last executing test programs: 13m28.690855203s ago: executing program 32 (id=2437): fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) io_uring_setup$auto(0x7, 0x0) (async) close_range$auto(0x2, 0x8000, 0x0) (async, rerun: 32) socket(0x2, 0x1, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0182, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/prev\x00', 0x101002, 0x0) (rerun: 64) write$auto_proc_pid_attr_operations_base(r1, &(0x7f0000000200)="a597d9ce6359203d", 0x8) r2 = openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) (async, rerun: 64) r3 = open(&(0x7f0000000000)='./file0\x00', 0x101800, 0xbf) (rerun: 64) fcntl$auto_F_SETPIPE_SZ(r3, 0x407, 0x6) pwrite64$auto(r2, 0x0, 0x4e, 0x3) (async, rerun: 64) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, 0x0, 0x20040894) (async, rerun: 64) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) (rerun: 64) close_range$auto(0x2, 0x8, 0x0) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xa0202, 0x0) (async, rerun: 32) socket(0x2, 0x801, 0x106) (async, rerun: 32) unshare$auto(0x40000080) (async, rerun: 64) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) (async, rerun: 64) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0) 11m12.923205346s ago: executing program 33 (id=3075): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) ioctl$auto_TUNSETVNETLE2(r0, 0x400454dc, &(0x7f0000000040)=0x2) write$auto(0x3, 0x0, 0xfdf3) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x1, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x5, 0x4020008, 0x6800000000, 0xeb1, 0x401, 0x8000) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0) futex$auto(0x0, 0x3, 0x8, 0x0, 0x0, 0xfffffffa) process_mrelease$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x88042, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r2, 0x200, 0x70bd28, 0x25dfdbfb}, 0x14}}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/time\x00') r3 = gettid() rt_sigqueueinfo$auto(r3, 0xe, &(0x7f0000000000)={@siginfo_0_0={0x76bb, 0x3, 0x4, @_sigfault={0x0}}}) 7m25.560258019s ago: executing program 34 (id=3996): mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x40006, 0xe2, 0x20009b72, 0x7, 0x28000) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, 0x0, 0x8080, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20401, 0x0) (async) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20401, 0x0) ioctl$auto(r0, 0x40044620, 0xffffffffffffffff) mmap$auto(0x8, 0x4000000000000000, 0x4000000000dc, 0x40eb1, 0x401, 0x10300000000000) (async) mmap$auto(0x8, 0x4000000000000000, 0x4000000000dc, 0x40eb1, 0x401, 0x10300000000000) mmap$auto(0x0, 0x400008, 0x803c, 0x9b72, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x400008, 0x803c, 0x9b72, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0x9000643a, 0xc35) connect$auto(0x3, 0x0, 0x55) 5m41.082216765s ago: executing program 2 (id=4423): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) (async) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x169780, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r0, 0x4c08, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001600)={0x2c, r2, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_FREQUENCIES={0x10, 0x2c, 0x0, 0x1, [@typed={0x8, 0x14b, 0x0, 0x0, @fd}, @nested={0x4, 0xa2}]}]}, 0x2c}}, 0x4000000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/iosched/write_expire\x00', 0x0, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000040)="1b8ba0f3e69d7f8b999ccb5db9a29701000080d3330d4d31b2602c300c131aaaf876e59553d411b2639a5e0939e99883a670e72a4ba4147367df4e336482794d560f4b53d90cb78dd1f3cbccf7869d84f25bb7ff2deb469c824af6338c3c510778e076f39a7c286efb40c3b8abe773dd64060b6c", 0xffffffffffffff7d) clone$auto(0x8, 0x7, 0x0, 0xffffffffffffffff, 0x80000001) (async, rerun: 64) getpriority$auto_PRIO_PGRP(0x1, 0x0) (rerun: 64) 5m38.264197245s ago: executing program 2 (id=4432): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_SIOCSIFHWADDR2(0xffffffffffffffff, 0x8924, &(0x7f0000000080)="379526ffd01e2ca09c4fef28ec5e189872a365af998b5910174081ae52641a91fc7144ae68beae74f5f7f6b3ae62c4e196462c065d42c7d78a45223d28002a52a2024c00dbe853f2d4826f117265496f9d8296983c4695c168e620ccad45b2427436133494bd21f1fd5a0f0997fe2913fea69d3960476d16e0") mmap$auto(0x0, 0x40, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0x2, 0x801, 0x106) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_SG_SET_TIMEOUT2(r0, 0x2201, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) listen$auto(0x3, 0x81) 5m33.34692762s ago: executing program 2 (id=4442): socket(0x18, 0x5, 0x2) setitimer$auto(0x1, &(0x7f0000000000)={{0x7fe, 0x7f}, {0x800100004, 0x1}}, 0x0) connect$auto(0x3, &(0x7f00000000c0), 0x52) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x402e00, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f00000001c0)) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mq_getsetattr$auto(r1, &(0x7f0000000180)={0x80000000000008, 0x20000000009, 0x75, 0x7ffffffc}, &(0x7f00000001c0)={0xc, 0x0, 0x6, 0x107}) socket(0x11, 0x3, 0x4007) socket(0x2, 0x1, 0x0) mmap$auto(0xfffffffffffffffd, 0x9, 0xdf, 0x88000010, 0x2, 0x8000) recvfrom$auto(0xffffffffffffffff, 0xfffffffffffffffc, 0x5, 0x99, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x58) 5m28.901137455s ago: executing program 2 (id=4454): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_SIOCSIFHWADDR2(0xffffffffffffffff, 0x8924, &(0x7f0000000080)="379526ffd01e2ca09c4fef28ec5e189872a365af998b5910174081ae52641a91fc7144ae68beae74f5f7f6b3ae62c4e196462c065d42c7d78a45223d28002a52a2024c00dbe853f2d4826f117265496f9d8296983c4695c168e620ccad45b2427436133494bd21f1fd5a0f0997fe2913fea69d3960476d16e0") mmap$auto(0x0, 0x40, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) listen$auto(0x3, 0x81) 5m26.641534345s ago: executing program 2 (id=4462): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x1, 0x106) setsockopt$auto(r0, 0x6, 0xd, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x4) bind$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x3, @multicast1}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) unshare$auto(0x40000080) r3 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x8000) sendmsg$auto_NL80211_CMD_NEW_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x48844) r4 = ioctl$auto_dma_heap_fops_dma_heap(r2, 0x3, &(0x7f00000002c0)="87793416217101fd849a88609e914a4c71") sendmsg$auto_NL80211_CMD_START_NAN(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) 5m20.297598336s ago: executing program 2 (id=4475): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r1 = socket(0x2, 0x80002, 0x73) setsockopt$auto(r1, 0x0, 0x2, 0x0, 0x0) prctl$auto(0x1000000003b, 0x4, 0x0, 0x80005, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r2 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x14, r2, 0x1, 0x70bd31, 0x25dfdbfd}, 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r5, 0x1261, 0x0) msgctl$auto_MSG_INFO(0x4b, 0xc, &(0x7f00000000c0)={{0x1, 0xee01, 0xee00, 0x80, 0xc, 0x7, 0x38}, 0x0, 0x0, 0x40, 0x56, 0x5, 0xf8, 0x8, 0x1, 0x0, 0x5, @inferred=0x0}) prctl$auto(0x1, 0x8, r6, 0x3a, 0x1) 5m8.573584232s ago: executing program 6 (id=4490): close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x8000000000000, 0x400008, 0xdf, 0x9b7f, 0x2, 0x8001) (async) r0 = io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x1) connect$auto(r0, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x2711, @local}, 0x5) (async) close_range$auto(0x0, 0xffffeffe, 0x2) (async) r1 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0xa0900, 0x0) r2 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/0/msr\x00', 0xf82, 0x0) (async) pipe$auto(0x0) (async) unshare$auto(0x40000080) (async) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) (async) sendmmsg$auto(r1, &(0x7f00000000c0)={{0x0, 0x195, &(0x7f0000000140)={0x0, 0x7}, 0x3, 0x0, 0x12000005, 0x4}, 0x8}, 0xffffffff, 0x47) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x200000000000404, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r2, 0x2) (async) r3 = socket(0x2a, 0x2, 0x6) io_uring_setup$auto(0x6, 0x0) (async) getsockname$auto(r3, 0x0, 0x0) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x5, 0x1, 0x0, 0x8004) close_range$auto(0x2, 0x8, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) mq_open$auto(0x0, 0x3ff, 0x7, 0x0) (async) mmap$auto(0x0, 0xf, 0x200000000007, 0xebe, 0x404, 0x3ff) newfstatat$auto(0xffffffffffffff9c, 0x0, 0x0, 0x5000) (async) socket$nl_generic(0x10, 0x3, 0x10) 5m4.221802746s ago: executing program 35 (id=4475): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r1 = socket(0x2, 0x80002, 0x73) setsockopt$auto(r1, 0x0, 0x2, 0x0, 0x0) prctl$auto(0x1000000003b, 0x4, 0x0, 0x80005, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r2 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x14, r2, 0x1, 0x70bd31, 0x25dfdbfd}, 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r5, 0x1261, 0x0) msgctl$auto_MSG_INFO(0x4b, 0xc, &(0x7f00000000c0)={{0x1, 0xee01, 0xee00, 0x80, 0xc, 0x7, 0x38}, 0x0, 0x0, 0x40, 0x56, 0x5, 0xf8, 0x8, 0x1, 0x0, 0x5, @inferred=0x0}) prctl$auto(0x1, 0x8, r6, 0x3a, 0x1) 5m3.950528619s ago: executing program 1 (id=4493): unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2c, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r0 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8953, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x480, 0x0) mmap$auto(0x0, 0x400008, 0x4, 0x40009b72, 0x2, 0x8000) io_uring_setup$auto(0x89, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) prctl$auto_SECCOMP_MODE_STRICT(0xf, 0x1, 0x0, 0x9, 0x2) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x1, 0x6, 0x1, 0x89, 0x7181, 0x3ffde, 0x4, 0x10, 0x9, 0x4, 0x80003, 0x1, 0x11ffffffffffd, 0x85, 0xfffffffffffffffb, 0x1, 0x50007, 0x2, 0xffffffffffffffff, 0x0, 0x80000001, 0x2000001, 0x202, 0x9, 0x10000, 0x0, 0x0, 0x2, 0x2000, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x3, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x400000004, 0x9, 0x2000000800000000, 0x3, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x4, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000, 0x800000009, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x2000000]}, 0x2, 0xd) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy1/aql_txq_limit\x00', 0x822, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/id/vendor\x00', 0x2000, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/mpls/conf/caif0/input\x00', 0x82, 0x0) ioctl$auto_USB_RAW_IOCTL_CONFIGURE(0xffffffffffffffff, 0x5509, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card1\x00', 0x10000, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x4611, 0x0) write$auto(0x3, 0x0, 0x7fffffff) unshare$auto(0x40000080) mmap$auto(0x0, 0x0, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) pread64$auto(r2, 0x0, 0x20000000001, 0x7fff) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x80180, 0x0) 5m3.950007039s ago: executing program 6 (id=4494): close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x3c8082, 0x0) r0 = openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/options/trace_printk_dest\x00', 0x121082, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0x5452, &(0x7f0000000080)={0x80, 0xbed0}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/updelay\x00', 0x8242, 0x0) mmap$auto(0x0, 0x3, 0xfff, 0x11, r0, 0x0) read$auto(r2, 0x0, 0xa) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0xa44, r3, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xee, 0x1a, "4b158c6b3c465d4761cce597de09f002b0f15b8cf92eec9d4d2b87975044b7c896b9ac6ebca00d72857a962f9c3f2293860ee724a361280acd202ce8b96bdd4b020723d6cc2d1df361b0d276a4b703abb26804db0ce2f56a57aa10565754fe123596a908ed72698c280caeb55b53ed6796333decc8ddb0717ea7cfffc800a7ffea1baa41244e6e912c05026aa6afbffa36d12d38d910dfb66665fe1d05e183e1424fb31c5e70491fcec1b8d25a495a9592a78fff5d30b187d65c45eee626f139a1547e322d6754b3fe4549613d5fef8f99eb61e1c0370f0452c4ed5fc4d9c8079bd8ad73801d0f1a7e3c"}, @NL80211_ATTR_FRAME={0x30f, 0x33, "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"}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x200}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x100}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x80}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_PMKID={0xf9, 0x55, "2967697f8e2dbaf1e53e53018b50095c2ff805419e8371a34d436139c300140222c8ef07a7fbce3b92fa2af99133f61cfd4bac8c571b1d4120733a5cbdd06d80c5913079f5fadb06aca1a5b8ccb754fe706a297c043669c9a9a3b72be8c20a158250a84d10bfffc429c6337e09b8f924a4532ab370481103d354026b05a025618eacaaa833701b3fdede475d1382554cb13641be722bd74994c554dbde213b5867cb849a597229fe5da73790061a098fc6bb200b3724e6d5a66aa9634f1993c0ffcf9be3a4ded9a6197a8b7edc7dfa72cd600312be18ba95b75927893e34d545666348cb796af39bd8be2202a56f857b6b5b05d64f"}, @NL80211_ATTR_BEACON_HEAD={0x50c, 0xe, "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"}]}, 0xa44}, 0x1, 0x0, 0x0, 0x40}, 0x40485) write$auto(0x3, 0x0, 0xfdef) 5m3.772100728s ago: executing program 6 (id=4495): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r1, @ANYBLOB="090027bd7000fbdbdf250200000008000800", @ANYRES32=r3, @ANYBLOB="0c0001800800010002"], 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) 5m3.500814788s ago: executing program 6 (id=4496): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptyu7\x00', 0x103040, 0x0) ioctl$auto(0x3, 0x540f, 0xffffffffffffffff) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0xffffffffffffff80, 0x20000a00004, 0x400002, 0x15, 0x602, 0x300000000000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x96141, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80100, 0x0) socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00'}) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000002c0)=""/133, 0x85) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, 0x0, 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/ip_vs_conn\x00', 0x121040, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/node/node0/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0xe8202, 0x0) sendfile$auto(r2, r2, 0x0, 0xcd) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) lseek$auto(r3, 0x8000000000000000, 0x2) ioperm$auto(0x6, 0x3, 0x148) 5m2.418962872s ago: executing program 5 (id=4499): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) getsockopt$auto_SO_RCVTIMEO_OLD(r0, 0xffffffff, 0x14, &(0x7f00000003c0)='\x00\x00+\xa2\xc7\x92\x00\x00\x00\x00\x00\x00\x03\x90\xf9\xe8\x11\x80\a :w\xac[\xbb\xac\xe3\xe0\xff8g:\x04\x00\x00\x00\x00\x00\x00\x00=r\x03\x95\x87\xbaM\xd80=\x81\x8ez\xab\xc3^\xb0\x03Ijj\xc4\xf9\xe6\x84P\x15q\xaa\xc8\x03\xba\x8c\xe3\xc3r\xb8\x1b\x98\xe8\xbc\x11.\xd9A\xb3P\xfa\x04\x95\xfc*\v\xb8\xc5\x16Z\xb7\x82\xbc\x96o\xd2G\xf8\x0f`\xa1\x1f\xc6\xd6\xc5\xdcM\x17\x11\xd2\x12\x988\xa3`\xad[UI\xf7\xc7\xcc\x13XH\xc1\x02\x84$\x97;\xebM`\x7f\xe4\x8dbe\xd8\x901\x8e\'\x10\xf6`^\xd28Xk\x03\x8d\b\xbd\xe2d\\\x11w(\xc7D!,6\x01\x00\x9f\x8bxg\xe2\xfc~\x006\x17\x9b9?,\xd8\n\x82r\x12\xa9\xfd@\x90&\xd3l\xa7[\x9bx\xf7\xb9[m\x9a\xee\"\x9e\x81|\xa4\x8f5\xea\t\x02Axu\xe9io`\x81\xb5\x89\x01\xa0\xa8~]\xd8]\x14}\x8c\xacRc\r\xb7.\x7f\xb3\x85\xff\xf5\xb0\x11/\x80{\xab)\x05\xb3HHU\xcb\x00', 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0) write$auto(0x3, 0x0, 0x7fffffff) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c1) read$auto(0x3, 0x0, 0x80) mmap$auto(0x100, 0x2, 0x4, 0x200009b71, 0x2, 0x9) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x20020000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x2c, 0x3, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x7, 0x28000) socketpair$auto(0x200001e, 0xffffffff, 0x0, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x6) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0x7, 0xd, 0x1ff, 0x948d, 0x5, 0x6, 0x3, 0x8006, 0x65, 0x8000001f, 0x1000, 0x100000000006d3e, 0x9, 0x1, 0x8]}, 0x0) 5m2.094505474s ago: executing program 1 (id=4500): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x80) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000280), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'geneve0\x00'}) r4 = io_uring_setup$auto(0x0, &(0x7f0000000180)={0x10000, 0x5, 0xc, 0x8, 0xfff, 0x9d, r0, [0x9, 0x7, 0x6], {0x4, 0x7, 0x2, 0x8, 0x8000, 0x2, 0x8000, 0x4, 0x3}, {0x7fff, 0x9, 0xc, 0xb550, 0x64691b5f, 0x2, 0x8, 0x10000, 0x7}}) r5 = prctl$auto_PR_SET_SECCOMP(0x16, 0x1, 0x87c, 0x400, 0x6) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/system/node/node1/cpumap\x00', 0x48000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000080)=""/247, 0xf7) epoll_ctl$auto(r5, 0xe5, r4, &(0x7f0000000300)={0x0, 0x7}) futex$auto(&(0x7f0000000200)=0x5, 0x0, 0x4, &(0x7f0000000240)={0xffffffff, 0x10000}, &(0x7f00000002c0)=0x1, 0x400) sendmsg$auto_NET_SHAPER_CMD_CAP_GET2(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf250500000008000100", @ANYRES32=r3, @ANYBLOB="6f020200000056279abbfcb9fba35bf09c96a2abf942cfbf624f0aa608a3d5ec7c4f4059f6a9e4f7fee455e2f1750607f99b56fd42146188d921e75242f2f1fe613abc909d08b0860767c1acd63cd59681ed107f7b9f95ca30349cfd0bc0a749256efe5594868f8dc50b86543227aaeb10fd263e8b5a8a5eebc27857fe008161871def559507820f040a946f948385d1b1bde1f02064933e8e58db4e5a57"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) 5m1.791847341s ago: executing program 6 (id=4501): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x110c230000, 0x1, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x1006, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x0, 0x800e2, 0xeb1, 0x401, 0x40000008003) mmap$auto(0xfffffffffffffff9, 0x2000a, 0x170c, 0xeb2, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x20342, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x5) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x202, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0x1010001, 0x100000003) mmap$auto(0xfffffffffffffffb, 0x0, 0xffffffff, 0x13, 0xffffffffffffffff, 0x3) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/binderfs/binder0\x00', 0x0, 0x0) ioctl$auto_BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x1d, 0x1, 0x7fff) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)="652ab3631e3cea6a6c0838af264484beb327a04fa89964aa89e5fa050515f6c6", 0x1000}, 0x6) 5m0.763049437s ago: executing program 1 (id=4502): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async, rerun: 32) close_range$auto(0x2, 0x8000, 0x0) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) close_range$auto(0x2, 0x8000, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x283f4, 0x0) (async, rerun: 32) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) (async, rerun: 32) clone$auto(0x1, 0x40000000003e, 0x0, 0x0, 0x40000009) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2) getdents64$auto(r1, &(0x7f0000000f40)={0x309, 0x7, 0xffff, 0x7}, 0x200c8) r2 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x401, r2, @relative_id=0x13, 0xe600}, 0xf) (async) semctl$auto_GETZCNT(0xc, 0x5a3, 0xf, 0xb) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x8) (async) bpf$auto(0x4, &(0x7f0000000500)=@bpf_attr_11={0x5, 0x200ffffffff, 0x9, 0x5, 0xf870e9f, 0x3ff, 0x8}, 0x9) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/dfscache\x00', 0x101a41, 0x0) 5m0.575215926s ago: executing program 6 (id=4503): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) (async) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/profile\x00', 0x40802, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) read$auto(r0, 0x0, 0xb4d3) (async, rerun: 64) socket(0xa, 0x1, 0x84) (async, rerun: 64) timer_settime$auto(0x2, 0x1, &(0x7f0000000080)={{0x2, 0x595}, {0x4, 0x1ff}}, &(0x7f00000000c0)={{0x4, 0x5}, {0x4, 0xf7b}}) (async) setsockopt$auto(0x3, 0x10000000084, 0x84, 0x0, 0x0) (async, rerun: 32) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) (rerun: 32) sendfile$auto(r1, r1, 0x0, 0x7ffffffc) (async) ioctl$auto(0x3, 0x5420, 0x38) (async) ioctl$auto(0x3, 0x402c542d, 0xffffffffffffffff) (async) ioctl$auto(0x3, 0x402c542b, 0x38) (async) pwrite64$auto(0xc8, &(0x7f0000000840)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde\x02\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x005\v\x19\x86%\xf5\x10AK\xbb\xed\xd9F\x91\xf1\x1c\\!\xbf\xf2\x95^\xcfV&m\xc5\xddw\x8bi\xf0\xdb=\x8c\t\xe9\xa1\xc9\x9dm\x05z\x17\f&\x83\xcc\xbeI\x8e\xb7\x14\xfb,-\x130\x9b\xd4\xf2Sz\x9c\xa2A\xc5X\xccB\xcb\x17\xc2\x1d\xa8\xc4\xb8\xcb8{\x8f\xde\xe1\x98\xdc\vq\xc8\x16IsB\bmTH\xcd\x03\x89j\xac\x85f\xf15\xe3\xf2x\xe4\xad\xbb\xc3d\xf0\xc4q\x88\xc9r2:QR\xf2\xc7\xdaz\xf4\xf6\xd5\x8c\xad\xb5\xee\xd9X\xf0\xc7`\"\xfbUN\xb0U\\Z\x92\x831\x1f\xbc\x90\xe8\xa0\x83L-\x1c\x11\xbd\xdc\xeb\x9e\x95\xee9wu\x14b)\x1d/|l\xf0\xeb\xf3\xd7\xccH\xa5\xbf\\\xe9U\x8b\a\x86s`c\xc6\xe9\xf5\xec\xe0\n\x8c4\x022\x18\xbc6\x9d\xc8?\x8bN\xa6\xd1\rU\xdb\x0erXz\x9d\xf6\x1bm\xe2nR$\n<\xcc\xe3\x1c\xa5I\xde\x12', 0xfdf2, 0x7) (async) mmap$auto(0x0, 0x400007, 0xb, 0x50, 0x2, 0x40000008000) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) (async, rerun: 32) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x2000d, 0xe2, 0x8000000000002010, 0x405, 0x8000) (async, rerun: 32) socket(0x2b, 0x1, 0x1) (rerun: 32) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xe, 0x9, 0x5, 0x14, 0x944, 0x2, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, [0x0, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) socket(0x10, 0x2, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/advisor_max_pages_to_scan\x00', 0x80001, 0x0) write$auto(r2, &(0x7f0000000000), 0x9) (async, rerun: 64) unshare$auto(0x40000080) (async, rerun: 64) settimeofday$auto(0x0, &(0x7f0000000100)={0x82, 0x4}) getsockopt$auto(0xffffffffffffffff, 0x10002, 0x2, 0x0, &(0x7f0000000040)=0x2000000) (async, rerun: 64) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/smaps_rollup\x00', 0x840, 0x0) (rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 4m59.52448693s ago: executing program 1 (id=4504): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r1, @ANYBLOB="090027bd7000fbdbdf250200000008000800", @ANYRES32=r3, @ANYBLOB="0c0001800800010002"], 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) 4m59.518175623s ago: executing program 5 (id=4511): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0x101000, 0x0) bind$auto(0x3, 0x0, 0x6a) (async) bind$auto(0x3, 0x0, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000040)={{&(0x7f0000000040), 0x7ff, 0x0, 0x9, 0x0, 0x2, 0x101}, 0x8}, 0x107, 0x20020001) r1 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x42842, 0x95) read$auto(r1, 0x0, 0x1) (async) read$auto(r1, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) (async) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0xf4, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0x0, 0x8, 0x8000) ioprio_set$auto(0x3, 0x0, 0x4b34) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/015/001\x00', 0x20a380, 0x0) ioctl$auto_USBDEVFS_DISCSIGNAL32(r3, 0x8008550e, &(0x7f0000000280)={0x0, 0x64}) socket(0x28, 0x5, 0x0) (async) socket(0x28, 0x5, 0x0) sendmsg$auto_SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x20008804) sendto$auto(0xffffffffffffffff, 0x0, 0x8000000000000000, 0x7, 0x0, 0x5) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x0, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0xf, 0x64, 0x80000020, 0x1000, 0xd, 0x9, 0x4f4, 0x8]}, 0x0) (async) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x0, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0xf, 0x64, 0x80000020, 0x1000, 0xd, 0x9, 0x4f4, 0x8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x1, 0x1, 0xbc3, 0x5, 0x100000003, 0x2a, 0x2f, 0x400000000003, 0x9, 0x2000000000000000, 0xfffffffffffffffe, 0x6, 0x7fffffff, 0x1, 0x1]}, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x1, 0x1, 0xbc3, 0x5, 0x100000003, 0x2a, 0x2f, 0x400000000003, 0x9, 0x2000000000000000, 0xfffffffffffffffe, 0x6, 0x7fffffff, 0x1, 0x1]}, 0x0) mmap$auto(0x4, 0x400007, 0xdf, 0x10, 0x2, 0x8000) (async) mmap$auto(0x4, 0x400007, 0xdf, 0x10, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) (async) setrlimit$auto(0x1000000007, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000a00), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000a00), 0xffffffffffffffff) landlock_restrict_self$auto(r0, 0x9) sendmsg$auto_NFSD_CMD_LISTENER_GET(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r5, 0x1, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc800}, 0x20004080) bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f00000001c0)=@bpf_attr_7={@btf_id=0x4, 0x100, 0xeb5, r0}, 0x2b9fe586) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0) 4m57.67363558s ago: executing program 1 (id=4505): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x2, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000200)='4', 0x1) r1 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000000214af"], 0x14}, 0x1, 0x0, 0x0, 0x20000045}, 0x24000044) write$auto(r1, &(0x7f0000000100)='\x00', 0xfffffffffffffffa) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.7/usb8/remove\x00', 0xa001, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x6, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x405b) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffffc, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB=' 6\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fcdbdf250300000004000180083601"], 0x3620}, 0x1, 0x0, 0x0, 0x20000000}, 0x200400d0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0), 0x7, 0x400a507}, 0x800}, 0xa, 0x8) write$auto_proc_mem_operations_base(r3, &(0x7f0000000400)="94c5be883ae7ee95e2bff5f990f6f7249475e8960bf6c1ee8796193bfbd249c19c9460ea0c1c18bb983b84aebb8629e8e9e25558c9bfeb22ed79fdab8065d67eec271b56d08971f043224fe7604598e2506e785c6318c1b7696b10324d1e7db02961facdf9fab2640716f07dd1", 