max.depth\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000100)='7', 0x7) ioctl$auto_MON_IOCG_STATS(r2, 0x80089203, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x0, 0x0) madvise$auto(0xf, 0x8, 0xe) 9.715842819s ago: executing program 0 (id=2209): mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = socket(0xa, 0x3, 0x3a) prctl$auto(0x41555856, 0x3f, 0x2008, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r1, 0x0, 0x2) getdents$auto(r2, 0x0, 0xa2b0) setsockopt$auto(0x400000000000003, 0x29, 0xcc, 0x0, 0x567) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4000050) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000001a00), 0x88000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000e40), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r4) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r5, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, 0x6}, @NL80211_ATTR_FILS_KEK={0x1e, 0xf2, "ea676a053cf9c397cccecb756ef0574bf31ab2e2290d7f194499"}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_CGROUPSTATS_CMD_GET(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200080d1}, 0x4040040) ioctl$auto_RTC_IRQP_SET(r3, 0x4008700c, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) io_uring_register$auto(0x2, 0x6, 0x0, 0xfffffffe) 7.730973424s ago: executing program 5 (id=2211): mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) rseq$auto(0x0, 0x20, 0x0, 0x8000006) socketcall$auto_SYS_SOCKET(0x1, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram3\x00', 0x159e02, 0x0) r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r1, 0x40186f40, &(0x7f0000000140)={0xfffffffd, 0x5, 0x7, 0x0, 0x1, 0x1}) mmap$auto(0x0, 0x2, 0xffe, 0x8000000008011, r0, 0x8000) preadv2$auto(r0, &(0x7f0000000140)={0x0, 0x6}, 0xa, 0x3, 0x7, 0x2e) read$auto_zero_fops_mem(0xffffffffffffffff, &(0x7f0000000380)=""/187, 0xbb) inotify_init1$auto(0x41) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x1000000010000, 0x4, 0x9f, 0x12, 0xffffffffffffffff, 0x8) mprotect$auto(0xffd, 0x20000000401003, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) gettid() socket(0xb, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_VHOST_SET_MEM_TABLE(r2, 0x4001af84, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x0) 7.399987526s ago: executing program 6 (id=2212): mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) rseq$auto(0x0, 0x20, 0x0, 0x8000006) socketcall$auto_SYS_SOCKET(0x1, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram3\x00', 0x159e02, 0x0) r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r1, 0x40186f40, &(0x7f0000000140)={0xfffffffd, 0x5, 0x7, 0x0, 0x1, 0x1}) mmap$auto(0x0, 0x2, 0xffe, 0x8000000008011, r0, 0x8000) preadv2$auto(r0, &(0x7f0000000140)={0x0, 0x6}, 0xa, 0x3, 0x7, 0x2e) read$auto_zero_fops_mem(0xffffffffffffffff, &(0x7f0000000380)=""/187, 0xbb) inotify_init1$auto(0x41) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x1000000010000, 0x4, 0x9f, 0x12, 0xffffffffffffffff, 0x8) mprotect$auto(0xffd, 0x20000000401003, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) gettid() socket(0xb, 0x3, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/034/001\x00', 0x20882, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r2, 0x4001af84, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x0) 6.70077807s ago: executing program 5 (id=2213): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001380)='/dev/sequencer\x00', 0x103143, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x2000009b72, 0x7, 0x80) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptybe\x00', 0x20080, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) pidfd_send_signal$auto_PIDFD_SIGNAL_PROCESS_GROUP(0xffffffffffffffff, 0x1d3b, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(r2, 0x1, 0x10, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_VENDOR(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)={0x14, r4, 0x705, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x80) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) close_range$auto(0x2, 0x8, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x2) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!'], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r5) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000ec0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000300)={0x17c, r6, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7}, @NL80211_ATTR_STA_FLAGS2={0xee, 0x43, "87532be8c02e498868e569265e669fd84a305dc4c62b77b095a40153ac0cf0655a39203f0736ec578cd1e084e4fb456d3395612d42421513a220613332b5a26756c1b3db74d84dfaa704db093e28416b4d65d7c6eb74838535e4a959b6400d4a5814218dc585274fe7241544b870e6cca0b3134437383ffd08bf8db152598bc885326465771475f3252dc87ffd433573975f5e608e97945e0f3cf65677f7df0c5656ca9a9cdb55bf8ea8bfea389071756152f39621a03c5877e6050e36753eae4540aa87ab8d8ebf3b182b9077bb7dcd36b1d15fb76e4229563e21311509be48ff6e9fcc4e04225ed5ef"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_DISABLE_EHT={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_BEACON_TAIL={0x47, 0xf, "12f3d77ca4aefbf49c1ee72dc9996d47a3dec57ccbd1fbae41b5c31b03c37d3aced5254e85e4b951d4ab55f83e957722387a47d34be31c5dea59ff6e78ad6208ddb8fb"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x1}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x0, 0x1b, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44000884}, 0xc880) r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/016/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000100)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240), 0xc694, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0}) 6.441968034s ago: executing program 7 (id=2214): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) socket(0xa, 0x1, 0x84) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/oom_adj\x00', 0x980, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000140), r2) r3 = socket(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth1_to_bond\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GET2(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES64=r0, @ANYBLOB="e9fff6ffffffffff00ee03a32ad58c824c404bc1458ca65d3e336f27ffffffffffffff009b650063fbe5ac680ce9a26dbf4bfb230188bd109a3f4b5c7836", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) read$auto(r1, 0x0, 0x4) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) getpid() ioctl$auto(0xffffffffffffffff, 0x4b4d, 0xffffffffffffffff) capset$auto(0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 4.872217514s ago: executing program 6 (id=2216): getsockopt$auto(0xffffffffffffffff, 0x114, 0x2716, 0xfffffffffffffffc, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x2aa01, 0x0) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x84, 0x0, 0x90) mmap$auto(0x0, 0x40, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) lchown$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/orangefs/getattr_timeout_msecs\x00', 0x8a82b6a56f18970a, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000540)="258fde12f001", 0x6) utime$auto(&(0x7f0000000040)='./file0\x00', 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r2 = socket(0xa, 0x1, 0x84) getsockopt$auto(r2, 0x84, 0xb, 0x0, 0x0) r3 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) ioctl$auto_I2C_SMBUS(r3, 0x720, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) syz_clone(0x20011, 0x0, 0x0, 0x0, 0x0, 0x0) 4.591770405s ago: executing program 5 (id=2217): openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000001100), 0x40000, 0x0) unshare$auto(0x40000080) mlock$auto(0x1004, 0x6) mlock$auto(0x6, 0x6) r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x101000, 0x0) mmap$auto(0x0, 0x9, 0x3, 0xeb1, r0, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setdomainname$auto(0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr15/address\x00', 0x129081, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r1, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) 4.252742773s ago: executing program 7 (id=2218): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) socket(0xa, 0x1, 0x84) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/oom_adj\x00', 0x980, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000140), r2) r3 = socket(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth1_to_bond\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GET2(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES64=r0, @ANYBLOB="e9fff6ffffffffff00ee03a32ad58c824c404bc1458ca65d3e336f27ffffffffffffff009b650063fbe5ac680ce9a26dbf4bfb230188bd109a3f4b5c7836", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) read$auto(r1, 0x0, 0x4) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) getpid() ioctl$auto(0xffffffffffffffff, 0x4b4d, 0xffffffffffffffff) capset$auto(0x0, 0x0) 3.999602s ago: executing program 6 (id=2219): mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) rseq$auto(0x0, 0x20, 0x0, 0x8000006) socketcall$auto_SYS_SOCKET(0x1, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram3\x00', 0x159e02, 0x0) r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r1, 0x40186f40, &(0x7f0000000140)={0xfffffffd, 0x5, 0x7, 0x0, 0x1, 0x1}) mmap$auto(0x0, 0x2, 0xffe, 0x8000000008011, r0, 0x8000) preadv2$auto(r0, &(0x7f0000000140)={0x0, 0x6}, 0xa, 0x3, 0x7, 0x2e) read$auto_zero_fops_mem(0xffffffffffffffff, &(0x7f0000000380)=""/187, 0xbb) inotify_init1$auto(0x41) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x1000000010000, 0x4, 0x9f, 0x12, 0xffffffffffffffff, 0x8) mprotect$auto(0xffd, 0x20000000401003, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) gettid() socket(0xb, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_VHOST_SET_MEM_TABLE(r2, 0x4001af84, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x0) 3.046318005s ago: executing program 7 (id=2220): mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = socket(0xa, 0x3, 0x3a) prctl$auto(0x41555856, 0x3f, 0x2008, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r1, 0x0, 0x2) getdents$auto(r2, 0x0, 0xa2b0) setsockopt$auto(0x400000000000003, 0x29, 0xcc, 0x0, 0x567) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4000050) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000001a00), 0x88000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000e40), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r4) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000040)={0x18, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HWSIM_ATTR_NO_VIF={0x4, 0x1f}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000084}, 0x10) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_CGROUPSTATS_CMD_GET(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200080d1}, 0x4040040) ioctl$auto_RTC_IRQP_SET(r3, 0x4008700c, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) io_uring_register$auto(0x2, 0x6, 0x0, 0xfffffffe) 2.068642062s ago: executing program 7 (id=2222): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r0, 0x0, 0xa5) getdents64$auto(r0, 0x0, 0x20000015) 1.738599824s ago: executing program 7 (id=2223): mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) rseq$auto(0x0, 0x20, 0x0, 0x8000006) socketcall$auto_SYS_SOCKET(0x1, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram3\x00', 0x159e02, 0x0) r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r1, 0x40186f40, &(0x7f0000000140)={0xfffffffd, 0x5, 0x7, 0x0, 0x1, 0x1}) mmap$auto(0x0, 0x2, 0xffe, 0x8000000008011, r0, 0x8000) preadv2$auto(r0, &(0x7f0000000140)={0x0, 0x6}, 0xa, 0x3, 0x7, 0x2e) read$auto_zero_fops_mem(0xffffffffffffffff, &(0x7f0000000380)=""/187, 0xbb) inotify_init1$auto(0x41) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x1000000010000, 0x4, 0x9f, 0x12, 0xffffffffffffffff, 0x8) mprotect$auto(0xffd, 0x20000000401003, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) gettid() socket(0xb, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_VHOST_SET_MEM_TABLE(r2, 0x4001af84, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x0) 532.008159ms ago: executing program 5 (id=2224): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x8000000000000003, 0x5, 0x1b, 0x401, 0x14) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x101b42, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x10, 0x2) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0)=@iter_create={r0, 0x5}, 0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x123002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) futex_waitv$auto(&(0x7f0000000000)={0x10000000, 0x0, 0x9}, 0x1, 0x0, 0x0, 0x100623d) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, 0x0, 0x80000000) 27.470913ms ago: executing program 7 (id=2225): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x232d01, 0x0) ioctl$auto_SNDCTL_MIDI_INFO(r0, 0xc074510c, 0x0) r1 = ioctl$auto_TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) mmap$auto(0x0, 0x20009, 0x1000, 0xeb1, 0x401, 0x8000) mq_open$auto(&(0x7f0000000080)='/sys/davices/virtual/workqueue/nvmet-wq/affinity_scope\x00', 0x3, 0x0, &(0x7f0000000180)={0x91, 0x4, 0x1fffffffffffffff, 0x1}) r2 = fcntl$auto_F_WRLCK(0xffffffffffffffff, 0x7, 0x1) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f0000000380)=@bpf_attr_7={@start_id=0x81, 0x2414, 0x8, r2}, 0x1) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0) ioctl$auto(r3, 0xab09, r3) futex_waitv$auto(&(0x7f0000000000)={0x0, 0x7e4, 0x2}, 0x1, 0x0, 0x0, 0x623d) close_range$auto(0x2, 0x8, 0x6) mmap$auto(0x0, 0x40006, 0xdf, 0x200009b72, 0x7, 0x28000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8000, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r5, 0xc0045520, r4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = socket(0xa, 0x5, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x562, 0x0) write$auto(r7, &(0x7f00000005c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xe1\x903\x9e\xca\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81\xe4\xab\xc5\x8da\vr\xb91\xfe\x9a\xf0\x0f\x03\x12m/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\xf4\r\x19$\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbbc\xb9\xd0\x1f\xd9\x8e`\xba\xd0\xa4\xf5\x00\x00\x00\x00\x00\x00\x00\x00', 0x40098c7) getsockopt$auto(r6, 0x84, 0x1d, 0x0, 0x0) mprotect$auto(0x200000000000, 0x806121, 0x8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r8 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyu6\x00', 0xfc142, 0x0) write$auto_console_fops_tty_io(r8, &(0x7f0000000000)="c80d1b5d399b3f", 0xfdef) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop2\x00', 0x101080, 0x0) r9 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r9, 0x122b57ab67e6092c, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 0s ago: executing program 6 (id=2226): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001380)='/dev/sequencer\x00', 0x103143, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x2000009b72, 0x7, 0x80) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptybe\x00', 0x20080, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) pidfd_send_signal$auto_PIDFD_SIGNAL_PROCESS_GROUP(0xffffffffffffffff, 0x1d3b, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(r1, 0x1, 0x10, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_VENDOR(r2, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)={0x14, r3, 0x705, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x80) kernel console output (not intermixed with test programs): X: 0000000000000009 [ 731.795145][T14555] RAX: ffffffffffffffda RBX: 00007ff5da825fa0 RCX: 00007ff5da59de59 [ 731.795166][T14555] RDX: 00000000000000df RSI: 0000000000400006 RDI: 0000000000000000 [ 731.795181][T14555] RBP: 00007ff5da633e6f R08: 0000000000000002 R09: 0000000000008000 [ 731.795196][T14555] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 731.795211][T14555] R13: 00007ff5da826038 R14: 00007ff5da825fa0 R15: 00007ffca26cd3c8 [ 731.795242][T14555] [ 732.668411][T14568] FAULT_INJECTION: forcing a failure. [ 732.668411][T14568] name failslab, interval 1, probability 0, space 0, times 0 [ 732.728100][T14568] CPU: 0 UID: 0 PID: 14568 Comm: syz.4.1626 Tainted: G L syzkaller #0 PREEMPT(full) [ 732.728144][T14568] Tainted: [L]=SOFTLOCKUP [ 732.728152][T14568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 732.728166][T14568] Call Trace: [ 732.728173][T14568] [ 732.728182][T14568] dump_stack_lvl+0x100/0x190 [ 732.728212][T14568] should_fail_ex.cold+0x5/0xa [ 732.728238][T14568] should_failslab+0xc2/0x120 [ 732.728269][T14568] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 732.728298][T14568] ? __d_alloc+0x35/0xa50 [ 732.728325][T14568] __d_alloc+0x35/0xa50 [ 732.728350][T14568] d_alloc_pseudo+0x1c/0xc0 [ 732.728379][T14568] alloc_file_pseudo+0x118/0x290 [ 732.728409][T14568] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 732.728437][T14568] ? alloc_fd+0x471/0x7a0 [ 732.728483][T14568] sock_alloc_file+0x50/0x210 [ 732.728514][T14568] __sys_socket+0x1c0/0x260 [ 732.728554][T14568] ? __pfx___sys_socket+0x10/0x10 [ 732.728598][T14568] __x64_sys_socket+0x72/0xb0 [ 732.728633][T14568] ? lockdep_hardirqs_on+0x78/0x100 [ 732.728672][T14568] do_syscall_64+0x115/0x840 [ 732.728720][T14568] ? clear_bhb_loop+0x40/0x90 [ 732.728771][T14568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.728796][T14568] RIP: 0033:0x7f378239de59 [ 732.728814][T14568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.728837][T14568] RSP: 002b:00007f37831f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 732.728860][T14568] RAX: ffffffffffffffda RBX: 00007f3782625fa0 RCX: 00007f378239de59 [ 732.728875][T14568] RDX: 0000000000000000 RSI: 0000000000080805 RDI: 0000000000000026 [ 732.728889][T14568] RBP: 00007f3782433e6f R08: 0000000000000000 R09: 0000000000000000 [ 732.728903][T14568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 732.728917][T14568] R13: 00007f3782626038 R14: 00007f3782625fa0 R15: 00007ffe0ba94ac8 [ 732.728947][T14568] [ 733.490429][T14575] FAULT_INJECTION: forcing a failure. [ 733.490429][T14575] name failslab, interval 1, probability 0, space 0, times 0 [ 733.541442][T14575] CPU: 0 UID: 0 PID: 14575 Comm: syz.1.1627 Tainted: G L syzkaller #0 PREEMPT(full) [ 733.541479][T14575] Tainted: [L]=SOFTLOCKUP [ 733.541487][T14575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 733.541501][T14575] Call Trace: [ 733.541508][T14575] [ 733.541518][T14575] dump_stack_lvl+0x100/0x190 [ 733.541548][T14575] should_fail_ex.cold+0x5/0xa [ 733.541574][T14575] should_failslab+0xc2/0x120 [ 733.541605][T14575] __kvmalloc_node_noprof+0x116/0x970 [ 733.541631][T14575] ? find_held_lock+0x2b/0x80 [ 733.541665][T14575] ? __might_fault+0xc5/0x140 [ 733.541688][T14575] ? __might_fault+0xc5/0x140 [ 733.541709][T14575] ? mpls_platform_labels+0x983/0x1040 [ 733.541851][T14575] mpls_platform_labels+0x983/0x1040 [ 733.541891][T14575] ? _copy_from_iter+0x270/0x1690 [ 733.541940][T14575] ? __pfx_mpls_platform_labels+0x10/0x10 [ 733.541988][T14575] ? ns_capable_noaudit+0xd5/0x100 [ 733.542009][T14575] ? proc_sys_call_handler+0x2c7/0x5a0 [ 733.542057][T14575] proc_sys_call_handler+0x47f/0x5a0 [ 733.542113][T14575] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 733.542166][T14575] vfs_write+0x6ac/0x1050 [ 733.542221][T14575] ? __pfx_proc_sys_write+0x10/0x10 [ 733.542270][T14575] ? __pfx_vfs_write+0x10/0x10 [ 733.542322][T14575] ksys_write+0x12a/0x250 [ 733.542356][T14575] ? __pfx_ksys_write+0x10/0x10 [ 733.542399][T14575] do_syscall_64+0x115/0x840 [ 733.542420][T14575] ? clear_bhb_loop+0x40/0x90 [ 733.542448][T14575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.542472][T14575] RIP: 0033:0x7f381bb9de59 [ 733.542491][T14575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.542515][T14575] RSP: 002b:00007f381cafb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 733.542537][T14575] RAX: ffffffffffffffda RBX: 00007f381be25fa0 RCX: 00007f381bb9de59 [ 733.542553][T14575] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 733.542566][T14575] RBP: 00007f381cafb090 R08: 0000000000000000 R09: 0000000000000000 [ 733.542581][T14575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.542595][T14575] R13: 00007f381be26038 R14: 00007f381be25fa0 R15: 00007ffeddba4768 [ 733.542625][T14575] [ 734.266023][T14580] random: crng reseeded on system resumption [ 735.532482][T14588] FAULT_INJECTION: forcing a failure. [ 735.532482][T14588] name failslab, interval 1, probability 0, space 0, times 0 [ 735.594297][T14588] CPU: 0 UID: 0 PID: 14588 Comm: syz.4.1631 Tainted: G L syzkaller #0 PREEMPT(full) [ 735.594333][T14588] Tainted: [L]=SOFTLOCKUP [ 735.594342][T14588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 735.594355][T14588] Call Trace: [ 735.594362][T14588] [ 735.594371][T14588] dump_stack_lvl+0x100/0x190 [ 735.594402][T14588] should_fail_ex.cold+0x5/0xa [ 735.594428][T14588] should_failslab+0xc2/0x120 [ 735.594460][T14588] __kmalloc_cache_noprof+0x91/0x6c0 [ 735.594500][T14588] ? alloc_pipe_info+0x10e/0x590 [ 735.594542][T14588] alloc_pipe_info+0x10e/0x590 [ 735.594582][T14588] splice_direct_to_actor+0x78f/0xa30 [ 735.594708][T14588] ? __pfx_direct_splice_actor+0x10/0x10 [ 735.594767][T14588] ? __pfx_aa_file_perm+0x10/0x10 [ 735.594824][T14588] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 735.594870][T14588] do_splice_direct+0x174/0x240 [ 735.594909][T14588] ? __pfx_do_splice_direct+0x10/0x10 [ 735.594947][T14588] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 735.594995][T14588] ? rw_verify_area+0xce/0x6d0 [ 735.595033][T14588] do_sendfile+0xadc/0xe20 [ 735.595071][T14588] ? __pfx_do_sendfile+0x10/0x10 [ 735.595102][T14588] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 735.595145][T14588] ? __fget_files+0x21f/0x3d0 [ 735.595187][T14588] __x64_sys_sendfile64+0x1d8/0x220 [ 735.595210][T14588] ? ksys_write+0x1ac/0x250 [ 735.595243][T14588] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 735.595275][T14588] do_syscall_64+0x115/0x840 [ 735.595295][T14588] ? clear_bhb_loop+0x40/0x90 [ 735.595322][T14588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.595346][T14588] RIP: 0033:0x7f378239de59 [ 735.595364][T14588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.595386][T14588] RSP: 002b:00007f37831f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 735.595409][T14588] RAX: ffffffffffffffda RBX: 00007f3782625fa0 RCX: 00007f378239de59 [ 735.595424][T14588] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 735.595438][T14588] RBP: 00007f37831f8090 R08: 0000000000000000 R09: 0000000000000000 [ 735.595453][T14588] R10: 0000400000000006 R11: 0000000000000246 R12: 0000000000000001 [ 735.595468][T14588] R13: 00007f3782626038 R14: 00007f3782625fa0 R15: 00007ffe0ba94ac8 [ 735.595497][T14588] [ 736.383303][T14593] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 736.485311][T14593] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 736.592948][T14593] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 737.526517][T12158] Bluetooth: hci0: command 0x0c1a tx timeout [ 737.679627][T12158] Bluetooth: hci4: Unexpected cc 0x7c89 with no status [ 738.641334][T12158] Bluetooth: hci2: command 0x0c1a tx timeout [ 738.720839][T11838] Bluetooth: hci4: command 0x0c1a tx timeout [ 872.973710][T16428] CPU: 0 UID: 0 PID: 16428 Comm: syz.5.1998 Tainted: G L syzkaller #0 PREEMPT(full) [ 872.973751][T16428] Tainted: [L]=SOFTLOCKUP [ 872.973761][T16428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 872.973776][T16428] Call Trace: [ 872.973784][T16428] [ 872.973793][T16428] dump_stack_lvl+0x100/0x190 [ 872.973829][T16428] should_fail_ex.cold+0x5/0xa [ 872.973857][T16428] should_failslab+0xc2/0x120 [ 872.973889][T16428] kmem_cache_alloc_noprof+0x91/0x6a0 [ 872.973917][T16428] ? d_instantiate+0x8a/0xb0 [ 872.973942][T16428] ? d_instantiate+0x8a/0xb0 [ 872.973966][T16428] ? alloc_empty_file+0x5b/0x1c0 [ 872.973999][T16428] alloc_empty_file+0x5b/0x1c0 [ 872.974028][T16428] alloc_file_pseudo+0x183/0x290 [ 872.974058][T16428] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 872.974095][T16428] ? security_inode_init_security_anon+0x7b/0x230 [ 872.974129][T16428] __anon_inode_getfile+0xe8/0x280 [ 872.974234][T16428] new_userfaultfd+0x255/0x400 [ 872.974270][T16428] __x64_sys_userfaultfd+0x4b/0xb0 [ 872.974311][T16428] do_syscall_64+0x115/0x840 [ 872.974333][T16428] ? clear_bhb_loop+0x40/0x90 [ 872.974363][T16428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.974389][T16428] RIP: 0033:0x7fec3119de59 [ 872.974409][T16428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 872.974434][T16428] RSP: 002b:00007fec2f3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 872.974458][T16428] RAX: ffffffffffffffda RBX: 00007fec31425fa0 RCX: 00007fec3119de59 [ 872.974475][T16428] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 872.974489][T16428] RBP: 00007fec31233e6f R08: 0000000000000000 R09: 0000000000000000 [ 872.974505][T16428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 872.974520][T16428] R13: 00007fec31426038 R14: 00007fec31425fa0 R15: 00007ffd86c6b7a8 [ 872.974551][T16428] [ 874.091513][T11838] Bluetooth: hci6: command tx timeout [ 874.251066][T16445] futex_wake_op: syz.0.2002 tries to shift op by -2048; fix this program [ 875.218125][T16397] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.252767][T16397] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.296482][T16397] bridge_slave_0: entered allmulticast mode [ 875.337424][T16397] bridge_slave_0: entered promiscuous mode [ 875.521334][T16397] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.567410][T16397] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.618837][T16397] bridge_slave_1: entered allmulticast mode [ 875.660453][T16397] bridge_slave_1: entered promiscuous mode [ 876.132342][T16397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 876.159497][T11838] Bluetooth: hci6: command tx timeout [ 876.436361][T16397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 877.036502][T16397] team0: Port device team_slave_0 added [ 877.070799][T16397] team0: Port device team_slave_1 added [ 877.496833][T16397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 877.529818][T16397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.641306][T16397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 877.692208][T16397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 877.728271][T16397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.781994][T16494] FAULT_INJECTION: forcing a failure. [ 877.781994][T16494] name failslab, interval 1, probability 0, space 0, times 0 [ 877.816232][T16494] CPU: 0 UID: 0 PID: 16494 Comm: syz.0.2010 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.816275][T16494] Tainted: [L]=SOFTLOCKUP [ 877.816284][T16494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 877.816299][T16494] Call Trace: [ 877.816308][T16494] [ 877.816318][T16494] dump_stack_lvl+0x100/0x190 [ 877.816350][T16494] should_fail_ex.cold+0x5/0xa [ 877.816378][T16494] should_failslab+0xc2/0x120 [ 877.816410][T16494] __kmalloc_noprof+0xfc/0x820 [ 877.816438][T16494] ? tomoyo_encode2+0xfb/0x3c0 [ 877.816476][T16494] tomoyo_encode2+0xfb/0x3c0 [ 877.816512][T16494] tomoyo_encode+0x29/0x50 [ 877.816542][T16494] tomoyo_realpath_from_path+0x18c/0x690 [ 877.816583][T16494] tomoyo_check_open_permission+0x2af/0x3c0 [ 877.816613][T16494] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 877.816651][T16494] ? hook_file_open+0x24f/0x8f0 [ 877.816700][T16494] ? path_get+0x61/0x80 [ 877.816728][T16494] tomoyo_file_open+0x6b/0x90 [ 877.816776][T16494] security_file_open+0xb5/0x1e0 [ 877.816809][T16494] do_dentry_open+0x588/0x14d0 [ 877.816856][T16494] vfs_open+0x82/0x3f0 [ 877.816889][T16494] path_openat+0x2873/0x4280 [ 877.816940][T16494] ? __pfx_path_openat+0x10/0x10 [ 877.816988][T16494] do_file_open+0x20e/0x430 [ 877.817029][T16494] ? __pfx_do_file_open+0x10/0x10 [ 877.817089][T16494] ? alloc_fd+0x471/0x7a0 [ 877.817130][T16494] ? do_getname+0x191/0x390 [ 877.817160][T16494] do_sys_openat2+0x10f/0x1e0 [ 877.817191][T16494] ? __pfx_do_sys_openat2+0x10/0x10 [ 877.817222][T16494] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 877.817275][T16494] __x64_sys_openat+0x12d/0x210 [ 877.817307][T16494] ? __pfx___x64_sys_openat+0x10/0x10 [ 877.817349][T16494] do_syscall_64+0x115/0x840 [ 877.817371][T16494] ? clear_bhb_loop+0x40/0x90 [ 877.817401][T16494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.817426][T16494] RIP: 0033:0x7ff5da59de59 [ 877.817446][T16494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 877.817471][T16494] RSP: 002b:00007ff5db541028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 877.817498][T16494] RAX: ffffffffffffffda RBX: 00007ff5da825fa0 RCX: 00007ff5da59de59 [ 877.817515][T16494] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 877.817531][T16494] RBP: 00007ff5da633e6f R08: 0000000000000000 R09: 0000000000000000 [ 877.817547][T16494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 877.817561][T16494] R13: 00007ff5da826038 R14: 00007ff5da825fa0 R15: 00007ffca26cd3c8 [ 877.817592][T16494] [ 877.819259][T16494] ERROR: Out of memory at tomoyo_realpath_from_path. [ 878.119867][T16397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 878.284347][T11838] Bluetooth: hci6: command tx timeout [ 878.872082][T16397] hsr_slave_0: entered promiscuous mode [ 878.892969][T16397] hsr_slave_1: entered promiscuous mode [ 878.916277][T16397] debugfs: 'hsr0' already exists in 'hsr' [ 878.943237][T16397] Cannot create hsr debugfs directory [ 880.332501][T16507] FAULT_INJECTION: forcing a failure. [ 880.332501][T16507] name failslab, interval 1, probability 0, space 0, times 0 [ 880.406426][T16507] CPU: 0 UID: 0 PID: 16507 Comm: syz.0.2013 Tainted: G L syzkaller #0 PREEMPT(full) [ 880.406467][T16507] Tainted: [L]=SOFTLOCKUP [ 880.406476][T16507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 880.406498][T16507] Call Trace: [ 880.406507][T16507] [ 880.406516][T16507] dump_stack_lvl+0x100/0x190 [ 880.406550][T16507] should_fail_ex.cold+0x5/0xa [ 880.406578][T16507] should_failslab+0xc2/0x120 [ 880.406611][T16507] __kmalloc_noprof+0xfc/0x820 [ 880.406638][T16507] ? rcu_is_watching+0x12/0xc0 [ 880.406667][T16507] ? tomoyo_realpath_from_path+0xb6/0x690 [ 880.406708][T16507] tomoyo_realpath_from_path+0xb6/0x690 [ 880.406749][T16507] tomoyo_check_open_permission+0x2af/0x3c0 [ 880.406780][T16507] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 880.406818][T16507] ? hook_file_open+0x24f/0x8f0 [ 880.406869][T16507] ? path_get+0x61/0x80 [ 880.406897][T16507] tomoyo_file_open+0x6b/0x90 [ 880.406940][T16507] security_file_open+0xb5/0x1e0 [ 880.406973][T16507] do_dentry_open+0x588/0x14d0 [ 880.407020][T16507] vfs_open+0x82/0x3f0 [ 880.407051][T16507] path_openat+0x2873/0x4280 [ 880.407104][T16507] ? __pfx_path_openat+0x10/0x10 [ 880.407151][T16507] do_file_open+0x20e/0x430 [ 880.407193][T16507] ? __pfx_do_file_open+0x10/0x10 [ 880.407253][T16507] ? alloc_fd+0x471/0x7a0 [ 880.407293][T16507] ? do_getname+0x191/0x390 [ 880.407331][T16507] do_sys_openat2+0x10f/0x1e0 [ 880.407362][T16507] ? __pfx_do_sys_openat2+0x10/0x10 [ 880.407395][T16507] ? fdget+0x18b/0x210 [ 880.407437][T16507] __x64_sys_openat+0x12d/0x210 [ 880.407469][T16507] ? __pfx___x64_sys_openat+0x10/0x10 [ 880.407517][T16507] do_syscall_64+0x115/0x840 [ 880.407540][T16507] ? clear_bhb_loop+0x40/0x90 [ 880.407571][T16507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.407597][T16507] RIP: 0033:0x7ff5da59de59 [ 880.407619][T16507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.407644][T16507] RSP: 002b:00007ff5db541028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 880.407668][T16507] RAX: ffffffffffffffda RBX: 00007ff5da825fa0 RCX: 00007ff5da59de59 [ 880.407685][T16507] RDX: 0000000000088000 RSI: 0000200000001a00 RDI: ffffffffffffff9c [ 880.407705][T16507] RBP: 00007ff5da633e6f R08: 0000000000000000 R09: 0000000000000000 [ 880.407721][T16507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 880.407737][T16507] R13: 00007ff5da826038 R14: 00007ff5da825fa0 R15: 00007ffca26cd3c8 [ 880.407768][T16507] [ 880.409272][T16509] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[15988] was attempted by ""[16509] [ 880.711473][T16507] ERROR: Out of memory at tomoyo_realpath_from_path. [ 881.486262][T16397] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 881.523170][T16397] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 881.594868][T16397] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 881.621291][T16397] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 881.697030][T16397] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 881.723666][T16397] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 881.813234][T16397] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 881.873164][T16397] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 882.492133][T16397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 882.596958][T16397] 8021q: adding VLAN 0 to HW filter on device team0 [ 882.644628][T11788] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.652556][T11788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 882.698488][T16541] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2019'. [ 882.734400][T11199] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.742577][T11199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 883.634806][T16541] Process accounting paused [ 884.440085][T16566] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 885.735072][T16587] kafs: addr_prefs: Invalid Command [ 886.385908][T16397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 887.709175][T16397] veth0_vlan: entered promiscuous mode [ 887.782076][T16397] veth1_vlan: entered promiscuous mode [ 887.971195][T16397] veth0_macvtap: entered promiscuous mode [ 888.041764][T16397] veth1_macvtap: entered promiscuous mode [ 888.167081][T16397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 888.244242][T16397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 888.346412][T11199] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.420837][T11199] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.540663][T11199] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.563140][T16613] FAULT_INJECTION: forcing a failure. [ 888.563140][T16613] name failslab, interval 1, probability 0, space 0, times 0 [ 888.592822][T11199] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.651997][T16613] CPU: 0 UID: 0 PID: 16613 Comm: syz.6.2031 Tainted: G L syzkaller #0 PREEMPT(full) [ 888.652038][T16613] Tainted: [L]=SOFTLOCKUP [ 888.652048][T16613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 888.652064][T16613] Call Trace: [ 888.652073][T16613] [ 888.652082][T16613] dump_stack_lvl+0x100/0x190 [ 888.652115][T16613] should_fail_ex.cold+0x5/0xa [ 888.652145][T16613] should_failslab+0xc2/0x120 [ 888.652179][T16613] __kmalloc_noprof+0xfc/0x820 [ 888.652206][T16613] ? rcu_is_watching+0x12/0xc0 [ 888.652234][T16613] ? tomoyo_realpath_from_path+0xb6/0x690 [ 888.652274][T16613] tomoyo_realpath_from_path+0xb6/0x690 [ 888.652314][T16613] tomoyo_check_open_permission+0x2af/0x3c0 [ 888.652345][T16613] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 888.652385][T16613] ? hook_file_open+0x24f/0x8f0 [ 888.652437][T16613] ? path_get+0x61/0x80 [ 888.652465][T16613] tomoyo_file_open+0x6b/0x90 [ 888.652504][T16613] security_file_open+0xb5/0x1e0 [ 888.652536][T16613] do_dentry_open+0x588/0x14d0 [ 888.652583][T16613] vfs_open+0x82/0x3f0 [ 888.652614][T16613] path_openat+0x2873/0x4280 [ 888.652666][T16613] ? __pfx_path_openat+0x10/0x10 [ 888.652713][T16613] do_file_open+0x20e/0x430 [ 888.652754][T16613] ? __pfx_do_file_open+0x10/0x10 [ 888.652814][T16613] ? alloc_fd+0x471/0x7a0 [ 888.652855][T16613] ? do_getname+0x191/0x390 [ 888.652885][T16613] do_sys_openat2+0x10f/0x1e0 [ 