last executing test programs: 21m31.364629477s ago: executing program 3 (id=82): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x10ffffffff}, 0x6, 0x0) prctl$auto(0x3a, 0x4000000000001, r0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x18, 0x2, 0x0) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x4e8c, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4) bpf$auto(0x6, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_VFIO_IOMMU_MAP_DMA(r1, 0x3b71, 0x0) r2 = openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000000)="c80d1b5d399b71", 0x7) pread64$auto(r2, 0x0, 0x800, 0x45e) r4 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x40102, 0x1a00) read$auto(r4, 0x0, 0x0) 21m30.855954539s ago: executing program 3 (id=85): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) socket(0x11, 0x80003, 0x300) (async) r0 = socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x80000e465, 0x6c68b27a, 0x15, r0, 0x10001) (async) mmap$auto(0x0, 0x80000e465, 0x6c68b27a, 0x15, r0, 0x10001) capset$auto(&(0x7f0000000040)={0x1, 0xffffffffffffffff}, &(0x7f0000000080)={0x0, 0x2, 0x8}) mbind$auto(0x4, 0x1fc000000, 0x1, &(0x7f00000000c0)=0x1, 0x0, 0x3) (async) mbind$auto(0x4, 0x1fc000000, 0x1, &(0x7f00000000c0)=0x1, 0x0, 0x3) ioctl$auto_FIDEDUPERANGE(r0, 0xc0189436, 0x8001) prctl$auto_SECCOMP_MODE_STRICT(0xb, 0x1, r1, 0x9, 0x80) (async) r2 = prctl$auto_SECCOMP_MODE_STRICT(0xb, 0x1, r1, 0x9, 0x80) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/sync_on_suspend\x00', 0x8102, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fb3d89cb80"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) mbind$auto(0x5, 0x9729, 0x8, &(0x7f0000000180)=0x8, 0x49, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0x800}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0xa788}, 0x7, 0x8) read$auto(r2, 0x0, 0x4000200020) write$auto(0x3, 0x0, 0x81) 21m30.653104658s ago: executing program 3 (id=86): openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd5/queue/write_zeroes_max_bytes\x00', 0x0, 0x0) clock_adjtime$auto(0x1, &(0x7f0000000280)={0xfff, 0x0, 0x6fe, 0x40004, 0x7, 0x4, 0x8227, 0x0, 0x2, 0x0, 0x8, {0x7, 0x800}, 0x101, 0xf8, 0xa, 0xd94, 0x0, 0x1, 0x7, 0x6, 0xa9, 0x3, 0xfffffffe}) socket(0x2, 0x3, 0x8000000a) (async) socket(0x2, 0x3, 0x8000000a) socket(0x11, 0x80003, 0x300) (async) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) socketpair$auto(0x409, 0x5, 0xffffffff, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0xc048aeca, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4a42, 0xe1d2b27bdc14aab6) socket(0x10, 0x2, 0x15) (async) r3 = socket(0x10, 0x2, 0x15) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETFAMILY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="cec86dc7b816fbe261f26f8df6c08ae12588486f27c89060c4b43b058ac23ef7ea6670af1f1afdfc407459e6215254852d65901ebc31dd912c4c6be3a149b8e94cd7901648b707b338474aae8c322a563330e5"], 0x14}}, 0x8080) (async) sendmsg$auto_CTRL_CMD_GETFAMILY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="cec86dc7b816fbe261f26f8df6c08ae12588486f27c89060c4b43b058ac23ef7ea6670af1f1afdfc407459e6215254852d65901ebc31dd912c4c6be3a149b8e94cd7901648b707b338474aae8c322a563330e5"], 0x14}}, 0x8080) rseq$auto(&(0x7f00000001c0)={0xe, 0x20401, 0x5fc, 0x10000006, 0xffffffff, 0x6}, 0x8000, 0x0, 0x6) epoll_create$auto(0x4) (async) r5 = epoll_create$auto(0x4) epoll_pwait$auto(r5, 0x0, 0x800, 0x4d, 0x0, 0x8) (async) epoll_pwait$auto(r5, 0x0, 0x800, 0x4d, 0x0, 0x8) fallocate$auto(r2, 0x0, 0x7, 0x4cbd5d) (async) fallocate$auto(r2, 0x0, 0x7, 0x4cbd5d) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 21m29.815992793s ago: executing program 3 (id=93): socket(0x2, 0x2, 0x5) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/input/event0\x00', 0x3496c2, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4004ae86, &(0x7f0000000040)={0x7}) getsockopt$auto(0xffffffffffffffff, 0x11, 0x3, 0xfffffffffffffffc, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x15, 0x5, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) r3 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000100), 0x41, 0x0) ioctl$auto_TUNSETVNETLE(r3, 0x400454dc, 0x0) ioctl$auto(0xffffffffffffffff, 0x560f, 0xffffffffffffffff) 21m28.547646985s ago: executing program 3 (id=96): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x100, 0x8000000000000001, 0xe2, 0x6baef0d6, 0x2, 0xe3) r0 = socket(0x28, 0x2, 0x1) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) process_vm_readv$auto(0x0, 0x0, 0x3, 0x0, 0x7fffffff, 0x0) read$auto(r1, &(0x7f0000000080)='[\x00', 0x2e) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x397841, 0x0) setsockopt$auto_SO_TIMESTAMPNS_NEW(r0, 0x7fffffff, 0x40, &(0x7f00000000c0)='/dev/bus/usb/035/001\x00', 0xfff) fcntl$auto_F_GETOWN_EX(r2, 0x10, 0x7f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000880)='/dev/input/event0\x00', 0x40100, 0x0) ioctl$auto_EVIOCGMASK(r3, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x9}) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/input/event0\x00', 0x0, 0x0) io_uring_setup$auto(0x2008, 0x0) ioctl$auto_FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, 0x5) getsockopt$auto_SO_MAX_PACING_RATE(0xffffffffffffffff, 0xffffffff, 0x2f, &(0x7f0000000000)='[\x00', &(0x7f0000000040)=0x74) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x80) waitid$auto_P_ALL(0x0, 0x2, &(0x7f00000001c0)={@_si_pad}, 0x2, &(0x7f00000002c0)={{0x7, 0xffffffff}, {0x0, 0x1}, 0xfffffffffffffffd, 0x0, 0x4, 0x6, 0x1, 0xa1c6, 0x3, 0x0, 0xe3, 0x0, 0x7, 0x7319, 0x0, 0xb4e}) msgctl$auto(0x8, 0x9, &(0x7f00000003c0)={{0x4, 0x0, 0xee00, 0xc5b, 0x1, 0x6, 0xfffe}, &(0x7f0000000240)=0xe, &(0x7f0000000380)=0x3, 0x0, 0xd32, 0x9, 0x79, 0x8, 0x7, 0x3, 0x3, @raw=0x9, @inferred=0xffffffffffffffff}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x80) r4 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0xc05, 0x0) writev$auto(r4, &(0x7f0000000140)={0x0, 0x6}, 0x4) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) 21m27.77998735s ago: executing program 3 (id=100): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000000)='\'\x00', 0x4) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) mmap$auto(0xfffffffffffffffc, 0xac15, 0xffc, 0x8000000008011, 0xffffffffffffffff, 0x200009000) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x400000000000, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x40000008000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) sendto$auto(0x3, 0x0, 0x13, 0xfffffff8, &(0x7f0000000440)=@tipc=@name={0x1e, 0x2, 0x3, {{0x1, 0x1}}}, 0x20) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x200, 0x1) r1 = open(&(0x7f0000001bc0)='./file0\x00', 0x4140, 0x0) fanotify_mark$auto(0x0, 0x105, 0x8009, r1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba42933ae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac10043676f3b2c7f1339b2d7468133fb8447d17846b6b78079ecc31d7d0f74caa4a3db1ac4d312bfdb34bd331f1f771a2396108561a52153d63a7b2a3a077a7e4c1a22bcb23e1f3e511fee310baa67904d2aad4d6671e8b77c7720e37e84e0efecb60a35f188cbe8b8b2fb3967b78aa482aabb103f23083baa9b2ae653731d5993db4054233dea4af25795e12eb4d6b046bdeea6adce8626e0def15dd32b0ec16a85d93e1dea980794033f4b46973062c64c0209f9d3efc6ea7704c8e8dfea8cdfbe2cb1e367bf634a1952190e0660994f79f0c622d47ee8f93ce1c2852db907ae68a29bcc960b26e0e634173287fd012c4bb3063c41d35c92e896b44080bc5a98e90907cd1d01cc0708019cc1c93c71f29bfe841c873ad2aa0565dfaeb86c8b8e58ea2075de2a562ba1b5dc4ca452df21f25453b7c7f9a3e31547f4e803cefbac3b94715f2ab1f9fc66570244472f2f29deb9bdf6dc5b18d54e3c2264f9598f2ea749d170a66d351acf003c3f37fe74a09a8a964ce2818e4b4efd1eb0e3bca5dfd2a053eeb5735b96d282d2e03866bd6581b5e5e541c74f0b92b932b234ac117342f156b4b23fc6dcbc92ada00ce404f54443b6e7fdac9acb79e5258a865ced633ff5356d13a3e9923bcd8e6d177c9fb8618f9393798d90d70c78207e40f95bb2b0a9308f29f4331bbdfc1021dface5a740473b462c47286fee1c9d0036c78134e108b5b218d3022fd277e1cdf0cdf8cd4b37d74c8dd47e00e50fcf8d336978a0e7624f94b8fdcd1c9459201231f343c7cb602083aa5e1aea8974a9e22d77cb94cae6c89e239bacfe656d9b0948de480ce2ba3b4dbcb180089d5eb0f8f481e02f7d4628e9134b6e52881572a398e4edd6f01f90983826d721dddc7d4ba3f293288ba54f696fa25cc2f8721c3e380dd04bf05801f90019498601fcbcea6aa6a2d7983e6823f480185ef9c3b4ed19c4f94c108067c89d69bc4e0da0112280ecd0caff8a454fb3e6655dc6a35cdd053aef882e403458754f5e84bd2210f18a61106af8c5a2c18dc48ff87cfda6d545014009a167570f0550e5121d0bdf4b20a1177b708e5515ee33db3baf29633440999ddd36eb0299a1efcd8934ab60c1a88d9db6fa0d2b3f0bf12e87630e0dc5eddca8f291ad85141391e6f9fe56ee4ddb39a1ac7a573cb69ec14f012ea0b721df3ea40747d1130a61802e859519ae1bc5a3673105fa87485f88b8981a3a208a3576848c2df152a023f5e573c867b43b10247336b110956eb28e5288d7aa19219e8324857cdf6d17530385720afd5a1ffd23aa1bd061b73caafa05afdd1441040989d081814635347f1d55669b1c38be4698e3a085e2010e35d2747b4e39ef4920f58d6b4585d737c13221a44ad5543099bb0ab228722ef9cbc0d621178012495837d6a220eeaaf498ccc01", 0xfe04) 21m12.360552981s ago: executing program 32 (id=100): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000000)='\'\x00', 0x4) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) mmap$auto(0xfffffffffffffffc, 0xac15, 0xffc, 0x8000000008011, 0xffffffffffffffff, 0x200009000) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x400000000000, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x40000008000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) sendto$auto(0x3, 0x0, 0x13, 0xfffffff8, &(0x7f0000000440)=@tipc=@name={0x1e, 0x2, 0x3, {{0x1, 0x1}}}, 0x20) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x200, 0x1) r1 = open(&(0x7f0000001bc0)='./file0\x00', 0x4140, 0x0) fanotify_mark$auto(0x0, 0x105, 0x8009, r1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba42933ae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac10043676f3b2c7f1339b2d7468133fb8447d17846b6b78079ecc31d7d0f74caa4a3db1ac4d312bfdb34bd331f1f771a2396108561a52153d63a7b2a3a077a7e4c1a22bcb23e1f3e511fee310baa67904d2aad4d6671e8b77c7720e37e84e0efecb60a35f188cbe8b8b2fb3967b78aa482aabb103f23083baa9b2ae653731d5993db4054233dea4af25795e12eb4d6b046bdeea6adce8626e0def15dd32b0ec16a85d93e1dea980794033f4b46973062c64c0209f9d3efc6ea7704c8e8dfea8cdfbe2cb1e367bf634a1952190e0660994f79f0c622d47ee8f93ce1c2852db907ae68a29bcc960b26e0e634173287fd012c4bb3063c41d35c92e896b44080bc5a98e90907cd1d01cc0708019cc1c93c71f29bfe841c873ad2aa0565dfaeb86c8b8e58ea2075de2a562ba1b5dc4ca452df21f25453b7c7f9a3e31547f4e803cefbac3b94715f2ab1f9fc66570244472f2f29deb9bdf6dc5b18d54e3c2264f9598f2ea749d170a66d351acf003c3f37fe74a09a8a964ce2818e4b4efd1eb0e3bca5dfd2a053eeb5735b96d282d2e03866bd6581b5e5e541c74f0b92b932b234ac117342f156b4b23fc6dcbc92ada00ce404f54443b6e7fdac9acb79e5258a865ced633ff5356d13a3e9923bcd8e6d177c9fb8618f9393798d90d70c78207e40f95bb2b0a9308f29f4331bbdfc1021dface5a740473b462c47286fee1c9d0036c78134e108b5b218d3022fd277e1cdf0cdf8cd4b37d74c8dd47e00e50fcf8d336978a0e7624f94b8fdcd1c9459201231f343c7cb602083aa5e1aea8974a9e22d77cb94cae6c89e239bacfe656d9b0948de480ce2ba3b4dbcb180089d5eb0f8f481e02f7d4628e9134b6e52881572a398e4edd6f01f90983826d721dddc7d4ba3f293288ba54f696fa25cc2f8721c3e380dd04bf05801f90019498601fcbcea6aa6a2d7983e6823f480185ef9c3b4ed19c4f94c108067c89d69bc4e0da0112280ecd0caff8a454fb3e6655dc6a35cdd053aef882e403458754f5e84bd2210f18a61106af8c5a2c18dc48ff87cfda6d545014009a167570f0550e5121d0bdf4b20a1177b708e5515ee33db3baf29633440999ddd36eb0299a1efcd8934ab60c1a88d9db6fa0d2b3f0bf12e87630e0dc5eddca8f291ad85141391e6f9fe56ee4ddb39a1ac7a573cb69ec14f012ea0b721df3ea40747d1130a61802e859519ae1bc5a3673105fa87485f88b8981a3a208a3576848c2df152a023f5e573c867b43b10247336b110956eb28e5288d7aa19219e8324857cdf6d17530385720afd5a1ffd23aa1bd061b73caafa05afdd1441040989d081814635347f1d55669b1c38be4698e3a085e2010e35d2747b4e39ef4920f58d6b4585d737c13221a44ad5543099bb0ab228722ef9cbc0d621178012495837d6a220eeaaf498ccc01", 0xfe04) 17m58.110216936s ago: executing program 0 (id=949): mprotect$auto(0x200000000000, 0x806124, 0x8) (async) sigaltstack$auto(&(0x7f0000000040)={0x0, 0xffffffff, 0x7}, 0x0) (async) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbe4060000000008001a000008000008001a0005000000"], 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x24008010) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0) (async) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) (async) socket(0x10, 0x2, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004c18}, 0x810) (async) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000000)=ANY=[@ANYBLOB="0805772ab4dba292f6f4a8", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) mmap$auto(0x0, 0x4020009, 0xe2, 0xeb1, 0x401, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r0, 0x0, 0x400018) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 17m57.837760636s ago: executing program 0 (id=952): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = io_uring_setup$auto(0x3, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) (async) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) set_mempolicy$auto(0x8005, &(0x7f0000000280)=0x99, 0x4) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(0xffffffffffffffff, 0x0, 0x8801) r3 = socket(0x11, 0xa, 0x0) syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000000300), r3) (async) r4 = syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000000300), r3) sendmsg$auto_NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="02000012", @ANYRES16=r4, @ANYBLOB="000425bd7000fcdbdf250200000008000400ff0f000008000c00ff070000080004000200000008000c000000008008000c000a0000000500010000000000080003000000000009000100405b5b2600000000080003000bda531f"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r5) setresuid$auto(0x8, 0x8, 0x0) bpf$auto(0x10, &(0x7f00000000c0)=@link_detach, 0x40) (async) bpf$auto(0x10, &(0x7f00000000c0)=@link_detach, 0x40) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41001}, 0x64810) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'dvmrp0\x00'}) fcntl$auto_F_GETOWN(r3, 0x9, 0x3) fanotify_init$auto(0x3, 0xf8e9) (async) fanotify_init$auto(0x3, 0xf8e9) waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000440)={@siginfo_0_0={0xe8f, 0x0, 0x80000001}}, 0x6, &(0x7f00000001c0)={{0xfffffffffffffffd, 0x585}, {0xe, 0x1}, 0x0, 0x1, 0x1, 0x5, 0x3, 0x1, 0x7, 0x7, 0x2000007, 0x9, 0x8000000000009, 0x1, 0x4, 0x100000010000}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r6, 0x4, 0x7ff) (async) ptrace$auto(0x10, r6, 0x4, 0x7ff) mmap$auto(0xa0a, 0x8, 0x4000000000df, 0x110, r1, 0x3ff) (async) mmap$auto(0xa0a, 0x8, 0x4000000000df, 0x110, r1, 0x3ff) socket(0x10, 0x2, 0x0) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x80000001, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x80000020281, 0x8, 0x2, 0xfffffffffffffff8}) (async) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x80000001, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x80000020281, 0x8, 0x2, 0xfffffffffffffff8}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) madvise$auto(0x0, 0x20499d, 0x9) listmount$auto(0x0, 0x0, 0xf4240, 0x1) copy_file_range$auto(r2, 0x0, 0xffffffffffffffff, 0x0, 0x2400000000, 0x0) 17m56.309453431s ago: executing program 0 (id=958): r0 = prctl$auto(0xf, 0x200000ffffff, 0xf79, 0x5, 0x10001) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/ptp/ptp0/max_vclocks\x00', 0x8040, 0x0) mmap$auto(0x4231, 0x4020009, 0x380000000, 0xebd, r0, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/dvb_usb_au6610/parameters/adapter_nr\x00', 0x45ae40, 0x0) read$auto(r1, 0x0, 0x20) write$auto(0x3, 0x0, 0xfdef) 17m56.194316831s ago: executing program 0 (id=960): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x8, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0xa, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r2, 0x4, 0x7ff) ptrace$auto_PTRACE_SETSIGMASK(0x420b, r2, 0x8, 0xa) ptrace$auto(0x3, r2, 0x380000000000, 0x3) r3 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x10, 0x2, 0xc) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, 0x0, 0x301, 0x70bd29, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0xc, 0x2, 'nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) r5 = openat$auto_fops_u32_ro_(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/netdevsim/netdevsim0/ports/3/bpf_offloaded_id\x00', 0x20082, 0x0) write$auto(r5, 0x0, 0x85) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r4, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x6000c010}, 0x4000050) r6 = openat$auto_fops_ulong_ro_(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/ieee80211/phy7/netdev:wlan0/stations/08:02:11:00:00:01/rx_fragments\x00', 0x14000, 0x0) ioctl$auto_FS_IOC_UNRESVSP(r6, 0x40305829, 0xff) write$auto(r3, &(0x7f0000000000)='-\x00', 0xfdef) madvise$auto(0x40, 0x4, 0x800) r7 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000080), r0) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/misc/hw_random/rng_quality\x00', 0xa001, 0x0) write$auto(r8, &(0x7f0000000000)='/sys/devices/virtual/sound/ctl-led/speaker/card2/detach\x00', 