0x6d) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffffff, &(0x7f0000000340)=""/179, 0xb3) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) acct$auto(&(0x7f0000000000)='/dev/tty\x00`Mx\x9d\xfa\xb3\x1f\xc6k\x01\x13\x9b\x15[\xf7\xaan\x1fOgo\xbb(\xcbx\x9bJ\x91*\xa5a\x02\xf3\x1b\x9d\xddy\xef\xee\xe4h\xd5\nH\x80\x8a\xd7Y\xb8\xcb\x90') sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x7}]}, 0xfffffffffffffeda}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/fail-nth\x00', 0x4c040, 0x0) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0x8031ca, 0x9) 4m57.673174378s ago: executing program 5 (id=4513): socket(0x2, 0x801, 0x106) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) write$auto(r0, 0x0, 0x81) listen$auto(0x3, 0x81) 4m57.557910781s ago: executing program 5 (id=4506): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x3a8c3, 0x0) mprotect$auto(0x4, 0x2, 0x81) mbind$auto(0x2000, 0x800000100000004, 0x100000000, 0x0, 0x1003, 0x2) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon37\x00', 0x8080, 0x0) ioctl$auto_MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000080)={0x7, 0x785}) 4m57.200691139s ago: executing program 5 (id=4507): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) (async) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec28\x00', 0x4002, 0x0) ioctl$auto_CEC_ADAP_G_CONNECTOR_INFO(r0, 0x8044610a, &(0x7f0000000040)={0x800, @raw=[0xfff, 0x6, 0x7, 0x9a, 0x8, 0x5, 0x6, 0x3, 0xfffffff7, 0x2b63fb08, 0x4, 0x8, 0x8, 0x3e6, 0xfe, 0xe3]}) (async, rerun: 32) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) (rerun: 32) fchdir$auto(r1) (async) exit$auto(0x1003) (async) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) 4m56.226218009s ago: executing program 5 (id=4508): unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2c, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r0 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8953, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x480, 0x0) mmap$auto(0x0, 0x400008, 0x4, 0x40009b72, 0x2, 0x8000) io_uring_setup$auto(0x89, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) prctl$auto_SECCOMP_MODE_STRICT(0xf, 0x1, 0x0, 0x9, 0x2) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x1, 0x6, 0x1, 0x89, 0x7181, 0x3ffde, 0x4, 0x10, 0x9, 0x4, 0x80003, 0x1, 0x11ffffffffffd, 0x85, 0xfffffffffffffffb, 0x1, 0x50007, 0x2, 0xffffffffffffffff, 0x0, 0x80000001, 0x2000001, 0x202, 0x9, 0x10000, 0x0, 0x0, 0x2, 0x2000, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x3, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x400000004, 0x9, 0x2000000800000000, 0x3, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x4, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000, 0x800000009, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x2000000]}, 0x2, 0xd) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy1/aql_txq_limit\x00', 0x822, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/id/vendor\x00', 0x2000, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/mpls/conf/caif0/input\x00', 0x82, 0x0) ioctl$auto_USB_RAW_IOCTL_CONFIGURE(0xffffffffffffffff, 0x5509, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card1\x00', 0x10000, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x4611, 0x0) write$auto(0x3, 0x0, 0x7fffffff) unshare$auto(0x40000080) mmap$auto(0x0, 0x0, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) pread64$auto(r2, 0x0, 0x20000000001, 0x7fff) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x80180, 0x0) 4m52.971767233s ago: executing program 1 (id=4509): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r1, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r2 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="6d74a8872731ebfebe935554cc5d8cfbdfb1f19401b8338684761af3f5f291460b201c4b683bcf65440092b776c7b9d76390a9038539c9f69e8479c398b4e4ac77dfdf2add147aa687e8f39ee4f560a8c9dedd62fa5360d9b543b3e974fff512f6dfd046ffb13455e22821b3b814760b9132314867b516ee6be7577db325959337a037f12d3650", @ANYRES16=r2, @ANYBLOB="010031bd7000fddbdf250c000000"], 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) madvise$auto(0x80000000, 0xffffffffffffffff, 0xfffffffd) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r5, 0x1261, 0x0) msgctl$auto_MSG_INFO(0x4b, 0xc, &(0x7f00000000c0)={{0x1, 0xee01, 0xee00, 0x80, 0xc, 0x7, 0x38}, 0x0, 0x0, 0x40, 0x56, 0x5, 0xf8, 0x8, 0x1, 0x0, 0x5, @inferred=0x0}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) poll$auto(&(0x7f0000000d40)={r1, 0x1, 0xd}, 0x5, 0x3fd) shutdown$auto(0x200000003, 0x2) prctl$auto(0x1, 0x8, r6, 0x3a, 0x1) 4m44.932020497s ago: executing program 36 (id=4503): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) (async) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/profile\x00', 0x40802, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) read$auto(r0, 0x0, 0xb4d3) (async, rerun: 64) socket(0xa, 0x1, 0x84) (async, rerun: 64) timer_settime$auto(0x2, 0x1, &(0x7f0000000080)={{0x2, 0x595}, {0x4, 0x1ff}}, &(0x7f00000000c0)={{0x4, 0x5}, {0x4, 0xf7b}}) (async) setsockopt$auto(0x3, 0x10000000084, 0x84, 0x0, 0x0) (async, rerun: 32) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) (rerun: 32) sendfile$auto(r1, r1, 0x0, 0x7ffffffc) (async) ioctl$auto(0x3, 0x5420, 0x38) (async) ioctl$auto(0x3, 0x402c542d, 0xffffffffffffffff) (async) ioctl$auto(0x3, 0x402c542b, 0x38) (async) pwrite64$auto(0xc8, &(0x7f0000000840)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde\x02\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x005\v\x19\x86%\xf5\x10AK\xbb\xed\xd9F\x91\xf1\x1c\\!\xbf\xf2\x95^\xcfV&m\xc5\xddw\x8bi\xf0\xdb=\x8c\t\xe9\xa1\xc9\x9dm\x05z\x17\f&\x83\xcc\xbeI\x8e\xb7\x14\xfb,-\x130\x9b\xd4\xf2Sz\x9c\xa2A\xc5X\xccB\xcb\x17\xc2\x1d\xa8\xc4\xb8\xcb8{\x8f\xde\xe1\x98\xdc\vq\xc8\x16IsB\bmTH\xcd\x03\x89j\xac\x85f\xf15\xe3\xf2x\xe4\xad\xbb\xc3d\xf0\xc4q\x88\xc9r2:QR\xf2\xc7\xdaz\xf4\xf6\xd5\x8c\xad\xb5\xee\xd9X\xf0\xc7`\"\xfbUN\xb0U\\Z\x92\x831\x1f\xbc\x90\xe8\xa0\x83L-\x1c\x11\xbd\xdc\xeb\x9e\x95\xee9wu\x14b)\x1d/|l\xf0\xeb\xf3\xd7\xccH\xa5\xbf\\\xe9U\x8b\a\x86s`c\xc6\xe9\xf5\xec\xe0\n\x8c4\x022\x18\xbc6\x9d\xc8?\x8bN\xa6\xd1\rU\xdb\x0erXz\x9d\xf6\x1bm\xe2nR$\n<\xcc\xe3\x1c\xa5I\xde\x12', 0xfdf2, 0x7) (async) mmap$auto(0x0, 0x400007, 0xb, 0x50, 0x2, 0x40000008000) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) (async, rerun: 32) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x2000d, 0xe2, 0x8000000000002010, 0x405, 0x8000) (async, rerun: 32) socket(0x2b, 0x1, 0x1) (rerun: 32) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xe, 0x9, 0x5, 0x14, 0x944, 0x2, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, [0x0, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) socket(0x10, 0x2, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/advisor_max_pages_to_scan\x00', 0x80001, 0x0) write$auto(r2, &(0x7f0000000000), 0x9) (async, rerun: 64) unshare$auto(0x40000080) (async, rerun: 64) settimeofday$auto(0x0, &(0x7f0000000100)={0x82, 0x4}) getsockopt$auto(0xffffffffffffffff, 0x10002, 0x2, 0x0, &(0x7f0000000040)=0x2000000) (async, rerun: 64) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/smaps_rollup\x00', 0x840, 0x0) (rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 4m40.834201343s ago: executing program 37 (id=4508): unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2c, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r0 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8953, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x480, 0x0) mmap$auto(0x0, 0x400008, 0x4, 0x40009b72, 0x2, 0x8000) io_uring_setup$auto(0x89, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) prctl$auto_SECCOMP_MODE_STRICT(0xf, 0x1, 0x0, 0x9, 0x2) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x1, 0x6, 0x1, 0x89, 0x7181, 0x3ffde, 0x4, 0x10, 0x9, 0x4, 0x80003, 0x1, 0x11ffffffffffd, 0x85, 0xfffffffffffffffb, 0x1, 0x50007, 0x2, 0xffffffffffffffff, 0x0, 0x80000001, 0x2000001, 0x202, 0x9, 0x10000, 0x0, 0x0, 0x2, 0x2000, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x3, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x400000004, 0x9, 0x2000000800000000, 0x3, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x4, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000, 0x800000009, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x2000000]}, 0x2, 0xd) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy1/aql_txq_limit\x00', 0x822, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/id/vendor\x00', 0x2000, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/mpls/conf/caif0/input\x00', 0x82, 0x0) ioctl$auto_USB_RAW_IOCTL_CONFIGURE(0xffffffffffffffff, 0x5509, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card1\x00', 0x10000, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x4611, 0x0) write$auto(0x3, 0x0, 0x7fffffff) unshare$auto(0x40000080) mmap$auto(0x0, 0x0, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) pread64$auto(r2, 0x0, 0x20000000001, 0x7fff) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x80180, 0x0) 4m37.320860244s ago: executing program 38 (id=4509): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r1, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r2 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="6d74a8872731ebfebe935554cc5d8cfbdfb1f19401b8338684761af3f5f291460b201c4b683bcf65440092b776c7b9d76390a9038539c9f69e8479c398b4e4ac77dfdf2add147aa687e8f39ee4f560a8c9dedd62fa5360d9b543b3e974fff512f6dfd046ffb13455e22821b3b814760b9132314867b516ee6be7577db325959337a037f12d3650", @ANYRES16=r2, @ANYBLOB="010031bd7000fddbdf250c000000"], 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) madvise$auto(0x80000000, 0xffffffffffffffff, 0xfffffffd) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r5, 0x1261, 0x0) msgctl$auto_MSG_INFO(0x4b, 0xc, &(0x7f00000000c0)={{0x1, 0xee01, 0xee00, 0x80, 0xc, 0x7, 0x38}, 0x0, 0x0, 0x40, 0x56, 0x5, 0xf8, 0x8, 0x1, 0x0, 0x5, @inferred=0x0}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) poll$auto(&(0x7f0000000d40)={r1, 0x1, 0xd}, 0x5, 0x3fd) shutdown$auto(0x200000003, 0x2) prctl$auto(0x1, 0x8, r6, 0x3a, 0x1) 3m49.817532422s ago: executing program 9 (id=4568): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) mprotect$auto(0x200000000000, 0x806121, 0x8) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSCOMPRESS(r0, 0x4010744d, &(0x7f0000000040)={0x0, 0xffff8000, 0x84}) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x8000) r2 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x1) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) mmap$auto(0x20000000000, 0x1000000020009, 0x40, 0xeb1, r2, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x4000000000009b72, 0x2, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_available_congestion_control\x00', 0x0, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000002040)='/dev/snd/pcmC1D1c\x00', 0x80, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/devcoredump/disabled\x00', 0xe3102, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x201, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) 3m46.735241209s ago: executing program 9 (id=4582): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090027bd7000fbdbdf250200000008000800", @ANYRES32=r3, @ANYBLOB="0c0001800800010002"], 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) (fail_nth: 1) 3m45.982987938s ago: executing program 9 (id=4583): r0 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bluetooth/hci1/rfkill6/power\x00', 0x4000, 0x0) ioctl$auto_XFS_IOC_GETBMAP(r0, 0xc0205826, &(0x7f00000000c0)={0xffffffffffffffff, 0x5, 0x7c8f, 0x1, 0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000000), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, 0x0, 0x426a2, 0x0) mmap$auto(0x0, 0xf569, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fcntl$getown(r0, 0x9) socket(0x6, 0x6, 0x6) ioctl$auto_BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r5 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r5, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x2, 0x80802, 0x0) unshare$auto(0x40000080) sendmsg$auto_NET_SHAPER_CMD_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090027bd7000fbdbdf250200000008000800", @ANYRES32=r4, @ANYBLOB="0c0001800800010002"], 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) 3m42.387854507s ago: executing program 9 (id=4590): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x51, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000140), 0x29}, 0x8) 3m42.180774876s ago: executing program 9 (id=4591): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg0\x00', 0x82802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/cgroup.type\x00', 0x103042, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rpc/nfs4.idtoname/content\x00', 0x181b80, 0x0) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) close_range$auto(0x2, 0x8, 0x0) sendfile$auto(r1, r1, 0x0, 0x200) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28182, 0x0) writev$auto(r2, &(0x7f0000000140)={&(0x7f0000002ac0), 0xe4}, 0x4) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000140), 0x7111}, 0x8) 3m41.862494503s ago: executing program 9 (id=4592): close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) (async) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r1 = getpid() openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/conf/batadv0/bc_forwarding\x00', 0x20040, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfdef) (async) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) (async) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r2 = epoll_create$auto(0x8800001) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) madvise$auto(0x1, 0x100000008, 0x0) (async, rerun: 64) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f00000000c0), 0x402000, 0x0) (rerun: 64) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/tracing/trace_clock\x00', 0x420000, 0x0) mmap$auto(0xfffffffffffffffe, 0x3, 0xf7fffffffff7f000, 0xeb1, r0, 0x8) recvmmsg$auto(r4, 0x0, 0x7ffffff9, 0x70da, 0x0) (async) epoll_ctl$auto(r2, 0x1, r0, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (rerun: 32) rt_sigqueueinfo$auto(0x0, 0xffff7b6f, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x14, 0x1, @_sigpoll={0xd}}}) (async) r5 = socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, r5, 0x5) setsockopt$auto(r5, 0x10000000084, 0x7d, 0x0, 0x8) (async) socket(0x11, 0x3, 0x9) (async, rerun: 64) pwrite64$auto(0xc8, &(0x7f0000000200)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\x00^\x0fo\x97\xfc\x89\v\xea\xc2\x95\xafQ;C>\x15L\x90\xad\xa4\x1648W\t\x00\x00\x001\x00\x00\x00@X\xb9_\xdd\xa6\xa2E\xd8?\'\x8dg\x81h*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&%`_[\xde\x7f\xde8\xf7\xc1\x94\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\xee\xa9\x0eX\x01\xa3g\xba\x9cc\x90\xe3\xae\xa9\xde\x00\x00\x00B\xb4\xf2&\x00\xe2\xead\xd0\"\x16\x84v\n\xcdN\xb6\xa4\xe0\xb7e\x97 ?\xb5\xa1E=t\x96\xbd\xfd\xc5\xebn\xb7\n\xc2\xbc\xa2\xa8\x04#\x84\xa7R|\xed\x8f\x03\x01\x10wLT\vay\x12\xb63\x9e\a\x8e\xbd\x18y<\xb3\v\x14\x82\x97&\xfcm\x86\x10o\xdc\xf3x\xfd\x06\x87t\xb9$\x94,f\x9b0\xcd\xd3\r\xb1e\'\x19\xc1\xe7>*\xad\xa5+\xa8\x1c\x88\xa1\x0e[\x99\xb6LKZ\x9e\r\xd0r\xe2Ct\xc1\x99\x1b/\xc5P.aUdq\x97\x94\xb9\xa8qU\xae*g\x86\xc9\xa4\xe7\n\vh-v\"o.\xbf6\x13\tFK\x8e\xc6&&\x13\x81\x00\x8c7PS\x9c\xa3\xfb\x1d\xa9\x98\xd47\n\xa7\xd1\x10\xb3i\xd2\xa8\x18f\xb3K\x9b\x9b\x8c\xe8\x84\xa3,5-\xd6\xae\xbd\x1d\xf2o\x99\x02\x1azw9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\bl\x042\x935\x9e\xeeH\x87\xda\x10\x8f^1\x89L`\xf4[\x06\xf6\xc7\xd0#\xdb\xb1\\\xc3\xb1\xb8\xe8\xde2\xbb\xf8I\x9c\x17KI\x8c\f\x1d\xaa\xa0\xdb\xc7\x9e\x81\x90CTe\xfa\x8dq&\x17\x908\xc9T\xffm\x930\x1d\x91\xf8|t\xfd\x18\xd5\xb0\xcbH\xa7\xb6T\n\x11%\xba\x16o\r\xf6\x90k\xfb\a\xa1\x15\x0e\xe1\xce0Q\xd0\x00\xc1\x1a\x1f\xaa8\xfbo)rtYK\"c\xe2c\xbeM\x9bT\x05\xf3\xccC\x8c\x00\xdf\x8c\x1b+\xca\x80', 0x84, 0xe83) (rerun: 64) 3m26.17239916s ago: executing program 39 (id=4592): close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) (async) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r1 = getpid() openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/conf/batadv0/bc_forwarding\x00', 0x20040, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfdef) (async) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) (async) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r2 = epoll_create$auto(0x8800001) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) madvise$auto(0x1, 0x100000008, 0x0) (async, rerun: 64) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f00000000c0), 0x402000, 0x0) (rerun: 64) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/tracing/trace_clock\x00', 0x420000, 0x0) mmap$auto(0xfffffffffffffffe, 0x3, 0xf7fffffffff7f000, 0xeb1, r0, 0x8) recvmmsg$auto(r4, 0x0, 0x7ffffff9, 0x70da, 0x0) (async) epoll_ctl$auto(r2, 0x1, r0, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (rerun: 32) rt_sigqueueinfo$auto(0x0, 0xffff7b6f, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x14, 0x1, @_sigpoll={0xd}}}) (async) r5 = socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, r5, 0x5) setsockopt$auto(r5, 0x10000000084, 0x7d, 0x0, 0x8) (async) socket(0x11, 0x3, 0x9) (async, rerun: 64) pwrite64$auto(0xc8, &(0x7f0000000200)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\x00^\x0fo\x97\xfc\x89\v\xea\xc2\x95\xafQ;C>\x15L\x90\xad\xa4\x1648W\t\x00\x00\x001\x00\x00\x00@X\xb9_\xdd\xa6\xa2E\xd8?\'\x8dg\x81h*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&%`_[\xde\x7f\xde8\xf7\xc1\x94\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\xee\xa9\x0eX\x01\xa3g\xba\x9cc\x90\xe3\xae\xa9\xde\x00\x00\x00B\xb4\xf2&\x00\xe2\xead\xd0\"\x16\x84v\n\xcdN\xb6\xa4\xe0\xb7e\x97 ?\xb5\xa1E=t\x96\xbd\xfd\xc5\xebn\xb7\n\xc2\xbc\xa2\xa8\x04#\x84\xa7R|\xed\x8f\x03\x01\x10wLT\vay\x12\xb63\x9e\a\x8e\xbd\x18y<\xb3\v\x14\x82\x97&\xfcm\x86\x10o\xdc\xf3x\xfd\x06\x87t\xb9$\x94,f\x9b0\xcd\xd3\r\xb1e\'\x19\xc1\xe7>*\xad\xa5+\xa8\x1c\x88\xa1\x0e[\x99\xb6LKZ\x9e\r\xd0r\xe2Ct\xc1\x99\x1b/\xc5P.aUdq\x97\x94\xb9\xa8qU\xae*g\x86\xc9\xa4\xe7\n\vh-v\"o.\xbf6\x13\tFK\x8e\xc6&&\x13\x81\x00\x8c7PS\x9c\xa3\xfb\x1d\xa9\x98\xd47\n\xa7\xd1\x10\xb3i\xd2\xa8\x18f\xb3K\x9b\x9b\x8c\xe8\x84\xa3,5-\xd6\xae\xbd\x1d\xf2o\x99\x02\x1azw9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\bl\x042\x935\x9e\xeeH\x87\xda\x10\x8f^1\x89L`\xf4[\x06\xf6\xc7\xd0#\xdb\xb1\\\xc3\xb1\xb8\xe8\xde2\xbb\xf8I\x9c\x17KI\x8c\f\x1d\xaa\xa0\xdb\xc7\x9e\x81\x90CTe\xfa\x8dq&\x17\x908\xc9T\xffm\x930\x1d\x91\xf8|t\xfd\x18\xd5\xb0\xcbH\xa7\xb6T\n\x11%\xba\x16o\r\xf6\x90k\xfb\a\xa1\x15\x0e\xe1\xce0Q\xd0\x00\xc1\x1a\x1f\xaa8\xfbo)rtYK\"c\xe2c\xbeM\x9bT\x05\xf3\xccC\x8c\x00\xdf\x8c\x1b+\xca\x80', 0x84, 0xe83) (rerun: 64) 3m8.240101064s ago: executing program 7 (id=4690): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000003", @ANYRES16=r1, @ANYBLOB="090027bd7000fbdbdf250200000008000800", @ANYRES32=r3, @ANYBLOB="0c0001800800010002"], 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) 3m8.175206261s ago: executing program 7 (id=4691): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x22) close_range$auto(0x2, 0x8, 0x0) connect$auto(0x3, 0x0, 0x58) io_uring_setup$auto(0x1, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x80000, 0x0) close_range$auto(0x2, 0x8, 0x0) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x6, 0x10200006, 0x9, 0x13, 0x602, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r1 = socket(0x10, 0x2, 0x9) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="0100"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0xfffffffffffffffa, 0x0, 0x7ffffffd, 0xa}, 0x10000}, 0x3, 0x0) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="10002cbd7000df250a0a08000a"], 0x10e}}, 0x10004010) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00) madvise$auto(0x0, 0x200007, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f00000001c0), r3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) msgctl$auto_IPC_INFO(0x6, 0x3, 0x0) socket(0x1a, 0x5, 0x0) getsockopt$auto(r1, 0x0, 0x7d02, 0x0, &(0x7f00000000c0)=0x1e) socket(0x2, 0x80002, 0x73) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vidtv.0/i2c-0/new_device\x00', 0x2001, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/netfilter/nf_log\x00', 0xa000, 0x0) 3m7.188829434s ago: executing program 7 (id=4693): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg0\x00', 0x82802, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0xeb1, 0x401, 0x6) socket(0x10, 0x2, 0x0) socket(0x8e71d2e374d6b1be, 0x800, 0x2) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) socket(0x2a, 0x2, 0x1) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000006cc0), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_RECONFIGURE(r1, &(0x7f0000006d80)={0x0, 0x0, &(0x7f0000006d40)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010009af414d7bd870b6eafa2abd7000fbdbdf2503000000080001000200005afdea00"], 0x1c}}, 0x24044880) socket(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x108002, 0x0) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, 0x0, 0x8a141, 0x0) socketpair$auto(0x1, 0x4, 0x10010000, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket(0x10, 0x2, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x4) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x6, 0x0, 0x401) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @rand_addr=0x64010101}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) connect$auto(r0, 0x0, 0x55) write$auto(0x3, 0x0, 0x5b4) 3m6.859550409s ago: executing program 7 (id=4694): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/kernel/perf_cpu_time_max_percent\x00', 0xa042, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x401c5820, 0x0) mkdir$auto(0x0, 0x353) write$auto_proc_sys_file_operations_proc_sysctl(r0, &(0x7f00000002c0)="81", 0x1) 3m6.5770096s ago: executing program 7 (id=4695): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0xa, 0x5, 0x0) socket(0xa, 0x3, 0xff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/oss/devices\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000000)=""/65, 0x41) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) ioctl$auto(0x3, 0xc0104d03, 0x5) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000001100), 0xa8000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPP(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_HE_CAPABILITY={0x15, 0x10d, "8223d208b7dd3463a3a936688073d724bb"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) read$auto(0xffffffffffffffff, 0x0, 0x1) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) sendfile$auto(r3, r4, 0x0, 0x2) 3m5.538981267s ago: executing program 7 (id=4697): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) getsockopt$auto_SO_RCVTIMEO_OLD(r0, 0xffffffff, 0x14, &(0x7f00000003c0)='\x00\x00+\xa2\xc7\x92\x00\x00\x00\x00\x00\x00\x03\x90\xf9\xe8\x11\x80\a :w\xac[\xbb\xac\xe3\xe0\xff8g:\x04\x00\x00\x00\x00\x00\x00\x00=r\x03\x95\x87\xbaM\xd80=\x81\x8ez\xab\xc3^\xb0\x03Ijj\xc4\xf9\xe6\x84P\x15q\xaa\xc8\x03\xba\x8c\xe3\xc3r\xb8\x1b\x98\xe8\xbc\x11.\xd9A\xb3P\xfa\x04\x95\xfc*\v\xb8\xc5\x16Z\xb7\x82\xbc\x96o\xd2G\xf8\x0f`\xa1\x1f\xc6\xd6\xc5\xdcM\x17\x11\xd2\x12\x988\xa3`\xad[UI\xf7\xc7\xcc\x13XH\xc1\x02\x84$\x97;\xebM`\x7f\xe4\x8dbe\xd8\x901\x8e\'\x10\xf6`^\xd28Xk\x03\x8d\b\xbd\xe2d\\\x11w(\xc7D!,6\x01\x00\x9f\x8bxg\xe2\xfc~\x006\x17\x9b9?,\xd8\n\x82r\x12\xa9\xfd@\x90&\xd3l\xa7[\x9bx\xf7\xb9[m\x9a\xee\"\x9e\x81|\xa4\x8f5\xea\t\x02Axu\xe9io`\x81\xb5\x89\x01\xa0\xa8~]\xd8]\x14}\x8c\xacRc\r\xb7.\x7f\xb3\x85\xff\xf5\xb0\x11/\x80{\xab)\x05\xb3HHU\xcb\x00', 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0) write$auto(0x3, 0x0, 0x7fffffff) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c1) mmap$auto(0x100, 0x2, 0x4, 0x200009b71, 0x2, 0x9) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x7, 0x28000) socketpair$auto(0x200001e, 0xffffffff, 0x0, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x6) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0x7, 0xd, 0x1ff, 0x948d, 0x5, 0x6, 0x3, 0x8006, 0x65, 0x8000001f, 0x1000, 0x100000000006d3e, 0x9, 0x1, 0x8]}, 0x0) 3m4.793155209s ago: executing program 40 (id=4697): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) getsockopt$auto_SO_RCVTIMEO_OLD(r0, 0xffffffff, 0x14, &(0x7f00000003c0)='\x00\x00+\xa2\xc7\x92\x00\x00\x00\x00\x00\x00\x03\x90\xf9\xe8\x11\x80\a :w\xac[\xbb\xac\xe3\xe0\xff8g:\x04\x00\x00\x00\x00\x00\x00\x00=r\x03\x95\x87\xbaM\xd80=\x81\x8ez\xab\xc3^\xb0\x03Ijj\xc4\xf9\xe6\x84P\x15q\xaa\xc8\x03\xba\x8c\xe3\xc3r\xb8\x1b\x98\xe8\xbc\x11.\xd9A\xb3P\xfa\x04\x95\xfc*\v\xb8\xc5\x16Z\xb7\x82\xbc\x96o\xd2G\xf8\x0f`\xa1\x1f\xc6\xd6\xc5\xdcM\x17\x11\xd2\x12\x988\xa3`\xad[UI\xf7\xc7\xcc\x13XH\xc1\x02\x84$\x97;\xebM`\x7f\xe4\x8dbe\xd8\x901\x8e\'\x10\xf6`^\xd28Xk\x03\x8d\b\xbd\xe2d\\\x11w(\xc7D!,6\x01\x00\x9f\x8bxg\xe2\xfc~\x006\x17\x9b9?,\xd8\n\x82r\x12\xa9\xfd@\x90&\xd3l\xa7[\x9bx\xf7\xb9[m\x9a\xee\"\x9e\x81|\xa4\x8f5\xea\t\x02Axu\xe9io`\x81\xb5\x89\x01\xa0\xa8~]\xd8]\x14}\x8c\xacRc\r\xb7.