888.652915][T16613] ? __pfx_do_sys_openat2+0x10/0x10 [ 888.652954][T16613] ? fdget+0x18b/0x210 [ 888.652998][T16613] __x64_sys_openat+0x12d/0x210 [ 888.653029][T16613] ? __pfx___x64_sys_openat+0x10/0x10 [ 888.653071][T16613] do_syscall_64+0x115/0x840 [ 888.653093][T16613] ? clear_bhb_loop+0x40/0x90 [ 888.653124][T16613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.653150][T16613] RIP: 0033:0x7f8ee759de59 [ 888.653170][T16613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.653195][T16613] RSP: 002b:00007f8ee57f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 888.653220][T16613] RAX: ffffffffffffffda RBX: 00007f8ee7825fa0 RCX: 00007f8ee759de59 [ 888.653236][T16613] RDX: 0000000000088000 RSI: 0000200000001a00 RDI: ffffffffffffff9c [ 888.653253][T16613] RBP: 00007f8ee7633e6f R08: 0000000000000000 R09: 0000000000000000 [ 888.653268][T16613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 888.653283][T16613] R13: 00007f8ee7826038 R14: 00007f8ee7825fa0 R15: 00007ffe26fa4298 [ 888.653315][T16613] [ 888.988924][T16613] ERROR: Out of memory at tomoyo_realpath_from_path. [ 890.044789][T11788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.090576][T11788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.279765][T11199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.351195][T11199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.517898][T16625] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2034'. [ 891.012564][T16633] FAULT_INJECTION: forcing a failure. [ 891.012564][T16633] name failslab, interval 1, probability 0, space 0, times 0 [ 891.069255][T16633] CPU: 0 UID: 0 PID: 16633 Comm: syz.0.2037 Tainted: G L syzkaller #0 PREEMPT(full) [ 891.069367][T16633] Tainted: [L]=SOFTLOCKUP [ 891.069391][T16633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 891.069408][T16633] Call Trace: [ 891.069420][T16633] [ 891.069430][T16633] dump_stack_lvl+0x100/0x190 [ 891.069463][T16633] should_fail_ex.cold+0x5/0xa [ 891.069491][T16633] should_failslab+0xc2/0x120 [ 891.069525][T16633] kmem_cache_alloc_noprof+0x91/0x6a0 [ 891.069574][T16633] ? stack_trace_save+0x8e/0xc0 [ 891.069608][T16633] ? alloc_empty_file+0x5b/0x1c0 [ 891.069650][T16633] alloc_empty_file+0x5b/0x1c0 [ 891.069681][T16633] path_openat+0xe7/0x4280 [ 891.069722][T16633] ? __kasan_slab_alloc+0x89/0x90 [ 891.069761][T16633] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 891.069787][T16633] ? do_getname+0x35/0x390 [ 891.069815][T16633] ? do_sys_openat2+0xc7/0x1e0 [ 891.069843][T16633] ? __x64_sys_openat+0x12d/0x210 [ 891.069872][T16633] ? do_syscall_64+0x115/0x840 [ 891.069894][T16633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.069944][T16633] ? __pfx_path_openat+0x10/0x10 [ 891.069998][T16633] do_file_open+0x20e/0x430 [ 891.070040][T16633] ? __pfx_do_file_open+0x10/0x10 [ 891.070100][T16633] ? alloc_fd+0x471/0x7a0 [ 891.070154][T16633] ? do_getname+0x191/0x390 [ 891.070186][T16633] do_sys_openat2+0x10f/0x1e0 [ 891.070240][T16633] ? __pfx_do_sys_openat2+0x10/0x10 [ 891.070274][T16633] ? fdget+0x18b/0x210 [ 891.070317][T16633] __x64_sys_openat+0x12d/0x210 [ 891.070350][T16633] ? __pfx___x64_sys_openat+0x10/0x10 [ 891.070393][T16633] do_syscall_64+0x115/0x840 [ 891.070424][T16633] ? clear_bhb_loop+0x40/0x90 [ 891.070460][T16633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.070488][T16633] RIP: 0033:0x7ff5da59de59 [ 891.070522][T16633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.070555][T16633] RSP: 002b:00007ff5db541028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 891.070581][T16633] RAX: ffffffffffffffda RBX: 00007ff5da825fa0 RCX: 00007ff5da59de59 [ 891.070599][T16633] RDX: 0000000000088000 RSI: 0000200000001a00 RDI: ffffffffffffff9c [ 891.070617][T16633] RBP: 00007ff5da633e6f R08: 0000000000000000 R09: 0000000000000000 [ 891.070633][T16633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 891.070649][T16633] R13: 00007ff5da826038 R14: 00007ff5da825fa0 R15: 00007ffca26cd3c8 [ 891.070681][T16633] [ 892.606757][T16654] FAULT_INJECTION: forcing a failure. [ 892.606757][T16654] name failslab, interval 1, probability 0, space 0, times 0 [ 892.652352][T16654] CPU: 0 UID: 0 PID: 16654 Comm: syz.6.2041 Tainted: G L syzkaller #0 PREEMPT(full) [ 892.652391][T16654] Tainted: [L]=SOFTLOCKUP [ 892.652400][T16654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 892.652415][T16654] Call Trace: [ 892.652424][T16654] [ 892.652433][T16654] dump_stack_lvl+0x100/0x190 [ 892.652465][T16654] should_fail_ex.cold+0x5/0xa [ 892.652493][T16654] should_failslab+0xc2/0x120 [ 892.652531][T16654] kmem_cache_alloc_noprof+0x91/0x6a0 [ 892.652560][T16654] ? find_held_lock+0x2b/0x80 [ 892.652595][T16654] ? alloc_empty_file+0x5b/0x1c0 [ 892.652630][T16654] alloc_empty_file+0x5b/0x1c0 [ 892.652659][T16654] path_openat+0xe7/0x4280 [ 892.652698][T16654] ? irqentry_exit+0x24d/0xa00 [ 892.652737][T16654] ? lockdep_hardirqs_on+0x78/0x100 [ 892.652779][T16654] ? irqentry_exit+0x24d/0xa00 [ 892.652826][T16654] ? __pfx_path_openat+0x10/0x10 [ 892.652868][T16654] ? do_file_open+0xf2/0x430 [ 892.652910][T16654] do_file_open+0x20e/0x430 [ 892.652951][T16654] ? __pfx_do_file_open+0x10/0x10 [ 892.653010][T16654] ? alloc_fd+0x471/0x7a0 [ 892.653050][T16654] ? do_getname+0x191/0x390 [ 892.653081][T16654] do_sys_openat2+0x10f/0x1e0 [ 892.653111][T16654] ? __pfx_do_sys_openat2+0x10/0x10 [ 892.653143][T16654] ? fdget+0x18b/0x210 [ 892.653184][T16654] __x64_sys_openat+0x12d/0x210 [ 892.653215][T16654] ? __pfx___x64_sys_openat+0x10/0x10 [ 892.653257][T16654] do_syscall_64+0x115/0x840 [ 892.653279][T16654] ? clear_bhb_loop+0x40/0x90 [ 892.653309][T16654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.653334][T16654] RIP: 0033:0x7f8ee759de59 [ 892.653355][T16654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 892.653381][T16654] RSP: 002b:00007f8ee57f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 892.653405][T16654] RAX: ffffffffffffffda RBX: 00007f8ee7825fa0 RCX: 00007f8ee759de59 [ 892.653422][T16654] RDX: 0000000000088000 RSI: 0000200000001a00 RDI: ffffffffffffff9c [ 892.653438][T16654] RBP: 00007f8ee7633e6f R08: 0000000000000000 R09: 0000000000000000 [ 892.653454][T16654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 892.653469][T16654] R13: 00007f8ee7826038 R14: 00007f8ee7825fa0 R15: 00007ffe26fa4298 [ 892.653500][T16654] [ 893.404399][T16668] FAULT_INJECTION: forcing a failure. [ 893.404399][T16668] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 893.435856][T16668] CPU: 0 UID: 0 PID: 16668 Comm: syz.7.2042 Tainted: G L syzkaller #0 PREEMPT(full) [ 893.435895][T16668] Tainted: [L]=SOFTLOCKUP [ 893.435903][T16668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 893.435919][T16668] Call Trace: [ 893.435927][T16668] [ 893.435937][T16668] dump_stack_lvl+0x100/0x190 [ 893.435977][T16668] should_fail_ex.cold+0x5/0xa [ 893.436000][T16668] ? prepare_alloc_pages+0x16d/0x5f0 [ 893.436039][T16668] should_fail_alloc_page+0xeb/0x140 [ 893.436073][T16668] prepare_alloc_pages+0x1f0/0x5f0 [ 893.436111][T16668] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 893.436140][T16668] ? stack_trace_save+0x8e/0xc0 [ 893.436171][T16668] ? __pfx_stack_trace_save+0x10/0x10 [ 893.436201][T16668] ? is_bpf_text_address+0x94/0x1a0 [ 893.436234][T16668] ? stack_depot_save_flags+0x27/0x9d0 [ 893.436271][T16668] ? __kernel_text_address+0xd/0x30 [ 893.436310][T16668] ? kasan_save_stack+0x3f/0x50 [ 893.436336][T16668] ? kasan_save_stack+0x30/0x50 [ 893.436362][T16668] ? kasan_save_track+0x14/0x30 [ 893.436390][T16668] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 893.436415][T16668] ? snd_pcm_open_substream+0x90/0x1850 [ 893.436512][T16668] ? soundcore_open+0x2e3/0x5a0 [ 893.436562][T16668] ? do_dentry_open+0x6ab/0x14d0 [ 893.436600][T16668] ? vfs_open+0x82/0x3f0 [ 893.436625][T16668] ? path_openat+0x2873/0x4280 [ 893.436664][T16668] ? do_file_open+0x20e/0x430 [ 893.436702][T16668] ? do_sys_openat2+0x10f/0x1e0 [ 893.436729][T16668] ? __x64_sys_openat+0x12d/0x210 [ 893.436758][T16668] ? do_syscall_64+0x115/0x840 [ 893.436779][T16668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.436811][T16668] ? __lock_acquire+0x49f/0x1a40 [ 893.436860][T16668] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 893.436897][T16668] ? policy_nodemask+0xed/0x4f0 [ 893.436931][T16668] alloc_pages_mpol+0x1fb/0x540 [ 893.436966][T16668] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 893.436997][T16668] ? __split_page_owner+0x1dd/0x340 [ 893.437031][T16668] ? split_page_memcg+0x1e/0x1a0 [ 893.437069][T16668] alloc_pages_noprof+0x1a/0x160 [ 893.437107][T16668] alloc_pages_exact_noprof+0x32/0xf0 [ 893.437153][T16668] snd_pcm_attach_substream+0x4b0/0xd20 [ 893.437207][T16668] snd_pcm_open_substream+0x90/0x1850 [ 893.437236][T16668] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 893.437267][T16668] ? snd_pcm_oss_open+0x5e5/0x1390 [ 893.437328][T16668] snd_pcm_oss_open+0x735/0x1390 [ 893.437375][T16668] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 893.437413][T16668] ? __lock_acquire+0x49f/0x1a40 [ 893.437455][T16668] ? __pfx_default_wake_function+0x10/0x10 [ 893.437493][T16668] ? do_raw_spin_lock+0x128/0x260 [ 893.437519][T16668] ? soundcore_open+0x231/0x5a0 [ 893.437554][T16668] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 893.437591][T16668] soundcore_open+0x2e3/0x5a0 [ 893.437631][T16668] ? __pfx_soundcore_open+0x10/0x10 [ 893.437664][T16668] chrdev_open+0x234/0x6a0 [ 893.437686][T16668] ? __pfx_apparmor_file_open+0x10/0x10 [ 893.437711][T16668] ? __pfx_chrdev_open+0x10/0x10 [ 893.437752][T16668] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 893.437784][T16668] do_dentry_open+0x6ab/0x14d0 [ 893.437822][T16668] ? __pfx_chrdev_open+0x10/0x10 [ 893.437867][T16668] vfs_open+0x82/0x3f0 [ 893.437899][T16668] path_openat+0x2873/0x4280 [ 893.437951][T16668] ? __pfx_path_openat+0x10/0x10 [ 893.437998][T16668] do_file_open+0x20e/0x430 [ 893.438040][T16668] ? __pfx_do_file_open+0x10/0x10 [ 893.438100][T16668] ? alloc_fd+0x471/0x7a0 [ 893.438140][T16668] ? do_getname+0x191/0x390 [ 893.438170][T16668] do_sys_openat2+0x10f/0x1e0 [ 893.438200][T16668] ? __pfx_do_sys_openat2+0x10/0x10 [ 893.438237][T16668] ? __fget_files+0x21f/0x3d0 [ 893.438279][T16668] __x64_sys_openat+0x12d/0x210 [ 893.438311][T16668] ? __pfx___x64_sys_openat+0x10/0x10 [ 893.438353][T16668] do_syscall_64+0x115/0x840 [ 893.438375][T16668] ? clear_bhb_loop+0x40/0x90 [ 893.438405][T16668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.438431][T16668] RIP: 0033:0x7f63e8b9de59 [ 893.438460][T16668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 893.438486][T16668] RSP: 002b:00007f63e9aa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 893.438510][T16668] RAX: ffffffffffffffda RBX: 00007f63e8e26180 RCX: 00007f63e8b9de59 [ 893.438528][T16668] RDX: 0000000000020b42 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 893.438545][T16668] RBP: 00007f63e8c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 893.438560][T16668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 893.438575][T16668] R13: 00007f63e8e26218 R14: 00007f63e8e26180 R15: 00007ffd60763f08 [ 893.438606][T16668] [ 895.253871][T16680] random: crng reseeded on system resumption [ 895.743591][T16679] hub 1-0:1.0: USB hub found [ 895.862406][T16679] hub 1-0:1.0: 1 port detected [ 897.253137][T12158] Bluetooth: hci6: unexpected event 0x10 length: 124 > 1 [ 897.256228][T11838] Bluetooth: hci6: hardware error 0x00 [ 897.424929][T12158] Bluetooth: hci6: unexpected event for opcode 0x7c89 [ 897.773218][T16726] FAULT_INJECTION: forcing a failure. [ 897.773218][T16726] name failslab, interval 1, probability 0, space 0, times 0 [ 897.863145][T16726] CPU: 0 UID: 0 PID: 16726 Comm: syz.6.2055 Tainted: G L syzkaller #0 PREEMPT(full) [ 897.863186][T16726] Tainted: [L]=SOFTLOCKUP [ 897.863196][T16726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 897.863211][T16726] Call Trace: [ 897.863219][T16726] [ 897.863229][T16726] dump_stack_lvl+0x100/0x190 [ 897.863269][T16726] should_fail_ex.cold+0x5/0xa [ 897.863297][T16726] should_failslab+0xc2/0x120 [ 897.863331][T16726] __kmalloc_noprof+0xfc/0x820 [ 897.863357][T16726] ? rcu_is_watching+0x12/0xc0 [ 897.863385][T16726] ? tomoyo_realpath_from_path+0xb6/0x690 [ 897.863427][T16726] tomoyo_realpath_from_path+0xb6/0x690 [ 897.863467][T16726] tomoyo_check_open_permission+0x2af/0x3c0 [ 897.863500][T16726] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 897.863540][T16726] ? hook_file_open+0x24f/0x8f0 [ 897.863589][T16726] ? path_get+0x61/0x80 [ 897.863617][T16726] tomoyo_file_open+0x6b/0x90 [ 897.863656][T16726] security_file_open+0xb5/0x1e0 [ 897.863687][T16726] do_dentry_open+0x588/0x14d0 [ 897.863734][T16726] vfs_open+0x82/0x3f0 [ 897.863768][T16726] path_openat+0x2873/0x4280 [ 897.863820][T16726] ? __pfx_path_openat+0x10/0x10 [ 897.863867][T16726] do_file_open+0x20e/0x430 [ 897.863908][T16726] ? __pfx_do_file_open+0x10/0x10 [ 897.863997][T16726] ? alloc_fd+0x471/0x7a0 [ 897.864038][T16726] ? do_getname+0x191/0x390 [ 897.864068][T16726] do_sys_openat2+0x10f/0x1e0 [ 897.864098][T16726] ? __pfx_do_sys_openat2+0x10/0x10 [ 897.864133][T16726] ? fdget+0x18b/0x210 [ 897.864191][T16726] __x64_sys_openat+0x12d/0x210 [ 897.864221][T16726] ? __pfx___x64_sys_openat+0x10/0x10 [ 897.864269][T16726] do_syscall_64+0x115/0x840 [ 897.864292][T16726] ? clear_bhb_loop+0x40/0x90 [ 897.864322][T16726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.864347][T16726] RIP: 0033:0x7f8ee759de59 [ 897.864367][T16726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 897.864392][T16726] RSP: 002b:00007f8ee57f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 897.864417][T16726] RAX: ffffffffffffffda RBX: 00007f8ee7825fa0 RCX: 00007f8ee759de59 [ 897.864433][T16726] RDX: 0000000000088000 RSI: 0000200000001a00 RDI: ffffffffffffff9c [ 897.864449][T16726] RBP: 00007f8ee7633e6f R08: 0000000000000000 R09: 0000000000000000 [ 897.864465][T16726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 897.864480][T16726] R13: 00007f8ee7826038 R14: 00007f8ee7825fa0 R15: 00007ffe26fa4298 [ 897.864511][T16726] [ 898.311487][T16726] ERROR: Out of memory at tomoyo_realpath_from_path. [ 898.565297][T16735] FAULT_INJECTION: forcing a failure. [ 898.565297][T16735] name fail_futex, interval 1, probability 0, space 0, times 0 [ 898.617149][T16735] CPU: 0 UID: 0 PID: 16735 Comm: syz.5.2057 Tainted: G L syzkaller #0 PREEMPT(full) [ 898.617198][T16735] Tainted: [L]=SOFTLOCKUP [ 898.617207][T16735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 898.617222][T16735] Call Trace: [ 898.617231][T16735] [ 898.617241][T16735] dump_stack_lvl+0x100/0x190 [ 898.617274][T16735] should_fail_ex.cold+0x5/0xa [ 898.617302][T16735] get_futex_key+0x1d2/0x14f0 [ 898.617344][T16735] ? __pfx_get_futex_key+0x10/0x10 [ 898.617393][T16735] futex_wake+0xf4/0x5e0 [ 898.617426][T16735] ? __pfx_futex_wake+0x10/0x10 [ 898.617458][T16735] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 898.617510][T16735] do_futex+0x2b2/0x440 [ 898.617536][T16735] ? __pfx_do_futex+0x10/0x10 [ 898.617562][T16735] ? __pfx___might_resched+0x10/0x10 [ 898.617598][T16735] ? blkcg_maybe_throttle_current+0x5e7/0xeb0 [ 898.617639][T16735] ? _raw_spin_unlock_irq+0x23/0x50 [ 898.617681][T16735] __x64_sys_futex+0x34f/0x4d0 [ 898.617710][T16735] ? __pfx___x64_sys_futex+0x10/0x10 [ 898.617736][T16735] ? rcu_is_watching+0x12/0xc0 [ 898.617770][T16735] do_syscall_64+0x115/0x840 [ 898.617792][T16735] ? clear_bhb_loop+0x40/0x90 [ 898.617821][T16735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.617847][T16735] RIP: 0033:0x7fec3119de59 [ 898.617866][T16735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 898.617891][T16735] RSP: 002b:00007fec2f3f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 898.617914][T16735] RAX: ffffffffffffffda RBX: 00007fec31425fa8 RCX: 00007fec3119de59 [ 898.617934][T16735] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fec31425fac [ 898.617949][T16735] RBP: 00007fec31425fa0 R08: 0000000000000001 R09: 0000000000000000 [ 898.617965][T16735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 898.617979][T16735] R13: 00007fec31426038 R14: 00007ffd86c6b6c0 R15: 00007ffd86c6b7a8 [ 898.618010][T16735] [ 899.397449][T11838] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 901.830935][T16782] netlink: 25 bytes leftover after parsing attributes in process `syz.5.2065'. [ 902.909929][T16798] Ignoring unsupported numa_zonelist_order value: [ 902.953400][T16798] random: crng reseeded on system resumption [ 903.578039][T16808] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 904.356205][T16822] FAULT_INJECTION: forcing a failure. [ 904.356205][T16822] name failslab, interval 1, probability 0, space 0, times 0 [ 904.412630][T16822] CPU: 0 UID: 0 PID: 16822 Comm: syz.5.2072 Tainted: G L syzkaller #0 PREEMPT(full) [ 904.412670][T16822] Tainted: [L]=SOFTLOCKUP [ 904.412680][T16822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 904.412695][T16822] Call Trace: [ 904.412704][T16822] [ 904.412714][T16822] dump_stack_lvl+0x100/0x190 [ 904.412750][T16822] should_fail_ex.cold+0x5/0xa [ 904.412779][T16822] should_failslab+0xc2/0x120 [ 904.412812][T16822] __kmalloc_noprof+0xfc/0x820 [ 904.412838][T16822] ? rcu_is_watching+0x12/0xc0 [ 904.412866][T16822] ? tomoyo_realpath_from_path+0xb6/0x690 [ 904.412912][T16822] tomoyo_realpath_from_path+0xb6/0x690 [ 904.412961][T16822] tomoyo_check_open_permission+0x2af/0x3c0 [ 904.412992][T16822] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 904.413031][T16822] ? hook_file_open+0x24f/0x8f0 [ 904.413081][T16822] ? path_get+0x61/0x80 [ 904.413109][T16822] tomoyo_file_open+0x6b/0x90 [ 904.413148][T16822] security_file_open+0xb5/0x1e0 [ 904.413180][T16822] do_dentry_open+0x588/0x14d0 [ 904.413227][T16822] vfs_open+0x82/0x3f0 [ 904.413258][T16822] path_openat+0x2873/0x4280 [ 904.413310][T16822] ? __pfx_path_openat+0x10/0x10 [ 904.413358][T16822] do_file_open+0x20e/0x430 [ 904.413401][T16822] ? __pfx_do_file_open+0x10/0x10 [ 904.413462][T16822] ? alloc_fd+0x471/0x7a0 [ 904.413502][T16822] ? do_getname+0x191/0x390 [ 904.413532][T16822] do_sys_openat2+0x10f/0x1e0 [ 904.413562][T16822] ? __pfx_do_sys_openat2+0x10/0x10 [ 904.413594][T16822] ? fdget+0x18b/0x210 [ 904.413635][T16822] __x64_sys_openat+0x12d/0x210 [ 904.413670][T16822] ? __pfx___x64_sys_openat+0x10/0x10 [ 904.413713][T16822] do_syscall_64+0x115/0x840 [ 904.413735][T16822] ? clear_bhb_loop+0x40/0x90 [ 904.413765][T16822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.413790][T16822] RIP: 0033:0x7fec3119de59 [ 904.413811][T16822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 904.413836][T16822] RSP: 002b:00007fec2f3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 904.413860][T16822] RAX: ffffffffffffffda RBX: 00007fec31425fa0 RCX: 00007fec3119de59 [ 904.413878][T16822] RDX: 0000000000088000 RSI: 0000200000001a00 RDI: ffffffffffffff9c [ 904.413900][T16822] RBP: 00007fec31233e6f R08: 0000000000000000 R09: 0000000000000000 [ 904.413916][T16822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 904.413931][T16822] R13: 00007fec31426038 R14: 00007fec31425fa0 R15: 00007ffd86c6b7a8 [ 904.413962][T16822] [ 904.701567][T16822] ERROR: Out of memory at tomoyo_realpath_from_path. [ 905.079560][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 905.087851][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 905.193334][T16828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2073'. [ 905.579592][T16836] netlink: 25 bytes leftover after parsing attributes in process `syz.5.2075'. [ 906.377923][T16843] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[16397] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[16843] [ 907.405661][T16855] input: f¬ as /devices/virtual/input/input44 [ 907.464177][T12158] Bluetooth: hci5: unexpected event 0x1d length: 6 > 5 [ 908.423855][T16865] FAULT_INJECTION: forcing a failure. [ 908.423855][T16865] name failslab, interval 1, probability 0, space 0, times 0 [ 908.553565][T16865] CPU: 0 UID: 0 PID: 16865 Comm: syz.7.2084 Tainted: G L syzkaller #0 PREEMPT(full) [ 908.553606][T16865] Tainted: [L]=SOFTLOCKUP [ 908.553615][T16865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 908.553630][T16865] Call Trace: [ 908.553639][T16865] [ 908.553650][T16865] dump_stack_lvl+0x100/0x190 [ 908.553683][T16865] should_fail_ex.cold+0x5/0xa [ 908.553710][T16865] should_failslab+0xc2/0x120 [ 908.553743][T16865] kmem_cache_alloc_noprof+0x91/0x6a0 [ 908.553770][T16865] ? stack_trace_save+0x8e/0xc0 [ 908.553803][T16865] ? alloc_empty_file+0x5b/0x1c0 [ 908.553837][T16865] alloc_empty_file+0x5b/0x1c0 [ 908.553869][T16865] path_openat+0xe7/0x4280 [ 908.553907][T16865] ? __kasan_slab_alloc+0x89/0x90 [ 908.553936][T16865] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 908.553963][T16865] ? do_getname+0x35/0x390 [ 908.553989][T16865] ? do_sys_openat2+0xc7/0x1e0 [ 908.554017][T16865] ? __x64_sys_openat+0x12d/0x210 [ 908.554046][T16865] ? do_syscall_64+0x115/0x840 [ 908.554069][T16865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.554102][T16865] ? __pfx_path_openat+0x10/0x10 [ 908.554150][T16865] do_file_open+0x20e/0x430 [ 908.554192][T16865] ? __pfx_do_file_open+0x10/0x10 [ 908.554252][T16865] ? alloc_fd+0x471/0x7a0 [ 908.554293][T16865] ? do_getname+0x191/0x390 [ 908.554323][T16865] do_sys_openat2+0x10f/0x1e0 [ 908.554357][T16865] ? __pfx_do_sys_openat2+0x10/0x10 [ 908.554399][T16865] ? fdget+0x18b/0x210 [ 908.554442][T16865] __x64_sys_openat+0x12d/0x210 [ 908.554474][T16865] ? __pfx___x64_sys_openat+0x10/0x10 [ 908.554517][T16865] do_syscall_64+0x115/0x840 [ 908.554539][T16865] ? clear_bhb_loop+0x40/0x90 [ 908.554569][T16865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.554596][T16865] RIP: 0033:0x7f63e8b9de59 [ 908.554617][T16865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 908.554641][T16865] RSP: 002b:00007f63e9ae8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 908.554665][T16865] RAX: ffffffffffffffda RBX: 00007f63e8e25fa0 RCX: 00007f63e8b9de59 [ 908.554682][T16865] RDX: 0000000000088000 RSI: 0000200000001a00 RDI: ffffffffffffff9c [ 908.554698][T16865] RBP: 00007f63e8c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 908.554714][T16865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 908.554728][T16865] R13: 00007f63e8e26038 R14: 00007f63e8e25fa0 R15: 00007ffd60763f08 [ 908.554759][T16865] [ 909.141893][T11838] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 909.383194][T12158] Bluetooth: hci5: unexpected event 0x10 length: 124 > 1 [ 909.386834][T12158] Bluetooth: hci5: hardware error 0x00 [ 909.765941][T16884] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2086'. [ 910.041973][T16884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 910.111956][T16884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 910.243880][T16884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 910.326046][T16884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 911.962160][T12158] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 912.558812][T16921] FAULT_INJECTION: forcing a failure. [ 912.558812][T16921] name failslab, interval 1, probability 0, space 0, times 0 [ 912.585124][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 912.597319][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 912.678239][T16921] CPU: 0 UID: 0 PID: 16921 Comm: syz.6.2093 Tainted: G L syzkaller #0 PREEMPT(full) [ 912.678280][T16921] Tainted: [L]=SOFTLOCKUP [ 912.678290][T16921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 912.678305][T16921] Call Trace: [ 912.678313][T16921] [ 912.678323][T16921] dump_stack_lvl+0x100/0x190 [ 912.678355][T16921] should_fail_ex.cold+0x5/0xa [ 912.678382][T16921] should_failslab+0xc2/0x120 [ 912.678415][T16921] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 912.678447][T16921] ? krealloc_node_align_noprof+0x27e/0x3e0 [ 912.678475][T16921] ? rcu_is_watching+0x12/0xc0 [ 912.678502][T16921] ? snd_pcm_hw_rule_add+0x3b3/0x510 [ 912.678542][T16921] krealloc_node_align_noprof+0x1f9/0x3e0 [ 912.678576][T16921] snd_pcm_hw_rule_add+0x3b3/0x510 [ 912.678610][T16921] ? __pfx_snd_pcm_hw_rule_muldivk+0x10/0x10 [ 912.678645][T16921] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 912.678678][T16921] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 912.678717][T16921] ? mutex_init_lockdep+0xf1/0x120 [ 912.678757][T16921] ? snd_pcm_attach_substream+0x287/0xd20 [ 912.678794][T16921] snd_pcm_open_substream+0x942/0x1850 [ 912.678823][T16921] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 912.678851][T16921] ? snd_pcm_oss_open+0x5e5/0x1390 [ 912.678891][T16921] snd_pcm_oss_open+0x735/0x1390 [ 912.678937][T16921] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 912.678974][T16921] ? __lock_acquire+0x49f/0x1a40 [ 912.679011][T16921] ? __pfx_default_wake_function+0x10/0x10 [ 912.679048][T16921] ? do_raw_spin_lock+0x128/0x260 [ 912.679073][T16921] ? soundcore_open+0x231/0x5a0 [ 912.679107][T16921] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 912.679145][T16921] soundcore_open+0x2e3/0x5a0 [ 912.679179][T16921] ? __pfx_soundcore_open+0x10/0x10 [ 912.679217][T16921] chrdev_open+0x234/0x6a0 [ 912.679240][T16921] ? __pfx_apparmor_file_open+0x10/0x10 [ 912.679265][T16921] ? __pfx_chrdev_open+0x10/0x10 [ 912.679307][T16921] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 912.679338][T16921] do_dentry_open+0x6ab/0x14d0 [ 912.679377][T16921] ? __pfx_chrdev_open+0x10/0x10 [ 912.679423][T16921] vfs_open+0x82/0x3f0 [ 912.679455][T16921] path_openat+0x2873/0x4280 [ 912.679507][T16921] ? __pfx_path_openat+0x10/0x10 [ 912.679554][T16921] do_file_open+0x20e/0x430 [ 912.679596][T16921] ? __pfx_do_file_open+0x10/0x10 [ 912.679656][T16921] ? alloc_fd+0x471/0x7a0 [ 912.679697][T16921] ? do_getname+0x191/0x390 [ 912.679730][T16921] do_sys_openat2+0x10f/0x1e0 [ 912.679760][T16921] ? __pfx_do_sys_openat2+0x10/0x10 [ 912.679792][T16921] ? __fget_files+0x21f/0x3d0 [ 912.679835][T16921] __x64_sys_openat+0x12d/0x210 [ 912.679866][T16921] ? __pfx___x64_sys_openat+0x10/0x10 [ 912.679898][T16921] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 912.679938][T16921] ? syscall_user_dispatch+0x76/0x130 [ 912.679967][T16921] do_syscall_64+0x115/0x840 [ 912.679990][T16921] ? clear_bhb_loop+0x40/0x90 [ 912.680019][T16921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.680044][T16921] RIP: 0033:0x7f8ee759de59 [ 912.680065][T16921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 912.680089][T16921] RSP: 002b:00007f8ee57d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 912.680113][T16921] RAX: ffffffffffffffda RBX: 00007f8ee7826090 RCX: 00007f8ee759de59 [ 912.680130][T16921] RDX: 0000000000020b42 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 912.680146][T16921] RBP: 00007f8ee7633e6f R08: 0000000000000000 R09: 0000000000000000 [ 912.680162][T16921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 912.680177][T16921] R13: 00007f8ee7826128 R14: 00007f8ee7826090 R15: 00007ffe26fa4298 [ 912.680220][T16921] [ 913.597624][T16935] Process accounting resumed [ 913.619828][T16937] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2099'. [ 913.646025][T16937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 913.668713][T16937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 913.822006][T16937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 913.898122][T16937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 914.918467][T16958] FAULT_INJECTION: forcing a failure. [ 914.918467][T16958] name failslab, interval 1, probability 0, space 0, times 0 [ 914.983643][T16958] CPU: 0 UID: 0 PID: 16958 Comm: syz.0.2104 Tainted: G L syzkaller #0 PREEMPT(full) [ 914.983689][T16958] Tainted: [L]=SOFTLOCKUP [ 914.983699][T16958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 914.983717][T16958] Call Trace: [ 914.983726][T16958] [ 914.983737][T16958] dump_stack_lvl+0x100/0x190 [ 914.983773][T16958] should_fail_ex.cold+0x5/0xa [ 914.983804][T16958] should_failslab+0xc2/0x120 [ 914.983840][T16958] kmem_cache_alloc_noprof+0x91/0x6a0 [ 914.983871][T16958] ? stack_trace_save+0x8e/0xc0 [ 914.983907][T16958] ? alloc_empty_file+0x5b/0x1c0 [ 914.983955][T16958] alloc_empty_file+0x5b/0x1c0 [ 914.983989][T16958] path_openat+0xe7/0x4280 [ 914.984031][T16958] ? __kasan_slab_alloc+0x89/0x90 [ 914.984064][T16958] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 914.984093][T16958] ? do_getname+0x35/0x390 [ 914.984122][T16958] ? do_sys_openat2+0xc7/0x1e0 [ 914.984152][T16958] ? __x64_sys_openat+0x12d/0x210 [ 914.984184][T16958] ? do_syscall_64+0x115/0x840 [ 914.984208][T16958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.984246][T16958] ? __pfx_path_openat+0x10/0x10 [ 914.984299][T16958] do_file_open+0x20e/0x430 [ 914.984345][T16958] ? __pfx_do_file_open+0x10/0x10 [ 914.984412][T16958] ? alloc_fd+0x471/0x7a0 [ 914.984457][T16958] ? do_getname+0x191/0x390 [ 914.984491][T16958] do_sys_openat2+0x10f/0x1e0 [ 914.984524][T16958] ? __pfx_do_sys_openat2+0x10/0x10 [ 914.984561][T16958] ? fdget+0x18b/0x210 [ 914.984607][T16958] __x64_sys_openat+0x12d/0x210 [ 914.984642][T16958] ? __pfx___x64_sys_openat+0x10/0x10 [ 914.984689][T16958] do_syscall_64+0x115/0x840 [ 914.984713][T16958] ? clear_bhb_loop+0x40/0x90 [ 914.984746][T16958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.984774][T16958] RIP: 0033:0x7ff5da59de59 [ 914.984797][T16958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 914.984824][T16958] RSP: 002b:00007ff5db541028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 914.984851][T16958] RAX: ffffffffffffffda RBX: 00007ff5da825fa0 RCX: 00007ff5da59de59 [ 914.984870][T16958] RDX: 0000000000088000 RSI: 0000200000001a00 RDI: ffffffffffffff9c [ 914.984889][T16958] RBP: 00007ff5da633e6f R08: 0000000000000000 R09: 0000000000000000 [ 914.984907][T16958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 914.985065][T16958] R13: 00007ff5da826038 R14: 00007ff5da825fa0 R15: 00007ffca26cd3c8 [ 914.985100][T16958] [ 918.316578][T16997] netlink: 326 bytes leftover after parsing attributes in process `syz.6.2113'. [ 918.538600][T17003] FAULT_INJECTION: forcing a failure. [ 918.538600][T17003] name failslab, interval 1, probability 0, space 0, times 0 [ 918.701223][T17000] netlink: 25 bytes leftover after parsing attributes in process `syz.7.2111'. [ 918.749695][T17003] CPU: 0 UID: 0 PID: 17003 Comm: syz.5.2114 Tainted: G L syzkaller #0 PREEMPT(full) [ 918.749736][T17003] Tainted: [L]=SOFTLOCKUP [ 918.749746][T17003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 918.749761][T17003] Call Trace: [ 918.749770][T17003] [ 918.749780][T17003] dump_stack_lvl+0x100/0x190 [ 918.749813][T17003] should_fail_ex.cold+0x5/0xa [ 918.749841][T17003] should_failslab+0xc2/0x120 [ 918.749873][T17003] __kmalloc_cache_noprof+0x91/0x6c0 [ 918.749918][T17003] ? ima_add_digest_entry+0x53/0x5b0 [ 918.750004][T17003] ima_add_digest_entry+0x53/0x5b0 [ 918.750048][T17003] ima_add_template_entry+0x45e/0x8b0 [ 918.750095][T17003] ? __pfx_ima_add_template_entry+0x10/0x10 [ 918.750143][T17003] ? ima_calc_field_array_hash+0x378/0x440 [ 918.750181][T17003] ima_store_template+0xda/0x150 [ 918.750212][T17003] ima_store_measurement+0x21c/0x5b0 [ 918.750244][T17003] ? __pfx_ima_store_measurement+0x10/0x10 [ 918.750285][T17003] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 918.750330][T17003] process_measurement+0x19cc/0x2350 [ 918.750366][T17003] ? __pfx_process_measurement+0x10/0x10 [ 918.750429][T17003] ? __pfx_aa_file_perm+0x10/0x10 [ 918.750471][T17003] ima_file_mmap+0x1c4/0x1f0 [ 918.750497][T17003] ? __pfx_ima_file_mmap+0x10/0x10 [ 918.750530][T17003] security_mmap_file+0x278/0x9b0 [ 918.750562][T17003] __do_sys_remap_file_pages+0x2da/0xa10 [ 918.750602][T17003] ? find_held_lock+0x2b/0x80 [ 918.750633][T17003] ? __pfx___do_sys_remap_file_pages+0x10/0x10 [ 918.750667][T17003] ? __x64_sys_futex+0x34f/0x4d0 [ 918.750697][T17003] ? __x64_sys_futex+0x358/0x4d0 [ 918.750726][T17003] ? xfd_validate_state+0x129/0x190 [ 918.750765][T17003] do_syscall_64+0x115/0x840 [ 918.750787][T17003] ? clear_bhb_loop+0x40/0x90 [ 918.750817][T17003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.750843][T17003] RIP: 0033:0x7fec3119de59 [ 918.750864][T17003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.750889][T17003] RSP: 002b:00007fec2f3d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 918.750913][T17003] RAX: ffffffffffffffda RBX: 00007fec31426090 RCX: 00007fec3119de59 [ 918.750930][T17003] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000000006a27 [ 918.750946][T17003] RBP: 00007fec31233e6f R08: 0000000000000004 R09: 0000000000000000 [ 918.750961][T17003] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 918.750982][T17003] R13: 00007fec31426128 R14: 00007fec31426090 R15: 00007ffd86c6b7a8 [ 918.751013][T17003] [ 920.319345][T17003] ima: OUT OF MEMORY ERROR creating queue entry [ 920.425369][ T31] audit: type=1804 audit(7887907.892:25): pid=17003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.5.2114" name="dev/zero" dev="tmpfs" ino=4012 res=0 errno=0 [ 921.423148][T12158] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 921.556570][T17035] FAULT_INJECTION: forcing a failure. [ 921.556570][T17035] name failslab, interval 1, probability 0, space 0, times 0 [ 921.797398][T17035] CPU: 0 UID: 0 PID: 17035 Comm: syz.6.2118 Tainted: G L syzkaller #0 PREEMPT(full) [ 921.797438][T17035] Tainted: [L]=SOFTLOCKUP [ 921.797449][T17035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 921.797465][T17035] Call Trace: [ 921.797474][T17035] [ 921.797483][T17035] dump_stack_lvl+0x100/0x190 [ 921.797525][T17035] should_fail_ex.cold+0x5/0xa [ 921.797555][T17035] should_failslab+0xc2/0x120 [ 921.797588][T17035] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 921.797618][T17035] ? krealloc_node_align_noprof+0x27e/0x3e0 [ 921.797647][T17035] ? rcu_is_watching+0x12/0xc0 [ 921.797674][T17035] ? snd_pcm_hw_rule_add+0x3b3/0x510 [ 921.797713][T17035] krealloc_node_align_noprof+0x1f9/0x3e0 [ 921.797746][T17035] snd_pcm_hw_rule_add+0x3b3/0x510 [ 921.797781][T17035] ? __pfx_snd_pcm_hw_rule_muldivk+0x10/0x10 [ 921.797817][T17035] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 921.797851][T17035] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 921.797888][T17035] ? mutex_init_lockdep+0xf1/0x120 [ 921.797928][T17035] ? snd_pcm_attach_substream+0x287/0xd20 [ 921.797960][T17035] snd_pcm_open_substream+0x942/0x1850 [ 921.797990][T17035] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 921.798017][T17035] ? snd_pcm_oss_open+0x5e5/0x1390 [ 921.798057][T17035] snd_pcm_oss_open+0x735/0x1390 [ 921.798103][T17035] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 921.798140][T17035] ? __lock_acquire+0x49f/0x1a40 [ 921.798177][T17035] ? __pfx_default_wake_function+0x10/0x10 [ 921.798213][T17035] ? do_raw_spin_lock+0x128/0x260 [ 921.798239][T17035] ? soundcore_open+0x231/0x5a0 [ 921.798275][T17035] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 921.798312][T17035] soundcore_open+0x2e3/0x5a0 [ 921.798347][T17035] ? __pfx_soundcore_open+0x10/0x10 [ 921.798379][T17035] chrdev_open+0x234/0x6a0 [ 921.798400][T17035] ? __pfx_apparmor_file_open+0x10/0x10 [ 921.798424][T17035] ? __pfx_chrdev_open+0x10/0x10 [ 921.798465][T17035] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 921.798497][T17035] do_dentry_open+0x6ab/0x14d0 [ 921.798550][T17035] ? __pfx_chrdev_open+0x10/0x10 [ 921.798598][T17035] vfs_open+0x82/0x3f0 [ 921.798632][T17035] path_openat+0x2873/0x4280 [ 921.798690][T17035] ? __pfx_path_openat+0x10/0x10 [ 921.798739][T17035] do_file_open+0x20e/0x430 [ 921.798784][T17035] ? __pfx_do_file_open+0x10/0x10 [ 921.798847][T17035] ? alloc_fd+0x471/0x7a0 [ 921.798888][T17035] ? do_getname+0x191/0x390 [ 921.798919][T17035] do_sys_openat2+0x10f/0x1e0 [ 921.798949][T17035] ? __pfx_do_sys_openat2+0x10/0x10 [ 921.798981][T17035] ? __fget_files+0x21f/0x3d0 [ 921.799024][T17035] __x64_sys_openat+0x12d/0x210 [ 921.799056][T17035] ? __pfx___x64_sys_openat+0x10/0x10 [ 921.799088][T17035] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 921.799128][T17035] ? syscall_user_dispatch+0x76/0x130 [ 921.799159][T17035] do_syscall_64+0x115/0x840 [ 921.799183][T17035] ? clear_bhb_loop+0x40/0x90 [ 921.799212][T17035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.799239][T17035] RIP: 0033:0x7f8ee759de59 [ 921.799260][T17035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 921.799288][T17035] RSP: 002b:00007f8ee57d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 921.799312][T17035] RAX: ffffffffffffffda RBX: 00007f8ee7826090 RCX: 00007f8ee759de59 [ 921.799331][T17035] RDX: 0000000000020b42 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 921.799348][T17035] RBP: 00007f8ee7633e6f R08: 0000000000000000 R09: 0000000000000000 [ 921.799365][T17035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 921.799382][T17035] R13: 00007f8ee7826128 R14: 00007f8ee7826090 R15: 00007ffe26fa4298 [ 921.799414][T17035] [ 923.807422][T17052] netlink: 25 bytes leftover after parsing attributes in process `syz.5.2122'. [ 926.579861][T17068] FAULT_INJECTION: forcing a failure. [ 926.579861][T17068] name failslab, interval 1, probability 0, space 0, times 0 [ 926.832594][T12158] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 926.876649][T17068] CPU: 0 UID: 0 PID: 17068 Comm: syz.7.2126 Tainted: G L syzkaller #0 PREEMPT(full) [ 926.876689][T17068] Tainted: [L]=SOFTLOCKUP [ 926.876699][T17068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 926.876714][T17068] Call Trace: [ 926.876722][T17068] [ 926.876732][T17068] dump_stack_lvl+0x100/0x190 [ 926.876767][T17068] should_fail_ex.cold+0x5/0xa [ 926.876794][T17068] should_failslab+0xc2/0x120 [ 926.876827][T17068] kmem_cache_alloc_noprof+0x91/0x6a0 [ 926.876855][T17068] ? find_held_lock+0x2b/0x80 [ 926.876887][T17068] ? mpol_new+0x11b/0x2d0 [ 926.876920][T17068] mpol_new+0x11b/0x2d0 [ 926.876950][T17068] do_mbind+0x210/0xfd0 [ 926.876995][T17068] ? __pfx_do_mbind+0x10/0x10 [ 926.877049][T17068] ? __pfx_get_nodes+0x10/0x10 [ 926.877085][T17068] kernel_mbind+0x1b7/0x200 [ 926.877130][T17068] ? __pfx_kernel_mbind+0x10/0x10 [ 926.877176][T17068] do_syscall_64+0x115/0x840 [ 926.877199][T17068] ? clear_bhb_loop+0x40/0x90 [ 926.877229][T17068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.877260][T17068] RIP: 0033:0x7f63e8b9de59 [ 926.877281][T17068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 926.877306][T17068] RSP: 002b:00007f63e9ac7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 926.877330][T17068] RAX: ffffffffffffffda RBX: 00007f63e8e26090 RCX: 00007f63e8b9de59 [ 926.877346][T17068] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000 [ 926.877361][T17068] RBP: 00007f63e8c33e6f R08: 0000000000000006 R09: 0000000000000002 [ 926.877376][T17068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 926.877391][T17068] R13: 00007f63e8e26128 R14: 00007f63e8e26090 R15: 00007ffd60763f08 [ 926.877421][T17068] [ 930.266363][T17108] FAULT_INJECTION: forcing a failure. [ 930.266363][T17108] name failslab, interval 1, probability 0, space 0, times 0 [ 930.327795][T17108] CPU: 0 UID: 0 PID: 17108 Comm: syz.0.2137 Tainted: G L syzkaller #0 PREEMPT(full) [ 930.327835][T17108] Tainted: [L]=SOFTLOCKUP [ 930.327845][T17108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 930.327861][T17108] Call Trace: [ 930.327869][T17108] [ 930.327879][T17108] dump_stack_lvl+0x100/0x190 [ 930.327913][T17108] should_fail_ex.cold+0x5/0xa [ 930.327935][T17108] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 930.327983][T17108] should_failslab+0xc2/0x120 [ 930.328017][T17108] kmem_cache_alloc_noprof+0x91/0x6a0 [ 930.328047][T17108] ? skb_clone+0x190/0x400 [ 930.328081][T17108] skb_clone+0x190/0x400 [ 930.328109][T17108] netlink_deliver_tap+0xaed/0xcc0 [ 930.328231][T17108] netlink_unicast+0x62b/0x850 [ 930.328271][T17108] ? __pfx_netlink_unicast+0x10/0x10 [ 930.328316][T17108] netlink_sendmsg+0x8b0/0xda0 [ 930.328356][T17108] ? __pfx_netlink_sendmsg+0x10/0x10 [ 930.328396][T17108] ? apparmor_socket_sendmsg+0x15b/0x270 [ 930.328439][T17108] ____sys_sendmsg+0xa4d/0xbe0 [ 930.328472][T17108] ? __pfx_netlink_sendmsg+0x10/0x10 [ 930.328510][T17108] ? __pfx_____sys_sendmsg+0x10/0x10 [ 930.328557][T17108] ___sys_sendmsg+0x190/0x1e0 [ 930.328595][T17108] ? __pfx____sys_sendmsg+0x10/0x10 [ 930.328631][T17108] ? __lock_acquire+0x49f/0x1a40 [ 930.328666][T17108] ? get_pid_task+0x106/0x250 [ 930.328725][T17108] __sys_sendmsg+0x160/0x210 [ 930.328753][T17108] ? __pfx___sys_sendmsg+0x10/0x10 [ 930.328798][T17108] do_syscall_64+0x115/0x840 [ 930.328819][T17108] ? clear_bhb_loop+0x40/0x90 [ 930.328849][T17108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.328873][T17108] RIP: 0033:0x7ff5da59de59 [ 930.328894][T17108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 930.328917][T17108] RSP: 002b:00007ff5db541028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 930.328946][T17108] RAX: ffffffffffffffda RBX: 00007ff5da825fa0 RCX: 00007ff5da59de59 [ 930.328963][T17108] RDX: 0000000020048804 RSI: 00002000000015c0 RDI: 0000000000000003 [ 930.328978][T17108] RBP: 00007ff5db541090 R08: 0000000000000000 R09: 0000000000000000 [ 930.328993][T17108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 930.329008][T17108] R13: 00007ff5da826038 R14: 00007ff5da825fa0 R15: 00007ffca26cd3c8 [ 930.329038][T17108] [ 930.736135][T17108] netlink: 'syz.0.2137': attribute type 1 has an invalid length. [ 930.747899][T17109] FAULT_INJECTION: forcing a failure. [ 930.747899][T17109] name failslab, interval 1, probability 0, space 0, times 0 [ 930.764411][T17109] CPU: 0 UID: 0 PID: 17109 Comm: syz.7.2135 Tainted: G L syzkaller #0 PREEMPT(full) [ 930.764451][T17109] Tainted: [L]=SOFTLOCKUP [ 930.764471][T17109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 930.764487][T17109] Call Trace: [ 930.764496][T17109] [ 930.764505][T17109] dump_stack_lvl+0x100/0x190 [ 930.764538][T17109] should_fail_ex.cold+0x5/0xa [ 930.764566][T17109] should_failslab+0xc2/0x120 [ 930.764598][T17109] __kmalloc_cache_noprof+0x91/0x6c0 [ 930.764639][T17109] ? ima_add_digest_entry+0x53/0x5b0 [ 930.764686][T17109] ima_add_digest_entry+0x53/0x5b0 [ 930.764729][T17109] ima_add_template_entry+0x45e/0x8b0 [ 930.764779][T17109] ? __pfx_ima_add_template_entry+0x10/0x10 [ 930.764830][T17109] ? ima_calc_field_array_hash+0x378/0x440 [ 930.764865][T17109] ima_store_template+0xda/0x150 [ 930.764897][T17109] ima_store_measurement+0x21c/0x5b0 [ 930.764928][T17109] ? __pfx_ima_store_measurement+0x10/0x10 [ 930.764969][T17109] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 930.765014][T17109] process_measurement+0x19cc/0x2350 [ 930.765051][T17109] ? __pfx_process_measurement+0x10/0x10 [ 930.765114][T17109] ? __pfx_aa_file_perm+0x10/0x10 [ 930.765156][T17109] ima_file_mmap+0x1c4/0x1f0 [ 930.765182][T17109] ? __pfx_ima_file_mmap+0x10/0x10 [ 930.765215][T17109] security_mmap_file+0x278/0x9b0 [ 930.765247][T17109] __do_sys_remap_file_pages+0x2da/0xa10 [ 930.765287][T17109] ? find_held_lock+0x2b/0x80 [ 930.765320][T17109] ? __pfx___do_sys_remap_file_pages+0x10/0x10 [ 930.765354][T17109] ? __x64_sys_futex+0x34f/0x4d0 [ 930.765386][T17109] ? __x64_sys_futex+0x358/0x4d0 [ 930.765414][T17109] ? xfd_validate_state+0x129/0x190 [ 930.765451][T17109] do_syscall_64+0x115/0x840 [ 930.765474][T17109] ? clear_bhb_loop+0x40/0x90 [ 930.765503][T17109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.765529][T17109] RIP: 0033:0x7f63e8b9de59 [ 930.765550][T17109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 930.765574][T17109] RSP: 002b:00007f63e9ac7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 930.765599][T17109] RAX: ffffffffffffffda RBX: 00007f63e8e26090 RCX: 00007f63e8b9de59 [ 930.765616][T17109] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000000006a27 [ 930.765631][T17109] RBP: 00007f63e8c33e6f R08: 0000000000000004 R09: 0000000000000000 [ 930.765647][T17109] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 930.765662][T17109] R13: 00007f63e8e26128 R14: 00007f63e8e26090 R15: 00007ffd60763f08 [ 930.765693][T17109] [ 930.765704][T17109] ima: OUT OF MEMORY ERROR creating queue entry [ 931.241702][T17114] FAULT_INJECTION: forcing a failure. [ 931.241702][T17114] name failslab, interval 1, probability 0, space 0, times 0 [ 931.265301][T17114] CPU: 0 UID: 0 PID: 17114 Comm: syz.0.2139 Tainted: G L syzkaller #0 PREEMPT(full) [ 931.265343][T17114] Tainted: [L]=SOFTLOCKUP [ 931.265353][T17114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 931.265369][T17114] Call Trace: [ 931.265377][T17114] [ 931.265387][T17114] dump_stack_lvl+0x100/0x190 [ 931.265419][T17114] should_fail_ex.cold+0x5/0xa [ 931.265447][T17114] should_failslab+0xc2/0x120 [ 931.265480][T17114] kmem_cache_alloc_noprof+0x91/0x6a0 [ 931.265507][T17114] ? stack_trace_save+0x8e/0xc0 [ 931.265539][T17114] ? alloc_empty_file+0x5b/0x1c0 [ 931.265573][T17114] alloc_empty_file+0x5b/0x1c0 [ 931.265602][T17114] path_openat+0xe7/0x4280 [ 931.265640][T17114] ? __kasan_slab_alloc+0x89/0x90 [ 931.265669][T17114] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 931.265695][T17114] ? do_getname+0x35/0x390 [ 931.265720][T17114] ? do_sys_openat2+0xc7/0x1e0 [ 931.265748][T17114] ? __x64_sys_openat+0x12d/0x210 [ 931.265783][T17114] ? do_syscall_64+0x115/0x840 [ 931.265806][T17114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.265865][T17114] ? __pfx_path_openat+0x10/0x10 [ 931.265914][T17114] do_file_open+0x20e/0x430 [ 931.265955][T17114] ? __pfx_do_file_open+0x10/0x10 [ 931.266018][T17114] ? alloc_fd+0x471/0x7a0 [ 931.266059][T17114] ? do_getname+0x191/0x390 [ 931.266089][T17114] do_sys_openat2+0x10f/0x1e0 [ 931.266119][T17114] ? __pfx_do_sys_openat2+0x10/0x10 [ 931.266147][T17114] ? lapic_next_event+0x10/0x20 [ 931.266192][T17114] __x64_sys_openat+0x12d/0x210 [ 931.266224][T17114] ? __pfx___x64_sys_openat+0x10/0x10 [ 931.266259][T17114] ? do_raw_spin_unlock+0x145/0x1e0 [ 931.266292][T17114] do_syscall_64+0x115/0x840 [ 931.266314][T17114] ? clear_bhb_loop+0x40/0x90 [ 931.266343][T17114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.266369][T17114] RIP: 0033:0x7ff5da59de59 [ 931.266390][T17114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 931.266414][T17114] RSP: 002b:00007ff5db541028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 931.266438][T17114] RAX: ffffffffffffffda RBX: 00007ff5da825fa0 RCX: 00007ff5da59de59 [ 931.266455][T17114] RDX: 0000000000088000 RSI: 0000200000001a00 RDI: ffffffffffffff9c [ 931.266471][T17114] RBP: 00007ff5da633e6f R08: 0000000000000000 R09: 0000000000000000 [ 931.266487][T17114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 931.266502][T17114] R13: 00007ff5da826038 R14: 00007ff5da825fa0 R15: 00007ffca26cd3c8 [ 931.266534][T17114] [ 933.365069][ T31] audit: type=1804 audit(7887920.915:26): pid=17109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.7.2135" name="dev/zero" dev="tmpfs" ino=4039 res=0 errno=0 [ 933.595380][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 933.602231][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 935.772626][T17153] FAULT_INJECTION: forcing a failure. [ 935.772626][T17153] name failslab, interval 1, probability 0, space 0, times 0 [ 935.894293][T17153] CPU: 0 UID: 0 PID: 17153 Comm: syz.6.2148 Tainted: G L syzkaller #0 PREEMPT(full) [ 935.894348][T17153] Tainted: [L]=SOFTLOCKUP [ 935.894364][T17153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 935.894381][T17153] Call Trace: [ 935.894390][T17153] [ 935.894400][T17153] dump_stack_lvl+0x100/0x190 [ 935.894435][T17153] should_fail_ex.cold+0x5/0xa [ 935.894463][T17153] should_failslab+0xc2/0x120 [ 935.894496][T17153] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 935.894527][T17153] ? krealloc_node_align_noprof+0x27e/0x3e0 [ 935.894556][T17153] ? rcu_is_watching+0x12/0xc0 [ 935.894586][T17153] ? snd_pcm_hw_rule_add+0x3b3/0x510 [ 935.894625][T17153] krealloc_node_align_noprof+0x1f9/0x3e0 [ 935.894658][T17153] snd_pcm_hw_rule_add+0x3b3/0x510 [ 935.894692][T17153] ? __pfx_snd_pcm_hw_rule_muldivk+0x10/0x10 [ 935.894727][T17153] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 935.894759][T17153] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 935.894796][T17153] ? mutex_init_lockdep+0xf1/0x120 [ 935.894836][T17153] ? snd_pcm_attach_substream+0x287/0xd20 [ 935.894869][T17153] snd_pcm_open_substream+0x942/0x1850 [ 935.894898][T17153] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 935.894926][T17153] ? snd_pcm_oss_open+0x5e5/0x1390 [ 935.894965][T17153] snd_pcm_oss_open+0x735/0x1390 [ 935.895011][T17153] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 935.895048][T17153] ? __lock_acquire+0x49f/0x1a40 [ 935.895091][T17153] ? __pfx_default_wake_function+0x10/0x10 [ 935.895128][T17153] ? do_raw_spin_lock+0x128/0x260 [ 935.895154][T17153] ? soundcore_open+0x231/0x5a0 [ 935.895189][T17153] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 935.895226][T17153] soundcore_open+0x2e3/0x5a0 [ 935.895260][T17153] ? __pfx_soundcore_open+0x10/0x10 [ 935.895292][T17153] chrdev_open+0x234/0x6a0 [ 935.895314][T17153] ? __pfx_apparmor_file_open+0x10/0x10 [ 935.895338][T17153] ? __pfx_chrdev_open+0x10/0x10 [ 935.895382][T17153] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 935.895414][T17153] do_dentry_open+0x6ab/0x14d0 [ 935.895453][T17153] ? __pfx_chrdev_open+0x10/0x10 [ 935.895498][T17153] vfs_open+0x82/0x3f0 [ 935.895529][T17153] path_openat+0x2873/0x4280 [ 935.895585][T17153] ? __pfx_path_openat+0x10/0x10 [ 935.895639][T17153] do_file_open+0x20e/0x430 [ 935.895683][T17153] ? __pfx_do_file_open+0x10/0x10 [ 935.895744][T17153] ? alloc_fd+0x471/0x7a0 [ 935.895784][T17153] ? do_getname+0x191/0x390 [ 935.895814][T17153] do_sys_openat2+0x10f/0x1e0 [ 935.895844][T17153] ? __pfx_do_sys_openat2+0x10/0x10 [ 935.895877][T17153] ? __fget_files+0x21f/0x3d0 [ 935.895919][T17153] __x64_sys_openat+0x12d/0x210 [ 935.895951][T17153] ? __pfx___x64_sys_openat+0x10/0x10 [ 935.895985][T17153] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 935.896025][T17153] ? syscall_user_dispatch+0x76/0x130 [ 935.896054][T17153] do_syscall_64+0x115/0x840 [ 935.896082][T17153] ? clear_bhb_loop+0x40/0x90 [ 935.896112][T17153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.896138][T17153] RIP: 0033:0x7f8ee759de59 [ 935.896159][T17153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 935.896184][T17153] RSP: 002b:00007f8ee57d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 935.896209][T17153] RAX: ffffffffffffffda RBX: 00007f8ee7826090 RCX: 00007f8ee759de59 [ 935.896227][T17153] RDX: 0000000000020b42 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 935.896243][T17153] RBP: 00007f8ee7633e6f R08: 0000000000000000 R09: 0000000000000000 [ 935.896258][T17153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 935.896274][T17153] R13: 00007f8ee7826128 R14: 00007f8ee7826090 R15: 00007ffe26fa4298 [ 935.896305][T17153] [ 936.807884][T17162] FAULT_INJECTION: forcing a failure. [ 936.807884][T17162] name failslab, interval 1, probability 0, space 0, times 0 [ 936.873347][T17162] CPU: 0 UID: 0 PID: 17162 Comm: syz.0.2149 Tainted: G L syzkaller #0 PREEMPT(full) [ 936.873387][T17162] Tainted: [L]=SOFTLOCKUP [ 936.873396][T17162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 936.873412][T17162] Call Trace: [ 936.873421][T17162] [ 936.873431][T17162] dump_stack_lvl+0x100/0x190 [ 936.873464][T17162] should_fail_ex.cold+0x5/0xa [ 936.873491][T17162] should_failslab+0xc2/0x120 [ 936.873524][T17162] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 936.873556][T17162] ? krealloc_node_align_noprof+0x27e/0x3e0 [ 936.873585][T17162] ? rcu_is_watching+0x12/0xc0 [ 936.873612][T17162] ? snd_pcm_hw_rule_add+0x3b3/0x510 [ 936.873652][T17162] krealloc_node_align_noprof+0x1f9/0x3e0 [ 936.873684][T17162] snd_pcm_hw_rule_add+0x3b3/0x510 [ 936.873719][T17162] ? __pfx_snd_pcm_hw_rule_muldivk+0x10/0x10 [ 936.873757][T17162] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 936.873789][T17162] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 936.873826][T17162] ? mutex_init_lockdep+0xf1/0x120 [ 936.873866][T17162] ? snd_pcm_attach_substream+0x287/0xd20 [ 936.873899][T17162] snd_pcm_open_substream+0x942/0x1850 [ 936.873928][T17162] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 936.873956][T17162] ? snd_pcm_oss_open+0x5e5/0x1390 [ 936.874003][T17162] snd_pcm_oss_open+0x735/0x1390 [ 936.874078][T17162] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 936.874116][T17162] ? __lock_acquire+0x49f/0x1a40 [ 936.874153][T17162] ? __pfx_default_wake_function+0x10/0x10 [ 936.874190][T17162] ? do_raw_spin_lock+0x128/0x260 [ 936.874219][T17162] ? soundcore_open+0x231/0x5a0 [ 936.874258][T17162] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 936.874295][T17162] soundcore_open+0x2e3/0x5a0 [ 936.874330][T17162] ? __pfx_soundcore_open+0x10/0x10 [ 936.874362][T17162] chrdev_open+0x234/0x6a0 [ 936.874384][T17162] ? __pfx_apparmor_file_open+0x10/0x10 [ 936.874409][T17162] ? __pfx_chrdev_open+0x10/0x10 [ 936.874451][T17162] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 936.874482][T17162] do_dentry_open+0x6ab/0x14d0 [ 936.874521][T17162] ? __pfx_chrdev_open+0x10/0x10 [ 936.874567][T17162] vfs_open+0x82/0x3f0 [ 936.874598][T17162] path_openat+0x2873/0x4280 [ 936.874650][T17162] ? __pfx_path_openat+0x10/0x10 [ 936.874698][T17162] do_file_open+0x20e/0x430 [ 936.874739][T17162] ? __pfx_do_file_open+0x10/0x10 [ 936.874800][T17162] ? alloc_fd+0x471/0x7a0 [ 936.874840][T17162] ? do_getname+0x191/0x390 [ 936.874870][T17162] do_sys_openat2+0x10f/0x1e0 [ 936.874900][T17162] ? __pfx_do_sys_openat2+0x10/0x10 [ 936.874933][T17162] ? __fget_files+0x21f/0x3d0 [ 936.874976][T17162] __x64_sys_openat+0x12d/0x210 [ 936.875013][T17162] ? __pfx___x64_sys_openat+0x10/0x10 [ 936.875046][T17162] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 936.875087][T17162] ? syscall_user_dispatch+0x76/0x130 [ 936.875116][T17162] do_syscall_64+0x115/0x840 [ 936.875138][T17162] ? clear_bhb_loop+0x40/0x90 [ 936.875169][T17162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.875194][T17162] RIP: 0033:0x7ff5da59de59 [ 936.875216][T17162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 936.875241][T17162] RSP: 002b:00007ff5db520028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 936.875265][T17162] RAX: ffffffffffffffda RBX: 00007ff5da826090 RCX: 00007ff5da59de59 [ 936.875282][T17162] RDX: 0000000000020b42 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 936.875299][T17162] RBP: 00007ff5da633e6f R08: 0000000000000000 R09: 0000000000000000 [ 936.875314][T17162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 936.875330][T17162] R13: 00007ff5da826128 R14: 00007ff5da826090 R15: 00007ffca26cd3c8 [ 936.875370][T17162] [ 937.292500][T17163] netlink: 'syz.0.2149': attribute type 1 has an invalid length. [ 938.855533][T17169] FAULT_INJECTION: forcing a failure. [ 938.855533][T17169] name failslab, interval 1, probability 0, space 0, times 0 [ 938.897087][T17171] FAULT_INJECTION: forcing a failure. [ 938.897087][T17171] name failslab, interval 1, probability 0, space 0, times 0 [ 938.936021][T17169] CPU: 0 UID: 0 PID: 17169 Comm: syz.6.2151 Tainted: G L syzkaller #0 PREEMPT(full) [ 938.936063][T17169] Tainted: [L]=SOFTLOCKUP [ 938.936072][T17169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 938.936087][T17169] Call Trace: [ 938.936095][T17169] [ 938.936105][T17169] dump_stack_lvl+0x100/0x190 [ 938.936137][T17169] should_fail_ex.cold+0x5/0xa [ 938.936164][T17169] should_failslab+0xc2/0x120 [ 938.936199][T17169] kmem_cache_alloc_noprof+0x91/0x6a0 [ 938.936232][T17169] ? stack_trace_save+0x8e/0xc0 [ 938.936265][T17169] ? alloc_empty_file+0x5b/0x1c0 [ 938.936298][T17169] alloc_empty_file+0x5b/0x1c0 [ 938.936329][T17169] path_openat+0xe7/0x4280 [ 938.936366][T17169] ? __kasan_slab_alloc+0x89/0x90 [ 938.936395][T17169] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 938.936421][T17169] ? do_getname+0x35/0x390 [ 938.936446][T17169] ? do_sys_openat2+0xc7/0x1e0 [ 938.936473][T17169] ? __x64_sys_openat+0x12d/0x210 [ 938.936502][T17169] ? do_syscall_64+0x115/0x840 [ 938.936523][T17169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.936556][T17169] ? __pfx_path_openat+0x10/0x10 [ 938.936612][T17169] do_file_open+0x20e/0x430 [ 938.936655][T17169] ? __pfx_do_file_open+0x10/0x10 [ 938.936714][T17169] ? alloc_fd+0x471/0x7a0 [ 938.936754][T17169] ? do_getname+0x191/0x390 [ 938.936785][T17169] do_sys_openat2+0x10f/0x1e0 [ 938.936816][T17169] ? __pfx_do_sys_openat2+0x10/0x10 [ 938.936848][T17169] ? fdget+0x18b/0x210 [ 938.936890][T17169] __x64_sys_openat+0x12d/0x210 [ 938.936921][T17169] ? __pfx___x64_sys_openat+0x10/0x10 [ 938.936965][T17169] do_syscall_64+0x115/0x840 [ 938.936987][T17169] ? clear_bhb_loop+0x40/0x90 [ 938.937017][T17169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.937042][T17169] RIP: 0033:0x7f8ee759de59 [ 938.937063][T17169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 938.937088][T17169] RSP: 002b:00007f8ee57f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 938.937112][T17169] RAX: ffffffffffffffda RBX: 00007f8ee7825fa0 RCX: 00007f8ee759de59 [ 938.937131][T17169] RDX: 0000000000088000 RSI: 0000200000001a00 RDI: ffffffffffffff9c [ 938.937147][T17169] RBP: 00007f8ee7633e6f R08: 0000000000000000 R09: 0000000000000000 [ 938.937162][T17169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 938.937177][T17169] R13: 00007f8ee7826038 R14: 00007f8ee7825fa0 R15: 00007ffe26fa4298 [ 938.937208][T17169] [ 939.411714][T17171] CPU: 0 UID: 0 PID: 17171 Comm: syz.0.2152 Tainted: G L syzkaller #0 PREEMPT(full) [ 939.411755][T17171] Tainted: [L]=SOFTLOCKUP [ 939.411764][T17171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 939.411779][T17171] Call Trace: [ 939.411787][T17171] [ 939.411805][T17171] dump_stack_lvl+0x100/0x190 [ 939.411839][T17171] should_fail_ex.cold+0x5/0xa [ 939.411866][T17171] should_failslab+0xc2/0x120 [ 939.411898][T17171] kmem_cache_alloc_noprof+0x91/0x6a0 [ 939.411926][T17171] ? stack_trace_save+0x8e/0xc0 [ 939.411958][T17171] ? alloc_empty_file+0x5b/0x1c0 [ 939.411991][T17171] alloc_empty_file+0x5b/0x1c0 [ 939.412020][T17171] path_openat+0xe7/0x4280 [ 939.412058][T17171] ? __kasan_slab_alloc+0x89/0x90 [ 939.412087][T17171] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 939.412113][T17171] ? do_getname+0x35/0x390 [ 939.412138][T17171] ? do_sys_openat2+0xc7/0x1e0 [ 939.412165][T17171] ? __x64_sys_openat+0x12d/0x210 [ 939.412194][T17171] ? do_syscall_64+0x115/0x840 [ 939.412216][T17171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.412249][T17171] ? __pfx_path_openat+0x10/0x10 [ 939.412296][T17171] do_file_open+0x20e/0x430 [ 939.412337][T17171] ? __pfx_do_file_open+0x10/0x10 [ 939.412398][T17171] ? alloc_fd+0x471/0x7a0 [ 939.412438][T17171] ? do_getname+0x191/0x390 [ 939.412468][T17171] do_sys_openat2+0x10f/0x1e0 [ 939.412498][T17171] ? __pfx_do_sys_openat2+0x10/0x10 [ 939.412533][T17171] ? fdget+0x18b/0x210 [ 939.412575][T17171] __x64_sys_openat+0x12d/0x210 [ 939.412606][T17171] ? __pfx___x64_sys_openat+0x10/0x10 [ 939.412651][T17171] do_syscall_64+0x115/0x840 [ 939.412673][T17171] ? clear_bhb_loop+0x40/0x90 [ 939.412702][T17171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.412728][T17171] RIP: 0033:0x7ff5da59de59 [ 939.412748][T17171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 939.412773][T17171] RSP: 002b:00007ff5db541028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 939.412802][T17171] RAX: ffffffffffffffda RBX: 00007ff5da825fa0 RCX: 00007ff5da59de59 [ 939.412819][T17171] RDX: 0000000000088000 RSI: 0000200000001a00 RDI: ffffffffffffff9c [ 939.412835][T17171] RBP: 00007ff5da633e6f R08: 0000000000000000 R09: 0000000000000000 [ 939.412850][T17171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 939.412865][T17171] R13: 00007ff5da826038 R14: 00007ff5da825fa0 R15: 00007ffca26cd3c8 [ 939.412896][T17171] [ 942.635771][T17205] FAULT_INJECTION: forcing a failure. [ 942.635771][T17205] name failslab, interval 1, probability 0, space 0, times 0 [ 942.707763][T17205] CPU: 0 UID: 0 PID: 17205 Comm: syz.0.2159 Tainted: G L syzkaller #0 PREEMPT(full) [ 942.707805][T17205] Tainted: [L]=SOFTLOCKUP [ 942.707815][T17205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 942.707830][T17205] Call Trace: [ 942.707839][T17205] [ 942.707849][T17205] dump_stack_lvl+0x100/0x190 [ 942.707882][T17205] should_fail_ex.cold+0x5/0xa [ 942.707909][T17205] should_failslab+0xc2/0x120 [ 942.707948][T17205] kmem_cache_alloc_noprof+0x91/0x6a0 [ 942.707976][T17205] ? stack_trace_save+0x8e/0xc0 [ 942.708008][T17205] ? alloc_empty_file+0x5b/0x1c0 [ 942.708049][T17205] alloc_empty_file+0x5b/0x1c0 [ 942.708079][T17205] path_openat+0xe7/0x4280 [ 942.708118][T17205] ? __kasan_slab_alloc+0x89/0x90 [ 942.708146][T17205] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 942.708173][T17205] ? do_getname+0x35/0x390 [ 942.708199][T17205] ? do_sys_openat2+0xc7/0x1e0 [ 942.708227][T17205] ? __x64_sys_openat+0x12d/0x210 [ 942.708255][T17205] ? do_syscall_64+0x115/0x840 [ 942.708278][T17205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.708311][T17205] ? __pfx_path_openat+0x10/0x10 [ 942.708359][T17205] do_file_open+0x20e/0x430 [ 942.708400][T17205] ? __pfx_do_file_open+0x10/0x10 [ 942.708461][T17205] ? alloc_fd+0x471/0x7a0 [ 942.708501][T17205] ? do_getname+0x191/0x390 [ 942.708540][T17205] do_sys_openat2+0x10f/0x1e0 [ 942.708571][T17205] ? __pfx_do_sys_openat2+0x10/0x10 [ 942.708604][T17205] ? fdget+0x18b/0x210 [ 942.708645][T17205] __x64_sys_openat+0x12d/0x210 [ 942.708676][T17205] ? __pfx___x64_sys_openat+0x10/0x10 [ 942.708718][T17205] do_syscall_64+0x115/0x840 [ 942.708740][T17205] ? clear_bhb_loop+0x40/0x90 [ 942.708769][T17205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.708795][T17205] RIP: 0033:0x7ff5da59de59 [ 942.708821][T17205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 942.708845][T17205] RSP: 002b:00007ff5db541028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 942.708869][T17205] RAX: ffffffffffffffda RBX: 00007ff5da825fa0 RCX: 00007ff5da59de59 [ 942.708886][T17205] RDX: 0000000000088000 RSI: 0000200000001a00 RDI: ffffffffffffff9c [ 942.708902][T17205] RBP: 00007ff5da633e6f R08: 0000000000000000 R09: 0000000000000000 [ 942.708918][T17205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 942.709101][T17205] R13: 00007ff5da826038 R14: 00007ff5da825fa0 R15: 00007ffca26cd3c8 [ 942.709133][T17205] [ 944.270831][T17207] Process accounting paused [ 944.329826][T17214] random: crng reseeded on system resumption [ 944.565254][T17216] FAULT_INJECTION: forcing a failure. [ 944.565254][T17216] name failslab, interval 1, probability 0, space 0, times 0 [ 944.583336][T12158] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 944.668599][T17216] CPU: 0 UID: 0 PID: 17216 Comm: syz.0.2162 Tainted: G L syzkaller #0 PREEMPT(full) [ 944.668638][T17216] Tainted: [L]=SOFTLOCKUP [ 944.668647][T17216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 944.668666][T17216] Call Trace: [ 944.668674][T17216] [ 944.668684][T17216] dump_stack_lvl+0x100/0x190 [ 944.668719][T17216] should_fail_ex.cold+0x5/0xa [ 944.668748][T17216] should_failslab+0xc2/0x120 [ 944.668790][T17216] __kmalloc_noprof+0xfc/0x820 [ 944.668818][T17216] ? blk_rq_map_user_iov+0x2a5/0x1440 [ 944.668934][T17216] blk_rq_map_user_iov+0x2a5/0x1440 [ 944.668979][T17216] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 944.669020][T17216] ? policy_nodemask+0xed/0x4f0 [ 944.669056][T17216] ? alloc_pages_mpol+0x25a/0x540 [ 944.669087][T17216] ? find_held_lock+0x2b/0x80 [ 944.669116][T17216] ? sg_common_write.isra.0+0xe26/0x1b90 [ 944.669147][T17216] ? import_ubuf+0x1b6/0x220 [ 944.669182][T17216] blk_rq_map_user_io+0x1ff/0x230 [ 944.669218][T17216] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 944.669254][T17216] ? alloc_pages_noprof+0xf9/0x160 [ 944.669303][T17216] sg_common_write.isra.0+0xf74/0x1b90 [ 944.669343][T17216] ? __might_fault+0xc5/0x140 [ 944.669366][T17216] ? __pfx_sg_common_write.isra.0+0x10/0x10 [ 944.669407][T17216] sg_write+0x7eb/0xdb0 [ 944.669437][T17216] ? __pfx_sg_write+0x10/0x10 [ 944.669470][T17216] ? plist_check_list+0x1b8/0x280 [ 944.669524][T17216] ? apparmor_file_permission+0x13f/0x1c0 [ 944.669553][T17216] ? bpf_lsm_file_permission+0x9/0x10 [ 944.669590][T17216] ? security_file_permission+0x76/0x210 [ 944.669623][T17216] ? rw_verify_area+0xce/0x6d0 [ 944.669659][T17216] vfs_write+0x2aa/0x1050 [ 944.669697][T17216] ? __pfx_sg_write+0x10/0x10 [ 944.669726][T17216] ? __pfx_vfs_write+0x10/0x10 [ 944.669761][T17216] ? find_held_lock+0x2b/0x80 [ 944.669794][T17216] ? __fget_files+0x215/0x3d0 [ 944.669830][T17216] ? __fget_files+0x215/0x3d0 [ 944.669871][T17216] ? __fget_files+0x21f/0x3d0 [ 944.669916][T17216] ksys_write+0x12a/0x250 [ 944.669953][T17216] ? __pfx_ksys_write+0x10/0x10 [ 944.669999][T17216] do_syscall_64+0x115/0x840 [ 944.670020][T17216] ? clear_bhb_loop+0x40/0x90 [ 944.670051][T17216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.670077][T17216] RIP: 0033:0x7ff5da59de59 [ 944.670099][T17216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 944.670123][T17216] RSP: 002b:00007ff5db541028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 944.670147][T17216] RAX: ffffffffffffffda RBX: 00007ff5da825fa0 RCX: 00007ff5da59de59 [ 944.670164][T17216] RDX: 000000000000b6bd RSI: 0000000000000000 RDI: 0000000000000003 [ 944.670179][T17216] RBP: 00007ff5da633e6f R08: 0000000000000000 R09: 0000000000000000 [ 944.670195][T17216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 944.670210][T17216] R13: 00007ff5da826038 R14: 00007ff5da825fa0 R15: 00007ffca26cd3c8 [ 944.670242][T17216] [ 945.554361][T11188] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 945.720356][T17223] FAULT_INJECTION: forcing a failure. [ 945.720356][T17223] name failslab, interval 1, probability 0, space 0, times 0 [ 945.761861][T17223] CPU: 0 UID: 0 PID: 17223 Comm: syz.6.2164 Tainted: G L syzkaller #0 PREEMPT(full) [ 945.761902][T17223] Tainted: [L]=SOFTLOCKUP [ 945.761911][T17223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 945.761926][T17223] Call Trace: [ 945.761934][T17223] [ 945.761944][T17223] dump_stack_lvl+0x100/0x190 [ 945.761976][T17223] should_fail_ex.cold+0x5/0xa [ 945.762003][T17223] should_failslab+0xc2/0x120 [ 945.762034][T17223] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 945.762062][T17223] ? __pfx__kstrtoull+0x10/0x10 [ 945.762086][T17223] ? __d_alloc+0x35/0xa50 [ 945.762114][T17223] __d_alloc+0x35/0xa50 [ 945.762140][T17223] d_alloc_parallel+0x105/0x14b0 [ 945.762178][T17223] ? find_held_lock+0x2b/0x80 [ 945.762206][T17223] ? __d_lookup+0x25c/0x4a0 [ 945.762236][T17223] ? __pfx_d_alloc_parallel+0x10/0x10 [ 945.762271][T17223] ? __d_lookup+0x266/0x4a0 [ 945.762305][T17223] ? d_lookup+0xe7/0x190 [ 945.762338][T17223] proc_fill_cache+0x225/0x3a0 [ 945.762374][T17223] ? __pfx_proc_pident_instantiate+0x10/0x10 [ 945.762411][T17223] ? __pfx_proc_fill_cache+0x10/0x10 [ 945.762454][T17223] proc_pident_readdir+0x1bc/0x530 [ 945.762496][T17223] iterate_dir+0x296/0xae0 [ 945.762533][T17223] __x64_sys_getdents64+0x13b/0x2c0 [ 945.762569][T17223] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 945.762602][T17223] ? fput+0x79/0x100 [ 945.762626][T17223] ? __pfx_filldir64+0x10/0x10 [ 945.762667][T17223] do_syscall_64+0x115/0x840 [ 945.762690][T17223] ? clear_bhb_loop+0x40/0x90 [ 945.762719][T17223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.762758][T17223] RIP: 0033:0x7f8ee759de59 [ 945.762777][T17223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 945.762801][T17223] RSP: 002b:00007f8ee57f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 945.762825][T17223] RAX: ffffffffffffffda RBX: 00007f8ee7825fa0 RCX: 00007f8ee759de59 [ 945.762841][T17223] RDX: 0000000020000015 RSI: 0000000000000000 RDI: 0000000000000003 [ 945.762855][T17223] RBP: 00007f8ee57f6090 R08: 0000000000000000 R09: 0000000000000000 [ 945.762875][T17223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 945.762894][T17223] R13: 00007f8ee7826038 R14: 00007f8ee7825fa0 R15: 00007ffe26fa4298 [ 945.762925][T17223] [ 951.880876][T17281] netlink: 'syz.0.2176': attribute type 1 has an invalid length. [ 952.461904][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 952.475160][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 952.610011][T17290] FAULT_INJECTION: forcing a failure. [ 952.610011][T17290] name failslab, interval 1, probability 0, space 0, times 0 [ 952.679132][T17290] CPU: 0 UID: 0 PID: 17290 Comm: syz.5.2180 Tainted: G L syzkaller #0 PREEMPT(full) [ 952.679175][T17290] Tainted: [L]=SOFTLOCKUP [ 952.679204][T17290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 952.679220][T17290] Call Trace: [ 952.679228][T17290] [ 952.679238][T17290] dump_stack_lvl+0x100/0x190 [ 952.679279][T17290] should_fail_ex.cold+0x5/0xa [ 952.679306][T17290] should_failslab+0xc2/0x120 [ 952.679340][T17290] kmem_cache_alloc_noprof+0x91/0x6a0 [ 952.679367][T17290] ? stack_trace_save+0x8e/0xc0 [ 952.679399][T17290] ? alloc_empty_file+0x5b/0x1c0 [ 952.679432][T17290] alloc_empty_file+0x5b/0x1c0 [ 952.679461][T17290] path_openat+0xe7/0x4280 [ 952.679499][T17290] ? __kasan_slab_alloc+0x89/0x90 [ 952.679534][T17290] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 952.679560][T17290] ? do_getname+0x35/0x390 [ 952.679585][T17290] ? do_sys_openat2+0xc7/0x1e0 [ 952.679613][T17290] ? __x64_sys_openat+0x12d/0x210 [ 952.679642][T17290] ? do_syscall_64+0x115/0x840 [ 952.679663][T17290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.679696][T17290] ? __pfx_path_openat+0x10/0x10 [ 952.679744][T17290] do_file_open+0x20e/0x430 [ 952.679788][T17290] ? __pfx_do_file_open+0x10/0x10 [ 952.679846][T17290] ? alloc_fd+0x471/0x7a0 [ 952.679887][T17290] ? do_getname+0x191/0x390 [ 952.679917][T17290] do_sys_openat2+0x10f/0x1e0 [ 952.679947][T17290] ? __pfx_do_sys_openat2+0x10/0x10 [ 952.679991][T17290] ? fdget+0x18b/0x210 [ 952.680032][T17290] __x64_sys_openat+0x12d/0x210 [ 952.680064][T17290] ? __pfx___x64_sys_openat+0x10/0x10 [ 952.680105][T17290] do_syscall_64+0x115/0x840 [ 952.680127][T17290] ? clear_bhb_loop+0x40/0x90 [ 952.680157][T17290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.680183][T17290] RIP: 0033:0x7fec3119de59 [ 952.680204][T17290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 952.680230][T17290] RSP: 002b:00007fec2f3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 952.680254][T17290] RAX: ffffffffffffffda RBX: 00007fec31425fa0 RCX: 00007fec3119de59 [ 952.680277][T17290] RDX: 0000000000088000 RSI: 0000200000001a00 RDI: ffffffffffffff9c [ 952.680293][T17290] RBP: 00007fec31233e6f R08: 0000000000000000 R09: 0000000000000000 [ 952.680308][T17290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 952.680323][T17290] R13: 00007fec31426038 R14: 00007fec31425fa0 R15: 00007ffd86c6b7a8 [ 952.680354][T17290] [ 953.554381][T17306] random: crng reseeded on system resumption [ 955.035033][T17330] FAULT_INJECTION: forcing a failure. [ 955.035033][T17330] name failslab, interval 1, probability 0, space 0, times 0 [ 955.112029][T17330] CPU: 0 UID: 0 PID: 17330 Comm: syz.5.2186 Tainted: G L syzkaller #0 PREEMPT(full) [ 955.112082][T17330] Tainted: [L]=SOFTLOCKUP [ 955.112091][T17330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 955.112106][T17330] Call