0x7fffffff) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="32ba9008a677269215d79c5e85a9fb9f2066a77cbd4c669ca7f035b71ffce3fa1b7d456f65c627e05a0db7470c59a3c2d5e4003e00118118be344af29a763b6bc9e5da", @ANYRES16=r7, @ANYBLOB="000427bd7000fbdbdf250100000008000b0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4044010) 17m55.698636096s ago: executing program 0 (id=961): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0xf) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='N\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) setresuid$auto(0x2, 0x7, 0x8080) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x1}, 0x3, 0x0, 0x0, 0x10b}, 0x7}, 0x3, 0xfffffffe) 17m54.429566974s ago: executing program 0 (id=965): r0 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/format\x00', 0x1, 0x0) mmap$auto(0x3, 0x100000000000000, 0x3, 0xeb1, r0, 0x8004) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event0\x00', 0x2, 0x0) read$auto_proc_pid_smaps_operations_internal(0xffffffffffffffff, &(0x7f0000000340)=""/154, 0x9a) ioctl$auto_EVIOCGMASK(r1, 0x80104592, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/input/event1\x00', 0x200000, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) pipe$auto(0x0) vmsplice$auto(0xffffffffffffffff, 0x0, 0xfa, 0x7) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb701, 0x0) getsockopt$auto_SO_LINGER(0xffffffffffffffff, 0xc00000, 0xd, &(0x7f0000000100)='MAC802154_HWSIM\x00', &(0x7f0000000140)=0x8) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='&\x00', @ANYBLOB], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x48040) read$auto(r3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x34d802, 0x0) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/binderfs/binder1\x00', 0x381842, 0x0) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f0000000000)="c80d1b5d399b41", 0x7) ioctl$auto_BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r6 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) read$auto_state_fops_(r6, &(0x7f0000000180)=""/61, 0xfffffeeb) socket$nl_generic(0x10, 0x3, 0x10) 17m53.771175453s ago: executing program 33 (id=965): r0 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/format\x00', 0x1, 0x0) mmap$auto(0x3, 0x100000000000000, 0x3, 0xeb1, r0, 0x8004) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event0\x00', 0x2, 0x0) read$auto_proc_pid_smaps_operations_internal(0xffffffffffffffff, &(0x7f0000000340)=""/154, 0x9a) ioctl$auto_EVIOCGMASK(r1, 0x80104592, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/input/event1\x00', 0x200000, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) pipe$auto(0x0) vmsplice$auto(0xffffffffffffffff, 0x0, 0xfa, 0x7) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb701, 0x0) getsockopt$auto_SO_LINGER(0xffffffffffffffff, 0xc00000, 0xd, &(0x7f0000000100)='MAC802154_HWSIM\x00', &(0x7f0000000140)=0x8) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='&\x00', @ANYBLOB], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x48040) read$auto(r3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x34d802, 0x0) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/binderfs/binder1\x00', 0x381842, 0x0) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f0000000000)="c80d1b5d399b41", 0x7) ioctl$auto_BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r6 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) read$auto_state_fops_(r6, &(0x7f0000000180)=""/61, 0xfffffeeb) socket$nl_generic(0x10, 0x3, 0x10) 13m34.409313854s ago: executing program 4 (id=1962): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2202, 0x0) (async) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/002/001\x00', 0x40101, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000000c0)={0xa1, 0x9, 0x200, 0x4, 0xfff8, 0xfffffffe, 0x0}) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x101000, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x2000, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x1f40) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) setsockopt$auto_SO_PROTOCOL(r0, 0x8, 0x26, &(0x7f0000000080)='/dev/dri/card1\x00', 0xfffffffe) (async) writev$auto(r0, &(0x7f0000000100)={0x0, 0xffffffff}, 0x6) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async, rerun: 64) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14130000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fcdbdf2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044) (rerun: 64) wait4$auto(0x0, 0x0, 0xf, &(0x7f0000000140)={{0x2599}, {0xffffffffffffffff, 0x1000000009}, 0x2, 0x800080000001, 0x1, 0x1000, 0x5, 0x7, 0x5, 0x5, 0xb11c, 0x8, 0xfffffffffffffffd, 0x7, 0xffff, 0x801c0000000}) (async) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac43be5035fe2ff2bcb6f365f7e3c08393080a878eba89e03d554a0a7de8815b6ec255a45bb7", @ANYRES16=0x0, @ANYBLOB="01032dbd7000ffdbdf251100fffc"], 0x14}, 0x1, 0x0, 0x0, 0x51}, 0x400c0) (async) r4 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) (async) r5 = socket(0x11, 0x3, 0x9) r6 = fspick$auto(0xffffffffffffffff, 0x0, 0x9) (async) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/suspend_stats/last_failed_dev\x00', 0x2000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f00000001c0)=""/229, 0xe5) (async) r8 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="082b4565c20da6dee51fe4813fb7b228fea2bebe5ab7c2cbbc9da60602d6a41e44e347d53acf2f35b3b6731fd7d6fac204ed27b7a304b703d0163dbd7b88d335ea9757ee2a562ef3d311ecd4886fc9023e11ca06405b8a4ad7139dd676559a4a1ddbd06c637e9420079f948fcb5991b04cd692b558ed3dde70c1d4a499bea75f778457998c6913da96d7611f1c5a45e2823beda99bc8b214ba3b5205c8937b93c2c9207f0649e0c4f6fb57f42340bd2781916b3cdf79bc9a4a73199916d9", @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRESDEC, @ANYRES16=r5, @ANYRES8=r6, @ANYRESOCT=r8, @ANYRES64=r3, @ANYBLOB="3b8ebe96232d2b0695c62ca1e24f15bb7137bcb8f6f6c20d117ee05fc0ca30d78a855628290ff09506f351d32d1f1717666da2134cd25350d24d9d92f71d1950450bfd18a34e3d636afad86e2e93bec984c911772176e9c7e18847fa24b9da6716573101e036a5e28e6ad5dc83b484cd16d02ae7dcfa6874a7eecf86d9b62a68ba5f6ff292de0fdf1cd31fe9d7760ec49997e93bbd53cee43376361576694e85acf5c13a8db5538e1182085c17fd937681cd0b7d57595dd8873aa01124127bcf239fe04aecae7233994f89fef73da28f9311dcbe7ce524cafa65dc4cd2f198f26967964015e3c12755e7527df91e254dc853dd4d", @ANYRES64=r9, @ANYRES16], 0xb4}}, 0x20000054) (async) newfstatat$auto(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x8000, 0x1, 0x878c, 0x5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, 0x200, 0x9, 0x25, 0x7, 0x80000001, 0x6, 0x9, 0x4, 0x5}, 0xfff) (async, rerun: 64) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x28542, 0x0) (async, rerun: 64) socket(0x1d, 0x5, 0x1) 13m33.42809143s ago: executing program 4 (id=1975): ioprio_set$auto(0x2, 0x800000000, 0x8) mremap$auto(0x200000004000, 0x4, 0x4, 0x3, 0x100000000) mknod$auto(&(0x7f0000001040)=':,\x00', 0xca, 0xfffffffa) r0 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r0, &(0x7f0000000040)=""/4096, 0xfffffe82) r1 = socket(0x9, 0xa, 0x4e97) getsockopt$auto(r1, 0x3, 0x2, 0x0, &(0x7f00000000c0)=0x1) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000001300)=&(0x7f0000001080)='\x8c\x82\xa5') 13m32.434522016s ago: executing program 4 (id=1977): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x12d981, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r0, 0x4c04, 0x0) 13m31.777655636s ago: executing program 4 (id=1970): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x8, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0xa, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r2, 0x4, 0x7ff) ptrace$auto_PTRACE_SETSIGMASK(0x420b, r2, 0x8, 0xa) ptrace$auto(0x3, r2, 0x380000000000, 0x3) r3 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x10, 0x2, 0xc) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, 0x0, 0x301, 0x70bd29, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0xc, 0x2, 'nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) r5 = openat$auto_fops_u32_ro_(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/netdevsim/netdevsim0/ports/3/bpf_offloaded_id\x00', 0x20082, 0x0) write$auto(r5, 0x0, 0x85) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r4, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x6000c010}, 0x4000050) r6 = openat$auto_fops_ulong_ro_(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/ieee80211/phy7/netdev:wlan0/stations/08:02:11:00:00:01/rx_fragments\x00', 0x14000, 0x0) ioctl$auto_FS_IOC_UNRESVSP(r6, 0x40305829, 0xff) write$auto(r3, &(0x7f0000000000)='-\x00', 0xfdef) madvise$auto(0x40, 0x4, 0x800) r7 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000080), r0) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/misc/hw_random/rng_quality\x00', 0xa001, 0x0) write$auto(r8, &(0x7f0000000000)='/sys/devices/virtual/sound/ctl-led/speaker/card2/detach\x00', 0x7fffffff) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="32ba9008a677269215d79c5e85a9fb9f2066a77cbd4c669ca7f035b71ffce3fa1b7d456f65c627e05a0db7470c59a3c2d5e4003e00118118be344af29a763b6bc9e5da", @ANYRES16=r7, @ANYBLOB="000427bd7000fbdbdf250100000008000b0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4044010) 13m31.518251399s ago: executing program 4 (id=1971): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) getsockname$auto(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x42}, 0x103}}, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200c0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x11) r2 = bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f0000000180)=@test={r1, 0xa9, 0x0, 0x3, 0x0, 0x3, 0x0, 0xff, 0x480, 0x80000001, 0x3ff, 0x1, 0x9, 0x7, 0x1}, 0x80000000) process_madvise$auto_MADV_POPULATE_READ(r2, &(0x7f00000000c0)={&(0x7f0000000240)="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", 0xffff}, 0x4, 0x16, 0x3) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x101d0, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 13m30.949327166s ago: executing program 4 (id=1976): socket(0x11, 0x80003, 0x300) (async) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x5, 0x1102000000e983, 0xde, 0x13, r0, 0xc) (async) r1 = socket(0x18, 0x3, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) r2 = fcntl$auto(0x0, 0x408, 0x100000) (async) close_range$auto(0x2, 0xa, 0x0) r3 = socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) (async) mmap$auto(0x4000000000000000, 0x0, 0x1, 0x1ff, r3, 0x8000) (async) socket(0x2, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x50) (async) r4 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r4, 0x0, 0x401006, 0x4015, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) sendmmsg$auto(0x3, 0x0, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/hung_task_check_interval_secs\x00', 0x88542, 0x0) (async) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) ioctl$auto_XFS_IOC_ALLOCSP(r2, 0x4030580a, &(0x7f0000000080)={0x1, 0xf109, 0x7b, 0xeb0, 0x1, 0x0}) bpf$auto_BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000180)=@link_create={@map_fd=r3, @target_fd=r1, 0x8, 0x1, @uprobe_multi={0x7, 0x404e18a3, 0x401, 0x3, 0x2, 0x80000000, r5}}, 0x1) (async) mprotect$auto(0x0, 0x806121, 0x8) mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000) vmsplice$auto(0x1, &(0x7f0000000000)={0x0, 0x5}, 0x6, 0x8) 13m30.609975492s ago: executing program 34 (id=1976): socket(0x11, 0x80003, 0x300) (async) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x5, 0x1102000000e983, 0xde, 0x13, r0, 0xc) (async) r1 = socket(0x18, 0x3, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) r2 = fcntl$auto(0x0, 0x408, 0x100000) (async) close_range$auto(0x2, 0xa, 0x0) r3 = socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) (async) mmap$auto(0x4000000000000000, 0x0, 0x1, 0x1ff, r3, 0x8000) (async) socket(0x2, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x50) (async) r4 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r4, 0x0, 0x401006, 0x4015, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) sendmmsg$auto(0x3, 0x0, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/hung_task_check_interval_secs\x00', 0x88542, 0x0) (async) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) ioctl$auto_XFS_IOC_ALLOCSP(r2, 0x4030580a, &(0x7f0000000080)={0x1, 0xf109, 0x7b, 0xeb0, 0x1, 0x0}) bpf$auto_BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000180)=@link_create={@map_fd=r3, @target_fd=r1, 0x8, 0x1, @uprobe_multi={0x7, 0x404e18a3, 0x401, 0x3, 0x2, 0x80000000, r5}}, 0x1) (async) mprotect$auto(0x0, 0x806121, 0x8) mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000) vmsplice$auto(0x1, &(0x7f0000000000)={0x0, 0x5}, 0x6, 0x8) 6m1.076970385s ago: executing program 2 (id=3652): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/reboot/mode\x00', 0x501, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x18, 0x800, 0x6) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x40012, 0x0, 0xd, 0x0, 0x1f, 0x101}, 0x28}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100000000) clock_adjtime$auto(0xd, &(0x7f0000000340)={0x94e, 0x0, 0x3, 0x1, 0x5, 0x8, 0x7f, 0x0, 0xfffffffffffffffe, 0x1, 0xff80000000000000, {0x10000, 0x80000000}, 0x4, 0xf3, 0x6b, 0x0, 0x0, 0x5, 0xfffffffeffffffff, 0xfffffffe, 0x3, 0x7f, 0x8}) socket(0x2, 0x1, 0x103) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0xa901, 0x0) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, 0x0, 0xa040, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb1\x00', 0x20000, 0x0) shutdown$auto(0x200000003, 0x2) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000200)="ae", 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f00000000c0), r1) setresuid$auto(0x2, 0x7, 0x8080) swapoff$auto(0x0) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r2, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="54d20000", @ANYRES16=r3, @ANYBLOB="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"], 0x54}}, 0x801) 6m0.454697287s ago: executing program 2 (id=3654): close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x7) bpf$auto(0x0, &(0x7f0000000100)=@enable_stats={0xfffffffc}, 0x6f4) pidfd_open$auto(0x1, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, 0x0, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) sendmsg$auto_NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00042dbd7000ffdbdf251200000008002c0006000000050008000500000008000300", @ANYRES32=r1, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000850) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/smbd_max_frmr_depth\x00', 0x40302, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) msync$auto(0x200000, 0x2000000005, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_to_hsr\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fddbdf250c000000100003800400038008000400", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=r4, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x24004840}, 0x4000000) r5 = socket(0x10, 0x2, 0x4) r6 = setfsuid$auto(0xee01) sendmsg$auto_NL802154_CMD_SET_LBT_MODE(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, 0x0, 0x200, 0x70bd25, 0x0, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x6}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c040}, 0x40) setresuid$auto(0x0, r6, 0x0) msgctl$auto_MSG_INFO(0x8, 0xc, &(0x7f0000000440)={{0xb, 0xee00, 0x0, 0x5, 0x3, 0x9, 0x10}, &(0x7f0000000380)=0x80, &(0x7f00000003c0)=0x10, 0xb, 0x1, 0x8000000000000000, 0xb8, 0x4, 0x3, 0x1000, 0x4, @raw=0x7, @raw=0x7}) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000001200)=ANY=[@ANYBLOB="b0060000", @ANYRES16, @ANYBLOB="100029bd7000fddbdf25000000000800050060dd01007e0608800800b28004002c80dd0d9d4b401c433837d42d09903bee546253fcc438872481e29e1400498008000700620e00000800ce00", @ANYRES32=0x0, @ANYBLOB="0501318008007d00ffffffffe401e9f62612ac8c9006efbccc8506f87cca9b38b6d8d69e53952ad3c9741e6b2faaa14d583f12f60b030b279e215e735b24ef3dd3e5825bbc9d1e2aa99852d94ab30b4acb03b4ebf1dfb1820fc03a2db56add2c2280e8cd458324377153263dc43ce29827f3bff389ccd691cd9e7070ffe9062efd6e80099a3fadc405021b3a68f84d4c457e2083d766ce8521f5ea21aee32c144b2fb945fa62f248742016a96c78640644b27a27d3e5d3bfe444c2ba2164912d169abf53ab2c5a555cba3f5c9cdf3a8d4c12974162806e793984a5aff61fca07defbcd76451ddba8cef53029b8ee8a860cc3e94da508f6f968465133f601ad48a1d8fcf2ee0000009504328031c4bd80fc0f5c4c56c2af4c6717b98e96c446639462e0ce2c33c6fdd89dc9182ba75447b1b9ec90cfe270aeee8356f094a1f371645abe0aae063e733f65708663f552e46c7d676007419e05b7a97d819ee485590c967d0830890244fe59249d52e55c6066f2c72198910e507f87e475935aed2f879c8b6eb16b3efaedad12554ab0a44695aeffe4561696d227b7cca39cb7f5f350bce3f496e693beccccff213d5f519d93d025fffed50024f5a7067b7d63841313af52cdfeede27f753dbeb3e2e7c281afe5f3c9f8403969ac98f693d0e4e911e30792f846ba11584ce2b3935fdc26fbe52391122d5336e81b9c928d86d7b9578b3be5663b2e7e7bf62de6b91b99e49476d16057cc52b9aca880c63d10eac3aa338cc132ace6e95d94dccc2b4ebf75d794c68f8e660e217615c3591a93bf480653ef480d059941fefcda6cebbee23aab9828d61c6bd8660842f1e462a37a0c93d2a5f573750287b63c0396604ff5454d56decfdc986ed12298bcbd4c9100004a07338e9c125ba72506d406b5121ec5708dcb35470bcf95e8d33f865d0e7ae41874398a2877ba1d0412f209c45d1ff7789152c3aecbd567cdc365170664049106e9314fbbcefb2a72ea7b17a03732b9eb7ef192cc3df852c2b28cb5744a9457d3aa08499e5fec67438c55261cbbdb80d74f41f81de8b9517f258fd9aad54b8aa1f87735c3ce041e72ef0db4391a22ba0000000000010000000000000000000016695929ab8c398be1b6d3daf9a7d41cb4a6014cb4191473d20ac3bbcb4f14fb069a3a4af1f555a7723ef1eb8572db475c6bbaedc73a52ec62dc3907ae64d6632aaefa3cbce039bcae020cc7cef9f5b1d5147989a4ccb43538ea4e401105c7c0ee4419e9a33d8b96b298baa7c877196dddcf1e9309a88771401b4b89916ac987bd5b778be8a0a86d851a4376e63f8fa4f7ec48fe3cce27d0dfbb57f74f6a2a4fe718112361142e53b9dd611d53478e002cda5c0e0269580800bf00", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="04000300"], 