\x7f\xb3\x85\xff\xf5\xb0\x11/\x80{\xab)\x05\xb3HHU\xcb\x00', 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0) write$auto(0x3, 0x0, 0x7fffffff) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c1) mmap$auto(0x100, 0x2, 0x4, 0x200009b71, 0x2, 0x9) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x7, 0x28000) socketpair$auto(0x200001e, 0xffffffff, 0x0, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x6) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0x7, 0xd, 0x1ff, 0x948d, 0x5, 0x6, 0x3, 0x8006, 0x65, 0x8000001f, 0x1000, 0x100000000006d3e, 0x9, 0x1, 0x8]}, 0x0) 1m42.352421257s ago: executing program 8 (id=4989): mmap$auto(0x0, 0x2, 0xdd, 0xeb1, 0x401, 0x8000) socket(0xa, 0x2, 0x88) madvise$auto_MADV_DONTNEED(0x3, 0x7, 0x4) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)=ANY=[@ANYBLOB="05000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xb5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x8c000, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r0, 0x41015500, &(0x7f0000000040)={"b9c7f59c8fd34e89d39229d84bc68825747c6768101b13249131f016ac5f31956e82734cb3a717defbd44baa134b2246d3a14c8d20bd15b0291bd2efd3c2829d4958565c4c4d00a2b2a65ffd08a7ce5f2699e039f221bba722f9b0fb4581f7ede26586722cb1a649ffe58e2c92fd9427956260bd8b852996080ecd06dbf481a4", "f3e9c6abc582b3149affd3fef54d96b384ebadbc5d34f05500adc93ca575ace441fb58eaf4a969d303324185b2e2fa4a7dd0a9cd0c9166dfc3b88bcad51873a62f532ff5e082b78a681e8fb958917426f7f43238ffed2d685db0208209be2bb867b135917d79966b101da9ac86030339e49fb62235068cd16b6a3f4a8be25711", 0x6}) 1m42.151933137s ago: executing program 8 (id=4990): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2000d, 0x3, 0xeb1, 0x404, 0x100010008000) r1 = socket(0x10, 0x2, 0x0) r2 = socket(0x2, 0x5, 0x0) sendmmsg$auto(r2, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) setsockopt$auto_SO_PASSSEC(r2, 0x6f66, 0x22, &(0x7f00000000c0)='\x00', 0xffffff7f) statmount$auto(0x0, &(0x7f0000000180)={0x7d4, 0x1, 0x401c2, 0x2081, 0x3f, 0x7ffc, 0x1ffde, 0x8001, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x3004, 0x9, 0x6, 0x10002, 0x80, 0x400, 0xa9, 0x7, 0x1ffc, 0x8203, 0x400, 0x2, 0x1, 0x0, 0x40, 0x5, 0x2, [0x7249, 0xa9f, 0x0, 0x1000000000000000, 0x0, 0x180, 0x2, 0x0, 0x0, 0x200000000000000, 0xfc6a, 0x1000000, 0x10000, 0x40000000000, 0x0, 0x400000000000, 0x80000000000000, 0x0, 0xffffffffff7ffffc, 0x5, 0x0, 0x2, 0xfff, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x400000000000002, 0xfffffffffffffffc, 0x3, 0x1, 0x5, 0xfffffffffffffffc, 0x4]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='.'], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0xc20f0000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) write$auto(r0, 0x0, 0x101) write$auto(0x3, 0x0, 0x81) close_range$auto(0x2, 0x8, 0x0) 1m41.88492925s ago: executing program 8 (id=4991): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x20401, 0x0) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) ioctl$auto_BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f00000005c0)={@inferred=r0, "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"}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/platform/dummy_hcd.0/usb1/devpath\x00', 0x20000, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/platform/dummy_hcd.0/usb1/devpath\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000540)=""/68, 0x44) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) prctl$auto(0x5, 0x1, 0x0, 0xd, 0x8) (async) prctl$auto(0x5, 0x1, 0x0, 0xd, 0x8) 1m40.888315215s ago: executing program 8 (id=4995): r0 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) read$auto(r0, 0x0, 0x1) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) sendfile$auto(r1, r2, 0x0, 0x2) (fail_nth: 3) 1m39.970976838s ago: executing program 8 (id=4998): r0 = socket(0x2, 0x801, 0x106) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x4002, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) listen$auto(0x3, 0x81) r2 = prctl$auto_PR_SET_MM_START_STACK(0x982, 0x5, 0xffffffffffffffff, 0x4, 0x1ff) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) sendmsg$auto_NL80211_CMD_SET_PMK(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x268, r3, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_TID_CONFIG={0x98, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfff2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0xee}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0xff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xedce}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}]}, @NL80211_ATTR_MESH_CONFIG={0x10b, 0x23, 0x0, 0x1, [@nested={0x8, 0x3e, 0x0, 0x1, [@nested={0x4, 0x2e}]}, @nested={0x8, 0x32, 0x0, 0x1, [@nested={0x4, 0x77}]}, @generic="dec107f87e073be99d78e230a3cc408e3afbfc3d6fa26eb13b19e2e068b378ed7f0e9678bf4134a1a7da4168eaa44b8d9d1a8fd573dd78acca25f963fda4c66264483af1ac9b32d6ed650509902887bf22215a2285529784749177fa933a6162e7e7813fde5803c9ecd97af07a41f517264fa36ed814f65c364956b1c22c4b9f84c76df83c06023eb3451060327609ef97e9bd8aaefdf88ae5bc920615f640dd87f30ed691dbd365cfa26eb7aa247ba5fe270a", @generic="d576021500f93a4f8954d3b4e472cd88f3226c268897ab49049e5e7d9f7b92cafa065d65e2d36ea3a463e3b18128c2149b3a0d51e5e8d8ea495730a1d5d5a47b", @typed={0x4, 0x9f}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x8}, @NL80211_ATTR_ASSOC_MLD_EXT_CAPA_OPS={0x6, 0x151, 0x7ff}, @NL80211_ATTR_FILS_NONCES={0x9b, 0xf3, "a69aa873ffbd24882275ced7a1df8488de7be953fed9d30fef7206022ad0028fa82f6dbbbdd8c927ad9acaa8318d520f871aa730ab90502490eb8e2e0f919bd6d96d235cac20510ec365bc5bb22294ccd6738e53257d76bb85edbddc68df3eefbda4506a2b3998f11a175536a19ca1c2c6615b7c807ddf0121894e47282bfab41145081e253c3ff1ba7002fcd56d378b421b2e1ccb24f3"}]}, 0x268}, 0x1, 0x0, 0x0, 0x40810}, 0x40000) 1m39.829328872s ago: executing program 8 (id=4999): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) listmount$auto(&(0x7f0000000100)={0x20, @raw, 0xffffffffffffffff}, 0x0, 0xf423c, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) r0 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r0, 0x29, 0x20, 0x0, 0x21) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x22, 0x3, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x2) socketpair$auto(0xb, 0x9, 0x800, 0x0) setsockopt$auto(0x3, 0x0, 0x18, 0x0, 0x2) socket(0x2, 0x80002, 0x73) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x202401, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0xc08c5332, 0x38) socket(0x2, 0x80002, 0x73) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$auto(0x3, 0x40505331, 0x38) 1m24.644217148s ago: executing program 3 (id=5034): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) sendfile$auto(r0, r1, 0x0, 0x2) 1m24.561185443s ago: executing program 41 (id=4999): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) listmount$auto(&(0x7f0000000100)={0x20, @raw, 0xffffffffffffffff}, 0x0, 0xf423c, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) r0 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r0, 0x29, 0x20, 0x0, 0x21) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x22, 0x3, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x2) socketpair$auto(0xb, 0x9, 0x800, 0x0) setsockopt$auto(0x3, 0x0, 0x18, 0x0, 0x2) socket(0x2, 0x80002, 0x73) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x202401, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0xc08c5332, 0x38) socket(0x2, 0x80002, 0x73) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$auto(0x3, 0x40505331, 0x38) 1m24.260602831s ago: executing program 3 (id=5044): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0x14, 0xffffffffffffffff, 0x8000) fcntl$auto(0x3, 0x4, 0xa553) swapon$auto(0x0, 0x4) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x1, 0x23, 0xdf, 0x40000eb1, r0, 0x8000) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) mmap$auto(0x0, 0x200008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129102, 0x0) adjtimex$auto(&(0x7f0000000000)={0xffff92b5, 0x0, 0x9, 0x3, 0xfffffffffffffffe, 0x80000000000000, 0x80000000, 0x0, 0x3, 0x9, 0xffffffffffffffff, {0x400000000000007, 0x6}, 0xfffffffc, 0xbf6, 0x9, 0x10, 0x0, 0x3, 0x8, 0xff, 0x10000, 0x100000001, 0x4}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x24) close_range$auto(0x2, 0x8, 0xc1f7) close_range$auto(r0, 0x8, 0xfffffe02) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp1\x00', 0x20002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)="7f07d3") mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) get_robust_list$auto(0x1, 0x0, 0x0) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) mlock$auto(0x10fbe8, 0x4) ioctl$auto_SNDCTL_DSP_SETFMT(r1, 0xc0045005, 0x0) socketcall$auto(0x8000, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x60980, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) 1m22.641943574s ago: executing program 3 (id=5039): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/hugepages-8kB/shmem_enabled\x00', 0x1a1842, 0x0) sendfile$auto(r0, r0, 0x0, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x8000) pwrite64$auto(r1, &(0x7f0000000040)='/dev/net/tun\x00', 0x2, 0x1000000002) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x4a083, 0x0) ioctl$auto_BLKRRPART(r2, 0x125f, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) prctl$auto(0x34, 0x17, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020005, 0x8e, 0x10, 0xfffffffffffffffa, 0x8000) r3 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r3, 0x11e, 0xea3, 0xfffffffffffffffe, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x42, 0x0) prctl$auto_PR_SYS_DISPATCH_ON(0x2, 0x1, 0x0, 0x400, 0x2) write$auto(0x3, 0x0, 0xfdf3) sendmsg$auto_NL80211_CMD_REMOVE_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40804) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@inferred, 0xffffffff, 0x3, 0x81, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d", @raw=0x9}, 0x400005, 0x25, 0x4, @raw=0x6, @integer={0xe7, 0x0, 0x81}, "7a9fc199a16a2311eacf2fc7ae1d8778dc610400000001000f00000000b6debe0eda71bdb5adb17884a16f7ce8c57c0eb327ac702b8d7c2d00"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r4) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084) lstat$auto(0x0, &(0x7f0000000180)={0x5, 0x1f, 0x9, 0x62, 0x0, 0x0, 0x0, 0xffc, 0x2, 0x80000000400000a, 0xfffffffffffffffd, 0x9, 0x9, 0xffffffff80000000, 0x11, 0x20000000001, 0x7}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010329bd0200fccbdf257706d290f3fc5133d3c401050000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/nbd12\x00', 0x44003, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) 1m21.642851143s ago: executing program 3 (id=5043): r0 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) read$auto(r0, 0x0, 0x1) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) sendfile$auto(r1, r2, 0x0, 0x2) (fail_nth: 6) 1m21.114913434s ago: executing program 3 (id=5046): r0 = openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000006640), 0x2, 0x0) pwrite64$auto(r0, 0x0, 0x4, 0x3) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000340), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r2 = open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0xa6) open_by_handle_at$auto(r2, &(0x7f0000000040)={0x8, 0x2, '\a\x00\x00\x00\x00\x00\x00\x00'}, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r5, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) r6 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r3, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, r6, 0x1, 0x70bd26, 0x65dfdbfc, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000000) 1m20.434944432s ago: executing program 3 (id=5048): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000001c0)=0x6) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x2b, 0x1, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x0, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x2, "f74d086d6600f5daa47fca1f1a0730a2f629350000000000000008600418af10", @inferred=r3}) mmap$auto(0x1, 0xa8b2, 0x3, 0xeb1, 0xfffffffffffffffa, 0x1ff) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x800, 0x0) ioctl$auto(0x3, 0xc00c6211, 0x38) read$auto(r5, 0x0, 0x1ff) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) fsconfig$auto_XFS_DAX_ALWAYS(r6, 0x0, 0x0, 0x0, 0x1) semctl$auto_GETPID(0x6, 0x401, 0xb, 0x8) 1m4.993649083s ago: executing program 42 (id=5048): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000001c0)=0x6) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x2b, 0x1, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x0, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x2, "f74d086d6600f5daa47fca1f1a0730a2f629350000000000000008600418af10", @inferred=r3}) mmap$auto(0x1, 0xa8b2, 0x3, 0xeb1, 0xfffffffffffffffa, 0x1ff) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x800, 0x0) ioctl$auto(0x3, 0xc00c6211, 0x38) read$auto(r5, 0x0, 0x1ff) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) fsconfig$auto_XFS_DAX_ALWAYS(r6, 0x0, 0x0, 0x0, 0x1) semctl$auto_GETPID(0x6, 0x401, 0xb, 0x8) 20.041114679s ago: executing program 0 (id=5187): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) close_range$auto(r0, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r1 = socket(0x17, 0x2, 0x2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0xffffffffffff0005, 0x19) unshare$auto(0x40000080) unshare$auto(0x40000080) socket(0x10, 0x2, 0x0) getsockopt$auto(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000080)=':}\'*,\x00', &(0x7f00000000c0)=0xffffff89) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) memfd_create$auto(0x0, 0xe) r2 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r2, 0x0, 0x80, 0x0, 0x0) setsockopt$auto(0x3, 0x6, 0xc, 0x0, 0xfb3) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8953, 0x0) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x468300, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) 18.701401443s ago: executing program 0 (id=5191): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1b0026bd7000fddbdf2503000000040008001400038010000c800c00068008000600", @ANYRES32=0x0, @ANYBLOB="12000100898771f1c19f17790481008286dd0000040002809a"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0xc800) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000040)='//\xf2\x00', 0x80000000) write$auto(r2, 0x0, 0x2) getrlimit$auto(0x3, 0x0) fdatasync$auto(r2) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r3, 0x127f, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xc8d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\xc6\x00\x89\te\x8d\a\xfb\\n\x89C:\x84D\x10u\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x100eb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r4, 0xffffffffffdffe00, &(0x7f0000000140)=';') pselect6$auto(0x9, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) mmap$auto(0x1, 0x2020009, 0x7, 0x16, r0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya7\x00', 0x480, 0x0) 17.173474138s ago: executing program 0 (id=5193): close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket(0x10, 0x2, 0x0) (async, rerun: 64) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="1b0026bd7400fddbdf250300000004000800100003800c0009"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) (async, rerun: 64) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf250200"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/sound/ctl-led/speaker/card2/reset\x00', 0xa001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)="c0f25e", 0x3) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) socket(0x2a, 0x1, 0x2000) keyctl$auto(0x2, 0xffffeffffffffffe, 0x107, 0x803, 0x800000000000c) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cec5\x00', 0x101802, 0x0) ioctl$auto_CEC_ADAP_G_PHYS_ADDR(r2, 0x80026101, &(0x7f00000002c0)=0x8) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) socket(0x2, 0x1, 0x0) (async, rerun: 64) socketpair$auto(0x3, 0x5, 0x7, 0x0) (async, rerun: 64) write$auto(0x3, 0x0, 0xfffffdef) 16.442873109s ago: executing program 0 (id=5194): r0 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x100c1, 0x0) writev$auto(r0, &(0x7f0000000bc0)={0x0, 0x400}, 0x9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/rose14/statistics/rx_length_errors\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) write$auto_cachefiles_daemon_fops_internal(0xffffffffffffffff, &(0x7f0000000180)="9318", 0x2) (async, rerun: 32) unshare$auto(0x40000080) (rerun: 32) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000040)=0x5) (async) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy3/netdev:wlan0/stations/08:02:11:00:00:01/he_capa\x00', 0xa0080, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r2, 0x0, 0x0) (async, rerun: 64) unshare$auto(0x40000080) (async, rerun: 64) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/set_event\x00', 0x101901, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0) sendfile$auto(r3, r3, 0x0, 0x9) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x1fe, 0x8000) (async) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r5, 0x2275, 0xdd) (async) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0x20, 0x80802, 0x6) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), r6) sendmsg$auto_NL80211_CMD_ADD_LINK(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="14850a00", @ANYRES16=r7, @ANYBLOB="00042abd7000fedbdf2594000000"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x44) r8 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) (async) sendmmsg$auto(r8, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) (async) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) ioctl$auto(0xffffffffffffffff, 0x541b, 0x24) 16.056742443s ago: executing program 0 (id=5195): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x80802, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x5, 0x84) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) semctl$auto(0x1, 0xfffffffd, 0x1, 0x1000) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x430200, 0x0) write$auto(r0, 0x0, 0xc3) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000140)='0[.[\x00', 0xcd04) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/lru_gen/enabled\x00', 0xb02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop5\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r4, 0xc0481273, 0x0) r5 = prctl$auto(0x3d, 0x40005, 0x0, 0x6, 0x0) ioctl$auto_XFS_IOC_ALLOCSP(r5, 0x4030580a, &(0x7f00000004c0)={0xe4e, 0x788, 0x3, 0x4a, 0xdd66, r3}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r6) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010027bd7000fddbdf257e9692744cdf0000000500d5"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000600), r5) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), r8) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$auto_NETDEV_CMD_NAPI_GET2(r8, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f0000003e80)={0x1c, r9, 0x309, 0x70bd2b, 0x25dfdbfe, {}, [@NETDEV_A_NAPI_IFINDEX={0x8, 0x1, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000000), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'netdevsim0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r4, @ANYRES16=r5, @ANYRES32=0x0, @ANYRES32=r11], 0x24}, 0x1, 0x0, 0x0, 0x8880}, 0x20040894) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, "7517267209e404c3e721ecaf50961784573cff00852e1ae223ab1d2577d9b08425e1629b"}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) 15.135646281s ago: executing program 0 (id=5197): socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) write$auto(r0, &(0x7f0000000080)=')@-!\x00', 0x1e1) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x2b, 0x1, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x0, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x2, "f74d086d6600f5daa47fca1f1a0730a2f629350000000000000008600418af10", @inferred=r2}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x800, 0x0) ioctl$auto(0x3, 0xc00c6211, 0x38) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) fsconfig$auto_XFS_DAX_ALWAYS(r4, 0x0, 0x0, 0x0, 0x1) semctl$auto_GETPID(0x6, 0x401, 0xb, 0x8) waitid$auto_P_PID(0x1, 0x0, &(0x7f00000003c0)={@_si_pad}, 0x0, &(0x7f00000004c0)={{0x2, 0x8}, {0xf34, 0xffffffffffffffff}, 0x1, 0x96, 0x401, 0x3, 0x43, 0x400, 0x5, 0x4, 0x101, 0xf, 0x0, 0x1, 0x7}) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)={0x48, 0x0, 0x122, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, "e73bdb85bc21dfaef8e0c361f2a5690c"}, @NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@nested={0xc, 0x42, 0x0, 0x1, [@typed={0x8, 0x136, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @typed={0x5, 0x2, 0x0, 0x0, @str='\x00'}]}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x48084) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4, 0x0) openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/buffer_total_size_kb\x00', 0x80000, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 14.753641327s ago: executing program 4 (id=5199): mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x100000000, 0x8, 0x8, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x2, 0x5, 0x5, 0x6, 0x8, 0xae, 0xa, 0x2, 0x7, 0x5, 0x7}, 0x1fe, 0x80) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x1e, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) bind$auto(r1, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x0, 0x2}}, 0x66) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x4004000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 14.616633083s ago: executing program 4 (id=5200): r0 = openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000006640), 0x2, 0x0) pwrite64$auto(r0, 0x0, 0x4, 0x3) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000340), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000040)={0x8, 0x2, '\a\x00\x00\x00\x00\x00\x00\x00'}, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r4, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, r5, 0x1, 0x70bd26, 0x65dfdbfc, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000000) 14.37674718s ago: executing program 4 (id=5201): mmap$auto(0x0, 0xaaf, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = socketpair$auto(0xb, 0xd, 0xfffffffd, 0x0) ioctl$auto_TIOCMSET2(r0, 0x5418, &(0x7f0000000280)="46f2ac0327d94cc060818d1024f93d0ae1edd70066807b12afcfdb286165673329d5a0f83059a0da7823b964818e9b71573cece9d34c8add3918e9970b7d21e3814f") (async) socket(0x2b, 0x1, 0x83) mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, &(0x7f0000000000), 0x125200, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040)=' \\ ', 0x3) (async) r2 = socket(0x10, 0x2, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') setresuid$auto(0x8, 0x8, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="ec2b6e7408332d3d5b2cddc9124d0c4eb3dda1c783c71b148efdacae066ca12b00fcc2cabc1d8f04c84c54f7da143ec6e8f55e3787657e6f240f70dc668126f20d28e891e421d62d0f9b1dbb9bca650dfc302e10bab4e833166c45574d820f7453c7", @ANYBLOB="1a00"], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x4800) (async) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000000)="c80d1b5d399b71", 0x7) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r2, &(0x7f0000000100)={{0x0, 0x7, &(0x7f0000000080)={&(0x7f0000000040), 0xcf}, 0x3, 0x0, 0x80000000, 0x6}, 0x7fff}, 0x7, 0x6, 0x0) copy_file_range$auto(0xffffffffffffffff, 0x0, r2, &(0x7f0000000080)=0x9, 0xfffffffffffffffe, 0x6) (async) socket(0xa, 0x80004, 0x7) (async) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x84) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) setsockopt$auto(r2, 0x10000000084, 0x23, 0x0, 0xe) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r7 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000300)={0x3, 0x0, [{0x8, 0x101, 0x2}, {0x6, 0xb, 0x7fffffffffffffff}]}) (async) ioprio_set$auto(0x2, 0x0, 0x8) (async) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/nullb/features\x00', 0x5e3f03, 0x0) (async, rerun: 64) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) (rerun: 64) 14.146984773s ago: executing program 4 (id=5202): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/use-gss-proxy\x00', 0x48041, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r1, &(0x7f00000001c0)="976f09bd689a850edbe36136c8535f593331280bb0b4ba0edd7932ab185cca064833fd9b640f", 0x26) write$auto(r0, 0x0, 0x6) socket(0x29, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) io_uring_setup$auto(0x6, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x6) close_range$auto(0x2, 0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'virt_wifi0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)={0x24, r6, 0xb11, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x9800) sendmsg$auto_BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r6, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_BLA_ADDRESS={0xa, 0x1f, @multicast}, @BATADV_ATTR_LOG_LEVEL={0x8}, @BATADV_ATTR_HARD_ADDRESS={0xa}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x4048000) r9 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r9) ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x572, 0x400, 0x718c1257}]}) open(0x0, 0xa22c0, 0x155) open(0x0, 0xa240, 0x1de) 13.937950857s ago: executing program 4 (id=5203): r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/ksm_stat\x00', 0x103282, 0x0) read$auto_proc_single_file_operations_base(r0, &(0x7f0000000480)=""/238, 0xee) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4$auto(r1, 0x0, 0x0, 0x0) prctl$auto(0x23, 0x2, r1, 0x5, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_available_congestion_control\x00', 0x0, 0x0) 33.165915ms ago: executing program 43 (id=5197): socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) write$auto(r0, &(0x7f0000000080)=')@-!