Trace: [ 955.112115][T17330] [ 955.112124][T17330] dump_stack_lvl+0x100/0x190 [ 955.112157][T17330] should_fail_ex.cold+0x5/0xa [ 955.112187][T17330] should_failslab+0xc2/0x120 [ 955.112221][T17330] __kmalloc_noprof+0xfc/0x820 [ 955.112251][T17330] ? blk_rq_map_user_iov+0x2a5/0x1440 [ 955.112296][T17330] blk_rq_map_user_iov+0x2a5/0x1440 [ 955.112340][T17330] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 955.112381][T17330] ? policy_nodemask+0xed/0x4f0 [ 955.112415][T17330] ? alloc_pages_mpol+0x25a/0x540 [ 955.112447][T17330] ? find_held_lock+0x2b/0x80 [ 955.112475][T17330] ? sg_common_write.isra.0+0xe26/0x1b90 [ 955.112504][T17330] ? import_ubuf+0x1b6/0x220 [ 955.112538][T17330] blk_rq_map_user_io+0x1ff/0x230 [ 955.112575][T17330] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 955.112611][T17330] ? alloc_pages_noprof+0xf9/0x160 [ 955.112660][T17330] sg_common_write.isra.0+0xf74/0x1b90 [ 955.112700][T17330] ? __might_fault+0xc5/0x140 [ 955.112722][T17330] ? __pfx_sg_common_write.isra.0+0x10/0x10 [ 955.112763][T17330] sg_write+0x7eb/0xdb0 [ 955.112793][T17330] ? __pfx_sg_write+0x10/0x10 [ 955.112825][T17330] ? plist_check_list+0x1b8/0x280 [ 955.112878][T17330] ? apparmor_file_permission+0x13f/0x1c0 [ 955.112908][T17330] ? bpf_lsm_file_permission+0x9/0x10 [ 955.112946][T17330] ? security_file_permission+0x76/0x210 [ 955.112977][T17330] ? rw_verify_area+0xce/0x6d0 [ 955.113013][T17330] vfs_write+0x2aa/0x1050 [ 955.113056][T17330] ? __pfx_sg_write+0x10/0x10 [ 955.113085][T17330] ? __pfx_vfs_write+0x10/0x10 [ 955.113120][T17330] ? find_held_lock+0x2b/0x80 [ 955.113147][T17330] ? __fget_files+0x215/0x3d0 [ 955.113185][T17330] ? __fget_files+0x215/0x3d0 [ 955.113225][T17330] ? __fget_files+0x21f/0x3d0 [ 955.113276][T17330] ksys_write+0x12a/0x250 [ 955.113313][T17330] ? __pfx_ksys_write+0x10/0x10 [ 955.113358][T17330] do_syscall_64+0x115/0x840 [ 955.113379][T17330] ? clear_bhb_loop+0x40/0x90 [ 955.113409][T17330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.113434][T17330] RIP: 0033:0x7fec3119de59 [ 955.113456][T17330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 955.113480][T17330] RSP: 002b:00007fec2f3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 955.113505][T17330] RAX: ffffffffffffffda RBX: 00007fec31425fa0 RCX: 00007fec3119de59 [ 955.113521][T17330] RDX: 000000000000b6bd RSI: 0000000000000000 RDI: 0000000000000003 [ 955.113536][T17330] RBP: 00007fec31233e6f R08: 0000000000000000 R09: 0000000000000000 [ 955.113552][T17330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 955.113566][T17330] R13: 00007fec31426038 R14: 00007fec31425fa0 R15: 00007ffd86c6b7a8 [ 955.113597][T17330] [ 955.600503][T17335] netlink: 'syz.5.2187': attribute type 1 has an invalid length. [ 956.884750][T17345] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 957.895880][T17366] futex_wake_op: syz.7.2192 tries to shift op by -2048; fix this program [ 957.929059][T17366] futex_wake_op: syz.7.2192 tries to shift op by -2048; fix this program [ 957.990486][T17371] 0x000000000001-0x000000020000 : "" [ 958.028266][T17371] ftl_cs: FTL header corrupt! [ 958.508108][T17379] FAULT_INJECTION: forcing a failure. [ 958.508108][T17379] name failslab, interval 1, probability 0, space 0, times 0 [ 958.598054][T17379] CPU: 0 UID: 0 PID: 17379 Comm: syz.6.2197 Tainted: G L syzkaller #0 PREEMPT(full) [ 958.598091][T17379] Tainted: [L]=SOFTLOCKUP [ 958.598100][T17379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 958.598114][T17379] Call Trace: [ 958.598123][T17379] [ 958.598132][T17379] dump_stack_lvl+0x100/0x190 [ 958.598164][T17379] should_fail_ex.cold+0x5/0xa [ 958.598192][T17379] should_failslab+0xc2/0x120 [ 958.598222][T17379] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 958.598252][T17379] ? proc_alloc_inode+0x25/0x200 [ 958.598290][T17379] ? __pfx_proc_alloc_inode+0x10/0x10 [ 958.598332][T17379] proc_alloc_inode+0x25/0x200 [ 958.598366][T17379] alloc_inode+0x68/0x250 [ 958.598395][T17379] new_inode+0x22/0x1c0 [ 958.598426][T17379] proc_pid_make_inode+0x22/0x160 [ 958.598461][T17379] proc_pident_instantiate+0x85/0x310 [ 958.598499][T17379] proc_fill_cache+0x2a3/0x3a0 [ 958.598533][T17379] ? __pfx_proc_pident_instantiate+0x10/0x10 [ 958.598569][T17379] ? __pfx_proc_fill_cache+0x10/0x10 [ 958.598613][T17379] proc_pident_readdir+0x1bc/0x530 [ 958.598654][T17379] iterate_dir+0x296/0xae0 [ 958.598721][T17379] __x64_sys_getdents64+0x13b/0x2c0 [ 958.598774][T17379] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 958.598807][T17379] ? fput+0x79/0x100 [ 958.598831][T17379] ? __pfx_filldir64+0x10/0x10 [ 958.598877][T17379] do_syscall_64+0x115/0x840 [ 958.598898][T17379] ? clear_bhb_loop+0x40/0x90 [ 958.598928][T17379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.598952][T17379] RIP: 0033:0x7f8ee759de59 [ 958.598971][T17379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 958.598994][T17379] RSP: 002b:00007f8ee57f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 958.599017][T17379] RAX: ffffffffffffffda RBX: 00007f8ee7825fa0 RCX: 00007f8ee759de59 [ 958.599033][T17379] RDX: 0000000020000015 RSI: 0000000000000000 RDI: 0000000000000003 [ 958.599047][T17379] RBP: 00007f8ee57f6090 R08: 0000000000000000 R09: 0000000000000000 [ 958.599062][T17379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 958.599080][T17379] R13: 00007f8ee7826038 R14: 00007f8ee7825fa0 R15: 00007ffe26fa4298 [ 958.599110][T17379] [ 958.948772][T17381] FAULT_INJECTION: forcing a failure. [ 958.948772][T17381] name failslab, interval 1, probability 0, space 0, times 0 [ 958.963723][T17381] CPU: 0 UID: 0 PID: 17381 Comm: syz.0.2198 Tainted: G L syzkaller #0 PREEMPT(full) [ 958.963768][T17381] Tainted: [L]=SOFTLOCKUP [ 958.963777][T17381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 958.963792][T17381] Call Trace: [ 958.963801][T17381] [ 958.963811][T17381] dump_stack_lvl+0x100/0x190 [ 958.963842][T17381] should_fail_ex.cold+0x5/0xa [ 958.963878][T17381] should_failslab+0xc2/0x120 [ 958.963911][T17381] kmem_cache_alloc_noprof+0x91/0x6a0 [ 958.963940][T17381] ? stack_trace_save+0x8e/0xc0 [ 958.963972][T17381] ? alloc_empty_file+0x5b/0x1c0 [ 958.964006][T17381] alloc_empty_file+0x5b/0x1c0 [ 958.964035][T17381] path_openat+0xe7/0x4280 [ 958.964073][T17381] ? __kasan_slab_alloc+0x89/0x90 [ 958.964101][T17381] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 958.964127][T17381] ? do_getname+0x35/0x390 [ 958.964153][T17381] ? do_sys_openat2+0xc7/0x1e0 [ 958.964180][T17381] ? __x64_sys_openat+0x12d/0x210 [ 958.964209][T17381] ? do_syscall_64+0x115/0x840 [ 958.964232][T17381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.964266][T17381] ? __pfx_path_openat+0x10/0x10 [ 958.964313][T17381] do_file_open+0x20e/0x430 [ 958.964354][T17381] ? __pfx_do_file_open+0x10/0x10 [ 958.964414][T17381] ? alloc_fd+0x471/0x7a0 [ 958.964455][T17381] ? do_getname+0x191/0x390 [ 958.964485][T17381] do_sys_openat2+0x10f/0x1e0 [ 958.964515][T17381] ? __pfx_do_sys_openat2+0x10/0x10 [ 958.964547][T17381] ? fdget+0x18b/0x210 [ 958.964588][T17381] __x64_sys_openat+0x12d/0x210 [ 958.964619][T17381] ? __pfx___x64_sys_openat+0x10/0x10 [ 958.964660][T17381] do_syscall_64+0x115/0x840 [ 958.964681][T17381] ? clear_bhb_loop+0x40/0x90 [ 958.964710][T17381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.964736][T17381] RIP: 0033:0x7ff5da59de59 [ 958.964757][T17381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 958.964781][T17381] RSP: 002b:00007ff5db541028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 958.964805][T17381] RAX: ffffffffffffffda RBX: 00007ff5da825fa0 RCX: 00007ff5da59de59 [ 958.964822][T17381] RDX: 0000000000088000 RSI: 0000200000001a00 RDI: ffffffffffffff9c [ 958.964838][T17381] RBP: 00007ff5da633e6f R08: 0000000000000000 R09: 0000000000000000 [ 958.964863][T17381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 958.964878][T17381] R13: 00007ff5da826038 R14: 00007ff5da825fa0 R15: 00007ffca26cd3c8 [ 958.964909][T17381] [ 959.888653][T17391] FAULT_INJECTION: forcing a failure. [ 959.888653][T17391] name failslab, interval 1, probability 0, space 0, times 0 [ 959.956626][T17391] CPU: 0 UID: 0 PID: 17391 Comm: syz.6.2201 Tainted: G L syzkaller #0 PREEMPT(full) [ 959.956666][T17391] Tainted: [L]=SOFTLOCKUP [ 959.956675][T17391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 959.956690][T17391] Call Trace: [ 959.956699][T17391] [ 959.956709][T17391] dump_stack_lvl+0x100/0x190 [ 959.956749][T17391] should_fail_ex.cold+0x5/0xa [ 959.956776][T17391] should_failslab+0xc2/0x120 [ 959.956809][T17391] kmem_cache_alloc_noprof+0x91/0x6a0 [ 959.956836][T17391] ? stack_trace_save+0x8e/0xc0 [ 959.956868][T17391] ? alloc_empty_file+0x5b/0x1c0 [ 959.956901][T17391] alloc_empty_file+0x5b/0x1c0 [ 959.956931][T17391] path_openat+0xe7/0x4280 [ 959.956969][T17391] ? __kasan_slab_alloc+0x89/0x90 [ 959.956998][T17391] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 959.957024][T17391] ? do_getname+0x35/0x390 [ 959.957049][T17391] ? do_sys_openat2+0xc7/0x1e0 [ 959.957077][T17391] ? __x64_sys_openat+0x12d/0x210 [ 959.957106][T17391] ? do_syscall_64+0x115/0x840 [ 959.957133][T17391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.957167][T17391] ? __pfx_path_openat+0x10/0x10 [ 959.957214][T17391] do_file_open+0x20e/0x430 [ 959.957257][T17391] ? __pfx_do_file_open+0x10/0x10 [ 959.957319][T17391] ? alloc_fd+0x471/0x7a0 [ 959.957359][T17391] ? do_getname+0x191/0x390 [ 959.957390][T17391] do_sys_openat2+0x10f/0x1e0 [ 959.957420][T17391] ? __pfx_do_sys_openat2+0x10/0x10 [ 959.957452][T17391] ? fdget+0x18b/0x210 [ 959.957493][T17391] __x64_sys_openat+0x12d/0x210 [ 959.957523][T17391] ? __pfx___x64_sys_openat+0x10/0x10 [ 959.957565][T17391] do_syscall_64+0x115/0x840 [ 959.957586][T17391] ? clear_bhb_loop+0x40/0x90 [ 959.957615][T17391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.957641][T17391] RIP: 0033:0x7f8ee759de59 [ 959.957660][T17391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 959.957684][T17391] RSP: 002b:00007f8ee57f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 959.957716][T17391] RAX: ffffffffffffffda RBX: 00007f8ee7825fa0 RCX: 00007f8ee759de59 [ 959.957733][T17391] RDX: 0000000000088000 RSI: 0000200000001a00 RDI: ffffffffffffff9c [ 959.957749][T17391] RBP: 00007f8ee7633e6f R08: 0000000000000000 R09: 0000000000000000 [ 959.957764][T17391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 959.957779][T17391] R13: 00007f8ee7826038 R14: 00007f8ee7825fa0 R15: 00007ffe26fa4298 [ 959.957811][T17391] [ 964.056106][T17451] FAULT_INJECTION: forcing a failure. [ 964.056106][T17451] name failslab, interval 1, probability 0, space 0, times 0 [ 964.126341][T17451] CPU: 0 UID: 0 PID: 17451 Comm: syz.0.2209 Tainted: G L syzkaller #0 PREEMPT(full) [ 964.126384][T17451] Tainted: [L]=SOFTLOCKUP [ 964.126393][T17451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 964.126408][T17451] Call Trace: [ 964.126416][T17451] [ 964.126426][T17451] dump_stack_lvl+0x100/0x190 [ 964.126466][T17451] should_fail_ex.cold+0x5/0xa [ 964.126493][T17451] should_failslab+0xc2/0x120 [ 964.126526][T17451] kmem_cache_alloc_noprof+0x91/0x6a0 [ 964.126552][T17451] ? stack_trace_save+0x8e/0xc0 [ 964.126608][T17451] ? alloc_empty_file+0x5b/0x1c0 [ 964.126642][T17451] alloc_empty_file+0x5b/0x1c0 [ 964.126672][T17451] path_openat+0xe7/0x4280 [ 964.126710][T17451] ? __kasan_slab_alloc+0x89/0x90 [ 964.126739][T17451] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 964.126765][T17451] ? do_getname+0x35/0x390 [ 964.126791][T17451] ? do_sys_openat2+0xc7/0x1e0 [ 964.126818][T17451] ? __x64_sys_openat+0x12d/0x210 [ 964.126846][T17451] ? do_syscall_64+0x115/0x840 [ 964.126868][T17451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.126902][T17451] ? __pfx_path_openat+0x10/0x10 [ 964.126959][T17451] do_file_open+0x20e/0x430 [ 964.127000][T17451] ? __pfx_do_file_open+0x10/0x10 [ 964.127075][T17451] ? alloc_fd+0x471/0x7a0 [ 964.127116][T17451] ? do_getname+0x191/0x390 [ 964.127147][T17451] do_sys_openat2+0x10f/0x1e0 [ 964.127190][T17451] ? __pfx_do_sys_openat2+0x10/0x10 [ 964.127222][T17451] ? fdget+0x18b/0x210 [ 964.127264][T17451] __x64_sys_openat+0x12d/0x210 [ 964.127296][T17451] ? __pfx___x64_sys_openat+0x10/0x10 [ 964.127338][T17451] do_syscall_64+0x115/0x840 [ 964.127359][T17451] ? clear_bhb_loop+0x40/0x90 [ 964.127390][T17451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.127415][T17451] RIP: 0033:0x7ff5da59de59 [ 964.127435][T17451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 964.127460][T17451] RSP: 002b:00007ff5db541028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 964.127483][T17451] RAX: ffffffffffffffda RBX: 00007ff5da825fa0 RCX: 00007ff5da59de59 [ 964.127500][T17451] RDX: 0000000000088000 RSI: 0000200000001a00 RDI: ffffffffffffff9c [ 964.127516][T17451] RBP: 00007ff5da633e6f R08: 0000000000000000 R09: 0000000000000000 [ 964.127531][T17451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 964.127546][T17451] R13: 00007ff5da826038 R14: 00007ff5da825fa0 R15: 00007ffca26cd3c8 [ 964.127577][T17451] [ 965.136066][T17448] FAULT_INJECTION: forcing a failure. [ 965.136066][T17448] name failslab, interval 1, probability 0, space 0, times 0 [ 965.240192][T17448] CPU: 0 UID: 0 PID: 17448 Comm: syz.6.2208 Tainted: G L syzkaller #0 PREEMPT(full) [ 965.240233][T17448] Tainted: [L]=SOFTLOCKUP [ 965.240242][T17448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 965.240258][T17448] Call Trace: [ 965.240267][T17448] [ 965.240277][T17448] dump_stack_lvl+0x100/0x190 [ 965.240308][T17448] should_fail_ex.cold+0x5/0xa [ 965.240342][T17448] should_failslab+0xc2/0x120 [ 965.240375][T17448] kmem_cache_alloc_noprof+0x91/0x6a0 [ 965.240404][T17448] ? __pfx_futex_hash+0x10/0x10 [ 965.240441][T17448] ? mpol_new+0x11b/0x2d0 [ 965.240474][T17448] mpol_new+0x11b/0x2d0 [ 965.240504][T17448] do_mbind+0x210/0xfd0 [ 965.240549][T17448] ? __pfx_do_mbind+0x10/0x10 [ 965.240602][T17448] ? __pfx_get_nodes+0x10/0x10 [ 965.240638][T17448] kernel_mbind+0x1b7/0x200 [ 965.240679][T17448] ? __pfx_kernel_mbind+0x10/0x10 [ 965.240725][T17448] do_syscall_64+0x115/0x840 [ 965.240747][T17448] ? clear_bhb_loop+0x40/0x90 [ 965.240777][T17448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.240802][T17448] RIP: 0033:0x7f8ee759de59 [ 965.240822][T17448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 965.240847][T17448] RSP: 002b:00007f8ee57f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 965.240871][T17448] RAX: ffffffffffffffda RBX: 00007f8ee7825fa0 RCX: 00007f8ee759de59 [ 965.240887][T17448] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000 [ 965.240902][T17448] RBP: 00007f8ee7633e6f R08: 0000000000000006 R09: 0000000000000002 [ 965.240917][T17448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 965.240932][T17448] R13: 00007f8ee7826038 R14: 00007f8ee7825fa0 R15: 00007ffe26fa4298 [ 965.240962][T17448] [ 965.762963][T12158] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 965.879207][T17209] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 965.916709][T12158] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 966.120152][T17209] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 966.320056][T17209] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 967.271962][T11795] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.346397][T17487] FAULT_INJECTION: forcing a failure. [ 967.346397][T17487] name failslab, interval 1, probability 0, space 0, times 0 [ 967.455640][T17487] CPU: 0 UID: 0 PID: 17487 Comm: syz.7.2214 Tainted: G L syzkaller #0 PREEMPT(full) [ 967.455680][T17487] Tainted: [L]=SOFTLOCKUP [ 967.455689][T17487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 967.455705][T17487] Call Trace: [ 967.455713][T17487] [ 967.455723][T17487] dump_stack_lvl+0x100/0x190 [ 967.455756][T17487] should_fail_ex.cold+0x5/0xa [ 967.455784][T17487] should_failslab+0xc2/0x120 [ 967.455817][T17487] __kmalloc_cache_noprof+0x91/0x6c0 [ 967.455856][T17487] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 967.455894][T17487] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 967.455927][T17487] ? loopback_open+0x145/0x1370 [ 967.456055][T17487] loopback_open+0x145/0x1370 [ 967.456090][T17487] snd_pcm_open_substream+0xa76/0x1850 [ 967.456119][T17487] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 967.456146][T17487] ? snd_pcm_oss_open+0x5e5/0x1390 [ 967.456187][T17487] snd_pcm_oss_open+0x735/0x1390 [ 967.456233][T17487] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 967.456279][T17487] ? __lock_acquire+0x49f/0x1a40 [ 967.456317][T17487] ? __pfx_default_wake_function+0x10/0x10 [ 967.456354][T17487] ? do_raw_spin_lock+0x128/0x260 [ 967.456381][T17487] ? soundcore_open+0x231/0x5a0 [ 967.456415][T17487] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 967.456452][T17487] soundcore_open+0x2e3/0x5a0 [ 967.456486][T17487] ? __pfx_soundcore_open+0x10/0x10 [ 967.456518][T17487] chrdev_open+0x234/0x6a0 [ 967.456540][T17487] ? __pfx_apparmor_file_open+0x10/0x10 [ 967.456564][T17487] ? __pfx_chrdev_open+0x10/0x10 [ 967.456605][T17487] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 967.456636][T17487] do_dentry_open+0x6ab/0x14d0 [ 967.456675][T17487] ? __pfx_chrdev_open+0x10/0x10 [ 967.456720][T17487] vfs_open+0x82/0x3f0 [ 967.456752][T17487] path_openat+0x2873/0x4280 [ 967.456803][T17487] ? __pfx_path_openat+0x10/0x10 [ 967.456850][T17487] do_file_open+0x20e/0x430 [ 967.456892][T17487] ? __pfx_do_file_open+0x10/0x10 [ 967.456952][T17487] ? alloc_fd+0x471/0x7a0 [ 967.456992][T17487] ? do_getname+0x191/0x390 [ 967.457022][T17487] do_sys_openat2+0x10f/0x1e0 [ 967.457052][T17487] ? __pfx_do_sys_openat2+0x10/0x10 [ 967.457084][T17487] ? __fget_files+0x21f/0x3d0 [ 967.457127][T17487] __x64_sys_openat+0x12d/0x210 [ 967.457158][T17487] ? __pfx___x64_sys_openat+0x10/0x10 [ 967.457200][T17487] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 