0x6b0}, 0x1, 0x0, 0x0, 0x800}, 0x40041) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x0) 6m0.334403385s ago: executing program 2 (id=3655): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) unshare$auto(0x40000080) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000013c0)='/sys/kernel/mm/transparent_hugepage/hugepages-512kB/stats/shmem_fallback\x00', 0x101700, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/4096, 0x1000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) r2 = epoll_create$auto(0x4) epoll_ctl$auto(r2, 0x1, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) setreuid$auto(0x80000000, 0x7fffffffffffffff) removexattr$auto(&(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)='\x9f#\x00') io_uring_setup$auto(0x310, 0x0) io_uring_register$auto(0x2, 0x9, &(0x7f0000001040)="ff5b0acd41474dd9acd591f185b8c3e8f56d559f0100ba2a52f4f902ccac2abd", 0x3) io_uring_register$auto(0x2, 0x1, 0x0, 0x0) process_madvise$auto_MADV_WILLNEED(0xffffffffffffffff, &(0x7f0000007900)={0x0, 0x4}, 0x9, 0x3, 0x0) sendmsg$auto_NCSI_CMD_PKG_INFO(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x490}, 0x1) sendmsg$auto_SEG6_CMD_SETHMAC(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4020040}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x6c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8000}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xf9}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xc7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20}, 0x20004040) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1b0026bd7000fedbdf250300000004000800100003800c00158008000100", @ANYRES32=r3, @ANYBLOB="12000100898771f1907c1356256daced2ad9000004000280"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800) 5m59.921767062s ago: executing program 2 (id=3657): mmap$auto(0x0, 0x2020009, 0x3, 0x2000000eb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) read$auto(r0, 0x0, 0x9) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x5602, 0x1) sysfs$auto(0x2, 0x4c, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$auto_KEYCTL_WATCH_KEY(0x20, 0x553c, r3, 0x200, 0x9) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRESHEX=r4, @ANYBLOB="01002dbd7000f9dbdf250100000008000a0008000000050007003b000000080009"], 0x3c}, 0x1, 0x0, 0x0, 0x20040044}, 0x48080) 5m59.830450728s ago: executing program 2 (id=3658): close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/all/mldv1_unsolicited_report_interval\x00', 0x1500, 0x0) (async) socket(0x11, 0x80003, 0x300) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) socket(0x18, 0xa, 0x1) (async) socket(0xa, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttynull\x00', 0x201, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x826c2, 0x0) (async) socket(0x2, 0x1, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyx6\x00', 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/ip6_tables_matches\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/190, 0xbe) (async) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/available_events\x00', 0x200000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x80002, 0x73) ioctl$auto(0x4000000000000c8, 0x400454d0, r1) 5m59.529959793s ago: executing program 2 (id=3659): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x8, 0x0) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) (async) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socketpair$auto(0x1, 0x8, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_supply_map_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x40283, 0x0) socket(0x29, 0x2, 0x0) (async) r1 = socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) (async) ioctl$auto(0x3, 0x400454ca, 0x38) socket(0x2, 0x80002, 0x73) ioctl$auto(r1, 0x8915, 0x24) fcntl$auto(0x8000000000000001, 0x26, 0x8) (async) fcntl$auto(0x8000000000000001, 0x26, 0x8) fcntl$auto(r0, 0x7, 0x4) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) 5m43.711174762s ago: executing program 35 (id=3659): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x8, 0x0) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) (async) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socketpair$auto(0x1, 0x8, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_supply_map_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x40283, 0x0) socket(0x29, 0x2, 0x0) (async) r1 = socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) (async) ioctl$auto(0x3, 0x400454ca, 0x38) socket(0x2, 0x80002, 0x73) ioctl$auto(r1, 0x8915, 0x24) fcntl$auto(0x8000000000000001, 0x26, 0x8) (async) fcntl$auto(0x8000000000000001, 0x26, 0x8) fcntl$auto(r0, 0x7, 0x4) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) 31.152809067s ago: executing program 1 (id=4983): prctl$auto_PR_GET_FPEMU(0x9, 0x96c, 0x7, 0x7ff, 0x200000) ioctl$auto_XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875, &(0x7f0000000000)={0xffffffffffffffff, 0x5}) ioctl$auto_SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000040)="a92a07b1a884913cb5c5ca82cb7a2892a59b0a3ecf4ca6b38aab5e674a53dff4183c1a58e7f4bc4047b6d665b871bac7f6206b69596a2e590c161a1b23f391515449b23795fd7ae3f88675656d82caa857e096fe7a592bb541ce429621a6c35b200d") write$auto_ima_measure_policy_ops_ima_fs(r0, &(0x7f00000000c0)="5469cf61dd762661e356be6dc53886470a2faaf14dee7efbb146fd388869a5e7fae1f5e2af6534b2", 0x28) stat$auto(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x8000, 0x9, 0x7, 0x6, 0xee01, 0xffffffffffffffff, 0x0, 0xec8, 0x0, 0x9, 0x1, 0x200, 0x6, 0xb01, 0x8, 0x6, 0x5}) statx$auto(r0, &(0x7f0000000100)='./file0\x00', 0x60, 0x80, &(0x7f0000000240)={0xf1, 0x8, 0x4, 0xd845, 0xffffffffffffffff, r2, 0x5, 0x2, 0xf, 0x1, 0x4, 0x6, {0xec, 0x7}, {0xffffffffffff3adf, 0x3d}, {0x5, 0x8}, {0x7fffffffffffffff, 0xff}, 0x8056, 0x2, 0x6ca, 0x38, 0x0, 0xd8, 0x1, 0xaeb, 0x0, 0x9, 0x4, 0x1, [0x2, 0x401, 0x7, 0x101, 0x2, 0x0, 0x81, 0x7, 0x4]}) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x400000, 0x0) write$auto_proc_oom_adj_operations_base(r0, &(0x7f0000000380)="1c921c735a3db388637bbcfbbc07a935fa486c", 0x13) r4 = openat$auto(r0, &(0x7f00000003c0)='./file0\x00', 0x10001, 0x7ff) write$auto_fops_x64_ro_(r4, &(0x7f0000000400)="11eb8d8105fcead01e95466023d4988bfa3be5e1d50057e77064f3310e3c2533a94f6c11d387ba13037dc1a3d4396fe7183efed5aec9aa7825f2c80258b175199f17b2b25e45c76fdfbea89707b4e6b6538c716b8bedd685a3fcde9dbb20309ff43583183d21b6a4cdf305da961891a146bc510cfbb57be32a8de87f7e567cb37e973805a2722edd4cc1c4aca24e58d13c241e84652875d7803fb27943879aa2dbce7c0cc96498a993b748bcae2a854a7214cb8a373bc6a00137d4", 0xbb) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/radio25\x00', 0x24000, 0x0) prctl$auto_PR_GET_FPEMU(0x9, 0x8001, 0xff, 0x7, 0xfffffffffffffffd) r5 = fanotify_init$auto(0x6, 0x8001) prctl$auto_PR_GET_FPEMU(0x9, 0x8, 0x2, 0xa, 0x7) ioctl$auto_SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) r6 = semctl$auto_GETPID(0x3, 0x2, 0xb, 0x101) r7 = semctl$auto_GETPID(0x2, 0x1, 0xb, 0x2) r8 = getpgrp(0xffffffffffffffff) r9 = clone$auto(0x7fffffffffffffff, 0x7, &(0x7f0000000540)=0x1, &(0x7f0000000580)=0x5, 0x8000000000000000) sendmsg$auto_OVS_DP_CMD_NEW(r4, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x84, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r6}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x2}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r7}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0xe0000}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r8}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8}, @OVS_DP_ATTR_IFINDEX={0x8}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r9}, @OVS_DP_ATTR_NAME={0x2d, 0x1, '/sys/kernel/debug/tracing/dynamic_events\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000811}, 0xc080) r10 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sg0\x00', 0x48080, 0x0) r11 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000780), r0) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000001a00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000019c0)={&(0x7f00000007c0)={0x11cc, r11, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x8}, @NL802154_ATTR_COORDINATOR={0x119f, 0x1e, 0x0, 0x1, [@typed={0x8, 0x36, 0x0, 0x0, @u32=0x9}, @generic="2941132f5c91a5a929c5f11b6202e18b4817ff8dc5ee1fe88feced1bbc57bbac94e40ee71901397f86139983b82feb403d148cf4bdfd3301eedca21c0feef4f668b04e62ffe762cb1908fe29e4c9bce4e95b4fa886a27dec6cf1f0d88455c037fe717ebf6e36ef08cd20a2dc18d036d55be6185c17d62134ab138ee78a15c68faabe492615af82fe9f7304203ae67b4a15a59ef054bdc2cb147cdf3a20fd16f6209e3d86d0ad1f739ed5ba1f", @generic="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", @generic="af3a22c8bf9465e9e738d2555949f1b69bd96ad99cc051", @generic="4294bd67f9e6d3b2ae2e6e8210a51cf9945bf81cc9ecc1860a06d9ee0f77e5ae2d9653f3f577f7877dd14675b190f4fa9c09bb5b0e8adc08328f0c3a5dcb9d1e5fa8271e4ac2ef1b0090556a7636476938e9d9ab13e84a042d7e3a839aea3563b5340b6232907a07788504a69b7d21f1598ef5d0248b3303e1df3b9ab833e154763d", @typed={0x48, 0x10a, 0x0, 0x0, @binary="e0fde3f176ca86b38dec71a6e4e9e251674df677abf2b5ab7850276433863193ed5e22feb068f2dc2fd3c3faa21a696002f0bb83e717d16efae34de84de6943ae229214c"}, @generic="57e7d33d8602"]}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x6}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}]}, 0x11cc}, 0x1, 0x0, 0x0, 0x20040a0}, 0x4000000) mmap$auto(0x3, 0x5, 0x31d147a0, 0x10, r10, 0xf4) chdir$auto(&(0x7f0000001a40)='./file0\x00') r12 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/tracing/trace\x00', 0x20c702, 0x0) setsockopt$auto(r12, 0x7, 0x401, &(0x7f0000001ac0)='&\x00', 0x4) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000001b00), r0) shmctl$auto_IPC_STAT(0x4, 0x2, &(0x7f0000001c80)={{0x0, r1, r2, 0xf733, 0x9d, 0x3}, 0xff9, 0xc, 0x57, 0xffffffffffffffc8, @raw=0x8, @inferred=r8, 0x7, 0x0, &(0x7f0000001b80)="2f45a64f57a56d73bde6a2234135238a4322b6816144cf7787a7f15daa6cdb183b1362400fe8b4357350b4f2af827c8bafdb1bdcb003fdca76ef734da1bf53d05e13f1766750b79601e7bce2a826f76dfea6ea5284ed4b966d9cf93344a99c61194c003f16e6278fbd2598feadf1e21730498386f410faa7bcdecc903d5f305b1b068b54622b59c135bb3f84d7f7", &(0x7f0000001c40)="ddae"}) sendmsg$auto_NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000004480)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000004440)={&(0x7f0000001d00)={0x2730, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x7}, @NL80211_ATTR_S1G_CAPABILITY_MASK={0x4b, 0x129, "e20afbeb94b150630658d299351aa9216e5c667e154cccce40945038708abcfbfce956e63eb6329dd3c090f058cf4ca071cb346c3bd3433cb7f81ead2bb4d43b722523ed84ffbd"}, @NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x7d, 0x0, 0x1, [@typed={0x6, 0xf8, 0x0, 0x0, @str='^\x00'}]}, @NL80211_ATTR_COLOR_CHANGE_ELEMS={0x12c0, 0x131, 0x0, 0x1, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x119a, 0x6e, 0x0, 0x1, [@typed={0x8, 0xae, 0x0, 0x0, @fd=r12}, @typed={0x8, 0xa2, 0x0, 0x0, @uid=r3}, @generic="fbdaa71e4295d782551f172970ec37955e656f8387369310eefe9d978953f4d516850c806956eca9d1c0129a226c5b5ff10cb5704ddc9fb67ee22698cba3fc8d314a9ec7841eb6fbc9606d38b8c504d5abce085f3c53f264c115b3279b994b95f40c915612bd8a7c157e86d82deba3571e1e31108767fa8da1383c98f1bbb83c8466e8380d34ee4d8b75e4994f6ea6b966d45508a97c5087a0ec", @nested={0xa8, 0x114, 0x0, 0x1, [@typed={0x8, 0x120, 0x0, 0x0, @uid=r13}, @typed={0x8, 0xc1, 0x0, 0x0, @pid=r9}, @typed={0x8, 0x25, 0x0, 0x0, @uid=0xee01}, @generic="443de990bd5eef5903f69a55d6d0b04258c2b95e855b133dd58263018e5c3cd4270bd3a8cdff2c073e2ef9517c615c43e7c0f0dcbcab487565af56424d14b02058ec473fa0fbba7f00e7ea0b98114e2d87b8d0516b7d60ca986d298027c9f0e685bce3a28be9e621a40285b32cf1de947aac371314462dbe5347d8f90f9233352c59114bffd87294", @nested={0x4, 0x71}]}, @nested={0x44, 0xa1, 0x0, 0x1, [@nested={0x4, 0x119}, @typed={0x8, 0x119, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x30}}, @typed={0x14, 0xaf, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0x82}, @nested={0x4, 0xc2}, @nested={0x4, 0x4c}, @nested={0x4, 0x10d}, @typed={0xd, 0x1, 0x0, 0x0, @str='/dev/sg0\x00'}]}, @generic="b3f802804721f6c244641ff28d5c03c913bdaf17418044a679fabe3fbff7136ee9ab587f470c48b785ea5ab173c35d94f71a2b0ba5a94e6fdad7bc1cdb649aa9c6408f99c2bed28483d231b3a059a417628b5e4d5c14f2c783c0e6ea4e2bd57379e866214374ea4ceb1985988b39a43c66e9b145f70e9a65952c425fda9065037b61d498006cb244b88dd6db831a706d03a8a8b02899435818c216918216d08a78944bb0bcfb05b670d6f37e554fab4c83fa2021f81aef1fa058a6c52b804db834b9d104aa9a0986a4bbc926a210cdd7108677a0b96faab7b8a057cee783b6a57c91057258c0e351a475ff7e78f997990ea7045804bc0593e2b5201bdad4ab5b5d8ea3f67a277af693325639de3d642c4ef37dda774324d471a450a93661637fe50557b4391b6f2ce020296efb8ad40891948ab941a80248ed940c21cd8b9d373fde22fc5abc6ab6f81f14a5ad99c28902c93629ee988f82c7dc94eb1126b4b755370dc14feb702f9caacbb9921b2a017ab7166072c0d64690d2d9767547e5ecb1cc98078845234a85ed19899f7b8c1f837b49bfa4987d01724046a72cee98d1379b16d2315062333f9e7efa330dffb6ac1c96d164e9ede34beb832b916a96d80ad742f91b08ac2354cdb1b8102a58bf4d66c2f628bf0df10d28997722512dd45c7f7aec59ce64b64de7df9e28ea54599382e1255fd31d570413e29bf4502dddc8801da2bc7481425df8dda29d1c19f1dfc078ea2fa2b844495283af71b5662ec14686f4173155dad9bb9e88c96e41fb5114b47c367173e4ed49b2fb76d773e30e3ca764a7a44134e2145ee6256d095e4af8f8181a354911b9d0d3f848a42b768205497d4be55bd3e6e6cf224814f0c774054e4f419492ea2a5ae98ab1a58a14acd2375e6dbb775b30ea844d39d2dcdd07dcd73eb1d6b4fe22420af5ed3924536012140c7d771d01d3a3f4e700d006fb5c95e873e62318e5f32588cc250881799f133eda454e36d8fdd1840e6536a6fdc1bc1c3908b56d424f962c8c49762ed32122ffc262da04c67fe4031c9293bf307d0530a3859c277d78647962b4f975cdeedf339e21658a8e2ef89138ea9f9cb1d7e9a215bcab94219a03bd0822ead44daab0c4228539295dff137825c03e8d77b538e64063c1e90d7a3189850c7f14bd8d57860d3d19c21759edc72af40d71818b1295ac20ac3824ea023038bad1c866ededef723f952bdc430f09b136acd17969ffdfc1c16fb9cc7737900683ab94d6cdccba886ab1c0730a53c8e51486ae1ba9378c7906700464ef3c0c51d8d70a1cbb29d831fb1c8dac1d36e7b88eb0c3271c963b03a40cf9e4de688e050db4885b326a57385f5752b48fbfdf1ae85009fc31b674b19b1c94c6abd647f9564a2257c95ac4a47e2b00f330691fcc07d695b14f6be1a45be0db7607c68b300b2b65f6cc93d761f3e8d0661cf75eac70b4b022ea85b097870e48d57ab12423a28178a68819e2bd1e69cfe8ef4cbbce337baa22b46da7ece2932b3785988b9b77ed13eaf72f253f0fc87837f55acfb27061d9a73f6e7de6e05b71c72b3c88bb7a22ea3902a8b55121a2ef951cc7a5ce54d3c3a82765d71f15f8d9752fc6be7b669cda93c0f0f4f7f21749938716c05974c5a7e5ea8248f0fadd95aebcbc4f3ebc8869bc57519b331d47a5e6794e2332bee2365414b342f367442d467df02f2f5dba27452d661487e800dfe0cbad8ad61afe7cfc6081b999ccf1417d0e794a90c07264b6cf6914e26c1277c5b12f2481cb33282a34a099757b332a22363a5e0d062c29f5c463775e1b79e1af1afbad8c011126c18cb507be840ccdc38ca5c484b4f12e50352860f6e6bde745a6fec08959487e3a63a453eb738cab1e7e1cd80544614fcc44b42f09c7e659aa1c89b41e2e361e90ef27d2abdc3646f09b6ebc84abe62ec787730d9e4b6bea9fc0bd74735b17d3c223a4be72fdb5c48999d9cfc8b929216e59eb885d583e56d889a7ec7eb9f3148fcca63158b9dc25c3c4119cccd98882343d718f8509bdf5ef9b83e6434c2d09f5cfedfdbce0566c8fe9a986de0387492341032681899321705587a265dc2e3491450d27d6f6a1cd57185bb40e82aed44ac81a0a234a8d644bd0d75e5e166e8e0ded5be21b5270776702bd81fd58d64fe3530dd2949108e047591ef2ecbeca54458c00671c6b155dc018a801bb41896d592be4ed6615d7c05d826cc0acd5bded5f06aad9fb127a84921ceef817d47ca048942749d116747fdb879ee8e0dbda139e3726588beaa35d6070a8b9bf49942dea24c788c693ac9d63e7fa1a2c385c08184d370a94ad93416451e4e116f4d3be5bdc0562dcdbcc9db3d655a80244634bd6db00d86af08476dc711542636cccdd0bbef2e6402131131b1e94c40d2eb230c2a3ba5770e07a85212c233f616537670b9d843e1e5ecfec88578f77dbb1c730708819233b7a6309503714020902b6c2f48139041aee3f34546ed8b528d42994becc100b0401e03b20081f161be7802be65e898e0062f857f1b525ef3fdf8e2a6397950139d9bf4e5d38894d4fa7e50f81aba1874f1c4af6296da37f1bb9bd85cedbe47db9585754cfd6ccfc801f3974bcc81b8c460e8a4035c24170c34afca6d4e82e9dc4054097b616e6abef0d04d0d802af857404cb52775c1e34bbd17055ba9f2b850dd2616f2908ab7fcf1e66ac3e40ad2ef05294d9e863116e3a5e730d21002ff0d66887eb1ccfaf5aec649330908a0b0a9f51492f9265253371998b5dcd32919dc2776721af89da186ff35c7ab836b058a3dbca1a45dea0979b7939f98ab05bf63bd42259856227573005d335895c11767b7ad03c92f82493bbfc17458e9ab391bdf61303f9660aa58eb1565ed1305b9615c2f6d0d6a4ef636349f075fad35c456f56cf87409a3c03f3c729b26b67bd178acdfb2fa4e4dbee2a7edb76548ed3777df1e9a20e8421b202c98d084ee9e508c847bca225a6352b13efad476218ab36dfb685f142f3433ec8999ae0fae2bbc22ecce588