last executing test programs: 3m34.158491508s ago: executing program 1 (id=415): bpf$auto_BPF_PROG_QUERY(0x10, &(0x7f0000000a80)=@bpf_attr_3={0x0, 0x1, 0x100000001, 0x2, 0x2, 0x6, 0x6120865b, 0x10, 0xccb, "411ee11343ab7a378e52fa1977c7bc4c", 0x0, 0x7, 0xffffffffffffffff, 0x8001, 0xc, 0x2, 0x8, 0x8, 0x7, 0x8, @attach_btf_obj_fd, 0x825e, 0x1, 0x2, 0x80000001, 0x5}, 0x100) r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r1 = io_uring_setup$auto(0x1, 0x0) write$auto_fops_init_pkru_pkeys(r1, 0x0, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x20b42, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000300)="de91b83a075ce51fff544f85b0b6d328f3beb9b8634fd16bf2701cb13a2d93abd414c9a1586e4fbc7b163c42c4783614b2dcf995a43c8cf63d102facaebb7019f67c4241ee77139ef43eac615fcf4ca071ad7ecd284cb135be34415cca234d6a11827f2178354b81a06111504ccdbebb0a5fe8cce82085a67d2b34e551a52a59", 0x80) recvmmsg$auto(0x3, 0x0, 0x10000, 0x4ff, 0x0) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cec10\x00', 0x101901, 0x0) ioctl$auto_CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000400)={0x6, 0x0, 0x7, 0x0, 0x2, 0x7fffffff, "9b218908434a625dff0d8e3475a77466", 0xb, 0x5, 0x9, 0x5, 0x2, 0x7, 0x24}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000480)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@HWSIM_ATTR_RADIO_NAME={0x16, 0x11, '/dev/snd/midiC2D0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000010) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NBD_CMD_STATUS(r6, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) 3m33.475188023s ago: executing program 0 (id=416): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cec10\x00', 0x101901, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r1 = socket(0x1d, 0x2, 0x7) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r1, &(0x7f0000000000)=@can={0x1d, r3}, 0x6a) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r4}, 0x18) r5 = getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) ioctl$auto_CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000400)={0x6, 0x0, 0x7, 0x0, 0x2, 0x7fffffff, "9b218908434a625dff0d8e3475a77466", 0xb, 0x5, 0x9, 0x5, 0x2, 0x7, 0x24}) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/oom_adj\x00', 0x406841, 0x0) ioctl$auto_UBI_IOCATT(r5, 0x40186f40, &(0x7f0000000240)={0x2, 0xb, 0xe6f5, 0x0, 0x9, 0x9}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x2, 0xf) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x7f4, r8, 0x785202f68de70351, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x5}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0xf5, 0xba, "509b15adc70c6689b38c58b49068807ab6929df0f107cbd746f9b800783b9e2e8c91ec324b6c5b2eff37d77e6c43c6952a3e02dc2164c22404b7ea0132281cbaae9e3d6934ebe15d276bba0e5633a8855a60fe6680b08cf7277cfffaf8edd88a1393d9ddc5c6a63a18860ca09f1bf162d4e30c9c0cdc19adafa700d12320f2e6e565c249ef6bece6028f488fe89c044e80f0294d600a63ae3ab142ce7972777bfd2af5aa8aa1753428a6f9fdedf90725c859311195207ec60f987ce18f7fa0b07bd00a2d9b3bc43d19bece8e0541ef3b4a76a12463ccf7449db58682554e4139cfc0fe362e14a41887e47336d40183b77c"}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x1000}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e23}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x6c4}]}, 0x7f4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r6, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, r8, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_AUTH_DATA={0xbe, 0x9c, "417a990b3054efd94fe1a97625f8bbd84a1eb8ddf36647dcafe0806e33514c4582147da0148066a6564dd456fc691f0372f1ea51900d0f1b825ab5a8f4142f062a16ddf6dd90df441a99bf89f6c982c3c681b9626830858ceee2bc58669ef6f67947727a178c8296965a237ebda1a0eed2e08dea0b2acedf6297be682c672776cec55dcf8579aef1013ec58052fef5357d4603ab20ad3893920888937612b2fe6c05943e6842289ad71e23d278e6451711f2e7b8b095f318df8d"}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0xd8}, 0x1, 0x0, 0x0, 0x488c0}, 0x8801) 3m33.31028787s ago: executing program 1 (id=417): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) (async) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x4, 0x9f, 0x8000000008012, r1, 0x8000) (async) mmap$auto(0x0, 0x4, 0x9f, 0x8000000008012, r1, 0x8000) mprotect$auto(0x1000, 0x401000, 0x4) mmap$auto(0x0, 0x202000a, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x2) (async) mmap$auto(0x0, 0x202000a, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x2) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) (async) socket(0x15, 0x5, 0x0) rt_sigsuspend$auto(0x0, 0x8) r2 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r2, 0x29, 0xb, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x8000000000000001, 0x7, 0x4, 0x9b72, 0xffffffffffffffff, 0xf34) socket(0x11, 0x2, 0x2) mmap$auto(0x6, 0x9, 0x80000000, 0x11, 0x3, 0x0) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) 3m32.931825957s ago: executing program 0 (id=418): r0 = socket(0x18, 0x2, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x20a000, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x662c2, 0xe1d2b27bdc14aa0c) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r1, 0x0) r2 = ioctl$auto_userfaultfd_dev_fops_userfaultfd(r1, 0x10, &(0x7f0000000180)="dccb9c094d8a6cb2e26e4f") r3 = socket(0x10, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop5/queue/discard_max_bytes\x00', 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto_EPOLL_CTL_MOD(r4, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)={0x401, 0x20100}) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000002100), 0xffffffffffffffff) r5 = syz_clone3(&(0x7f0000000500)={0x210000000, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0)=0x0, {}, &(0x7f0000000340)=""/250, 0xfa, &(0x7f0000000440)=""/86, &(0x7f00000004c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x6, {r2}}, 0x58) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x1, 0x84) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) sendmsg$auto_TIPC_NL_LINK_GET(r4, &(0x7f0000001e40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001e00)={&(0x7f0000000900)=ANY=[@ANYBLOB="48180000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fbdbdf250800000093000000bab2eb98f625423e41f1737505e4efad9a1a08133b99baf888c28dd65258f64b7ff643b8be0f512b0377297a92b572bc394e7e53834b7be049cd67f154dd41abe7d4c38ba6042b544958581cc56f335f1c45c79a3c117e04d4c84db9cc8153d169988d28e9cd014d133328b1966b728491e44d7dfa309649485bf0519579cb5dc4d3e222186289e6412f1474be34c400a01709800c00230072222d12000000005d11b8800800df00", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r0, @ANYRES16=r6, @ANYBLOB="08005900ffff000004008d00a1efce0c46ed9d721af36efadae6bd2c1921e9e61120db2ebd3979b1a44261b7ae4b087cf4d0c27d039737d62a2d09272f191bf60984526b5a5c78dc0b6290d4128d020e47e0c433d829fd628cb77ce477d6d3bab9e0e75229cfb96dfa8a88d35c1130864bdb3bd390ea78381e9230cb9cdeb6ede851fee1c35313fd23535fc647d9be14dac35907b0d751928a2e59bdf0b21f38598b6bc68abc216ae4f7a12fb3588a80e19d7de532b59eee515b2eeb2f0690a48fa6685e6e1568c1b3b0e6ea8ef0c1b90a54ef", @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r5, @ANYBLOB="14007800fc000000000000000000000000000001a4220ef16b3b05e275992508d934beeceb3baf859a63fdd11056648f9b041b6ebdec05cf31327c379aeb86600eef70fc056daa356aa561a1008bd406c5aac2c4b3b06c42e8c3d582d8066deaa015939b542838", @ANYRES32, @ANYBLOB], 0x1848}}, 0x40000c1) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80000, 0x0) ioctl$auto_VFIO_GET_API_VERSION(r1, 0x3b64, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x1c1041, 0x0) read$auto(r7, 0x0, 0x20) r8 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r8, &(0x7f0000000200)={0x0, 0x7}, 0x3) prctl$auto(0x1000000001c, 0x5, 0x100000000, 0x400000000009, 0x3fffffffff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001ec0), r0) setreuid$auto(0x0, 0x5) unshare$auto(0x40000080) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) 3m30.879347748s ago: executing program 1 (id=422): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x100) write$auto_cachefiles_daemon_fops_internal(r0, &(0x7f00000000c0)='a', 0x1) r1 = set_tid_address$auto(0x0) capset$auto(&(0x7f0000000040)={0x19980330, r1}, 0x0) prctl$auto(0x74, 0x4, r1, 0x9, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/setgroups\x00', 0x8102, 0x0) 3m30.871217429s ago: executing program 0 (id=423): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80000, 0x0) r1 = socket(0x2, 0x801, 0x106) setsockopt$auto(r1, 0x3, 0x4, &(0x7f0000000040)='\xe2 \xa8\xf4', 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NET_SET(r2, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000624fee4b156b0bed1cae02001fa0dd9876016ca85b03f4f3f5c26d7fdedbc1faeb7d12620300007ee21b3a1429e7057633e6fbe2f5c815be65d5159cf15ebd5f602ab54faeca3e1e032c8c00000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf250f0000000c00078008000200", @ANYRESOCT=r0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x2) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) socket(0x840000000002, 0x3, 0xff) mmap$auto(0x0, 0xa, 0xdc, 0x9b72, 0x5, 0x8000) r4 = socketcall$auto(0xffe, 0x0) close_range$auto(0x2, 0xa, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1643, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xc008ae67, r4) openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000000080), 0x48040, 0x0) sendmsg$auto_TIPC_NL_BEARER_ADD(r1, &(0x7f0000001980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20044040}, 0x20004000) r6 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card1\x00', 0x101002, 0x0) ioctl$auto(r6, 0x9000643a, 0xc35) write$auto(0x3, 0x0, 0xfffffdef) read$auto(r0, 0x0, 0x20) r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) writev$auto(r7, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) setsockopt$auto_SO_DONTROUTE(r6, 0xfffff000, 0x5, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x1) 3m30.728284743s ago: executing program 1 (id=424): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/smaps\x00', 0x2, 0x0) msgget$auto(0x3, 0x9) r2 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x101000, 0x0) ioctl$auto_OSS_GETVERSION(r2, 0x80044d76, &(0x7f0000000080)="dcc71df721a98a35bcb938ee9fa3e96977b164ee2c0658a169350c2390cb07515e52ec7aed9518098b1f55e5c383a2a808859c805b8d19c5f1eb419c8b9ea1abb8267e56e4a99880219c618f8d57af9d061a582c0b81127deca3af6e5700b83ecff72d974cd252cec1b54d68bd0438531250b91f0b0751e82231a5652971689ae6120c6861e497e98f9730070d947a") r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.5/usb6/6-0:1.0/ep_81/type\x00', 0x4a0001, 0x0) connect$auto(r0, &(0x7f0000000180)=@l2tp={0x2, 0x0, @local, 0x4}, 0x100) msgget$auto(0x3, 0xfffffffb) acct$auto(&(0x7f00000001c0)='/proc/thread-self/smaps\x00') msgget$auto(0xdf, 0xff) keyctl$auto_KEYCTL_READ(0xb, 0x743, 0x9, 0x101, 0x5) msgget$auto(0x2, 0x7ff) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/controlC0\x00', 0x480, 0x0) mmap$auto(0x6, 0xd, 0x6, 0x7fffffffffffffff, r4, 0x8000000000000001) syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000240), r4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/vivid.0/video4linux/swradio12/power/runtime_active_time\x00', 0x40400, 0x0) acct$auto(&(0x7f0000000300)='/dev/mixer\x00') ioctl$auto_FIONREAD(r3, 0x541b, 0x401) r5 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mtd0ro\x00', 0x20000, 0x0) ioctl$auto_MEMERASE64(r5, 0x40104d14, &(0x7f0000000380)={0x7, 0x1}) sched_setscheduler$auto(0x0, 0x9, &(0x7f00000003c0)={0x5}) keyctl$auto_KEYCTL_READ(0xb, 0x4, 0xdab3800000000000, 0xb, 0x0) msgget$auto(0x7, 0x46) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ram8\x00', 0x82000, 0x0) ioctl$auto_BLKROSET(r6, 0x125d, 0x0) r7 = socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000440)=0x1dd) ioctl$auto_BTRFS_IOC_SEND(r7, 0x40489426, &(0x7f00000004c0)={@inferred=r1, 0x0, &(0x7f0000000480)=0x7c80, 0x4000000, 0x7, 0x0, "3c27d8a2d20d3b56f880e090830a6f6831484a439dac412f037f1717"}) capget$auto(&(0x7f0000000540)={0x80000000, 0x0}, &(0x7f0000000580)={0xe8, 0x3, 0x4}) syz_open_procfs$namespace(r8, &(0x7f00000005c0)='ns/pid_for_children\x00') openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000600)='/sys/devices/virtual/misc/vhci/power/autosuspend_delay_ms\x00', 0x80201, 0x0) 3m30.468628034s ago: executing program 1 (id=427): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/pppoe\x00', 0x440002, 0x0) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000140)='/dev/binderfs/binder1\x00', 0x0, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video67\x00', 0x169000, 0x0) r4 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/tdls_wider_bw\x00', 0x2e41, 0x0) write$auto(r4, &(0x7f00000005c0)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85\x00 /zm\x7f\x8fg,p81\xb6\xbb\xd8D\xde\x0eR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~\b\x00\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xcf\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xe1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb\xf6n\x82\xd4\xd6\xcc\xc19\x95+\x94\xb0f\xbb\x85\xf9\x98\xf8\x85Z\x19\xc0\x8a:(\xf6\x7fR^&cU\xfc\xae\x87\xf2\\\x02\xd3\xe9\x9f\xeb&l\x86D\x98\xa0\xc0 \xcec\xa3\x13\xf7\x02\a\x9d\x9d\x8e\x81\x8eu\xc73\x9f\x02\xe7 \x03\x9c\xab\xbe\x85-\a\"H\x87\x12A\xdc\xedF\xa3t\x91\x9f!\x8c\xd1A\xe7\x95\xa7\"\x8c\xb5\x1b\x80\x12u\x90AI\xc2\xbao3Ob\x94\xfa\'\x8d\x0f\xc6&\x94C\xa6|~\xebn-\x17\x1e+-\xdc\xe6f0cm\xf2\t\xb4:\x93g}/%\xc2\xe5\x8c\xd8\xc1+T\xe9@ys\xa8\xf0\xf3\xd3\x1e\x93\xe5\xbe\xb5\xee\xbf\xb2\xbb\x1dP\xbb\xa2$\xd5`\x01\xf0G\xa8\xf2`\x9e\x98\xa6+xX6M>\x8fq\xab\xaa\xe4\x87\xa1\xaa\x1d\xee\xb1[\x9e\x03\xdd\x11\x1dTg\x1b\x91\x86\x05\xf6\xa5 1\xbeSL\x19\x80\x9f.\n\xa4\xa80\xd8\xeb\x86\xf1s\xea\x17\xb4\x1a@\xa3\x15\xd9\x8fE\xc5\x00\x00\x00\x00', 0x1) ioctl$auto(r3, 0xc0285628, r3) move_pages$auto(0x0, 0x5, &(0x7f0000000380)=0x0, 0x0, 0x0, 0x2) ioctl$auto_BINDER_WRITE_READ(r2, 0x541b, 0x0) mmap$auto(0x4, 0x8000000000000000, 0xd8, 0x100eb4, r1, 0x4) socketpair$auto(0x1, 0x5, 0x8, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC0D0p\x00', 0x40002, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x82000000) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80003, 0x0) prctl$auto(0x3e, 0x1, r0, 0x41, 0xfffffffffffffffc) set_mempolicy$auto(0x9, 0x0, 0x20000003f46) mmap$auto(0x200000000, 0xd561, 0x10000000000df, 0x13, 0xffffffffffffffff, 0x8004) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) close_range$auto(0x2, 0x8, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x1) truncate$auto(&(0x7f0000000000)='}[,&*}\x00', 0x5) memfd_create$auto(0x0, 0x5) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r5, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) 3m30.267609915s ago: executing program 0 (id=428): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x1) io_uring_setup$auto(0x1ff, 0x0) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x9) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_VENDOR(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0582ab371f276353165e9e74fddd0727bd7000fbdbdf2567000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 3m29.897788061s ago: executing program 0 (id=429): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0x4068aea3, &(0x7f0000000040)={0xdc}) r2 = socket(0x23, 0x80805, 0x0) ioctl$auto(r2, 0x89ed, 0xfffffffffffff4e0) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x2, 0x1, 0x106) bind$auto(r4, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) move_pages$auto(0x0, 0x1001, 0x0, 0x0, 0x0, 0x0) r5 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) r7 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x14000, 0x0) fcntl$auto_F_GETFL(r7, 0x3, 0xf2) ioctl$auto(r6, 0x5393, r5) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="000000001728f500958b967dd3d5c927d0dd72e104525651490349bf40c0eee074d891a3c76a42371c8e01a614353f137b3e743d9fdd6bd837", @ANYRESOCT=r7, @ANYBLOB="1b0026bd7000fddbdf250300000004"], 0x4c}, 0x1, 0x0, 0x0, 0x4004040}, 0x2404c881) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0xfffffdef) socket(0x2, 0x3, 0x100) msgsnd$auto(0x0, &(0x7f0000000040)={0x40000007fc, 0x7}, 0x4000400, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r8 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vbi19\x00', 0x8654092f478cae21, 0x0) ioctl$auto(0x3, 0xc0205649, r8) sendmsg$auto_NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200026bd7000fbdbdf2512000000080028380000000006000a0039bc000006000a0000000000fbcc69d669a7eea33be706bf0c9e5ab15ad8b64513c20bfbc78400a8c1f99f2b5d8bed569dc397ee467c0f49b417d9a01381f31a3c9194b015363e03000000000000000dec413f55551e682d0c4c975862fb67965c72"], 0x2c}, 0x1, 0x0, 0x0, 0xc010}, 0x4050) 3m29.026696581s ago: executing program 0 (id=434): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) (async, rerun: 64) close_range$auto(0x2, 0xffffffffffffffff, 0x400) (rerun: 64) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x3, 0xe985, 0xdf, 0xeb1, 0x401, 0x2) socket(0x10, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) bpf$auto(0x1, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x8000, 0xf9c, 0x0, 0x9, 0x3, 0x6, 0x2, 0x4, 0x200, 0x1fd, 0xb5, 0x4, 0x6, 0x3}, 0xa3) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x7e) (async, rerun: 64) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="58020000", @ANYRES16=0x0, @ANYBLOB="20002abd7000fddbdf250300000004000600ea00078008002f00", @ANYRES32, @ANYBLOB='\b\x00&\x00', @ANYRES32, @ANYBLOB="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"], 0x258}, 0x1, 0x0, 0x0, 0x40000080}, 0x20) (async, rerun: 64) ptrace$auto_PTRACE_SETOPTIONS(0x4200, 0x0, 0x5, 0x3ff) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0) write$auto(r1, 0x0, 0x81) ioctl$auto(0xffffffffffffffff, 0x5646, 0xffffffffffffffff) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async, rerun: 32) write$auto(0xffffffffffffffff, 0x0, 0x81) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) bind$auto(0xffffffffffffffff, 0x0, 0x6b) (async) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/platform/vhci_hcd.3/usb15/15-0:1.0/usb15-port4/power/autosuspend_delay_ms\x00', 0x4000, 0x0) fanotify_init$auto(0x5, 0x2000000000002) (async) r3 = open(0x0, 0xc00, 0x409) timer_gettime$auto(0x0, 0x0) (async) preadv$auto(r3, &(0x7f0000000080)={0x0}, 0x4, 0x8001, 0x6) (async) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)="3290b800009c550d22350f737ca2dd0af0d849aec832ec49c034169af8fa9231c143b1a8dd292977588a83400445ddc508f3aef64488936413adba3a9cc99bdfd8e7000000", 0x45) 3m27.94249727s ago: executing program 1 (id=435): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = socket(0x10, 0x2, 0x0) open_by_handle_at$auto(r0, &(0x7f00000000c0)={0x3d, 0x7, "bb2f21036c71b4a60b94d2caecb6426037446c84a779f50c8b412056c9f46d685f4d7bbc0f9c080e339aab3881ad2c337e940add8c9f6ad5169a2eb407"}, 0x1) r1 = openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/current_tracer\x00', 0x1000, 0x0) getsockopt$auto_SO_OOBINLINE(r1, 0x6, 0xa, &(0x7f0000000080)='\x02\x00\x00\x00\x00\x00\x00\x00\x00\x01$\x00\x00\x00\x1a\x00\xa1\x01\xc3\xe6\x9d\xd8`\t\x8b)\x06R\xda\x7f\xda\xc8x\xda\xe5$G\x14', &(0x7f0000000040)=0x80000000) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket(0x2, 0x1, 0x0) getsockopt$auto(r2, 0x1, 0x8, 0xfffffffffffffffc, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x0) socket(0x2b, 0x1, 0x40001) sysinfo$auto(0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r3, &(0x7f0000000080)='MJC802154_HWSIM\x00\xcb\x0fX\xc7\xfdx!\xf7\xb5T\x04\xad\x96\xf4\xbc\xca\xa52UWT1\a\x00\x00\x00\x00\x00\x007\xc9\xa6\x8a', 0x1060) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) listen$auto(0x3, 0x81) ioctl$auto_UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000000c0)={{0x1009, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r4, 0x5501, 0x0) ioctl$auto_UI_SET_FFBIT(r4, 0x4004556b, 0x0) socketpair$auto(0xfffffffe, 0x7, 0x8000000000000000, 0x0) 3m13.395177427s ago: executing program 32 (id=434): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) (async, rerun: 64) close_range$auto(0x2, 0xffffffffffffffff, 0x400) (rerun: 64) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x3, 0xe985, 0xdf, 0xeb1, 0x401, 0x2) socket(0x10, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) bpf$auto(0x1, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x8000, 0xf9c, 0x0, 0x9, 0x3, 0x6, 0x2, 0x4, 0x200, 0x1fd, 0xb5, 0x4, 0x6, 0x3}, 0xa3) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x7e) (async, rerun: 64) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="58020000", @ANYRES16=0x0, @ANYBLOB="20002abd7000fddbdf250300000004000600ea00078008002f00", @ANYRES32, @ANYBLOB='\b\x00&\x00', @ANYRES32, @ANYBLOB="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"], 0x258}, 0x1, 0x0, 0x0, 0x40000080}, 0x20) (async, rerun: 64) ptrace$auto_PTRACE_SETOPTIONS(0x4200, 0x0, 0x5, 0x3ff) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0) write$auto(r1, 0x0, 0x81) ioctl$auto(0xffffffffffffffff, 0x5646, 0xffffffffffffffff) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async, rerun: 32) write$auto(0xffffffffffffffff, 0x0, 0x81) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) bind$auto(0xffffffffffffffff, 0x0, 0x6b) (async) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/platform/vhci_hcd.3/usb15/15-0:1.0/usb15-port4/power/autosuspend_delay_ms\x00', 0x4000, 0x0) fanotify_init$auto(0x5, 0x2000000000002) (async) r3 = open(0x0, 0xc00, 0x409) timer_gettime$auto(0x0, 0x0) (async) preadv$auto(r3, &(0x7f0000000080)={0x0}, 0x4, 0x8001, 0x6) (async) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)="3290b800009c550d22350f737ca2dd0af0d849aec832ec49c034169af8fa9231c143b1a8dd292977588a83400445ddc508f3aef64488936413adba3a9cc99bdfd8e7000000", 0x45) 3m12.827555408s ago: executing program 33 (id=435): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = socket(0x10, 0x2, 0x0) open_by_handle_at$auto(r0, &(0x7f00000000c0)={0x3d, 0x7, "bb2f21036c71b4a60b94d2caecb6426037446c84a779f50c8b412056c9f46d685f4d7bbc0f9c080e339aab3881ad2c337e940add8c9f6ad5169a2eb407"}, 0x1) r1 = openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/current_tracer\x00', 0x1000, 0x0) getsockopt$auto_SO_OOBINLINE(r1, 0x6, 0xa, &(0x7f0000000080)='\x02\x00\x00\x00\x00\x00\x00\x00\x00\x01$\x00\x00\x00\x1a\x00\xa1\x01\xc3\xe6\x9d\xd8`\t\x8b)\x06R\xda\x7f\xda\xc8x\xda\xe5$G\x14', &(0x7f0000000040)=0x80000000) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket(0x2, 0x1, 0x0) getsockopt$auto(r2, 0x1, 0x8, 0xfffffffffffffffc, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x0) socket(0x2b, 0x1, 0x40001) sysinfo$auto(0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r3, &(0x7f0000000080)='MJC802154_HWSIM\x00\xcb\x0fX\xc7\xfdx!\xf7\xb5T\x04\xad\x96\xf4\xbc\xca\xa52UWT1\a\x00\x00\x00\x00\x00\x007\xc9\xa6\x8a', 0x1060) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) listen$auto(0x3, 0x81) ioctl$auto_UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000000c0)={{0x1009, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r4, 0x5501, 0x0) ioctl$auto_UI_SET_FFBIT(r4, 0x4004556b, 0x0) socketpair$auto(0xfffffffe, 0x7, 0x8000000000000000, 0x0) 9.561535206s ago: executing program 5 (id=945): r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x22, 0x3, 0x0) ioctl$auto(0xffffffffffffffff, 0x40104d01, 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) readv$auto(0x3, 0x0, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2) getdents64$auto(r1, &(0x7f0000000f40)={0x309, 0x7, 0x8, 0x7}, 0x200c8) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x20008000) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_FIONBIO(r0, 0x5421, 0x692) memfd_create$auto(0x0, 0xe) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x3, 0x9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/protocols\x00', 0x16b280, 0x0) socket(0x2c, 0x3, 0x0) open(0x0, 0x261c2, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) 7.944817618s ago: executing program 5 (id=950): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) io_uring_enter$auto(r0, 0x6, 0x7ffffffb, 0x3, 0x0, 0x5) io_uring_enter$auto(0x3, 0x5, 0x5f3, 0x3, 0x0, 0x2) 7.294069284s ago: executing program 4 (id=953): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/arp_missed_max\x00', 0x63102, 0x0) sendfile$auto(r0, r0, 0x0, 0x2) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x189002, 0x0) (async) r1 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x189002, 0x0) write$auto(r1, &(0x7f0000000100)='/dev/audio1\x00', 0x17) 7.011186289s ago: executing program 4 (id=954): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32"], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x48, r2, 0x1b, 0x70bd25, 0x25dfdbf9, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0xc, 0x0, 0x1, [@nested={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x3b, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x400c880) 6.731894334s ago: executing program 2 (id=955): r0 = prctl$auto_PR_SCHED_CORE_SHARE_TO(0x8001, 0x2, 0xffffffffffffffff, 0x6, 0x8) ioctl$auto_FITHAW(r0, 0xc0045878, 0x3) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) ioctl$auto_BLKPG(0xffffffffffffffff, 0x1269, 0x300) (async) timerfd_create$auto_CLOCK_MONOTONIC(0x1, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) (async) r1 = openat$auto_minstrel_ht_stat_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/ieee80211/phy5/netdev:wlan0/stations/08:02:11:00:00:01/rc_stats\x00', 0x442401, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x81, 0x0) write$auto(r2, &(0x7f0000000080)='Y\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0x48da548d) (async) keyctl$auto(0x8, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x81, 0x40eb2, 0x402, 0x300000000000) (async) mincore$auto(0x0, 0x5, 0x0) write$auto(r1, &(0x7f0000000180)='\x00', 0xffffffffffff8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/apparmor/parameters/debug\x00', 0x182b02, 0x0) (async) r4 = setfsuid$auto(0xee00) socket(0xb, 0x6, 0x1002) (async) r5 = setfsuid$auto(r4) setresuid$auto(r4, r5, r4) (async) r6 = socket(0x1e, 0x2, 0xa) sendfile$auto(r6, r3, 0x0, 0x1) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r6, 0x6) socket(0x2, 0x2, 0x8) (async) ioctl$auto(0x3, 0x8902, 0x38) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800000000007f) (async, rerun: 32) r7 = setfsuid$auto(0xee00) (rerun: 32) r8 = setfsuid$auto(0xee01) setresuid$auto(r7, r8, r5) getpid() 6.285163013s ago: executing program 2 (id=956): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) socket(0x28, 0x1, 0x0) socket(0x2, 0x5, 0x0) sysfs$auto(0x2, 0x0, 0x0) epoll_create$auto(0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r0, 0x0) r1 = socket(0x33, 0x800, 0x0) epoll_ctl$auto(0x5, 0x1, r1, 0x0) fcntl$auto_F_SETFL(r0, 0x4, 0xfffffffffffffff8) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) unshare$auto(0x8) write$auto(r2, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r3, 0x0, 0x6, 0xfffffffffffffffb, 0x4, 0x800) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r4 = open$dir(0x0, 0x10000, 0x6) close_range$auto(0x2, 0xa, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYRES16=0x0, @ANYRES8=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20008800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0xfffffffc, &(0x7f0000000100)={0x0, 0xfc0}, 0x8, 0x0, 0x8, 0x3}, 0x3}, 0xc, 0x4008) 6.28433209s ago: executing program 4 (id=957): socket(0x3, 0x3, 0x3c) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) mmap$auto(0x5, 0x40009, 0xdf, 0x9b76, 0x7, 0x28000) r0 = socket(0x15, 0x5, 0x0) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x4e23, @empty}, 0x6a) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x5}, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa902, 0x0) write$auto(r1, &(0x7f0000000240)='.G\x1f*@sy\b\x00\xe7\xc9 \x8f\x10!