967.457245][T17487] ? syscall_user_dispatch+0x76/0x130 [ 967.457275][T17487] do_syscall_64+0x115/0x840 [ 967.457297][T17487] ? clear_bhb_loop+0x40/0x90 [ 967.457327][T17487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.457352][T17487] RIP: 0033:0x7f63e8b9de59 [ 967.457374][T17487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.457399][T17487] RSP: 002b:00007f63e9ac7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 967.457423][T17487] RAX: ffffffffffffffda RBX: 00007f63e8e26090 RCX: 00007f63e8b9de59 [ 967.457440][T17487] RDX: 0000000000020b42 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 967.457457][T17487] RBP: 00007f63e8c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 967.457472][T17487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 967.457487][T17487] R13: 00007f63e8e26128 R14: 00007f63e8e26090 R15: 00007ffd60763f08 [ 967.457519][T17487] [ 968.080165][T11795] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.318422][T11795] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.604441][T17209] Bluetooth: hci7: command tx timeout [ 968.708734][T17483] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 969.597934][T17512] FAULT_INJECTION: forcing a failure. [ 969.597934][T17512] name failslab, interval 1, probability 0, space 0, times 0 [ 969.742559][T17512] CPU: 0 UID: 0 PID: 17512 Comm: syz.7.2218 Tainted: G L syzkaller #0 PREEMPT(full) [ 969.742599][T17512] Tainted: [L]=SOFTLOCKUP [ 969.742608][T17512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 969.742624][T17512] Call Trace: [ 969.742632][T17512] [ 969.742642][T17512] dump_stack_lvl+0x100/0x190 [ 969.742675][T17512] should_fail_ex.cold+0x5/0xa [ 969.742704][T17512] should_failslab+0xc2/0x120 [ 969.742736][T17512] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 969.742767][T17512] ? krealloc_node_align_noprof+0x27e/0x3e0 [ 969.742796][T17512] ? rcu_is_watching+0x12/0xc0 [ 969.742823][T17512] ? snd_pcm_hw_rule_add+0x3b3/0x510 [ 969.742862][T17512] krealloc_node_align_noprof+0x1f9/0x3e0 [ 969.742895][T17512] snd_pcm_hw_rule_add+0x3b3/0x510 [ 969.742933][T17512] ? __pfx_snd_pcm_hw_rule_muldivk+0x10/0x10 [ 969.742969][T17512] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 969.743010][T17512] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 969.743048][T17512] ? mutex_init_lockdep+0xf1/0x120 [ 969.743088][T17512] ? snd_pcm_attach_substream+0x287/0xd20 [ 969.743121][T17512] snd_pcm_open_substream+0x942/0x1850 [ 969.743151][T17512] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 969.743179][T17512] ? snd_pcm_oss_open+0x5e5/0x1390 [ 969.743220][T17512] snd_pcm_oss_open+0x735/0x1390 [ 969.743266][T17512] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 969.743304][T17512] ? __lock_acquire+0x49f/0x1a40 [ 969.743341][T17512] ? __pfx_default_wake_function+0x10/0x10 [ 969.743377][T17512] ? do_raw_spin_lock+0x128/0x260 [ 969.743404][T17512] ? soundcore_open+0x231/0x5a0 [ 969.743438][T17512] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 969.743475][T17512] soundcore_open+0x2e3/0x5a0 [ 969.743513][T17512] ? __pfx_soundcore_open+0x10/0x10 [ 969.743545][T17512] chrdev_open+0x234/0x6a0 [ 969.743578][T17512] ? __pfx_apparmor_file_open+0x10/0x10 [ 969.743604][T17512] ? __pfx_chrdev_open+0x10/0x10 [ 969.743645][T17512] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 969.743678][T17512] do_dentry_open+0x6ab/0x14d0 [ 969.743738][T17512] ? __pfx_chrdev_open+0x10/0x10 [ 969.743784][T17512] vfs_open+0x82/0x3f0 [ 969.743815][T17512] path_openat+0x2873/0x4280 [ 969.743866][T17512] ? __pfx_path_openat+0x10/0x10 [ 969.743913][T17512] do_file_open+0x20e/0x430 [ 969.743955][T17512] ? __pfx_do_file_open+0x10/0x10 [ 969.744021][T17512] ? alloc_fd+0x471/0x7a0 [ 969.744077][T17512] ? do_getname+0x191/0x390 [ 969.744107][T17512] do_sys_openat2+0x10f/0x1e0 [ 969.744137][T17512] ? __pfx_do_sys_openat2+0x10/0x10 [ 969.744170][T17512] ? __fget_files+0x21f/0x3d0 [ 969.744212][T17512] __x64_sys_openat+0x12d/0x210 [ 969.744256][T17512] ? __pfx___x64_sys_openat+0x10/0x10 [ 969.744289][T17512] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 969.744330][T17512] ? syscall_user_dispatch+0x76/0x130 [ 969.744359][T17512] do_syscall_64+0x115/0x840 [ 969.744381][T17512] ? clear_bhb_loop+0x40/0x90 [ 969.744426][T17512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.744453][T17512] RIP: 0033:0x7f63e8b9de59 [ 969.744473][T17512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 969.744498][T17512] RSP: 002b:00007f63e9ac7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 969.744524][T17512] RAX: ffffffffffffffda RBX: 00007f63e8e26090 RCX: 00007f63e8b9de59 [ 969.744542][T17512] RDX: 0000000000020b42 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 969.744558][T17512] RBP: 00007f63e8c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 969.744574][T17512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 969.744589][T17512] R13: 00007f63e8e26128 R14: 00007f63e8e26090 R15: 00007ffd60763f08 [ 969.744620][T17512] [ 970.583930][T17526] FAULT_INJECTION: forcing a failure. [ 970.583930][T17526] name failslab, interval 1, probability 0, space 0, times 0 [ 970.614717][T17526] CPU: 0 UID: 0 PID: 17526 Comm: syz.7.2220 Tainted: G L syzkaller #0 PREEMPT(full) [ 970.614758][T17526] Tainted: [L]=SOFTLOCKUP [ 970.614767][T17526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 970.614783][T17526] Call Trace: [ 970.614791][T17526] [ 970.614801][T17526] dump_stack_lvl+0x100/0x190 [ 970.614833][T17526] should_fail_ex.cold+0x5/0xa [ 970.614860][T17526] should_failslab+0xc2/0x120 [ 970.614892][T17526] kmem_cache_alloc_noprof+0x91/0x6a0 [ 970.614920][T17526] ? stack_trace_save+0x8e/0xc0 [ 970.614953][T17526] ? alloc_empty_file+0x5b/0x1c0 [ 970.614987][T17526] alloc_empty_file+0x5b/0x1c0 [ 970.615023][T17526] path_openat+0xe7/0x4280 [ 970.615061][T17526] ? __kasan_slab_alloc+0x89/0x90 [ 970.615091][T17526] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 970.615123][T17526] ? do_getname+0x35/0x390 [ 970.615149][T17526] ? do_sys_openat2+0xc7/0x1e0 [ 970.615178][T17526] ? __x64_sys_openat+0x12d/0x210 [ 970.615206][T17526] ? do_syscall_64+0x115/0x840 [ 970.615228][T17526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.615262][T17526] ? __pfx_path_openat+0x10/0x10 [ 970.615310][T17526] do_file_open+0x20e/0x430 [ 970.615352][T17526] ? __pfx_do_file_open+0x10/0x10 [ 970.615411][T17526] ? alloc_fd+0x471/0x7a0 [ 970.615451][T17526] ? do_getname+0x191/0x390 [ 970.615482][T17526] do_sys_openat2+0x10f/0x1e0 [ 970.615512][T17526] ? __pfx_do_sys_openat2+0x10/0x10 [ 970.615544][T17526] ? fdget+0x18b/0x210 [ 970.615586][T17526] __x64_sys_openat+0x12d/0x210 [ 970.615620][T17526] ? __pfx___x64_sys_openat+0x10/0x10 [ 970.615661][T17526] do_syscall_64+0x115/0x840 [ 970.615683][T17526] ? clear_bhb_loop+0x40/0x90 [ 970.615712][T17526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.615737][T17526] RIP: 0033:0x7f63e8b9de59 [ 970.615757][T17526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 970.615782][T17526] RSP: 002b:00007f63e9ae8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 970.615807][T17526] RAX: ffffffffffffffda RBX: 00007f63e8e25fa0 RCX: 00007f63e8b9de59 [ 970.615823][T17526] RDX: 0000000000088000 RSI: 0000200000001a00 RDI: ffffffffffffff9c [ 970.615839][T17526] RBP: 00007f63e8c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 970.615854][T17526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 970.615869][T17526] R13: 00007f63e8e26038 R14: 00007f63e8e25fa0 R15: 00007ffd60763f08 [ 970.615899][T17526] [ 971.135539][T17209] Bluetooth: hci7: command tx timeout [ 971.291247][T11795] bridge_slave_1: left allmulticast mode [ 971.318731][T11795] bridge_slave_1: left promiscuous mode [ 971.348440][T11795] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.419969][T11795] bridge_slave_0: left allmulticast mode [ 971.434696][T11795] bridge_slave_0: left promiscuous mode [ 971.450129][T11795] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.247500][T11795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 972.279373][T11795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 972.325424][T11795] bond0 (unregistering): Released all slaves [ 972.706818][T11795] HfR: left promiscuous mode [ 972.847014][ T5296] 8021q: adding VLAN 0 to HW filter on device eth5 [ 973.209002][T11188] Bluetooth: hci7: command tx timeout [ 973.316332][T17460] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.377600][T17460] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.405609][T17460] bridge_slave_0: entered allmulticast mode [ 973.426846][T17460] bridge_slave_0: entered promiscuous mode [ 973.560133][T17460] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.614501][T17460] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.664495][T17460] bridge_slave_1: entered allmulticast mode [ 973.687063][ T32] INFO: task syz.4.1865:15774 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 973.716388][ T32] Tainted: G L syzkaller #0 [ 973.755231][T17460] bridge_slave_1: entered promiscuous mode [ 973.775151][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 973.839109][ T32] task:syz.4.1865 state:D stack:27560 pid:15774 tgid:15772 ppid:12328 task_flags:0x400140 flags:0x00080002 [ 973.911929][ T32] Call Trace: [ 973.949711][ T32] [ 973.969021][ T32] __schedule+0x125c/0x6730 [ 973.995241][ T32] ? do_raw_spin_lock+0x128/0x260 [ 974.030859][ T32] ? __pfx___schedule+0x10/0x10 [ 974.064652][ T32] ? find_held_lock+0x2b/0x80 [ 974.096421][ T32] ? schedule+0x225/0x2c0 [ 974.123986][ T32] schedule+0xdd/0x2c0 [ 974.148844][ T32] schedule_preempt_disabled+0x13/0x30 [ 974.178648][ T32] __mutex_lock+0xccc/0x1bd0 [ 974.200644][ T32] ? nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 974.232042][ T32] ? __lock_acquire+0x49f/0x1a40 [ 974.267633][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 974.293037][ T32] ? net_generic+0xea/0x2a0 [ 974.314797][ T32] ? net_generic+0xea/0x2a0 [ 974.353537][ T32] ? nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 974.389089][ T32] nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 974.417257][ T32] genl_family_rcv_msg_doit+0x214/0x300 [ 974.447386][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 974.490277][ T32] ? genl_get_cmd+0x3e7/0x760 [ 974.524251][ T32] ? bpf_lsm_capable+0x9/0x10 [ 974.550895][ T32] ? security_capable+0x80/0x260 [ 974.582616][ T32] genl_rcv_msg+0x560/0x800 [ 974.610098][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 974.634352][ T32] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 974.666396][ T32] netlink_rcv_skb+0x159/0x420 [ 974.691942][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 974.717844][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 974.742963][ T32] ? netlink_deliver_tap+0x1ae/0xcc0 [ 974.774995][ T32] genl_rcv+0x28/0x40 [ 974.794805][ T32] netlink_unicast+0x585/0x850 [ 974.818626][ T32] ? __pfx_netlink_unicast+0x10/0x10 [ 974.843036][ T32] netlink_sendmsg+0x8b0/0xda0 [ 974.874125][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 974.902859][ T32] ? apparmor_socket_sendmsg+0x15b/0x270 [ 974.934371][ T32] ____sys_sendmsg+0xa4d/0xbe0 [ 974.962576][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 974.985579][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 975.051707][ T32] ? plist_check_list+0x1b8/0x280 [ 975.103519][ T32] ? plist_del+0x308/0x510 [ 975.154605][ T32] ___sys_sendmsg+0x190/0x1e0 [ 975.201215][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 975.252220][ T32] ? __lock_acquire+0x49f/0x1a40 [ 975.279341][T11188] Bluetooth: hci7: command tx timeout [ 975.288648][ T32] ? futex_wake+0x220/0x5e0 [ 975.317899][ T32] __sys_sendmsg+0x160/0x210 [ 975.337043][ T32] ? __pfx___sys_sendmsg+0x10/0x10 [ 975.369473][ T32] do_syscall_64+0x115/0x840 [ 975.397974][ T32] ? clear_bhb_loop+0x40/0x90 [ 975.432279][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.455404][ T32] RIP: 0033:0x7f378239de59 [ 975.481755][ T32] RSP: 002b:00007f37831d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 975.528291][ T32] RAX: ffffffffffffffda RBX: 00007f3782626090 RCX: 00007f378239de59 [ 975.563168][ T32] RDX: 0000000000040010 RSI: 0000200000000000 RDI: 0000000000000004 [ 975.593529][ T32] RBP: 00007f3782433e6f R08: 0000000000000000 R09: 0000000000000000 [ 975.631569][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 975.672188][ T32] R13: 00007f3782626128 R14: 00007f3782626090 R15: 00007ffe0ba94ac8 [ 975.690375][ T32] [ 975.711442][ T32] [ 975.711442][ T32] Showing all locks held in the system: [ 975.857232][ T32] 1 lock held by khungtaskd/32: [ 975.896191][ T32] #0: ffffffff8ebe5f80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 975.961260][ T32] 2 locks held by syz-executor/5636: [ 975.995145][ T5296] 8021q: adding VLAN 0 to HW filter on device eth6 [ 976.007129][ T32] #0: ffff88802af480d8 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 976.064357][ T32] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 976.118569][ T32] 2 locks held by getty/11543: [ 976.141020][ T32] #0: ffff88802624e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 976.209170][ T32] #1: ffffc900041332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 976.253070][ T32] 4 locks held by kworker/u10:27/11795: [ 976.286267][ T32] #0: ffff88801caf6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 976.358262][ T32] #1: ffffc90003fefd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 976.390458][ T32] #2: ffffffff90a86008 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 976.448318][ T32] #3: ffffffff8ebf1a28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 976.497737][ T32] 2 locks held by syz.2.1829/15601: [ 976.524504][ T32] #0: ffffffff90b4d808 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 976.582451][ T32] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 976.625187][ T32] 2 locks held by syz.4.1865/15774: [ 976.645637][ T32] #0: ffffffff90b4d808 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 976.675543][ T32] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 976.713079][ T32] 3 locks held by kworker/0:0/15995: [ 976.732497][ T32] #0: ffff88801bc07140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 976.768200][ T32] #1: ffffc9000522fd08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 976.810841][ T32] #2: ffffffff8ebf1a28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 976.846893][ T32] 1 lock held by syz.5.2224/17558: [ 976.863158][ T32] #0: ffff88807d16cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 976.910377][ T32] 1 lock held by syz.7.2225/17562: [ 976.928722][ T32] 1 lock held by syz.6.2226/17564: [ 976.949639][ T32] #0: ffffffff8ebf18f8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 976.989531][ T32] 1 lock held by sed/17591: [ 977.014607][ T32] [ 977.020618][ T32] ============================================= [ 977.020618][ T32] [ 977.157099][ T32] NMI backtrace for cpu 0 [ 977.157123][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 977.157156][ T32] Tainted: [L]=SOFTLOCKUP [ 977.157165][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 977.157179][ T32] Call Trace: [ 977.157187][ T32] [ 977.157206][ T32] dump_stack_lvl+0x100/0x190 [ 977.157239][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 977.157268][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 977.157307][ T32] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 977.157344][ T32] sys_info+0x141/0x190 [ 977.157371][ T32] watchdog+0xcb1/0x1030 [ 977.157410][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 977.157460][ T32] ? __pfx_watchdog+0x10/0x10 [ 977.157493][ T32] ? __kthread_parkme+0x18c/0x230 [ 977.157520][ T32] ? kthread+0x13a/0x450 [ 977.157550][ T32] ? __pfx_watchdog+0x10/0x10 [ 977.157580][ T32] kthread+0x370/0x450 [ 977.157608][ T32] ? __pfx_kthread+0x10/0x10 [ 977.157639][ T32] ret_from_fork+0x72b/0xd50 [ 977.157667][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 977.157695][ T32] ? __switch_to+0x800/0x10f0 [ 977.157729][ T32] ? __switch_to_asm+0x39/0x70 [ 977.157760][ T32] ? __pfx_kthread+0x10/0x10 [ 977.157791][ T32] ret_from_fork_asm+0x1a/0x30 [ 977.157836][ T32] [ 978.155594][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 978.163139][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 978.174393][ T32] Tainted: [L]=SOFTLOCKUP [ 978.178921][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 978.189612][ T32] Call Trace: [ 978.193099][ T32] [ 978.196050][ T32] dump_stack_lvl+0x100/0x190 [ 978.200842][ T32] vpanic+0x552/0x970 [ 978.205116][ T32] ? __pfx_vpanic+0x10/0x10 [ 978.210386][ T32] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 978.217001][ T32] panic+0xd1/0xe0 [ 978.221143][ T32] ? __pfx_panic+0x10/0x10 [ 978.225885][ T32] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 978.232291][ T32] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 978.239006][ T32] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 978.245237][ T32] ? watchdog.cold+0x1ec/0x234 [ 978.250638][ T32] ? watchdog+0xcc1/0x1030 [ 978.255106][ T32] watchdog.cold+0x1fd/0x234 [ 978.260932][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 978.268089][ T32] ? __pfx_watchdog+0x10/0x10 [ 978.273267][ T32] ? __kthread_parkme+0x18c/0x230 [ 978.278969][ T32] ? kthread+0x13a/0x450 [ 978.283805][ T32] ? __pfx_watchdog+0x10/0x10 [ 978.288976][ T32] kthread+0x370/0x450 [ 978.293168][ T32] ? __pfx_kthread+0x10/0x10 [ 978.298583][ T32] ret_from_fork+0x72b/0xd50 [ 978.303833][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 978.309256][ T32] ? __switch_to+0x800/0x10f0 [ 978.314784][ T32] ? __switch_to_asm+0x39/0x70 [ 978.319967][ T32] ? __pfx_kthread+0x10/0x10 [ 978.325541][ T32] ret_from_fork_asm+0x1a/0x30 [ 978.331186][ T32] [ 978.334486][ T32] Kernel Offset: disabled [ 978.339757][ T32] Rebooting in 86400 seconds..