f0d408d26ab9614a5cd869cbf089628b6b205dd975443fca819e8d929be493bef295c858548d0bc6b2e81aa8416bd626f6d65b2942b7febba2484901074ae86373bab89035c7783267b6e396f543aeaaa03a1fe57d05c7758194ba57316e14ca09aaa40651cbfc75c7ef414505361d2e6b2abfb68b6e3794d6901238d20871d52fdb0a2a9c9451a9108a357c6600f0adada83a87ff88da22048181f4b2ee0a2e218d2a17d340e219018b87cb76904717fcfae350c99ab0fb137f117ba33f4257dfd01218b5baf7993b858af992eed64c67b9e6e4f1e040cff88e92ed65bd263e10e73a4a862c5d4cd45ff4ea09a882ddab45bd5112941a94a6eba7ac99d70d77a768e2831e57c4fd7790e3f59bed1b42c17922587a4fc8e3f6fe60b9e83a7f8bf90e9f799233ca0da5661b47eaf2396295bf9248788e01c88fce7560b6cbac0ce837461f743f5ed3a4d0e60d0648e19e795966a79d3a975134163c579bc1962607be6fdab7ee5b8115ac1ac82a93de3ed2b5297324b8783ab6741e3297991005927d99fa15ff7c58950580e9a059f38da5df35f78f2fc4e1341c95d5ceb02f8312d3dbac218ae5a854961f436b1a10bab8fca59a0b30ba9a4fb1e32aa740aa8df69c917ec903943aab6f764d4fc698c8b90728431d89f081f64cfb0673632a69448b4ca2e10826cf6aab1f50e479c01fa51a8dc8fcdd8a2f7c30f509ad007958819aa9209a030a156703311603685f4e12e36cd64a47092f6535a76ec2971dc0279d684cd755c61d71c975ddabd2dc8e101bc0a242203b18f68b6fe48ea6955e09cbeba63826d664e03b0554173cbcefff2b750fb90e1f58b55f9314daecd1d272822cd060ff84f4299de22ce0fe4c01466497e51ef6b8dd1fa23fb6acbd51d1d39b0e7e01307f2b23d01d5f9d6ec006dceda6dbb214bb1fa1de07883389bd67485d6f6bbe08612c9817b28a187c5bcfbe32b959b1e800673d0fee50b27fe41a645d03f76607a5818a90f7e961c46f15b8b6531ded01976acabea74856c19cc8a3c431c4d86e33010c2cc861076410d7117f134c2bbc2a2b50eba0d13fefa7e2add0326109def78bba04fc6b99f418755365eb73bb4afe1d95797ed55546c03f1e24fc229142e144b5f02e3a5c98e385790d81592c1824beab04b7db9bd111ed754a6647cea06c1077eb76788c108440a4c71cfe3b52ba7c5087e79f2c24b36458e2af93677d0c97e998552f02f62f934c94dba62029e27af28a57ca676089460fe6dd2a18e8045e443be929a8e620e79166e4870d02f90ef99831d32a4a7ba93e230c1a1b10e85ff087ec0dd1152736c1ae040ca555599643d46e4e4baea3628d2d0c70470d69151457d718e391bdb7d08ed127b0de425bf6a8c28e8372ca019351b0691c6a5a2d704ba748a24a4f41a7d9bbc0f39d50671da201971236e722aaed2b34d711647fc16f2f0beb50a960de536a3e91c379463d9e2ea3ac44820e12e4e4b4764f85aa8c0bc7ce9bee0e7a46476819ac81c4d891b0f7a19d86012711c5af626253e78f6acb559b545bf1b6070313622458cfe8406cf42379066905da4de7b7014567227f819eea088b73c547c4b8fadb70ad71cd900617c620b65630b4e0b2fce64654436868029c44ee9a62d088204a5401faeab31f78d03d4529b37d0d1cade367d949ffed4810e7397ad5b333c5293b699dbf849cc7faa2e79ab9ed7f650c2a49833325014f4c98b0e9c725122b6700ea89b8530e84d535639152df0dd2582f09652c130860fd4479a6ef3a2c637dd78afc0b77d4dbd15fb1979f174579c955c9e97fd02d1a136d05a6556446dd1dd778a18fafc0e18ad06a0dbde14ad146374503d7348890681c5a3ac46602d2b60eba506934541d9037b6b23e770b4088df82d1045a12fe05ad5d12a72412db1e8d7e387a0a9d948bfc3d9e863a641c411be48aed3dd88e18917bbc6bc5c1a2020062fc9cfe57f330c9ca91ea44e7493cbcb56262fbcb63afaaa52f63b10e0dca21a4f258fb4303d3ae3164e5c91756c1b66579e5602cac88547ee9f0d07b496e6860b761309f196dc34b915c84479a4235d2523614b39fbd2936332f94949f8eeea43c0d8bf068afd6dfbfcfa54f2b146b5e2ec4a27db66af51df4f836661ad5513d03fe5ee733aa78edb7cafb55487365377b83f885a5f0f9967246a324ebcf22eb0dbeee1e79c8b6d093d461d48eea87ed8cf967c8a47347883b9c8e09fbaf88933cac9ac30b02321eed8b75cf1f3d103b2a9c107df767df795e8cfa38ffddd8479f7305f12435edd00800d259e9ec830d40a8aa1588e4345d1bf2f178f5e0bb6221281ce184d39a9f8ea1507a37f288abef0863cdf2e13f4311d9525d93ca019446125a9d68e9b1d2b7f513147161b2b00fbdae96985ec5643867f82b3cae919fa6e5da84a5b2f25a5937d8877d8ed68be038ff1ba8a5e0899356157e220bf0a7a0e33d2b7abf737f66e710469085d542e8a4758d8dad9e71429057c69980156648e2e41a4df4af1fd172065314fd3c2b8702eba7f71ae4f3c36afdc17e83dd03f6ff20bf7f48d7944f60c609301519a51f32bf3d6b1278a098b9e78c3c8ed510a6e007ec9edad6d9da1aa961612ab8eebf4fb5fac0507cd90d28b8d84df7c70c47a170eb4f5719771876d1740154a7c1c66fa11f05923b93256c46af77c164259cf0688ca0594f421afc3cc2be2c26bf3a56b0ac49a02dd564f5a3223045acd81523"]}, @NL80211_ATTR_VENDOR_DATA={0xf5, 0xc5, "8288e493e6734dd298a12458a31647c479db07ee33fee0ea2b195a4221959c64eb73cb156d57921c8ce3bd699c362eafc61ef87a897ef1d327de90f34b71707274d73d5fbbdfc152099baea0db2465a3e318f61d11b12ac79be3e778613bde03560ba8ad8850e58e4ba90e90a3a2729910a1ed4fc17c5df38cb8a20514bb65755047b29704b356303a0bb3c07da87e0bc3e4f465971eb955b2aa2328ed42f1386f3e0812a1a7ec03d5495dbe5794f7cbd11181c336b368bced1e36e8a5393d33a3097d004cb32e42903f2716dc48ed8cbebc9abc432440b47fb58e1ae8bc63ce678741d49afeaff11e04b80dffe8e18bde"}, @NL80211_ATTR_WIPHY_NAME={0x5, 0x2, '\x00'}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x10}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x7f}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x40}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x5}]}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_SCAN_FREQ_KHZ={0x13e6, 0x124, 0x0, 0x1, [@typed={0xc, 0x10, 0x0, 0x0, @u64=0x9}, @nested={0xf0, 0x14f, 0x0, 0x1, [@typed={0x8, 0x26, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x4, 0x6d}, @nested={0x4, 0xff}, @generic="d7269f176a4f37e45c1af08b74262db44295fdccd0e8286bdd98073d2c8cd34aabf444f9cb65c6d4a3f45af61377362d7ff127e5f2d32a85eb6c61a2f92837b0d58cb334c9c704a293b60e35e6b963abb207b3c83dd76595c172dfefbfd8c52e02892c009da0cafb8329b72542b1ffa65eb3dd3dec84c5cad25dc95fe73ff2f9", @generic="fb874e147d636f0f56d126f056e7d6c1bca6880a67622a357fb221cfda0c2b55cc4319b113ba274dc778e511f0ab02b4bb6d4ff1c3381880815ce7be97dbc9250dbc0bfcacb23fdba811fc61cf3d77980cb4939ea9ed1ce8f40af555"]}, @generic="f439ca7518ea3f05380b09ad6d7c370a2f5a1b44778f0ca989bcdd2ed15170f8a0e560655eae8d53df8c9c15738b8b8a3664a53cee367c6e328fcaea7044c3eac963b2eace6c2e1cbc7f1fbb1b67b9d009c481b364466491c2181252e5950afee9f13c371533fd85e1a099ebb38f093f71758cf2784559def44a064e25a0c46a2b2626121f656ba761ded9e968ff7c485038cfafd95af130f5717d4fddbea021e1ea5ce98bb27c0a0a67e03b1e9acc399061", @generic="73e59f2ee447ebdfa292ce274b401bcae7239de90974134a5ef9d5c019fec6e96ade079ffcee38988f7277070c34e778cc0036ea02a6533f978c94fde096aa6230faacca0961b71e0377b6bacb10f1ad", @generic="23b2058aa2856d1477b7980cf5ef5f65a68cf4465065fab3cb13cbdaff63d6ab3bd34a6e152116bc2d91c017717f416383c3b4f2072be16775f75acef6a37b253374cc02c12e95da84f9d0c414af48b9c83f54aa709db28006daee3e276cabc8cbdaa29f49022d012b5170ff994fb846006177c08bcafa587655d1a6e203ba800ca98c9c4bf171ad939704bf195d92f87bac89ce2e61cae20e24dbc30ad06e696722f16e77c3b1734c67d5c84b2eaba442ba3c6cee5263933e32f46c3385599f02da974f9ea8e06a", @nested={0x59, 0xed, 0x0, 0x1, [@generic="fe3f4bfc9aa0bc9d287e0eac", @typed={0x8, 0x13c, 0x0, 0x0, @fd=r5}, @typed={0x8, 0x73, 0x0, 0x0, @pid=r9}, @generic="317597fdbe30e06ec986c68a72c059bd6745779638f7fa0cd249a48f4be35b80c0bd69d2ae139322dd21b9d944", @nested={0x4, 0x1a}, @typed={0x8, 0xb, 0x0, 0x0, @u32=0x200}]}, @nested={0x8, 0x5c, 0x0, 0x1, [@nested={0x4, 0x9c}]}, @nested={0xa4, 0x5e, 0x0, 0x1, [@generic="d39c77ea4b165530bd1b91c0dd5f72ec0fd794fde10fdc3b104581d32b48794e779a67a535e732d3a790d83f0a6f6230827975d60382c19b65889eebfc48b38d44dba6effbf892d409cb256db28d644ee90928bdef63120c915acf2c19666108da3c0174fdbc944dd26f6c77826f3ea10083963860b6f75de199bc6a442de2bea709204da27c74b03d5ea193799f573105e50cd0da0ca9d0", @typed={0x6, 0x94, 0x0, 0x0, @str=')\x00'}]}, @nested={0x14, 0xce, 0x0, 0x1, [@typed={0xc, 0x1a, 0x0, 0x0, @u64=0x7fffffff}, @nested={0x4, 0x91}]}, @generic="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"]}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x26a}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x9}]}, 0x2730}, 0x1, 0x0, 0x0, 0x4c081}, 0x0) 30.984676338s ago: executing program 1 (id=4984): close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x201, 0x0) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x4, 0x2020009, 0x65b, 0xeb1, 0xfffffffffffffffa, 0x80000000) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0xa2001, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0) socket(0x2, 0x2, 0x88) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/infiniband_mad/abi_version\x00', 0x20100, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x880, 0x3f) read$auto(r1, 0x0, 0x2) socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) fsopen$auto(0x0, 0x1) fsopen$auto(0x0, 0x1) r2 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x7, 0x0) mq_timedsend$auto(r2, &(0x7f0000000040)='\xcf \xbf+\xd7!\xde\xe9%T\xe1\xa5\xd2,\x83', 0x2, 0x6, &(0x7f0000000240)={0x2000000000000003, 0x101}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_taskstats(0x0, 0xffffffffffffffff) sendmsg$auto_CGROUPSTATS_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040801}, 0x44084) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x3ff, r3}) socket(0x21, 0x3, 0xfffffff9) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) 29.922109635s ago: executing program 1 (id=4987): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x19, 0x4, 0x4, 0x880b, 0x8, 0xd, 0x66b, 0x4, 0x7ff}, 0x6f4) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop10/queue/add_random\x00', 0x80302, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0xc0100, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_SOUND_MIXER_WRITE_RECSRC2(r2, 0xc0044dff, &(0x7f00000002c0)="8a03e3a970d67a39d3b2120b7360d6fa85a261a96aecd0f5eb11fde297aa96ac1b600516c537d4da49b826cdeb71e0330166f4b4ac7a8650a6d8e6b0f8106d31e14225dcdf1cd629979c23013e7159887e4ed4e30a0444e24568f71d0da73ac5f908b0c8fe3bf85a0d0058530bf3d52fc2c61153a87310a2d8a12d799fe6de1109c4c840da7e03284e3992c56684dcd5a3db6e87163227d96258851b5b98") io_uring_setup$auto(0x6, 0x0) timer_gettime$auto(0x401, &(0x7f00000000c0)={{0x6, 0x27257ca}, {0x7fffffff, 0x100}}) ioprio_set$auto_IOPRIO_WHO_PROCESS(0x1, r1, 0x9) mmap$auto(0x0, 0x8, 0x1, 0x13, 0x3, 0x120000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/protocols\x00', 0x100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000e80)=""/199, 0xc7) writev$auto(r4, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000480), r3) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='\f\x00', @ANYBLOB="13002cbd7000dddbdf2502000000080003", @ANYRES32=r8, @ANYBLOB="0800610001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/scsi/sg/allow_dio\x00', 0x101181, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000540)="8dabc6760e11b0145de35343f846b0b6d87043b06540026189bdffa946db0a59585afac2133c728ebdb331a873e7d1ac4f6c29ca15eba84f8fa6e4bed6b9ba202e5267ad94ce090b5e04691ea4390f3d8f9c4af4ad6ac7c8eb00cb686a59fb1649c73a31beba686b009a79f09cf387ba7b3176310b4d22c868e8d230376054764ff392f990cdb751ee5b7f1feb3b06bd42009d3c73b242add60223fa6ab54607ec0ef789b62c58d692512fb16d349daef5e65c6f993bc5d37c14168176cde13626d576390f1357845bcdc6c3c79de41022775b5d92efaab3d5213432b27f480ea184") write$auto(0x3, 0x0, 0xfdef) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r6, 0x0, 0x0) 29.289705338s ago: executing program 1 (id=4991): mmap$auto(0x0, 0x400008, 0x4, 0x40009b72, 0x2, 0x8000) io_uring_setup$auto(0x89, 0x0) (async) io_uring_setup$auto(0x89, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x1, 0x0, 0x80000000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffff9}, 0x6, 0xe27c, 0x8) (async) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffff9}, 0x6, 0xe27c, 0x8) socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x8000) r1 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0xe983, 0xdf, 0x400000000000eb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0xe983, 0xdf, 0x400000000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_create$auto(0x3e) (async) r2 = epoll_create$auto(0x3e) epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0) bind$auto(r1, &(0x7f0000001100)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x51) io_uring_setup$auto(0x1d48, 0x0) (async) io_uring_setup$auto(0x1d48, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x13e, 0x0, 0xfffffffffffffffd) socket(0xa, 0x3, 0x3a) r3 = socket(0x2c, 0x3, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) sendmsg$auto_TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0xc050) (async) sendmsg$auto_TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0xc050) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff5f5ffffff00"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 27.676945365s ago: executing program 1 (id=5000): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x2c402, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0) sendfile$auto(r1, r0, 0x0, 0x10000) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.4/usb5/power/level\x00', 0x129882, 0x0) sendfile$auto(r2, r2, 0x0, 0x7) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) r3 = socketpair$auto(0x22, 0x3, 0x8000000000000000, 0x0) shmctl$auto_IPC_INFO(0x28, 0x3, 0x0) read$auto_proc_auxv_operations_base(r3, 0x0, 0x0) ioctl$auto_XFS_IOC_FREESP(r3, 0x4030580b, &(0x7f00000000c0)={0x7bfa, 0xffff, 0x8000000000000001, 0xc63, 0x3, 0xffffffffffffffff}) shmctl$auto_IPC_SET(0xff, 0x1, &(0x7f0000000380)={{0x4, 0xee00, 0xee01, 0x0, 0x9, 0x9, 0x9}, 0xb20, 0xfffffffffffffffe, 0x7f, 0xfffffffffffffffd, @raw=0x7, @inferred=r4, 0xfc, 0x0, &(0x7f0000000840), &(0x7f0000000800)="81726da2c24df37e85f1ad146d92ae4024799cc6ebc5cd4119eeef3b8d91d2a15959582bb9abf959be670d19201ad75f3b07515669fa6b6b54b6ef26fb665bd22e83240da65aab1d2fdad7a39316bd1bed4c0fdc03bfa44e3b9020f9c28c607ff13c81a617aa9c27643331696d6c5372b069482cc33bbdccb2195f094b3fa085766916b61ec3d6e9b97f79e7277d704458dffd081bff42438deea3ce1951adefdbdf139b1d10ff7ef55ddef2ae86fc24f778b4e65f7a3109f3f373a086d802bd228ef22e1bad5ce4b303d8f31e01"}) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x400000000000003, 0x81, 0x53, 0x110, 0xfffffffffffffffa, 0x9) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x42000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000300)={{@raw=0x6, 0x0, 0x8001, 0x2, "da14cf93e7670976d4df4660872c34e34ab92824711bacf3578dcec408cf5180d03a4d126edb3169db6d48ac"}, 0x1, @iec958={"28f6a86309b1e098a7dfa272f95c4c28615313f81f02a4eb", "77a2e9b1b0224a8ef0ac25ff0db0b6ec20c55cccbf4e9b253241777363b62fbe19f64f49f5ed0205399a691cb53e4086d6ec9dcbc5173fee439c2db7f3d5f2d4dd2a267a11e3c0cc771cdddef6bdb02a85cf5ea2ecc26fa3fe291d1e45404619547117c0d45a0de14bc3b9c22d705152efa9d2cfb220c6210dd7606723fb4d6d8ea3e197b19203c65d90e3c761870cbd392bea", 0x0, "e8134be5"}, "a8949c7d9c57acd66da4c5f111166031ad47ebfed172b36a28d7b0204e3a90e9a6c41064df45da18212d9c4e61a29b8146bd0c0284d89751eb5c58cb32c2abf739599063c9a0820f08f1c1b3645f00006dcd033a712822785eeb6a2c41b6d7c00f5e965c1d0000000000000000000000000400"}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xe0201, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfffffdef) fcntl$auto_F_ADD_SEALS(0xffffffffffffffff, 0x409, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000680)='\xa1\x00\x16\x12\xf8\x98\xcf\x9b\x87\xf6I}T\x99\xb4\xd8S]\xbb\f\xdaY\xac\xf1\xa2\x98c\x1ds3\xfe@\v\xc2\x90X\x81\xa3r\xfdH\xb2\x0f\x01v2\x13Lo$\xb4d\xf1\'\xa0^\xa9[\x1b\xba\xe6\xd3zkL\xa8s\x8ccT=\xac\'\x93 %\xd4l\xfcfQ=\x10z%\x16\b\xd3\xa9\x11~\x11\x19c\x1e\xde\x0f\x9deB\xb3\xb2\xed0\xab', 0x4) sendfile$auto(r6, r6, 0x0, 0x2) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2dedd65d", @ANYRES16=0x0, @ANYBLOB="210028bd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r8 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="14"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r8, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendfile$auto(r7, r7, 0x0, 0x2) socket(0xa, 0x2, 0x0) 22.965671453s ago: executing program 1 (id=5005): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x101640, 0x0) r0 = socket(0x18, 0x5, 0x1) modify_ldt$auto(0x9, &(0x7f00000002c0)="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", 0x1) getpeername$auto(r0, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_max_time_ms\x00', 0xb480, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8, 0x2, r4}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @HSR_A_IFINDEX={0x8, 0x2, r4}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) openat$auto_supply_map_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x40283, 0x0) r5 = socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') rmdir$auto(&(0x7f0000001040)='}[,&*}\x00') move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0xffffffffffffffff, 0x62, r5) socket(0x2, 0x80002, 0x73) ioctl$auto(r5, 0x8915, 0x24) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/243, 0x11d) syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000080), r0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/tty/tty50/power/runtime_suspended_time\x00', 0x47f01, 0x0) sendfile$auto(r6, r6, 0x0, 0x3) 8.09479782s ago: executing program 5 (id=5083): sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) (async) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0xc48b, 0xe983, 0xd, 0x12, 0xffffffffffffffff, 0x8000) (async, rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async, rerun: 64) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000c00)) mq_open$auto(&(0x7f0000000300)='\x00\x00)A\x00{\x11\xee+\xea\x15\x8f\xc9\xcb\x9bY\x0e\xaen\x94\xd6$\x0f0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8, 