\x11\xd4\x9by\xa8\xb2\x89c\xf8\xc41\xd4\x0f\x82\x8d\xd2\x04\x0f\xf6\xa0\xf7,O\x1d\t8\xb9H\xd5\xc4\xbb\x8f\x13\x94%\xcc\x0e\x9eT\xc1}+\x02J\xb9\x80\xe7\xb3<\x9a\xf1B\x13\xb7P\x9b\xce~\xff&zQ\xa8\x97\n\xb2\xf7\x15Z\x05\x8cl\x04\xca\x954\xdd3\xf9\xa3\x1e#,\xb7\xd2\xa6\x8d\x13\xd0\xf0\x14\x9a\xfa\xed\x9d\xa1\x98P.\'\xccA\x8b\xff\x82\xf8\xc3\xa9\xb6\xc3\x80E\xfc\xe3\xc6\x8d\xb8uh\x9f\xd1!\xa3\xe0dR\xda?\xdc:\xbd\x15X%\x84\xd2yL\x05\xaeV$\xda\xcd\xa1}_\xe0\x9c\x87\xaa\xa1\x1f\x93(\x96}\"sU.2\x1e\xb8\x01U\x8f\xe5\x7f]L\xca\xa2\x9b\x92ZYE\xd2\xe1<4\x9c\x85\x04\x86l2\x8e\xb2\x9e\x11\x82s\xd7\xe3\xdd\xdb\x041\xb2\x1c\xac@\x16\xb3sn\xec\r\x11J*\xbb\xd6\xde\x86v\x83T\xb1\xae\x91{_\xd7JK\xda\x01i#\xe89\x17\xaf\x03j5\r\xce\a\x1dl/#\x96I0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1, 0xfd}, 0x6a) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e0027b4839f3015398d3b", @ANYRES32, @ANYRES32, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001840), r2) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000018c0)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@MACSEC_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200480c7}, 0x80) socket(0xa, 0x2, 0x0) r4 = socket(0x18, 0xa, 0x1) connect$auto(r4, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) getsockname$auto(r4, &(0x7f0000000040)=@in={0x2, 0x4e24, @multicast1}, &(0x7f0000000080)=0x4) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0x1010001, 0x100000003) 3.368396562s ago: executing program 2 (id=962): r0 = syz_clone3(&(0x7f0000000200)={0x122008080, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x3c}, &(0x7f00000000c0)=""/122, 0x7a, &(0x7f0000000140)=""/79, &(0x7f00000001c0)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58) (async, rerun: 32) r3 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) (rerun: 32) r4 = timerfd_create$auto_CLOCK_BOOTTIME_ALARM(0x9, 0x1) bpf$auto_BPF_MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)=@task_fd_query={r2, r3, 0x0, 0x0, 0x404e, 0x6, r4, 0x7, 0xc82}, 0x9) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000003c0), r7) shmctl$auto_SHM_UNLOCK(0xda5d, 0xc, &(0x7f00000004c0)={{0x3, 0xee00, 0xee00, 0x1, 0x9, 0x7, 0x12d}, 0x4, 0x6, 0x7fffffffffffffff, 0x7, @raw=0x1000, @inferred=r0, 0x600, 0x0, &(0x7f0000000400), &(0x7f0000000440)="119202b664c6922e5546b7e06258d4e5f50b5b385d329d7e6b036dd02ef11031c2c48ee88f3f5ab2314b74949427f13a9069e36241dd9ce7b46ecd98fe1e4866d2b13ab00621e297175bee17d9506ad5f6"}) sendmsg$auto_NL80211_CMD_GET_COALESCE(r4, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x120, r8, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_INDOOR={0x4}, @NL80211_ATTR_EMA_RNR_ELEMS={0x10, 0x145, 0x0, 0x1, [@typed={0x4, 0x37}, @typed={0x8, 0x62, 0x0, 0x0, @uid=r9}]}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0xf8, 0xbb, "66f5d6b95fdabd2e604a06c90ae405bc2d2ab4b90db88ab1853c8e027b0b6fcdd415e50be48e3dd92749e9a3f69fffc4d75e401f31dd32ed8c9543d2e6996acb0b554823edea7411e7ef7503e37cb3b86f4f64ad1de781afbbd583960ac1a71796ccfc94fb7c27b3a165f34ae9bf8000dd8a338c4ac67593517ce7c67bb890d269d3f13cdb984975c91b9400799517dbd1de841aeae53ce4729a82a1b577046b063814c05d5ffc6756e3e35bdda655daa4e9d61b98a789acee7fcd5734ee32521b9a5349022d281c6a3d84dd3bd5bbac9535aea64b86dd3d0603553a1fc20dca42268e24a846bb42f750f9852db89282b8eab903"}]}, 0x120}, 0x1, 0x0, 0x0, 0x8000}, 0x240400d0) (async, rerun: 64) r12 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), r4) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000780)={'ip6gretap0\x00', 0x0}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000007c0)={'lo\x00', 0x0}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000800)={'caif0\x00', 0x0}) shmctl$auto_SHM_STAT(0x2, 0xd, &(0x7f0000001900)={{0x4, r9, r10, 0x2, 0x3, 0x1, 0x5}, 0xd02e, 0x0, 0x3, 0x2, @inferred=r2, @raw=0x10000, 0x7, 0x0, &(0x7f0000000840)="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", &(0x7f0000001840)="a44ceca0cc513aff716d503ae77f4ea7ab013ff8fb0f3c330d59477fccd1eebd0a73936415a0d3bda2b7604f9ff7d79b6a575408b4b22d76b81b0065d3c8e2426ceb05b6a3d5374f6b2e6e0ac397746a3dfa20f3967081baca53ba76366c35c550e6b8c2f2412a1ce00b542a7def57f2fa8a9b14ff2ae41a01287e8ca2d3b761231859e4c16023fc50f181c88fb4ca7becb08796b91ec4d5a19658cdf86db703d5985f4338cd0436"}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001980)={'geneve1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000001bc0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001b80)={&(0x7f00000019c0)={0x1ac, r12, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @ETHTOOL_A_WOL_MODES={0xdb, 0x2, 0x0, 0x1, [@typed={0x8, 0x7a, 0x0, 0x0, @ipv4=@loopback}, @generic="d81dfc4f324870", @nested={0xc7, 0x51, 0x0, 0x1, [@typed={0x8, 0x4c, 0x0, 0x0, @uid=r16}, @typed={0x8, 0x12c, 0x0, 0x0, @u32=0xff}, @nested={0x4, 0x7c}, @nested={0x4, 0x2f}, @typed={0x5a, 0x6, 0x0, 0x0, @binary="a23982184fd1f7020b38f751f8eb51c3fd37dbd85ee2a87aadd695e27fc98a102362029ac2cd9abbdcdc9bd2084ae03b1282c58ab1bf45ee9a713c7ce0c2daa18282e8585d0b71e390deac6b4b0bf6b4525846b87160"}, @generic="c4eec0df3732b2d7402f970296ba8c5361c606bcddb0f9a19b04884af5154c142eee2777b0deb253309e73537fc5d71bebfd161c330fe0f26fbb5eb486ec89475925832766940a", @typed={0x8, 0xc1, 0x0, 0x0, @fd=r3}]}]}, @ETHTOOL_A_WOL_SOPASS={0x6, 0x3, "53d2"}, @ETHTOOL_A_WOL_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2cd}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000800) (async) r18 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001c40), r6) sendmsg$auto_NL80211_CMD_GET_REG(r7, &(0x7f0000001d40)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x64, r18, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x9}, @NL80211_ATTR_MBSSID_CONFIG={0x48, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x4}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x9}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0x7}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0x1}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8, 0x4, r13}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0xac}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0xd}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0xf9}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4800}, 0x11) (async) dup2$auto(r7, r7) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001dc0)={'lo\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MM_GET(r7, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x40, r12, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_MM_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffc00}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x101}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8814}, 0x48c1) (async) process_madvise$auto_MADV_SEQUENTIAL(r7, &(0x7f0000001f00)={&(0x7f0000001ec0)="ce54028538c59e6cf4c331f66e1e1855604734bad44f635f583290afe38e0e7ad67fe55787f0bd33922e0017ff"}, 0x0, 0x2, 0x1ff) ioctl$auto_XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000003080)={r6, &(0x7f0000001f40)="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", 0x4, &(0x7f0000002f40)="3e70693c59d584ed7af56feb5dbb753684489babfa3bf83adbd645741aa7c7602f4c20175b807a7ceda17dc87f14d6743b4f07ff9d33116b0dbfdb78d710b6258da79ec5a7f9b7c9c12bb6df7b7828a5ba84fc6abd2d8f1d0be81268ee0be82dc5473cb39adc0a3066ac28eb488ce01a37f9013084718594d643edbb7dfae333bc48e32bd9608a484acb0bfc7ccb1087d19cb27e5db6dde0c348bb76d83afa7c70a08be6bed76914fcfc15473a3a99dd6ef16ccc7719cff29d8db7d747", 0x7, &(0x7f0000003000)="4590eed43adc61bfedae682940bb8ad11dffae2afc5ae05a96bb137770f85879666b0851a6db31251849b8b3c2b46178501b4a2c0fb2", &(0x7f0000003040)=0x3}) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r20, 0x80083314, &(0x7f00000030c0)=0xaa9) (async) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000003100), r6) setsockopt$auto(r1, 0x8000, 0x2, &(0x7f0000003140)='\')$#[\x00', 0x9d50) shmctl$auto_SHM_LOCK(0x8, 0xb, &(0x7f0000003340)={{0x4, r16, r10, 0x2, 0xfffffff2, 0x6, 0x9}, 0x4, 0x8, 0x1, 0x5, @raw=0x8, @raw=0x80000001, 0x2, 0x0, &(0x7f0000003180)="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", &(0x7f0000003280)="fac9fde7398b43ccdfe61740bcf000a374fab9a70c7fb756d5b2ac836453933413eb9596041490d02f404761cf3f5228f382018dcabd924f0405fd3ef76e727e55146d9f07ac7d78c8cf4b96bc2afd77aae0c540ff2713ce2cc60626120af950e779179114a2e5a9287e1722d97fa577ea0c919010c7dfc4a56cf43496ed7bda83e2e703902b70f6d7eebc6b"}) shmctl$auto_SHM_STAT(0x6aa, 0xd, &(0x7f0000003500)={{0xff, r21, r22, 0xffffffff, 0x5, 0x80000001, 0xfffa}, 0xffffffff, 0x6e, 0x8000000000000000, 0x5c, @inferred=r5, @inferred=r11, 0x9, 0x0, &(0x7f00000033c0)="9d1d6f1c24feb7764993d6ed48d8be0074c453347fec76f0715a45f9d80f78502f543b9b13e330e8a6cdb7f27e1277e77b77b27197f3a0de0ccd4ac713308755bd80d393218bfb619cc9b93c20dcc976d443962e21a7d58414906296dddaa28d73245d28ec6de95d8ca4422cf400e1314ba073fbbb39a939a8fd6e3d3d0872f7f40751bb4c1dde2a43e97f2eeacc5f636dc25f4b363ee843c5a2995f9747cd2271d44bd966785adaeea9a327913bb501acaad6", &(0x7f0000003480)="a9f42f3fd6022d6171d19ac6c9eeac7f66bc56b26957cd0089a378666ca38477a064f2e9f723cc8f133277899c7916468bff169e7ca610653a2d0cadfb113410f5d84283793838284ec767d0497d579cc0845324e8792a0abe2d85da995ce839ecc3430995ad73fbb581ceb66462589293"}) r24 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000003580)='/dev/ram1\x00', 0x400000, 0x0) shmctl$auto(0x1, 0x6, &(0x7f0000003740)={{0x10, r23, r10, 0x4, 0x2, 0xce45, 0x1}, 0xfffffbff, 0x9d, 0x45, 0xffffffff, @raw=0x1, @raw=0x6, 0xd2, 0x0, &(0x7f00000035c0)="9d5d4bb577db6167f7b3b6b1131039568a94bf770337144b00794787a1f4d0b5328b8b9c7ac33ceb85e51bd1724762af82d3d95cde2c57dab68c430b284ae6ff4449db0c865f69fdcff56e7752ae5464f98d995e5d0aa08f62a007498ab0a608007eb92a5961c4c0a8f1624c6ea27a552bc9a89e5081", &(0x7f0000003640)="7f46312fc51147b6312c10dd38cb7ce44b1dd277d1cfa64799dfd7555a9eca8a62ca3c38460ffadd791649246b085e381386d577956d76fb2814bee86801f567716ddbd20ec0e8e537b47ff5c80b6534493a56a77eaee6fc6091dd889206aabc3056e50fb024aa2eff2dad6bc3c8de4ed78b698cc72ba6b8f66eb06ccf52ce6bb02a16a6c4b6726e04e4eee64c89b6a674400aacea7d495367d320f80e0a830ecd38ca4275a616312d22339b615f00b8ead7d42ce320c4b513bcd63dedbff8252f1fc3cee0849fb8f4cace632fe7a3f894b787f5a879d1cca4ad48cfe5ab9f3bb839331aec0eebacc7b00b33a9e40608bd7af5f32dd7"}) (async, rerun: 64) io_uring_register$auto_IORING_REGISTER_PBUF_STATUS(r24, 0x1a, &(0x7f00000037c0), 0x1) (async, rerun: 64) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000003800), r4) 3.005505122s ago: executing program 2 (id=963): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x27, 0x6, 0xfffffffa) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) r2 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, 0x0, 0x8803, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0xffffffffffffffff, 0x20005, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) ioctl$auto_TIOCSTI2(r3, 0x5412, &(0x7f0000000500)="173e8bb6c0") mmap$auto(0x0, 0x2020008, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r1) sendmsg$auto_NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000b6c45c7d481979d25bad8970f697a13f00aa4c54e57f19b447c470bffdabbfcc944d893dcfe000c73a2875", @ANYRES16=r4, @ANYRES32=r2], 0x18}, 0x1, 0x0, 0x0, 0x20008010}, 0x4048004) unshare$auto(0x40000080) statmount$auto(&(0x7f0000000000)={0x3, @raw=0x7, 0xd88, 0xc1d, 0x9}, &(0x7f0000000540)={0x3, 0x4000, 0xfffffffffffffffb, 0x6, 0xedd, 0x0, 0xb04, 0xd7c, 0x2, 0xc, 0x800, 0xc51a, 0x1, 0x3a4fa822, 0x9, 0x42a4, 0xc0, 0x8, 0x3, 0x0, 0x6, 0x6385, 0xfffffffb, 0x1, 0x7fffffff, 0x5, 0x9, 0x401, 0xd23, 0x30, 0x0, [0x3, 0x3, 0xe, 0x4, 0x10, 0x10, 0x9, 0x45ba, 0x2, 0x7, 0x2351, 0x5f2e, 0x81, 0x5, 0x100, 0x7fffffff, 0x9, 0x5, 0x4, 0xbab3, 0x64f, 0x2, 0x2, 0x2, 0x7, 0xdc, 0x5, 0x1, 0x4, 0x5, 0x2, 0x4, 0x6, 0xb, 0xa, 0x1, 0x4df, 0x0, 0x7, 0x3ff, 0x3, 0x3, 0x100], "dd7c3f6eb09914dcb384eb8288116f3cb5173b5d14ae74ffe2c5c62dd922b566f2549ad3afe78c45c7dea6a8222ec3e5a0cdcbf4c422f83a04bc1655991a7dfe109ee230ff69ee7c3d070f605fb87825dafac24448537b4cf9e2"}, 0x7, 0x3) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) pipe2$auto(0x0, 0x80) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.685185978s ago: executing program 4 (id=964): mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r0 = socket(0x10, 0x3, 0x2) sendmsg$auto_OVS_VPORT_CMD_SET(r0, &(0x7f0000002740)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002700)={&(0x7f0000002140)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00df2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x20048840}, 0x4000010) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/o2hb/failed_regions\x00', 0x442002, 0x0) (async) r1 = socket(0xa, 0x2, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ext4/sda1/mb_group_prealloc\x00', 0x8001, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) close_range$auto(0x2, 0x8000, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/tty/ptyuf/dev\x00', 0x200, 0x0) socket(0x18, 0x6, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004005}, 0x44800) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) (async) r5 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/available_tracers\x00', 0x0, 0x0) getsockopt$auto(r5, 0x5, 0x1, &(0x7f0000000180)=']}/\x00', &(0x7f00000001c0)=0x4) ioctl$auto_RTC_PARAM_SET(0xffffffffffffffff, 0x40187014, &(0x7f0000000040)={0x8, @uvalue=0xfffffffffffffffa, 0x4}) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x60, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HSR_A_IF2_SEQ={0x6, 0x7, 0x7ffe}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x1}, @HSR_A_IF1_AGE={0x8, 0x3, 0x400}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @remote}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x80) (async) socket(0x2, 0x3, 0x100) (async) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004c18}, 0x48880) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x4040000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto(0x3, 0xae41, r1) (async) ioctl$auto_KVM_CREATE_VM(r3, 0xc028ae92, 0x0) 1.97023171s ago: executing program 3 (id=966): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/mtu\x00', 0xe3102, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x80440, 0x0) (async) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x80440, 0x0) ioctl$auto_MON_IOCX_GET(r0, 0x40189206, 0x0) mmap$auto(0x0, 0x80, 0x1, 0x8000000008014, 0x3, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x8202, 0x0) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2, 0x80802, 0x0) socket(0x41a1bd82a14d69d1, 0x4, 0x7fffffff) (async) socket(0x41a1bd82a14d69d1, 0x4, 0x7fffffff) setsockopt$auto_SO_SELECT_ERR_QUEUE(r1, 0x9, 0x2d, &(0x7f0000000080)='\r\xffZH\x02\x18x\xa2\x93i\xd1\x1f\xa7\x0f', 0x88) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) readahead$auto(r3, 0x9, 0x7fffffffffffffff) (async) readahead$auto(r3, 0x9, 0x7fffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zram0\x00', 0x6a642, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) setsockopt$auto_SO_SNDBUFFORCE(r2, 0x8, 0x20, &(0x7f0000000040)='/dev/bus/usb/032/001\x00', 0x6) (async) setsockopt$auto_SO_SNDBUFFORCE(r2, 0x8, 0x20, &(0x7f0000000040)='/dev/bus/usb/032/001\x00', 0x6) 1.921792622s ago: executing program 4 (id=967): io_uring_setup$auto(0x59, &(0x7f0000000200)={0x0, 0x1d, 0x3800, 0x3, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x1, 0x29b, 0x3, 0x7f, 0x0, 0x6, 0xfffffffffffffffd}, {0x100, 0x1, 0x52, 0x85, 0x2, 0xcf0c, 0x76c2, 0x9, 0x100000000}}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) r0 = socket(0x1a, 0x1, 0xfffffff9) ioctl$auto_FS_IOC_SETFLAGS(r0, 0x40086602, 0x81) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) socket(0xa, 0x801, 0x84) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x7, @local}, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x1e, 0x0, 0x8) read$auto_binder_features_fops_(0xffffffffffffffff, &(0x7f00000001c0)=""/175, 0xaf) mmap$auto(0x0, 0x4fdd78c6, 0x2000000001, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x8000) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x1f2, 0x0) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={0xffffffffffffffff, 0x0, 0x856, 0x189, 0x8, 0x7fff, 0x7fff, 0x10000, 0xc91a, 0x7, 0x5, 0x3, 0x3, 0x3, 0x4}, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = inotify_init1$auto(0x3000000000000) socket$nl_generic(0x11, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x1) unshare$auto(0x40000080) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/smaps_rollup\x00', 0x567c3, 0x0) read$auto(r1, 0x0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xffffffffffffffff, 0x2) socket(0x2, 0x80002, 0x1) socket(0x2a, 0x3, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x8003, @dev={0xac, 0x14, 0x14, 0x36}}, 0x6a) 1.92022067s ago: executing program 5 (id=968): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) unshare$auto(0x40000080) ioctl$auto_RNDADDENTROPY2(0xffffffffffffffff, 0x40085203, &(0x7f0000000440)=[0xfff, 0xedc0]) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) r0 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/format\x00', 0x40, 0x0) pread64$auto(r0, 0x0, 0x3, 0xfdd) mmap$auto(0x9, 0x5, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mlockall$auto(0x800000000000005) ioctl$auto_SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000100)="000004") syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket(0xa, 0x1, 0x84) mlockall$auto(0xd3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(r1, 0x84, 0x7c, 0x0, 0x0) setsockopt$auto(0xffffffffffffffff, 0x0, 0x27, 0x0, 0xc) socket(0x2a, 0x2, 0x1) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) io_setup$auto(0xffff, &(0x7f0000000580)) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x1) setsockopt$auto(0x3, 0x1, 0x22, 0x0, 0x9) io_setup$auto(0xa, 0x0) mmap$auto(0x0, 0x200008, 0x401, 0x40eb2, 0xd, 0x300000000000) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r2, 0xc0686611, &(0x7f0000000080)={0x68, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x9, 0x5, 0x5, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x7ff, 0x7, 0x9}) 1.626784492s ago: executing program 2 (id=969): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x11, 0x80003, 0x300) sysfs$auto(0x2, 0x2, 0x0) setsockopt$auto(r0, 0x107, 0x8, 0x0, 0x6) recvmmsg$auto(r0, 0x0, 0x10001, 0x0, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x29, 0x2, 0x0) ioctl$auto(0x3, 0x89e2, 0x91) close_range$auto(0x2, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x595002, 0x408) mmap$auto(0x2, 0x4, 0x80008, 0x12, 0x2, 0x100000008000) r1 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_ON(0x8, 0x1, 0xffffffffffffffff, 0x200, 0xc6c5) mmap$auto(0x0, 0x0, 0x3, 0x8000000000000011, r1, 0x8000) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x81, 0x8000000000001, 0xa}, 0xb, 0x0) landlock_restrict_self$auto(r2, 0x8) waitid$auto(0x9, r1, &(0x7f0000002240)={@_si_pad}, 0x7, &(0x7f00000022c0)={{0xd126, 0x8}, {0x6, 0x8}, 0x848e, 0x3, 0x10, 0x9, 0x4, 0x8000, 0xdcba, 0x7, 0x2, 0x7, 0x88, 0xfffffffffffffff8, 0xe5, 0x3}) 1.577614267s ago: executing program 3 (id=970): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0xa, 0x801, 0x100) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r0, 0x0) pivot_root$auto(&(0x7f0000000040)='..\x00', &(0x7f0000000080)='.\x00') setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x1b) close_range$auto(0x2, 0x8, 0x0) 1.412535769s ago: executing program 3 (id=971): close_range$auto(0x2, 0x8, 0x0) (async) sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0x101, &(0x7f0000000000)=@generic={0x21, "01e983638bffff4993021400"}, 0x1c) r0 = socket(0x1d, 0x3, 0x1) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.0\x00', 0x4242, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (rerun: 64) socket(0x10, 0x2, 0xc) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000"], 0x18}, 0x1, 0x2000, 0x0, 0x40010}, 0x80) (async) write$auto(r0, &(0x7f0000000000)='\x13\x00', 0xfdef) 1.14587342s ago: executing program 3 (id=972): syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SCOPE={0x6, 0x4, ']\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='T'], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="72010000", @ANYRES64], 0x1ac}}, 0x20048000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty50\x00', 0x2080, 0x0) ioctl$auto_TIOCSWINSZ2(r1, 0x5414, &(0x7f0000001080)="e315c8e963") r2 = eventfd$auto(0x80) readv$auto(r2, &(0x7f0000000380)={0x0, 0x8}, 0x100) read$auto(r2, 0x0, 0xcca0) write$auto(r2, 0x0, 0x8) r3 = open(&(0x7f0000000800)='./file0\x00', 0x20c0, 0x154) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r4, &(0x7f0000000100)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xedKW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss$ \x93\xff\xd9\x96\xb8\x88\x92@{\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1\x1f\xf7uw\a\xd0\x83{_>/\xff', 0x100000004) write$auto(r4, &(0x7f00000000c0)='\xc4\x1dR\x00\x003\x1bO\xbb\x98)\x7fTa1\xa3\xd0\x89\x1e\\\xff', 0x8587) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000003900)='\t', 0x1) fcntl$auto(r1, 0x400, 0x1) lsetxattr$auto(0x0, &(0x7f0000000000)='-\x00', 0x0, 0x7fffffff, 0x3) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r3) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop3/events_async\x00', 0x88080, 0x0) fgetxattr$auto(r5, &(0x7f00000004c0)='security.capability\x00\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf29\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x8a\n\xe8\x1c\x88\xd4\xa5\x96!