\x00', 0x1e1) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x2b, 0x1, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x0, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x2, "f74d086d6600f5daa47fca1f1a0730a2f629350000000000000008600418af10", @inferred=r2}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x800, 0x0) ioctl$auto(0x3, 0xc00c6211, 0x38) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) fsconfig$auto_XFS_DAX_ALWAYS(r4, 0x0, 0x0, 0x0, 0x1) semctl$auto_GETPID(0x6, 0x401, 0xb, 0x8) waitid$auto_P_PID(0x1, 0x0, &(0x7f00000003c0)={@_si_pad}, 0x0, &(0x7f00000004c0)={{0x2, 0x8}, {0xf34, 0xffffffffffffffff}, 0x1, 0x96, 0x401, 0x3, 0x43, 0x400, 0x5, 0x4, 0x101, 0xf, 0x0, 0x1, 0x7}) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)={0x48, 0x0, 0x122, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, "e73bdb85bc21dfaef8e0c361f2a5690c"}, @NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@nested={0xc, 0x42, 0x0, 0x1, [@typed={0x8, 0x136, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @typed={0x5, 0x2, 0x0, 0x0, @str='\x00'}]}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x48084) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4, 0x0) openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/buffer_total_size_kb\x00', 0x80000, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 0s ago: executing program 4 (id=5205): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x800, 0x0) ioctl$auto(r1, 0x90006441, 0xc35) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x800, 0x800000d) r4 = prctl$auto(0x40, 0x1, 0x0, 0xa, 0x20000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/admmidi2\x00', 0x450481, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/wireless\x00', 0x80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, r3) ioprio_set$auto(0x3, 0x0, 0x4b34) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4c0c0) mmap$auto(0x0, 0x40006, 0x1000000000000e2, 0x9372, 0xffffffffffffffff, 0x10000027ffc) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) kernel console output (not intermixed with test programs): ][ T1761] RSP: 002b:00007f54e019d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1322.289345][ T1761] RAX: fffffffffffffe00 RBX: 00007f54df616188 RCX: 00007f54df39bf79 [ 1322.289360][ T1761] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f54df616188 [ 1322.289369][ T1761] RBP: 00007f54df616180 R08: 0000000000000000 R09: 0000000000000000 [ 1322.289378][ T1761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1322.289387][ T1761] R13: 00007f54df616218 R14: 00007ffdf79adf30 R15: 00007ffdf79ae018 [ 1322.289407][ T1761] [ 1322.962727][T23030] Bluetooth: hci6: command 0x0406 tx timeout [ 1327.063832][ T1958] FAULT_INJECTION: forcing a failure. [ 1327.063832][ T1958] name failslab, interval 1, probability 393216, space 0, times 0 [ 1327.194507][ T1958] CPU: 0 UID: 0 PID: 1958 Comm: syz.0.4814 Tainted: G L syzkaller #0 PREEMPT(full) [ 1327.194532][ T1958] Tainted: [L]=SOFTLOCKUP [ 1327.194538][ T1958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1327.194547][ T1958] Call Trace: [ 1327.194552][ T1958] [ 1327.194558][ T1958] dump_stack_lvl+0x100/0x190 [ 1327.194584][ T1958] should_fail_ex.cold+0x5/0xa [ 1327.194601][ T1958] should_failslab+0xc2/0x120 [ 1327.194619][ T1958] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1327.194640][ T1958] ? rxrpc_lookup_local+0x3f7/0x1220 [ 1327.194662][ T1958] rxrpc_lookup_local+0x3f7/0x1220 [ 1327.194682][ T1958] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 1327.194700][ T1958] ? __local_bh_enable_ip+0x9e/0x120 [ 1327.194725][ T1958] rxrpc_sendmsg+0x34a/0x680 [ 1327.194746][ T1958] sock_write_iter+0x566/0x610 [ 1327.194764][ T1958] ? __pfx_sock_write_iter+0x10/0x10 [ 1327.194786][ T1958] ? bpf_lsm_file_permission+0x9/0x10 [ 1327.194803][ T1958] ? security_file_permission+0x76/0x210 [ 1327.194820][ T1958] ? rw_verify_area+0xce/0x6d0 [ 1327.194844][ T1958] vfs_write+0x6ac/0x1070 [ 1327.194863][ T1958] ? __pfx_sock_write_iter+0x10/0x10 [ 1327.194886][ T1958] ? __pfx_vfs_write+0x10/0x10 [ 1327.194899][ T1958] ? find_held_lock+0x2b/0x80 [ 1327.194930][ T1958] ksys_write+0x1f8/0x250 [ 1327.194945][ T1958] ? __pfx_ksys_write+0x10/0x10 [ 1327.194964][ T1958] do_syscall_64+0x106/0xf80 [ 1327.194985][ T1958] ? clear_bhb_loop+0x40/0x90 [ 1327.195003][ T1958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.195018][ T1958] RIP: 0033:0x7f20aad9bf79 [ 1327.195030][ T1958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1327.195044][ T1958] RSP: 002b:00007f20abc6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1327.195059][ T1958] RAX: ffffffffffffffda RBX: 00007f20ab015fa0 RCX: 00007f20aad9bf79 [ 1327.195070][ T1958] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 1327.195078][ T1958] RBP: 00007f20aae327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1327.195088][ T1958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1327.195097][ T1958] R13: 00007f20ab016038 R14: 00007f20ab015fa0 R15: 00007ffd473d31e8 [ 1327.195116][ T1958] [ 1327.427520][ T1965] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4813'. [ 1328.029092][ T1984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4815'. [ 1328.938937][ T2069] FAULT_INJECTION: forcing a failure. [ 1328.938937][ T2069] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1329.034829][ T2069] CPU: 0 UID: 0 PID: 2069 Comm: syz.3.4818 Tainted: G L syzkaller #0 PREEMPT(full) [ 1329.034856][ T2069] Tainted: [L]=SOFTLOCKUP [ 1329.034862][ T2069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1329.034872][ T2069] Call Trace: [ 1329.034877][ T2069] [ 1329.034884][ T2069] dump_stack_lvl+0x100/0x190 [ 1329.034909][ T2069] should_fail_ex.cold+0x5/0xa [ 1329.034926][ T2069] get_futex_key+0x1d2/0x1620 [ 1329.034953][ T2069] ? __pfx_get_futex_key+0x10/0x10 [ 1329.034981][ T2069] futex_wait_setup+0x81/0x500 [ 1329.035004][ T2069] __futex_wait+0x19f/0x300 [ 1329.035024][ T2069] ? __pfx___futex_wait+0x10/0x10 [ 1329.035040][ T2069] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1329.035060][ T2069] ? lockdep_hardirqs_on+0x78/0x100 [ 1329.035083][ T2069] ? __pfx_futex_wake_mark+0x10/0x10 [ 1329.035103][ T2069] ? futex_hash+0x2c5/0x380 [ 1329.035129][ T2069] futex_wait+0xed/0x380 [ 1329.035147][ T2069] ? __pfx_futex_wait+0x10/0x10 [ 1329.035169][ T2069] ? __lock_acquire+0x4a5/0x2630 [ 1329.035188][ T2069] do_futex+0x1ef/0x350 [ 1329.035203][ T2069] ? __pfx_do_futex+0x10/0x10 [ 1329.035218][ T2069] ? find_held_lock+0x2b/0x80 [ 1329.035239][ T2069] __x64_sys_futex+0x34f/0x4d0 [ 1329.035255][ T2069] ? __fget_files+0x21f/0x3d0 [ 1329.035269][ T2069] ? __pfx___x64_sys_futex+0x10/0x10 [ 1329.035286][ T2069] ? fdget+0x18b/0x210 [ 1329.035303][ T2069] do_syscall_64+0x106/0xf80 [ 1329.035324][ T2069] ? clear_bhb_loop+0x40/0x90 [ 1329.035341][ T2069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1329.035356][ T2069] RIP: 0033:0x7f1711b9bf79 [ 1329.035369][ T2069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1329.035384][ T2069] RSP: 002b:00007f1712a190e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1329.035399][ T2069] RAX: ffffffffffffffda RBX: 00007f1711e16098 RCX: 00007f1711b9bf79 [ 1329.035410][ T2069] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1711e16098 [ 1329.035419][ T2069] RBP: 00007f1711e16090 R08: 0000000000000000 R09: 0000000000000000 [ 1329.035428][ T2069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1329.035437][ T2069] R13: 00007f1711e16128 R14: 00007ffead0d5d50 R15: 00007ffead0d5e38 [ 1329.035456][ T2069] [ 1329.717082][ T2072] FAULT_INJECTION: forcing a failure. [ 1329.717082][ T2072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1329.775558][ T2072] CPU: 0 UID: 0 PID: 2072 Comm: syz.0.4820 Tainted: G L syzkaller #0 PREEMPT(full) [ 1329.775592][ T2072] Tainted: [L]=SOFTLOCKUP [ 1329.775598][ T2072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1329.775608][ T2072] Call Trace: [ 1329.775614][ T2072] [ 1329.775620][ T2072] dump_stack_lvl+0x100/0x190 [ 1329.775647][ T2072] should_fail_ex.cold+0x5/0xa [ 1329.775665][ T2072] _copy_to_user+0x32/0xd0 [ 1329.775683][ T2072] rng_dev_read+0x223/0x910 [ 1329.775704][ T2072] ? __pfx_virtio_read+0x10/0x10 [ 1329.775727][ T2072] ? __pfx_rng_dev_read+0x10/0x10 [ 1329.775746][ T2072] ? common_file_perm+0x1ab/0x4f0 [ 1329.775764][ T2072] ? bpf_lsm_file_permission+0x9/0x10 [ 1329.775781][ T2072] ? security_file_permission+0x76/0x210 [ 1329.775799][ T2072] ? rw_verify_area+0xce/0x6d0 [ 1329.775820][ T2072] ? __pfx_rng_dev_read+0x10/0x10 [ 1329.775841][ T2072] vfs_read+0x1e4/0xb30 [ 1329.775857][ T2072] ? __pfx_vfs_read+0x10/0x10 [ 1329.775870][ T2072] ? find_held_lock+0x2b/0x80 [ 1329.775889][ T2072] ? __fget_files+0x215/0x3d0 [ 1329.775904][ T2072] ? __fget_files+0x215/0x3d0 [ 1329.775921][ T2072] ? __fget_files+0x21f/0x3d0 [ 1329.775941][ T2072] ksys_read+0x12a/0x250 [ 1329.775955][ T2072] ? __pfx_ksys_read+0x10/0x10 [ 1329.775974][ T2072] do_syscall_64+0x106/0xf80 [ 1329.775996][ T2072] ? clear_bhb_loop+0x40/0x90 [ 1329.776013][ T2072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1329.776028][ T2072] RIP: 0033:0x7f20aad9bf79 [ 1329.776041][ T2072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1329.776056][ T2072] RSP: 002b:00007f20abc6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1329.776070][ T2072] RAX: ffffffffffffffda RBX: 00007f20ab015fa0 RCX: 00007f20aad9bf79 [ 1329.776080][ T2072] RDX: 00000000fffffe82 RSI: 0000200000000040 RDI: 0000000000000009 [ 1329.776090][ T2072] RBP: 00007f20aae327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1329.776099][ T2072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1329.776107][ T2072] R13: 00007f20ab016038 R14: 00007f20ab015fa0 R15: 00007ffd473d31e8 [ 1329.776127][ T2072] [ 1330.432981][ T2085] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1330.630928][ T2112] FAULT_INJECTION: forcing a failure. [ 1330.630928][ T2112] name failslab, interval 1, probability 393216, space 0, times 0 [ 1330.732995][ T2112] CPU: 0 UID: 0 PID: 2112 Comm: syz.8.4823 Tainted: G L syzkaller #0 PREEMPT(full) [ 1330.733024][ T2112] Tainted: [L]=SOFTLOCKUP [ 1330.733030][ T2112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1330.733040][ T2112] Call Trace: [ 1330.733045][ T2112] [ 1330.733052][ T2112] dump_stack_lvl+0x100/0x190 [ 1330.733079][ T2112] should_fail_ex.cold+0x5/0xa [ 1330.733098][ T2112] should_failslab+0xc2/0x120 [ 1330.733116][ T2112] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1330.733139][ T2112] ? subflow_create_ctx+0x9b/0x2e0 [ 1330.733166][ T2112] subflow_create_ctx+0x9b/0x2e0 [ 1330.733189][ T2112] subflow_ulp_init+0xc3/0x4f0 [ 1330.733212][ T2112] tcp_set_ulp+0x32e/0x7f0 [ 1330.733228][ T2112] mptcp_subflow_create_socket+0x385/0xa30 [ 1330.733246][ T2112] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 1330.733268][ T2112] __mptcp_nmpc_sk+0x17f/0x870 [ 1330.733286][ T2112] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 1330.733308][ T2112] ? __local_bh_enable_ip+0x9e/0x120 [ 1330.733333][ T2112] mptcp_listen+0x135/0x4c0 [ 1330.733352][ T2112] ? __pfx_mptcp_listen+0x10/0x10 [ 1330.733372][ T2112] ? apparmor_socket_listen+0xf2/0x1a0 [ 1330.733395][ T2112] __sys_listen_socket+0x108/0x150 [ 1330.733414][ T2112] __sys_listen+0xa7/0x130 [ 1330.733432][ T2112] __x64_sys_listen+0x53/0x80 [ 1330.733451][ T2112] do_syscall_64+0x106/0xf80 [ 1330.733472][ T2112] ? clear_bhb_loop+0x40/0x90 [ 1330.733490][ T2112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1330.733512][ T2112] RIP: 0033:0x7fa467b9bf79 [ 1330.733526][ T2112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1330.733541][ T2112] RSP: 002b:00007fa468b3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 1330.733557][ T2112] RAX: ffffffffffffffda RBX: 00007fa467e15fa0 RCX: 00007fa467b9bf79 [ 1330.733567][ T2112] RDX: 0000000000000000 RSI: 0000000000000081 RDI: 0000000000000003 [ 1330.733576][ T2112] RBP: 00007fa467c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1330.733586][ T2112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1330.733596][ T2112] R13: 00007fa467e16038 R14: 00007fa467e15fa0 R15: 00007ffed3ed4dd8 [ 1330.733616][ T2112] [ 1333.553902][ T2236] FAULT_INJECTION: forcing a failure. [ 1333.553902][ T2236] name failslab, interval 1, probability 393216, space 0, times 0 [ 1333.677564][ T2236] CPU: 0 UID: 0 PID: 2236 Comm: syz.3.4837 Tainted: G L syzkaller #0 PREEMPT(full) [ 1333.677592][ T2236] Tainted: [L]=SOFTLOCKUP [ 1333.677598][ T2236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1333.677608][ T2236] Call Trace: [ 1333.677614][ T2236] [ 1333.677620][ T2236] dump_stack_lvl+0x100/0x190 [ 1333.677646][ T2236] should_fail_ex.cold+0x5/0xa [ 1333.677664][ T2236] should_failslab+0xc2/0x120 [ 1333.677682][ T2236] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1333.677703][ T2236] ? subflow_create_ctx+0x9b/0x2e0 [ 1333.677730][ T2236] subflow_create_ctx+0x9b/0x2e0 [ 1333.677753][ T2236] subflow_ulp_init+0xc3/0x4f0 [ 1333.677776][ T2236] tcp_set_ulp+0x32e/0x7f0 [ 1333.677793][ T2236] mptcp_subflow_create_socket+0x385/0xa30 [ 1333.677811][ T2236] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 1333.677833][ T2236] __mptcp_nmpc_sk+0x17f/0x870 [ 1333.677851][ T2236] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 1333.677870][ T2236] ? __local_bh_enable_ip+0x9e/0x120 [ 1333.677895][ T2236] mptcp_listen+0x135/0x4c0 [ 1333.677915][ T2236] ? __pfx_mptcp_listen+0x10/0x10 [ 1333.677934][ T2236] ? apparmor_socket_listen+0xf2/0x1a0 [ 1333.677958][ T2236] __sys_listen_socket+0x108/0x150 [ 1333.677977][ T2236] __sys_listen+0xa7/0x130 [ 1333.677995][ T2236] __x64_sys_listen+0x53/0x80 [ 1333.678012][ T2236] do_syscall_64+0x106/0xf80 [ 1333.678033][ T2236] ? clear_bhb_loop+0x40/0x90 [ 1333.678051][ T2236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1333.678065][ T2236] RIP: 0033:0x7f1711b9bf79 [ 1333.678078][ T2236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1333.678092][ T2236] RSP: 002b:00007f1712a3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 1333.678107][ T2236] RAX: ffffffffffffffda RBX: 00007f1711e15fa0 RCX: 00007f1711b9bf79 [ 1333.678117][ T2236] RDX: 0000000000000000 RSI: 0000000000000081 RDI: 0000000000000003 [ 1333.678127][ T2236] RBP: 00007f1711c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1333.678136][ T2236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1333.678144][ T2236] R13: 00007f1711e16038 R14: 00007f1711e15fa0 R15: 00007ffead0d5e38 [ 1333.678164][ T2236] [ 1334.298508][ T2253] mkiss: ax0: crc mode is auto. [ 1336.370511][ T2399] FAULT_INJECTION: forcing a failure. [ 1336.370511][ T2399] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1336.447025][ T2399] CPU: 0 UID: 0 PID: 2399 Comm: syz.3.4844 Tainted: G L syzkaller #0 PREEMPT(full) [ 1336.447052][ T2399] Tainted: [L]=SOFTLOCKUP [ 1336.447057][ T2399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1336.447066][ T2399] Call Trace: [ 1336.447072][ T2399] [ 1336.447078][ T2399] dump_stack_lvl+0x100/0x190 [ 1336.447102][ T2399] should_fail_ex.cold+0x5/0xa [ 1336.447119][ T2399] get_futex_key+0x1d2/0x1620 [ 1336.447144][ T2399] ? __pfx_get_futex_key+0x10/0x10 [ 1336.447165][ T2399] ? lock_acquire+0x17c/0x330 [ 1336.447185][ T2399] futex_wake+0xea/0x530 [ 1336.447204][ T2399] ? __pfx_futex_wake+0x10/0x10 [ 1336.447221][ T2399] ? exit_mm_release+0x19/0x30 [ 1336.447241][ T2399] do_futex+0x32b/0x350 [ 1336.447256][ T2399] ? __pfx_do_futex+0x10/0x10 [ 1336.447268][ T2399] ? __might_fault+0xc5/0x140 [ 1336.447287][ T2399] mm_release+0x24a/0x2f0 [ 1336.447308][ T2399] do_exit+0x675/0x2a30 [ 1336.447327][ T2399] ? __pfx_do_exit+0x10/0x10 [ 1336.447342][ T2399] ? do_raw_spin_lock+0x128/0x260 [ 1336.447359][ T2399] ? find_held_lock+0x2b/0x80 [ 1336.447378][ T2399] ? get_signal+0x7e0/0x21e0 [ 1336.447401][ T2399] do_group_exit+0xd5/0x2a0 [ 1336.447418][ T2399] get_signal+0x1ec7/0x21e0 [ 1336.447442][ T2399] ? __lock_acquire+0x4a5/0x2630 [ 1336.447456][ T2399] ? ksys_write+0x190/0x250 [ 1336.447471][ T2399] ? __pfx_get_signal+0x10/0x10 [ 1336.447493][ T2399] ? do_futex+0x192/0x350 [ 1336.447509][ T2399] arch_do_signal_or_restart+0x91/0x770 [ 1336.447524][ T2399] ? find_held_lock+0x2b/0x80 [ 1336.447543][ T2399] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1336.447563][ T2399] ? __pfx___x64_sys_futex+0x10/0x10 [ 1336.447577][ T2399] ? xfd_validate_state+0x129/0x190 [ 1336.447598][ T2399] exit_to_user_mode_loop+0x86/0x4a0 [ 1336.447613][ T2399] ? rcu_is_watching+0x12/0xc0 [ 1336.447632][ T2399] do_syscall_64+0x668/0xf80 [ 1336.447653][ T2399] ? clear_bhb_loop+0x40/0x90 [ 1336.447670][ T2399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1336.447686][ T2399] RIP: 0033:0x7f1711b9bf79 [ 1336.447698][ T2399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1336.447713][ T2399] RSP: 002b:00007f1712a3a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1336.447728][ T2399] RAX: fffffffffffffe00 RBX: 00007f1711e15fa8 RCX: 00007f1711b9bf79 [ 1336.447738][ T2399] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1711e15fa8 [ 1336.447747][ T2399] RBP: 00007f1711e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1336.447756][ T2399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1336.447765][ T2399] R13: 00007f1711e16038 R14: 00007ffead0d5d50 R15: 00007ffead0d5e38 [ 1336.447784][ T2399] [ 1339.319920][ T2583] FAULT_INJECTION: forcing a failure. [ 1339.319920][ T2583] name failslab, interval 1, probability 393216, space 0, times 0 [ 1339.587120][ T2583] CPU: 0 UID: 0 PID: 2583 Comm: syz.4.4854 Tainted: G L syzkaller #0 PREEMPT(full) [ 1339.587149][ T2583] Tainted: [L]=SOFTLOCKUP [ 1339.587162][ T2583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1339.587172][ T2583] Call Trace: [ 1339.587177][ T2583] [ 1339.587184][ T2583] dump_stack_lvl+0x100/0x190 [ 1339.587208][ T2583] should_fail_ex.cold+0x5/0xa [ 1339.587226][ T2583] should_failslab+0xc2/0x120 [ 1339.587244][ T2583] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1339.587266][ T2583] ? alloc_super+0x52/0xd20 [ 1339.587292][ T2583] alloc_super+0x52/0xd20 [ 1339.587316][ T2583] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1339.587336][ T2583] sget_fc+0x117/0xc70 [ 1339.587349][ T2583] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1339.587371][ T2583] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1339.587391][ T2583] get_tree_nodev+0x28/0x190 [ 1339.587405][ T2583] mqueue_get_tree+0xf1/0x130 [ 1339.587429][ T2583] vfs_get_tree+0x92/0x320 [ 1339.587450][ T2583] fc_mount_longterm+0x1a/0x270 [ 1339.587477][ T2583] mq_init_ns+0x482/0x820 [ 1339.587492][ T2583] copy_ipcs+0x3dd/0x7e0 [ 1339.587507][ T2583] create_new_namespaces+0x20a/0xac0 [ 1339.587529][ T2583] ? security_capable+0x80/0x260 [ 1339.587552][ T2583] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1339.587574][ T2583] ksys_unshare+0x455/0xab0 [ 1339.587591][ T2583] ? __pfx_ksys_unshare+0x10/0x10 [ 1339.587611][ T2583] ? xfd_validate_state+0x129/0x190 [ 1339.587635][ T2583] __x64_sys_unshare+0x31/0x40 [ 1339.587651][ T2583] do_syscall_64+0x106/0xf80 [ 1339.587673][ T2583] ? clear_bhb_loop+0x40/0x90 [ 1339.587690][ T2583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.587705][ T2583] RIP: 0033:0x7f54df39bf79 [ 1339.587718][ T2583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1339.587733][ T2583] RSP: 002b:00007f54e01be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1339.587748][ T2583] RAX: ffffffffffffffda RBX: 00007f54df616090 RCX: 00007f54df39bf79 [ 1339.587758][ T2583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 1339.587767][ T2583] RBP: 00007f54df4327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1339.587776][ T2583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1339.587785][ T2583] R13: 00007f54df616128 R14: 00007f54df616090 R15: 00007ffdf79ae018 [ 1339.587805][ T2583] [ 1339.824772][ T2613] FAULT_INJECTION: forcing a failure. [ 1339.824772][ T2613] name failslab, interval 1, probability 393216, space 0, times 0 [ 1339.838858][ T2613] CPU: 0 UID: 0 PID: 2613 Comm: syz.0.4860 Tainted: G L syzkaller #0 PREEMPT(full) [ 1339.838886][ T2613] Tainted: [L]=SOFTLOCKUP [ 1339.838892][ T2613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1339.838901][ T2613] Call Trace: [ 1339.838907][ T2613] [ 1339.838913][ T2613] dump_stack_lvl+0x100/0x190 [ 1339.838938][ T2613] should_fail_ex.cold+0x5/0xa [ 1339.838957][ T2613] should_failslab+0xc2/0x120 [ 1339.838975][ T2613] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1339.838990][ T2613] ? __d_alloc+0x34/0xa80 [ 1339.839010][ T2613] __d_alloc+0x34/0xa80 [ 1339.839029][ T2613] d_alloc_pseudo+0x1c/0xc0 [ 1339.839051][ T2613] alloc_file_pseudo+0xcf/0x230 [ 1339.839072][ T2613] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1339.839092][ T2613] ? alloc_fd+0x476/0x790 [ 1339.839110][ T2613] sock_alloc_file+0x50/0x210 [ 1339.839133][ T2613] __sys_socket+0x1c0/0x260 [ 1339.839148][ T2613] ? fput+0x79/0x100 [ 1339.839165][ T2613] ? __pfx___sys_socket+0x10/0x10 [ 1339.839181][ T2613] ? xfd_validate_state+0x129/0x190 [ 1339.839204][ T2613] __x64_sys_socket+0x72/0xb0 [ 1339.839221][ T2613] ? lockdep_hardirqs_on+0x78/0x100 [ 1339.839241][ T2613] do_syscall_64+0x106/0xf80 [ 1339.839262][ T2613] ? clear_bhb_loop+0x40/0x90 [ 1339.839279][ T2613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.839295][ T2613] RIP: 0033:0x7f20aad9bf79 [ 1339.839309][ T2613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1339.839324][ T2613] RSP: 002b:00007f20abc6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1339.839338][ T2613] RAX: ffffffffffffffda RBX: 00007f20ab015fa0 RCX: 00007f20aad9bf79 [ 1339.839349][ T2613] RDX: 0000000000000004 RSI: 0000000000000002 RDI: 0000000000000010 [ 1339.839357][ T2613] RBP: 00007f20aae327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1339.839366][ T2613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1339.839375][ T2613] R13: 00007f20ab016038 R14: 00007f20ab015fa0 R15: 00007ffd473d31e8 [ 1339.839394][ T2613] [ 1340.214088][ T2615] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 1340.631153][ T2650] FAULT_INJECTION: forcing a failure. [ 1340.631153][ T2650] name failslab, interval 1, probability 393216, space 0, times 0 [ 1340.653353][ T2650] CPU: 0 UID: 0 PID: 2650 Comm: syz.3.4866 Tainted: G L syzkaller #0 PREEMPT(full) [ 1340.653381][ T2650] Tainted: [L]=SOFTLOCKUP [ 1340.653387][ T2650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1340.653396][ T2650] Call Trace: [ 1340.653403][ T2650] [ 1340.653409][ T2650] dump_stack_lvl+0x100/0x190 [ 1340.653435][ T2650] should_fail_ex.cold+0x5/0xa [ 1340.653453][ T2650] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1340.653481][ T2650] should_failslab+0xc2/0x120 [ 1340.653500][ T2650] __kmalloc_noprof+0xe0/0x850 [ 1340.653519][ T2650] tomoyo_realpath_from_path+0xb6/0x690 [ 1340.653542][ T2650] tomoyo_check_open_permission+0x2af/0x3c0 [ 1340.653562][ T2650] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1340.653596][ T2650] ? do_raw_spin_lock+0x128/0x260 [ 1340.653616][ T2650] ? path_get+0x61/0x80 [ 1340.653636][ T2650] tomoyo_file_open+0x6b/0x90 [ 1340.653657][ T2650] security_file_open+0xb5/0x1e0 [ 1340.653674][ T2650] do_dentry_open+0x5aa/0x1660 [ 1340.653691][ T2650] ? security_inode_permission+0xbf/0x250 [ 1340.653710][ T2650] vfs_open+0x82/0x3f0 [ 1340.653731][ T2650] path_openat+0x208c/0x31a0 [ 1340.653754][ T2650] ? __pfx_path_openat+0x10/0x10 [ 1340.653777][ T2650] do_file_open+0x20e/0x430 [ 1340.653795][ T2650] ? __pfx_do_file_open+0x10/0x10 [ 1340.653824][ T2650] ? alloc_fd+0x476/0x790 [ 1340.653842][ T2650] ? do_getname+0x191/0x390 [ 1340.653862][ T2650] do_sys_openat2+0x10d/0x1e0 [ 1340.653882][ T2650] ? __pfx_do_sys_openat2+0x10/0x10 [ 1340.653909][ T2650] __x64_sys_openat+0x12d/0x210 [ 1340.653930][ T2650] ? __pfx___x64_sys_openat+0x10/0x10 [ 1340.653949][ T2650] ? xfd_validate_state+0x129/0x190 [ 1340.653974][ T2650] do_syscall_64+0x106/0xf80 [ 1340.653995][ T2650] ? clear_bhb_loop+0x40/0x90 [ 1340.654013][ T2650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1340.654029][ T2650] RIP: 0033:0x7f1711b9bf79 [ 1340.654042][ T2650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1340.654057][ T2650] RSP: 002b:00007f1712a3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1340.654072][ T2650] RAX: ffffffffffffffda RBX: 00007f1711e15fa0 RCX: 00007f1711b9bf79 [ 1340.654082][ T2650] RDX: 0000000000000802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1340.654092][ T2650] RBP: 00007f1711c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1340.654101][ T2650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1340.654110][ T2650] R13: 00007f1711e16038 R14: 00007f1711e15fa0 R15: 00007ffead0d5e38 [ 1340.654131][ T2650] [ 1340.654166][ T2650] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1342.018337][ T2761] program syz.3.4870 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1342.047233][ T2761] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1342.145390][ T2559] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1342.193491][ T2559] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1342.257214][ T2559] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1342.310837][ T2559] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1342.336310][ T2559] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1342.413351][ T2559] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1342.440593][ T2559] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1342.474774][ T2559] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1342.569639][ T2559] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1342.643986][ T2559] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1342.761773][ T2559] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1342.955769][ T2801] FAULT_INJECTION: forcing a failure. [ 1342.955769][ T2801] name failslab, interval 1, probability 393216, space 0, times 0 [ 1343.038916][ T2801] CPU: 0 UID: 0 PID: 2801 Comm: syz.3.4873 Tainted: G L syzkaller #0 PREEMPT(full) [ 1343.038941][ T2801] Tainted: [L]=SOFTLOCKUP [ 1343.038947][ T2801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1343.038956][ T2801] Call Trace: [ 1343.038961][ T2801] [ 1343.038967][ T2801] dump_stack_lvl+0x100/0x190 [ 1343.038992][ T2801] should_fail_ex.cold+0x5/0xa [ 1343.039009][ T2801] should_failslab+0xc2/0x120 [ 1343.039027][ T2801] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1343.039042][ T2801] ? do_getname+0x35/0x390 [ 1343.039064][ T2801] do_getname+0x35/0x390 [ 1343.039084][ T2801] do_sys_openat2+0xc5/0x1e0 [ 1343.039105][ T2801] ? __pfx_do_sys_openat2+0x10/0x10 [ 1343.039131][ T2801] __x64_sys_openat+0x12d/0x210 [ 1343.039151][ T2801] ? __pfx___x64_sys_openat+0x10/0x10 [ 1343.039171][ T2801] ? xfd_validate_state+0x129/0x190 [ 1343.039195][ T2801] do_syscall_64+0x106/0xf80 [ 1343.039216][ T2801] ? clear_bhb_loop+0x40/0x90 [ 1343.039233][ T2801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1343.039248][ T2801] RIP: 0033:0x7f1711b9bf79 [ 1343.039265][ T2801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1343.039280][ T2801] RSP: 002b:00007f1712a3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1343.039295][ T2801] RAX: ffffffffffffffda RBX: 00007f1711e15fa0 RCX: 00007f1711b9bf79 [ 1343.039306][ T2801] RDX: 0000000000000301 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1343.039315][ T2801] RBP: 00007f1711c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1343.039324][ T2801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1343.039333][ T2801] R13: 00007f1711e16038 R14: 00007f1711e15fa0 R15: 00007ffead0d5e38 [ 1343.039353][ T2801] [ 1343.509896][T15293] Bluetooth: hci1: command 0x0c1a tx timeout [ 1344.109064][ T29] audit: type=1800 audit(2147484230.601:170): pid=2895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4881" name="version" dev="configfs" ino=126146 res=0 errno=0 [ 1344.132385][ T2891] FAULT_INJECTION: forcing a failure. [ 1344.132385][ T2891] name failslab, interval 1, probability 393216, space 0, times 0 [ 1344.145458][ T2891] CPU: 0 UID: 0 PID: 2891 Comm: syz.0.4879 Tainted: G L syzkaller #0 PREEMPT(full) [ 1344.145483][ T2891] Tainted: [L]=SOFTLOCKUP [ 1344.145488][ T2891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1344.145498][ T2891] Call Trace: [ 1344.145504][ T2891] [ 1344.145510][ T2891] dump_stack_lvl+0x100/0x190 [ 1344.145535][ T2891] should_fail_ex.cold+0x5/0xa [ 1344.145553][ T2891] should_failslab+0xc2/0x120 [ 1344.145571][ T2891] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1344.145586][ T2891] ? inet_bind_bucket_create+0x2d/0x280 [ 1344.145605][ T2891] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1344.145626][ T2891] inet_bind_bucket_create+0x2d/0x280 [ 1344.145646][ T2891] inet_csk_get_port+0x163e/0x28e0 [ 1344.145677][ T2891] ? trace_inet_sock_set_state+0x76/0x1f0 [ 1344.145694][ T2891] ? __pfx_inet_csk_get_port+0x10/0x10 [ 1344.145717][ T2891] inet_csk_listen_start+0x205/0x450 [ 1344.145742][ T2891] __inet_listen_sk+0x20f/0x510 [ 1344.145759][ T2891] ? __pfx___inet_listen_sk+0x10/0x10 [ 1344.145776][ T2891] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1344.145798][ T2891] ? __local_bh_enable_ip+0x9e/0x120 [ 1344.145822][ T2891] mptcp_listen+0x1fa/0x4c0 [ 1344.145842][ T2891] ? __pfx_mptcp_listen+0x10/0x10 [ 1344.145861][ T2891] ? apparmor_socket_listen+0xf2/0x1a0 [ 1344.145885][ T2891] __sys_listen_socket+0x108/0x150 [ 1344.145904][ T2891] __sys_listen+0xa7/0x130 [ 1344.145922][ T2891] __x64_sys_listen+0x53/0x80 [ 1344.145940][ T2891] do_syscall_64+0x106/0xf80 [ 1344.145961][ T2891] ? clear_bhb_loop+0x40/0x90 [ 1344.145979][ T2891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1344.145994][ T2891] RIP: 0033:0x7f20aad9bf79 [ 1344.146007][ T2891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1344.146022][ T2891] RSP: 002b:00007f20abc6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 1344.146037][ T2891] RAX: ffffffffffffffda RBX: 00007f20ab015fa0 RCX: 00007f20aad9bf79 [ 1344.146047][ T2891] RDX: 0000000000000000 RSI: 0000000000000081 RDI: 0000000000000003 [ 1344.146056][ T2891] RBP: 00007f20aae327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1344.146066][ T2891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1344.146075][ T2891] R13: 00007f20ab016038 R14: 00007f20ab015fa0 R15: 00007ffd473d31e8 [ 1344.146096][ T2891] [ 1344.683164][T23030] Bluetooth: hci3: command 0x0406 tx timeout [ 1344.689229][T23030] Bluetooth: hci6: command 0x0406 tx timeout [ 1344.695265][T23030] Bluetooth: hci4: command 0x0c1a tx timeout [ 1344.707255][T23030] Bluetooth: hci2: command 0x0c1a tx timeout [ 1344.989307][T15293] Bluetooth: hci4: unexpected event 0x1c length: 725 > 5 [ 1345.048795][ T2918] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1345.304590][ T2925] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1346.779083][T15293] Bluetooth: hci2: command 0x0c1a tx timeout [ 1346.795074][T23030] Bluetooth: hci4: command 0x0c1a tx timeout [ 1346.801140][T23030] Bluetooth: hci6: command 0x0406 tx timeout [ 1346.809669][T23030] Bluetooth: hci3: command 0x0406 tx timeout [ 1347.330805][ T3033] FAULT_INJECTION: forcing a failure. [ 1347.330805][ T3033] name failslab, interval 1, probability 393216, space 0, times 0 [ 1347.475947][ T3031] bond0: invalid ARP target specified [ 1347.506791][ T3033] CPU: 0 UID: 0 PID: 3033 Comm: syz.8.4897 Tainted: G L syzkaller #0 PREEMPT(full) [ 1347.506823][ T3033] Tainted: [L]=SOFTLOCKUP [ 1347.506829][ T3033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1347.506839][ T3033] Call Trace: [ 1347.506844][ T3033] [ 1347.506851][ T3033] dump_stack_lvl+0x100/0x190 [ 1347.506876][ T3033] should_fail_ex.cold+0x5/0xa [ 1347.506893][ T3033] should_failslab+0xc2/0x120 [ 1347.506911][ T3033] __kmalloc_cache_node_noprof+0x7d/0x770 [ 1347.506928][ T3033] ? is_bpf_text_address+0x8a/0x1a0 [ 1347.506945][ T3033] ? __get_vm_area_node+0x101/0x330 [ 1347.506962][ T3033] ? is_bpf_text_address+0x8a/0x1a0 [ 1347.506982][ T3033] __get_vm_area_node+0x101/0x330 [ 1347.507003][ T3033] __vmalloc_node_range_noprof+0x213/0x1530 [ 1347.507025][ T3033] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 1347.507046][ T3033] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 1347.507063][ T3033] ? stack_trace_save+0x8e/0xc0 [ 1347.507084][ T3033] ? stack_depot_save_flags+0x27/0x9d0 [ 1347.507102][ T3033] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1347.507125][ T3033] ? kasan_save_stack+0x3f/0x50 [ 1347.507138][ T3033] ? kasan_save_stack+0x30/0x50 [ 1347.507152][ T3033] ? kasan_save_track+0x14/0x30 [ 1347.507167][ T3033] ? do_seccomp+0x7ae/0x2740 [ 1347.507181][ T3033] ? do_syscall_64+0x106/0xf80 [ 1347.507201][ T3033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.507219][ T3033] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 1347.507235][ T3033] __vmalloc_node_noprof+0xad/0xf0 [ 1347.507255][ T3033] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 1347.507273][ T3033] __vmalloc_noprof+0xa3/0x120 [ 1347.507293][ T3033] ? __pfx___vmalloc_noprof+0x10/0x10 [ 1347.507320][ T3033] bpf_prog_alloc_no_stats+0x58/0x640 [ 1347.507339][ T3033] bpf_prog_alloc+0x3b/0x200 [ 1347.507356][ T3033] bpf_prog_create_from_user+0xb4/0x2f0 [ 1347.507380][ T3033] ? __pfx_seccomp_check_filter+0x10/0x10 [ 1347.507404][ T3033] do_seccomp+0x7f7/0x2740 [ 1347.507426][ T3033] ? __pfx_do_seccomp+0x10/0x10 [ 1347.507442][ T3033] ? xfd_validate_state+0x129/0x190 [ 1347.507466][ T3033] do_syscall_64+0x106/0xf80 [ 1347.507486][ T3033] ? clear_bhb_loop+0x40/0x90 [ 1347.507503][ T3033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.507518][ T3033] RIP: 0033:0x7fa467b9bf79 [ 1347.507532][ T3033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1347.507546][ T3033] RSP: 002b:00007fa468b1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1347.507562][ T3033] RAX: ffffffffffffffda RBX: 00007fa467e16090 RCX: 00007fa467b9bf79 [ 1347.507572][ T3033] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000000000000001 [ 1347.507581][ T3033] RBP: 00007fa467c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1347.507590][ T3033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1347.507600][ T3033] R13: 00007fa467e16128 R14: 00007fa467e16090 R15: 00007ffed3ed4dd8 [ 1347.507620][ T3033] [ 1347.507629][ T3033] syz.8.4897: vmalloc error: size 32768, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1348.750667][ T3033] CPU: 0 UID: 0 PID: 3033 Comm: syz.8.4897 Tainted: G L syzkaller #0 PREEMPT(full) [ 1348.750694][ T3033] Tainted: [L]=SOFTLOCKUP [ 1348.750700][ T3033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1348.750709][ T3033] Call Trace: [ 1348.750715][ T3033] [ 1348.750721][ T3033] dump_stack_lvl+0x100/0x190 [ 1348.750749][ T3033] warn_alloc.cold+0x95/0x1c1 [ 1348.750775][ T3033] ? __pfx_warn_alloc+0x10/0x10 [ 1348.750789][ T3033] ? rcu_is_watching+0x12/0xc0 [ 1348.750808][ T3033] ? trace_kmalloc+0x83/0xb0 [ 1348.750824][ T3033] ? __kmalloc_cache_node_noprof+0x2d9/0x770 [ 1348.750843][ T3033] ? __kasan_kmalloc+0x8a/0xb0 [ 1348.750859][ T3033] ? __get_vm_area_node+0x208/0x330 [ 1348.750883][ T3033] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 1348.750914][ T3033] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 1348.750932][ T3033] ? stack_trace_save+0x8e/0xc0 [ 1348.750954][ T3033] ? stack_depot_save_flags+0x27/0x9d0 [ 1348.750972][ T3033] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1348.750995][ T3033] ? kasan_save_stack+0x3f/0x50 [ 1348.751009][ T3033] ? kasan_save_stack+0x30/0x50 [ 1348.751022][ T3033] ? kasan_save_track+0x14/0x30 [ 1348.751036][ T3033] ? do_seccomp+0x7ae/0x2740 [ 1348.751049][ T3033] ? do_syscall_64+0x106/0xf80 [ 1348.751070][ T3033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.751088][ T3033] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 1348.751104][ T3033] __vmalloc_node_noprof+0xad/0xf0 [ 1348.751125][ T3033] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 1348.751143][ T3033] __vmalloc_noprof+0xa3/0x120 [ 1348.751163][ T3033] ? __pfx___vmalloc_noprof+0x10/0x10 [ 1348.751190][ T3033] bpf_prog_alloc_no_stats+0x58/0x640 [ 1348.751209][ T3033] bpf_prog_alloc+0x3b/0x200 [ 1348.751226][ T3033] bpf_prog_create_from_user+0xb4/0x2f0 [ 1348.751250][ T3033] ? __pfx_seccomp_check_filter+0x10/0x10 [ 1348.751275][ T3033] do_seccomp+0x7f7/0x2740 [ 1348.751293][ T3033] ? __pfx_do_seccomp+0x10/0x10 [ 1348.751310][ T3033] ? xfd_validate_state+0x129/0x190 [ 1348.751335][ T3033] do_syscall_64+0x106/0xf80 [ 1348.751355][ T3033] ? clear_bhb_loop+0x40/0x90 [ 1348.751372][ T3033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.751387][ T3033] RIP: 0033:0x7fa467b9bf79 [ 1348.751400][ T3033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1348.751415][ T3033] RSP: 002b:00007fa468b1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1348.751431][ T3033] RAX: ffffffffffffffda RBX: 00007fa467e16090 RCX: 00007fa467b9bf79 [ 1348.751441][ T3033] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000000000000001 [ 1348.751450][ T3033] RBP: 00007fa467c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1348.751460][ T3033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1348.751469][ T3033] R13: 00007fa467e16128 R14: 00007fa467e16090 R15: 00007ffed3ed4dd8 [ 1348.751488][ T3033] [ 1349.041137][ T3033] Mem-Info: [ 1349.044815][ T3033] active_anon:32964 inactive_anon:29 isolated_anon:0 [ 1349.044815][ T3033] active_file:20941 inactive_file:33371 isolated_file:0 [ 1349.044815][ T3033] unevictable:768 dirty:316 writeback:0 [ 1349.044815][ T3033] slab_reclaimable:13582 slab_unreclaimable:112637 [ 1349.044815][ T3033] mapped:33735 shmem:10132 pagetables:2022 [ 1349.044815][ T3033] sec_pagetables:0 bounce:0 [ 1349.044815][ T3033] kernel_misc_reclaimable:0 [ 1349.044815][ T3033] free:1258818 free_pcp:10043 free_cma:0 [ 1349.091382][ T3033] Node 0 active_anon:131844kB inactive_anon:116kB active_file:83764kB inactive_file:133356kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98076kB dirty:1260kB writeback:0kB shmem:38992kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:61440kB kernel_stack:16064kB pagetables:7964kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1349.124918][ T3033] Node 1 active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:36864kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1349.155289][ T3033] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1349.186766][ T3033] lowmem_reserve[]: 0 2479 2480 2480 2480 [ 1349.193283][ T3033] Node 0 DMA32 free:1160604kB boost:0kB min:34316kB low:42892kB high:51468kB reserved_highatomic:0KB free_highatomic:0KB active_anon:131844kB inactive_anon:116kB active_file:83764kB inactive_file:133356kB unevictable:1536kB writepending:1260kB zspages:12kB present:3129332kB managed:2538784kB mlocked:0kB bounce:0kB free_pcp:40156kB local_pcp:40156kB free_cma:0kB [ 1349.227360][ T3033] lowmem_reserve[]: 0 0 1 1 1 [ 1349.232099][ T3033] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 1349.262179][ T3033] lowmem_reserve[]: 0 0 0 0 0 [ 1349.268118][ T3033] Node 1 Normal free:3859296kB boost:0kB min:55568kB low:69460kB high:83352kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:128kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1349.299994][ T3033] lowmem_reserve[]: 0 0 0 0 0 [ 1349.304689][ T3033] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1349.317667][ T3033] Node 0 DMA32: 7358*4kB (UME) 7808*8kB (UME) 5276*16kB (UME) 1629*32kB (UME) 743*64kB (UME) 617*128kB (UME) 627*256kB (UM) 460*512kB (UME) 122*1024kB (UM) 19*2048kB (UM) 60*4096kB (M) = 1160600kB [ 1349.348029][ T3033] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1349.373854][ T3033] Node 1 Normal: 10*4kB (UM) 9*8kB (UM) 15*16kB (UME) 18*32kB (UM) 5*64kB (U) 7*128kB (UM) 7*256kB (UME) 2*512kB (M) 2*1024kB (ME) 3*2048kB (ME) 939*4096kB (UM) = 3859296kB [ 1349.408622][ T3033] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1349.418379][ T3033] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1349.489986][ T3015] Bluetooth: hci2: command 0x0c1a tx timeout [ 1349.496059][ T3015] Bluetooth: hci4: command 0x0c1a tx timeout [ 1349.523138][ T3033] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1349.548802][ T3033] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1349.558086][ T3033] 64440 total pagecache pages [ 1349.573675][ T3033] 0 pages in swap cache [ 1349.577834][ T3033] Free swap = 124992kB [ 1349.597401][ T3033] Total swap = 124996kB [ 1349.608531][ T3033] 2097051 pages RAM [ 1349.618887][ T3033] 0 pages HighMem/MovableOnly [ 1349.627075][ T3033] 430400 pages reserved [ 1349.634261][ T3033] 0 pages cma reserved [ 1350.606065][ T3169] Â: entered promiscuous mode [ 1350.634316][ T3173] netlink: 'syz.0.4911': attribute type 2 has an invalid length. [ 1350.913560][ T3189] FAULT_INJECTION: forcing a failure. [ 1350.913560][ T3189] name failslab, interval 1, probability 393216, space 0, times 0 [ 1350.990644][ T3189] CPU: 0 UID: 0 PID: 3189 Comm: syz.0.4913 Tainted: G L syzkaller #0 PREEMPT(full) [ 1350.990672][ T3189] Tainted: [L]=SOFTLOCKUP [ 1350.990677][ T3189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1350.990687][ T3189] Call Trace: [ 1350.990693][ T3189] [ 1350.990699][ T3189] dump_stack_lvl+0x100/0x190 [ 1350.990724][ T3189] should_fail_ex.cold+0x5/0xa [ 1350.990741][ T3189] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1350.990760][ T3189] should_failslab+0xc2/0x120 [ 1350.990779][ T3189] __kmalloc_noprof+0xe0/0x850 [ 1350.990798][ T3189] tomoyo_realpath_from_path+0xb6/0x690 [ 1350.990821][ T3189] tomoyo_check_open_permission+0x2af/0x3c0 [ 1350.990837][ T3189] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1350.990874][ T3189] ? do_raw_spin_lock+0x128/0x260 [ 1350.990893][ T3189] ? path_get+0x61/0x80 [ 1350.990912][ T3189] tomoyo_file_open+0x6b/0x90 [ 1350.990933][ T3189] security_file_open+0xb5/0x1e0 [ 1350.990950][ T3189] do_dentry_open+0x5aa/0x1660 [ 1350.990967][ T3189] ? security_inode_permission+0xbf/0x250 [ 1350.990987][ T3189] vfs_open+0x82/0x3f0 [ 1350.991008][ T3189] path_openat+0x208c/0x31a0 [ 1350.991030][ T3189] ? __pfx_path_openat+0x10/0x10 [ 1350.991054][ T3189] do_file_open+0x20e/0x430 [ 1350.991071][ T3189] ? __pfx_do_file_open+0x10/0x10 [ 1350.991094][ T3189] ? __pfx_kfree_link+0x10/0x10 [ 1350.991120][ T3189] ? alloc_fd+0x476/0x790 [ 1350.991137][ T3189] ? do_getname+0x191/0x390 [ 1350.991157][ T3189] do_sys_openat2+0x10d/0x1e0 [ 1350.991178][ T3189] ? __pfx_do_sys_openat2+0x10/0x10 [ 1350.991205][ T3189] __x64_sys_openat+0x12d/0x210 [ 1350.991225][ T3189] ? __pfx___x64_sys_openat+0x10/0x10 [ 1350.991244][ T3189] ? xfd_validate_state+0x129/0x190 [ 1350.991269][ T3189] do_syscall_64+0x106/0xf80 [ 1350.991289][ T3189] ? clear_bhb_loop+0x40/0x90 [ 1350.991307][ T3189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.991322][ T3189] RIP: 0033:0x7f20aad9bf79 [ 1350.991335][ T3189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1350.991350][ T3189] RSP: 002b:00007f20abc6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1350.991366][ T3189] RAX: ffffffffffffffda RBX: 00007f20ab015fa0 RCX: 00007f20aad9bf79 [ 1350.991376][ T3189] RDX: 0000000000008800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1350.991386][ T3189] RBP: 00007f20aae327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1350.991396][ T3189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1350.991405][ T3189] R13: 00007f20ab016038 R14: 00007f20ab015fa0 R15: 00007ffd473d31e8 [ 1350.991426][ T3189] [ 1350.993185][ T3189] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1351.786097][ T3241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4917'. [ 1352.735888][ T3288] Invalid ELF header magic: != ELF [ 1355.580575][ T3456] bond0: option slaves: interface -Âô]àæ©=,Dço does not exist! [ 1356.261172][ T3533] Â: entered promiscuous mode [ 1356.983247][ T3572] FAULT_INJECTION: forcing a failure. [ 1356.983247][ T3572] name failslab, interval 1, probability 393216, space 0, times 0 [ 1357.064902][ T3572] CPU: 0 UID: 0 PID: 3572 Comm: syz.3.4942 Tainted: G L syzkaller #0 PREEMPT(full) [ 1357.064930][ T3572] Tainted: [L]=SOFTLOCKUP [ 1357.064936][ T3572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1357.064946][ T3572] Call Trace: [ 1357.064951][ T3572] [ 1357.064958][ T3572] dump_stack_lvl+0x100/0x190 [ 1357.064984][ T3572] should_fail_ex.cold+0x5/0xa [ 1357.065001][ T3572] ? sk_prot_alloc+0x10b/0x2a0 [ 1357.065015][ T3572] should_failslab+0xc2/0x120 [ 1357.065034][ T3572] __kmalloc_noprof+0xe0/0x850 [ 1357.065054][ T3572] sk_prot_alloc+0x10b/0x2a0 [ 1357.065070][ T3572] sk_alloc+0x36/0xe80 [ 1357.065091][ T3572] tap_open+0x2ed/0x1180 [ 1357.065115][ T3572] ? __pfx_tap_open+0x10/0x10 [ 1357.065135][ T3572] chrdev_open+0x234/0x6a0 [ 1357.065152][ T3572] ? __pfx_apparmor_file_open+0x10/0x10 [ 1357.065175][ T3572] ? __pfx_chrdev_open+0x10/0x10 [ 1357.065192][ T3572] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1357.065212][ T3572] do_dentry_open+0x6d8/0x1660 [ 1357.065228][ T3572] ? __pfx_chrdev_open+0x10/0x10 [ 1357.065249][ T3572] vfs_open+0x82/0x3f0 [ 1357.065270][ T3572] path_openat+0x208c/0x31a0 [ 1357.065293][ T3572] ? __pfx_path_openat+0x10/0x10 [ 1357.065319][ T3572] do_file_open+0x20e/0x430 [ 1357.065336][ T3572] ? __pfx_do_file_open+0x10/0x10 [ 1357.065367][ T3572] ? alloc_fd+0x476/0x790 [ 1357.065384][ T3572] ? do_getname+0x191/0x390 [ 1357.065404][ T3572] do_sys_openat2+0x10d/0x1e0 [ 1357.065424][ T3572] ? __pfx_do_sys_openat2+0x10/0x10 [ 1357.065445][ T3572] ? find_held_lock+0x2b/0x80 [ 1357.065464][ T3572] ? __fget_files+0x215/0x3d0 [ 1357.065483][ T3572] __x64_sys_openat+0x12d/0x210 [ 1357.065503][ T3572] ? __pfx___x64_sys_openat+0x10/0x10 [ 1357.065523][ T3572] ? xfd_validate_state+0x129/0x190 [ 1357.065547][ T3572] do_syscall_64+0x106/0xf80 [ 1357.065568][ T3572] ? clear_bhb_loop+0x40/0x90 [ 1357.065586][ T3572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.065601][ T3572] RIP: 0033:0x7f1711b9bf79 [ 1357.065614][ T3572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1357.065629][ T3572] RSP: 002b:00007f1712a3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1357.065645][ T3572] RAX: ffffffffffffffda RBX: 00007f1711e15fa0 RCX: 00007f1711b9bf79 [ 1357.065655][ T3572] RDX: 0000000000000801 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1357.065664][ T3572] RBP: 00007f1711c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1357.065673][ T3572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1357.065682][ T3572] R13: 00007f1711e16038 R14: 00007f1711e15fa0 R15: 00007ffead0d5e38 [ 1357.065701][ T3572] [ 1360.976376][ T3714] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1361.009563][ T3714] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1361.042785][ T3714] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1361.090984][ T3714] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1361.132245][ T3714] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1361.401727][ T3752] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4961'. [ 1362.271614][ T3781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4966'. [ 1362.778763][T24281] Bluetooth: hci1: command 0x0c1a tx timeout [ 1363.030462][T24281] Bluetooth: hci6: command 0x0406 tx timeout [ 1363.036469][T24281] Bluetooth: hci3: command 0x0406 tx timeout [ 1363.101639][T24281] Bluetooth: hci4: command 0x0c1a tx timeout [ 1363.179013][T24281] Bluetooth: hci2: command 0x0c1a tx timeout [ 1364.597719][ T3888] FAULT_INJECTION: forcing a failure. [ 1364.597719][ T3888] name failslab, interval 1, probability 393216, space 0, times 0 [ 1364.678898][ T3888] CPU: 0 UID: 0 PID: 3888 Comm: syz.0.4969 Tainted: G L syzkaller #0 PREEMPT(full) [ 1364.678924][ T3888] Tainted: [L]=SOFTLOCKUP [ 1364.678929][ T3888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1364.678939][ T3888] Call Trace: [ 1364.678944][ T3888] [ 1364.678950][ T3888] dump_stack_lvl+0x100/0x190 [ 1364.678975][ T3888] should_fail_ex.cold+0x5/0xa [ 1364.678992][ T3888] should_failslab+0xc2/0x120 [ 1364.679010][ T3888] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1364.679037][ T3888] ? alloc_pipe_info+0x10e/0x590 [ 1364.679052][ T3888] ? aa_file_perm+0x268/0x1530 [ 1364.679074][ T3888] alloc_pipe_info+0x10e/0x590 [ 1364.679089][ T3888] ? aa_file_perm+0x277/0x1530 [ 1364.679108][ T3888] splice_direct_to_actor+0x78f/0xa30 [ 1364.679126][ T3888] ? __pfx_direct_splice_actor+0x10/0x10 [ 1364.679141][ T3888] ? __pfx_aa_file_perm+0x10/0x10 [ 1364.679162][ T3888] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1364.679183][ T3888] do_splice_direct+0x174/0x240 [ 1364.679199][ T3888] ? __pfx_do_splice_direct+0x10/0x10 [ 1364.679213][ T3888] ? common_file_perm+0x1ab/0x4f0 [ 1364.679228][ T3888] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1364.679249][ T3888] ? rw_verify_area+0xce/0x6d0 [ 1364.679273][ T3888] do_sendfile+0xadc/0xe20 [ 1364.679290][ T3888] ? __pfx_do_sendfile+0x10/0x10 [ 1364.679304][ T3888] ? __fget_files+0x21f/0x3d0 [ 1364.679324][ T3888] __x64_sys_sendfile64+0x1d8/0x220 [ 1364.679342][ T3888] ? ksys_write+0x1ac/0x250 [ 1364.679356][ T3888] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1364.679379][ T3888] do_syscall_64+0x106/0xf80 [ 1364.679401][ T3888] ? clear_bhb_loop+0x40/0x90 [ 1364.679418][ T3888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.679434][ T3888] RIP: 0033:0x7f20aad9bf79 [ 1364.679446][ T3888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1364.679461][ T3888] RSP: 002b:00007f20abc6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1364.679476][ T3888] RAX: ffffffffffffffda RBX: 00007f20ab015fa0 RCX: 00007f20aad9bf79 [ 1364.679486][ T3888] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1364.679495][ T3888] RBP: 00007f20abc6c090 R08: 0000000000000000 R09: 0000000000000000 [ 1364.679504][ T3888] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1364.679513][ T3888] R13: 00007f20ab016038 R14: 00007f20ab015fa0 R15: 00007ffd473d31e8 [ 1364.679532][ T3888] [ 1365.522706][ T3904] FAULT_INJECTION: forcing a failure. [ 1365.522706][ T3904] name failslab, interval 1, probability 393216, space 0, times 0 [ 1365.599002][ T3904] CPU: 0 UID: 0 PID: 3904 Comm: syz.8.4972 Tainted: G L syzkaller #0 PREEMPT(full) [ 1365.599031][ T3904] Tainted: [L]=SOFTLOCKUP [ 1365.599037][ T3904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1365.599046][ T3904] Call Trace: [ 1365.599053][ T3904] [ 1365.599059][ T3904] dump_stack_lvl+0x100/0x190 [ 1365.599085][ T3904] should_fail_ex.cold+0x5/0xa [ 1365.599103][ T3904] should_failslab+0xc2/0x120 [ 1365.599121][ T3904] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1365.599136][ T3904] ? sock_alloc_inode+0x25/0x1c0 [ 1365.599153][ T3904] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1365.599168][ T3904] sock_alloc_inode+0x25/0x1c0 [ 1365.599182][ T3904] alloc_inode+0x68/0x250 [ 1365.599203][ T3904] sock_alloc+0x44/0x280 [ 1365.599223][ T3904] ? security_socket_create+0x7f/0x250 [ 1365.599247][ T3904] __sock_create+0xc2/0x860 [ 1365.599266][ T3904] __sys_socket+0x14d/0x260 [ 1365.599283][ T3904] ? __pfx___sys_socket+0x10/0x10 [ 1365.599298][ T3904] ? xfd_validate_state+0x129/0x190 [ 1365.599321][ T3904] __x64_sys_socket+0x72/0xb0 [ 1365.599338][ T3904] ? lockdep_hardirqs_on+0x78/0x100 [ 1365.599359][ T3904] do_syscall_64+0x106/0xf80 [ 1365.599380][ T3904] ? clear_bhb_loop+0x40/0x90 [ 1365.599397][ T3904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1365.599413][ T3904] RIP: 0033:0x7fa467b9bf79 [ 1365.599426][ T3904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1365.599440][ T3904] RSP: 002b:00007fa468b3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1365.599456][ T3904] RAX: ffffffffffffffda RBX: 00007fa467e15fa0 RCX: 00007fa467b9bf79 [ 1365.599466][ T3904] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 000000000000002b [ 1365.599475][ T3904] RBP: 00007fa467c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1365.599484][ T3904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1365.599493][ T3904] R13: 00007fa467e16038 R14: 00007fa467e15fa0 R15: 00007ffed3ed4dd8 [ 1365.599512][ T3904] [ 1365.599521][ T3904] socket: no more sockets [ 1366.332452][ T29] audit: type=1804 audit(4294967316.430:171): pid=3911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4973" name="/newroot/sys/kernel/debug/tracing/options/irq-info" dev="tracefs" ino=185 res=1 errno=0 [ 1366.500318][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.506593][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1368.340742][ T4043] FAULT_INJECTION: forcing a failure. [ 1368.340742][ T4043] name failslab, interval 1, probability 393216, space 0, times 0 [ 1368.451406][ T4044] vhci_hcd vhci_hcd.2: default hub control req: 080a v0007 i0007 l1 [ 1368.595511][ T4043] CPU: 0 UID: 0 PID: 4043 Comm: syz.3.4983 Tainted: G L syzkaller #0 PREEMPT(full) [ 1368.595538][ T4043] Tainted: [L]=SOFTLOCKUP [ 1368.595544][ T4043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1368.595553][ T4043] Call Trace: [ 1368.595558][ T4043] [ 1368.595564][ T4043] dump_stack_lvl+0x100/0x190 [ 1368.595589][ T4043] should_fail_ex.cold+0x5/0xa [ 1368.595606][ T4043] ? alloc_pipe_info+0x1ec/0x590 [ 1368.595621][ T4043] should_failslab+0xc2/0x120 [ 1368.595639][ T4043] __kmalloc_noprof+0xe0/0x850 [ 1368.595658][ T4043] alloc_pipe_info+0x1ec/0x590 [ 1368.595679][ T4043] ? aa_file_perm+0x277/0x1530 [ 1368.595700][ T4043] splice_direct_to_actor+0x78f/0xa30 [ 1368.595718][ T4043] ? __pfx_direct_splice_actor+0x10/0x10 [ 1368.595733][ T4043] ? __pfx_aa_file_perm+0x10/0x10 [ 1368.595753][ T4043] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1368.595774][ T4043] do_splice_direct+0x174/0x240 [ 1368.595789][ T4043] ? __pfx_do_splice_direct+0x10/0x10 [ 1368.595803][ T4043] ? common_file_perm+0x1ab/0x4f0 [ 1368.595819][ T4043] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1368.595837][ T4043] ? rw_verify_area+0xce/0x6d0 [ 1368.595860][ T4043] do_sendfile+0xadc/0xe20 [ 1368.595878][ T4043] ? __pfx_do_sendfile+0x10/0x10 [ 1368.595892][ T4043] ? __fget_files+0x21f/0x3d0 [ 1368.595911][ T4043] __x64_sys_sendfile64+0x1d8/0x220 [ 1368.595929][ T4043] ? ksys_write+0x1ac/0x250 [ 1368.595943][ T4043] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1368.595966][ T4043] do_syscall_64+0x106/0xf80 [ 1368.595990][ T4043] ? clear_bhb_loop+0x40/0x90 [ 1368.596008][ T4043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.596023][ T4043] RIP: 0033:0x7f1711b9bf79 [ 1368.596036][ T4043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1368.596050][ T4043] RSP: 002b:00007f1712a3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1368.596066][ T4043] RAX: ffffffffffffffda RBX: 00007f1711e15fa0 RCX: 00007f1711b9bf79 [ 1368.596075][ T4043] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1368.596084][ T4043] RBP: 00007f1712a3a090 R08: 0000000000000000 R09: 0000000000000000 [ 1368.596093][ T4043] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1368.596101][ T4043] R13: 00007f1711e16038 R14: 00007f1711e15fa0 R15: 00007ffead0d5e38 [ 1368.596121][ T4043] [ 1369.646844][ T4080] netlink: 'syz.3.4986': attribute type 1 has an invalid length. [ 1370.665718][ T4135] netlink: 206 bytes leftover after parsing attributes in process `syz.8.4990'. [ 1371.931855][ T4197] FAULT_INJECTION: forcing a failure. [ 1371.931855][ T4197] name failslab, interval 1, probability 393216, space 0, times 0 [ 1372.030232][ T4197] CPU: 0 UID: 0 PID: 4197 Comm: syz.8.4995 Tainted: G L syzkaller #0 PREEMPT(full) [ 1372.030258][ T4197] Tainted: [L]=SOFTLOCKUP [ 1372.030264][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1372.030273][ T4197] Call Trace: [ 1372.030278][ T4197] [ 1372.030284][ T4197] dump_stack_lvl+0x100/0x190 [ 1372.030313][ T4197] should_fail_ex.cold+0x5/0xa [ 1372.030329][ T4197] ? copy_splice_read+0x1a3/0xb90 [ 1372.030344][ T4197] should_failslab+0xc2/0x120 [ 1372.030362][ T4197] __kmalloc_noprof+0xe0/0x850 [ 1372.030381][ T4197] copy_splice_read+0x1a3/0xb90 [ 1372.030399][ T4197] ? __pfx_copy_splice_read+0x10/0x10 [ 1372.030415][ T4197] ? look_up_lock_class+0x64/0x120 [ 1372.030440][ T4197] ? lockdep_init_map_type+0x5c/0x250 [ 1372.030457][ T4197] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1372.030474][ T4197] ? __pfx_copy_splice_read+0x10/0x10 [ 1372.030488][ T4197] do_splice_read+0x285/0x370 [ 1372.030505][ T4197] splice_direct_to_actor+0x2a1/0xa30 [ 1372.030521][ T4197] ? __pfx_direct_splice_actor+0x10/0x10 [ 1372.030541][ T4197] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1372.030561][ T4197] do_splice_direct+0x174/0x240 [ 1372.030577][ T4197] ? __pfx_do_splice_direct+0x10/0x10 [ 1372.030590][ T4197] ? common_file_perm+0x1ab/0x4f0 [ 1372.030607][ T4197] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1372.030625][ T4197] ? rw_verify_area+0xce/0x6d0 [ 1372.030648][ T4197] do_sendfile+0xadc/0xe20 [ 1372.030666][ T4197] ? __pfx_do_sendfile+0x10/0x10 [ 1372.030680][ T4197] ? __fget_files+0x21f/0x3d0 [ 1372.030699][ T4197] __x64_sys_sendfile64+0x1d8/0x220 [ 1372.030717][ T4197] ? ksys_write+0x1ac/0x250 [ 1372.030732][ T4197] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1372.030755][ T4197] do_syscall_64+0x106/0xf80 [ 1372.030775][ T4197] ? clear_bhb_loop+0x40/0x90 [ 1372.030793][ T4197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1372.030808][ T4197] RIP: 0033:0x7fa467b9bf79 [ 1372.030820][ T4197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1372.030834][ T4197] RSP: 002b:00007fa468b3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1372.030849][ T4197] RAX: ffffffffffffffda RBX: 00007fa467e15fa0 RCX: 00007fa467b9bf79 [ 1372.030859][ T4197] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1372.030868][ T4197] RBP: 00007fa468b3b090 R08: 0000000000000000 R09: 0000000000000000 [ 1372.030877][ T4197] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1372.030885][ T4197] R13: 00007fa467e16038 R14: 00007fa467e15fa0 R15: 00007ffed3ed4dd8 [ 1372.030904][ T4197] [ 1373.703786][ T4256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4997'. [ 1375.812245][ T4331] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1376.119127][ T4331] PCI: Can't parse resource_alignment parameter: B¿Fj˜ [ 1376.870675][ T4376] FAULT_INJECTION: forcing a failure. [ 1376.870675][ T4376] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1376.959535][ T4376] CPU: 0 UID: 0 PID: 4376 Comm: syz.0.5008 Tainted: G L syzkaller #0 PREEMPT(full) [ 1376.959561][ T4376] Tainted: [L]=SOFTLOCKUP [ 1376.959567][ T4376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1376.959576][ T4376] Call Trace: [ 1376.959581][ T4376] [ 1376.959587][ T4376] dump_stack_lvl+0x100/0x190 [ 1376.959612][ T4376] should_fail_ex.cold+0x5/0xa [ 1376.959626][ T4376] ? prepare_alloc_pages+0x16d/0x5f0 [ 1376.959647][ T4376] should_fail_alloc_page+0xeb/0x140 [ 1376.959666][ T4376] prepare_alloc_pages+0x1f0/0x5f0 [ 1376.959685][ T4376] ? arch_stack_walk+0xa6/0xf0 [ 1376.959707][ T4376] __alloc_frozen_pages_noprof+0x193/0x2410 [ 1376.959726][ T4376] ? copy_splice_read+0x1a3/0xb90 [ 1376.959741][ T4376] ? stack_trace_save+0x8e/0xc0 [ 1376.959760][ T4376] ? __pfx_stack_trace_save+0x10/0x10 [ 1376.959780][ T4376] ? stack_depot_save_flags+0x27/0x9d0 [ 1376.959803][ T4376] ? bpf_ksym_find+0x124/0x1c0 [ 1376.959825][ T4376] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1376.959841][ T4376] ? kasan_save_stack+0x3f/0x50 [ 1376.959855][ T4376] ? kasan_save_stack+0x30/0x50 [ 1376.959868][ T4376] ? kasan_save_track+0x14/0x30 [ 1376.959882][ T4376] ? __kasan_kmalloc+0xaa/0xb0 [ 1376.959895][ T4376] ? __kmalloc_noprof+0x301/0x850 [ 1376.959908][ T4376] ? copy_splice_read+0x1a3/0xb90 [ 1376.959921][ T4376] ? do_splice_read+0x285/0x370 [ 1376.959936][ T4376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.959962][ T4376] alloc_pages_bulk_noprof+0x777/0x1500 [ 1376.959984][ T4376] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1376.960004][ T4376] ? trace_kmalloc+0x83/0xb0 [ 1376.960020][ T4376] ? __kmalloc_noprof+0x320/0x850 [ 1376.960037][ T4376] copy_splice_read+0x1e1/0xb90 [ 1376.960056][ T4376] ? __pfx_copy_splice_read+0x10/0x10 [ 1376.960073][ T4376] ? look_up_lock_class+0x64/0x120 [ 1376.960098][ T4376] ? lockdep_init_map_type+0x5c/0x250 [ 1376.960114][ T4376] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1376.960130][ T4376] ? __pfx_copy_splice_read+0x10/0x10 [ 1376.960145][ T4376] do_splice_read+0x285/0x370 [ 1376.960162][ T4376] splice_direct_to_actor+0x2a1/0xa30 [ 1376.960178][ T4376] ? __pfx_direct_splice_actor+0x10/0x10 [ 1376.960197][ T4376] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1376.960218][ T4376] do_splice_direct+0x174/0x240 [ 1376.960233][ T4376] ? __pfx_do_splice_direct+0x10/0x10 [ 1376.960247][ T4376] ? common_file_perm+0x1ab/0x4f0 [ 1376.960262][ T4376] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1376.960280][ T4376] ? rw_verify_area+0xce/0x6d0 [ 1376.960304][ T4376] do_sendfile+0xadc/0xe20 [ 1376.960321][ T4376] ? __pfx_do_sendfile+0x10/0x10 [ 1376.960334][ T4376] ? __fget_files+0x21f/0x3d0 [ 1376.960354][ T4376] __x64_sys_sendfile64+0x1d8/0x220 [ 1376.960371][ T4376] ? ksys_write+0x1ac/0x250 [ 1376.960385][ T4376] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1376.960408][ T4376] do_syscall_64+0x106/0xf80 [ 1376.960429][ T4376] ? clear_bhb_loop+0x40/0x90 [ 1376.960447][ T4376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.960461][ T4376] RIP: 0033:0x7f20aad9bf79 [ 1376.960474][ T4376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1376.960488][ T4376] RSP: 002b:00007f20abc6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1376.960502][ T4376] RAX: ffffffffffffffda RBX: 00007f20ab015fa0 RCX: 00007f20aad9bf79 [ 1376.960512][ T4376] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1376.960521][ T4376] RBP: 00007f20abc6c090 R08: 0000000000000000 R09: 0000000000000000 [ 1376.960530][ T4376] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1376.960539][ T4376] R13: 00007f20ab016038 R14: 00007f20ab015fa0 R15: 00007ffd473d31e8 [ 1376.960557][ T4376] [ 1380.340385][ T4471] FAULT_INJECTION: forcing a failure. [ 1380.340385][ T4471] name failslab, interval 1, probability 393216, space 0, times 0 [ 1380.340415][ T4471] CPU: 0 UID: 0 PID: 4471 Comm: syz.0.5015 Tainted: G L syzkaller #0 PREEMPT(full) [ 1380.340436][ T4471] Tainted: [L]=SOFTLOCKUP [ 1380.340448][ T4471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1380.340457][ T4471] Call Trace: [ 1380.340462][ T4471] [ 1380.340468][ T4471] dump_stack_lvl+0x100/0x190 [ 1380.340491][ T4471] should_fail_ex.cold+0x5/0xa [ 1380.340509][ T4471] should_failslab+0xc2/0x120 [ 1380.340527][ T4471] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1380.340541][ T4471] ? taskstats_exit+0x650/0xbd0 [ 1380.340564][ T4471] taskstats_exit+0x650/0xbd0 [ 1380.340581][ T4471] ? __pfx_acct_update_integrals+0x10/0x10 [ 1380.340601][ T4471] ? __pfx_taskstats_exit+0x10/0x10 [ 1380.340620][ T4471] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1380.340645][ T4471] ? exit_signals+0x395/0xaf0 [ 1380.340669][ T4471] do_exit+0x5ca/0x2a30 [ 1380.340688][ T4471] ? __pfx_do_exit+0x10/0x10 [ 1380.340704][ T4471] ? do_raw_spin_lock+0x128/0x260 [ 1380.340721][ T4471] ? find_held_lock+0x2b/0x80 [ 1380.340739][ T4471] ? get_signal+0x7e0/0x21e0 [ 1380.340761][ T4471] do_group_exit+0xd5/0x2a0 [ 1380.340779][ T4471] get_signal+0x1ec7/0x21e0 [ 1380.340803][ T4471] ? __lock_acquire+0x4a5/0x2630 [ 1380.340816][ T4471] ? ksys_write+0x190/0x250 [ 1380.340832][ T4471] ? __pfx_get_signal+0x10/0x10 [ 1380.340854][ T4471] ? do_futex+0x192/0x350 [ 1380.340870][ T4471] arch_do_signal_or_restart+0x91/0x770 [ 1380.340885][ T4471] ? find_held_lock+0x2b/0x80 [ 1380.340903][ T4471] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1380.340924][ T4471] ? __pfx___x64_sys_futex+0x10/0x10 [ 1380.340937][ T4471] ? xfd_validate_state+0x129/0x190 [ 1380.340958][ T4471] exit_to_user_mode_loop+0x86/0x4a0 [ 1380.340973][ T4471] ? rcu_is_watching+0x12/0xc0 [ 1380.340991][ T4471] do_syscall_64+0x668/0xf80 [ 1380.341012][ T4471] ? clear_bhb_loop+0x40/0x90 [ 1380.341030][ T4471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1380.341045][ T4471] RIP: 0033:0x7f20aad9bf79 [ 1380.341057][ T4471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1380.341072][ T4471] RSP: 002b:00007f20abc6c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1380.341087][ T4471] RAX: fffffffffffffe00 RBX: 00007f20ab015fa8 RCX: 00007f20aad9bf79 [ 1380.341097][ T4471] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f20ab015fa8 [ 1380.341106][ T4471] RBP: 00007f20ab015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1380.341115][ T4471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1380.341124][ T4471] R13: 00007f20ab016038 R14: 00007ffd473d3100 R15: 00007ffd473d31e8 [ 1380.341143][ T4471] [ 1383.159032][ T4559] FAULT_INJECTION: forcing a failure. [ 1383.159032][ T4559] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1383.249898][ T4559] CPU: 0 UID: 0 PID: 4559 Comm: syz.0.5022 Tainted: G L syzkaller #0 PREEMPT(full) [ 1383.249924][ T4559] Tainted: [L]=SOFTLOCKUP [ 1383.249930][ T4559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1383.249939][ T4559] Call Trace: [ 1383.249944][ T4559] [ 1383.249950][ T4559] dump_stack_lvl+0x100/0x190 [ 1383.249975][ T4559] should_fail_ex.cold+0x5/0xa [ 1383.249991][ T4559] get_futex_key+0x295/0x1620 [ 1383.250016][ T4559] ? __pfx_get_futex_key+0x10/0x10 [ 1383.250036][ T4559] ? lock_acquire+0x17c/0x330 [ 1383.250057][ T4559] futex_wake+0xea/0x530 [ 1383.250076][ T4559] ? __pfx_futex_wake+0x10/0x10 [ 1383.250093][ T4559] ? exit_mm_release+0x19/0x30 [ 1383.250113][ T4559] do_futex+0x32b/0x350 [ 1383.250137][ T4559] ? __pfx_do_futex+0x10/0x10 [ 1383.250150][ T4559] ? __might_fault+0xc5/0x140 [ 1383.250169][ T4559] mm_release+0x24a/0x2f0 [ 1383.250191][ T4559] do_exit+0x675/0x2a30 [ 1383.250209][ T4559] ? __pfx_do_exit+0x10/0x10 [ 1383.250225][ T4559] ? do_raw_spin_lock+0x128/0x260 [ 1383.250241][ T4559] ? find_held_lock+0x2b/0x80 [ 1383.250260][ T4559] ? get_signal+0x7e0/0x21e0 [ 1383.250283][ T4559] do_group_exit+0xd5/0x2a0 [ 1383.250300][ T4559] get_signal+0x1ec7/0x21e0 [ 1383.250324][ T4559] ? __lock_acquire+0x4a5/0x2630 [ 1383.250338][ T4559] ? ksys_write+0x190/0x250 [ 1383.250354][ T4559] ? __pfx_get_signal+0x10/0x10 [ 1383.250376][ T4559] ? do_futex+0x192/0x350 [ 1383.250392][ T4559] arch_do_signal_or_restart+0x91/0x770 [ 1383.250406][ T4559] ? find_held_lock+0x2b/0x80 [ 1383.250425][ T4559] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1383.250445][ T4559] ? __pfx___x64_sys_futex+0x10/0x10 [ 1383.250464][ T4559] exit_to_user_mode_loop+0x86/0x4a0 [ 1383.250479][ T4559] ? rcu_is_watching+0x12/0xc0 [ 1383.250498][ T4559] do_syscall_64+0x668/0xf80 [ 1383.250518][ T4559] ? clear_bhb_loop+0x40/0x90 [ 1383.250536][ T4559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.250551][ T4559] RIP: 0033:0x7f20aad9bf79 [ 1383.250564][ T4559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1383.250579][ T4559] RSP: 002b:00007f20abc4b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1383.250594][ T4559] RAX: fffffffffffffe00 RBX: 00007f20ab016098 RCX: 00007f20aad9bf79 [ 1383.250604][ T4559] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f20ab016098 [ 1383.250613][ T4559] RBP: 00007f20ab016090 R08: 0000000000000000 R09: 0000000000000000 [ 1383.250622][ T4559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1383.250631][ T4559] R13: 00007f20ab016128 R14: 00007ffd473d3100 R15: 00007ffd473d31e8 [ 1383.250650][ T4559] [ 1384.157267][ T4569] bridge_slave_1: left allmulticast mode [ 1384.268750][ T4569] bridge_slave_1: left promiscuous mode [ 1384.351033][ T4569] bridge0: port 2(bridge_slave_1) entered disabled state [ 1384.363539][ T4580] FAULT_INJECTION: forcing a failure. [ 1384.363539][ T4580] name failslab, interval 1, probability 393216, space 0, times 0 [ 1384.413580][ T29] audit: type=1400 audit(4294967334.480:172): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=4579 comm="syz.3.5028" [ 1384.447535][ T4580] CPU: 0 UID: 0 PID: 4580 Comm: syz.3.5028 Tainted: G L syzkaller #0 PREEMPT(full) [ 1384.447560][ T4580] Tainted: [L]=SOFTLOCKUP [ 1384.447566][ T4580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1384.447576][ T4580] Call Trace: [ 1384.447582][ T4580] [ 1384.447588][ T4580] dump_stack_lvl+0x100/0x190 [ 1384.447613][ T4580] should_fail_ex.cold+0x5/0xa [ 1384.447630][ T4580] should_failslab+0xc2/0x120 [ 1384.447648][ T4580] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1384.447670][ T4580] ? call_usermodehelper_setup+0xaf/0x360 [ 1384.447691][ T4580] ? trace_kmalloc+0x83/0xb0 [ 1384.447708][ T4580] ? __pfx_free_modprobe_argv+0x10/0x10 [ 1384.447725][ T4580] call_usermodehelper_setup+0xaf/0x360 [ 1384.447747][ T4580] __request_module+0x3c7/0x650 [ 1384.447764][ T4580] ? __pfx___request_module+0x10/0x10 [ 1384.447786][ T4580] ? __get_fs_type+0x12c/0x170 [ 1384.447803][ T4580] ? __get_fs_type+0x12c/0x170 [ 1384.447828][ T4580] get_fs_type+0xd7/0x190 [ 1384.447846][ T4580] __x64_sys_fsopen+0xca/0x220 [ 1384.447867][ T4580] do_syscall_64+0x106/0xf80 [ 1384.447888][ T4580] ? clear_bhb_loop+0x40/0x90 [ 1384.447906][ T4580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.447920][ T4580] RIP: 0033:0x7f1711b9bf79 [ 1384.447933][ T4580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1384.447948][ T4580] RSP: 002b:00007f1712a3a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1384.447964][ T4580] RAX: ffffffffffffffda RBX: 00007f1711e15fa0 RCX: 00007f1711b9bf79 [ 1384.447974][ T4580] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1384.447983][ T4580] RBP: 00007f1711c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1384.447992][ T4580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1384.448001][ T4580] R13: 00007f1711e16038 R14: 00007f1711e15fa0 R15: 00007ffead0d5e38 [ 1384.448020][ T4580] [ 1384.756616][ T4577] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1386.168838][ T4614] FAULT_INJECTION: forcing a failure. [ 1386.168838][ T4614] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1386.365768][ T4614] CPU: 0 UID: 0 PID: 4614 Comm: syz.4.5030 Tainted: G L syzkaller #0 PREEMPT(full) [ 1386.365793][ T4614] Tainted: [L]=SOFTLOCKUP [ 1386.365799][ T4614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1386.365808][ T4614] Call Trace: [ 1386.365813][ T4614] [ 1386.365819][ T4614] dump_stack_lvl+0x100/0x190 [ 1386.365850][ T4614] should_fail_ex.cold+0x5/0xa [ 1386.365867][ T4614] get_futex_key+0x1d2/0x1620 [ 1386.365892][ T4614] ? __pfx_get_futex_key+0x10/0x10 [ 1386.365913][ T4614] ? lock_acquire+0x17c/0x330 [ 1386.365934][ T4614] futex_wake+0xea/0x530 [ 1386.365952][ T4614] ? __pfx_futex_wake+0x10/0x10 [ 1386.365969][ T4614] ? exit_mm_release+0x19/0x30 [ 1386.365989][ T4614] do_futex+0x32b/0x350 [ 1386.366003][ T4614] ? __pfx_do_futex+0x10/0x10 [ 1386.366016][ T4614] ? __might_fault+0xc5/0x140 [ 1386.366034][ T4614] mm_release+0x24a/0x2f0 [ 1386.366055][ T4614] do_exit+0x675/0x2a30 [ 1386.366074][ T4614] ? __pfx_do_exit+0x10/0x10 [ 1386.366089][ T4614] ? do_raw_spin_lock+0x128/0x260 [ 1386.366106][ T4614] ? find_held_lock+0x2b/0x80 [ 1386.366125][ T4614] ? get_signal+0x7e0/0x21e0 [ 1386.366148][ T4614] do_group_exit+0xd5/0x2a0 [ 1386.366165][ T4614] get_signal+0x1ec7/0x21e0 [ 1386.366189][ T4614] ? __lock_acquire+0x4a5/0x2630 [ 1386.366203][ T4614] ? ksys_write+0x190/0x250 [ 1386.366218][ T4614] ? __pfx_get_signal+0x10/0x10 [ 1386.366240][ T4614] ? do_futex+0x192/0x350 [ 1386.366255][ T4614] arch_do_signal_or_restart+0x91/0x770 [ 1386.366270][ T4614] ? find_held_lock+0x2b/0x80 [ 1386.366289][ T4614] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1386.366309][ T4614] ? __pfx___x64_sys_futex+0x10/0x10 [ 1386.366322][ T4614] ? xfd_validate_state+0x129/0x190 [ 1386.366344][ T4614] exit_to_user_mode_loop+0x86/0x4a0 [ 1386.366358][ T4614] ? rcu_is_watching+0x12/0xc0 [ 1386.366377][ T4614] do_syscall_64+0x668/0xf80 [ 1386.366399][ T4614] ? clear_bhb_loop+0x40/0x90 [ 1386.366416][ T4614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.366431][ T4614] RIP: 0033:0x7f54df39bf79 [ 1386.366444][ T4614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1386.366459][ T4614] RSP: 002b:00007f54e01df0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1386.366474][ T4614] RAX: fffffffffffffe00 RBX: 00007f54df615fa8 RCX: 00007f54df39bf79 [ 1386.366484][ T4614] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f54df615fa8 [ 1386.366493][ T4614] RBP: 00007f54df615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1386.366502][ T4614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1386.366511][ T4614] R13: 00007f54df616038 R14: 00007ffdf79adf30 R15: 00007ffdf79ae018 [ 1386.366530][ T4614] [ 1388.856015][ T3015] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1388.895847][ T3015] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1388.909476][ T3015] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1388.918417][ T3015] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1388.927364][ T3015] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1389.552721][ T4730] chnl_net:caif_netlink_parms(): no params data found [ 1389.881126][ T4730] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.941414][ T4730] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.986242][ T4730] bridge_slave_0: entered allmulticast mode [ 1390.026265][ T4730] bridge_slave_0: entered promiscuous mode [ 1390.080857][ T4730] bridge0: port 2(bridge_slave_1) entered blocking state [ 1390.087928][ T4730] bridge0: port 2(bridge_slave_1) entered disabled state [ 1390.167403][ T4730] bridge_slave_1: entered allmulticast mode [ 1390.262009][ T4730] bridge_slave_1: entered promiscuous mode [ 1390.374724][ T4730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1390.433734][ T4730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1390.529300][ T4866] bridge_slave_1: left allmulticast mode [ 1390.568699][ T4866] bridge_slave_1: left promiscuous mode [ 1390.646901][ T4866] bridge0: port 2(bridge_slave_1) entered disabled state [ 1390.930730][ T4730] team0: Port device team_slave_0 added [ 1390.967892][ T4730] team0: Port device team_slave_1 added [ 1391.023349][ T3015] Bluetooth: hci0: command tx timeout [ 1391.112589][ T4730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1391.198673][ T4730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1391.277931][ T4933] FAULT_INJECTION: forcing a failure. [ 1391.277931][ T4933] name failslab, interval 1, probability 393216, space 0, times 0 [ 1391.356852][ T4730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1391.400704][ T4933] CPU: 0 UID: 0 PID: 4933 Comm: syz.3.5043 Tainted: G L syzkaller #0 PREEMPT(full) [ 1391.400729][ T4933] Tainted: [L]=SOFTLOCKUP [ 1391.400734][ T4933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1391.400744][ T4933] Call Trace: [ 1391.400749][ T4933] [ 1391.400755][ T4933] dump_stack_lvl+0x100/0x190 [ 1391.400780][ T4933] should_fail_ex.cold+0x5/0xa [ 1391.400797][ T4933] should_failslab+0xc2/0x120 [ 1391.400816][ T4933] __kvmalloc_node_noprof+0xfa/0xa00 [ 1391.400831][ T4933] ? pidlist_array_load+0x12f/0xb20 [ 1391.400846][ T4933] ? _raw_spin_unlock_irq+0x23/0x50 [ 1391.400869][ T4933] pidlist_array_load+0x12f/0xb20 [ 1391.400885][ T4933] ? __pfx_pidlist_array_load+0x10/0x10 [ 1391.400907][ T4933] ? kernfs_root+0xf8/0x2a0 [ 1391.400931][ T4933] cgroup_pidlist_start+0x3a9/0x4e0 [ 1391.400946][ T4933] ? __pfx_cgroup_seqfile_start+0x10/0x10 [ 1391.400963][ T4933] kernfs_seq_start+0x133/0x2a0 [ 1391.400979][ T4933] seq_read_iter+0x2c1/0x1270 [ 1391.400994][ T4933] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1391.401016][ T4933] kernfs_fop_read_iter+0x46c/0x610 [ 1391.401035][ T4933] copy_splice_read+0x4ba/0xb90 [ 1391.401055][ T4933] ? __pfx_copy_splice_read+0x10/0x10 [ 1391.401071][ T4933] ? look_up_lock_class+0x64/0x120 [ 1391.401096][ T4933] ? lockdep_init_map_type+0x5c/0x250 [ 1391.401112][ T4933] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1391.401129][ T4933] ? __pfx_copy_splice_read+0x10/0x10 [ 1391.401143][ T4933] do_splice_read+0x285/0x370 [ 1391.401160][ T4933] splice_direct_to_actor+0x2a1/0xa30 [ 1391.401177][ T4933] ? __pfx_direct_splice_actor+0x10/0x10 [ 1391.401197][ T4933] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1391.401218][ T4933] do_splice_direct+0x174/0x240 [ 1391.401234][ T4933] ? __pfx_do_splice_direct+0x10/0x10 [ 1391.401248][ T4933] ? common_file_perm+0x1ab/0x4f0 [ 1391.401265][ T4933] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1391.401283][ T4933] ? rw_verify_area+0xce/0x6d0 [ 1391.401307][ T4933] do_sendfile+0xadc/0xe20 [ 1391.401330][ T4933] ? __pfx_do_sendfile+0x10/0x10 [ 1391.401345][ T4933] ? __fget_files+0x21f/0x3d0 [ 1391.401365][ T4933] __x64_sys_sendfile64+0x1d8/0x220 [ 1391.401382][ T4933] ? ksys_write+0x1ac/0x250 [ 1391.401396][ T4933] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1391.401420][ T4933] do_syscall_64+0x106/0xf80 [ 1391.401441][ T4933] ? clear_bhb_loop+0x40/0x90 [ 1391.401459][ T4933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.401474][ T4933] RIP: 0033:0x7f1711b9bf79 [ 1391.401487][ T4933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1391.401501][ T4933] RSP: 002b:00007f1712a3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1391.401516][ T4933] RAX: ffffffffffffffda RBX: 00007f1711e15fa0 RCX: 00007f1711b9bf79 [ 1391.401526][ T4933] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1391.401536][ T4933] RBP: 00007f1712a3a090 R08: 0000000000000000 R09: 0000000000000000 [ 1391.401545][ T4933] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1391.401553][ T4933] R13: 00007f1711e16038 R14: 00007f1711e15fa0 R15: 00007ffead0d5e38 [ 1391.401573][ T4933] [ 1391.401792][ T4730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1391.401802][ T4730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1391.401822][ T4730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1391.548371][ T4730] hsr_slave_0: entered promiscuous mode [ 1391.564882][ T4730] hsr_slave_1: entered promiscuous mode [ 1391.565322][ T4730] debugfs: 'hsr0' already exists in 'hsr' [ 1391.565337][ T4730] Cannot create hsr debugfs directory [ 1392.747979][ T5073] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5048'. [ 1392.801633][ T5068] bond0: invalid ARP target specified [ 1392.801733][ T5073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1392.801749][ T5073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1392.846416][ T5073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1392.846435][ T5073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1392.964971][ T4864] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1393.100695][ T3015] Bluetooth: hci0: command tx timeout [ 1395.178682][ T3015] Bluetooth: hci0: command tx timeout [ 1397.258927][ T3015] Bluetooth: hci0: command tx timeout [ 1398.209018][ T5277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5059'. [ 1402.998069][ T5460] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1403.805312][ T5494] FAULT_INJECTION: forcing a failure. [ 1403.805312][ T5494] name failslab, interval 1, probability 393216, space 0, times 0 [ 1403.852156][ T5494] CPU: 0 UID: 0 PID: 5494 Comm: syz.0.5070 Tainted: G L syzkaller #0 PREEMPT(full) [ 1403.852183][ T5494] Tainted: [L]=SOFTLOCKUP [ 1403.852189][ T5494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1403.852199][ T5494] Call Trace: [ 1403.852205][ T5494] [ 1403.852212][ T5494] dump_stack_lvl+0x100/0x190 [ 1403.852239][ T5494] should_fail_ex.cold+0x5/0xa [ 1403.852257][ T5494] should_failslab+0xc2/0x120 [ 1403.852275][ T5494] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1403.852290][ T5494] ? __d_alloc+0x34/0xa80 [ 1403.852308][ T5494] ? security_inode_alloc+0xcf/0x2c0 [ 1403.852333][ T5494] __d_alloc+0x34/0xa80 [ 1403.852348][ T5494] ? __ns_ref_active_get+0x9f/0x1b0 [ 1403.852365][ T5494] path_from_stashed+0x427/0x750 [ 1403.852381][ T5494] ? do_raw_spin_unlock+0x145/0x1e0 [ 1403.852402][ T5494] ns_get_path+0x60/0x80 [ 1403.852418][ T5494] proc_ns_get_link+0x121/0x230 [ 1403.852437][ T5494] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1403.852457][ T5494] ? atime_needs_update+0x8b/0x6b0 [ 1403.852480][ T5494] pick_link+0xd17/0x13c0 [ 1403.852503][ T5494] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1403.852524][ T5494] step_into_slowpath+0x9ba/0xf90 [ 1403.852550][ T5494] ? __pfx_step_into_slowpath+0x10/0x10 [ 1403.852572][ T5494] ? find_held_lock+0x2b/0x80 [ 1403.852597][ T5494] path_openat+0xf95/0x31a0 [ 1403.852619][ T5494] ? __pfx_path_openat+0x10/0x10 [ 1403.852642][ T5494] do_file_open+0x20e/0x430 [ 1403.852659][ T5494] ? __pfx_do_file_open+0x10/0x10 [ 1403.852688][ T5494] ? alloc_fd+0x476/0x790 [ 1403.852705][ T5494] ? do_getname+0x191/0x390 [ 1403.852725][ T5494] do_sys_openat2+0x10d/0x1e0 [ 1403.852745][ T5494] ? __pfx_do_sys_openat2+0x10/0x10 [ 1403.852767][ T5494] ? __fget_files+0x21f/0x3d0 [ 1403.852786][ T5494] __x64_sys_openat+0x12d/0x210 [ 1403.852806][ T5494] ? __pfx___x64_sys_openat+0x10/0x10 [ 1403.852825][ T5494] ? xfd_validate_state+0x129/0x190 [ 1403.852849][ T5494] do_syscall_64+0x106/0xf80 [ 1403.852870][ T5494] ? clear_bhb_loop+0x40/0x90 [ 1403.852888][ T5494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.852903][ T5494] RIP: 0033:0x7f20aad5c84e [ 1403.852916][ T5494] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1403.852931][ T5494] RSP: 002b:00007f20abc6bec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1403.852946][ T5494] RAX: ffffffffffffffda RBX: 00007f20abc6c6c0 RCX: 00007f20aad5c84e [ 1403.852956][ T5494] RDX: 0000000000000002 RSI: 00007f20abc6bf90 RDI: ffffffffffffff9c [ 1403.852966][ T5494] RBP: 00007f20aae327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1403.852976][ T5494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1403.852985][ T5494] R13: 00007f20ab016038 R14: 00007f20ab015fa0 R15: 00007ffd473d31e8 [ 1403.853005][ T5494] [ 1405.148739][ T5498] openvswitch: netlink: IP tunnel dst address not specified [ 1408.091707][T24281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1408.109815][T24281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1408.118121][T24281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1408.126289][T24281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1408.140686][T24281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1408.429036][ T5654] kvm: kvm [5652]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x4 [ 1409.683527][ T5640] chnl_net:caif_netlink_parms(): no params data found [ 1409.971889][ T5640] bridge0: port 1(bridge_slave_0) entered blocking state [ 1410.006238][ T5640] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.025965][ T5640] bridge_slave_0: entered allmulticast mode [ 1410.041362][ T5640] bridge_slave_0: entered promiscuous mode [ 1410.082905][ T5640] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.100788][ T5640] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.117812][ T5640] bridge_slave_1: entered allmulticast mode [ 1410.142481][ T5640] bridge_slave_1: entered promiscuous mode [ 1410.216792][T24281] Bluetooth: hci3: command tx timeout [ 1410.232617][ T5640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1410.275575][ T5640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1410.346592][ T5640] team0: Port device team_slave_0 added [ 1410.365954][ T5640] team0: Port device team_slave_1 added [ 1410.430558][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1410.456934][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1410.545158][ T5640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1410.568114][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1410.575057][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1410.647139][ T5640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1410.746201][ T5640] hsr_slave_0: entered promiscuous mode [ 1410.752670][ T5640] hsr_slave_1: entered promiscuous mode [ 1410.767383][ T5640] debugfs: 'hsr0' already exists in 'hsr' [ 1410.777640][ T5640] Cannot create hsr debugfs directory [ 1412.296779][T24281] Bluetooth: hci3: command tx timeout [ 1414.378189][T24281] Bluetooth: hci3: command tx timeout [ 1415.268230][ T29] audit: type=1107 audit(4294967365.382:173): pid=6070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1415.288237][ T29] audit: type=1107 audit(4294967365.412:174): pid=6070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1415.323923][ T6071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5093'. [ 1416.406710][ T6195] vhci_hcd vhci_hcd.2: invalid port number 194 [ 1416.456219][T24281] Bluetooth: hci3: command tx timeout [ 1420.240271][ T6354] FAULT_INJECTION: forcing a failure. [ 1420.240271][ T6354] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1420.278487][ T6354] CPU: 0 UID: 0 PID: 6354 Comm: syz.0.5119 Tainted: G L syzkaller #0 PREEMPT(full) [ 1420.278512][ T6354] Tainted: [L]=SOFTLOCKUP [ 1420.278518][ T6354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1420.278527][ T6354] Call Trace: [ 1420.278533][ T6354] [ 1420.278539][ T6354] dump_stack_lvl+0x100/0x190 [ 1420.278564][ T6354] should_fail_ex.cold+0x5/0xa [ 1420.278583][ T6354] get_futex_key+0x1d2/0x1620 [ 1420.278608][ T6354] ? __pfx_get_futex_key+0x10/0x10 [ 1420.278636][ T6354] futex_wake+0xea/0x530 [ 1420.278655][ T6354] ? __pfx_futex_wake+0x10/0x10 [ 1420.278673][ T6354] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 1420.278696][ T6354] do_futex+0x32b/0x350 [ 1420.278710][ T6354] ? __pfx_do_futex+0x10/0x10 [ 1420.278725][ T6354] ? __pfx___might_resched+0x10/0x10 [ 1420.278742][ T6354] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 1420.278765][ T6354] __x64_sys_futex+0x34f/0x4d0 [ 1420.278780][ T6354] ? __pfx_task_work_run+0x10/0x10 [ 1420.278798][ T6354] ? __pfx___x64_sys_futex+0x10/0x10 [ 1420.278819][ T6354] do_syscall_64+0x106/0xf80 [ 1420.278840][ T6354] ? clear_bhb_loop+0x40/0x90 [ 1420.278858][ T6354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1420.278873][ T6354] RIP: 0033:0x7f20aad9bf79 [ 1420.278886][ T6354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1420.278900][ T6354] RSP: 002b:00007f20abc6c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1420.278915][ T6354] RAX: ffffffffffffffda RBX: 00007f20ab015fa8 RCX: 00007f20aad9bf79 [ 1420.278925][ T6354] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f20ab015fac [ 1420.278935][ T6354] RBP: 00007f20ab015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1420.278944][ T6354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1420.278953][ T6354] R13: 00007f20ab016038 R14: 00007ffd473d3100 R15: 00007ffd473d31e8 [ 1420.278973][ T6354] [ 1420.481921][ T6355] netlink: 'syz.0.5119': attribute type 11 has an invalid length. [ 1422.075342][ T29] audit: type=1326 audit(4294967372.193:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6398 comm="syz.4.5128" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f54df39bf79 code=0x0 [ 1425.762930][ T6509] Invalid ELF header magic: != ELF [ 1427.903612][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1427.911899][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1430.102356][ T6585] FAULT_INJECTION: forcing a failure. [ 1430.102356][ T6585] name failslab, interval 1, probability 393216, space 0, times 0 [ 1430.184584][ T6585] CPU: 0 UID: 0 PID: 6585 Comm: syz.4.5141 Tainted: G L syzkaller #0 PREEMPT(full) [ 1430.184610][ T6585] Tainted: [L]=SOFTLOCKUP [ 1430.184616][ T6585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1430.184626][ T6585] Call Trace: [ 1430.184631][ T6585] [ 1430.184638][ T6585] dump_stack_lvl+0x100/0x190 [ 1430.184663][ T6585] should_fail_ex.cold+0x5/0xa [ 1430.184681][ T6585] should_failslab+0xc2/0x120 [ 1430.184699][ T6585] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1430.184715][ T6585] ? __pmd_alloc+0xbf/0x9c0 [ 1430.184738][ T6585] __pmd_alloc+0xbf/0x9c0 [ 1430.184759][ T6585] move_page_tables+0x314a/0x43e0 [ 1430.184783][ T6585] ? __pfx_move_page_tables+0x10/0x10 [ 1430.184805][ T6585] ? lock_acquire+0x17c/0x330 [ 1430.184824][ T6585] copy_vma_and_data+0x25c/0x7c0 [ 1430.184840][ T6585] ? __pfx_copy_vma_and_data+0x10/0x10 [ 1430.184862][ T6585] ? find_held_lock+0x2b/0x80 [ 1430.184880][ T6585] ? move_vma+0x50c/0x1990 [ 1430.184892][ T6585] ? move_vma+0x50c/0x1990 [ 1430.184904][ T6585] ? __vm_enough_memory+0x184/0x390 [ 1430.184927][ T6585] move_vma+0x51e/0x1990 [ 1430.184944][ T6585] ? __pfx_move_vma+0x10/0x10 [ 1430.184960][ T6585] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 1430.184979][ T6585] ? cap_mmap_addr+0x4b/0x120 [ 1430.185000][ T6585] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1430.185016][ T6585] ? security_mmap_addr+0x71/0x1e0 [ 1430.185032][ T6585] ? __get_unmapped_area+0x255/0x3e0 [ 1430.185052][ T6585] ? vrm_set_new_addr+0x204/0x290 [ 1430.185068][ T6585] mremap_to+0x1b7/0x450 [ 1430.185082][ T6585] do_mremap+0xb76/0x2130 [ 1430.185105][ T6585] ? __pfx_do_mremap+0x10/0x10 [ 1430.185123][ T6585] ? ksys_write+0x190/0x250 [ 1430.185142][ T6585] __do_sys_mremap+0x126/0x170 [ 1430.185156][ T6585] ? __pfx___do_sys_mremap+0x10/0x10 [ 1430.185175][ T6585] ? __x64_sys_futex+0x34f/0x4d0 [ 1430.185201][ T6585] do_syscall_64+0x106/0xf80 [ 1430.185222][ T6585] ? clear_bhb_loop+0x40/0x90 [ 1430.185240][ T6585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1430.185254][ T6585] RIP: 0033:0x7f54df39bf79 [ 1430.185267][ T6585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1430.185282][ T6585] RSP: 002b:00007f54e01df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1430.185298][ T6585] RAX: ffffffffffffffda RBX: 00007f54df615fa0 RCX: 00007f54df39bf79 [ 1430.185308][ T6585] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 1430.185317][ T6585] RBP: 00007f54df4327e0 R08: 0000000100000000 R09: 0000000000000000 [ 1430.185326][ T6585] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1430.185335][ T6585] R13: 00007f54df616038 R14: 00007f54df615fa0 R15: 00007ffdf79ae018 [ 1430.185354][ T6585] [ 1431.970924][ T6592] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1432.063419][ T6592] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1432.145437][ T6592] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1432.154370][ T6592] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1432.225915][ T6592] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1432.269877][ T6592] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1432.345256][ T6592] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1432.390014][ T6592] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1432.442805][ T6592] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1432.490040][ T6592] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1433.974273][T24281] Bluetooth: hci1: command 0x0c1a tx timeout [ 1434.134443][T24281] Bluetooth: hci6: command 0x0406 tx timeout [ 1434.214001][ T3015] Bluetooth: hci4: command 0x0c1a tx timeout [ 1434.220006][T24281] Bluetooth: hci2: command 0x0c1a tx timeout [ 1434.295505][T24281] Bluetooth: hci0: command 0x0c1a tx timeout [ 1434.453871][T24281] Bluetooth: hci3: command 0x0c1a tx timeout [ 1436.375872][T24281] Bluetooth: hci0: command 0x0c1a tx timeout [ 1436.535335][T24281] Bluetooth: hci3: command 0x0c1a tx timeout [ 1437.609533][ T6844] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5157'. [ 1437.706726][ T6844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1437.787175][ T6844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1437.886663][ T6844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1437.920043][ T6844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1438.453588][T24281] Bluetooth: hci0: command 0x0c1a tx timeout [ 1438.615825][T24281] Bluetooth: hci3: command 0x0c1a tx timeout [ 1444.943907][ T7077] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5170'. [ 1445.046034][ T7077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1445.193492][ T7077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1445.303345][ T7077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1445.363206][ T7077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1446.002114][ T7129] FAULT_INJECTION: forcing a failure. [ 1446.002114][ T7129] name failslab, interval 1, probability 393216, space 0, times 0 [ 1446.220481][ T7129] CPU: 0 UID: 0 PID: 7129 Comm: syz.4.5173 Tainted: G L syzkaller #0 PREEMPT(full) [ 1446.220507][ T7129] Tainted: [L]=SOFTLOCKUP [ 1446.220513][ T7129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1446.220522][ T7129] Call Trace: [ 1446.220528][ T7129] [ 1446.220535][ T7129] dump_stack_lvl+0x100/0x190 [ 1446.220559][ T7129] should_fail_ex.cold+0x5/0xa [ 1446.220576][ T7129] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1446.220594][ T7129] should_failslab+0xc2/0x120 [ 1446.220612][ T7129] __kmalloc_noprof+0xe0/0x850 [ 1446.220631][ T7129] tomoyo_realpath_from_path+0xb6/0x690 [ 1446.220653][ T7129] tomoyo_path_number_perm+0x23c/0x580 [ 1446.220668][ T7129] ? tomoyo_path_number_perm+0x22e/0x580 [ 1446.220684][ T7129] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1446.220718][ T7129] ? find_held_lock+0x2b/0x80 [ 1446.220738][ T7129] ? __fget_files+0x215/0x3d0 [ 1446.220760][ T7129] ? hook_file_ioctl_common+0x146/0x410 [ 1446.220779][ T7129] ? __fget_files+0x21f/0x3d0 [ 1446.220797][ T7129] security_file_ioctl+0xd3/0x230 [ 1446.220814][ T7129] __x64_sys_ioctl+0xb7/0x210 [ 1446.220837][ T7129] do_syscall_64+0x106/0xf80 [ 1446.220858][ T7129] ? clear_bhb_loop+0x40/0x90 [ 1446.220876][ T7129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.220891][ T7129] RIP: 0033:0x7f54df39bf79 [ 1446.220904][ T7129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1446.220919][ T7129] RSP: 002b:00007f54e01df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1446.220934][ T7129] RAX: ffffffffffffffda RBX: 00007f54df615fa0 RCX: 00007f54df39bf79 [ 1446.220944][ T7129] RDX: 0000000000000000 RSI: 0000000000001277 RDI: 0000000000000003 [ 1446.220953][ T7129] RBP: 00007f54e01df090 R08: 0000000000000000 R09: 0000000000000000 [ 1446.220963][ T7129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1446.220971][ T7129] R13: 00007f54df616038 R14: 00007f54df615fa0 R15: 00007ffdf79ae018 [ 1446.220990][ T7129] [ 1446.220997][ T7129] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1447.266262][ T7155] FAULT_INJECTION: forcing a failure. [ 1447.266262][ T7155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1447.300046][ T7155] CPU: 0 UID: 0 PID: 7155 Comm: syz.0.5177 Tainted: G L syzkaller #0 PREEMPT(full) [ 1447.300074][ T7155] Tainted: [L]=SOFTLOCKUP [ 1447.300080][ T7155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1447.300090][ T7155] Call Trace: [ 1447.300096][ T7155] [ 1447.300102][ T7155] dump_stack_lvl+0x100/0x190 [ 1447.300128][ T7155] should_fail_ex.cold+0x5/0xa [ 1447.300147][ T7155] _copy_to_iter+0x1f3/0x1720 [ 1447.300166][ T7155] ? chacha_block_generic+0x211/0x330 [ 1447.300184][ T7155] ? __pfx__copy_to_iter+0x10/0x10 [ 1447.300202][ T7155] ? __pfx___might_resched+0x10/0x10 [ 1447.300219][ T7155] ? crng_make_state+0x2b0/0x6c0 [ 1447.300243][ T7155] get_random_bytes_user+0x17b/0x3d0 [ 1447.300266][ T7155] ? __pfx_get_random_bytes_user+0x10/0x10 [ 1447.300293][ T7155] ? do_futex+0x192/0x350 [ 1447.300311][ T7155] ? __fget_files+0x21f/0x3d0 [ 1447.300326][ T7155] ? import_ubuf+0x1b6/0x220 [ 1447.300341][ T7155] __x64_sys_getrandom+0x183/0x290 [ 1447.300364][ T7155] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 1447.300395][ T7155] do_syscall_64+0x106/0xf80 [ 1447.300415][ T7155] ? clear_bhb_loop+0x40/0x90 [ 1447.300433][ T7155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1447.300448][ T7155] RIP: 0033:0x7f20aad9bf79 [ 1447.300460][ T7155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1447.300476][ T7155] RSP: 002b:00007f20abc6c028 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 1447.300491][ T7155] RAX: ffffffffffffffda RBX: 00007f20ab015fa0 RCX: 00007f20aad9bf79 [ 1447.300501][ T7155] RDX: 0000000000000003 RSI: 0000000006000000 RDI: 0000000000000000 [ 1447.300510][ T7155] RBP: 00007f20aae327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1447.300519][ T7155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1447.300529][ T7155] R13: 00007f20ab016038 R14: 00007f20ab015fa0 R15: 00007ffd473d31e8 [ 1447.300548][ T7155] [ 1448.474552][ T3015] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1448.487680][ T3015] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1448.495578][ T3015] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1448.504712][ T3015] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1448.512635][ T3015] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1448.593032][ T7175] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078800dc0 pfn:0x78800 [ 1448.745504][ T7175] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1448.818559][ T7176] chnl_net:caif_netlink_parms(): no params data found [ 1448.826072][ T7175] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1448.896326][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5181'. [ 1448.989709][ T7176] bridge0: port 1(bridge_slave_0) entered blocking state [ 1449.008919][ T7175] raw: ffff888078800dc0 0000000000000000 00000001ffffffff 0000000000000000 [ 1449.018100][ T7176] bridge0: port 1(bridge_slave_0) entered disabled state [ 1449.032376][ T7176] bridge_slave_0: entered allmulticast mode [ 1449.046913][ T7176] bridge_slave_0: entered promiscuous mode [ 1449.064479][ T7176] bridge0: port 2(bridge_slave_1) entered blocking state [ 1449.071623][ T7176] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.088991][ T7176] bridge_slave_1: entered allmulticast mode [ 1449.095712][ T7175] page dumped because: unmovable page [ 1449.108255][ T7176] bridge_slave_1: entered promiscuous mode [ 1449.157028][ T7175] page_owner tracks the page as allocated [ 1449.181724][ T7176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1449.205098][ T7176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1449.262106][ T7175] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 4707, tgid 4707 (syz-executor), ts 1388667353507, free_ts 1205812896975 [ 1449.300256][ T7176] team0: Port device team_slave_0 added [ 1449.318589][ T7176] team0: Port device team_slave_1 added [ 1449.378380][ T7176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1449.395617][ T7176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1449.436525][ T7175] post_alloc_hook+0x1e1/0x250 [ 1449.441313][ T7175] get_page_from_freelist+0x111d/0x3140 [ 1449.459784][ T7176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1449.483974][ T7176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1449.490913][ T7176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1449.527944][ T7175] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 1449.558233][ T7176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1449.570005][ T7175] alloc_pages_bulk_noprof+0x777/0x1500 [ 1449.629241][ T7175] __kasan_populate_vmalloc+0xf0/0x210 [ 1449.658619][ T7176] hsr_slave_0: entered promiscuous mode [ 1449.672850][ T7176] hsr_slave_1: entered promiscuous mode [ 1449.678479][ T7175] alloc_vmap_area+0x935/0x2a00 [ 1449.684302][ T7176] debugfs: 'hsr0' already exists in 'hsr' [ 1449.698997][ T7176] Cannot create hsr debugfs directory [ 1449.739369][ T7175] __get_vm_area_node+0x1ca/0x330 [ 1449.795055][ T7175] __vmalloc_node_range_noprof+0x213/0x1530 [ 1449.800977][ T7175] vmalloc_user_noprof+0x9e/0xe0 [ 1449.861962][ T7175] kcov_ioctl+0x4c/0x720 [ 1449.866473][ T7175] __x64_sys_ioctl+0x18e/0x210 [ 1449.871235][ T7175] do_syscall_64+0x106/0xf80 [ 1449.919185][ T7175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1449.941986][ T7175] page last free pid 23790 tgid 23785 stack trace: [ 1449.968748][ T7175] __free_frozen_pages+0x822/0x1130 [ 1449.985325][ T7175] rcu_core+0x5a2/0x10d0 [ 1450.012011][ T7175] handle_softirqs+0x1ea/0x910 [ 1450.016798][ T7175] do_softirq+0xac/0xe0 [ 1450.052869][ T7175] __local_bh_enable_ip+0xf8/0x120 [ 1450.072018][ T7175] kernel_fpu_end+0x64/0x80 [ 1450.076539][ T7175] sha256_blocks_avx2+0x4e/0x90 [ 1450.133607][ T7175] __sha256_update+0x188/0x1c0 [ 1450.152012][ T7175] crypto_sha256_update+0x23/0x30 [ 1450.167199][ T7175] crypto_shash_finup+0x34b/0x6b0 [ 1450.187391][ T7175] ima_calc_file_hash_tfm+0x299/0x350 [ 1450.207564][ T7175] ima_calc_file_hash+0x18c/0x480 [ 1450.231995][ T7175] ima_collect_measurement+0x887/0xa40 [ 1450.237479][ T7175] process_measurement+0xdfe/0x2350 [ 1450.292321][ T7175] ima_file_mmap+0x1c4/0x1f0 [ 1450.296946][ T7175] security_mmap_file+0x278/0x9b0 [ 1450.612343][ T3015] Bluetooth: hci5: command tx timeout [ 1451.764119][ T7430] kexec: Could not allocate control_code_buffer [ 1452.691912][ T3015] Bluetooth: hci5: command tx timeout [ 1454.034210][ T7621] netlink: NAT attribute type 6 has unexpected length (4 != 2) [ 1454.341306][ T7623] Invalid ELF header magic: != ELF [ 1454.772440][ T3015] Bluetooth: hci5: command tx timeout [ 1455.598689][ T7637] FAULT_INJECTION: forcing a failure. [ 1455.598689][ T7637] name failslab, interval 1, probability 393216, space 0, times 0 [ 1455.666099][ T7637] CPU: 0 UID: 0 PID: 7637 Comm: syz.0.5193 Tainted: G L syzkaller #0 PREEMPT(full) [ 1455.666126][ T7637] Tainted: [L]=SOFTLOCKUP [ 1455.666131][ T7637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1455.666141][ T7637] Call Trace: [ 1455.666147][ T7637] [ 1455.666153][ T7637] dump_stack_lvl+0x100/0x190 [ 1455.666177][ T7637] should_fail_ex.cold+0x5/0xa [ 1455.666193][ T7637] should_failslab+0xc2/0x120 [ 1455.666211][ T7637] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1455.666226][ T7637] ? sock_alloc_inode+0x25/0x1c0 [ 1455.666244][ T7637] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1455.666258][ T7637] sock_alloc_inode+0x25/0x1c0 [ 1455.666272][ T7637] alloc_inode+0x68/0x250 [ 1455.666292][ T7637] sock_alloc+0x44/0x280 [ 1455.666312][ T7637] ? security_socket_create+0x7f/0x250 [ 1455.666335][ T7637] __sock_create+0xc2/0x860 [ 1455.666355][ T7637] __sys_socket+0x14d/0x260 [ 1455.666371][ T7637] ? __pfx___sys_socket+0x10/0x10 [ 1455.666387][ T7637] ? xfd_validate_state+0x129/0x190 [ 1455.666409][ T7637] __x64_sys_socket+0x72/0xb0 [ 1455.666425][ T7637] ? lockdep_hardirqs_on+0x78/0x100 [ 1455.666446][ T7637] do_syscall_64+0x106/0xf80 [ 1455.666467][ T7637] ? clear_bhb_loop+0x40/0x90 [ 1455.666485][ T7637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.666500][ T7637] RIP: 0033:0x7f20aad9bf79 [ 1455.666512][ T7637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1455.666526][ T7637] RSP: 002b:00007f20abc6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1455.666541][ T7637] RAX: ffffffffffffffda RBX: 00007f20ab015fa0 RCX: 00007f20aad9bf79 [ 1455.666551][ T7637] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1455.666560][ T7637] RBP: 00007f20aae327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1455.666569][ T7637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1455.666578][ T7637] R13: 00007f20ab016038 R14: 00007f20ab015fa0 R15: 00007ffd473d31e8 [ 1455.666597][ T7637] [ 1455.666605][ T7637] socket: no more sockets [ 1456.282413][ T7633] kexec: Could not allocate control_code_buffer [ 1456.704873][ T7698] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078800dc0 pfn:0x78800 [ 1456.731137][ T7698] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1456.749561][ T7698] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1456.789744][ T7698] raw: ffff888078800dc0 0000000000000000 00000001ffffffff 0000000000000000 [ 1456.841287][ T7698] page dumped because: unmovable page [ 1456.846669][ T7698] page_owner tracks the page as allocated [ 1456.852471][ T3015] Bluetooth: hci5: command tx timeout [ 1456.891325][ T7698] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 4707, tgid 4707 (syz-executor), ts 1388667353507, free_ts 1205812896975 [ 1456.938020][ T7701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5195'. [ 1456.962714][ T7698] post_alloc_hook+0x1e1/0x250 [ 1456.967504][ T7698] get_page_from_freelist+0x111d/0x3140 [ 1457.061311][ T7698] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 1457.108833][ T7698] alloc_pages_bulk_noprof+0x777/0x1500 [ 1457.135823][ T7698] __kasan_populate_vmalloc+0xf0/0x210 [ 1457.148554][ T7698] alloc_vmap_area+0x935/0x2a00 [ 1457.163349][ T7698] __get_vm_area_node+0x1ca/0x330 [ 1457.181118][ T7698] __vmalloc_node_range_noprof+0x213/0x1530 [ 1457.198398][ T7698] vmalloc_user_noprof+0x9e/0xe0 [ 1457.210251][ T7698] kcov_ioctl+0x4c/0x720 [ 1457.220336][ T7698] __x64_sys_ioctl+0x18e/0x210 [ 1457.233509][ T7698] do_syscall_64+0x106/0xf80 [ 1457.244977][ T7698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1457.260125][ T7698] page last free pid 23790 tgid 23785 stack trace: [ 1457.278553][ T7698] __free_frozen_pages+0x822/0x1130 [ 1457.291188][ T7698] rcu_core+0x5a2/0x10d0 [ 1457.301281][ T7698] handle_softirqs+0x1ea/0x910 [ 1457.312715][ T7698] do_softirq+0xac/0xe0 [ 1457.322366][ T7698] __local_bh_enable_ip+0xf8/0x120 [ 1457.337675][ T7698] kernel_fpu_end+0x64/0x80 [ 1457.349440][ T7698] sha256_blocks_avx2+0x4e/0x90 [ 1457.359522][ T7698] __sha256_update+0x188/0x1c0 [ 1457.369652][ T7698] crypto_sha256_update+0x23/0x30 [ 1457.382664][ T7698] crypto_shash_finup+0x34b/0x6b0 [ 1457.394711][ T7698] ima_calc_file_hash_tfm+0x299/0x350 [ 1457.406888][ T7698] ima_calc_file_hash+0x18c/0x480 [ 1457.416645][ T7698] ima_collect_measurement+0x887/0xa40 [ 1457.429210][ T7698] process_measurement+0xdfe/0x2350 [ 1457.439114][ T7698] ima_file_mmap+0x1c4/0x1f0 [ 1457.449189][ T7698] security_mmap_file+0x278/0x9b0 [ 1457.666329][ T7714] bond0: invalid ARP target specified [ 1457.692275][ T7714] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5197'. [ 1463.812328][T22317] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.901218][T22317] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.972699][T22317] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.049746][T22317] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.299098][T22317] bridge_slave_1: left allmulticast mode [ 1464.329910][T22317] bridge_slave_1: left promiscuous mode [ 1464.341028][T22317] bridge0: port 2(bridge_slave_1) entered disabled state [ 1464.351223][T22317] bridge_slave_0: left allmulticast mode [ 1464.372371][T22317] bridge_slave_0: left promiscuous mode [ 1464.378064][T22317] bridge0: port 1(bridge_slave_0) entered disabled state [ 1464.831954][T22317] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1464.868394][T22317] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1464.896220][T22317] bond0 (unregistering): Released all slaves [ 1465.144440][T22317] hsr_slave_0: left promiscuous mode [ 1465.175399][T22317] hsr_slave_1: left promiscuous mode [ 1465.189999][T22317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1465.197813][T22317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1465.240842][T22317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1465.248219][T22317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1465.311251][T22317] veth1_macvtap: left promiscuous mode [ 1465.316738][T22317] veth0_macvtap: left promiscuous mode [ 1465.341385][T22317] veth1_vlan: left promiscuous mode [ 1465.346629][T22317] veth0_vlan: left promiscuous mode [ 1465.680201][T22317] team0 (unregistering): Port device team_slave_1 removed [ 1465.705191][T22317] team0 (unregistering): Port device team_slave_0 removed [ 1468.355926][T24281] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1468.371610][T24281] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1468.379265][T24281] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1468.387068][T24281] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1468.395251][T24281] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1468.708265][ T7841] chnl_net:caif_netlink_parms(): no params data found [ 1468.965464][ T7841] bridge0: port 1(bridge_slave_0) entered blocking state [ 1468.999755][ T7841] bridge0: port 1(bridge_slave_0) entered disabled state [ 1469.006949][ T7841] bridge_slave_0: entered allmulticast mode [ 1469.041206][ T7841] bridge_slave_0: entered promiscuous mode [ 1469.066967][ T7841] bridge0: port 2(bridge_slave_1) entered blocking state [ 1469.099718][ T7841] bridge0: port 2(bridge_slave_1) entered disabled state [ 1469.106916][ T7841] bridge_slave_1: entered allmulticast mode [ 1469.139993][ T7841] bridge_slave_1: entered promiscuous mode [ 1469.207783][ T7841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1469.272999][ T7841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1469.373570][ T7841] team0: Port device team_slave_0 added [ 1469.400795][ T7841] team0: Port device team_slave_1 added [ 1469.474855][ T7841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1469.509827][ T7841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1469.600178][ T7841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1469.627550][ T7841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1469.659593][ T7841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1469.749583][ T7841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1469.872290][ T7841] hsr_slave_0: entered promiscuous mode [ 1469.878497][ T7841] hsr_slave_1: entered promiscuous mode [ 1469.921158][ T7841] debugfs: 'hsr0' already exists in 'hsr' [ 1469.926887][ T7841] Cannot create hsr debugfs directory [ 1470.449792][T24281] Bluetooth: hci7: command tx timeout [ 1472.529314][T24281] Bluetooth: hci7: command tx timeout [ 1472.852133][ T3015] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1472.867874][ T3015] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1472.875893][ T3015] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1472.884062][ T3015] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1472.891729][ T3015] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1473.274805][ T8101] chnl_net:caif_netlink_parms(): no params data found [ 1473.484234][ T8101] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.501104][ T8101] bridge0: port 1(bridge_slave_0) entered disabled state [ 1473.528552][ T8101] bridge_slave_0: entered allmulticast mode [ 1473.562715][ T8101] bridge_slave_0: entered promiscuous mode [ 1473.576558][ T8101] bridge0: port 2(bridge_slave_1) entered blocking state [ 1473.598202][ T8101] bridge0: port 2(bridge_slave_1) entered disabled state [ 1473.617485][ T8101] bridge_slave_1: entered allmulticast mode [ 1473.640155][ T8101] bridge_slave_1: entered promiscuous mode [ 1473.786210][ T8101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1473.830030][ T8101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1473.921499][ T8101] team0: Port device team_slave_0 added [ 1473.939678][ T8101] team0: Port device team_slave_1 added [ 1474.014501][ T8101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1474.029306][ T8101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1474.087641][ T8101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1474.123060][ T8101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1474.139259][ T8101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1474.196640][ T8101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1474.350195][ T8101] hsr_slave_0: entered promiscuous mode [ 1474.367383][ T8101] hsr_slave_1: entered promiscuous mode [ 1474.379490][ T8101] debugfs: 'hsr0' already exists in 'hsr' [ 1474.390970][ T8101] Cannot create hsr debugfs directory [ 1474.609644][ T3015] Bluetooth: hci7: command tx timeout [ 1474.929090][ T3015] Bluetooth: hci8: command tx timeout [ 1476.688810][ T3015] Bluetooth: hci7: command tx timeout [ 1477.009090][ T3015] Bluetooth: hci8: command tx timeout [ 1479.089740][ T3015] Bluetooth: hci8: command tx timeout [ 1481.168408][ T3015] Bluetooth: hci8: command tx timeout [ 1489.332355][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.340703][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1508.884774][T24281] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1508.903288][T24281] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1508.912413][T24281] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1508.920226][T24281] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1508.929467][T24281] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1509.231694][ T8457] chnl_net:caif_netlink_parms(): no params data found [ 1509.389503][ T8457] bridge0: port 1(bridge_slave_0) entered blocking state [ 1509.415144][ T8457] bridge0: port 1(bridge_slave_0) entered disabled state [ 1509.426154][ T8457] bridge_slave_0: entered allmulticast mode [ 1509.447630][ T8457] bridge_slave_0: entered promiscuous mode [ 1509.456842][ T8457] bridge0: port 2(bridge_slave_1) entered blocking state [ 1509.464934][ T8457] bridge0: port 2(bridge_slave_1) entered disabled state [ 1509.472049][ T8457] bridge_slave_1: entered allmulticast mode [ 1509.495903][ T8457] bridge_slave_1: entered promiscuous mode [ 1509.560210][ T8457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1509.587190][ T8457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1509.649186][ T8457] team0: Port device team_slave_0 added [ 1509.667980][ T8457] team0: Port device team_slave_1 added [ 1509.731782][ T8457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1509.744930][ T8457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1509.806415][ T8457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1509.836244][ T8457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1509.843193][ T8457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1509.904862][ T8457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1509.995955][ T8457] hsr_slave_0: entered promiscuous mode [ 1510.015342][ T8457] hsr_slave_1: entered promiscuous mode [ 1510.032904][ T8457] debugfs: 'hsr0' already exists in 'hsr' [ 1510.045200][ T8457] Cannot create hsr debugfs directory [ 1511.004765][T24281] Bluetooth: hci9: command tx timeout [ 1513.084760][T24281] Bluetooth: hci9: command tx timeout [ 1515.164185][T24281] Bluetooth: hci9: command tx timeout [ 1517.243995][T24281] Bluetooth: hci9: command tx timeout [ 1528.436273][ T3015] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1528.447565][ T3015] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1528.458195][ T3015] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1528.466325][ T3015] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1528.474059][ T3015] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1528.805271][ T8715] chnl_net:caif_netlink_parms(): no params data found [ 1528.968091][ T8715] bridge0: port 1(bridge_slave_0) entered blocking state [ 1528.993094][ T8715] bridge0: port 1(bridge_slave_0) entered disabled state [ 1529.000243][ T8715] bridge_slave_0: entered allmulticast mode [ 1529.023660][ T8715] bridge_slave_0: entered promiscuous mode [ 1529.031216][ T8715] bridge0: port 2(bridge_slave_1) entered blocking state [ 1529.052602][ T8715] bridge0: port 2(bridge_slave_1) entered disabled state [ 1529.072712][ T8715] bridge_slave_1: entered allmulticast mode [ 1529.094271][ T8715] bridge_slave_1: entered promiscuous mode [ 1529.154864][ T8715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1529.183851][ T8715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1529.248919][ T8715] team0: Port device team_slave_0 added [ 1529.270346][ T8715] team0: Port device team_slave_1 added [ 1529.333160][ T8715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1529.340106][ T8715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1529.412896][ T8715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1529.433894][ T8715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1529.440830][ T8715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1529.512461][ T8715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1529.607943][ T8715] hsr_slave_0: entered promiscuous mode [ 1529.623530][ T8715] hsr_slave_1: entered promiscuous mode [ 1529.629773][ T8715] debugfs: 'hsr0' already exists in 'hsr' [ 1529.643739][ T8715] Cannot create hsr debugfs directory [ 1530.522357][T24281] Bluetooth: hci10: command tx timeout [ 1532.602263][T24281] Bluetooth: hci10: command tx timeout [ 1533.433855][ T3015] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1533.450346][ T3015] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1533.461168][ T3015] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1533.471690][ T3015] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1533.479674][ T3015] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1533.794007][ T8973] chnl_net:caif_netlink_parms(): no params data found [ 1534.024860][ T8973] bridge0: port 1(bridge_slave_0) entered blocking state [ 1534.052011][ T8973] bridge0: port 1(bridge_slave_0) entered disabled state [ 1534.059166][ T8973] bridge_slave_0: entered allmulticast mode [ 1534.104866][ T8973] bridge_slave_0: entered promiscuous mode [ 1534.153045][ T8973] bridge0: port 2(bridge_slave_1) entered blocking state [ 1534.160123][ T8973] bridge0: port 2(bridge_slave_1) entered disabled state [ 1534.192682][ T8973] bridge_slave_1: entered allmulticast mode [ 1534.213674][ T8973] bridge_slave_1: entered promiscuous mode [ 1534.300609][ T8973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1534.353079][ T8973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1534.430055][ T8973] team0: Port device team_slave_0 added [ 1534.474672][ T8973] team0: Port device team_slave_1 added [ 1534.552411][ T8973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1534.559356][ T8973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1534.671808][ T8973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1534.682696][T24281] Bluetooth: hci10: command tx timeout [ 1534.709299][ T8973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1534.742155][ T8973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1534.824061][ T8973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1534.957765][ T8973] hsr_slave_0: entered promiscuous mode [ 1534.982765][ T8973] hsr_slave_1: entered promiscuous mode [ 1534.988793][ T8973] debugfs: 'hsr0' already exists in 'hsr' [ 1535.022037][ T8973] Cannot create hsr debugfs directory [ 1535.562236][T24281] Bluetooth: hci11: command tx timeout [ 1536.042592][ T30] INFO: task syz.3.5048:5070 blocked for more than 143 seconds. [ 1536.050252][ T30] Tainted: G L syzkaller #0 [ 1536.071676][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1536.080524][ T30] task:syz.3.5048 state:D stack:29048 pid:5070 tgid:5062 ppid:29293 task_flags:0x400040 flags:0x00080002 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1536.121758][ T30] Call Trace: [ 1536.141300][ T30] [ 1536.151662][ T30] __schedule+0x1023/0x6000 [ 1536.156180][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1536.161108][ T30] ? __pfx___schedule+0x10/0x10 [ 1536.191660][ T30] ? find_held_lock+0x2b/0x80 [ 1536.196351][ T30] ? schedule+0x2bf/0x390 [ 1536.200695][ T30] schedule+0xdd/0x390 [ 1536.299219][ T30] schedule_preempt_disabled+0x13/0x30 [ 1536.315569][ T30] __mutex_lock+0xc9a/0x1b90 [ 1536.320178][ T30] ? netlink_has_listeners+0x20f/0x430 [ 1536.341658][ T30] ? devlink_health_report+0x62b/0xa80 [ 1536.351827][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1536.356855][ T30] ? devlink_recover_notify.constprop.0+0x200/0x670 [ 1536.385331][ T30] ? __lock_acquire+0x481/0x2630 [ 1536.390278][ T30] ? devlink_health_report+0x62b/0xa80 [ 1536.402458][ T30] devlink_health_report+0x62b/0xa80 [ 1536.407743][ T30] ? __pfx_devlink_health_report+0x10/0x10 [ 1536.421796][ T30] ? _copy_from_user+0x59/0xd0 [ 1536.426553][ T30] nsim_dev_health_break_write+0x166/0x210 [ 1536.448454][ T30] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 1536.461623][ T30] full_proxy_write+0x135/0x1a0 [ 1536.466483][ T30] vfs_write+0x2aa/0x1070 [ 1536.470796][ T30] ? __pfx_full_proxy_write+0x10/0x10 [ 1536.495111][ T30] ? __pfx_vfs_write+0x10/0x10 [ 1536.499883][ T30] ? __fget_files+0x215/0x3d0 [ 1536.522206][ T30] ? __fget_files+0x21f/0x3d0 [ 1536.526889][ T30] ksys_write+0x12a/0x250 [ 1536.531202][ T30] ? __pfx_ksys_write+0x10/0x10 [ 1536.550836][ T30] ? kcov_ioctl+0x16a/0x720 [ 1536.568061][ T30] ? fput+0x79/0x100 [ 1536.581627][ T30] do_syscall_64+0x106/0xf80 [ 1536.586225][ T30] ? clear_bhb_loop+0x40/0x90 [ 1536.591070][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.611600][ T30] RIP: 0033:0x7f1711b9bf79 [ 1536.616029][ T30] RSP: 002b:00007f17129f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1536.641741][ T30] RAX: ffffffffffffffda RBX: 00007f1711e16180 RCX: 00007f1711b9bf79 [ 1536.649715][ T30] RDX: 00000000000001e1 RSI: 0000200000000080 RDI: 0000000000000006 [ 1536.682698][ T30] RBP: 00007f1711c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1536.690865][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1536.715123][ T30] R13: 00007f1711e16218 R14: 00007f1711e16180 R15: 00007ffead0d5e38 [ 1536.731614][ T30] [ 1536.734722][ T30] [ 1536.734722][ T30] Showing all locks held in the system: [ 1536.763094][T24281] Bluetooth: hci10: command tx timeout [ 1536.781603][ T30] 1 lock held by khungtaskd/30: [ 1536.786456][ T30] #0: ffffffff8e5e7060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1536.811765][ T30] 1 lock held by syz.4.3996/23788: [ 1536.816878][ T30] 1 lock held by syz.4.3996/23790: [ 1536.841696][ T30] 2 locks held by getty/27837: [ 1536.847458][ T30] #0: ffff888032b9d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1536.871768][ T30] #1: ffffc90003c0b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1536.891644][ T30] 7 locks held by syz-executor/4730: [ 1536.897096][ T30] #0: ffff888035df4420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1536.922277][ T30] #1: ffff88804cbf2488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1536.942429][ T30] #2: ffff888028b491e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1536.971562][ T30] #3: ffffffff8f95b608 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1536.993236][ T30] #4: ffff88805e3d80e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xaa/0x600 [ 1537.031765][ T30] #5: ffff88802c069250 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0 [ 1537.061548][ T30] #6: ffff88805e702988 (&sb->s_type->i_mutex_key#10/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0 [ 1537.082101][ T30] 3 locks held by syz.3.5048/5070: [ 1537.087208][ T30] #0: ffff888044b7e0f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1537.111524][ T30] #1: ffff8880202ae420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1537.120504][ T30] #2: ffff88802c069250 (&devlink->lock_key#5){+.+.}-{4:4}, at: devlink_health_report+0x62b/0xa80 [ 1537.156833][ T30] 1 lock held by syz.4.5071/5502: [ 1537.165199][ T30] 4 locks held by syz-executor/5640: [ 1537.170476][ T30] #0: ffff888035df4420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1537.201534][ T30] #1: ffff8880706ab488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1537.221551][ T30] #2: ffff888028b491e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1537.247438][ T30] #3: ffffffff8f95b608 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1537.271565][ T30] 4 locks held by syz-executor/7176: [ 1537.281680][ T30] #0: ffff888035df4420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1537.290647][ T30] #1: ffff888034d2fc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1537.329681][ T30] #2: ffff888028b491e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1537.351567][ T30] #3: ffffffff8f95b608 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1537.375851][ T30] 2 locks held by syz.0.5197/7713: [ 1537.380962][ T30] #0: ffff8880202ae420 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x9b1/0x31a0 [ 1537.411471][ T30] #1: ffff88805e702988 (&sb->s_type->i_mutex_key#18){++++}-{4:4}, at: path_openat+0xa16/0x31a0 [ 1537.430783][ T30] 4 locks held by syz-executor/7841: [ 1537.451494][ T30] #0: ffff888035df4420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1537.471498][ T30] #1: ffff88804495dc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1537.511501][ T30] #2: ffff888028b491e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1537.531480][ T30] #3: ffffffff8f95b608 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1537.564891][ T30] 4 locks held by syz-executor/8101: [ 1537.570185][ T30] #0: ffff888035df4420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1537.601539][ T30] #1: ffff8880203efc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1537.628102][ T30] #2: ffff888028b491e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1537.642307][T24281] Bluetooth: hci11: command tx timeout [ 1537.661596][ T30] #3: ffffffff8f95b608 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1537.681513][ T30] 4 locks held by syz-executor/8457: [ 1537.686792][ T30] #0: ffff888035df4420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1537.721759][ T30] #1: ffff888033323088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1537.732009][ T30] #2: ffff888028b491e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1537.763305][ T30] #3: ffffffff8f95b608 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1537.779534][ T30] 4 locks held by syz-executor/8715: [ 1537.791526][ T30] #0: ffff888035df4420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1537.800491][ T30] #1: ffff88806f1e2088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1537.831478][ T30] #2: ffff888028b491e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1537.851612][ T30] #3: ffffffff8f95b608 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1537.882362][ T30] 4 locks held by syz-executor/8973: [ 1537.887638][ T30] #0: ffff888035df4420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1537.911540][ T30] #1: ffff8880491f8488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1537.935261][ T30] #2: ffff888028b491e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1537.951429][ T30] #3: ffffffff8f95b608 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1537.983354][ T30] 2 locks held by dhcpcd/9230: [ 1537.988415][ T30] #0: ffff88808d07a260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 1538.011430][ T30] #1: ffffffff8e5f2c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1538.031445][ T30] 1 lock held by dhcpcd/9234: [ 1538.036106][ T30] #0: ffff88809a566260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 1538.062305][ T30] [ 1538.064633][ T30] ============================================= [ 1538.064633][ T30] [ 1538.112055][ T30] NMI backtrace for cpu 0 [ 1538.112076][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1538.112098][ T30] Tainted: [L]=SOFTLOCKUP [ 1538.112104][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1538.112113][ T30] Call Trace: [ 1538.112118][ T30] [ 1538.112124][ T30] dump_stack_lvl+0x100/0x190 [ 1538.112148][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1538.112171][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1538.112191][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1538.112211][ T30] sys_info+0x141/0x190 [ 1538.112224][ T30] watchdog+0xcc3/0xfe0 [ 1538.112249][ T30] ? __pfx_watchdog+0x10/0x10 [ 1538.112268][ T30] ? __kthread_parkme+0x18c/0x230 [ 1538.112292][ T30] ? kthread+0x13a/0x450 [ 1538.112305][ T30] ? __pfx_watchdog+0x10/0x10 [ 1538.112322][ T30] kthread+0x370/0x450 [ 1538.112336][ T30] ? __pfx_kthread+0x10/0x10 [ 1538.112352][ T30] ret_from_fork+0x754/0xd80 [ 1538.112372][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1538.112391][ T30] ? __switch_to+0x7b4/0x10c0 [ 1538.112404][ T30] ? __pfx_kthread+0x10/0x10 [ 1538.112420][ T30] ret_from_fork_asm+0x1a/0x30 [ 1538.112443][ T30] [ 1538.376908][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1538.383767][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1538.394426][ T30] Tainted: [L]=SOFTLOCKUP [ 1538.398727][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1538.408758][ T30] Call Trace: [ 1538.412019][ T30] [ 1538.414929][ T30] dump_stack_lvl+0x100/0x190 [ 1538.419598][ T30] vpanic+0x20d/0x630 [ 1538.423561][ T30] panic+0xd1/0xd1 [ 1538.427261][ T30] ? __pfx_panic+0x10/0x10 [ 1538.431658][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1538.437794][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1538.443927][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1538.450058][ T30] ? watchdog.cold+0x198/0x1ca [ 1538.454801][ T30] ? watchdog+0xcd3/0xfe0 [ 1538.459114][ T30] watchdog.cold+0x1a9/0x1ca [ 1538.463692][ T30] ? __pfx_watchdog+0x10/0x10 [ 1538.468350][ T30] ? __kthread_parkme+0x18c/0x230 [ 1538.473365][ T30] ? kthread+0x13a/0x450 [ 1538.477585][ T30] ? __pfx_watchdog+0x10/0x10 [ 1538.482244][ T30] kthread+0x370/0x450 [ 1538.486292][ T30] ? __pfx_kthread+0x10/0x10 [ 1538.490863][ T30] ret_from_fork+0x754/0xd80 [ 1538.495439][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1538.500539][ T30] ? __switch_to+0x7b4/0x10c0 [ 1538.505194][ T30] ? __pfx_kthread+0x10/0x10 [ 1538.509766][ T30] ret_from_fork_asm+0x1a/0x30 [ 1538.514517][ T30] [ 1538.517574][ T30] Kernel Offset: disabled [ 1538.521881][ T30] Rebooting in 86400 seconds..