0x2, r4}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @HSR_A_IFINDEX={0x8, 0x2, r4}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) openat$auto_supply_map_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x40283, 0x0) r5 = socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') rmdir$auto(&(0x7f0000001040)='}[,&*}\x00') move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0xffffffffffffffff, 0x62, r5) socket(0x2, 0x80002, 0x73) ioctl$auto(r5, 0x8915, 0x24) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/243, 0x11d) syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000080), r0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/tty/tty50/power/runtime_suspended_time\x00', 0x47f01, 0x0) sendfile$auto(r6, r6, 0x0, 0x3) 7.769925447s ago: executing program 5 (id=5086): mmap$auto(0x0, 0x86f3, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt$auto(r0, 0x6, 0x13, 0x0, 0x40) bind$auto(0x3, 0x0, 0x6b) listen$auto(0x3, 0x81) 7.347389668s ago: executing program 5 (id=5089): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x1e, 0x1, 0x0) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) mmap$auto(0x0, 0x4020009, 0xdc, 0xeb1, 0xffffffffffffffff, 0x8000) readv$auto(r0, 0x0, 0xffffffffffffff1b) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) shutdown$auto(0x200000003, 0x2) shutdown$auto(0x200000003, 0x2) 6.194834886s ago: executing program 5 (id=5099): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) read$auto(r0, &(0x7f0000000000)='\x00', 0x91e2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event0\x00', 0x820000, 0x0) close_range$auto(0x2, 0xa, 0x0) sendmsg$auto_NL802154_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x40000) 4.990821353s ago: executing program 5 (id=5095): mknod$auto(0x0, 0x7, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x2e99) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D0\x00', 0x103, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x8000000000000001, 0x0) mmap$auto(0xfffffffffffffffe, 0x2020009, 0x3ff, 0x6b1, r0, 0x582f) r2 = ioctl$auto_NS_GET_TGID_IN_PIDNS(r1, 0x8004b709, &(0x7f0000000300)=0xf) prctl$auto(0x1000000003b, 0x1, r2, 0x0, 0x5) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0xa, 0x2, 0x84) bind$auto(0x3, &(0x7f0000000040)=@vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@nl=@kern={0x10, 0x0, 0x0, 0x42060040}, 0x54) getsockopt$auto(r3, 0x84, 0x71, 0x0, &(0x7f0000000280)=0x22a) madvise$auto(0x1afd, 0x7fffffff, 0x4) setsockopt$auto_SO_PROTOCOL(r1, 0x7, 0x26, &(0x7f00000002c0)='\\\'\\[/:^*:.*.$\x00', 0x1) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24048084) syslog$auto(0x0, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x4) mmap$auto(0x0, 0x5, 0x2, 0xeb1, 0x401, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x470f41, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(r1, 0xc0105702, &(0x7f0000000200)={0x1, 0x0, r4}) syslog$auto(0x2, &(0x7f0000000240)='/dev/snd/midiC2D0\x00', 0x5) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000340), 0x14080, 0x0) syz_open_procfs$namespace(0x0, 0x0) 4.315251533s ago: executing program 7 (id=5098): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/ptp/ptp0/max_vclocks\x00', 0x103841, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/nullb0/queue/nr_requests\x00', 0x0, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) write$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x10005, 0x1, 0xeb1, 0x40000000000a5, 0x8000) (async) r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r1, 0x40186f40, 0x0) (async) ioctl$auto_UBI_IOCDET(r1, 0x40046f41, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) pivot_root$auto(0x0, 0x0) (async) open(0x0, 0x76bd, 0x12) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/audit\x00', 0xb02, 0x0) sendfile$auto(r2, r2, 0x0, 0xb2d) (async) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) (async) mmap$auto(0x0, 0x200, 0x3, 0xf8, r0, 0x8000) madvise$auto(0x0, 0x2000040080000000, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r3 = socket(0x2, 0x1, 0x0) setsockopt$auto_SO_BUSY_POLL(r3, 0x6, 0x2e, &(0x7f0000000000)='!]\x00', 0x400000) unshare$auto(0x40000080) (async) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000400)='/dev/binderfs/binder0\x00', 0x40, 0x0) ioctl$auto_BINDER_GET_EXTENDED_ERROR(r4, 0xc00c6211, 0x0) ioctl$auto_BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)="fc1c4959f721a2458364a2b1590d19513f344e1b39cecffdd8") (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/firmware/acpi/hotplug/pci_root/enabled\x00', 0x2000, 0x0) 3.765532172s ago: executing program 7 (id=5102): openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_DELAY2(0xffffffffffffffff, 0x80084121, &(0x7f0000000080)=0x9) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.0/usb1/bcdDevice\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000940)=""/4096, 0x1000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pipe$auto(0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x840) write$auto_ftrace_enable_fops_trace_events(0xffffffffffffffff, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) readv$auto(0xca, &(0x7f0000000040)={&(0x7f0000000000), 0x9}, 0x10) socket(0x28, 0x1, 0x0) socket(0x2, 0x5, 0x0) sysfs$auto(0x2, 0x0, 0x0) r1 = epoll_create$auto(0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0xffffffffffffffff, 0x1, r2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vidtv.0/i2c-0/0-0068/name\x00', 0x18b080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001180)=""/187, 0xbb) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) open_tree_attr$auto(r4, 0x0, 0x45, 0x0, 0x2) epoll_ctl$auto(0x5, 0x3, r2, 0x0) epoll_wait$auto(r1, 0x0, 0xe007, 0x1) close_range$auto(0x2, 0xa, 0x0) select$auto(0x4, 0x0, &(0x7f0000000340)={[0x209c, 0x40000000e9e, 0x7, 0x9, 0x33, 0x100000001, 0xa, 0xf, 0x1, 0x6, 0x9, 0x8000000d59, 0x8, 0x100000ff, 0x3, 0x80080001]}, 0x0, 0x0) 3.530645102s ago: executing program 7 (id=5104): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) socket(0x2, 0x80002, 0x73) (async) socket(0x2, 0x80002, 0x73) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x1, 0x15) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) (async) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r0, 0x0, 0x39b8) (async) read$auto(r0, 0x0, 0x39b8) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) umount2$auto(0x0, 0x5345) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f00000002c0)) landlock_create_ruleset$auto(&(0x7f0000000000)={0x9, 0x402, 0x101}, 0x6, 0x0) (async) landlock_create_ruleset$auto(&(0x7f0000000000)={0x9, 0x402, 0x101}, 0x6, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000140)) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000000)) (async) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000000)) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000100)="15") (async) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000100)="15") r3 = socket(0x2, 0x80805, 0x0) set_robust_list$auto(0x0, 0x4) listen$auto(r3, 0x9) accept$auto(r3, 0x0, 0x0) (async) accept$auto(r3, 0x0, 0x0) 1.583136005s ago: executing program 5 (id=5112): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x11, 0x3, 0x9) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, &(0x7f0000000080)="c15a8cae430b6e7f7a89037072d979b8a57afb43d9ca2c078a0ee648cb83c9f84e2270f7e15c5ca8b5b793b542") syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) ioctl$auto(r1, 0x4008af03, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) execveat$auto(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=&(0x7f0000000140)='/dev/rtc0\x00', &(0x7f0000000200)=&(0x7f00000001c0)='ns/pid\x00', 0xff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xc040aed4, r3) ioctl$auto_VHOST_NET_SET_BACKEND(r1, 0x4008af30, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 1.485990406s ago: executing program 6 (id=5114): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) (async) r0 = socket(0xa, 0x5, 0x0) getsockopt$auto(r0, 0x84, 0x7, 0x0, 0x0) (async) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004000)='/dev/audio\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) setresuid$auto(0x2, 0x5, 0x200) close_range$auto(0x2, 0x8, 0x0) (async) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) ioctl$auto(0x3, 0x89e0, 0x91) ioctl$auto_SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000004040)) (async) set_mempolicy$auto(0x2, 0x0, 0x4) (async) mmap$auto(0x0, 0xa00006, 0x100, 0x80000000010, 0xffffffffffffffff, 0x300000000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_PEER_REMOVE(r3, &(0x7f00000110c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, r4, 0x3, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@typed={0x6, 0x2, 0x0, 0x0, @str='\xff\xff'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008105}, 0x40) (async) ioctl$auto_XFS_IOC_ALLOCSP64(r2, 0x40305824, &(0x7f00000000c0)={0x8, 0x0, 0x2784, 0x7, 0x7, 0xffffffffffffffff}) read$auto_vhost_vsock_fops_vsock(r2, &(0x7f0000000a00)=""/213, 0xd5) (async) r6 = waitid$auto_P_ALL(0x0, 0x80000001, &(0x7f0000000100)={@_si_pad}, 0x9, &(0x7f0000000380)={{0x6}, {0x7, 0x946d}, 0x1, 0x3, 0x9b, 0x400, 0x5, 0x0, 0x8, 0x2, 0x3, 0x8d, 0x5, 0x8, 0x3, 0x9}) sendmsg$auto_TIPC_NL_BEARER_ADD(r2, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000b00)=ANY=[@ANYBLOB="e8030000", @ANYRES16=r4, @ANYBLOB="20002abd7000fedbdf25150000000602058004003d002400e9801e00ae004ac5534644cef9f0e1652aa374ec60fe7db1519dd60b6c5dadac00008e0038800800780051892a5eedcf4c7cc9877cdf8a73e9ae8c6ecf8dbc56688354639d6e74fe20450434c50d155afcfb0daa9b87dc414dbdc6a2a8f96c80905236f82c9ab8b22840c786a0aaf114d539a03a60fb7bd80ea050059e21874e9bdb45f6170b9550762f98bc9d09969b0f90f069cdb6f4ba9aa32eed14b95a45a4f3eea53f93a6f8f3dc320c89662b26f54a8364ab58d20066e813e61b992849a803b71a933996866d4ed59d96a8d9d8", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0400f88008001100000000001400160000000000000000000000ffffac14140e04007380000000780004807300cb8004003a806a49d54309a609d8a7ae44d97dd895c6093e4890a7264f2ed3a452237f825f37af4a64fa5d8c104353703e174de27a1b3b7136edaec8ebfc97dc0dd0f7657b277c4f187406e222e4f31a23252572af41ab2c7a2258a9806b9912a5e6971d56c65757850400408004001a8000"], 0x3e8}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x3, 0x800, 0x2000109) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x734f, 0x37, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x3, 0x0, 0x84, 0x0, 0x0, 0x0, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4]}, 0x1fe, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) r7 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)="5dd3b7b1a6056570ead846673ce60b8e048731606a938e7d767c8517021378b686277813318f21a718bd94cf4d382c2c2aa960c1622291f5fdd143ab67e5b4d5d9c4c526ec8a88d7c33aa59f77184aaed48b988880e4a39f3356", 0x7}, 0x4, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x7, 0x2) 1.234077371s ago: executing program 7 (id=5115): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(&(0x7f0000000180)='ip_vti0\x00', &(0x7f00000001c0)='}[,&*}\x00', &(0x7f0000000200)='*-&+$\x00', 0x6, &(0x7f0000000240)="150a77eb14bff792e39dce0d835706df33ce7b63dd2170faa286015c9b072625e018e5ba29d3f5f36f2481843858b0139a15b40bb94c10faa4b8703d9fe4c1a2f6affd11c76ce9fcd495d7e7fbdfa1f48bf244c8e64fae5950acee81e64cd3e8") mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) llistxattr$auto(&(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='\x00', 0x8) mount$auto(0x0, &(0x7f0000000000)='}[,&*}\x00', 0x0, 0x3378, 0x0) 1.233956736s ago: executing program 6 (id=5116): mmap$auto(0x0, 0x86f3, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt$auto(r0, 0x6, 0x13, 0x0, 0x40) bind$auto(0x3, &(0x7f0000000080), 0x6b) listen$auto(0x3, 0x81) 1.189186193s ago: executing program 6 (id=5117): unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) timer_settime$auto(0x0, 0x4, &(0x7f0000000040)={{0xfffffffffffffffe, 0xd3}, {0x1000}}, &(0x7f0000000100)={{0xa04, 0x4}, {0x9003, 0x7ff}}) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x89a0, 0x4) r3 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r3, 0x40186f40, &(0x7f0000000000)={0xffffffff, 0x1, 0xf7d, 0x8, 0x1, 0x1}) ioctl$auto_SNDRV_PCM_IOCTL_DROP(0xffffffffffffffff, 0x4143, 0x0) getsockopt$auto_SO_PEERSEC(0xffffffffffffffff, 0xfffff6e0, 0x1f, &(0x7f0000000000)='/dev/bus/usb/001/001\x00', &(0x7f0000000040)=0x7fff) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x8) unshare$auto(0x40000080) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4a801, 0x0) 712.727089ms ago: executing program 7 (id=5118): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x1e, 0x1, 0x0) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) mmap$auto(0x0, 0x4020009, 0xdc, 0xeb1, 0xffffffffffffffff, 0x8000) readv$auto(r0, 0x0, 0xffffffffffffff1b) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) shutdown$auto(0x200000003, 0x2) 598.326397ms ago: executing program 6 (id=5119): mmap$auto(0x0, 0x7fffffff, 0xe2, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x10, 0x2, 0x14) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x40, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x2, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(0x0, 0x6) r0 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r0], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4010}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) r1 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) getdents64$auto(r1, 0x0, 0x400) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) openat$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) mmap$auto(0x0, 0x1, 0xdf, 0x9b72, 0x7, 0x28000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xb, 0x0) socket(0x2, 0x5, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2c, 0x1, 0x84) 406.853175ms ago: executing program 6 (id=5120): close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{&(0x7f0000000040), 0x16, 0x0, 0x9, 0x0, 0x27, 0xe}, 0x80000001}, 0x54, 0x20000000) mmap$auto(0x0, 0x20005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x2b, 0x1, 0x1) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) accept4$auto(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$auto(0xffffffffffffffff, 0xa, r0) r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0xffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x0) unshare$auto(0x40000080) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/afs/cells\x00', 0x14da2b47b44d30c6, 0x0) rseq$auto(&(0x7f00000001c0)={0x40000012, 0x5, 0x4, 0x1000023, 0x8007c, 0x7625, "26c788a7a5024a9859acd35804093ad080405e5667c1ebdf247f1520d2c4f723c82081928a325dde6dcc8b245461261ffd837bfe42fcffa3d8893fe91794c1a983b7dec4715155f202bcb0489c4e8c9a1391f75a1e4c289bd6c51ca54f1d4e4245266483e19229c2c03a2e9f0d8ee75225bf6c1b74c77da6ee039210b0eb60dbc8d945e4edbed8d3b8c134743fcda117767b7bf446045488eb4f9ace6ed2c74acfe271e1e52561e264e2f2a7eec121826b294c56ced041a3bdb25c71be7e49b18ff1019ace982bc75ca624acdb0f83"}, 0xffff, 0x80000, 0x40000009) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$auto_UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000400)={{0xc, 0x23, 0xa6, 0x83}, "66ac010005000000000068d190eb0d4a4cada7272464294b9183349eef4c1f028fdcc8ecc66fdd02316f064ebd893007abb4c0bbc3b822f66eaf240963110d61771552c03de65800", 0x2}) ioctl$auto_UI_DEV_CREATE(r3, 0x5501, 0x0) ioctl$auto_UI_SET_MSCBIT(r3, 0x40045568, 0x0) r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/set_event\x00', 0x220442, 0x0) mmap$auto(0x6, 0x202000b, 0x9, 0x17, r2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mkdir$auto(0x0, 0x8001) lseek$auto(r4, 0x200006, 0xe) io_uring_setup$auto(0xfffff7fc, 0x0) mmap$auto(0x0, 0xc, 0x3, 0xeb1, r4, 0x8000) 12.321973ms ago: executing program 7 (id=5121): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) ioctl$auto_RTC_UIE_ON(0xffffffffffffffff, 0x7003, 0x0) read$auto(r0, &(0x7f0000000000)='\x00', 0x91e2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event0\x00', 0x820000, 0x0) close_range$auto(0x2, 0xa, 0x0) sendmsg$auto_NL802154_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x40000) 0s ago: executing program 6 (id=5122): mmap$auto(0x0, 0x86f3, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt$auto(r0, 0x6, 0x13, 0x0, 0x40) bind$auto(0x3, &(0x7f0000000080), 0x6b) listen$auto(0x3, 0x81) (fail_nth: 1) kernel console output (not intermixed with test programs): 03.976840][ T6170] [ 104.579268][ T6179] sd 0:0:1:0: PR command failed: 1026 [ 104.601737][ T6179] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 104.611864][ T6179] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 105.705322][ T6188] ima: policy update failed [ 105.782880][ T30] audit: type=1802 audit(1765933560.905:2): pid=6188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.53" res=0 errno=0 [ 106.831093][ T6235] netlink: 28 bytes leftover after parsing attributes in process `syz.3.63'. [ 106.857486][ T6235] openvswitch: netlink: IP tunnel dst address not specified [ 106.913685][ T6235] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input5 [ 107.028209][ T6247] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input6 [ 107.155214][ T6261] FAULT_INJECTION: forcing a failure. [ 107.155214][ T6261] name failslab, interval 1, probability 0, space 0, times 0 [ 107.190167][ T6261] CPU: 1 UID: 0 PID: 6261 Comm: syz.1.68 Not tainted syzkaller #0 PREEMPT(full) [ 107.190197][ T6261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 107.190211][ T6261] Call Trace: [ 107.190220][ T6261] [ 107.190230][ T6261] dump_stack_lvl+0x16c/0x1f0 [ 107.190267][ T6261] should_fail_ex+0x512/0x640 [ 107.190292][ T6261] ? __kmalloc_noprof+0xca/0x910 [ 107.190320][ T6261] should_failslab+0xc2/0x120 [ 107.190354][ T6261] __kmalloc_noprof+0xeb/0x910 [ 107.190377][ T6261] ? kernfs_fop_write_iter+0x237/0x570 [ 107.190420][ T6261] ? kernfs_fop_write_iter+0x237/0x570 [ 107.190457][ T6261] kernfs_fop_write_iter+0x237/0x570 [ 107.190500][ T6261] iter_file_splice_write+0xa24/0x12b0 [ 107.190561][ T6261] ? __pfx_iter_file_splice_write+0x10/0x10 [ 107.190606][ T6261] ? __pfx_copy_splice_read+0x10/0x10 [ 107.190663][ T6261] ? __pfx_iter_file_splice_write+0x10/0x10 [ 107.190704][ T6261] direct_splice_actor+0x192/0x6c0 [ 107.190745][ T6261] splice_direct_to_actor+0x345/0xa30 [ 107.190782][ T6261] ? __pfx_direct_splice_actor+0x10/0x10 [ 107.190826][ T6261] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 107.190875][ T6261] do_splice_direct+0x174/0x240 [ 107.190913][ T6261] ? __pfx_do_splice_direct+0x10/0x10 [ 107.190951][ T6261] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 107.191002][ T6261] ? rw_verify_area+0xcf/0x6c0 [ 107.191039][ T6261] do_sendfile+0xb06/0xe50 [ 107.191080][ T6261] ? __pfx_do_sendfile+0x10/0x10 [ 107.191120][ T6261] ? __x64_sys_futex+0x1e0/0x4c0 [ 107.191170][ T6261] ? __x64_sys_futex+0x1e9/0x4c0 [ 107.191203][ T6261] __x64_sys_sendfile64+0x1d8/0x220 [ 107.191226][ T6261] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 107.191258][ T6261] do_syscall_64+0xcd/0xf80 [ 107.191295][ T6261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.191321][ T6261] RIP: 0033:0x7f71b098f7c9 [ 107.191339][ T6261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.191357][ T6261] RSP: 002b:00007f71b1829038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 107.191376][ T6261] RAX: ffffffffffffffda RBX: 00007f71b0be6090 RCX: 00007f71b098f7c9 [ 107.191388][ T6261] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 107.191399][ T6261] RBP: 00007f71b0a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 107.191410][ T6261] R10: 0000400000000006 R11: 0000000000000246 R12: 0000000000000000 [ 107.191421][ T6261] R13: 00007f71b0be6128 R14: 00007f71b0be6090 R15: 00007fff48c98978 [ 107.191447][ T6261] [ 107.579221][ T6263] FAULT_INJECTION: forcing a failure. [ 107.579221][ T6263] name fail_futex, interval 1, probability 0, space 0, times 1 [ 107.592392][ T6263] CPU: 0 UID: 0 PID: 6263 Comm: syz.2.70 Not tainted syzkaller #0 PREEMPT(full) [ 107.592421][ T6263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 107.592431][ T6263] Call Trace: [ 107.592436][ T6263] [ 107.592442][ T6263] dump_stack_lvl+0x16c/0x1f0 [ 107.592467][ T6263] should_fail_ex+0x512/0x640 [ 107.592486][ T6263] should_fail_futex+0x4c/0x60 [ 107.592501][ T6263] futex_lock_pi_atomic+0x127/0xc50 [ 107.592524][ T6263] futex_lock_pi+0x23f/0x7c0 [ 107.592546][ T6263] ? __pfx_futex_lock_pi+0x10/0x10 [ 107.592564][ T6263] ? __futex_wait+0x24b/0x2f0 [ 107.592596][ T6263] ? futex_private_hash_put+0x160/0x1b0 [ 107.592614][ T6263] ? __pfx_futex_wake_mark+0x10/0x10 [ 107.592638][ T6263] ? ksys_write+0x190/0x250 [ 107.592662][ T6263] do_futex+0x11a/0x350 [ 107.592678][ T6263] ? __pfx_do_futex+0x10/0x10 [ 107.592699][ T6263] __x64_sys_futex+0x1e0/0x4c0 [ 107.592716][ T6263] ? fput+0x70/0xf0 [ 107.592728][ T6263] ? __pfx___x64_sys_futex+0x10/0x10 [ 107.592745][ T6263] ? xfd_validate_state+0x61/0x180 [ 107.592757][ T6263] ? __pfx_ksys_write+0x10/0x10 [ 107.592782][ T6263] do_syscall_64+0xcd/0xf80 [ 107.592803][ T6263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.592818][ T6263] RIP: 0033:0x7f6ad138f7c9 [ 107.592831][ T6263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.592844][ T6263] RSP: 002b:00007f6ad22af038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 107.592858][ T6263] RAX: ffffffffffffffda RBX: 00007f6ad15e5fa0 RCX: 00007f6ad138f7c9 [ 107.592867][ T6263] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 107.592875][ T6263] RBP: 00007f6ad1413f91 R08: 0000000000000000 R09: 000000008000fff5 [ 107.592884][ T6263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.592892][ T6263] R13: 00007f6ad15e6038 R14: 00007f6ad15e5fa0 R15: 00007ffead47ebd8 [ 107.592910][ T6263] [ 108.354076][ T6289] random: crng reseeded on system resumption [ 109.397413][ T6308] netlink: 28 bytes leftover after parsing attributes in process `syz.0.79'. [ 109.553968][ T6311] FAULT_INJECTION: forcing a failure. [ 109.553968][ T6311] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 109.601515][ T6311] CPU: 0 UID: 0 PID: 6311 Comm: syz.3.80 Not tainted syzkaller #0 PREEMPT(full) [ 109.601555][ T6311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 109.601571][ T6311] Call Trace: [ 109.601580][ T6311] [ 109.601591][ T6311] dump_stack_lvl+0x16c/0x1f0 [ 109.601638][ T6311] should_fail_ex+0x512/0x640 [ 109.601674][ T6311] should_fail_alloc_page+0xe7/0x130 [ 109.601720][ T6311] prepare_alloc_pages+0x401/0x670 [ 109.601768][ T6311] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 109.601804][ T6311] ? vmap_small_pages_range_noflush+0xc0f/0xd60 [ 109.601862][ T6311] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 109.601900][ T6311] ? memcg_rstat_updated.part.0+0x110/0x250 [ 109.601938][ T6311] ? __vmap_pages_range_noflush+0x3e7/0x670 [ 109.601981][ T6311] ? is_vmalloc_addr+0x86/0xa0 [ 109.602013][ T6311] ? is_vmalloc_or_module_addr+0x47/0x60 [ 109.602044][ T6311] ? kasan_unpoison+0x27/0x60 [ 109.602076][ T6311] ? __kasan_unpoison_vmalloc+0x22/0x30 [ 109.602110][ T6311] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 109.602154][ T6311] ? policy_nodemask+0xea/0x4e0 [ 109.602197][ T6311] alloc_pages_mpol+0x1fb/0x550 [ 109.602240][ T6311] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 109.602286][ T6311] alloc_pages_noprof+0x131/0x390 [ 109.602325][ T6311] __pud_alloc+0x3b/0x760 [ 109.602369][ T6311] walk_to_pmd+0x35a/0x4c0 [ 109.602413][ T6311] __get_locked_pte+0x25/0xc0 [ 109.602463][ T6311] map_ldt_struct+0x3b0/0xa60 [ 109.602506][ T6311] ? __pfx_map_ldt_struct+0x10/0x10 [ 109.602540][ T6311] ? kasan_save_track+0x14/0x30 [ 109.602584][ T6311] write_ldt+0x8fa/0xd20 [ 109.602615][ T6311] ? __might_fault+0xe3/0x190 [ 109.602644][ T6311] ? __might_fault+0x13b/0x190 [ 109.602679][ T6311] ? __pfx_write_ldt+0x10/0x10 [ 109.602717][ T6311] ? __pfx___do_sys_prctl+0x10/0x10 [ 109.602756][ T6311] __x64_sys_modify_ldt+0xb1/0x170 [ 109.602791][ T6311] do_syscall_64+0xcd/0xf80 [ 109.602833][ T6311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.602861][ T6311] RIP: 0033:0x7ff0d858f7c9 [ 109.602885][ T6311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.602911][ T6311] RSP: 002b:00007ff0d93e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 109.602938][ T6311] RAX: ffffffffffffffda RBX: 00007ff0d87e5fa0 RCX: 00007ff0d858f7c9 [ 109.602957][ T6311] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000001 [ 109.602974][ T6311] RBP: 00007ff0d8613f91 R08: 0000000000000000 R09: 0000000000000000 [ 109.602991][ T6311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.603008][ T6311] R13: 00007ff0d87e6038 R14: 00007ff0d87e5fa0 R15: 00007ffedcd09858 [ 109.603047][ T6311] [ 110.329121][ T6314] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.416320][ T6324] binder: 6323:6324 ioctl c018620c 0 returned -22 [ 110.438316][ T6324] mmap: syz.0.84 (6324) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 110.574822][ T6332] netlink: 342 bytes leftover after parsing attributes in process `syz.3.85'. [ 111.545686][ T30] audit: type=1800 audit(1765933566.665:3): pid=6359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.91" name="lu_gp_id" dev="configfs" ino=10532 res=0 errno=0 [ 118.698884][ T6467] FAULT_INJECTION: forcing a failure. [ 118.698884][ T6467] name failslab, interval 1, probability 0, space 0, times 0 [ 118.810746][ T6467] CPU: 1 UID: 0 PID: 6467 Comm: syz.1.111 Not tainted syzkaller #0 PREEMPT(full) [ 118.810768][ T6467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 118.810781][ T6467] Call Trace: [ 118.810787][ T6467] [ 118.810793][ T6467] dump_stack_lvl+0x16c/0x1f0 [ 118.810820][ T6467] should_fail_ex+0x512/0x640 [ 118.810836][ T6467] ? kmem_cache_alloc_noprof+0x62/0x770 [ 118.810856][ T6467] should_failslab+0xc2/0x120 [ 118.810878][ T6467] kmem_cache_alloc_noprof+0x83/0x770 [ 118.810895][ T6467] ? vm_area_alloc+0x1f/0x160 [ 118.810913][ T6467] ? vm_area_alloc+0x1f/0x160 [ 118.810926][ T6467] vm_area_alloc+0x1f/0x160 [ 118.810940][ T6467] __mmap_region+0x107a/0x2a00 [ 118.810958][ T6467] ? __lock_acquire+0x436/0x2890 [ 118.810971][ T6467] ? __pfx___mmap_region+0x10/0x10 [ 118.810986][ T6467] ? rcu_is_watching+0x12/0xc0 [ 118.811012][ T6467] ? lock_acquire+0x179/0x330 [ 118.811032][ T6467] ? finish_task_switch.isra.0+0x207/0xbd0 [ 118.811087][ T6467] ? rcu_is_watching+0x12/0xc0 [ 118.811110][ T6467] mmap_region+0x1ab/0x3f0 [ 118.811127][ T6467] ? __get_unmapped_area+0x267/0x3f0 [ 118.811149][ T6467] do_mmap+0xa3e/0x1210 [ 118.811172][ T6467] ? __pfx_do_mmap+0x10/0x10 [ 118.811192][ T6467] ? __pfx_down_write_killable+0x10/0x10 [ 118.811211][ T6467] vm_mmap_pgoff+0x29e/0x470 [ 118.811234][ T6467] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 118.811253][ T6467] ? __pfx_do_sendfile+0x10/0x10 [ 118.811275][ T6467] ? __x64_sys_futex+0x1e0/0x4c0 [ 118.811291][ T6467] ? __x64_sys_futex+0x1e9/0x4c0 [ 118.811309][ T6467] ksys_mmap_pgoff+0x7d/0x5c0 [ 118.811328][ T6467] ? xfd_validate_state+0x61/0x180 [ 118.811341][ T6467] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 118.811357][ T6467] __x64_sys_mmap+0x125/0x190 [ 118.811382][ T6467] do_syscall_64+0xcd/0xf80 [ 118.811405][ T6467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.811421][ T6467] RIP: 0033:0x7f71b098f7c9 [ 118.811433][ T6467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.811447][ T6467] RSP: 002b:00007f71b1829038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 118.811462][ T6467] RAX: ffffffffffffffda RBX: 00007f71b0be6090 RCX: 00007f71b098f7c9 [ 118.811471][ T6467] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 118.811479][ T6467] RBP: 00007f71b0a13f91 R08: fffffffffffffffa R09: 0000000000008000 [ 118.811488][ T6467] R10: 00000000000000f8 R11: 0000000000000246 R12: 0000000000000000 [ 118.811497][ T6467] R13: 00007f71b0be6128 R14: 00007f71b0be6090 R15: 00007fff48c98978 [ 118.811516][ T6467] [ 121.163403][ T6473] ima: policy update failed [ 121.168734][ T30] audit: type=1802 audit(1765933576.315:4): pid=6473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.112" res=0 errno=0 [ 124.474187][ T6508] program syz.1.119 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.489126][ T30] audit: type=1807 audit(1765933579.635:5): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 124.510026][ T6507] ima: policy update failed [ 124.516301][ T30] audit: type=1802 audit(1765933579.635:6): pid=6508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.119" res=0 errno=0 [ 124.537204][ T30] audit: type=1802 audit(1765933579.655:7): pid=6507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.119" res=0 errno=0 [ 128.257077][ T6542] capability: warning: `syz.0.128' uses 32-bit capabilities (legacy support in use) [ 128.326399][ T6542] FAULT_INJECTION: forcing a failure. [ 128.326399][ T6542] name failslab, interval 1, probability 0, space 0, times 0 [ 128.340005][ T6542] CPU: 1 UID: 0 PID: 6542 Comm: syz.0.128 Not tainted syzkaller #0 PREEMPT(full) [ 128.340027][ T6542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 128.340036][ T6542] Call Trace: [ 128.340041][ T6542] [ 128.340048][ T6542] dump_stack_lvl+0x16c/0x1f0 [ 128.340074][ T6542] should_fail_ex+0x512/0x640 [ 128.340091][ T6542] ? __kmalloc_noprof+0xca/0x910 [ 128.340109][ T6542] should_failslab+0xc2/0x120 [ 128.340132][ T6542] __kmalloc_noprof+0xeb/0x910 [ 128.340148][ T6542] ? sk_prot_alloc+0x1a8/0x2a0 [ 128.340171][ T6542] ? sk_prot_alloc+0x1a8/0x2a0 [ 128.340191][ T6542] sk_prot_alloc+0x1a8/0x2a0 [ 128.340212][ T6542] sk_alloc+0x36/0xe30 [ 128.340228][ T6542] __netlink_create+0x5e/0x2c0 [ 128.340245][ T6542] ? __wake_up+0x3f/0x60 [ 128.340266][ T6542] netlink_create+0x39e/0x620 [ 128.340290][ T6542] ? __pfx_genl_bind+0x10/0x10 [ 128.340310][ T6542] ? __pfx_genl_unbind+0x10/0x10 [ 128.340330][ T6542] ? __pfx_genl_release+0x10/0x10 [ 128.340354][ T6542] __sock_create+0x339/0x8a0 [ 128.340380][ T6542] __sys_socket+0x14d/0x260 [ 128.340394][ T6542] ? __pfx___sys_socket+0x10/0x10 [ 128.340413][ T6542] __x64_sys_socket+0x72/0xb0 [ 128.340425][ T6542] ? lockdep_hardirqs_on+0x7c/0x110 [ 128.340446][ T6542] do_syscall_64+0xcd/0xf80 [ 128.340467][ T6542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.340482][ T6542] RIP: 0033:0x7f37bc3916e7 [ 128.340495][ T6542] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.340508][ T6542] RSP: 002b:00007f37bd147fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 128.340522][ T6542] RAX: ffffffffffffffda RBX: 00007f37bc5e5fa0 RCX: 00007f37bc3916e7 [ 128.340532][ T6542] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 128.340540][ T6542] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 128.340548][ T6542] R10: 000020000001f300 R11: 0000000000000286 R12: 0000000000000000 [ 128.340557][ T6542] R13: 00007f37bc5e6038 R14: 00007f37bc5e5fa0 R15: 00007ffe3aa4f398 [ 128.340576][ T6542] [ 129.060450][ T6546] netlink: 6296 bytes leftover after parsing attributes in process `syz.2.133'. [ 129.416250][ T5156] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 129.425862][ T5156] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 129.436947][ T5156] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 129.447086][ T5156] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 129.456289][ T5156] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 129.710974][ T6552] chnl_net:caif_netlink_parms(): no params data found [ 130.005271][ T6571] netlink: 334 bytes leftover after parsing attributes in process `syz.1.137'. [ 130.005271][ T6570] netlink: 334 bytes leftover after parsing attributes in process `syz.1.137'. [ 130.042678][ T6552] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.077061][ T6552] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.084345][ T6552] bridge_slave_0: entered allmulticast mode [ 130.128797][ T6552] bridge_slave_0: entered promiscuous mode [ 130.146889][ T6552] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.164828][ T6552] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.185143][ T6552] bridge_slave_1: entered allmulticast mode [ 130.216605][ T6552] bridge_slave_1: entered promiscuous mode [ 130.348255][ T6552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.389091][ T6552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.407825][ T6578] FAULT_INJECTION: forcing a failure. [ 130.407825][ T6578] name failslab, interval 1, probability 0, space 0, times 0 [ 130.455684][ T6578] CPU: 1 UID: 0 PID: 6578 Comm: syz.1.140 Not tainted syzkaller #0 PREEMPT(full) [ 130.455719][ T6578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 130.455734][ T6578] Call Trace: [ 130.455742][ T6578] [ 130.455751][ T6578] dump_stack_lvl+0x16c/0x1f0 [ 130.455793][ T6578] should_fail_ex+0x512/0x640 [ 130.455820][ T6578] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 130.455857][ T6578] should_failslab+0xc2/0x120 [ 130.455896][ T6578] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 130.455931][ T6578] ? shmem_alloc_inode+0x25/0x50 [ 130.455973][ T6578] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 130.456005][ T6578] ? shmem_alloc_inode+0x25/0x50 [ 130.456048][ T6578] shmem_alloc_inode+0x25/0x50 [ 130.456084][ T6578] alloc_inode+0x64/0x240 [ 130.456115][ T6578] new_inode+0x22/0x1c0 [ 130.456147][ T6578] shmem_get_inode+0x19a/0xfb0 [ 130.456187][ T6578] ? __vm_enough_memory+0x184/0x3f0 [ 130.456227][ T6578] __shmem_file_setup+0x290/0x350 [ 130.456267][ T6578] shmem_zero_setup+0x93/0x1b0 [ 130.456297][ T6578] __mmap_region+0x2271/0x2a00 [ 130.456335][ T6578] ? __pfx___mmap_region+0x10/0x10 [ 130.456378][ T6578] ? kvm_sched_clock_read+0x11/0x20 [ 130.456412][ T6578] ? sched_clock+0x38/0x60 [ 130.456463][ T6578] ? rcu_is_watching+0x12/0xc0 [ 130.456514][ T6578] ? __pfx_css_rstat_updated+0x10/0x10 [ 130.456538][ T6578] ? __lock_acquire+0x436/0x2890 [ 130.456615][ T6578] ? rcu_is_watching+0x12/0xc0 [ 130.456661][ T6578] mmap_region+0x1ab/0x3f0 [ 130.456694][ T6578] ? __get_unmapped_area+0x267/0x3f0 [ 130.456737][ T6578] do_mmap+0xa3e/0x1210 [ 