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f', 0x0, 0x0) 411.549925ms ago: executing program 3 (id=973): r0 = seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0xffff, &(0x7f0000000000)="9f3116a61aed6b7333862a5ad2976813df302a74d76ed8181b27850a4ad9fd492e2a56008abf43173a3ebfb5908f0ef85c75a25096b84ac001d7f4325b0e7d33a7477d6a7457ec4c47ce755bc2e5d2464556f311e824ebc33a37b0c785d543447112494c1a582b5f3c486044d51918c84449a75e0af035652e6f9798f558dcc69afeb28c9fe8d47f72e24ad803a3439fef87dc7f645a52d803f236724d3b26b392828a91d81846cbffda83512c869bbd135d6d040f24f5880653b3cb6e6c3985e5ab608f771fa596369424c929a08a5949232107ec3bdf5b811d11286d8d9fe2707ac39701f813167aa6bdf7dc97572e87eaf9f0cbd3bb42") r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb1\x00', 0x414001, 0x0) ioctl$auto_VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0xfffffffb, r1}) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000180)='/dev/usbmon37\x00', 0x80000, 0x0) r4 = memfd_create$auto(&(0x7f00000001c0)='/dev/usbmon37\x00', 0x1ac) r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/pagemap\x00', 0x30000, 0x0) ioctl$auto_VHOST_SET_VRING_ERR2(r4, 0x4008af22, &(0x7f0000000240)={0x2, r1}) r7 = openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) setsockopt$auto_SO_RXQ_OVFL(r7, 0x6, 0x28, &(0x7f00000002c0)='.I&\xf8\x00', 0x4) fsconfig$auto_FSCONFIG_CMD_RECONFIGURE(r5, 0x7, &(0x7f0000000300)='/dev/fb1\x00', &(0x7f0000000340)="b4ce00f564e85613bffad35c35a0fdd0690c24773a86568c6b42b7f75be6c2d6cc41c9a632", 0x7) ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR322(r4, 0xc0844123, &(0x7f0000000380)={0x9f81, @status={0xffffff8e, 0x0, 0x4, 0x7fff, 0x8, 0x0, 0x8, 0x7fffffff}, @control={0xfffffffd, 0xc}}) read$auto_virtual_ncidev_fops_virtual_ncidev(r4, &(0x7f0000000440)=""/4096, 0x1000) r8 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000001440)={0x4fa7c1ef, "0867ab798e76ecbeddadf0a9bea2beed5cb90b4af1e06981a053e3f983705ac4", @inferred=r3}) ioctl$auto_BTRFS_IOC_DEFAULT_SUBVOL(r8, 0x40089413, &(0x7f0000001480)=0x7) getsockopt$auto_SO_PROTOCOL(r6, 0x1, 0x26, &(0x7f00000014c0)='+{+\\]\x00', &(0x7f0000001500)=0x9) ioctl$auto_TIOCMGET2(r2, 0x5415, &(0x7f0000001540)="1fc7ecfb6be50a2b74af2479c3ce4fb834c67526f6753641349491e6cd92441f962f329a9a571f97aeaea957eab32d2e6bb2d4a418e77698cf27d29e5ae09e79dc2e2d082cbf53b2ca1ee6d6109334378f58e365db21fa7ec53ba33678467e0a6a75a6cd824c7e5989b59ef0ba7d20db0d13b74fa6aacc4c45a5322cdfd79f9db6db9513880083c37de012b6b645580aac235b86160450072f22b224c8e32bde22748bd01e430cd3f35b2112f764619775aa779722e1d9dce9dbfc3efccf43b716771727d011b1abde9d49ddd71d735f6d086311cea79084686ddb83bb72ac8915002af4") r9 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001680), r8) sendmsg$auto_ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x14, r9, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}}, 0x4000800) r10 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000017c0), r8) msgctl$auto_IPC_STAT(0xfa, 0x2, &(0x7f0000001880)={{0x7, 0x0, 0xee01, 0x6, 0xfffffff8, 0x3b65, 0x4}, &(0x7f0000001800)=0x80, &(0x7f0000001840)=0x5, 0x7, 0x6, 0x6, 0x0, 0x0, 0xc774, 0x4, 0x2, @inferred, @inferred=0xffffffffffffffff}) capget$auto(&(0x7f0000001900)={0x80000001, 0x0}, &(0x7f0000001940)={0x1, 0x5, 0x3}) ioctl$auto_XFS_IOC_FREESP(r8, 0x4030580b, &(0x7f0000001980)={0x6, 0x6, 0x0, 0x10001, 0x1, 0xffffffffffffffff}) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r6, &(0x7f0000003000)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002fc0)={&(0x7f00000019c0)={0x15c8, r10, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x10b, 0x4, 0x0, 0x1, [@generic="9b8341e242dfc85eea8eda557b0ae4215cca2206d39b319d6f96cefb8379b2615551a7b6e519b9f52368ff6ca9a0ec33357a71604c2953985efe3389bcabae30ef6ddb8c0db6a6069adc1998882a526fd6cf3daa90a3d8880696e2", @nested={0xa5, 0x79, 0x0, 0x1, [@generic="6057c3948e7007619dddcffdbe6c6b8d5c3a5d6d0f8657d3c000fcf2770009103c935230def36f17ca0df5f1925ce8a96f4861f1fa0577bea2b01c9cbd50b2617b33fa0e080660179df3a664008c3f88f9f8f7be2a27a54d57f385620359ec3585a1f862116adc2a7139b44db7a912b0753eb93df42a64712506c7ecf5e2324ec31f25115287c43ff4d4cca8ab39d8e3a2", @nested={0x4, 0x73}, @nested={0x4, 0x12}, @typed={0x8, 0xcc, 0x0, 0x0, @ipv4=@empty}]}, @typed={0x4, 0x27}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_UNSPEC={0x1004, 0x0, "57a08fc58d06c85430f9379bef60ccdedc089eff6379307c6dc76541aca66183bbb826ac407af91aa21b824fc3d0b860a53399b7424e003caff2b11ff847169d1b9f3b9363e7b3e21f05ed8f1db1241d894c32fbe2a3de4308c56b5b2a2333f7b3c7539de7aeedeecfce7b38e4e86b17a4a8107c8fe672c2cd479bedfb3f52516e6d760fc4296c9a37e968fa1a0cb46aa3484028d041859b20d208f1cff18d767be078be68d6fd01dacf58b1af98d8c2d2f7d41f24e4032159b1fba459fee047c3f1c9d1d4edd564ff222c1d1b25b52a7d15173808b36cecf51ee0eda9fd00a5f0089d53c92dcd4cfaa99896cd2a30d2996a103dcb1224f6f7f29d218e8ce5f9e50b63a49298205fe5d2c29a8ffb0c4976550317e98fa15aeb7cf2a9656525d32c7d4e469abf15b3be500a440a0a91ef5e1033319061d7c33ca9ef1e8161404e2ea0b71269a4a351e366d8cbd9ed6a7f9c8848dc80961c2e54805117e2b60f22511309dea912934c1e94d3210231be10114c4f7eef5685bc2b795f1f116dee01fa80554bf5ca12a1f60c2d2c4e5303e6dfde75d7aca1f86a58a354f5565469227a2a9f13e8d03e771320dc192e6243be546f4f8f8975cbef9337b80221f8f9c9bcd86f93c1d4009fdea9635d1f8df9ef50c951e06fc89339648b61b517131c7355a5bb658ffb38cff04f0a15724af662b75ae4c8c503e21a04a3bb480c0ce46dc6c4ce8262d1d911ebda24ebe5aeb1f74b6cd0a3986765c80a1faba53d0cf977809919dbc60307712eb65d7d01fd6d2efa0f4dc689d072cfceaee0f67cbe1da8aca31882e08c6baa272ed794580ddf4e5fdac9699548c54c55563ba4bca476c21f2b4dd6e248eb4c278b1c4177ae95ec2bef126c57da8e011383d67fc863b579c837f88ff9e87028d8aec822efc9cd933593379799f507c294a82c257465f01e851a71d8be6084186f463272a77b71f26fac2582b7c713463d7e7c063d625af786a70c363e76649bbe0f6f9dea8c0f9e71cd55fe793496cde77a975f9d72de675dc6d91609db63cb22cd857bc1cc7ec0bc96cd8ba7159758a1f841da0700c072422f194d9ec304bcea5d556be1e4cfb7659be3f36665f332c2e77e7eeac6f674e8143ea5906ecb64ea363cc7cbf237778d98d1228e33effd8f0fa3067a01a25e36986316f4561d6c796645ae21ac90b713bce1e3940582639cc44f66213e07c55ac37e5c01b5a7aa1e17f0ca9fc8eded182243366583a3d6c9193581a69c82c1697a36ad2b6c8d4c511dc8e18a5953138afc6988f1d0acadd2c7cd49832f18fc34eda6a13b3c47eb286d740513dfe58da7cef7f26edb8fd898c05d1528b69ec306788acf944b1432db10a07e38fc726b43d526fc8dc43390141d2e810ad88e091ec7184ac88cd68dd914a7e6b3a059bd45d29d86b80245bc6f77c3dcd02aeff9ea5ba9b65be58daa797d126f3c4abe14e192bfa3c36ab398f3a25f7763daae8b8fd42fa5c76605d2dc26449e0be3b5463e3af5ae6d24a830f04beb54dae8668c1c48fd611dc702e04c9a25165070645ab91b60281ad670210f34af51ba051a577be23f43b56e176e3dc1b03415d23653322a6716c3677db2cacabd2ed799406e8731fe093a6df5d28c2697367f14ca7dd0b640bf7d9d3c5cfb3213449fa702ffb6a37f4a155d7ad4dbaa5c2657627e78d6fd563be900889c41641130aa89a204b9f5a5d93a5a27b663b501d4c3bda2c9b219e4e2a9234c27b5b19068e1ed763ba33c651fe5feed0b3edd401e4ad86bc49d555fb13fcf4e6a36063a1b4ca4bedfd8b7aa5ce73c1bb502a1e96a57421d5ea510de617e6f2bca29f58450d1974144bceec9fe1a270571a7633f490373782059e5d2a9da5e34ed4c7486e111e94b120c1850ff8ad0efcafd75c7ad2059a82222ead4a477b420a4d98d752c1611e3a789d368feeb1f925a7e65a0903689bc7ff25fd5a5a9a8a0d956bc3f9bfb0b471f6870cff7858fcb67e8069189210e10cd0658538d3d296a85e2302c11382272011534cd34159a09b5c340e135f1305e15bc9786145098c017992a117d645e27d83c545a58f090aba7b4322fb0f99876ba27fc2c0a5cde30f1d09936a871457e0c44e9c6104f37709e447e931ac2340000370cc457f092abbfd20b26c34e63d59fb243f69bee86bb77d7aa0b4dfa313166aecfa918377614b47660b71220f50523d630e073ac92a106dbc973bc4c4402851ae3eb57c24db7198fd6e44a21927d97e772309b35b0ec0e01f45b39816aa791e5aa9e0802d08c5e42c05297d70f52937ecca03089045f9922ebfdb277d525c43a48762b689fb786fddddc036be4154c5321049d0caf7a7d009a5a4b7eb05286595d1e3c1c2dbfbcb3d45b6b71889b2d1504ba71553f0ab72007467d829c7c2c1c765ce70b86bc19ea72929c3a0b88d9f8fbdb3c826707fdd94a5f264f9bb15903a36b1dc06d427571726006493906fdeb2506667852b0bd1767cfb6bd3cc34fc284a844ae8b946bd158c333c1c434b7a3b757dab46b67866a2e317e25cddbab9d097ee09c7723fcdbe9dbb6d79d36ea5b53a9e4735f2d786978357acfc3bfb83dba138a96f8b957b86c3255aac280a6c18002d155b059f5f7cff52f238d571aec4624706a831b22143c0fa7dd404a80488f0685441e858f002c2ba9daf56df8a45d2d1f9fb5cf888fa63bce49b91ae2b2034790526e115fe93d27e076e4056f3225cadefc419cc7f2867c6c34cac35f9eaa5da80d0cf7bd317b817bc51aabbe17eaa8322575e4e34495345c8e654406ff847548069ee03a7f8a03c825f78a7a38cea185e423405dba18e55a3297ba1acad29af0ad8cd52b7c02fb82155a060d563fb34390e2d792ed447907d8303dd88390b9bddfb84157acb28db4631fdaf04f2acba772748200b17bac96dd4da51700f8626f70471fd82e0a99d44e4e575de6875e06c2a350fe11a021a6c04ecf03a103cb62c20797fed54b86f48aabc3b8b386d8f26301702c011e934493f82d0a5de3e112f726fbf3cc208a0ad80fa7f850f2a83efc59d2fbefb83e4c9fdf19442984d0dab140bcab51036388124c3e35c59d5b09de0a87a036ce874973f37bece162c0008fe84f9ebb4dc0fed7dc5ba8093db260799a6b3a7e8313598b18ae2a8bb71a3237850f06cf4147ab31b42a7e4f75b0dee8be24de175c8e6fad3b43de9c3d6bae345fa041f81563640b841d1378e90fb61d6d488900d86e6d0ab0871c1111b008839a9af89a34c1fca4555c5a4fe077c4439bd22bca3e4ec8c0ebf9d2eb2b664d0e79725b4a11a2fc318fa6a8bb6c1622dcb3bd904a8f11e30d544c4283ecedd65873616866e156dee2839d9287494779ee56726857987f48b8be63676f0a608c5dcb88da5b339cb9116ea4cb13dcc37e8a1a22d6dca7d661a70ff9024cf9d61b9e29d13c7424320d0f5e9756fe3d0e67d26b97741783580d4a93f200b5c86eb0ba37007e702bfeabd6cb0e683305d22b84aa0a63dacbf49e3f215ca33810c3f77efe296b66aa2ded4ef9115287b8d6bae8060d9fad0b1091654c97dc829606024cf91d0e1b3e3c0453b3aa7604671b67efd02692c77481982ecfe3bcbdd5921dc2152b790481533487b56f9e06ba43d67d677dde8dce905062e95b5bdec5297e6224d551b6cd0774bf4b6631a08db04b704fd62c74306cd493eba9717b555dc3aeb2df3a934611263d1462a28236307eb930064facdfe92f0e205c2122410726312fad1f1ae54de36792afb2913ab2d301e0cb3a5507c97906b686a5c3764b34c5a9f350e1757c24b0fe6ce08aaaff99bfee27e3dd95cbf35bdf613959ca9fd06e696a6dc09e78e3b90e4ba6868ebad2b22a64019c036f91a404d56c4c1518c9517f9dd78464d5cdade61aac96e04ebf5051fa1923a4f6cccd683d3ad7579288faa4b25ea2109323dda3815d7adda0e50cd49954dca387b0f8cf9f8cd8c468ab503f6fe1df877258748978edf970360bb72d50aafd17dbdf4c36dffa5621ed7a5b8d6d4c20d57ac2058c67aad18ea4113c8702edad443db5af0329036e0c3be5ab1090ce42d8947859b1ff215a8b0c7b30f63bdf1202b31cd7c43073b4323eb3185328a0836edc8e846b7aac029a064bc1035b775e69ad0dce61659adef887c04c743c164bf803fb08ad5f4112da9828e8833a3ddff3598979fc41efcd7881570c20568dc43373ae76f972e983a1438d27e1d2c1063fe630a21c75bab0e61a189d3a04bf3439bc80ff49d0e9481093a3e47456797e5ac67ddca7e966a56dfcece9228d6e3e56b2052b64be3c77e6be65f39219cae2fb1edeb6d0a43725e98e5a1d0c530a7fda4e5e7b0737d392abf0ec555aa249acd426b279d12db1fdbd67b409e199b6542b052ad95d8967b32ddbd581682c1b573167e00e9c69e940d891f00a5a951d2bea4991685a792d6b8a742bb6d1a35843c370c2473d6dbdf7eca8cf915b703f6166363bd24763372ef708bc1a9632b56f14be3e77e0c759712b1968709755114565dd6d58359206288e44f71023a1b047b7cd96e7b11edb976f9d47dac7becd83f11a969ddc9ec326fdf63a881270036dad6382cfd31b942b8ac874bdd400eca753224ec351ce07f462ba1cf869745ac6feb2c33786ee945f9344594cd7c437effa7f777c49877310a506bbdb10056a030a490ee58c9e180617b72dcf5d00d9685bded7ec02762ac5e0bc4084810ef00eef6bf363507384e9aa75426bf23126ae82a2d398947ec3914c7db70604fabd5b4af8d292169860be46b5d67934c7ce2beb54458390f9e3c7e0bd9ec5a4ae71c0b39b426008e752f2d335c46a25b383dfb61ce54cc02a672d2df760fde1056e573c468372b141b9581b72644a88e2538bead6c3cade8a99e8153d55f072840356821b8d70813901126373ef08a0f2e389db302648e6d37866a4eace3d15a6d1cf370df25bce4f52f665b00f8eb0b3f471493be8ed497f1d2f31d68a78184c5e565460f1af29ebac007c2307913580c052c9f9bb7096c8016ef7bb2cdd8615a42b4884f973be3955ec91fd13dc329ec99e76b8c008577621ba4aa5de0ea11f06194f8b80f362bc2711e0f85a7b8940432acb706b3c333abb947d4d5ab6c16cb08175007f7a81fa23308e3966d9937239140e4f2337515310477daca96992ffaac94ac90b1527c71ecd563bdaab19af2e4c0f12164998dc79fde2bf8b1f0c6e6057056896b77a71282595e201419798599a5d661fe1fb18f4e634f0f4cc76a33a84f2cae56033c8cb717a0648af8590afed9f1384e8eaafa48c868e2ac1abf836a7fa9e7764b6a4ca650f737c2aae5507380673df39be057e4aff21cba5c06622082f87b3c8b5a3f149489a4621cd2a92c433c2b927422f143b4474342a32e5c7782060e06d8f7260700b3e96f49c54999645df22d511825f52e2cc85264c350b7702f9879323eca1ac82bf62b30f8ec6593c9e4fd1c269b18acbfcf1c3f0e40742dc8ea7f22ac7994fd8d69a317bf95bab00ec7cc802f40bc937491477dffe75435e1c35afd5695a28feaa7b07696c6805a821b60d8c528cff8a97c05cb90abd1db8027567bc1cc52373252a7d51331de3fad9002a353d0374a24de8053c55f3a4922ff936795cd73a9b0a69299445cf26d9374e75591790ac2f18ccec5ef6516388e2748dcf3da178c24af84f752fd8ecc3e0eb388f1dd1f85c6f715d2f1dad447e89e5917a785d99bd636c548814f20ddff35291534e8c06869e8ab9a5d08014e0c1333b614441"}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@typed={0x8, 0x12, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x64, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0xc, 0x129, 0x0, 0x0, @u64=0xcf}]}, @TIPC_NLA_BEARER={0x148, 0x1, 0x0, 0x1, [@nested={0xcc, 0x26, 0x0, 0x1, [@typed={0xb8, 0x2b, 0x0, 0x0, @binary="20471f24a430f95f3a0157e19dc64a264615a89decfc1f258c26f723a4cdddb91d266f85b791291518cab4636cf7e4124a9cfd34898d233ea9a178b04271cddbecea01b593e379548124596e91ae08267c77766902f4b5674a8a8aa355e64473fc283e0f19efe44d763d78e5e6e70ac3e59b8c4361759f2b0c69483a84374d6a05bdd686de54599765aab74367da5eb108f589b70bab9e6ae0aa6f5e9289b230e3f8c399e4d7c454865a1ebf060dce4e0f4a55be"}, @nested={0x4, 0x158}, @typed={0x8, 0x7a, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x4, 0x89}]}, @typed={0x8, 0x132, 0x0, 0x0, @ipv4=@loopback}, @generic="6dc82e05a4923218dd735690a8d1abaea2e1fdc10c0b2857311d058fb01b9c41d0a1f95075e0b56a8453cf71bc61aac4694b71737b21209fe683b34878c8a3a6632f90c8acedc9c255e0fad8827b3e2f69e9a7032ea43f1118351669703bc789190bff56", @generic, @typed={0xc, 0xa3, 0x0, 0x0, @u64=0x9}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x136, 0x0, 0x0, @u32=0xfffffff8}]}, @TIPC_NLA_PUBL={0x31d, 0x3, 0x0, 0x1, [@typed={0xb2, 0x13c, 0x0, 0x0, @binary="a962cbbb39dbb980b85583cca2ad2ce5b4c263ee5ee92e493aa4d5e43c82aafa9cf3dbc428c7e9721c253aad9eebcaee1ed9bbac069bb847029cf1795a8c7e9312fe286b58a64081492c583a7d3d03ca57e9353348afe624b32915eb71543c6dda52231f308e0928ca30f806ea010b1002f782d3d625a612da11aeb7d5e9495be220b61ad77baed09edbe44597891ff81b4d4d94bd99b15aa1bf43f4d63526adb6c4814bb42276d48acd55c68994"}, @generic="35900983f0a459b847ecaaec01f810ecb366757ba91773d195a7ccd28fcd2c467609ebdeb0df9a43ae58cce8f0010995af17dab5e744b58b33d789807fb87f724ced47d4e151bebc8e2c376f5390f1037a24e2371fa293a860da72dd7b854eb5bdee6e9df90cd7a826113fdaeedb3eda64c8eb22fea2ee5f6fe0d7913f10f0030238e1d8576a9b782683d1b1f8e2bf57", @typed={0x8, 0x12e, 0x0, 0x0, @uid=r11}, @generic="a724ec32e89c74881ea1272c736f317f5057a4581c3634627485b7cfb7c0399a8c2d54d67dedaf10802b6015b09db5db294038cc5ba059fb9320a7b935fa6c350b04e327638be97bdc33fc6aa5edfd3b634ed748b61a9d6ee1b9c81e900a4b64dea2442282d7f38bee589345f01d7f494564429ef34e595f5fafb0e2446019ed16d28a2e44ba18ad373ec2fb5f3eea5ead34b01fa658a08cf75114eb49f5369802474304cb83bafbcf5ee3cb3c8f", @typed={0xc, 0x74, 0x0, 0x0, @u64=0x2f}, @typed={0x8, 0x35, 0x0, 0x0, @str='@,,\x00'}, @generic="c1ff1d88761ff4fd2a8dd3f4875fa06c11ab5125c284334453ccd623fb0070b47773c97a84f8a6fd0aebd34e7d6d841a9099a5ad5c827df43ead0c2a04e9c21ddb3ad986152e7573278cca06d2fbb6ad28a72e", @nested={0x79, 0x36, 0x0, 0x1, [@nested={0x4, 0xfd}, @nested={0x4, 0xf1}, @typed={0x8, 0x5e, 0x0, 0x0, @u32=0xb}, @generic="cd987e12a6a431a71ba60490d1a3d3774e00f01279cea2018f73fe3a46db1ad16e3d06d390790d46df4a62dad393196402ad9676adfc0bbf3f6763f42c3099594ac106d345eff99434de675b19ff0d489724f87127", @nested={0x4, 0x3e}, @nested={0x4, 0xda}, @typed={0x8, 0x7, 0x0, 0x0, @pid=r12}]}, @generic="de0bb998f108273fbab19c238255b60989267e959da6bdcd45441ea4fb246212543ffdcf6428e6ae0aae38d7831fdbd3f525a082de80f65a2b28bbf8"]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x11, 0x0, 0x0, @pid=r13}]}]}, 0x15c8}, 0x1, 0x0, 0x0, 0x80}, 0x80) write$auto_trace_options_core_fops_trace(r0, &(0x7f0000003040)="ae10de1cfc0a970315972f79a90a59ad76c63c93a9f289968202931787e223dd3f07e290cb5efaf0685fa2189bc529b08de84eed64f009c978910681e0ef2d51bde2fc951e8bd185c8c543fc0bb0e5e39671f85cc6f6540f62f49f1916ae393bad8fc55895fadf9d4a13a4c0e702045905b165f6eb6071e0995835373eadb2e72a745b9914e6260077241271c773ef5825113cdea2", 0x95) r14 = ioctl$auto_TUNSETGROUP(r2, 0x400454ce, &(0x7f0000003100)=0xd5) ioctl$auto_SG_GET_KEEP_ORPHAN(r14, 0x2288, &(0x7f0000003140)="b2449c0c77e21f85d0a2464a82f8b2ffff9936329953f0c305c784ef47457bee7195d51cb7b8d3e903caf19c72f0f134e62644abb2c75cc7ea96bbde420aab205a4ab3d02ab9f227c9e8a166a0b05e2a9904e10afd6ed846a927eb2e13c0b6824ea3263e07a568d24d20585a9d89400a35ab82fc94bc496f32595161e313985b9e123d455343333531ffc7d64604954af82330702c6dbd371a393aef589127ec8fb3bfb0ec23de430a54480adb079813f1d28aff0e348b64beaaa9dcdb9f68d5fa2703908f7f6a09d1a979191dc4d19be707a1c4241fd8e67b30bc5f33a1ed8eca0eb79a3088e5cd211308190d7d0db078b6") ioctl$auto_SNDCTL_MIDI_PRETIME(r4, 0xc0046d00, &(0x7f0000003240)="ff98a3") pipe2$auto(&(0x7f0000003280)=r1, 0x8001) r15 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000003300), r8) sendmsg$auto_NL80211_CMD_DEL_INTERFACE(r6, &(0x7f00000048c0)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000004880)={&(0x7f0000003340)={0x1504, r15, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_MESH_ID={0x1e, 0x18, "9d23fc0a1e372c795cb5adb66ac305f1365a323389e27236c687"}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_FILS_CACHE_ID={0xb8, 0xfd, "84750554b0b05dd73cc4b899d688c0a2a6d2ed5f4c0b8bcd9056b1cee90036ae23f626b6d5471c9d884d6401bfd1189b41057a680c01a14c1246e187e9e3bd303334f4176cf0319806cefa5907026bb1358cf1d11a552ba0b9d5a88179412f360b199c9380607485f17e06f69e8a05d9d4a7cdc5b5c07ff3de4db399f1d25d86dcf6d0ed4d133c6494d62ae3f821dc951ef9871634aa4a38474bcd557378736152b6cafa35bd575f5a6281c3157ddb309575fc19"}, @NL80211_ATTR_HE_CAPABILITY={0x1a, 0x10d, "f30f311e9f6662252cfd0f6d037eae60b162b3eb5321"}, @NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0x13ec, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x3f2, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x872, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x1}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x770, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x9456}]}]}, 0x1504}, 0x1, 0x0, 0x0, 0x40000}, 0x15) 219.189654ms ago: executing program 3 (id=974): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) ioctl$auto(r0, 0x2285, 0x1cfc4b42) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_GETPDP(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2c, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, 0x3ff}, @GTPA_VERSION={0x8, 0x2, 0x8}, @GTPA_FAMILY={0x5, 0xd, 0xe5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040814) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/wlan0/max_desync_factor\x00', 0x42402, 0x0) read$auto(r3, 0x0, 0x1ff) (async, rerun: 32) r4 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000004080)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x80201, 0x0) (rerun: 32) kexec_load$auto(0xe32, 0xe, &(0x7f0000000180)={@kbuf=&(0x7f0000000100)="935afada48d27ebf9e6625d419914724d1a1b4f54b89f3e8df5e1438cdad0e1a32efcf1e8064db1674b19cbe0cd3fe70bcb91053eb7d5b64ab5ae513dccc2fc9925dc6f702f1ca46106e0dce051aa7c070d34ae33f", 0x5, 0xffffffffffff9802, 0x1}, 0x3) (async) writev$auto(r4, &(0x7f0000005f00)={0x0, 0x4}, 0x6) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000001500), 0xffffffffffffffff) 106.252491ms ago: executing program 2 (id=975): close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x1, 0x84) r0 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x101041, 0x0) poll$auto(0x0, 0x5, 0x108) write$auto(r0, &(0x7f0000000000)='/sys/kernel/security/integrity/evm/evm_xattrs\x00', 0x20000003) write$auto(0x3, 0x0, 0x3f00) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) setresuid$auto(0x0, 0x7, 0x8080) setfsuid$auto(0x0) fcntl$auto(r1, 0x400, 0x1) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) close_range$auto(0x2, 0xa, 0x0) pipe$auto(0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x2, 0x80802, 0x0) r4 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/block/nbd14/sched/write1_next_rq\x00', 0x0, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r4, &(0x7f0000000280)=""/216, 0xd8) r5 = socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(r5, 0x0, 0x7, 0x20000000) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) mremap$auto(0x1000000000000, 0x4, 0x3, 0x4003, 0x100000002) madvise$auto(0x0, 0x200007, 0x19) r6 = io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) read$auto_snd_timer_f_ops_timer(r2, &(0x7f0000000100)=""/32, 0x20) r7 = getpgid(0x0) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001d00)=ANY=[@ANYBLOB="24140000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fddbdf2501000000681018800d292ce539e59b8d731506088c718a83d7c916bb101286105c37178cb0377caa80ce2d2bda3b27e83db18fe06e50f733f7afef45aadf5f3a6ae95c2e7201dd4eb506afdb5e50363108004d00", @ANYRES32, @ANYBLOB="08009e00ac1414aa61367b37ba4e79dce0f7864b3e6d5863903a7c6e45166b7e28800eddff5088fbd0f56147b61d2373cd6c1a0590445aae4d81915049b0bfb4ceccd5c1f549b0b24f0b47431b866edd9e94794559478b30fa4548399474d50dca5a43de13abc17fc7e8f583cf390952ae42ce4512f5aa1db5d496e29faafb2913c5e9da300ff3e65f3ac283a1bdb390136ab0dd7433c2b033db3f20d401bdaecd1ae2b3f5dd201656ab607ccb7244856b2a3cda67fdec140a42ad9f26da1c0900a7143b296b138cc25962774b214d9ec5b154e6080efa2dd6bb3260bd3945632249619109b910c14cdb3c6bc87ff1b8278f0d649c30a1082afa186f163ad7c1d089b366510b5ee9a51b9e9b8248e46d063c666e64b6d71032be1a45a59d975042c5e34aba39d7678eac856c040bf6ef1e8b4f2ba2b673556870aea3d645f2afbae052feeba050a846e3d36d11029120f73379847707d0b8e1cdbd42f176b67757080f78d16e187ddc9a8c8abed7a6f6e688cbacc3c860c79b1862a58933cf49f1fcf4cf7f023b9a25cad0b341cabc889bf7cb75fd5f6ce6827d8ae252dd7a0afdd2e4a0b5418a5d8e85fb7e2af50304452856ec959f81c87cafc6034205459214de5c8a2feff495d22cd171c0308ddacb7f9729f8b580c2384901a4f0bf5d86991a74b361f5c667beedb2556de7652a9d08e4ef051ebf184dbd65bf429195acc83a151ec1d3472eb86176c2efe5a472e8fdb58da279f39c9b34fb0ceb797bdc1cf581114ec3f142f98fed8c4782eb4d57f2a1429af16a348085205b8bbdaae7d18b9fb253a00d3be6a612efc71d6684401b8a323e3ad6fe530030dd3863c45eba15513139e38a31ee5d0477906a52966fdd544de529d1a9b85908d1a02a56ce76f465cbfc4bc431bdfd6018c3ada69cb50b028514d9b0881cb61a1963007e8b5570b9c1bead12bcf1cac0a569c0ba199e77183ee8417184a2d6be90f3ff02ce5f89066a97571f49b17132953d4c58f3d5e3236e7fd90caa69690f701bbb5aa0a0b459c739ec9be0fdfacca361a35071f14af7e9e724a6fa42fd0e87562a95334580bbd9cd263516c3ae3a3032871701d604147c1bade8527165019d9d0cefa51afd38def9b605b5f5fdac462e3817418d70dc8a1f48f0c8fd2cefabc68ce60e97b983aafbabb2b60fbcf0e8da7d75d276dfef3ce2f5a83735ff1629299fdf360ef481dc3d9d247b19f19bb2251dd0ca9a2084b6e811f4bcf009a3aa1428bb955c52270e86bc9160553dc50ddc97197459c52008816fa12ca16ba0365eb65c617c070aed256482f76cf0242b1cf52175becef530c88f65f48aaf0cb21b1f381121adefe9ad01bf4e1f2e607d6799f5e9562a35c933f81eba611317bbc90c954af0cab3a371bb743274391d503bd844f5986b2a5627a6d21e5e87dd1f80dcae4e43d6ebad2b7181347f3e7b387c592fdb5b9b6c50794eefb1c58ab17d36771a2cdf338f436c1043bb7f43d7c1cd2ae6ba24b12731937a783dfff7a29c068bbfb15c02243e80e6b0aeb5af815c922bb783167ba889c8bbc30074757c327970293e0c8bfdb0102a236199acc1050fce12c734c38224553139c0b015fe862ca1faedc01c32d379da53ee4bdd96ea2c00761387fd94c200f0f011e5769951ca877eeafff97873a98fab87d3b45b6753c43a9d7c073a4827fc62d6f79dcd5d8ee053db8b0fff2e1453c154528f269d1d6eb6a7ef76fbd5127faa77a7270001a7be686bdebcf63114f729dbb7c12bdb696fa84b55f24fc77d214491e98f538151b9639a66512ce9043a63c3e91f2d46df3bf54dc65c14d3ef9df6240b3dce6e387e288e64620504a79997a023f820efca8e6bef1003a10e1d79bbac258eb4f37d27cb866f7e79601d2f5a7538cb9b044057fdb0fb54eb0c6226e0f3acc336d787275ffc03d15576affed287aeafa6aeba917200432008195ef87c94c69a4a5f12fe732cc56da27bda5ae62fbd5d5b2cbf43e3875e9ca6511b6aa2511a3a895c77120e0dcc0ba8906eb2a700ced55e74ce405af5c9ef355a6951c7e186e9dd850733fb4992fee378e64c787cc79250f37a5fabedfc10c5e83f080fb15df5393bc6d80413fa17848291a4df00b56c34dd98c132c131fec477a1b524cb4758f78a91c6d1255360e0742b0019b1810dba7076722e21685b81f578692eed72f6d14866184d17fab545c1d4aeeb15536cba36082d687eb9992b39fdc653f9b33ab3e9fb5fd85cb9c3a712ca92ab2fe642deefcbc21d63f299d4a007ef4eb9fd15ea1ce1eea54086e601177ee45a5f3128fbb331b702ba977022cfc49eaf9712602cdc26d4bd5233d3647429a1b4fbd79e5c188af8b998ddec9f35f55398e52660f962b87ef43f8982da2637cc1957009c971b882e9625897595714c31b31c764b08d8e5f87f6681c6a045848cb3618e48efed5319fb300c142239a91f0c2991c6197c94744c6b0a2ee33fc293f75b8ff4e0653c3ceb8c118fd9857282b6c5764ebdfe6417ab32bba9726d074d3df87fa3c04b4fcc644e2d8da908718ed6104e4e6a4950c94dba316789954839be807c9993eeb71dc03c8df68a57407f25923c536d62f57099463ab0cb403027a10bbbdf161d59a4aa2e4f088b24340e2394bf3ac32fa82f5c83b51e82d8da6ab337d82a5bca58d63b6b9c9abaf0b47409659d009733325945671c9d74c9685b3ed28f324ff66b92c3ce56d5e181ede54ed9898b91da3f567f2816564dbc6550c8d0b1c1653ab9b52ff093758f3d4c18bfc61b37731f43e72a9af7dfeb456f1eb961cb1cfac26957f8c2878adfff3e012179fcd8a801ecc746c09eaf90fd93904eca86edf2d9bf77fcab08b07fffaa64e41196185057784a4ab898b91f47381a83849ad4c38c3fbe0d7522f004dbbfce2ec3e25d28c77e4a15f64d11058f54e90a9ea39f41e5a9fcb74acaf750c99e58eb1c76b5d55ac7bb30ba5312781cfb207fdbff713005232732cb45ff276df555f2e964b369a7e32bc9fe8f2f7db6244ebfa4a279aa39a2d651c4de3613fb420958262daa73c2e3a5ee3621e25c8f9f9f895cd158379f619ad8ff0148d6718fbc55f20d431c4a5644ee7c91fde7ac149915341b687b5d9c5db971c2ebf754acb409c6e59cde46285ff6b5d7958c0d22a777f1ee16eba5d646a2c20b19aeafe31eb5cbc1f8f9209627a92b95ebff09a0f2fcf91758f032faa55f23ac3de586502c76752a804faa57b4b7862de2d7b7cbc4bce4ae2e34d9860f70d42d2d2a6b79eb36f9d0a3ada884be258e3cc2368968722fbd0cd14a7be17a7b220b704aafae60129b64bd1bd659f668c178ad37125c95b47b10561b1196b34741492d98eb9eb1e5f62abd70951ccf5aed75b76d2fba334d718c24ffb9744779f78b3837ee45fb5f0ef30dc3fb03f091822c68cc5c340189d5c0c1992adfa3e27c2cac3a9d0ec532c6b03eba2d0ffbe012afcc88079831c810d1236176ef01733e851c211cba372ed46edf98238cf9e06e9044c4d2bf60ebe2f04166361d64cb9350918541812b0c15f2854a1dff1cadbf5f7fe2160b22f145fd11ee64b35af5ff00776deceeefcc8685a93230887ace767afafa4ad619fc27378fba095f86a54afbbc2024cf8a8ad71c224d77c1b0aa67b318729989324c0215ca6517ff7c80ac191bc1748b8aec2b95b4d33743273a19d19b6dde3ffd2a99895696db4e56a17072f8ace27640a74a9460ad945ce16cdffa6975d005223680cbed49af5329447cde7a932cfde9f72fcfb5eb7d038a3dc60891c78cd84f9902ae35f26df7ba3a5b7a7c316bb4201dff8a961b60e5105d358fa4c835bd8da03138e043de5441c62511d7397e5c8a1b2cc33bcb44a1b8ff026d02d3466a7adcd14d18193afaddbdbea5a43f07db1887198c630449db0b9aed75ad2025e10b88de6d2a25acb7d71bae0836f172d26015fe891a5c45a9a2d787fde82381860323e8ef0006cf8d42ec9061724ea7fee0dfe2c315d6e269553c7cdf88ca42cb477c79ee07c724bd6373b58061c856b73ffe0efa0febfc3ea9a81697182562678783048485e7cedca34be757b621bd0ab5725519d801ee9005dccf5349b077a633255579c83a34a3cdb5990d24d5efbb3c1b07237895ce6d79b8803f1403fc9f2da603001a30cdf87fad4836524076ecebebfdc0c90c4c635f7cb309b28e8e01699c2d56a6a7b2142d52a763278f67e7a283caefa87560adaf2f3bdd7e06f4b1a9fca850c2f4408b1bb08a3ba5f11941c989cfde11131c2a8b60ea267201740865ed47db258ee3edbd88c799af4a2eea13d1381d285735a798e9cb7b903d89a39a71e622ea914b461ce05ca41f04deb8b5d792c8872393c86db17dd526440e07eac3d0242a4bf34635e98d0d65ca4b6ed85d6eff3824c6406b23d3346377d379a985fc1fe9749e5734a9a98e04051351340e08adb7b66f48aa19c5e15101f8d707dda9e5d3e260753550d78c736d8002310a4277c640fbe54e3468b27fbe5f21073f31d1898f944aee25d19c01898e868c593bb7d45173f432997ee4a43180731784745456a55aa204cfeeacb59405cea8b3308e033a0494800d4c11d8f7958a1e234eb73858c989f22b0db671ab04dda8d9cc5d3b40f8cac9e2b81c0231c969dbcc3705d17e0bd765e6db6758deb595256578ddf78674f44af3176b62e507bc8a4509186107ac766dbdfba2b50f9a14bec63522ee2e3204451f4d5f77656f58958625abe1c21d70862c5721152d20268e034f33287427ffe1225e3a2e8aab56f6b6ca9924e4dc9e5c192b0926d54a348ea80e167b2e1d402ebba691b2868b17751dfe08b48643b2353b7b3830f800d8b7eaa1bebbb64cb6b1b1306056b639c77eabf8493febfd5e5803b5ca7ad6769f1f163940bc86ce3ef305bceac163f1160990dec19ea22e173f19f03505623c36e66d9d4d554436607ed422375c2d3b38f4fe2cf8c838ded1491a1a71e7c7b2d2a52647c74c06c64242726b21b96d4b3283abdae68d0938777712190b5d791db454d88c01111de26b5318ef8df6e6df1f3153bb1e85a99ba146f2563efbcacdaa405534b28ec1b45ba5a99b79a9a9c044116716f7162eba4eb4d05af25091a738e2656437bffeeda9d17052c9228a358614d6df74c20c61e587a8bc0d845c75be282ed4f3f0598b74882795bc47af79e5a675caf9a7c6743a218a5fc696913f40ef08e5862c474fb063b210a17c3f00ea9c870ecc0aaefd819f3ebf952aa1241124edaa316e062b68822b3818424e4f1f241c3523b55bdd02e89c94c1efd5b52625123e95770eebd83005fb4237fd3943138f527130b5b96bb1566096a4dc306c433676f339c41d2c05b2cc9a3047e9ba11d7f7d156e151b468130f6cab48f4d78cbf63ae3701fd6b10f6f6bd3cddec3539c92ce3a76cc0e73a41c5a521fbb588d262e2bf598a3d1cae93042f359154ecce8f0d6d0a584ba687b35f0d25ae86691dddc452380ef884306ced5d241afa8205196a35b5cbd5538facd8aba7d81f5beb8cb4d6fb3600acd99e141ff28c19ff03324735fa9dd0f93283ca4acbe1c438abdb97b927dacaba5a6fead72b05e9d4c714b4c64849b8d5ddbad325cf9d658feeebbb364032addea4fd79ed20d5f81bc8ef87cf164aa48882ad355eee8c83dec73332b151d29c0bbd8e2d46477bed2a43231bf31cbac02013ac3d2b3b37d6f02eb54e0d277d6c6b1de1b7b64cdea4af183b80b5df36237530bb7c4770a6e609d04b18b457241f44ba25fdd0cf9d5ffe686a800c00c880040077800400048008002700d74d00002503188070e00a15f7c4525b718670964a784ad642cf4e5b911b7c539836296c7f39ce9187f751afa6aa398096d7479f2fdd0feabf37595537e4d5f6aff876a3cdfd74f38c25d69fc2d3ade7e2287f8ab5623a68d33ecc392b4c74c536f289462f84f6af05237965cd607d42a2173587610bfd4a959420499ce37728a2bf2c1400278008009d00", @ANYRES32=r6, @ANYBLOB="05006100000000001800208008006d00e000000108009c00", @ANYRES32=0x0, @ANYBLOB="040068802400b6800800b900", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="050012000500000008001c00", @ANYRES32=r7, @ANYBLOB="14000400766574683100000000000000000000000500240009000000"], 0x1424}, 0x1, 0x0, 0x0, 0x10}, 0x80) madvise$auto(0x0, 0x454, 0x9) 0s ago: executing program 5 (id=976): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC0D0c\x00', 0x2800, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_WRITEN_FRAMES2(r0, 0x40184152, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x8042, 0x0) mmap$auto(0x4, 0x8, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8003) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) r3 = io_uring_setup$auto(0x1, 0x0) connect$auto(0x3, 0x0, 0x58) bind$auto(r3, 0x0, 0x6a) ioctl$auto_SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x40184152, &(0x7f0000000280)={0x10000, &(0x7f0000000240)=&(0x7f0000000140)="beb93fa080a16bf33a576b5dcfb5033cfa41bf25b475a515cc41b8199d1224974305e0d7c32868cf8c26b0ac5c234fc6f52a5e7fcde847ada639fa935c0b31b32f7d8da174eb2c82d03ae90654e200006093b5772308107ef0c9a35c9596bba80bec963f6b2bdd6c9f80f916320ce6511f97d4d38747c24b774813283abd043cd264374ce6d07039e9c155f7d6ea3f717f42ed3f1c1461cdea72ee291a1ba560e54496a8527b38ce60b3abac153b6050d729fb0517dfcaf522643286a0b7778778ff0beaca11d2c001bcfd0f3a198b77226cceebd7c4d454c8362e35822aa20e127d15a05693da", 0x7f}) ioctl$auto_SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000000)={0xa, 0x1}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio0/drvctl\x00', 0x28001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000080)='n', 0x1) ioctl$auto_SNDRV_PCM_IOCTL_STATUS64(r2, 0x80984120, &(0x7f0000000080)={0x0, "e91a1ae2", 0x3, 0x0, 0xfffffffffffff002, 0x4, 0x6, 0xfffffffffffffff9, 0x1, 0x6cca, 0x2000000007fff, 0x3, 0x7, 0x180004, 0x1, 0x80000001, 0x7, 0x5, 0x400, "cec3ec4c01d0132df17dbe7378898800"}) socket(0x23, 0x80805, 0x0) write$auto(0x3, 0x0, 0xfdef) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/xfs/xqm\x00', 0x1c9802, 0x0) pread64$auto(r5, 0x0, 0x100000001, 0x2000006) ioctl$auto(0x3, 0x89ed, 0xfffffffffffff4e0) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r7, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB='\x00'/13], 0x1c}, 0x1, 0x0, 0x0, 0x40cc}, 0x20040080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) kernel console output (not intermixed with test programs): 237.271859][ T7252] ? __pfx_process_one_work+0x10/0x10 [ 237.271894][ T7252] ? __pfx_hci_rx_work+0x10/0x10 [ 237.271929][ T7252] worker_thread+0x5ef/0xe50 [ 237.271963][ T7252] ? __pfx_worker_thread+0x10/0x10 [ 237.271990][ T7252] ? kthread+0x13a/0x450 [ 237.272010][ T7252] ? __pfx_worker_thread+0x10/0x10 [ 237.272034][ T7252] kthread+0x370/0x450 [ 237.272054][ T7252] ? __pfx_kthread+0x10/0x10 [ 237.272078][ T7252] ret_from_fork+0x72b/0xd50 [ 237.272107][ T7252] ? __pfx_ret_from_fork+0x10/0x10 [ 237.272136][ T7252] ? __switch_to+0x800/0x1100 [ 237.272171][ T7252] ? __switch_to_asm+0x39/0x70 [ 237.272207][ T7252] ? __pfx_kthread+0x10/0x10 [ 237.272236][ T7252] ret_from_fork_asm+0x1a/0x30 [ 237.272297][ T7252] [ 237.272378][ T7252] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 237.596666][ T7252] Bluetooth: hci2: failed to register connection device [ 237.607172][ T7252] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 237.625846][ T7252] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 237.635494][ T7252] CPU: 0 UID: 0 PID: 7252 Comm: kworker/u11:2 Not tainted syzkaller #0 PREEMPT(full) [ 237.635533][ T7252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 237.635552][ T7252] Workqueue: hci2 hci_rx_work [ 237.635595][ T7252] Call Trace: [ 237.635605][ T7252] [ 237.635616][ T7252] dump_stack_lvl+0x100/0x190 [ 237.635652][ T7252] sysfs_warn_dup.cold+0x1c/0x28 [ 237.635694][ T7252] sysfs_create_dir_ns+0x24b/0x2b0 [ 237.635727][ T7252] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 237.635757][ T7252] ? find_held_lock+0x2b/0x80 [ 237.635794][ T7252] ? kobject_add_internal+0x25f/0x930 [ 237.635826][ T7252] ? kobject_add_internal+0x25f/0x930 [ 237.635862][ T7252] ? do_raw_spin_unlock+0x145/0x1e0 [ 237.635899][ T7252] kobject_add_internal+0x2c8/0x930 [ 237.635940][ T7252] kobject_add+0x16a/0x1e0 [ 237.635971][ T7252] ? __pfx_kobject_add+0x10/0x10 [ 237.636001][ T7252] ? class_to_subsys+0x10f/0x150 [ 237.636049][ T7252] ? kobject_put+0xb9/0x640 [ 237.636075][ T7252] ? _raw_spin_unlock+0x28/0x50 [ 237.636115][ T7252] ? device_add+0x253/0x1950 [ 237.636157][ T7252] device_add+0x294/0x1950 [ 237.636194][ T7252] ? __pfx_dev_set_name+0x10/0x10 [ 237.636238][ T7252] ? __pfx_device_add+0x10/0x10 [ 237.636276][ T7252] ? mgmt_send_event_skb+0x2fb/0x460 [ 237.636329][ T7252] hci_conn_add_sysfs+0x1a3/0x260 [ 237.636387][ T7252] le_conn_complete_evt+0x11eb/0x1f60 [ 237.636440][ T7252] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 237.636478][ T7252] ? __pfx_bt_warn+0x10/0x10 [ 237.636534][ T7252] hci_le_conn_complete_evt+0x23c/0x3a0 [ 237.636577][ T7252] ? skb_pull_data+0x15f/0x1e0 [ 237.636624][ T7252] hci_le_meta_evt+0x34a/0x5f0 [ 237.636666][ T7252] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 237.636712][ T7252] hci_event_packet+0x51c/0xcd0 [ 237.636753][ T7252] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 237.636803][ T7252] ? __pfx_hci_event_packet+0x10/0x10 [ 237.636847][ T7252] ? kcov_remote_start+0x374/0x660 [ 237.636887][ T7252] ? lockdep_hardirqs_on+0x78/0x100 [ 237.636940][ T7252] hci_rx_work+0x451/0xfc0 [ 237.636987][ T7252] process_one_work+0xa0e/0x1980 [ 237.637038][ T7252] ? __pfx_process_one_work+0x10/0x10 [ 237.637081][ T7252] ? __pfx_hci_rx_work+0x10/0x10 [ 237.637122][ T7252] worker_thread+0x5ef/0xe50 [ 237.637165][ T7252] ? __pfx_worker_thread+0x10/0x10 [ 237.637197][ T7252] ? kthread+0x13a/0x450 [ 237.637222][ T7252] ? __pfx_worker_thread+0x10/0x10 [ 237.637250][ T7252] kthread+0x370/0x450 [ 237.637276][ T7252] ? __pfx_kthread+0x10/0x10 [ 237.637305][ T7252] ret_from_fork+0x72b/0xd50 [ 237.637341][ T7252] ? __pfx_ret_from_fork+0x10/0x10 [ 237.637385][ T7252] ? __switch_to+0x800/0x1100 [ 237.637426][ T7252] ? __switch_to_asm+0x39/0x70 [ 237.637464][ T7252] ? __pfx_kthread+0x10/0x10 [ 237.637494][ T7252] ret_from_fork_asm+0x1a/0x30 [ 237.637558][ T7252] [ 237.637616][ T7252] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 237.945199][ T7252] Bluetooth: hci2: failed to register connection device [ 237.952928][ T7252] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 237.960889][ T7252] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 237.971840][ T7252] CPU: 0 UID: 0 PID: 7252 Comm: kworker/u11:2 Not tainted syzkaller #0 PREEMPT(full) [ 237.971867][ T7252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 237.971879][ T7252] Workqueue: hci2 hci_rx_work [ 237.971908][ T7252] Call Trace: [ 237.971915][ T7252] [ 237.971922][ T7252] dump_stack_lvl+0x100/0x190 [ 237.971945][ T7252] sysfs_warn_dup.cold+0x1c/0x28 [ 237.971973][ T7252] sysfs_create_dir_ns+0x24b/0x2b0 [ 237.971994][ T7252] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 237.972014][ T7252] ? find_held_lock+0x2b/0x80 [ 237.972038][ T7252] ? kobject_add_internal+0x25f/0x930 [ 237.972059][ T7252] ? kobject_add_internal+0x25f/0x930 [ 237.972082][ T7252] ? do_raw_spin_unlock+0x145/0x1e0 [ 237.972106][ T7252] kobject_add_internal+0x2c8/0x930 [ 237.972130][ T7252] kobject_add+0x16a/0x1e0 [ 237.972157][ T7252] ? __pfx_kobject_add+0x10/0x10 [ 237.972176][ T7252] ? class_to_subsys+0x10f/0x150 [ 237.972206][ T7252] ? kobject_put+0xb9/0x640 [ 237.972223][ T7252] ? _raw_spin_unlock+0x28/0x50 [ 237.972249][ T7252] ? device_add+0x253/0x1950 [ 237.972276][ T7252] device_add+0x294/0x1950 [ 237.972300][ T7252] ? __pfx_dev_set_name+0x10/0x10 [ 237.972329][ T7252] ? __pfx_device_add+0x10/0x10 [ 237.972354][ T7252] ? mgmt_send_event_skb+0x2fb/0x460 [ 237.972386][ T7252] hci_conn_add_sysfs+0x1a3/0x260 [ 237.972424][ T7252] le_conn_complete_evt+0x11eb/0x1f60 [ 237.972457][ T7252] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 237.972482][ T7252] ? __pfx_bt_warn+0x10/0x10 [ 237.972517][ T7252] hci_le_conn_complete_evt+0x23c/0x3a0 [ 237.972545][ T7252] ? skb_pull_data+0x15f/0x1e0 [ 237.972574][ T7252] hci_le_meta_evt+0x34a/0x5f0 [ 237.972602][ T7252] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 237.972632][ T7252] hci_event_packet+0x51c/0xcd0 [ 237.972658][ T7252] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 237.972692][ T7252] ? __pfx_hci_event_packet+0x10/0x10 [ 237.972720][ T7252] ? kcov_remote_start+0x374/0x660 [ 237.972747][ T7252] ? lockdep_hardirqs_on+0x78/0x100 [ 237.972781][ T7252] hci_rx_work+0x451/0xfc0 [ 237.972810][ T7252] process_one_work+0xa0e/0x1980 [ 237.972839][ T7252] ? __pfx_process_one_work+0x10/0x10 [ 237.972865][ T7252] ? __pfx_hci_rx_work+0x10/0x10 [ 237.972892][ T7252] worker_thread+0x5ef/0xe50 [ 237.972917][ T7252] ? __pfx_worker_thread+0x10/0x10 [ 237.972938][ T7252] ? kthread+0x13a/0x450 [ 237.972952][ T7252] ? __pfx_worker_thread+0x10/0x10 [ 237.972970][ T7252] kthread+0x370/0x450 [ 237.972986][ T7252] ? __pfx_kthread+0x10/0x10 [ 237.973011][ T7252] ret_from_fork+0x72b/0xd50 [ 237.973033][ T7252] ? __pfx_ret_from_fork+0x10/0x10 [ 237.973055][ T7252] ? __switch_to+0x800/0x1100 [ 237.973081][ T7252] ? __switch_to_asm+0x39/0x70 [ 237.973106][ T7252] ? __pfx_kthread+0x10/0x10 [ 237.973124][ T7252] ret_from_fork_asm+0x1a/0x30 [ 237.973166][ T7252] [ 237.973185][ T7252] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 238.289794][ T7252] Bluetooth: hci2: failed to register connection device [ 238.296886][ T7252] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 238.311551][ T7252] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 238.321325][ T7252] CPU: 0 UID: 0 PID: 7252 Comm: kworker/u11:2 Not tainted syzkaller #0 PREEMPT(full) [ 238.321351][ T7252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 238.321363][ T7252] Workqueue: hci2 hci_rx_work [ 238.321394][ T7252] Call Trace: [ 238.321400][ T7252] [ 238.321407][ T7252] dump_stack_lvl+0x100/0x190 [ 238.321431][ T7252] sysfs_warn_dup.cold+0x1c/0x28 [ 238.321458][ T7252] sysfs_create_dir_ns+0x24b/0x2b0 [ 238.321479][ T7252] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 238.321498][ T7252] ? find_held_lock+0x2b/0x80 [ 238.321523][ T7252] ? kobject_add_internal+0x25f/0x930 [ 238.321544][ T7252] ? kobject_add_internal+0x25f/0x930 [ 238.321565][ T7252] ? do_raw_spin_unlock+0x145/0x1e0 [ 238.321589][ T7252] kobject_add_internal+0x2c8/0x930 [ 238.321613][ T7252] kobject_add+0x16a/0x1e0 [ 238.321633][ T7252] ? __pfx_kobject_add+0x10/0x10 [ 238.321652][ T7252] ? class_to_subsys+0x10f/0x150 [ 238.321681][ T7252] ? kobject_put+0xb9/0x640 [ 238.321698][ T7252] ? _raw_spin_unlock+0x28/0x50 [ 238.321724][ T7252] ? device_add+0x253/0x1950 [ 238.321750][ T7252] device_add+0x294/0x1950 [ 238.321774][ T7252] ? __pfx_dev_set_name+0x10/0x10 [ 238.321803][ T7252] ? __pfx_device_add+0x10/0x10 [ 238.321827][ T7252] ? mgmt_send_event_skb+0x2fb/0x460 [ 238.321860][ T7252] hci_conn_add_sysfs+0x1a3/0x260 [ 238.321889][ T7252] le_conn_complete_evt+0x11eb/0x1f60 [ 238.321922][ T7252] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 238.321946][ T7252] ? __pfx_bt_warn+0x10/0x10 [ 238.321981][ T7252] hci_le_conn_complete_evt+0x23c/0x3a0 [ 238.322008][ T7252] ? skb_pull_data+0x15f/0x1e0 [ 238.322038][ T7252] hci_le_meta_evt+0x34a/0x5f0 [ 238.322065][ T7252] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 238.322095][ T7252] hci_event_packet+0x51c/0xcd0 [ 238.322121][ T7252] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 238.322149][ T7252] ? __pfx_hci_event_packet+0x10/0x10 [ 238.322185][ T7252] ? kcov_remote_start+0x374/0x660 [ 238.322212][ T7252] ? lockdep_hardirqs_on+0x78/0x100 [ 238.322244][ T7252] hci_rx_work+0x451/0xfc0 [ 238.322273][ T7252] process_one_work+0xa0e/0x1980 [ 238.322302][ T7252] ? __pfx_process_one_work+0x10/0x10 [ 238.322328][ T7252] ? __pfx_hci_rx_work+0x10/0x10 [ 238.322355][ T7252] worker_thread+0x5ef/0xe50 [ 238.322380][ T7252] ? __pfx_worker_thread+0x10/0x10 [ 238.322400][ T7252] ? kthread+0x13a/0x450 [ 238.322414][ T7252] ? __pfx_worker_thread+0x10/0x10 [ 238.322432][ T7252] kthread+0x370/0x450 [ 238.322448][ T7252] ? __pfx_kthread+0x10/0x10 [ 238.322465][ T7252] ret_from_fork+0x72b/0xd50 [ 238.322487][ T7252] ? __pfx_ret_from_fork+0x10/0x10 [ 238.322509][ T7252] ? __switch_to+0x800/0x1100 [ 238.322540][ T7252] ? __switch_to_asm+0x39/0x70 [ 238.322564][ T7252] ? __pfx_kthread+0x10/0x10 [ 238.322582][ T7252] ret_from_fork_asm+0x1a/0x30 [ 238.322618][ T7252] [ 238.322649][ T7252] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 238.628993][ T7252] Bluetooth: hci2: failed to register connection device [ 238.636222][ T7252] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 238.644806][ T7914] Bluetooth: hci4: command tx timeout [ 238.652147][ T7252] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 238.664109][ T7252] CPU: 0 UID: 0 PID: 7252 Comm: kworker/u11:2 Not tainted syzkaller #0 PREEMPT(full) [ 238.664134][ T7252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 238.664146][ T7252] Workqueue: hci2 hci_rx_work [ 238.664176][ T7252] Call Trace: [ 238.664183][ T7252] [ 238.664190][ T7252] dump_stack_lvl+0x100/0x190 [ 238.664220][ T7252] sysfs_warn_dup.cold+0x1c/0x28 [ 238.664251][ T7252] sysfs_create_dir_ns+0x24b/0x2b0 [ 238.664271][ T7252] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 238.664291][ T7252] ? find_held_lock+0x2b/0x80 [ 238.664314][ T7252] ? kobject_add_internal+0x25f/0x930 [ 238.664335][ T7252] ? kobject_add_internal+0x25f/0x930 [ 238.664359][ T7252] ? do_raw_spin_unlock+0x145/0x1e0 [ 238.664384][ T7252] kobject_add_internal+0x2c8/0x930 [ 238.664411][ T7252] kobject_add+0x16a/0x1e0 [ 238.664431][ T7252] ? __pfx_kobject_add+0x10/0x10 [ 238.664450][ T7252] ? class_to_subsys+0x10f/0x150 [ 238.664481][ T7252] ? kobject_put+0xb9/0x640 [ 238.664498][ T7252] ? _raw_spin_unlock+0x28/0x50 [ 238.664523][ T7252] ? device_add+0x253/0x1950 [ 238.664550][ T7252] device_add+0x294/0x1950 [ 238.664574][ T7252] ? __pfx_dev_set_name+0x10/0x10 [ 238.664603][ T7252] ? __pfx_device_add+0x10/0x10 [ 238.664627][ T7252] ? mgmt_send_event_skb+0x2fb/0x460 [ 238.664659][ T7252] hci_conn_add_sysfs+0x1a3/0x260 [ 238.664690][ T7252] le_conn_complete_evt+0x11eb/0x1f60 [ 238.664723][ T7252] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 238.664747][ T7252] ? __pfx_bt_warn+0x10/0x10 [ 238.664781][ T7252] hci_le_conn_complete_evt+0x23c/0x3a0 [ 238.664809][ T7252] ? skb_pull_data+0x15f/0x1e0 [ 238.664838][ T7252] hci_le_meta_evt+0x34a/0x5f0 [ 238.664865][ T7252] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 238.664897][ T7252] hci_event_packet+0x51c/0xcd0 [ 238.664925][ T7252] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 238.664953][ T7252] ? __pfx_hci_event_packet+0x10/0x10 [ 238.664999][ T7252] ? kcov_remote_start+0x374/0x660 [ 238.665026][ T7252] ? lockdep_hardirqs_on+0x78/0x100 [ 238.665059][ T7252] hci_rx_work+0x451/0xfc0 [ 238.665089][ T7252] process_one_work+0xa0e/0x1980 [ 238.665117][ T7252] ? __pfx_process_one_work+0x10/0x10 [ 238.665143][ T7252] ? __pfx_hci_rx_work+0x10/0x10 [ 238.665171][ T7252] worker_thread+0x5ef/0xe50 [ 238.665195][ T7252] ? __pfx_worker_thread+0x10/0x10 [ 238.665220][ T7252] ? kthread+0x13a/0x450 [ 238.665235][ T7252] ? __pfx_worker_thread+0x10/0x10 [ 238.665253][ T7252] kthread+0x370/0x450 [ 238.665268][ T7252] ? __pfx_kthread+0x10/0x10 [ 238.665286][ T7252] ret_from_fork+0x72b/0xd50 [ 238.665308][ T7252] ? __pfx_ret_from_fork+0x10/0x10 [ 238.665330][ T7252] ? __switch_to+0x800/0x1100 [ 238.665355][ T7252] ? __switch_to_asm+0x39/0x70 [ 238.665379][ T7252] ? __pfx_kthread+0x10/0x10 [ 238.665397][ T7252] ret_from_fork_asm+0x1a/0x30 [ 238.665432][ T7252] [ 238.665452][ T7252] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 238.971522][ T7914] Bluetooth: hci5: command tx timeout [ 238.978677][ T7252] Bluetooth: hci2: failed to register connection device [ 238.985868][ T7252] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 238.995192][ T7252] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 239.005934][ T7252] CPU: 0 UID: 0 PID: 7252 Comm: kworker/u11:2 Not tainted syzkaller #0 PREEMPT(full) [ 239.005961][ T7252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 239.005973][ T7252] Workqueue: hci2 hci_rx_work [ 239.006009][ T7252] Call Trace: [ 239.006018][ T7252] [ 239.006028][ T7252] dump_stack_lvl+0x100/0x190 [ 239.006057][ T7252] sysfs_warn_dup.cold+0x1c/0x28 [ 239.006085][ T7252] sysfs_create_dir_ns+0x24b/0x2b0 [ 239.006106][ T7252] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 239.006125][ T7252] ? find_held_lock+0x2b/0x80 [ 239.006150][ T7252] ? kobject_add_internal+0x25f/0x930 [ 239.006178][ T7252] ? kobject_add_internal+0x25f/0x930 [ 239.006200][ T7252] ? do_raw_spin_unlock+0x145/0x1e0 [ 239.006224][ T7252] kobject_add_internal+0x2c8/0x930 [ 239.006248][ T7252] kobject_add+0x16a/0x1e0 [ 239.006267][ T7252] ? __pfx_kobject_add+0x10/0x10 [ 239.006286][ T7252] ? class_to_subsys+0x10f/0x150 [ 239.006316][ T7252] ? kobject_put+0xb9/0x640 [ 239.006332][ T7252] ? _raw_spin_unlock+0x28/0x50 [ 239.006358][ T7252] ? device_add+0x253/0x1950 [ 239.006385][ T7252] device_add+0x294/0x1950 [ 239.006409][ T7252] ? __pfx_dev_set_name+0x10/0x10 [ 239.006438][ T7252] ? __pfx_device_add+0x10/0x10 [ 239.006468][ T7252] ? mgmt_send_event_skb+0x2fb/0x460 [ 239.006501][ T7252] hci_conn_add_sysfs+0x1a3/0x260 [ 239.006531][ T7252] le_conn_complete_evt+0x11eb/0x1f60 [ 239.006563][ T7252] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 239.006587][ T7252] ? __pfx_bt_warn+0x10/0x10 [ 239.006622][ T7252] hci_le_conn_complete_evt+0x23c/0x3a0 [ 239.006649][ T7252] ? skb_pull_data+0x15f/0x1e0 [ 239.006678][ T7252] hci_le_meta_evt+0x34a/0x5f0 [ 239.006705][ T7252] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 239.006735][ T7252] hci_event_packet+0x51c/0xcd0 [ 239.006761][ T7252] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 239.006789][ T7252] ? __pfx_hci_event_packet+0x10/0x10 [ 239.006817][ T7252] ? kcov_remote_start+0x374/0x660 [ 239.006844][ T7252] ? lockdep_hardirqs_on+0x78/0x100 [ 239.006877][ T7252] hci_rx_work+0x451/0xfc0 [ 239.006906][ T7252] process_one_work+0xa0e/0x1980 [ 239.006936][ T7252] ? __pfx_process_one_work+0x10/0x10 [ 239.006962][ T7252] ? __pfx_hci_rx_work+0x10/0x10 [ 239.006989][ T7252] worker_thread+0x5ef/0xe50 [ 239.007014][ T7252] ? __pfx_worker_thread+0x10/0x10 [ 239.007034][ T7252] ? kthread+0x13a/0x450 [ 239.007049][ T7252] ? __pfx_worker_thread+0x10/0x10 [ 239.007066][ T7252] kthread+0x370/0x450 [ 239.007082][ T7252] ? __pfx_kthread+0x10/0x10 [ 239.007100][ T7252] ret_from_fork+0x72b/0xd50 [ 239.007122][ T7252] ? __pfx_ret_from_fork+0x10/0x10 [ 239.007144][ T7252] ? __switch_to+0x800/0x1100 [ 239.007169][ T7252] ? __switch_to_asm+0x39/0x70 [ 239.007199][ T7252] ? __pfx_kthread+0x10/0x10 [ 239.007217][ T7252] ret_from_fork_asm+0x1a/0x30 [ 239.007253][ T7252] [ 239.007289][ T7252] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 239.322898][ T7252] Bluetooth: hci2: failed to register connection device [ 239.330551][ T7252] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 239.339443][ T7252] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 239.348788][ T7252] CPU: 0 UID: 0 PID: 7252 Comm: kworker/u11:2 Not tainted syzkaller #0 PREEMPT(full) [ 239.348813][ T7252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 239.348825][ T7252] Workqueue: hci2 hci_rx_work [ 239.348856][ T7252] Call Trace: [ 239.348862][ T7252] [ 239.348870][ T7252] dump_stack_lvl+0x100/0x190 [ 239.348893][ T7252] sysfs_warn_dup.cold+0x1c/0x28 [ 239.348920][ T7252] sysfs_create_dir_ns+0x24b/0x2b0 [ 239.348941][ T7252] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 239.348960][ T7252] ? find_held_lock+0x2b/0x80 [ 239.348984][ T7252] ? kobject_add_internal+0x25f/0x930 [ 239.349005][ T7252] ? kobject_add_internal+0x25f/0x930 [ 239.349027][ T7252] ? do_raw_spin_unlock+0x145/0x1e0 [ 239.349051][ T7252] kobject_add_internal+0x2c8/0x930 [ 239.349075][ T7252] kobject_add+0x16a/0x1e0 [ 239.349094][ T7252] ? __pfx_kobject_add+0x10/0x10 [ 239.349113][ T7252] ? class_to_subsys+0x10f/0x150 [ 239.349177][ T7252] ? kobject_put+0xb9/0x640 [ 239.349203][ T7252] ? _raw_spin_unlock+0x28/0x50 [ 239.349238][ T7252] ? device_add+0x253/0x1950 [ 239.349265][ T7252] device_add+0x294/0x1950 [ 239.349289][ T7252] ? __pfx_dev_set_name+0x10/0x10 [ 239.349318][ T7252] ? __pfx_device_add+0x10/0x10 [ 239.349342][ T7252] ? mgmt_send_event_skb+0x2fb/0x460 [ 239.349375][ T7252] hci_conn_add_sysfs+0x1a3/0x260 [ 239.349406][ T7252] le_conn_complete_evt+0x11eb/0x1f60 [ 239.349438][ T7252] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 239.349463][ T7252] ? __pfx_bt_warn+0x10/0x10 [ 239.349499][ T7252] hci_le_conn_complete_evt+0x23c/0x3a0 [ 239.349526][ T7252] ? skb_pull_data+0x15f/0x1e0 [ 239.349556][ T7252] hci_le_meta_evt+0x34a/0x5f0 [ 239.349584][ T7252] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 239.349614][ T7252] hci_event_packet+0x51c/0xcd0 [ 239.349640][ T7252] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 239.349668][ T7252] ? __pfx_hci_event_packet+0x10/0x10 [ 239.349696][ T7252] ? kcov_remote_start+0x374/0x660 [ 239.349723][ T7252] ? lockdep_hardirqs_on+0x78/0x100 [ 239.349756][ T7252] hci_rx_work+0x451/0xfc0 [ 239.349786][ T7252] process_one_work+0xa0e/0x1980 [ 239.349815][ T7252] ? __pfx_process_one_work+0x10/0x10 [ 239.349841][ T7252] ? __pfx_hci_rx_work+0x10/0x10 [ 239.349868][ T7252] worker_thread+0x5ef/0xe50 [ 239.349893][ T7252] ? __pfx_worker_thread+0x10/0x10 [ 239.349913][ T7252] ? kthread+0x13a/0x450 [ 239.349928][ T7252] ? __pfx_worker_thread+0x10/0x10 [ 239.349946][ T7252] kthread+0x370/0x450 [ 239.349961][ T7252] ? __pfx_kthread+0x10/0x10 [ 239.349979][ T7252] ret_from_fork+0x72b/0xd50 [ 239.350002][ T7252] ? __pfx_ret_from_fork+0x10/0x10 [ 239.350024][ T7252] ? __switch_to+0x800/0x1100 [ 239.350049][ T7252] ? __switch_to_asm+0x39/0x70 [ 239.350074][ T7252] ? __pfx_kthread+0x10/0x10 [ 239.350092][ T7252] ret_from_fork_asm+0x1a/0x30 [ 239.350129][ T7252] [ 239.684348][ T7252] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 239.698375][ T7252] Bluetooth: hci2: failed to register connection device [ 239.736027][ T7252] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 239.757236][ T7252] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 239.766783][ T7252] CPU: 0 UID: 0 PID: 7252 Comm: kworker/u11:2 Not tainted syzkaller #0 PREEMPT(full) [ 239.766821][ T7252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 239.766839][ T7252] Workqueue: hci2 hci_rx_work [ 239.766878][ T7252] Call Trace: [ 239.766890][ T7252] [ 239.766902][ T7252] dump_stack_lvl+0x100/0x190 [ 239.766935][ T7252] sysfs_warn_dup.cold+0x1c/0x28 [ 239.766975][ T7252] sysfs_create_dir_ns+0x24b/0x2b0 [ 239.767000][ T7252] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 239.767019][ T7252] ? find_held_lock+0x2b/0x80 [ 239.767043][ T7252] ? kobject_add_internal+0x25f/0x930 [ 239.767064][ T7252] ? kobject_add_internal+0x25f/0x930 [ 239.767086][ T7252] ? do_raw_spin_unlock+0x145/0x1e0 [ 239.767110][ T7252] kobject_add_internal+0x2c8/0x930 [ 239.767143][ T7252] kobject_add+0x16a/0x1e0 [ 239.767163][ T7252] ? __pfx_kobject_add+0x10/0x10 [ 239.767182][ T7252] ? class_to_subsys+0x10f/0x150 [ 239.767212][ T7252] ? kobject_put+0xb9/0x640 [ 239.767228][ T7252] ? _raw_spin_unlock+0x28/0x50 [ 239.767254][ T7252] ? device_add+0x253/0x1950 [ 239.767281][ T7252] device_add+0x294/0x1950 [ 239.767305][ T7252] ? __pfx_dev_set_name+0x10/0x10 [ 239.767335][ T7252] ? __pfx_device_add+0x10/0x10 [ 239.767359][ T7252] ? mgmt_send_event_skb+0x2fb/0x460 [ 239.767394][ T7252] hci_conn_add_sysfs+0x1a3/0x260 [ 239.767425][ T7252] le_conn_complete_evt+0x11eb/0x1f60 [ 239.767458][ T7252] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 239.767483][ T7252] ? __pfx_bt_warn+0x10/0x10 [ 239.767518][ T7252] hci_le_conn_complete_evt+0x23c/0x3a0 [ 239.767545][ T7252] ? skb_pull_data+0x15f/0x1e0 [ 239.767575][ T7252] hci_le_meta_evt+0x34a/0x5f0 [ 239.767603][ T7252] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 239.767633][ T7252] hci_event_packet+0x51c/0xcd0 [ 239.767668][ T7252] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 239.767701][ T7252] ? __pfx_hci_event_packet+0x10/0x10 [ 239.767729][ T7252] ? kcov_remote_start+0x374/0x660 [ 239.767756][ T7252] ? lockdep_hardirqs_on+0x78/0x100 [ 239.767788][ T7252] hci_rx_work+0x451/0xfc0 [ 239.767817][ T7252] process_one_work+0xa0e/0x1980 [ 239.767847][ T7252] ? __pfx_process_one_work+0x10/0x10 [ 239.767873][ T7252] ? __pfx_hci_rx_work+0x10/0x10 [ 239.767901][ T7252] worker_thread+0x5ef/0xe50 [ 239.767926][ T7252] ? __pfx_worker_thread+0x10/0x10 [ 239.767946][ T7252] ? kthread+0x13a/0x450 [ 239.767961][ T7252] ? __pfx_worker_thread+0x10/0x10 [ 239.767979][ T7252] kthread+0x370/0x450 [ 239.767994][ T7252] ? __pfx_kthread+0x10/0x10 [ 239.768012][ T7252] ret_from_fork+0x72b/0xd50 [ 239.768035][ T7252] ? __pfx_ret_from_fork+0x10/0x10 [ 239.768057][ T7252] ? __switch_to+0x800/0x1100 [ 239.768082][ T7252] ? __switch_to_asm+0x39/0x70 [ 239.768107][ T7252] ? __pfx_kthread+0x10/0x10 [ 239.768131][ T7252] ret_from_fork_asm+0x1a/0x30 [ 239.768167][ T7252] [ 239.768874][ T7252] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 240.070189][ T7252] Bluetooth: hci2: failed to register connection device [ 240.077332][ T7252] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 240.085440][ T7252] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 240.095835][ T7252] CPU: 0 UID: 0 PID: 7252 Comm: kworker/u11:2 Not tainted syzkaller #0 PREEMPT(full) [ 240.095873][ T7252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 240.095891][ T7252] Workqueue: hci2 hci_rx_work [ 240.095934][ T7252] Call Trace: [ 240.095943][ T7252] [ 240.095954][ T7252] dump_stack_lvl+0x100/0x190 [ 240.095988][ T7252] sysfs_warn_dup.cold+0x1c/0x28 [ 240.096030][ T7252] sysfs_create_dir_ns+0x24b/0x2b0 [ 240.096062][ T7252] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 240.096090][ T7252] ? find_held_lock+0x2b/0x80 [ 240.096166][ T7252] ? kobject_add_internal+0x25f/0x930 [ 240.096197][ T7252] ? kobject_add_internal+0x25f/0x930 [ 240.096226][ T7252] ? do_raw_spin_unlock+0x145/0x1e0 [ 240.096263][ T7252] kobject_add_internal+0x2c8/0x930 [ 240.096295][ T7252] kobject_add+0x16a/0x1e0 [ 240.096320][ T7252] ? __pfx_kobject_add+0x10/0x10 [ 240.096344][ T7252] ? class_to_subsys+0x10f/0x150 [ 240.096384][ T7252] ? kobject_put+0xb9/0x640 [ 240.096406][ T7252] ? _raw_spin_unlock+0x28/0x50 [ 240.096440][ T7252] ? device_add+0x253/0x1950 [ 240.096475][ T7252] device_add+0x294/0x1950 [ 240.096506][ T7252] ? __pfx_dev_set_name+0x10/0x10 [ 240.096543][ T7252] ? __pfx_device_add+0x10/0x10 [ 240.096575][ T7252] ? mgmt_send_event_skb+0x2fb/0x460 [ 240.096619][ T7252] hci_conn_add_sysfs+0x1a3/0x260 [ 240.096658][ T7252] le_conn_complete_evt+0x11eb/0x1f60 [ 240.096703][ T7252] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 240.096734][ T7252] ? __pfx_bt_warn+0x10/0x10 [ 240.096780][ T7252] hci_le_conn_complete_evt+0x23c/0x3a0 [ 240.096815][ T7252] ? skb_pull_data+0x15f/0x1e0 [ 240.096853][ T7252] hci_le_meta_evt+0x34a/0x5f0 [ 240.096890][ T7252] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 240.096929][ T7252] hci_event_packet+0x51c/0xcd0 [ 240.096964][ T7252] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 240.097000][ T7252] ? __pfx_hci_event_packet+0x10/0x10 [ 240.097038][ T7252] ? kcov_remote_start+0x374/0x660 [ 240.097073][ T7252] ? lockdep_hardirqs_on+0x78/0x100 [ 240.097129][ T7252] hci_rx_work+0x451/0xfc0 [ 240.097170][ T7252] process_one_work+0xa0e/0x1980 [ 240.097213][ T7252] ? __pfx_process_one_work+0x10/0x10 [ 240.097249][ T7252] ? __pfx_hci_rx_work+0x10/0x10 [ 240.097285][ T7252] worker_thread+0x5ef/0xe50 [ 240.097322][ T7252] ? __pfx_worker_thread+0x10/0x10 [ 240.097350][ T7252] ? kthread+0x13a/0x450 [ 240.097370][ T7252] ? __pfx_worker_thread+0x10/0x10 [ 240.097394][ T7252] kthread+0x370/0x450 [ 240.097416][ T7252] ? __pfx_kthread+0x10/0x10 [ 240.097441][ T7252] ret_from_fork+0x72b/0xd50 [ 240.097471][ T7252] ? __pfx_ret_from_fork+0x10/0x10 [ 240.097499][ T7252] ? __switch_to+0x800/0x1100 [ 240.097532][ T7252] ? __switch_to_asm+0x39/0x70 [ 240.097562][ T7252] ? __pfx_kthread+0x10/0x10 [ 240.097586][ T7252] ret_from_fork_asm+0x1a/0x30 [ 240.097637][ T7252] [ 240.097695][ T7252] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 240.398700][ T7252] Bluetooth: hci2: failed to register connection device [ 240.405980][ T7252] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 240.413724][ T7252] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 240.424599][ T7252] CPU: 0 UID: 0 PID: 7252 Comm: kworker/u11:2 Not tainted syzkaller #0 PREEMPT(full) [ 240.424635][ T7252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 240.424654][ T7252] Workqueue: hci2 hci_rx_work [ 240.424694][ T7252] Call Trace: [ 240.424703][ T7252] [ 240.424713][ T7252] dump_stack_lvl+0x100/0x190 [ 240.424747][ T7252] sysfs_warn_dup.cold+0x1c/0x28 [ 240.424787][ T7252] sysfs_create_dir_ns+0x24b/0x2b0 [ 240.424817][ T7252] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 240.424845][ T7252] ? find_held_lock+0x2b/0x80 [ 240.424877][ T7252] ? kobject_add_internal+0x25f/0x930 [ 240.424904][ T7252] ? kobject_add_internal+0x25f/0x930 [ 240.424936][ T7252] ? do_raw_spin_unlock+0x145/0x1e0 [ 240.424970][ T7252] kobject_add_internal+0x2c8/0x930 [ 240.425025][ T7252] kobject_add+0x16a/0x1e0 [ 240.425052][ T7252] ? __pfx_kobject_add+0x10/0x10 [ 240.425077][ T7252] ? class_to_subsys+0x10f/0x150 [ 240.425119][ T7252] ? kobject_put+0xb9/0x640 [ 240.425142][ T7252] ? _raw_spin_unlock+0x28/0x50 [ 240.425185][ T7252] ? device_add+0x253/0x1950 [ 240.425224][ T7252] device_add+0x294/0x1950 [ 240.425257][ T7252] ? __pfx_dev_set_name+0x10/0x10 [ 240.425295][ T7252] ? __pfx_device_add+0x10/0x10 [ 240.425329][ T7252] ? mgmt_send_event_skb+0x2fb/0x460 [ 240.425375][ T7252] hci_conn_add_sysfs+0x1a3/0x260 [ 240.425416][ T7252] le_conn_complete_evt+0x11eb/0x1f60 [ 240.425462][ T7252] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 240.425494][ T7252] ? __pfx_bt_warn+0x10/0x10 [ 240.425544][ T7252] hci_le_conn_complete_evt+0x23c/0x3a0 [ 240.425581][ T7252] ? skb_pull_data+0x15f/0x1e0 [ 240.425622][ T7252] hci_le_meta_evt+0x34a/0x5f0 [ 240.425658][ T7252] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 240.425698][ T7252] hci_event_packet+0x51c/0xcd0 [ 240.425733][ T7252] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 240.425771][ T7252] ? __pfx_hci_event_packet+0x10/0x10 [ 240.425811][ T7252] ? kcov_remote_start+0x374/0x660 [ 240.425846][ T7252] ? lockdep_hardirqs_on+0x78/0x100 [ 240.425893][ T7252] hci_rx_work+0x451/0xfc0 [ 240.425935][ T7252] process_one_work+0xa0e/0x1980 [ 240.425980][ T7252] ? __pfx_process_one_work+0x10/0x10 [ 240.426024][ T7252] ? __pfx_hci_rx_work+0x10/0x10 [ 240.426062][ T7252] worker_thread+0x5ef/0xe50 [ 240.426098][ T7252] ? __pfx_worker_thread+0x10/0x10 [ 240.426126][ T7252] ? kthread+0x13a/0x450 [ 240.426147][ T7252] ? __pfx_worker_thread+0x10/0x10 [ 240.426181][ T7252] kthread+0x370/0x450 [ 240.426203][ T7252] ? __pfx_kthread+0x10/0x10 [ 240.426228][ T7252] ret_from_fork+0x72b/0xd50 [ 240.426259][ T7252] ? __pfx_ret_from_fork+0x10/0x10 [ 240.426289][ T7252] ? __switch_to+0x800/0x1100 [ 240.426324][ T7252] ? __switch_to_asm+0x39/0x70 [ 240.426357][ T7252] ? __pfx_kthread+0x10/0x10 [ 240.426383][ T7252] ret_from_fork_asm+0x1a/0x30 [ 240.426437][ T7252] [ 240.426497][ T7252] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 240.739303][ T7914] Bluetooth: hci4: command tx timeout [ 240.750091][ T7252] Bluetooth: hci2: failed to register connection device [ 240.757246][ T7252] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 240.765966][ T7919] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 240.775231][ T7252] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 240.790604][ T7252] CPU: 0 UID: 0 PID: 7252 Comm: kworker/u11:2 Not tainted syzkaller #0 PREEMPT(full) [ 240.790645][ T7252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 240.790663][ T7252] Workqueue: hci2 hci_rx_work [ 240.790706][ T7252] Call Trace: [ 240.790715][ T7252] [ 240.790726][ T7252] dump_stack_lvl+0x100/0x190 [ 240.790762][ T7252] sysfs_warn_dup.cold+0x1c/0x28 [ 240.790804][ T7252] sysfs_create_dir_ns+0x24b/0x2b0 [ 240.790836][ T7252] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 240.790866][ T7252] ? find_held_lock+0x2b/0x80 [ 240.790903][ T7252] ? kobject_add_internal+0x25f/0x930 [ 240.790933][ T7252] ? kobject_add_internal+0x25f/0x930 [ 240.790967][ T7252] ? do_raw_spin_unlock+0x145/0x1e0 [ 240.791005][ T7252] kobject_add_internal+0x2c8/0x930 [ 240.791045][ T7252] kobject_add+0x16a/0x1e0 [ 240.791076][ T7252] ? __pfx_kobject_add+0x10/0x10 [ 240.791105][ T7252] ? class_to_subsys+0x10f/0x150 [ 240.791152][ T7252] ? kobject_put+0xb9/0x640 [ 240.791177][ T7252] ? _raw_spin_unlock+0x28/0x50 [ 240.791225][ T7252] ? device_add+0x253/0x1950 [ 240.791269][ T7252] device_add+0x294/0x1950 [ 240.791308][ T7252] ? __pfx_dev_set_name+0x10/0x10 [ 240.791350][ T7252] ? __pfx_device_add+0x10/0x10 [ 240.791389][ T7252] ? mgmt_send_event_skb+0x2fb/0x460 [ 240.791441][ T7252] hci_conn_add_sysfs+0x1a3/0x260 [ 240.791488][ T7252] le_conn_complete_evt+0x11eb/0x1f60 [ 240.791541][ T7252] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 240.791578][ T7252] ? __pfx_bt_warn+0x10/0x10 [ 240.791633][ T7252] hci_le_conn_complete_evt+0x23c/0x3a0 [ 240.791676][ T7252] ? skb_pull_data+0x15f/0x1e0 [ 240.791722][ T7252] hci_le_meta_evt+0x34a/0x5f0 [ 240.791764][ T7252] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 240.791811][ T7252] hci_event_packet+0x51c/0xcd0 [ 240.791852][ T7252] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 240.791896][ T7252] ? __pfx_hci_event_packet+0x10/0x10 [ 240.791941][ T7252] ? kcov_remote_start+0x374/0x660 [ 240.791982][ T7252] ? lockdep_hardirqs_on+0x78/0x100 [ 240.792035][ T7252] hci_rx_work+0x451/0xfc0 [ 240.792084][ T7252] process_one_work+0xa0e/0x1980 [ 240.792132][ T7252] ? __pfx_process_one_work+0x10/0x10 [ 240.792176][ T7252] ? __pfx_hci_rx_work+0x10/0x10 [ 240.792227][ T7252] worker_thread+0x5ef/0xe50 [ 240.792269][ T7252] ? __pfx_worker_thread+0x10/0x10 [ 240.792300][ T7252] ? kthread+0x13a/0x450 [ 240.792323][ T7252] ? __pfx_worker_thread+0x10/0x10 [ 240.792350][ T7252] kthread+0x370/0x450 [ 240.792375][ T7252] ? __pfx_kthread+0x10/0x10 [ 240.792403][ T7252] ret_from_fork+0x72b/0xd50 [ 240.792436][ T7252] ? __pfx_ret_from_fork+0x10/0x10 [ 240.792468][ T7252] ? __switch_to+0x800/0x1100 [ 240.792498][ T7252] ? __switch_to_asm+0x39/0x70 [ 240.792533][ T7252] ? __pfx_kthread+0x10/0x10 [ 240.792559][ T7252] ret_from_fork_asm+0x1a/0x30 [ 240.792609][ T7252] [ 240.792662][ T7252] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 241.090523][ T7914] Bluetooth: hci5: command tx timeout [ 241.104874][ T7252] Bluetooth: hci2: failed to register connection device [ 241.645385][ T6876] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.958750][ T6876] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.166802][ T6876] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.314442][ T6876] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.684018][ T6876] bridge_slave_1: left allmulticast mode [ 242.697310][ T6876] bridge_slave_1: left promiscuous mode [ 242.706144][ T6876] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.738174][ T6876] bridge_slave_0: left allmulticast mode [ 242.747578][ T6876] bridge_slave_0: left promiscuous mode [ 242.753633][ T6876] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.802027][ T7919] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 242.805014][ T7252] Bluetooth: hci1: command 0x0c1a tx timeout [ 242.808057][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 242.816843][ T7914] Bluetooth: hci4: command tx timeout [ 242.832058][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 242.839652][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 242.846924][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 242.853856][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 242.864348][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 242.880378][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 242.888200][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 242.899407][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 242.905816][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 242.914433][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 242.921922][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 242.930219][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 242.936643][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 242.944295][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 242.952968][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 242.962716][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 242.969065][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 242.975811][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 242.985489][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 242.992112][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.000699][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.007345][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.015558][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.023689][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.030768][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.036931][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.047180][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.058579][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.065235][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.071893][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.080414][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.087722][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.088140][ T6876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.103304][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.111494][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.118032][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.119772][ T7252] Bluetooth: hci2: command 0x0c1a tx timeout [ 243.131639][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.131797][ T7914] Bluetooth: hci5: command tx timeout [ 243.144453][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.151207][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.157596][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.157966][ T6876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.174074][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.181467][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.182855][ T6876] bond0 (unregistering): Released all slaves [ 243.193897][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.201003][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.208773][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.216651][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.223218][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.230000][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.236247][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.243932][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.250730][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.257061][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.268370][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.281486][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.306822][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.326722][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.341643][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.357840][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.373852][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.393421][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.406131][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.425425][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.447477][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.457535][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.464408][ T7919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.478141][ T7919] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 243.486061][ T7919] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 243.495835][ T7919] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 243.507500][ T7919] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 243.521921][ T7919] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 243.535501][ T7919] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 243.566632][ T7919] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 244.227009][ T7972] No such timeout policy "" [ 244.555700][ T6876] hsr_slave_0: left promiscuous mode [ 244.574321][ T6876] hsr_slave_1: left promiscuous mode [ 244.587220][ T6876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.605525][ T6876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.637324][ T6876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.656827][ T6876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.720787][ T6876] veth1_macvtap: left promiscuous mode [ 244.738966][ T6876] veth0_macvtap: left promiscuous mode [ 244.746195][ T6876] veth1_vlan: left promiscuous mode [ 244.754758][ T6876] veth0_vlan: left promiscuous mode [ 244.991937][ T6876] pim6reg (unregistering): left allmulticast mode [ 245.519322][ T5900] Bluetooth: hci4: command 0x0c1a tx timeout [ 245.525383][ T7252] Bluetooth: hci3: command 0x0c1a tx timeout [ 245.599311][ T5900] Bluetooth: hci5: command 0x0c1a tx timeout [ 245.830357][ T6876] team0 (unregistering): Port device team_slave_1 removed [ 246.090768][ T6876] team0 (unregistering): Port device team_slave_0 removed [ 246.618279][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 247.245160][ T8005] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(3.0.4294967293), cmd(3) [ 247.601666][ T5900] Bluetooth: hci4: command 0x0c1a tx timeout [ 247.681706][ T5900] Bluetooth: hci5: command 0x0c1a tx timeout [ 247.685035][ T7908] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.734748][ T7908] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.763105][ T7908] bridge_slave_0: entered allmulticast mode [ 247.792910][ T7908] bridge_slave_0: entered promiscuous mode [ 247.815673][ T7908] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.823147][ T7908] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.830514][ T7908] bridge_slave_1: entered allmulticast mode [ 247.838641][ T7908] bridge_slave_1: entered promiscuous mode [ 247.897756][ T7901] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.925309][ T7901] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.004851][ T7901] bridge_slave_0: entered allmulticast mode [ 248.044201][ T7901] bridge_slave_0: entered promiscuous mode [ 248.149856][ T7901] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.179529][ T7901] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.194783][ T7901] bridge_slave_1: entered allmulticast mode [ 248.217542][ T7901] bridge_slave_1: entered promiscuous mode [ 248.405359][ T6876] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.471024][ T7908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.495825][ T7908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.518863][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 248.570711][ T7901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.682277][ T7901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.817049][ T6876] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.863522][ T7908] team0: Port device team_slave_0 added [ 248.895242][ T7901] team0: Port device team_slave_0 added [ 248.903417][ T7901] team0: Port device team_slave_1 added [ 248.965020][ T7908] team0: Port device team_slave_1 added [ 249.112032][ T7901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.136617][ T7901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.201359][ T7901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.343558][ T7901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.357577][ T7901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.418758][ T7901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.679820][ T5900] Bluetooth: hci4: command 0x0c1a tx timeout [ 249.696873][ T6876] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.766182][ T5900] Bluetooth: hci5: command 0x0c1a tx timeout [ 249.774789][ T7908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.792926][ T7908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.849332][ T7908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.893883][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 249.905895][ T7908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.919630][ T7908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.961880][ T7908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.017569][ T6876] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.226394][ T7901] hsr_slave_0: entered promiscuous mode [ 250.249515][ T7901] hsr_slave_1: entered promiscuous mode [ 250.256125][ T7901] debugfs: 'hsr0' already exists in 'hsr' [ 250.262132][ T7901] Cannot create hsr debugfs directory [ 250.283495][ T7908] hsr_slave_0: entered promiscuous mode [ 250.308900][ T7908] hsr_slave_1: entered promiscuous mode [ 250.323644][ T7908] debugfs: 'hsr0' already exists in 'hsr' [ 250.332943][ T7908] Cannot create hsr debugfs directory [ 251.305159][ T6876] bridge_slave_1: left allmulticast mode [ 251.316634][ T6876] bridge_slave_1: left promiscuous mode [ 251.322677][ T6876] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.355005][ T6876] bridge_slave_0: left allmulticast mode [ 251.363277][ T6876] bridge_slave_0: left promiscuous mode [ 251.372657][ T6876] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.164779][ T6876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.200093][ T6876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.212587][ T6876] bond0 (unregistering): Released all slaves [ 252.309096][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 252.865605][ T6876] hsr_slave_0: left promiscuous mode [ 252.890008][ T6876] hsr_slave_1: left promiscuous mode [ 252.901774][ T6876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.919239][ T6876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.946367][ T6876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.989266][ T6876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.047955][ T6876] veth1_macvtap: left promiscuous mode [ 253.055149][ T6876] veth0_macvtap: left promiscuous mode [ 253.062417][ T6876] veth1_vlan: left promiscuous mode [ 253.067781][ T6876] veth0_vlan: left promiscuous mode [ 253.239032][ T8086] ubi0: attaching mtd0 [ 253.295238][ T8086] ubi0: scanning is finished [ 253.305338][ T8086] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 253.995362][ T8107] netlink: 28 bytes leftover after parsing attributes in process `syz.3.471'. [ 254.028773][ T8086] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 254.069015][ T6876] team0 (unregistering): Port device team_slave_1 removed [ 254.095788][ T6876] team0 (unregistering): Port device team_slave_0 removed [ 254.319245][ T7901] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 254.393222][ T7901] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 254.415314][ T7901] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 254.440426][ T7901] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 254.468369][ T5288] 8021q: adding VLAN 0 to HW filter on device eth5 [ 254.488172][ T7901] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 254.573368][ T7901] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 254.663422][ T7901] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 254.685144][ T7901] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 254.864511][ T7908] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 254.897652][ T7908] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 254.948190][ T7908] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 255.001631][ T7908] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 255.026166][ T7908] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 255.058229][ T7908] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 255.082255][ T7908] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 255.111622][ T7908] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 255.596104][ T7901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.772171][ T7901] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.825737][ T7908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.878378][ T6873] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.885630][ T6873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.951825][ T6873] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.959005][ T6873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.022102][ T7908] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.062889][ T6887] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.070255][ T6887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.083003][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.091292][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.112984][ T8146] FAULT_INJECTION: forcing a failure. [ 256.112984][ T8146] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 256.158230][ T6887] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.165535][ T6887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.182242][ T8146] CPU: 1 UID: 0 PID: 8146 Comm: syz.3.473 Not tainted syzkaller #0 PREEMPT(full) [ 256.182284][ T8146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 256.182301][ T8146] Call Trace: [ 256.182311][ T8146] [ 256.182324][ T8146] dump_stack_lvl+0x100/0x190 [ 256.182365][ T8146] should_fail_ex.cold+0x5/0xa [ 256.182403][ T8146] ? prepare_alloc_pages+0x16d/0x5f0 [ 256.182456][ T8146] should_fail_alloc_page+0xeb/0x140 [ 256.182495][ T8146] prepare_alloc_pages+0x1f0/0x5f0 [ 256.182542][ T8146] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 256.182601][ T8146] ? __lock_acquire+0x4a5/0x2630 [ 256.182637][ T8146] ? __lock_acquire+0x4a5/0x2630 [ 256.182664][ T8146] ? css_rstat_updated+0x1ce/0x5a0 [ 256.182708][ T8146] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 256.182761][ T8146] ? do_raw_spin_lock+0x128/0x260 [ 256.182797][ T8146] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 256.182832][ T8146] ? find_held_lock+0x2b/0x80 [ 256.182885][ T8146] ? __lock_acquire+0x4a5/0x2630 [ 256.182915][ T8146] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 256.182964][ T8146] ? policy_nodemask+0xed/0x4f0 [ 256.183003][ T8146] alloc_pages_mpol+0x1fb/0x540 [ 256.183040][ T8146] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 256.183078][ T8146] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 256.183120][ T8146] folio_alloc_mpol_noprof+0x36/0x260 [ 256.183164][ T8146] shmem_alloc_folio+0x135/0x160 [ 256.183209][ T8146] shmem_alloc_and_add_folio+0x371/0xd40 [ 256.183270][ T8146] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 256.183322][ T8146] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 256.183361][ T8146] shmem_get_folio_gfp+0x6ab/0x1900 [ 256.183402][ T8146] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 256.183442][ T8146] ? filemap_map_pages+0x9c1/0x2140 [ 256.183499][ T8146] shmem_fault+0x1f9/0xa20 [ 256.183534][ T8146] ? __pfx_shmem_fault+0x10/0x10 [ 256.183572][ T8146] ? __pfx_filemap_map_pages+0x10/0x10 [ 256.183627][ T8146] ? find_held_lock+0x2b/0x80 [ 256.183673][ T8146] __do_fault+0x10b/0x440 [ 256.183709][ T8146] do_fault+0xa99/0x1750 [ 256.183755][ T8146] __handle_mm_fault+0x187d/0x2a00 [ 256.183807][ T8146] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 256.183848][ T8146] ? __pfx___handle_mm_fault+0x10/0x10 [ 256.183898][ T8146] ? pte_offset_map_lock+0x174/0x320 [ 256.183933][ T8146] ? find_held_lock+0x2b/0x80 [ 256.183987][ T8146] ? follow_page_pte+0x4d0/0x13f0 [ 256.184034][ T8146] handle_mm_fault+0x36d/0xa20 [ 256.184087][ T8146] __get_user_pages+0x1178/0x32a0 [ 256.184144][ T8146] ? __pfx___get_user_pages+0x10/0x10 [ 256.184191][ T8146] populate_vma_page_range+0x267/0x3f0 [ 256.184233][ T8146] ? __pfx_populate_vma_page_range+0x10/0x10 [ 256.184269][ T8146] ? __pfx_find_vma_intersection+0x10/0x10 [ 256.184305][ T8146] ? do_mmap+0x93f/0x12f0 [ 256.184348][ T8146] __mm_populate+0x107/0x3a0 [ 256.184390][ T8146] ? __pfx___mm_populate+0x10/0x10 [ 256.184443][ T8146] ? up_write+0x28c/0x4f0 [ 256.184483][ T8146] __do_sys_remap_file_pages+0x835/0xa10 [ 256.184535][ T8146] ? __fget_files+0x21f/0x3d0 [ 256.184574][ T8146] ? __pfx___do_sys_remap_file_pages+0x10/0x10 [ 256.184617][ T8146] ? __x64_sys_futex+0x34f/0x4d0 [ 256.184650][ T8146] ? __x64_sys_futex+0x358/0x4d0 [ 256.184687][ T8146] ? xfd_validate_state+0x129/0x190 [ 256.184729][ T8146] ? rcu_is_watching+0x12/0xc0 [ 256.184772][ T8146] do_syscall_64+0x10b/0xf80 [ 256.184814][ T8146] ? clear_bhb_loop+0x40/0x90 [ 256.184849][ T8146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.184881][ T8146] RIP: 0033:0x7fb64b59ce59 [ 256.184907][ T8146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.184956][ T8146] RSP: 002b:00007fb64c49c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 256.184988][ T8146] RAX: ffffffffffffffda RBX: 00007fb64b816090 RCX: 00007fb64b59ce59 [ 256.185009][ T8146] RDX: 0000000000000000 RSI: 000000000000f3a4 RDI: 0000000000010000 [ 256.185028][ T8146] RBP: 00007fb64b632d6f R08: 0000000000000013 R09: 0000000000000000 [ 256.185046][ T8146] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 256.185065][ T8146] R13: 00007fb64b816128 R14: 00007fb64b816090 R15: 00007ffc67f98198 [ 256.185106][ T8146] [ 257.432985][ T5288] 8021q: adding VLAN 0 to HW filter on device eth6 [ 258.524648][ T7901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.661931][ T7908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.206401][ T8202] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(3026742641.1272731979.2691522352), cmd(3) [ 259.407675][ T5288] 8021q: adding VLAN 0 to HW filter on device eth7 [ 259.676671][ T7901] veth0_vlan: entered promiscuous mode [ 259.735640][ T7901] veth1_vlan: entered promiscuous mode [ 259.905700][ T7901] veth0_macvtap: entered promiscuous mode [ 259.963397][ T7908] veth0_vlan: entered promiscuous mode [ 260.000450][ T7901] veth1_macvtap: entered promiscuous mode [ 260.050095][ T7908] veth1_vlan: entered promiscuous mode [ 260.134765][ T7901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.206396][ T7901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.264992][ T6876] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.301805][ T6876] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.324963][ T6876] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.377380][ T6876] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.488823][ T7908] veth0_macvtap: entered promiscuous mode [ 260.555327][ T7908] veth1_macvtap: entered promiscuous mode [ 260.700683][ T6876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.721580][ T7908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.728966][ T6876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.824453][ T7908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.861125][ T6881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.876484][ T6876] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.895004][ T6881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.905340][ T6876] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.939764][ T6876] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.968635][ T6876] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.368133][ T5886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.404965][ T5886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.548585][ T5886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.578479][ T5886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.730306][ T5288] 8021q: adding VLAN 0 to HW filter on device eth8 [ 262.137022][ T8243] ubi0: attaching mtd0 [ 262.231699][ T8243] ubi0: scanning is finished [ 262.265482][ T8243] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 262.654769][ T8243] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 262.745451][ T8252] FAULT_INJECTION: forcing a failure. [ 262.745451][ T8252] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 262.811687][ T8252] CPU: 1 UID: 0 PID: 8252 Comm: syz.5.450 Not tainted syzkaller #0 PREEMPT(full) [ 262.811715][ T8252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 262.811725][ T8252] Call Trace: [ 262.811732][ T8252] [ 262.811740][ T8252] dump_stack_lvl+0x100/0x190 [ 262.811765][ T8252] should_fail_ex.cold+0x5/0xa [ 262.811785][ T8252] ? prepare_alloc_pages+0x16d/0x5f0 [ 262.811811][ T8252] should_fail_alloc_page+0xeb/0x140 [ 262.811835][ T8252] prepare_alloc_pages+0x1f0/0x5f0 [ 262.811864][ T8252] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 262.811896][ T8252] ? stack_trace_save+0x8e/0xc0 [ 262.811921][ T8252] ? __pfx_stack_trace_save+0x10/0x10 [ 262.811945][ T8252] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 262.811976][ T8252] ? stack_depot_save_flags+0x27/0x9d0 [ 262.811998][ T8252] ? __pfx_debug_object_activate+0x10/0x10 [ 262.812037][ T8252] ? do_raw_spin_lock+0x128/0x260 [ 262.812061][ T8252] ? kasan_save_stack+0x3f/0x50 [ 262.812078][ T8252] ? kasan_save_stack+0x30/0x50 [ 262.812096][ T8252] ? kasan_save_track+0x14/0x30 [ 262.812113][ T8252] ? __kasan_slab_alloc+0x89/0x90 [ 262.812132][ T8252] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 262.812162][ T8252] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 262.812192][ T8252] ? do_user_addr_fault+0x74c/0x12f0 [ 262.812215][ T8252] ? exc_page_fault+0x6f/0xd0 [ 262.812246][ T8252] ? asm_exc_page_fault+0x26/0x30 [ 262.812264][ T8252] ? _copy_from_user+0x98/0xd0 [ 262.812281][ T8252] ? do_syscall_64+0x10b/0xf80 [ 262.812307][ T8252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.812335][ T8252] ? __lock_acquire+0x4a5/0x2630 [ 262.812355][ T8252] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 262.812383][ T8252] ? policy_nodemask+0xed/0x4f0 [ 262.812407][ T8252] alloc_pages_mpol+0x1fb/0x540 [ 262.812430][ T8252] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 262.812451][ T8252] ? __thp_vma_allowable_orders+0x1d9/0xe90 [ 262.812478][ T8252] ? do_raw_spin_lock+0x128/0x260 [ 262.812501][ T8252] alloc_pages_noprof+0x1a/0x160 [ 262.812527][ T8252] pte_alloc_one+0x1c/0x3d0 [ 262.812553][ T8252] do_fault+0x86c/0x1750 [ 262.812576][ T8252] ? __pmd_alloc+0x3fb/0x950 [ 262.812601][ T8252] __handle_mm_fault+0x187d/0x2a00 [ 262.812632][ T8252] ? mt_find+0x45e/0x8e0 [ 262.812650][ T8252] ? __pfx___handle_mm_fault+0x10/0x10 [ 262.812676][ T8252] ? __pfx_mt_find+0x10/0x10 [ 262.812705][ T8252] ? find_vma+0xbf/0x140 [ 262.812724][ T8252] ? __pfx_find_vma+0x10/0x10 [ 262.812746][ T8252] handle_mm_fault+0x36d/0xa20 [ 262.812778][ T8252] do_user_addr_fault+0x74c/0x12f0 [ 262.812803][ T8252] ? trace_page_fault_kernel+0x7a/0x200 [ 262.812827][ T8252] exc_page_fault+0x6f/0xd0 [ 262.812854][ T8252] asm_exc_page_fault+0x26/0x30 [ 262.812871][ T8252] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 262.812894][ T8252] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 9b 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 262.812911][ T8252] RSP: 0018:ffffc90005a67da8 EFLAGS: 00050202 [ 262.812927][ T8252] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000018 [ 262.812938][ T8252] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90005a67e78 [ 262.812948][ T8252] RBP: 0000000000000018 R08: 0000000000000001 R09: fffff52000b4cfd1 [ 262.812959][ T8252] R10: ffffc90005a67e8f R11: 0000000000000000 R12: 0000000000000000 [ 262.812969][ T8252] R13: ffffc90005a67e78 R14: 0000000000000000 R15: 000000000000007e [ 262.812991][ T8252] _copy_from_user+0x98/0xd0 [ 262.813010][ T8252] __do_sys_capset+0x1ec/0x460 [ 262.813043][ T8252] ? __pfx___do_sys_capset+0x10/0x10 [ 262.813067][ T8252] ? __x64_sys_futex+0x358/0x4d0 [ 262.813096][ T8252] ? rcu_is_watching+0x12/0xc0 [ 262.813122][ T8252] do_syscall_64+0x10b/0xf80 [ 262.813149][ T8252] ? clear_bhb_loop+0x40/0x90 [ 262.813172][ T8252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.813191][ T8252] RIP: 0033:0x7fa94439ce59 [ 262.813206][ T8252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.813224][ T8252] RSP: 002b:00007fa9451a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 262.813241][ T8252] RAX: ffffffffffffffda RBX: 00007fa944616180 RCX: 00007fa94439ce59 [ 262.813252][ T8252] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 262.813263][ T8252] RBP: 00007fa944432d6f R08: 0000000000000000 R09: 0000000000000000 [ 262.813274][ T8252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.813284][ T8252] R13: 00007fa944616218 R14: 00007fa944616180 R15: 00007ffdfbcdf8d8 [ 262.813307][ T8252] [ 263.563115][ T8264] No such timeout policy "" [ 263.985311][ T8273] netlink: 334 bytes leftover after parsing attributes in process `syz.5.483'. [ 264.067050][ T8273] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 265.488011][ T8284] Process accounting resumed [ 267.919992][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 268.964763][ T8339] FAULT_INJECTION: forcing a failure. [ 268.964763][ T8339] name failslab, interval 1, probability 0, space 0, times 0 [ 268.985745][ T8347] FAULT_INJECTION: forcing a failure. [ 268.985745][ T8347] name failslab, interval 1, probability 0, space 0, times 0 [ 269.008524][ T8347] CPU: 0 UID: 0 PID: 8347 Comm: syz.5.497 Not tainted syzkaller #0 PREEMPT(full) [ 269.008566][ T8347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 269.008583][ T8347] Call Trace: [ 269.008592][ T8347] [ 269.008603][ T8347] dump_stack_lvl+0x100/0x190 [ 269.008641][ T8347] should_fail_ex.cold+0x5/0xa [ 269.008671][ T8347] should_failslab+0xc2/0x120 [ 269.008694][ T8347] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 269.008725][ T8347] ? __d_alloc+0x34/0xa40 [ 269.008755][ T8347] __d_alloc+0x34/0xa40 [ 269.008783][ T8347] d_alloc_pseudo+0x1c/0xc0 [ 269.008801][ T8347] alloc_file_pseudo+0xcf/0x230 [ 269.008831][ T8347] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 269.008860][ T8347] ? alloc_fd+0x476/0x790 [ 269.008886][ T8347] sock_alloc_file+0x50/0x210 [ 269.008909][ T8347] __sys_socket+0x1c0/0x260 [ 269.008938][ T8347] ? __pfx___sys_socket+0x10/0x10 [ 269.008965][ T8347] ? ksys_write+0x1ac/0x250 [ 269.008992][ T8347] __x64_sys_socket+0x72/0xb0 [ 269.009019][ T8347] ? lockdep_hardirqs_on+0x78/0x100 [ 269.009050][ T8347] do_syscall_64+0x10b/0xf80 [ 269.009077][ T8347] ? clear_bhb_loop+0x40/0x90 [ 269.009099][ T8347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.009119][ T8347] RIP: 0033:0x7fa94439ce59 [ 269.009138][ T8347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.009165][ T8347] RSP: 002b:00007fa9451e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 269.009192][ T8347] RAX: ffffffffffffffda RBX: 00007fa944615fa0 RCX: 00007fa94439ce59 [ 269.009209][ T8347] RDX: 0000000000000000 RSI: 0000000000080805 RDI: 0000000000000026 [ 269.009220][ T8347] RBP: 00007fa944432d6f R08: 0000000000000000 R09: 0000000000000000 [ 269.009230][ T8347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.009241][ T8347] R13: 00007fa944616038 R14: 00007fa944615fa0 R15: 00007ffdfbcdf8d8 [ 269.009264][ T8347] [ 269.205216][ T8339] CPU: 0 UID: 0 PID: 8339 Comm: syz.2.493 Not tainted syzkaller #0 PREEMPT(full) [ 269.205250][ T8339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 269.205261][ T8339] Call Trace: [ 269.205268][ T8339] [ 269.205277][ T8339] dump_stack_lvl+0x100/0x190 [ 269.205304][ T8339] should_fail_ex.cold+0x5/0xa [ 269.205327][ T8339] ? drm_atomic_state_init+0x190/0x490 [ 269.205355][ T8339] should_failslab+0xc2/0x120 [ 269.205377][ T8339] __kmalloc_noprof+0xe0/0x850 [ 269.205400][ T8339] drm_atomic_state_init+0x190/0x490 [ 269.205431][ T8339] drm_atomic_state_alloc+0xd3/0x120 [ 269.205460][ T8339] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 269.205480][ T8339] ? rcu_is_watching+0x12/0xc0 [ 269.205503][ T8339] ? trace_contention_end+0x122/0x170 [ 269.205525][ T8339] ? __mutex_lock+0x26d/0x1b10 [ 269.205555][ T8339] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 269.205575][ T8339] ? drm_master_internal_acquire+0x21/0x80 [ 269.205627][ T8339] drm_client_modeset_commit_locked+0x14d/0x580 [ 269.205651][ T8339] drm_client_modeset_commit+0x4f/0x80 [ 269.205670][ T8339] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 269.205704][ T8339] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 269.205737][ T8339] drm_fbdev_client_restore+0x1b/0x30 [ 269.205763][ T8339] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 269.205787][ T8339] drm_client_dev_restore+0x205/0x2a0 [ 269.205823][ T8339] drm_release+0x2c6/0x360 [ 269.205851][ T8339] ? __pfx_drm_release+0x10/0x10 [ 269.205879][ T8339] __fput+0x3ff/0xb50 [ 269.205911][ T8339] task_work_run+0x150/0x240 [ 269.205932][ T8339] ? __pfx_task_work_run+0x10/0x10 [ 269.205953][ T8339] ? rcu_is_watching+0x12/0xc0 [ 269.205978][ T8339] exit_to_user_mode_loop+0x107/0x4f0 [ 269.205997][ T8339] ? rcu_is_watching+0x12/0xc0 [ 269.206022][ T8339] do_syscall_64+0x6f2/0xf80 [ 269.206049][ T8339] ? clear_bhb_loop+0x40/0x90 [ 269.206072][ T8339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.206092][ T8339] RIP: 0033:0x7fb85579ce59 [ 269.206114][ T8339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.206132][ T8339] RSP: 002b:00007fb856625028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 269.206151][ T8339] RAX: 0000000000000000 RBX: 00007fb855a15fa0 RCX: 00007fb85579ce59 [ 269.206162][ T8339] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 269.206172][ T8339] RBP: 00007fb855832d6f R08: 0000000000000000 R09: 0000000000000000 [ 269.206183][ T8339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.206193][ T8339] R13: 00007fb855a16038 R14: 00007fb855a15fa0 R15: 00007fffa44123c8 [ 269.206218][ T8339] [ 271.228793][ T8384] netlink: 334 bytes leftover after parsing attributes in process `syz.3.503'. [ 271.448680][ T8366] Process accounting resumed [ 274.161573][ T8434] vivid-008: ================= START STATUS ================= [ 274.222101][ T8434] vivid-008: ================== END STATUS ================== [ 274.566835][ T8430] input: jJǸ-9%vJ86 as /devices/virtual/input/input8 [ 277.036382][ T8490] ubi0: attaching mtd0 [ 277.238452][ T8490] ubi0: scanning is finished [ 277.270251][ T8490] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 277.786509][ T8455] Process accounting resumed [ 278.278453][ T8490] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 280.529841][ T8532] bridge0: port 3(gretap0) entered blocking state [ 280.557815][ T8532] bridge0: port 3(gretap0) entered disabled state [ 280.589026][ T8532] gretap0: entered allmulticast mode [ 280.624795][ T8532] FAULT_INJECTION: forcing a failure. [ 280.624795][ T8532] name failslab, interval 1, probability 0, space 0, times 0 [ 280.663467][ T8532] CPU: 1 UID: 0 PID: 8532 Comm: syz.4.524 Not tainted syzkaller #0 PREEMPT(full) [ 280.663494][ T8532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 280.663506][ T8532] Call Trace: [ 280.663516][ T8532] [ 280.663525][ T8532] dump_stack_lvl+0x100/0x190 [ 280.663566][ T8532] should_fail_ex.cold+0x5/0xa [ 280.663604][ T8532] should_failslab+0xc2/0x120 [ 280.663639][ T8532] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 280.663686][ T8532] ? __kernfs_new_node+0xd2/0x9f0 [ 280.663730][ T8532] __kernfs_new_node+0xd2/0x9f0 [ 280.663768][ T8532] ? __pfx___kernfs_new_node+0x10/0x10 [ 280.663811][ T8532] ? find_held_lock+0x2b/0x80 [ 280.663849][ T8532] ? kernfs_root+0xee/0x2a0 [ 280.663880][ T8532] ? kernfs_root+0xee/0x2a0 [ 280.663922][ T8532] kernfs_new_node+0x11b/0x1a0 [ 280.663987][ T8532] __kernfs_create_file+0x53/0x350 [ 280.664041][ T8532] sysfs_add_file_mode_ns+0x207/0x3c0 [ 280.664084][ T8532] sysfs_create_file_ns+0x145/0x1e0 [ 280.664117][ T8532] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 280.664148][ T8532] ? kernfs_create_link+0x1bd/0x240 [ 280.664196][ T8532] ? kernfs_put+0x3f/0x60 [ 280.664228][ T8532] ? sysfs_do_create_link_sd+0xbb/0x140 [ 280.664266][ T8532] br_sysfs_addif+0xe4/0x210 [ 280.664305][ T8532] br_add_if+0x701/0x1b40 [ 280.664330][ T8532] ? security_capable+0x80/0x260 [ 280.664362][ T8532] add_del_if+0x114/0x160 [ 280.664383][ T8532] br_dev_siocdevprivate+0x8ac/0x1650 [ 280.664407][ T8532] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 280.664433][ T8532] ? do_raw_spin_lock+0x128/0x260 [ 280.664456][ T8532] ? find_held_lock+0x2b/0x80 [ 280.664479][ T8532] ? debug_mutex_remove_waiter+0xa8/0x320 [ 280.664504][ T8532] ? debug_mutex_remove_waiter+0xa8/0x320 [ 280.664536][ T8532] ? netdev_name_node_lookup+0x107/0x150 [ 280.664565][ T8532] ? __mutex_lock+0x838/0x1b10 [ 280.664595][ T8532] dev_ifsioc+0xc2f/0x1f10 [ 280.664618][ T8532] ? __pfx_dev_ifsioc+0x10/0x10 [ 280.664635][ T8532] ? __pfx___mutex_lock+0x10/0x10 [ 280.664671][ T8532] ? dev_load+0x8e/0x240 [ 280.664687][ T8532] ? dev_load+0x8e/0x240 [ 280.664710][ T8532] dev_ioctl+0x70e/0x1070 [ 280.664731][ T8532] sock_ioctl+0x494/0x6b0 [ 280.664761][ T8532] ? __pfx_sock_ioctl+0x10/0x10 [ 280.664787][ T8532] ? hook_file_ioctl_common+0x149/0x410 [ 280.664811][ T8532] ? __fget_files+0x21f/0x3d0 [ 280.664854][ T8532] ? __pfx_sock_ioctl+0x10/0x10 [ 280.664883][ T8532] __x64_sys_ioctl+0x18e/0x210 [ 280.664903][ T8532] do_syscall_64+0x10b/0xf80 [ 280.664930][ T8532] ? clear_bhb_loop+0x40/0x90 [ 280.664960][ T8532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.664978][ T8532] RIP: 0033:0x7fda92d9ce59 [ 280.664995][ T8532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.665013][ T8532] RSP: 002b:00007fda93d22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.665031][ T8532] RAX: ffffffffffffffda RBX: 00007fda93016090 RCX: 00007fda92d9ce59 [ 280.665042][ T8532] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000008 [ 280.665054][ T8532] RBP: 00007fda92e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 280.665066][ T8532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.665077][ T8532] R13: 00007fda93016128 R14: 00007fda93016090 R15: 00007ffebd411358 [ 280.665101][ T8532] [ 281.425773][ T8532] gretap0: left allmulticast mode [ 282.420213][ T8574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.608621][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.530'. [ 285.220116][ T8594] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 287.409599][ T8650] FAULT_INJECTION: forcing a failure. [ 287.409599][ T8650] name failslab, interval 1, probability 0, space 0, times 0 [ 287.469425][ T8650] CPU: 1 UID: 0 PID: 8650 Comm: syz.4.539 Not tainted syzkaller #0 PREEMPT(full) [ 287.469464][ T8650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 287.469481][ T8650] Call Trace: [ 287.469490][ T8650] [ 287.469501][ T8650] dump_stack_lvl+0x100/0x190 [ 287.469539][ T8650] should_fail_ex.cold+0x5/0xa [ 287.469576][ T8650] should_failslab+0xc2/0x120 [ 287.469611][ T8650] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 287.469657][ T8650] ? do_getname+0x35/0x390 [ 287.469697][ T8650] ? find_held_lock+0x2b/0x80 [ 287.469738][ T8650] ? ksys_write+0x190/0x250 [ 287.469775][ T8650] do_getname+0x35/0x390 [ 287.469821][ T8650] do_sys_openat2+0xc5/0x1e0 [ 287.469865][ T8650] ? __pfx_do_sys_openat2+0x10/0x10 [ 287.469907][ T8650] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 287.469957][ T8650] ? __fget_files+0x21f/0x3d0 [ 287.469999][ T8650] __x64_sys_openat+0x12d/0x210 [ 287.470045][ T8650] ? __pfx___x64_sys_openat+0x10/0x10 [ 287.470089][ T8650] ? ksys_write+0x1ac/0x250 [ 287.470128][ T8650] ? rcu_is_watching+0x12/0xc0 [ 287.470169][ T8650] do_syscall_64+0x10b/0xf80 [ 287.470218][ T8650] ? clear_bhb_loop+0x40/0x90 [ 287.470253][ T8650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.470282][ T8650] RIP: 0033:0x7fda92d9ce59 [ 287.470306][ T8650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.470333][ T8650] RSP: 002b:00007fda93d43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 287.470361][ T8650] RAX: ffffffffffffffda RBX: 00007fda93015fa0 RCX: 00007fda92d9ce59 [ 287.470380][ T8650] RDX: 0000000000008102 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 287.470397][ T8650] RBP: 00007fda93d43090 R08: 0000000000000000 R09: 0000000000000000 [ 287.470413][ T8650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.470429][ T8650] R13: 00007fda93016038 R14: 00007fda93015fa0 R15: 00007ffebd411358 [ 287.470468][ T8650] [ 288.837345][ T8678] ima: policy update failed [ 288.864083][ T29] audit: type=1802 audit(4294967333.200:5): pid=8678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.545" res=0 errno=0 [ 290.930969][ T8709] FAULT_INJECTION: forcing a failure. [ 290.930969][ T8709] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 290.987787][ T8709] CPU: 1 UID: 0 PID: 8709 Comm: syz.2.551 Not tainted syzkaller #0 PREEMPT(full) [ 290.987814][ T8709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 290.987825][ T8709] Call Trace: [ 290.987832][ T8709] [ 290.987839][ T8709] dump_stack_lvl+0x100/0x190 [ 290.987864][ T8709] should_fail_ex.cold+0x5/0xa [ 290.987888][ T8709] strncpy_from_user+0x3b/0x2d0 [ 290.987912][ T8709] do_getname+0x78/0x390 [ 290.987942][ T8709] do_sys_openat2+0xc5/0x1e0 [ 290.987971][ T8709] ? __pfx_do_sys_openat2+0x10/0x10 [ 290.988005][ T8709] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 290.988039][ T8709] ? __fget_files+0x21f/0x3d0 [ 290.988065][ T8709] __x64_sys_openat+0x12d/0x210 [ 290.988095][ T8709] ? __pfx___x64_sys_openat+0x10/0x10 [ 290.988124][ T8709] ? ksys_write+0x1ac/0x250 [ 290.988148][ T8709] ? rcu_is_watching+0x12/0xc0 [ 290.988175][ T8709] do_syscall_64+0x10b/0xf80 [ 290.988202][ T8709] ? clear_bhb_loop+0x40/0x90 [ 290.988224][ T8709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.988244][ T8709] RIP: 0033:0x7fb85579ce59 [ 290.988261][ T8709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.988279][ T8709] RSP: 002b:00007fb856625028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 290.988297][ T8709] RAX: ffffffffffffffda RBX: 00007fb855a15fa0 RCX: 00007fb85579ce59 [ 290.988309][ T8709] RDX: 0000000000008102 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 290.988320][ T8709] RBP: 00007fb856625090 R08: 0000000000000000 R09: 0000000000000000 [ 290.988331][ T8709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.988342][ T8709] R13: 00007fb855a16038 R14: 00007fb855a15fa0 R15: 00007fffa44123c8 [ 290.988364][ T8709] [ 292.938012][ T8735] FAULT_INJECTION: forcing a failure. [ 292.938012][ T8735] name failslab, interval 1, probability 0, space 0, times 0 [ 292.975811][ T8735] CPU: 0 UID: 0 PID: 8735 Comm: syz.5.561 Not tainted syzkaller #0 PREEMPT(full) [ 292.975837][ T8735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 292.975849][ T8735] Call Trace: [ 292.975855][ T8735] [ 292.975863][ T8735] dump_stack_lvl+0x100/0x190 [ 292.975888][ T8735] should_fail_ex.cold+0x5/0xa [ 292.975918][ T8735] should_failslab+0xc2/0x120 [ 292.975942][ T8735] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 292.975973][ T8735] ? alloc_empty_file+0x5b/0x1c0 [ 292.976001][ T8735] ? __pfx_stack_trace_save+0x10/0x10 [ 292.976031][ T8735] alloc_empty_file+0x5b/0x1c0 [ 292.976060][ T8735] path_openat+0xe8/0x31a0 [ 292.976083][ T8735] ? kasan_save_stack+0x3f/0x50 [ 292.976101][ T8735] ? kasan_save_stack+0x30/0x50 [ 292.976118][ T8735] ? kasan_save_track+0x14/0x30 [ 292.976135][ T8735] ? __kasan_slab_alloc+0x89/0x90 [ 292.976153][ T8735] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 292.976182][ T8735] ? do_getname+0x35/0x390 [ 292.976209][ T8735] ? do_sys_openat2+0xc5/0x1e0 [ 292.976237][ T8735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.976259][ T8735] ? __pfx_path_openat+0x10/0x10 [ 292.976291][ T8735] do_file_open+0x20e/0x430 [ 292.976316][ T8735] ? __pfx_do_file_open+0x10/0x10 [ 292.976355][ T8735] ? alloc_fd+0x476/0x790 [ 292.976380][ T8735] ? do_getname+0x191/0x390 [ 292.976409][ T8735] do_sys_openat2+0x10d/0x1e0 [ 292.976439][ T8735] ? __pfx_do_sys_openat2+0x10/0x10 [ 292.976467][ T8735] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 292.976500][ T8735] ? __fget_files+0x21f/0x3d0 [ 292.976526][ T8735] __x64_sys_openat+0x12d/0x210 [ 292.976556][ T8735] ? __pfx___x64_sys_openat+0x10/0x10 [ 292.976585][ T8735] ? ksys_write+0x1ac/0x250 [ 292.976609][ T8735] ? rcu_is_watching+0x12/0xc0 [ 292.976640][ T8735] do_syscall_64+0x10b/0xf80 [ 292.976668][ T8735] ? clear_bhb_loop+0x40/0x90 [ 292.976690][ T8735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.976709][ T8735] RIP: 0033:0x7fa94439ce59 [ 292.976724][ T8735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.976743][ T8735] RSP: 002b:00007fa9451e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 292.976761][ T8735] RAX: ffffffffffffffda RBX: 00007fa944615fa0 RCX: 00007fa94439ce59 [ 292.976773][ T8735] RDX: 0000000000008102 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 292.976784][ T8735] RBP: 00007fa9451e9090 R08: 0000000000000000 R09: 0000000000000000 [ 292.976795][ T8735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.976806][ T8735] R13: 00007fa944616038 R14: 00007fa944615fa0 R15: 00007ffdfbcdf8d8 [ 292.976828][ T8735] [ 293.612236][ T8728] queue_state_write: unsupported operation '' [ 293.649540][ T8728] queue_state_write: use 'run', 'start' or 'kick' [ 294.025670][ T8747] FAULT_INJECTION: forcing a failure. [ 294.025670][ T8747] name failslab, interval 1, probability 0, space 0, times 0 [ 294.075693][ T8747] CPU: 1 UID: 0 PID: 8747 Comm: syz.4.563 Not tainted syzkaller #0 PREEMPT(full) [ 294.075738][ T8747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 294.075757][ T8747] Call Trace: [ 294.075768][ T8747] [ 294.075780][ T8747] dump_stack_lvl+0x100/0x190 [ 294.075821][ T8747] should_fail_ex.cold+0x5/0xa [ 294.075860][ T8747] ? tomoyo_encode2+0xfb/0x3c0 [ 294.075897][ T8747] should_failslab+0xc2/0x120 [ 294.075934][ T8747] __kmalloc_noprof+0xe0/0x850 [ 294.075961][ T8747] ? d_absolute_path+0x136/0x1b0 [ 294.076011][ T8747] tomoyo_encode2+0xfb/0x3c0 [ 294.076056][ T8747] tomoyo_encode+0x29/0x50 [ 294.076095][ T8747] tomoyo_realpath_from_path+0x18c/0x690 [ 294.076146][ T8747] tomoyo_path_number_perm+0x23c/0x580 [ 294.076179][ T8747] ? tomoyo_path_number_perm+0x22e/0x580 [ 294.076216][ T8747] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 294.076247][ T8747] ? futex_wait+0x11e/0x370 [ 294.076329][ T8747] ? find_held_lock+0x2b/0x80 [ 294.076368][ T8747] ? __fget_files+0x215/0x3d0 [ 294.076402][ T8747] ? hook_file_ioctl_common+0x149/0x410 [ 294.076434][ T8747] ? __fget_files+0x215/0x3d0 [ 294.076475][ T8747] ? __fget_files+0x21f/0x3d0 [ 294.076515][ T8747] security_file_ioctl+0xd3/0x230 [ 294.076549][ T8747] __x64_sys_ioctl+0xb7/0x210 [ 294.076585][ T8747] do_syscall_64+0x10b/0xf80 [ 294.076629][ T8747] ? clear_bhb_loop+0x40/0x90 [ 294.076668][ T8747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.076700][ T8747] RIP: 0033:0x7fda92d9ce59 [ 294.076726][ T8747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.076758][ T8747] RSP: 002b:00007fda93d22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 294.076787][ T8747] RAX: ffffffffffffffda RBX: 00007fda93016090 RCX: 00007fda92d9ce59 [ 294.076807][ T8747] RDX: 0000200000000700 RSI: 0000000000005412 RDI: 0000000000000005 [ 294.076826][ T8747] RBP: 00007fda92e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 294.076843][ T8747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.076861][ T8747] R13: 00007fda93016128 R14: 00007fda93016090 R15: 00007ffebd411358 [ 294.076904][ T8747] [ 294.076931][ T8747] ERROR: Out of memory at tomoyo_realpath_from_path. [ 294.427707][ T8747] [U] ^R [ 294.598908][ T8757] netlink: 334 bytes leftover after parsing attributes in process `syz.2.566'. [ 294.610192][ T8757] netlink: 334 bytes leftover after parsing attributes in process `syz.2.566'. [ 295.101393][ T8773] FAULT_INJECTION: forcing a failure. [ 295.101393][ T8773] name failslab, interval 1, probability 0, space 0, times 0 [ 295.134582][ T8773] CPU: 0 UID: 0 PID: 8773 Comm: syz.3.570 Not tainted syzkaller #0 PREEMPT(full) [ 295.134623][ T8773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 295.134641][ T8773] Call Trace: [ 295.134651][ T8773] [ 295.134662][ T8773] dump_stack_lvl+0x100/0x190 [ 295.134700][ T8773] should_fail_ex.cold+0x5/0xa [ 295.134736][ T8773] ? tomoyo_realpath_from_path+0xb6/0x690 [ 295.134773][ T8773] should_failslab+0xc2/0x120 [ 295.134808][ T8773] __kmalloc_noprof+0xe0/0x850 [ 295.134833][ T8773] ? kfree+0x1dd/0x6c0 [ 295.134880][ T8773] tomoyo_realpath_from_path+0xb6/0x690 [ 295.134927][ T8773] tomoyo_path_number_perm+0x23c/0x580 [ 295.134957][ T8773] ? tomoyo_path_number_perm+0x22e/0x580 [ 295.134992][ T8773] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 295.135071][ T8773] ? find_held_lock+0x2b/0x80 [ 295.135108][ T8773] ? __fget_files+0x215/0x3d0 [ 295.135140][ T8773] ? hook_file_ioctl_common+0x149/0x410 [ 295.135171][ T8773] ? __fget_files+0x215/0x3d0 [ 295.135212][ T8773] ? __fget_files+0x21f/0x3d0 [ 295.135254][ T8773] security_file_ioctl+0xd3/0x230 [ 295.135297][ T8773] __x64_sys_ioctl+0xb7/0x210 [ 295.135332][ T8773] do_syscall_64+0x10b/0xf80 [ 295.135375][ T8773] ? clear_bhb_loop+0x40/0x90 [ 295.135412][ T8773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.135441][ T8773] RIP: 0033:0x7fb64b59ce59 [ 295.135465][ T8773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.135493][ T8773] RSP: 002b:00007fb64c4bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 295.135521][ T8773] RAX: ffffffffffffffda RBX: 00007fb64b815fa0 RCX: 00007fb64b59ce59 [ 295.135540][ T8773] RDX: 00002000000000c0 RSI: 00000000c0185500 RDI: 0000000000000003 [ 295.135558][ T8773] RBP: 00007fb64c4bd090 R08: 0000000000000000 R09: 0000000000000000 [ 295.135575][ T8773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.135592][ T8773] R13: 00007fb64b816038 R14: 00007fb64b815fa0 R15: 00007ffc67f98198 [ 295.135633][ T8773] [ 295.137582][ T8773] ERROR: Out of memory at tomoyo_realpath_from_path. [ 295.586356][ T29] audit: type=1800 audit(4294967339.920:6): pid=8775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.569" name="file0" dev="tmpfs" ino=151 res=0 errno=0 [ 295.992897][ T8786] FAULT_INJECTION: forcing a failure. [ 295.992897][ T8786] name failslab, interval 1, probability 0, space 0, times 0 [ 296.024710][ T8786] CPU: 1 UID: 0 PID: 8786 Comm: syz.4.573 Not tainted syzkaller #0 PREEMPT(full) [ 296.024749][ T8786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 296.024766][ T8786] Call Trace: [ 296.024795][ T8786] [ 296.024807][ T8786] dump_stack_lvl+0x100/0x190 [ 296.024845][ T8786] should_fail_ex.cold+0x5/0xa [ 296.024881][ T8786] should_failslab+0xc2/0x120 [ 296.024916][ T8786] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 296.024969][ T8786] ? security_file_alloc+0x34/0x2c0 [ 296.025003][ T8786] ? trace_kmem_cache_alloc+0xd5/0x100 [ 296.025045][ T8786] security_file_alloc+0x34/0x2c0 [ 296.025079][ T8786] init_file+0x95/0x480 [ 296.025121][ T8786] alloc_empty_file+0x79/0x1c0 [ 296.025164][ T8786] path_openat+0xe8/0x31a0 [ 296.025199][ T8786] ? kasan_save_stack+0x3f/0x50 [ 296.025225][ T8786] ? kasan_save_stack+0x30/0x50 [ 296.025258][ T8786] ? kasan_save_track+0x14/0x30 [ 296.025284][ T8786] ? __kasan_slab_alloc+0x89/0x90 [ 296.025313][ T8786] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 296.025358][ T8786] ? do_getname+0x35/0x390 [ 296.025398][ T8786] ? do_sys_openat2+0xc5/0x1e0 [ 296.025441][ T8786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.025476][ T8786] ? __pfx_path_openat+0x10/0x10 [ 296.025529][ T8786] do_file_open+0x20e/0x430 [ 296.025570][ T8786] ? __pfx_do_file_open+0x10/0x10 [ 296.025637][ T8786] ? alloc_fd+0x476/0x790 [ 296.025677][ T8786] ? do_getname+0x191/0x390 [ 296.025723][ T8786] do_sys_openat2+0x10d/0x1e0 [ 296.025768][ T8786] ? __pfx_do_sys_openat2+0x10/0x10 [ 296.025809][ T8786] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 296.025861][ T8786] ? __fget_files+0x21f/0x3d0 [ 296.025902][ T8786] __x64_sys_openat+0x12d/0x210 [ 296.025948][ T8786] ? __pfx___x64_sys_openat+0x10/0x10 [ 296.025999][ T8786] ? ksys_write+0x1ac/0x250 [ 296.026039][ T8786] ? rcu_is_watching+0x12/0xc0 [ 296.026080][ T8786] do_syscall_64+0x10b/0xf80 [ 296.026121][ T8786] ? clear_bhb_loop+0x40/0x90 [ 296.026157][ T8786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.026187][ T8786] RIP: 0033:0x7fda92d9ce59 [ 296.026211][ T8786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.026238][ T8786] RSP: 002b:00007fda93d43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 296.026266][ T8786] RAX: ffffffffffffffda RBX: 00007fda93015fa0 RCX: 00007fda92d9ce59 [ 296.026284][ T8786] RDX: 0000000000008102 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 296.026303][ T8786] RBP: 00007fda93d43090 R08: 0000000000000000 R09: 0000000000000000 [ 296.026320][ T8786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.026336][ T8786] R13: 00007fda93016038 R14: 00007fda93015fa0 R15: 00007ffebd411358 [ 296.026375][ T8786] [ 296.996543][ T8782] Process accounting resumed [ 297.229345][ T8795] netlink: 25 bytes leftover after parsing attributes in process `syz.4.575'. [ 297.845820][ T29] audit: type=1326 audit(4294967342.180:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz.3.579" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb64b59ce59 code=0x0 [ 298.207708][ T8815] FAULT_INJECTION: forcing a failure. [ 298.207708][ T8815] name failslab, interval 1, probability 0, space 0, times 0 [ 298.325189][ T8815] CPU: 0 UID: 0 PID: 8815 Comm: syz.5.582 Not tainted syzkaller #0 PREEMPT(full) [ 298.325216][ T8815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 298.325235][ T8815] Call Trace: [ 298.325242][ T8815] [ 298.325249][ T8815] dump_stack_lvl+0x100/0x190 [ 298.325276][ T8815] should_fail_ex.cold+0x5/0xa [ 298.325300][ T8815] should_failslab+0xc2/0x120 [ 298.325333][ T8815] __kmalloc_cache_noprof+0x7a/0x6f0 [ 298.325367][ T8815] ? proc_self_get_link+0x189/0x1f0 [ 298.325393][ T8815] proc_self_get_link+0x189/0x1f0 [ 298.325415][ T8815] pick_link+0xac2/0x13c0 [ 298.325434][ T8815] ? __pfx_proc_self_get_link+0x10/0x10 [ 298.325459][ T8815] step_into_slowpath+0x9ba/0xf90 [ 298.325483][ T8815] ? __pfx_step_into_slowpath+0x10/0x10 [ 298.325507][ T8815] ? lookup_fast+0x2da/0x600 [ 298.325524][ T8815] ? inode_permission+0x374/0x620 [ 298.325555][ T8815] link_path_walk+0xf28/0x1cc0 [ 298.325583][ T8815] path_openat+0x1be/0x31a0 [ 298.325606][ T8815] ? kasan_save_stack+0x3f/0x50 [ 298.325623][ T8815] ? kasan_save_stack+0x30/0x50 [ 298.325640][ T8815] ? kasan_save_track+0x14/0x30 [ 298.325658][ T8815] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 298.325694][ T8815] ? __pfx_path_openat+0x10/0x10 [ 298.325726][ T8815] do_file_open+0x20e/0x430 [ 298.325752][ T8815] ? __pfx_do_file_open+0x10/0x10 [ 298.325791][ T8815] ? alloc_fd+0x476/0x790 [ 298.325816][ T8815] ? do_getname+0x191/0x390 [ 298.325846][ T8815] do_sys_openat2+0x10d/0x1e0 [ 298.325875][ T8815] ? __pfx_do_sys_openat2+0x10/0x10 [ 298.325903][ T8815] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 298.325937][ T8815] ? __fget_files+0x21f/0x3d0 [ 298.325963][ T8815] __x64_sys_openat+0x12d/0x210 [ 298.326003][ T8815] ? __pfx___x64_sys_openat+0x10/0x10 [ 298.326044][ T8815] ? ksys_write+0x1ac/0x250 [ 298.326082][ T8815] ? rcu_is_watching+0x12/0xc0 [ 298.326116][ T8815] do_syscall_64+0x10b/0xf80 [ 298.326143][ T8815] ? clear_bhb_loop+0x40/0x90 [ 298.326165][ T8815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.326190][ T8815] RIP: 0033:0x7fa94439ce59 [ 298.326205][ T8815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.326223][ T8815] RSP: 002b:00007fa9451e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 298.326248][ T8815] RAX: ffffffffffffffda RBX: 00007fa944615fa0 RCX: 00007fa94439ce59 [ 298.326260][ T8815] RDX: 0000000000008102 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 298.326271][ T8815] RBP: 00007fa9451e9090 R08: 0000000000000000 R09: 0000000000000000 [ 298.326282][ T8815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.326293][ T8815] R13: 00007fa944616038 R14: 00007fa944615fa0 R15: 00007ffdfbcdf8d8 [ 298.326316][ T8815] [ 299.677800][ T8837] FAULT_INJECTION: forcing a failure. [ 299.677800][ T8837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.691651][ T8837] CPU: 1 UID: 0 PID: 8837 Comm: syz.3.589 Not tainted syzkaller #0 PREEMPT(full) [ 299.691689][ T8837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 299.691706][ T8837] Call Trace: [ 299.691716][ T8837] [ 299.691727][ T8837] dump_stack_lvl+0x100/0x190 [ 299.691766][ T8837] should_fail_ex.cold+0x5/0xa [ 299.691803][ T8837] _copy_from_user+0x2e/0xd0 [ 299.691835][ T8837] copy_msghdr_from_user+0x9f/0x4f0 [ 299.691881][ T8837] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 299.691943][ T8837] ___sys_sendmsg+0x106/0x1e0 [ 299.691989][ T8837] ? __pfx____sys_sendmsg+0x10/0x10 [ 299.692081][ T8837] __sys_sendmsg+0x170/0x220 [ 299.692118][ T8837] ? __pfx___sys_sendmsg+0x10/0x10 [ 299.692181][ T8837] ? rcu_is_watching+0x12/0xc0 [ 299.692224][ T8837] do_syscall_64+0x10b/0xf80 [ 299.692267][ T8837] ? clear_bhb_loop+0x40/0x90 [ 299.692302][ T8837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.692332][ T8837] RIP: 0033:0x7fb64b59ce59 [ 299.692358][ T8837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.692386][ T8837] RSP: 002b:00007fb64c4bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.692414][ T8837] RAX: ffffffffffffffda RBX: 00007fb64b815fa0 RCX: 00007fb64b59ce59 [ 299.692439][ T8837] RDX: 0000000004000010 RSI: 0000200000000180 RDI: 0000000000000003 [ 299.692457][ T8837] RBP: 00007fb64c4bd090 R08: 0000000000000000 R09: 0000000000000000 [ 299.692474][ T8837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.692490][ T8837] R13: 00007fb64b816038 R14: 00007fb64b815fa0 R15: 00007ffc67f98198 [ 299.692530][ T8837] [ 300.185285][ T8844] FAULT_INJECTION: forcing a failure. [ 300.185285][ T8844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.225563][ T8844] CPU: 0 UID: 0 PID: 8844 Comm: syz.2.591 Not tainted syzkaller #0 PREEMPT(full) [ 300.225604][ T8844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 300.225627][ T8844] Call Trace: [ 300.225637][ T8844] [ 300.225649][ T8844] dump_stack_lvl+0x100/0x190 [ 300.225689][ T8844] should_fail_ex.cold+0x5/0xa [ 300.225728][ T8844] _copy_from_user+0x2e/0xd0 [ 300.225761][ T8844] usbdev_ioctl+0x19fb/0x3aa0 [ 300.225809][ T8844] ? __pfx_usbdev_ioctl+0x10/0x10 [ 300.225856][ T8844] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 300.225903][ T8844] ? do_vfs_ioctl+0x226/0x13e0 [ 300.225951][ T8844] ? find_held_lock+0x2b/0x80 [ 300.225988][ T8844] ? __fget_files+0x215/0x3d0 [ 300.226020][ T8844] ? hook_file_ioctl_common+0x149/0x410 [ 300.226063][ T8844] ? __fget_files+0x21f/0x3d0 [ 300.226104][ T8844] ? __pfx_usbdev_ioctl+0x10/0x10 [ 300.226145][ T8844] __x64_sys_ioctl+0x18e/0x210 [ 300.226189][ T8844] do_syscall_64+0x10b/0xf80 [ 300.226233][ T8844] ? clear_bhb_loop+0x40/0x90 [ 300.226271][ T8844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.226301][ T8844] RIP: 0033:0x7fb85579ce59 [ 300.226326][ T8844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.226354][ T8844] RSP: 002b:00007fb856625028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 300.226384][ T8844] RAX: ffffffffffffffda RBX: 00007fb855a15fa0 RCX: 00007fb85579ce59 [ 300.226402][ T8844] RDX: 00002000000000c0 RSI: 00000000c0185500 RDI: 0000000000000003 [ 300.226420][ T8844] RBP: 00007fb856625090 R08: 0000000000000000 R09: 0000000000000000 [ 300.226437][ T8844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.226454][ T8844] R13: 00007fb855a16038 R14: 00007fb855a15fa0 R15: 00007fffa44123c8 [ 300.226496][ T8844] [ 300.634141][ T8848] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 300.726154][ T8848] KVM: debugfs: duplicate directory 8848-3 [ 301.635830][ T8838] Process accounting paused [ 302.844445][ T8876] netlink: 40 bytes leftover after parsing attributes in process `syz.4.598'. [ 303.433287][ T8888] No such timeout policy "" [ 303.472698][ T8888] netlink: Failed to associated timeout policy '' [ 306.028126][ T8922] ima: policy update failed [ 306.061161][ T29] audit: type=1802 audit(4294967350.390:8): pid=8922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.614" res=0 errno=0 [ 306.308419][ T8931] netlink: 25 bytes leftover after parsing attributes in process `syz.5.606'. [ 306.540285][ T8941] FAULT_INJECTION: forcing a failure. [ 306.540285][ T8941] name failslab, interval 1, probability 0, space 0, times 0 [ 306.572815][ T8941] CPU: 0 UID: 8 PID: 8941 Comm: syz.4.609 Not tainted syzkaller #0 PREEMPT(full) [ 306.572859][ T8941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 306.572878][ T8941] Call Trace: [ 306.572888][ T8941] [ 306.572901][ T8941] dump_stack_lvl+0x100/0x190 [ 306.572941][ T8941] should_fail_ex.cold+0x5/0xa [ 306.572983][ T8941] should_failslab+0xc2/0x120 [ 306.573020][ T8941] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 306.573067][ T8941] ? key_alloc+0x3c5/0x1310 [ 306.573100][ T8941] ? mark_held_locks+0x40/0x70 [ 306.573136][ T8941] key_alloc+0x3c5/0x1310 [ 306.573188][ T8941] ? __pfx_key_alloc+0x10/0x10 [ 306.573223][ T8941] ? __pfx_key_default_cmp+0x10/0x10 [ 306.573268][ T8941] ? __pfx_keyring_search_iterator+0x10/0x10 [ 306.573316][ T8941] keyring_alloc+0x44/0xc0 [ 306.573360][ T8941] look_up_user_keyrings+0x508/0x790 [ 306.573402][ T8941] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 306.573452][ T8941] lookup_user_key+0xbb1/0x1300 [ 306.573492][ T8941] ? __pfx_lookup_user_key+0x10/0x10 [ 306.573526][ T8941] ? __pfx_do_futex+0x10/0x10 [ 306.573570][ T8941] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 306.573610][ T8941] ? xfd_validate_state+0x129/0x190 [ 306.573640][ T8941] ? ksys_write+0x1ac/0x250 [ 306.573680][ T8941] keyctl_keyring_unlink+0x1f/0x1b0 [ 306.573727][ T8941] __do_sys_keyctl+0x3dd/0x5a0 [ 306.573764][ T8941] do_syscall_64+0x10b/0xf80 [ 306.573808][ T8941] ? clear_bhb_loop+0x40/0x90 [ 306.573845][ T8941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.573876][ T8941] RIP: 0033:0x7fda92d9ce59 [ 306.573902][ T8941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.573926][ T8941] RSP: 002b:00007fda93d01028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 306.573953][ T8941] RAX: ffffffffffffffda RBX: 00007fda93016180 RCX: 00007fda92d9ce59 [ 306.573972][ T8941] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000009 [ 306.573992][ T8941] RBP: 00007fda92e32d6f R08: 0000000000000008 R09: 0000000000000000 [ 306.574010][ T8941] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 306.574029][ T8941] R13: 00007fda93016218 R14: 00007fda93016180 R15: 00007ffebd411358 [ 306.574071][ T8941] [ 307.200544][ T8933] queue_state_write: unsupported operation '' [ 307.210914][ T8933] queue_state_write: use 'run', 'start' or 'kick' [ 308.266402][ T8958] Process accounting paused [ 309.367019][ T8978] FAULT_INJECTION: forcing a failure. [ 309.367019][ T8978] name fail_futex, interval 1, probability 0, space 0, times 1 [ 309.389723][ T8978] CPU: 1 UID: 7 PID: 8978 Comm: syz.3.619 Not tainted syzkaller #0 PREEMPT(full) [ 309.389766][ T8978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 309.389791][ T8978] Call Trace: [ 309.389801][ T8978] [ 309.389814][ T8978] dump_stack_lvl+0x100/0x190 [ 309.389856][ T8978] should_fail_ex.cold+0x5/0xa [ 309.389894][ T8978] get_futex_key+0x1d2/0x1510 [ 309.389919][ T8978] ? __pfx_get_futex_key+0x10/0x10 [ 309.389937][ T8978] ? __lock_acquire+0x4a5/0x2630 [ 309.389966][ T8978] futex_wake+0xea/0x530 [ 309.389990][ T8978] ? lock_acquire+0x1b1/0x370 [ 309.390009][ T8978] ? __pfx_futex_wake+0x10/0x10 [ 309.390039][ T8978] ? proc_id_connector+0x2ed/0x650 [ 309.390070][ T8978] do_futex+0x32b/0x350 [ 309.390091][ T8978] ? __pfx_do_futex+0x10/0x10 [ 309.390118][ T8978] __x64_sys_futex+0x34f/0x4d0 [ 309.390142][ T8978] ? __pfx___x64_sys_futex+0x10/0x10 [ 309.390167][ T8978] ? rcu_is_watching+0x12/0xc0 [ 309.390192][ T8978] do_syscall_64+0x10b/0xf80 [ 309.390228][ T8978] ? clear_bhb_loop+0x40/0x90 [ 309.390252][ T8978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.390271][ T8978] RIP: 0033:0x7fb64b59ce59 [ 309.390287][ T8978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.390305][ T8978] RSP: 002b:00007fb64c47b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 309.390324][ T8978] RAX: ffffffffffffffda RBX: 00007fb64b816188 RCX: 00007fb64b59ce59 [ 309.390337][ T8978] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb64b81618c [ 309.390349][ T8978] RBP: 00007fb64b816180 R08: 0000000000000001 R09: 0000000000000000 [ 309.390360][ T8978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.390371][ T8978] R13: 00007fb64b816218 R14: 00007ffc67f980b0 R15: 00007ffc67f98198 [ 309.390394][ T8978] [ 311.342769][ T8995] netlink: 25 bytes leftover after parsing attributes in process `syz.3.623'. [ 313.180876][ T9007] kexec: Could not allocate control_code_buffer [ 316.854221][ T9063] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 316.969828][ T9063] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 317.041624][ T9063] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 317.107588][ T9063] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 317.525509][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.534133][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.461316][ T9097] netlink: 'syz.5.643': attribute type 2 has an invalid length. [ 318.768614][ T9100] syz.3.644 uses obsolete (PF_INET,SOCK_PACKET) [ 318.879344][ T5900] Bluetooth: hci1: command 0x0c1a tx timeout [ 319.039361][ T5900] Bluetooth: hci3: command 0x0c1a tx timeout [ 319.119589][ T7252] Bluetooth: hci4: command 0x0c1a tx timeout [ 319.126007][ T5900] Bluetooth: hci5: command 0x0c1a tx timeout [ 323.230215][ T9157] netlink: 202 bytes leftover after parsing attributes in process `syz.5.654'. [ 325.740721][ T9199] FAULT_INJECTION: forcing a failure. [ 325.740721][ T9199] name failslab, interval 1, probability 0, space 0, times 0 [ 325.755689][ T9199] CPU: 1 UID: 0 PID: 9199 Comm: syz.5.664 Not tainted syzkaller #0 PREEMPT(full) [ 325.755717][ T9199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 325.755729][ T9199] Call Trace: [ 325.755736][ T9199] [ 325.755743][ T9199] dump_stack_lvl+0x100/0x190 [ 325.755769][ T9199] should_fail_ex.cold+0x5/0xa [ 325.755793][ T9199] should_failslab+0xc2/0x120 [ 325.755825][ T9199] __kmalloc_cache_noprof+0x7a/0x6f0 [ 325.755852][ T9199] ? vb2_vmalloc_alloc+0xf9/0x410 [ 325.755876][ T9199] ? trace_kmalloc+0xe3/0x110 [ 325.755900][ T9199] ? __kasan_kmalloc+0xaa/0xb0 [ 325.755935][ T9199] vb2_vmalloc_alloc+0xf9/0x410 [ 325.755962][ T9199] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 325.755989][ T9199] __vb2_queue_alloc+0x8d5/0x1160 [ 325.756022][ T9199] vb2_core_reqbufs+0x899/0xf30 [ 325.756050][ T9199] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 325.756086][ T9199] __vb2_init_fileio+0x32d/0x1000 [ 325.756109][ T9199] ? aa_file_perm+0x7f3/0x14d0 [ 325.756139][ T9199] __vb2_perform_fileio+0x91e/0x1380 [ 325.756168][ T9199] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 325.756192][ T9199] ? __pfx___might_resched+0x10/0x10 [ 325.756218][ T9199] ? futex_hash+0x141/0x370 [ 325.756241][ T9199] vb2_fop_read+0x211/0x520 [ 325.756265][ T9199] v4l2_read+0x229/0x2c0 [ 325.756284][ T9199] ? __pfx_v4l2_read+0x10/0x10 [ 325.756304][ T9199] vfs_read+0x1e4/0xb30 [ 325.756328][ T9199] ? __pfx_vfs_read+0x10/0x10 [ 325.756348][ T9199] ? do_futex+0x192/0x350 [ 325.756368][ T9199] ? __pfx_do_futex+0x10/0x10 [ 325.756387][ T9199] ? __pfx_do_sys_openat2+0x10/0x10 [ 325.756422][ T9199] ? __x64_sys_futex+0x34f/0x4d0 [ 325.756441][ T9199] ? __x64_sys_futex+0x358/0x4d0 [ 325.756465][ T9199] ksys_read+0x12a/0x250 [ 325.756486][ T9199] ? __pfx_ksys_read+0x10/0x10 [ 325.756509][ T9199] ? rcu_is_watching+0x12/0xc0 [ 325.756535][ T9199] do_syscall_64+0x10b/0xf80 [ 325.756562][ T9199] ? clear_bhb_loop+0x40/0x90 [ 325.756587][ T9199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.756617][ T9199] RIP: 0033:0x7fa94439ce59 [ 325.756639][ T9199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.756657][ T9199] RSP: 002b:00007fa9451e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 325.756675][ T9199] RAX: ffffffffffffffda RBX: 00007fa944615fa0 RCX: 00007fa94439ce59 [ 325.756687][ T9199] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000000 [ 325.756698][ T9199] RBP: 00007fa944432d6f R08: 0000000000000000 R09: 0000000000000000 [ 325.756709][ T9199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.756719][ T9199] R13: 00007fa944616038 R14: 00007fa944615fa0 R15: 00007ffdfbcdf8d8 [ 325.756743][ T9199] [ 327.184501][ T9219] FAULT_INJECTION: forcing a failure. [ 327.184501][ T9219] name fail_futex, interval 1, probability 0, space 0, times 0 [ 327.189297][ T9182] Process accounting paused [ 327.205331][ T9219] CPU: 0 UID: 0 PID: 9219 Comm: syz.4.668 Not tainted syzkaller #0 PREEMPT(full) [ 327.205379][ T9219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 327.205398][ T9219] Call Trace: [ 327.205409][ T9219] [ 327.205422][ T9219] dump_stack_lvl+0x100/0x190 [ 327.205464][ T9219] should_fail_ex.cold+0x5/0xa [ 327.205521][ T9219] get_futex_key+0x1d2/0x1510 [ 327.205561][ T9219] ? __pfx_get_futex_key+0x10/0x10 [ 327.205597][ T9219] ? trace_pid_list_is_set+0x22c/0x390 [ 327.205650][ T9219] futex_wait_setup+0x83/0x510 [ 327.205714][ T9219] __futex_wait+0x19f/0x300 [ 327.205765][ T9219] ? __pfx___futex_wait+0x10/0x10 [ 327.205812][ T9219] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 327.205864][ T9219] ? __pfx_futex_wake_mark+0x10/0x10 [ 327.205913][ T9219] ? find_held_lock+0x2b/0x80 [ 327.205954][ T9219] ? futex_wake+0x456/0x530 [ 327.206005][ T9219] futex_wait+0xe6/0x370 [ 327.206046][ T9219] ? __pfx_futex_wait+0x10/0x10 [ 327.206098][ T9219] ? __pfx___handle_mm_fault+0x10/0x10 [ 327.206146][ T9219] ? __pfx_css_rstat_updated+0x10/0x10 [ 327.206204][ T9219] do_futex+0x1ef/0x350 [ 327.206242][ T9219] ? __pfx_do_futex+0x10/0x10 [ 327.206274][ T9219] ? find_held_lock+0x2b/0x80 [ 327.206313][ T9219] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 327.206349][ T9219] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 327.206395][ T9219] __x64_sys_futex+0x34f/0x4d0 [ 327.206436][ T9219] ? exc_page_fault+0x6f/0xd0 [ 327.206481][ T9219] ? __pfx___x64_sys_futex+0x10/0x10 [ 327.206525][ T9219] ? rcu_is_watching+0x12/0xc0 [ 327.206570][ T9219] do_syscall_64+0x10b/0xf80 [ 327.206613][ T9219] ? clear_bhb_loop+0x40/0x90 [ 327.206648][ T9219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.206678][ T9219] RIP: 0033:0x7fda92d9ce59 [ 327.206705][ T9219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.206734][ T9219] RSP: 002b:00007fda93d430e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 327.206764][ T9219] RAX: ffffffffffffffda RBX: 00007fda93015fa8 RCX: 00007fda92d9ce59 [ 327.206785][ T9219] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fda93015fa8 [ 327.206813][ T9219] RBP: 00007fda93015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 327.206832][ T9219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.206849][ T9219] R13: 00007fda93016038 R14: 00007ffebd411270 R15: 00007ffebd411358 [ 327.206892][ T9219] [ 327.735113][ T9223] tipc: Started in network mode [ 327.766683][ T9223] tipc: Node identity ee00, cluster identity 4711 [ 327.799872][ T9223] tipc: Node number set to 60928 [ 327.945316][ T5900] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 328.096420][ T9223] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input9 [ 328.133481][ T9230] random: crng reseeded on system resumption [ 331.699398][ T9303] Process accounting resumed [ 334.245615][ T9336] FAULT_INJECTION: forcing a failure. [ 334.245615][ T9336] name failslab, interval 1, probability 0, space 0, times 0 [ 334.347556][ T9336] CPU: 0 UID: 0 PID: 9336 Comm: syz.2.693 Not tainted syzkaller #0 PREEMPT(full) [ 334.347603][ T9336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 334.347625][ T9336] Call Trace: [ 334.347636][ T9336] [ 334.347649][ T9336] dump_stack_lvl+0x100/0x190 [ 334.347693][ T9336] should_fail_ex.cold+0x5/0xa [ 334.347735][ T9336] should_failslab+0xc2/0x120 [ 334.347775][ T9336] __kmalloc_cache_noprof+0x7a/0x6f0 [ 334.347819][ T9336] ? sctp_add_bind_addr+0xae/0x3e0 [ 334.347861][ T9336] sctp_add_bind_addr+0xae/0x3e0 [ 334.347899][ T9336] sctp_copy_local_addr_list+0x349/0x550 [ 334.347943][ T9336] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 334.347986][ T9336] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 334.348029][ T9336] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 334.348089][ T9336] sctp_bind_addr_copy+0x331/0x530 [ 334.348132][ T9336] sctp_connect_new_asoc+0x1c9/0x770 [ 334.348181][ T9336] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 334.348236][ T9336] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 334.348287][ T9336] sctp_sendmsg+0x1743/0x22e0 [ 334.348342][ T9336] ? __pfx_sctp_sendmsg+0x10/0x10 [ 334.348384][ T9336] ? __pfx_futex_wake_mark+0x10/0x10 [ 334.348431][ T9336] ? aa_sk_perm+0x309/0xaa0 [ 334.348473][ T9336] ? __pfx_aa_sk_perm+0x10/0x10 [ 334.348506][ T9336] ? __might_fault+0xc5/0x140 [ 334.348564][ T9336] ? __pfx_sctp_sendmsg+0x10/0x10 [ 334.348611][ T9336] inet_sendmsg+0x11c/0x140 [ 334.348647][ T9336] __sys_sendto+0x446/0x4b0 [ 334.348678][ T9336] ? __pfx_inet_sendmsg+0x10/0x10 [ 334.348718][ T9336] ? __pfx___sys_sendto+0x10/0x10 [ 334.348765][ T9336] ? fd_install+0x223/0x580 [ 334.348817][ T9336] ? xfd_validate_state+0x129/0x190 [ 334.348852][ T9336] __x64_sys_sendto+0xe0/0x1c0 [ 334.348883][ T9336] ? do_syscall_64+0x90/0xf80 [ 334.348929][ T9336] ? lockdep_hardirqs_on+0x78/0x100 [ 334.348975][ T9336] do_syscall_64+0x10b/0xf80 [ 334.349020][ T9336] ? clear_bhb_loop+0x40/0x90 [ 334.349068][ T9336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.349101][ T9336] RIP: 0033:0x7fb85579ce59 [ 334.349127][ T9336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.349154][ T9336] RSP: 002b:00007fb856625028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 334.349185][ T9336] RAX: ffffffffffffffda RBX: 00007fb855a15fa0 RCX: 00007fb85579ce59 [ 334.349205][ T9336] RDX: 000000000002000f RSI: 0000000000000000 RDI: 0000000000000003 [ 334.349224][ T9336] RBP: 00007fb855832d6f R08: 0000200000000000 R09: 000000000000001c [ 334.349245][ T9336] R10: 00000000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 334.349265][ T9336] R13: 00007fb855a16038 R14: 00007fb855a15fa0 R15: 00007fffa44123c8 [ 334.349309][ T9336] [ 338.102761][ T9383] netlink: 24 bytes leftover after parsing attributes in process `syz.2.701'. [ 338.210565][ T9386] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 338.477604][ T9390] Process accounting resumed [ 339.949070][ T9420] netlink: 'syz.4.706': attribute type 11 has an invalid length. [ 340.448202][ T9429] ovs_: entered promiscuous mode [ 342.909857][ T9465] netlink: 24 bytes leftover after parsing attributes in process `syz.4.717'. [ 343.370848][ T9473] tipc: Started in network mode [ 343.381573][ T9473] tipc: Node identity ee00, cluster identity 4711 [ 343.403947][ T9473] tipc: Node number set to 60928 [ 343.878837][ T9475] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input10 [ 345.877936][ T9492] ecryptfs_miscdev_write: Invalid packet size [0] [ 347.251909][ T9521] netlink: 16 bytes leftover after parsing attributes in process `syz.5.730'. [ 347.293334][ T9521] netlink: 8 bytes leftover after parsing attributes in process `syz.5.730'. [ 347.335509][ T9521] binder: 9520:9521 ioctl c018620c 200000000300 returned -22 [ 347.763974][ T9528] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 348.799302][ T5900] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 348.916852][ T9545] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 348.941322][ T9546] futex_wake_op: syz.2.735 tries to shift op by -2048; fix this program [ 348.952852][ T9547] futex_wake_op: syz.2.735 tries to shift op by -2048; fix this program [ 350.784538][ T5900] Bluetooth: hci4: unexpected event for opcode 0x7c89 [ 351.044786][ T9581] random: crng reseeded on system resumption [ 351.224027][ T9586] binder: 9583:9586 ioctl c00c620f 0 returned -22 [ 352.350573][ T9603] i2c i2c-0: new_device: Invalid device name [ 352.955474][ T9611] random: crng reseeded on system resumption [ 353.128390][ T9612] netlink: 206 bytes leftover after parsing attributes in process `syz.3.749'. [ 353.438649][ T9614] hub 1-0:1.0: USB hub found [ 353.481080][ T9614] hub 1-0:1.0: 1 port detected [ 353.672557][ T5900] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 353.686804][ T5900] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 355.172160][ T9658] smpboot: CPU 1 is now offline [ 356.614471][ T9672] netlink: Conntrack attr type has unexpected length (type=9, length=0, expected=32) [ 357.738686][ T9689] Process accounting resumed [ 357.798041][ T9693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.768'. [ 357.944334][ T9701] netlink: 16 bytes leftover after parsing attributes in process `syz.5.777'. [ 358.400601][ T9685] netlink: 206 bytes leftover after parsing attributes in process `syz.4.766'. [ 360.165927][ T9729] netlink: Conntrack attr type has unexpected length (type=9, length=0, expected=32) [ 360.825504][ T9750] netlink: 8 bytes leftover after parsing attributes in process `syz.5.781'. [ 362.194839][ T9774] FAULT_INJECTION: forcing a failure. [ 362.194839][ T9774] name failslab, interval 1, probability 0, space 0, times 0 [ 362.276994][ T9761] Process accounting paused [ 362.367787][ T9774] CPU: 0 UID: 0 PID: 9774 Comm: syz.2.787 Not tainted syzkaller #0 PREEMPT(full) [ 362.367815][ T9774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 362.367826][ T9774] Call Trace: [ 362.367833][ T9774] [ 362.367841][ T9774] dump_stack_lvl+0x100/0x190 [ 362.367867][ T9774] should_fail_ex.cold+0x5/0xa [ 362.367892][ T9774] should_failslab+0xc2/0x120 [ 362.367915][ T9774] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 362.367946][ T9774] ? key_alloc+0x3c5/0x1310 [ 362.367972][ T9774] key_alloc+0x3c5/0x1310 [ 362.368001][ T9774] ? __pfx_key_alloc+0x10/0x10 [ 362.368029][ T9774] keyring_alloc+0x44/0xc0 [ 362.368055][ T9774] lookup_user_key+0x9b8/0x1300 [ 362.368078][ T9774] ? __pfx_lookup_user_key+0x10/0x10 [ 362.368100][ T9774] ? __pfx_futex_wait+0x10/0x10 [ 362.368127][ T9774] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 362.368158][ T9774] keyctl_get_persistent+0x197/0x8b0 [ 362.368185][ T9774] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 362.368217][ T9774] ? __x64_sys_futex+0x34f/0x4d0 [ 362.368237][ T9774] ? __x64_sys_futex+0x358/0x4d0 [ 362.368260][ T9774] ? xfd_validate_state+0x129/0x190 [ 362.368279][ T9774] ? ksys_write+0x1ac/0x250 [ 362.368306][ T9774] __do_sys_keyctl+0x3b2/0x5a0 [ 362.368325][ T9774] do_syscall_64+0x10b/0xf80 [ 362.368354][ T9774] ? clear_bhb_loop+0x40/0x90 [ 362.368377][ T9774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.368397][ T9774] RIP: 0033:0x7fb85579ce59 [ 362.368413][ T9774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.368431][ T9774] RSP: 002b:00007fb856625028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 362.368449][ T9774] RAX: ffffffffffffffda RBX: 00007fb855a15fa0 RCX: 00007fb85579ce59 [ 362.368462][ T9774] RDX: 7fffffffffffffff RSI: 0000000000000000 RDI: 0000000000000016 [ 362.368476][ T9774] RBP: 00007fb855832d6f R08: 0000000000000002 R09: 0000000000000000 [ 362.368489][ T9774] R10: ffffffffffffe6d6 R11: 0000000000000246 R12: 0000000000000000 [ 362.368500][ T9774] R13: 00007fb855a16038 R14: 00007fb855a15fa0 R15: 00007fffa44123c8 [ 362.368523][ T9774] [ 362.984681][ T29] audit: type=1326 audit(4294967407.270:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9788 comm="syz.5.789" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa94439ce59 code=0x0 [ 366.073308][ T9836] netlink: 'syz.2.801': attribute type 12 has an invalid length. [ 366.493660][ T9850] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 367.754485][ T9850] kexec: Could not allocate control_code_buffer [ 368.750849][ T9884] Process accounting paused [ 368.936993][ T9893] netlink: 'syz.5.811': attribute type 12 has an invalid length. [ 369.248486][ T5900] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 369.335714][ T9901] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 369.813583][ T9897] can0: slcan on ttyS2. [ 370.121472][ T9900] can0 (unregistered): slcan off ttyS2. [ 372.362472][ T9944] ecryptfs_miscdev_write: Error while inspecting packet size [ 372.988420][ T9950] zswap: compressor not available [ 374.002739][ T9967] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 374.605524][ T9972] netlink: 'syz.4.823': attribute type 12 has an invalid length. [ 375.439553][ T5900] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 376.084095][ T9987] netlink: 334 bytes leftover after parsing attributes in process `syz.5.827'. [ 376.512178][ T9987] netlink: 334 bytes leftover after parsing attributes in process `syz.5.827'. [ 377.445387][T10008] netlink: 8 bytes leftover after parsing attributes in process `syz.5.831'. [ 378.973709][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.983092][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.422865][T10062] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 380.430780][T10062] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 380.499320][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.5.843'. [ 383.392884][T10102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.850'. [ 383.521205][T10103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.850'. [ 384.567378][T10117] HfR: entered promiscuous mode [ 385.176374][T10132] No such timeout policy "" [ 385.241009][T10132] netlink: Failed to associated timeout policy '' [ 385.368604][T10138] netlink: 2468 bytes leftover after parsing attributes in process `syz.5.858'. [ 388.537483][T10188] No such timeout policy "" [ 388.588331][T10188] netlink: Failed to associated timeout policy '' [ 390.732303][T10149] Process accounting paused [ 394.641819][T10234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.876'. [ 394.757780][T10213] Process accounting resumed [ 394.774850][T10244] No such timeout policy "" [ 394.854062][T10244] netlink: Failed to associated timeout policy '' [ 395.468088][T10256] netlink: 28 bytes leftover after parsing attributes in process `syz.4.882'. [ 395.669564][T10256] team0 (unregistering): Port device team_slave_0 removed [ 395.744855][T10256] team0 (unregistering): Port device team_slave_1 removed [ 397.316944][T10291] netlink: 326 bytes leftover after parsing attributes in process `syz.3.888'. [ 398.737456][T10308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'. [ 399.995048][T10304] Process accounting resumed [ 400.905702][T10327] No such timeout policy "" [ 400.971309][T10327] netlink: Failed to associated timeout policy '' [ 400.999365][T10333] No such timeout policy "" [ 401.092879][T10333] netlink: Failed to associated timeout policy '' [ 402.260212][T10347] Setting dangerous option i915.mitigations - tainting kernel [ 402.415322][T10347] Bad "i915.mitigations=!CmâUQF\ ", 'CmâUQF\' is unknown [ 405.984346][T10385] netlink: 28 bytes leftover after parsing attributes in process `syz.4.911'. [ 412.181873][T10457] netlink: 342 bytes leftover after parsing attributes in process `syz.4.924'. [ 412.700391][T10446] kexec: Could not allocate control_code_buffer [ 413.703089][T10484] FAULT_INJECTION: forcing a failure. [ 413.703089][T10484] name fail_futex, interval 1, probability 0, space 0, times 0 [ 414.006126][T10484] CPU: 0 UID: 0 PID: 10484 Comm: syz.5.929 Tainted: G U syzkaller #0 PREEMPT(full) [ 414.006159][T10484] Tainted: [U]=USER [ 414.006167][T10484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 414.006178][T10484] Call Trace: [ 414.006185][T10484] [ 414.006193][T10484] dump_stack_lvl+0x100/0x190 [ 414.006219][T10484] should_fail_ex.cold+0x5/0xa [ 414.006242][T10484] get_futex_key+0x1d2/0x1510 [ 414.006264][T10484] ? __pfx_get_futex_key+0x10/0x10 [ 414.006283][T10484] ? find_held_lock+0x2b/0x80 [ 414.006307][T10484] ? futex_wake+0x456/0x530 [ 414.006336][T10484] futex_wake+0xea/0x530 [ 414.006359][T10484] ? __pfx_futex_wait+0x10/0x10 [ 414.006385][T10484] ? __pfx_futex_wake+0x10/0x10 [ 414.006412][T10484] ? __pfx_path_removexattrat+0x10/0x10 [ 414.006437][T10484] ? up_write+0x28c/0x4f0 [ 414.006461][T10484] do_futex+0x32b/0x350 [ 414.006488][T10484] ? __pfx_do_futex+0x10/0x10 [ 414.006515][T10484] __x64_sys_futex+0x34f/0x4d0 [ 414.006538][T10484] ? __pfx___x64_sys_futex+0x10/0x10 [ 414.006563][T10484] ? rcu_is_watching+0x12/0xc0 [ 414.006588][T10484] do_syscall_64+0x10b/0xf80 [ 414.006617][T10484] ? clear_bhb_loop+0x40/0x90 [ 414.006639][T10484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.006659][T10484] RIP: 0033:0x7fa94439ce59 [ 414.006675][T10484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.006693][T10484] RSP: 002b:00007fa9451e90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 414.006712][T10484] RAX: ffffffffffffffda RBX: 00007fa944615fa8 RCX: 00007fa94439ce59 [ 414.006724][T10484] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa944615fac [ 414.006735][T10484] RBP: 00007fa944615fa0 R08: 0000000000000001 R09: 0000000000000000 [ 414.006746][T10484] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 414.006758][T10484] R13: 00007fa944616038 R14: 00007ffdfbcdf7f0 R15: 00007ffdfbcdf8d8 [ 414.006781][T10484] [ 414.817595][T10499] No such timeout policy "" [ 414.839958][T10499] netlink: Failed to associated timeout policy '' [ 415.717012][T10518] netlink: ct_mark mask cannot be 0 [ 415.941268][T10518] FAULT_INJECTION: forcing a failure. [ 415.941268][T10518] name failslab, interval 1, probability 0, space 0, times 0 [ 416.106053][T10518] CPU: 0 UID: 0 PID: 10518 Comm: syz.2.935 Tainted: G U syzkaller #0 PREEMPT(full) [ 416.106086][T10518] Tainted: [U]=USER [ 416.106092][T10518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 416.106103][T10518] Call Trace: [ 416.106110][T10518] [ 416.106118][T10518] dump_stack_lvl+0x100/0x190 [ 416.106143][T10518] should_fail_ex.cold+0x5/0xa [ 416.106167][T10518] should_failslab+0xc2/0x120 [ 416.106190][T10518] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 416.106222][T10518] ? mpol_new+0x11b/0x2d0 [ 416.106240][T10518] ? find_held_lock+0x2b/0x80 [ 416.106264][T10518] ? futex_wake+0x456/0x530 [ 416.106290][T10518] mpol_new+0x11b/0x2d0 [ 416.106310][T10518] do_mbind+0x210/0xfd0 [ 416.106341][T10518] ? __pfx_do_mbind+0x10/0x10 [ 416.106367][T10518] ? do_sys_openat2+0x1b4/0x1e0 [ 416.106405][T10518] ? __pfx_get_nodes+0x10/0x10 [ 416.106429][T10518] kernel_mbind+0x1b7/0x200 [ 416.106463][T10518] ? __pfx_kernel_mbind+0x10/0x10 [ 416.106491][T10518] ? rcu_is_watching+0x12/0xc0 [ 416.106516][T10518] do_syscall_64+0x10b/0xf80 [ 416.106543][T10518] ? clear_bhb_loop+0x40/0x90 [ 416.106566][T10518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.106586][T10518] RIP: 0033:0x7fb85579ce59 [ 416.106602][T10518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.106621][T10518] RSP: 002b:00007fb8565e3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 416.106640][T10518] RAX: ffffffffffffffda RBX: 00007fb855a16180 RCX: 00007fb85579ce59 [ 416.106652][T10518] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000 [ 416.106664][T10518] RBP: 00007fb855832d6f R08: 0000000000000006 R09: 0000000000000002 [ 416.106675][T10518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.106686][T10518] R13: 00007fb855a16218 R14: 00007fb855a16180 R15: 00007fffa44123c8 [ 416.106708][T10518] [ 417.436406][T10536] netlink: 16 bytes leftover after parsing attributes in process `syz.5.940'. [ 418.927263][T10566] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 420.096418][ T29] audit: type=1804 audit(4294967464.430:10): pid=10582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.949" name="/newroot/226/file0" dev="tmpfs" ino=1203 res=1 errno=0 [ 421.175631][T10603] netlink: 504 bytes leftover after parsing attributes in process `syz.4.954'. [ 421.257339][T10585] Process accounting resumed [ 421.268525][T10604] No such timeout policy "" [ 422.380284][T10624] netlink: 342 bytes leftover after parsing attributes in process `syz.2.956'. [ 423.606165][T10638] random: crng reseeded on system resumption [ 425.647324][T10641] Process accounting paused [ 425.774676][T10659] queue_state_write: operation too long [ 425.802922][T10659] queue_state_write: use 'run', 'start' or 'kick' [ 427.045973][T10687] netlink: 346 bytes leftover after parsing attributes in process `syz.3.972'. [ 428.113063][T10698] ================================================================== [ 428.113080][T10698] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 428.113118][T10698] Write of size 8 at addr ffffc90004c41be0 by task syz.2.975/10698 [ 428.113134][T10698] [ 428.113146][T10698] CPU: 0 UID: 0 PID: 10698 Comm: syz.2.975 Tainted: G U syzkaller #0 PREEMPT(full) [ 428.113174][T10698] Tainted: [U]=USER [ 428.113181][T10698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 428.113192][T10698] Call Trace: [ 428.113200][T10698] [ 428.113207][T10698] dump_stack_lvl+0x100/0x190 [ 428.113229][T10698] print_report+0x13d/0x4b0 [ 428.113255][T10698] ? _raw_spin_lock_irqsave+0x52/0x60 [ 428.113283][T10698] ? sys_imageblit+0x19fb/0x1d60 [ 428.113311][T10698] kasan_report+0xdf/0x1d0 [ 428.113333][T10698] ? sys_imageblit+0x19fb/0x1d60 [ 428.113363][T10698] sys_imageblit+0x19fb/0x1d60 [ 428.113392][T10698] ? queue_work_on+0x13b/0x1e0 [ 428.113412][T10698] ? __pfx_sys_imageblit+0x10/0x10 [ 428.113449][T10698] ? drm_fb_helper_damage_area+0xb4/0xe0 [ 428.113479][T10698] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 428.113502][T10698] soft_cursor+0x524/0xa10 [ 428.113527][T10698] ? fb_get_color_depth+0x120/0x250 [ 428.113549][T10698] bit_cursor+0xca1/0x1490 [ 428.113575][T10698] ? __pfx_bit_cursor+0x10/0x10 [ 428.113601][T10698] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 428.113629][T10698] ? get_color+0x1da/0x450 [ 428.113647][T10698] ? __pfx_bit_cursor+0x10/0x10 [ 428.113669][T10698] fbcon_cursor+0x43c/0x5e0 [ 428.113689][T10698] ? add_softcursor+0x1c0/0x290 [ 428.113713][T10698] ? hide_cursor+0xa3/0x230 [ 428.113736][T10698] set_cursor+0x1db/0x250 [ 428.113760][T10698] vcs_write+0xba9/0xd60 [ 428.113783][T10698] ? __bpf_trace_sched_exit_tp+0x20/0xc0 [ 428.113808][T10698] ? __pfx_vcs_write+0x10/0x10 [ 428.113830][T10698] ? apparmor_file_permission+0x13f/0x1c0 [ 428.113850][T10698] ? bpf_lsm_file_permission+0x9/0x10 [ 428.113868][T10698] ? security_file_permission+0x76/0x210 [ 428.113891][T10698] ? rw_verify_area+0xce/0x6d0 [ 428.113909][T10698] vfs_write+0x2aa/0x1070 [ 428.113930][T10698] ? __pfx_vcs_write+0x10/0x10 [ 428.113953][T10698] ? __pfx_vfs_write+0x10/0x10 [ 428.113973][T10698] ? find_held_lock+0x2b/0x80 [ 428.113996][T10698] ? __fget_files+0x215/0x3d0 [ 428.114017][T10698] ? __fget_files+0x215/0x3d0 [ 428.114039][T10698] ? __fget_files+0x21f/0x3d0 [ 428.114062][T10698] ksys_write+0x12a/0x250 [ 428.114082][T10698] ? __pfx_ksys_write+0x10/0x10 [ 428.114104][T10698] ? rcu_is_watching+0x12/0xc0 [ 428.114126][T10698] do_syscall_64+0x10b/0xf80 [ 428.114153][T10698] ? clear_bhb_loop+0x40/0x90 [ 428.114174][T10698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.114193][T10698] RIP: 0033:0x7fb85579ce59 [ 428.114208][T10698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.114227][T10698] RSP: 002b:00007fb856625028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 428.114245][T10698] RAX: ffffffffffffffda RBX: 00007fb855a15fa0 RCX: 00007fb85579ce59 [ 428.114258][T10698] RDX: 0000000020000003 RSI: 0000200000000000 RDI: 0000000000000003 [ 428.114270][T10698] RBP: 00007fb855832d6f R08: 0000000000000000 R09: 0000000000000000 [ 428.114281][T10698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.114292][T10698] R13: 00007fb855a16038 R14: 00007fb855a15fa0 R15: 00007fffa44123c8 [ 428.114308][T10698] [ 428.114315][T10698] [ 428.114321][T10698] The buggy address belongs to a vmalloc virtual mapping [ 428.114335][T10698] Memory state around the buggy address: [ 428.114345][T10698] ffffc90004c41a80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 428.114358][T10698] ffffc90004c41b00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 428.114370][T10698] >ffffc90004c41b80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 428.114380][T10698] ^ [ 428.114391][T10698] ffffc90004c41c00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 428.114404][T10698] ffffc90004c41c80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 428.114414][T10698] ================================================================== [ 428.114425][T10698] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 428.114446][T10698] CPU: 0 UID: 0 PID: 10698 Comm: syz.2.975 Tainted: G U syzkaller #0 PREEMPT(full) [ 428.114472][T10698] Tainted: [U]=USER [ 428.114479][T10698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 428.114491][T10698] Call Trace: [ 428.114497][T10698] [ 428.114509][T10698] dump_stack_lvl+0x100/0x190 [ 428.114529][T10698] vpanic+0x552/0x970 [ 428.114546][T10698] ? __pfx_vpanic+0x10/0x10 [ 428.114564][T10698] ? __pfx_vprintk_emit+0x10/0x10 [ 428.114590][T10698] ? sys_imageblit+0x19fb/0x1d60 [ 428.114617][T10698] panic+0xd1/0xe0 [ 428.114633][T10698] ? __pfx_panic+0x10/0x10 [ 428.114653][T10698] ? sys_imageblit+0x19fb/0x1d60 [ 428.114683][T10698] check_panic_on_warn.cold+0x19/0x34 [ 428.114705][T10698] end_report.part.0+0x3a/0x90 [ 428.114731][T10698] kasan_report.cold+0xe/0x18 [ 428.114758][T10698] ? sys_imageblit+0x19fb/0x1d60 [ 428.114787][T10698] sys_imageblit+0x19fb/0x1d60 [ 428.114817][T10698] ? queue_work_on+0x13b/0x1e0 [ 428.114836][T10698] ? __pfx_sys_imageblit+0x10/0x10 [ 428.114865][T10698] ? drm_fb_helper_damage_area+0xb4/0xe0 [ 428.114895][T10698] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 428.114918][T10698] soft_cursor+0x524/0xa10 [ 428.114943][T10698] ? fb_get_color_depth+0x120/0x250 [ 428.114964][T10698] bit_cursor+0xca1/0x1490 [ 428.114991][T10698] ? __pfx_bit_cursor+0x10/0x10 [ 428.115017][T10698] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 428.115045][T10698] ? get_color+0x1da/0x450 [ 428.115063][T10698] ? __pfx_bit_cursor+0x10/0x10 [ 428.115085][T10698] fbcon_cursor+0x43c/0x5e0 [ 428.115105][T10698] ? add_softcursor+0x1c0/0x290 [ 428.115130][T10698] ? hide_cursor+0xa3/0x230 [ 428.115154][T10698] set_cursor+0x1db/0x250 [ 428.115178][T10698] vcs_write+0xba9/0xd60 [ 428.115201][T10698] ? __bpf_trace_sched_exit_tp+0x20/0xc0 [ 428.115225][T10698] ? __pfx_vcs_write+0x10/0x10 [ 428.115248][T10698] ? apparmor_file_permission+0x13f/0x1c0 [ 428.115268][T10698] ? bpf_lsm_file_permission+0x9/0x10 [ 428.115286][T10698] ? security_file_permission+0x76/0x210 [ 428.115309][T10698] ? rw_verify_area+0xce/0x6d0 [ 428.115327][T10698] vfs_write+0x2aa/0x1070 [ 428.115348][T10698] ? __pfx_vcs_write+0x10/0x10 [ 428.115372][T10698] ? __pfx_vfs_write+0x10/0x10 [ 428.115392][T10698] ? find_held_lock+0x2b/0x80 [ 428.115416][T10698] ? __fget_files+0x215/0x3d0 [ 428.115443][T10698] ? __fget_files+0x215/0x3d0 [ 428.115466][T10698] ? __fget_files+0x21f/0x3d0 [ 428.115489][T10698] ksys_write+0x12a/0x250 [ 428.115511][T10698] ? __pfx_ksys_write+0x10/0x10 [ 428.115533][T10698] ? rcu_is_watching+0x12/0xc0 [ 428.115556][T10698] do_syscall_64+0x10b/0xf80 [ 428.115583][T10698] ? clear_bhb_loop+0x40/0x90 [ 428.115604][T10698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.115624][T10698] RIP: 0033:0x7fb85579ce59 [ 428.115638][T10698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.115656][T10698] RSP: 002b:00007fb856625028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 428.115674][T10698] RAX: ffffffffffffffda RBX: 00007fb855a15fa0 RCX: 00007fb85579ce59 [ 428.115687][T10698] RDX: 0000000020000003 RSI: 0000200000000000 RDI: 0000000000000003 [ 428.115700][T10698] RBP: 00007fb855832d6f R08: 0000000000000000 R09: 0000000000000000 [ 428.115711][T10698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.115723][T10698] R13: 00007fb855a16038 R14: 00007fb855a15fa0 R15: 00007fffa44123c8 [ 428.115741][T10698] [ 428.115807][T10698] Kernel Offset: disabled