130.456782][ T6578] ? __pfx_do_mmap+0x10/0x10 [ 130.456829][ T6578] ? __pfx_down_write_killable+0x10/0x10 [ 130.456864][ T6578] vm_mmap_pgoff+0x29e/0x470 [ 130.456909][ T6578] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 130.456946][ T6578] ? __pfx___might_resched+0x10/0x10 [ 130.456982][ T6578] ? blkcg_maybe_throttle_current+0x650/0xf30 [ 130.457029][ T6578] ? __x64_sys_futex+0x1e0/0x4c0 [ 130.457059][ T6578] ? __x64_sys_futex+0x1e9/0x4c0 [ 130.457095][ T6578] ksys_mmap_pgoff+0x7d/0x5c0 [ 130.457130][ T6578] ? xfd_validate_state+0x61/0x180 [ 130.457161][ T6578] __x64_sys_mmap+0x125/0x190 [ 130.457197][ T6578] do_syscall_64+0xcd/0xf80 [ 130.457238][ T6578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.457267][ T6578] RIP: 0033:0x7f71b098f7c9 [ 130.457289][ T6578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.457315][ T6578] RSP: 002b:00007f71b184a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 130.457341][ T6578] RAX: ffffffffffffffda RBX: 00007f71b0be5fa0 RCX: 00007f71b098f7c9 [ 130.457359][ T6578] RDX: 00000000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 130.457376][ T6578] RBP: 00007f71b0a13f91 R08: 0000000000000401 R09: 0000000000008000 [ 130.457393][ T6578] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 130.457409][ T6578] R13: 00007f71b0be6038 R14: 00007f71b0be5fa0 R15: 00007fff48c98978 [ 130.457447][ T6578] [ 130.504950][ T6552] team0: Port device team_slave_0 added [ 131.057027][ T6576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.139'. [ 131.133920][ T6552] team0: Port device team_slave_1 added [ 131.211144][ T6589] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 131.491782][ T6552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.507561][ T5156] Bluetooth: hci4: command tx timeout [ 131.524465][ T6552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.636528][ T6552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.638654][ T6552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.638672][ T6552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.638702][ T6552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.940700][ T6552] hsr_slave_0: entered promiscuous mode [ 131.959427][ T6552] hsr_slave_1: entered promiscuous mode [ 131.986934][ T6552] debugfs: 'hsr0' already exists in 'hsr' [ 132.015690][ T6552] Cannot create hsr debugfs directory [ 132.213335][ T6596] zswap: compressor not available [ 132.344846][ T6612] netlink: 20 bytes leftover after parsing attributes in process `syz.2.145'. [ 132.831121][ T6552] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 132.867894][ T6552] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 132.905435][ T6552] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 132.926272][ T6552] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 133.183872][ T6552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.248529][ T6552] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.280827][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.288041][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.345139][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.352366][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.586156][ T5156] Bluetooth: hci4: command tx timeout [ 134.183746][ T6552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.498170][ T6552] veth0_vlan: entered promiscuous mode [ 135.556661][ T6552] veth1_vlan: entered promiscuous mode [ 135.665966][ T5156] Bluetooth: hci4: command tx timeout [ 135.699373][ T6552] veth0_macvtap: entered promiscuous mode [ 135.746590][ T6552] veth1_macvtap: entered promiscuous mode [ 135.841832][ T6552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.871160][ T6552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.909177][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.966520][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.975303][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.057849][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.461790][ T3936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.480774][ T3936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.555686][ T3530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.586675][ T3530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.024055][ T6689] Invalid ELF header magic: != ELF [ 137.746084][ T5156] Bluetooth: hci4: command tx timeout [ 137.990613][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.003375][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.127583][ T6732] syz.2.166(6732): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 139.551100][ T6746] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 142.161121][ T1004] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.325936][ T6812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.180'. [ 142.660452][ T6823] netlink: 342 bytes leftover after parsing attributes in process `syz.2.182'. [ 142.827169][ T6826] netlink: 342 bytes leftover after parsing attributes in process `syz.2.182'. [ 142.839584][ T1004] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.926426][ T6805] bond0: invalid ARP target specified [ 143.373847][ T1004] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.691210][ T1004] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.730335][ T6851] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 144.125700][ T30] audit: type=1806 audit(1765934622.259:8): xattr="." res=0 [ 144.137015][ T6867] FAULT_INJECTION: forcing a failure. [ 144.137015][ T6867] name failslab, interval 1, probability 0, space 0, times 0 [ 144.238608][ T6867] CPU: 0 UID: 0 PID: 6867 Comm: syz.4.188 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.238650][ T6867] Tainted: [L]=SOFTLOCKUP [ 144.238658][ T6867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 144.238673][ T6867] Call Trace: [ 144.238682][ T6867] [ 144.238693][ T6867] dump_stack_lvl+0x16c/0x1f0 [ 144.238738][ T6867] should_fail_ex+0x512/0x640 [ 144.238768][ T6867] ? kmem_cache_alloc_noprof+0x62/0x770 [ 144.238805][ T6867] should_failslab+0xc2/0x120 [ 144.238847][ T6867] kmem_cache_alloc_noprof+0x83/0x770 [ 144.238879][ T6867] ? acpi_ut_create_generic_state+0x61/0xc0 [ 144.238915][ T6867] ? acpi_ut_create_generic_state+0x61/0xc0 [ 144.238943][ T6867] acpi_ut_create_generic_state+0x61/0xc0 [ 144.238973][ T6867] acpi_ps_init_scope+0x3a/0x240 [ 144.239008][ T6867] acpi_ds_init_aml_walk+0x1f6/0x680 [ 144.239042][ T6867] acpi_ds_call_control_method+0x3a2/0xab0 [ 144.239090][ T6867] acpi_ps_parse_aml+0xab3/0x1170 [ 144.239128][ T6867] acpi_ps_execute_method+0x5c4/0xe90 [ 144.239172][ T6867] acpi_ns_evaluate+0x98c/0x16d0 [ 144.239218][ T6867] acpi_evaluate_object+0x4ca/0xdf0 [ 144.239248][ T6867] ? ksys_read+0x12a/0x250 [ 144.239291][ T6867] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 144.239325][ T6867] ? __pfx___might_resched+0x10/0x10 [ 144.239367][ T6867] acpi_evaluate_integer+0xdd/0x230 [ 144.239408][ T6867] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 144.239465][ T6867] ? __pfx_status_show+0x10/0x10 [ 144.239504][ T6867] status_show+0xa0/0x120 [ 144.239533][ T6867] ? __pfx_status_show+0x10/0x10 [ 144.239571][ T6867] dev_attr_show+0x56/0xe0 [ 144.239609][ T6867] ? __pfx_dev_attr_show+0x10/0x10 [ 144.239641][ T6867] sysfs_kf_seq_show+0x216/0x3e0 [ 144.239677][ T6867] seq_read_iter+0x50e/0x12d0 [ 144.239729][ T6867] kernfs_fop_read_iter+0x46c/0x610 [ 144.239770][ T6867] ? rw_verify_area+0xcf/0x6c0 [ 144.239808][ T6867] vfs_read+0x8bf/0xcf0 [ 144.239853][ T6867] ? __pfx_vfs_read+0x10/0x10 [ 144.239915][ T6867] ksys_read+0x12a/0x250 [ 144.239952][ T6867] ? __pfx_ksys_read+0x10/0x10 [ 144.239991][ T6867] ? __might_fault+0x154/0x190 [ 144.240029][ T6867] do_syscall_64+0xcd/0xf80 [ 144.240072][ T6867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.240101][ T6867] RIP: 0033:0x7f0e8198f7c9 [ 144.240124][ T6867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.240151][ T6867] RSP: 002b:00007f0e827cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 144.240176][ T6867] RAX: ffffffffffffffda RBX: 00007f0e81be5fa0 RCX: 00007f0e8198f7c9 [ 144.240195][ T6867] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000005 [ 144.240212][ T6867] RBP: 00007f0e81a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 144.240229][ T6867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.240245][ T6867] R13: 00007f0e81be6038 R14: 00007f0e81be5fa0 R15: 00007fff22b95ad8 [ 144.240286][ T6867] [ 144.240514][ T6867] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250807/psparse-529) [ 144.611273][ T30] audit: type=1800 audit(1765934622.759:9): pid=6880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.190" name="features" dev="configfs" ino=13904 res=0 errno=0 [ 144.643575][ T1004] bridge_slave_1: left allmulticast mode [ 144.666819][ T1004] bridge_slave_1: left promiscuous mode [ 144.712204][ T1004] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.774440][ T1004] bridge_slave_0: left allmulticast mode [ 144.838661][ T1004] bridge_slave_0: left promiscuous mode [ 144.844488][ T1004] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.075817][ T6898] netlink: 350 bytes leftover after parsing attributes in process `syz.4.194'. [ 145.560953][ T6916] FAULT_INJECTION: forcing a failure. [ 145.560953][ T6916] name failslab, interval 1, probability 0, space 0, times 0 [ 145.657397][ T6916] CPU: 0 UID: 0 PID: 6916 Comm: syz.4.197 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.657436][ T6916] Tainted: [L]=SOFTLOCKUP [ 145.657445][ T6916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 145.657460][ T6916] Call Trace: [ 145.657469][ T6916] [ 145.657480][ T6916] dump_stack_lvl+0x16c/0x1f0 [ 145.657523][ T6916] should_fail_ex+0x512/0x640 [ 145.657540][ T6916] ? fs_reclaim_acquire+0xae/0x150 [ 145.657566][ T6916] should_failslab+0xc2/0x120 [ 145.657588][ T6916] kmem_cache_alloc_noprof+0x83/0x770 [ 145.657605][ T6916] ? __pfx_map_id_range_down+0x10/0x10 [ 145.657625][ T6916] ? security_inode_alloc+0x3b/0x2b0 [ 145.657643][ T6916] ? security_inode_alloc+0x3b/0x2b0 [ 145.657657][ T6916] security_inode_alloc+0x3b/0x2b0 [ 145.657672][ T6916] inode_init_always_gfp+0xced/0x1040 [ 145.657695][ T6916] alloc_inode+0x86/0x240 [ 145.657711][ T6916] sock_alloc+0x40/0x280 [ 145.657731][ T6916] __sock_create+0xc2/0x8a0 [ 145.657756][ T6916] __sys_socket+0x14d/0x260 [ 145.657769][ T6916] ? __pfx___sys_socket+0x10/0x10 [ 145.657782][ T6916] ? xfd_validate_state+0x61/0x180 [ 145.657800][ T6916] __x64_sys_socket+0x72/0xb0 [ 145.657812][ T6916] ? lockdep_hardirqs_on+0x7c/0x110 [ 145.657832][ T6916] do_syscall_64+0xcd/0xf80 [ 145.657854][ T6916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.657868][ T6916] RIP: 0033:0x7f0e8198f7c9 [ 145.657880][ T6916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.657894][ T6916] RSP: 002b:00007f0e827cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 145.657908][ T6916] RAX: ffffffffffffffda RBX: 00007f0e81be5fa0 RCX: 00007f0e8198f7c9 [ 145.657917][ T6916] RDX: 0000000000000009 RSI: 0000000000000003 RDI: 0000000000000011 [ 145.657925][ T6916] RBP: 00007f0e81a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 145.657933][ T6916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.657942][ T6916] R13: 00007f0e81be6038 R14: 00007f0e81be5fa0 R15: 00007fff22b95ad8 [ 145.657961][ T6916] [ 145.658562][ T6916] socket: no more sockets [ 146.380558][ T6927] FAULT_INJECTION: forcing a failure. [ 146.380558][ T6927] name fail_futex, interval 1, probability 0, space 0, times 0 [ 146.409888][ T6927] CPU: 0 UID: 0 PID: 6927 Comm: syz.2.202 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.409928][ T6927] Tainted: [L]=SOFTLOCKUP [ 146.409937][ T6927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 146.409951][ T6927] Call Trace: [ 146.409959][ T6927] [ 146.409969][ T6927] dump_stack_lvl+0x16c/0x1f0 [ 146.410011][ T6927] should_fail_ex+0x512/0x640 [ 146.410045][ T6927] get_futex_key+0x1d0/0x15f0 [ 146.410076][ T6927] ? find_held_lock+0x2b/0x80 [ 146.410108][ T6927] ? __pfx_get_futex_key+0x10/0x10 [ 146.410148][ T6927] ? tomoyo_path_number_perm+0x18d/0x580 [ 146.410182][ T6927] futex_wake+0xea/0x530 [ 146.410220][ T6927] ? __pfx_futex_wake+0x10/0x10 [ 146.410262][ T6927] ? do_vfs_ioctl+0x128/0x14f0 [ 146.410298][ T6927] do_futex+0x1e3/0x350 [ 146.410325][ T6927] ? __pfx_do_futex+0x10/0x10 [ 146.410342][ T6927] ? find_held_lock+0x2b/0x80 [ 146.410361][ T6927] __x64_sys_futex+0x1e0/0x4c0 [ 146.410378][ T6927] ? __fget_files+0x20e/0x3c0 [ 146.410398][ T6927] ? __pfx___x64_sys_futex+0x10/0x10 [ 146.410416][ T6927] ? fput+0x70/0xf0 [ 146.410432][ T6927] do_syscall_64+0xcd/0xf80 [ 146.410454][ T6927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.410468][ T6927] RIP: 0033:0x7f6ad138f7c9 [ 146.410480][ T6927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.410494][ T6927] RSP: 002b:00007f6ad228e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 146.410508][ T6927] RAX: ffffffffffffffda RBX: 00007f6ad15e6098 RCX: 00007f6ad138f7c9 [ 146.410517][ T6927] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6ad15e609c [ 146.410525][ T6927] RBP: 00007f6ad15e6090 R08: 00007f6ad22b0000 R09: 0000000000000000 [ 146.410534][ T6927] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 146.410542][ T6927] R13: 00007f6ad15e6128 R14: 00007ffead47eaf0 R15: 00007ffead47ebd8 [ 146.410561][ T6927] [ 146.617044][ T1004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.631586][ T1004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.645084][ T1004] bond0 (unregistering): Released all slaves [ 147.146142][ T6942] openvswitch: netlink: Message has 24 unknown bytes. [ 147.537329][ T1004] hsr_slave_0: left promiscuous mode [ 147.557441][ T1004] hsr_slave_1: left promiscuous mode [ 147.584700][ T1004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.620305][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.641730][ T1004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.659435][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.791289][ T1004] veth1_macvtap: left promiscuous mode [ 147.794079][ T6968] netlink: 338 bytes leftover after parsing attributes in process `syz.1.208'. [ 147.799455][ T1004] veth0_macvtap: left promiscuous mode [ 147.825062][ T1004] veth1_vlan: left promiscuous mode [ 147.833089][ T1004] veth0_vlan: left promiscuous mode [ 148.783098][ T1004] team0 (unregistering): Port device team_slave_1 removed [ 148.826737][ T1004] team0 (unregistering): Port device team_slave_0 removed [ 149.740951][ T6991] netlink: 'syz.1.211': attribute type 1 has an invalid length. [ 152.107107][ T30] audit: type=1800 audit(1765934630.245:10): pid=7032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.219" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 152.134171][ T7032] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 152.203966][ T7032] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 152.213651][ T7032] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 154.575177][ T7097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.229'. [ 154.878947][ T7105] syz.4.232 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 154.991352][ T7099] zswap: compressor not available [ 155.160526][ T7104] FAULT_INJECTION: forcing a failure. [ 155.160526][ T7104] name failslab, interval 1, probability 0, space 0, times 0 [ 155.247714][ T7104] CPU: 1 UID: 0 PID: 7104 Comm: syz.2.231 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.247759][ T7104] Tainted: [L]=SOFTLOCKUP [ 155.247770][ T7104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 155.247786][ T7104] Call Trace: [ 155.247795][ T7104] [ 155.247805][ T7104] dump_stack_lvl+0x16c/0x1f0 [ 155.247851][ T7104] should_fail_ex+0x512/0x640 [ 155.247880][ T7104] ? kmem_cache_alloc_noprof+0x62/0x770 [ 155.247915][ T7104] should_failslab+0xc2/0x120 [ 155.247957][ T7104] kmem_cache_alloc_noprof+0x83/0x770 [ 155.247991][ T7104] ? ptlock_alloc+0x1f/0x70 [ 155.248025][ T7104] ? ptlock_alloc+0x1f/0x70 [ 155.248050][ T7104] ptlock_alloc+0x1f/0x70 [ 155.248075][ T7104] pte_alloc_one+0x84/0x3d0 [ 155.248113][ T7104] do_fault+0x8b8/0x1ad0 [ 155.248159][ T7104] ? __pfx_filemap_map_pages+0x10/0x10 [ 155.248191][ T7104] ? __pmd_alloc+0x6aa/0x9c0 [ 155.248234][ T7104] __handle_mm_fault+0x1919/0x2bb0 [ 155.248274][ T7104] ? __pfx___handle_mm_fault+0x10/0x10 [ 155.248325][ T7104] ? find_vma+0xbf/0x140 [ 155.248360][ T7104] ? __pfx_find_vma+0x10/0x10 [ 155.248401][ T7104] handle_mm_fault+0x3fe/0xad0 [ 155.248436][ T7104] do_user_addr_fault+0x7a6/0x1370 [ 155.248473][ T7104] ? rcu_is_watching+0x12/0xc0 [ 155.248515][ T7104] exc_page_fault+0x64/0xc0 [ 155.248554][ T7104] asm_exc_page_fault+0x26/0x30 [ 155.248581][ T7104] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 155.248613][ T7104] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 0d 81 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 155.248639][ T7104] RSP: 0018:ffffc90004d27da0 EFLAGS: 00050212 [ 155.248661][ T7104] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000010 [ 155.248678][ T7104] RDX: fffff520009a4fd2 RSI: 0000000000000000 RDI: ffffc90004d27e80 [ 155.248696][ T7104] RBP: 0000000000000010 R08: 0000000000000001 R09: fffff520009a4fd1 [ 155.248713][ T7104] R10: ffffc90004d27e8f R11: ffff88802b7f4830 R12: 0000000000000000 [ 155.248730][ T7104] R13: ffffc90004d27e80 R14: 1ffff920009a4fc4 R15: ffffc90004d27e80 [ 155.248767][ T7104] _copy_from_user+0x98/0xd0 [ 155.248798][ T7104] write_ldt+0xfc/0xd20 [ 155.248838][ T7104] ? __pfx_write_ldt+0x10/0x10 [ 155.248870][ T7104] ? fput+0x70/0xf0 [ 155.248898][ T7104] ? __pfx_ksys_write+0x10/0x10 [ 155.248943][ T7104] __x64_sys_modify_ldt+0xb1/0x170 [ 155.248978][ T7104] do_syscall_64+0xcd/0xf80 [ 155.249020][ T7104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.249048][ T7104] RIP: 0033:0x7f6ad138f7c9 [ 155.249070][ T7104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.249096][ T7104] RSP: 002b:00007f6ad22af038 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 155.249121][ T7104] RAX: ffffffffffffffda RBX: 00007f6ad15e5fa0 RCX: 00007f6ad138f7c9 [ 155.249140][ T7104] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000001 [ 155.249162][ T7104] RBP: 00007f6ad1413f91 R08: 0000000000000000 R09: 0000000000000000 [ 155.249179][ T7104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.249196][ T7104] R13: 00007f6ad15e6038 R14: 00007f6ad15e5fa0 R15: 00007ffead47ebd8 [ 155.249235][ T7104] [ 155.364449][ T5939] Process accounting resumed [ 155.853830][ T5156] Bluetooth: hci1: unexpected event 0x02 length: 726 > 260 [ 155.933959][ T7124] syz.4.235 uses obsolete (PF_INET,SOCK_PACKET) [ 156.284187][ T7106] kexec: Could not allocate control_code_buffer [ 156.369631][ T7134] netlink: 342 bytes leftover after parsing attributes in process `syz.0.237'. [ 156.514837][ T7136] input: f¬ as /devices/virtual/input/input8 [ 158.835878][ T7158] kexec: Could not allocate control_code_buffer syzkaller syzkaller login: [ 159.775397][ T5156] Bluetooth: hci1: unexpected event 0x1c length: 725 > 5 [ 164.204039][ T7281] vhci_hcd vhci_hcd.0: invalid port number 16 [ 167.042817][ T7411] netlink: 146 bytes leftover after parsing attributes in process `syz.2.287'. [ 167.528028][ T7421] forcing mempool usage for bvec_alloc+0x192/0x210 [ 168.371312][ T7446] zero sized request [ 169.226391][ T7456] FAULT_INJECTION: forcing a failure. [ 169.226391][ T7456] name failslab, interval 1, probability 0, space 0, times 0 [ 169.268519][ T7456] CPU: 1 UID: 0 PID: 7456 Comm: syz.1.294 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.268576][ T7456] Tainted: [L]=SOFTLOCKUP [ 169.268586][ T7456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 169.268602][ T7456] Call Trace: [ 169.268612][ T7456] [ 169.268622][ T7456] dump_stack_lvl+0x16c/0x1f0 [ 169.268670][ T7456] should_fail_ex+0x512/0x640 [ 169.268701][ T7456] ? kmem_cache_alloc_noprof+0x62/0x770 [ 169.268738][ T7456] should_failslab+0xc2/0x120 [ 169.268780][ T7456] kmem_cache_alloc_noprof+0x83/0x770 [ 169.268812][ T7456] ? ptlock_alloc+0x1f/0x70 [ 169.268847][ T7456] ? ptlock_alloc+0x1f/0x70 [ 169.268873][ T7456] ptlock_alloc+0x1f/0x70 [ 169.268900][ T7456] pte_alloc_one+0x84/0x3d0 [ 169.268938][ T7456] __pte_alloc+0x6d/0x3f0 [ 169.268976][ T7456] ? __pfx___pte_alloc+0x10/0x10 [ 169.269011][ T7456] ? __pfx___might_resched+0x10/0x10 [ 169.269048][ T7456] ? copy_page_range+0x22fb/0x6780 [ 169.269081][ T7456] copy_page_range+0x3f3e/0x6780 [ 169.269153][ T7456] ? __pfx_copy_page_range+0x10/0x10 [ 169.269196][ T7456] ? __pfx___might_resched+0x10/0x10 [ 169.269231][ T7456] ? __pfx_mas_store+0x10/0x10 [ 169.269262][ T7456] ? dup_mmap+0xba4/0x20e0 [ 169.269301][ T7456] ? down_write+0x14d/0x200 [ 169.269331][ T7456] ? up_write+0x282/0x4e0 [ 169.269366][ T7456] dup_mmap+0xbea/0x20e0 [ 169.269421][ T7456] ? __pfx_dup_mmap+0x10/0x10 [ 169.269486][ T7456] copy_process+0x3b9f/0x7430 [ 169.269527][ T7456] ? __pfx___futex_wait+0x10/0x10 [ 169.269585][ T7456] ? __pfx_copy_process+0x10/0x10 [ 169.269635][ T7456] ? futex_private_hash_put+0x160/0x1b0 [ 169.269673][ T7456] kernel_clone+0xfc/0x910 [ 169.269715][ T7456] ? __pfx_kernel_clone+0x10/0x10 [ 169.269775][ T7456] __do_sys_clone+0xce/0x120 [ 169.269815][ T7456] ? __pfx___do_sys_clone+0x10/0x10 [ 169.269854][ T7456] ? do_raw_spin_unlock+0x172/0x230 [ 169.269902][ T7456] ? xfd_validate_state+0x61/0x180 [ 169.269940][ T7456] do_syscall_64+0xcd/0xf80 [ 169.269982][ T7456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.270010][ T7456] RIP: 0033:0x7f71b098f7c9 [ 169.270033][ T7456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.270059][ T7456] RSP: 002b:00007f71b1849fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 169.270086][ T7456] RAX: ffffffffffffffda RBX: 00007f71b0be5fa0 RCX: 00007f71b098f7c9 [ 169.270105][ T7456] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 169.270121][ T7456] RBP: 00007f71b0a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 169.270138][ T7456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.270159][ T7456] R13: 00007f71b0be6038 R14: 00007f71b0be5fa0 R15: 00007fff48c98978 [ 169.270197][ T7456] [ 169.594444][ T7464] ubi0: attaching mtd0 [ 169.604614][ T7464] ubi0: scanning is finished [ 169.609313][ T7464] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 170.184071][ T7464] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 170.730741][ T30] audit: type=1800 audit(1765934648.856:11): pid=7488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.299" name="lu_gp_id" dev="configfs" ino=17690 res=0 errno=0 [ 171.490966][ T7501] netlink: 334 bytes leftover after parsing attributes in process `syz.2.302'. [ 171.919222][ T7509] zswap: compressor not available [ 172.610508][ T5156] Bluetooth: hci1: unexpected event 0x3d length: 726 > 14 [ 173.549232][ T7533] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 178.099504][ T7595] FAULT_INJECTION: forcing a failure. [ 178.099504][ T7595] name failslab, interval 1, probability 0, space 0, times 0 [ 178.126702][ T7595] CPU: 0 UID: 0 PID: 7595 Comm: syz.1.320 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.126729][ T7595] Tainted: [L]=SOFTLOCKUP [ 178.126734][ T7595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 178.126743][ T7595] Call Trace: [ 178.126749][ T7595] [ 178.126755][ T7595] dump_stack_lvl+0x16c/0x1f0 [ 178.126781][ T7595] should_fail_ex+0x512/0x640 [ 178.126800][ T7595] should_failslab+0xc2/0x120 [ 178.126824][ T7595] __kmalloc_cache_noprof+0x80/0x800 [ 178.126841][ T7595] ? __task_pid_nr_ns+0x1f5/0x500 [ 178.126855][ T7595] ? proc_thread_self_get_link+0x1c6/0x240 [ 178.126876][ T7595] ? proc_thread_self_get_link+0x1c6/0x240 [ 178.126892][ T7595] proc_thread_self_get_link+0x1c6/0x240 [ 178.126911][ T7595] pick_link+0xb09/0x13b0 [ 178.126928][ T7595] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 178.126948][ T7595] step_into_slowpath+0x6c6/0xf50 [ 178.126970][ T7595] ? __pfx_step_into_slowpath+0x10/0x10 [ 178.126991][ T7595] ? lookup_fast+0x156/0x610 [ 178.127006][ T7595] ? inode_permission+0x37b/0x640 [ 178.127024][ T7595] link_path_walk+0xd26/0x1c70 [ 178.127049][ T7595] path_openat+0x1bd/0x3140 [ 178.127068][ T7595] ? do_syscall_64+0xcd/0xf80 [ 178.127087][ T7595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.127108][ T7595] ? __pfx_path_openat+0x10/0x10 [ 178.127136][ T7595] do_filp_open+0x20b/0x470 [ 178.127157][ T7595] ? __pfx_do_filp_open+0x10/0x10 [ 178.127191][ T7595] ? alloc_fd+0x471/0x7d0 [ 178.127217][ T7595] do_sys_openat2+0x121/0x290 [ 178.127232][ T7595] ? __pfx_do_sys_openat2+0x10/0x10 [ 178.127255][ T7595] __x64_sys_openat+0x174/0x210 [ 178.127271][ T7595] ? __pfx___x64_sys_openat+0x10/0x10 [ 178.127288][ T7595] ? syscall_user_dispatch+0x78/0x140 [ 178.127312][ T7595] do_syscall_64+0xcd/0xf80 [ 178.127333][ T7595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.127347][ T7595] RIP: 0033:0x7f71b098f7c9 [ 178.127360][ T7595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.127374][ T7595] RSP: 002b:00007f71b1829038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 178.127388][ T7595] RAX: ffffffffffffffda RBX: 00007f71b0be6090 RCX: 00007f71b098f7c9 [ 178.127397][ T7595] RDX: 0000000000000802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 178.127406][ T7595] RBP: 00007f71b0a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 178.127414][ T7595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.127422][ T7595] R13: 00007f71b0be6128 R14: 00007f71b0be6090 R15: 00007fff48c98978 [ 178.127453][ T7595] [ 178.413871][ T7595] FAULT_INJECTION: forcing a failure. [ 178.413871][ T7595] name fail_futex, interval 1, probability 0, space 0, times 0 [ 178.426794][ T7595] CPU: 0 UID: 0 PID: 7595 Comm: syz.1.320 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.426840][ T7595] Tainted: [L]=SOFTLOCKUP [ 178.426850][ T7595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 178.426866][ T7595] Call Trace: [ 178.426876][ T7595] [ 178.426887][ T7595] dump_stack_lvl+0x16c/0x1f0 [ 178.426933][ T7595] should_fail_ex+0x512/0x640 [ 178.426968][ T7595] get_futex_key+0x1d0/0x15f0 [ 178.427005][ T7595] ? __pfx_get_futex_key+0x10/0x10 [ 178.427049][ T7595] futex_wait_setup+0x9d/0x570 [ 178.427097][ T7595] __futex_wait+0x193/0x2f0 [ 178.427136][ T7595] ? __pfx___futex_wait+0x10/0x10 [ 178.427179][ T7595] ? __pfx_futex_wake_mark+0x10/0x10 [ 178.427229][ T7595] ? memcg_rstat_updated.part.0+0x110/0x250 [ 178.427267][ T7595] futex_wait+0xe8/0x380 [ 178.427304][ T7595] ? __pfx_futex_wait+0x10/0x10 [ 178.427355][ T7595] ? do_user_addr_fault+0x843/0x1370 [ 178.427392][ T7595] do_futex+0x229/0x350 [ 178.427424][ T7595] ? __pfx_do_futex+0x10/0x10 [ 178.427465][ T7595] __x64_sys_futex+0x1e0/0x4c0 [ 178.427500][ T7595] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 178.427545][ T7595] ? __pfx___x64_sys_futex+0x10/0x10 [ 178.427579][ T7595] ? syscall_user_dispatch+0x78/0x140 [ 178.427624][ T7595] do_syscall_64+0xcd/0xf80 [ 178.427674][ T7595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.427702][ T7595] RIP: 0033:0x7f71b098f7c9 [ 178.427721][ T7595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.427748][ T7595] RSP: 002b:00007f71b18290e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 178.427775][ T7595] RAX: ffffffffffffffda RBX: 00007f71b0be6098 RCX: 00007f71b098f7c9 [ 178.427795][ T7595] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f71b0be6098 [ 178.427813][ T7595] RBP: 00007f71b0be6090 R08: 0000000000000000 R09: 0000000000000000 [ 178.427830][ T7595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.427847][ T7595] R13: 00007f71b0be6128 R14: 00007fff48c98890 R15: 00007fff48c98978 [ 178.427885][ T7595] [ 178.683044][ T7561] delete_channel: no stack [ 179.139927][ T7617] input: f¬ as /devices/virtual/input/input9 [ 179.280781][ T5156] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1256.288691][T27726] snd_aloop snd_aloop.0: Parsing timer source 'A' failed with -22 [ 1256.454276][T27733] block2mtd: illegal erase size [ 1256.639797][T27738] sg_write: data in/out 3292/1 bytes for SCSI command 0xa3-- guessing data in; [ 1256.639797][T27738] program syz.7.4475 not setting count and/or reply_len properly [ 1257.738412][T27765] netlink: 'syz.7.4480': attribute type 2 has an invalid length. [ 1258.547658][T27774] snd_aloop snd_aloop.0: Parsing timer source 'A' failed with -22 [ 1259.893118][T27796] input: f¬ as /devices/virtual/input/input83 [ 1260.209336][T27800] snd_aloop snd_aloop.0: Parsing timer source 'A' failed with -22 [ 1260.927926][T27816] binder: 27815:27816 ioctl 4018620d 9 returned -22 [ 1262.346176][ T30] audit: type=1804 audit(4294967442.030:56): pid=27841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.4498" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1262.574460][T23212] ttyS ttyS0: 1 input overrun(s) [ 1262.697278][ T30] audit: type=1804 audit(4294967442.060:57): pid=27840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4498" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1262.943744][T27854] usb usb13: check_ctrlrecip: process 27854 (syz.5.4501) requesting ep 01 but needs 81 [ 1263.026541][T27856] FAULT_INJECTION: forcing a failure. [ 1263.026541][T27856] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1263.078839][T27856] CPU: 0 UID: 0 PID: 27856 Comm: syz.6.4502 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1263.078876][T27856] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1263.078886][T27856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1263.078896][T27856] Call Trace: [ 1263.078901][T27856] [ 1263.078908][T27856] dump_stack_lvl+0x16c/0x1f0 [ 1263.078936][T27856] should_fail_ex+0x512/0x640 [ 1263.078956][T27856] get_futex_key+0x1d0/0x15f0 [ 1263.078975][T27856] ? __pfx_do_get_feature_msr+0x10/0x10 [ 1263.079005][T27856] ? __pfx_get_futex_key+0x10/0x10 [ 1263.079022][T27856] ? __pfx_msr_io+0x10/0x10 [ 1263.079041][T27856] ? tomoyo_path_number_perm+0x18d/0x580 [ 1263.079062][T27856] futex_wake+0xea/0x530 [ 1263.079082][T27856] ? kvm_arch_dev_ioctl+0x111/0x760 [ 1263.079101][T27856] ? __pfx_kvm_arch_dev_ioctl+0x10/0x10 [ 1263.079120][T27856] ? __pfx_futex_wake+0x10/0x10 [ 1263.079143][T27856] ? do_vfs_ioctl+0x128/0x14f0 [ 1263.079163][T27856] do_futex+0x1e3/0x350 [ 1263.079180][T27856] ? __pfx_do_futex+0x10/0x10 [ 1263.079198][T27856] ? find_held_lock+0x2b/0x80 [ 1263.079218][T27856] __x64_sys_futex+0x1e0/0x4c0 [ 1263.079237][T27856] ? __fget_files+0x20e/0x3c0 [ 1263.079257][T27856] ? __pfx___x64_sys_futex+0x10/0x10 [ 1263.079276][T27856] ? fput+0x70/0xf0 [ 1263.079293][T27856] do_syscall_64+0xcd/0xf80 [ 1263.079316][T27856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.079331][T27856] RIP: 0033:0x7fd76bb8f7c9 [ 1263.079344][T27856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1263.079359][T27856] RSP: 002b:00007fd76c95a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1263.079374][T27856] RAX: ffffffffffffffda RBX: 00007fd76bde5fa8 RCX: 00007fd76bb8f7c9 [ 1263.079384][T27856] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd76bde5fac [ 1263.079393][T27856] RBP: 00007fd76bde5fa0 R08: 00007fd76c95b000 R09: 0000000000000000 [ 1263.079402][T27856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1263.079411][T27856] R13: 00007fd76bde6038 R14: 00007fff7bb40490 R15: 00007fff7bb40578 [ 1263.079430][T27856] [ 1263.349166][T27854] usb usb13: usbfs: process 27854 (syz.5.4501) did not claim interface 0 before use [ 1263.479135][T27861] zswap: compressor not available [ 1263.526624][T27868] hub 1-0:1.0: USB hub found [ 1263.540320][T27868] hub 1-0:1.0: 1 port detected [ 1263.752248][T27868] hub 1-0:1.0: USB hub found [ 1263.814424][T27868] hub 1-0:1.0: 1 port detected [ 1265.610594][T27888] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1265.686535][T27888] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1265.774581][T27888] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1265.849234][T27888] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1265.932349][T27888] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1265.999276][T27888] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1266.571422][T27897] FAULT_INJECTION: forcing a failure. [ 1266.571422][T27897] name failslab, interval 1, probability 393216, space 0, times 0 [ 1266.678697][ T30] audit: type=1800 audit(4294967446.360:58): pid=27899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4512" name="discovery_nqn" dev="configfs" ino=139917 res=0 errno=0 [ 1266.766063][T27897] CPU: 0 UID: 0 PID: 27897 Comm: syz.1.4509 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1266.766100][T27897] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1266.766109][T27897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1266.766119][T27897] Call Trace: [ 1266.766124][T27897] [ 1266.766131][T27897] dump_stack_lvl+0x16c/0x1f0 [ 1266.766157][T27897] should_fail_ex+0x512/0x640 [ 1266.766175][T27897] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1266.766196][T27897] should_failslab+0xc2/0x120 [ 1266.766218][T27897] kmem_cache_alloc_noprof+0x83/0x770 [ 1266.766236][T27897] ? stack_depot_save_flags+0x29/0x9b0 [ 1266.766252][T27897] ? alloc_empty_file+0x55/0x1e0 [ 1266.766271][T27897] ? alloc_empty_file+0x55/0x1e0 [ 1266.766285][T27897] ? kasan_save_track+0x14/0x30 [ 1266.766304][T27897] alloc_empty_file+0x55/0x1e0 [ 1266.766320][T27897] path_openat+0xde/0x3140 [ 1266.766340][T27897] ? do_syscall_64+0xcd/0xf80 [ 1266.766360][T27897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1266.766381][T27897] ? __pfx_path_openat+0x10/0x10 [ 1266.766408][T27897] do_filp_open+0x20b/0x470 [ 1266.766430][T27897] ? __pfx_do_filp_open+0x10/0x10 [ 1266.766464][T27897] ? alloc_fd+0x471/0x7d0 [ 1266.766490][T27897] do_sys_openat2+0x121/0x290 [ 1266.766506][T27897] ? __pfx_do_sys_openat2+0x10/0x10 [ 1266.766521][T27897] ? __pfx___might_resched+0x10/0x10 [ 1266.766542][T27897] ? blkcg_maybe_throttle_current+0x650/0xf30 [ 1266.766560][T27897] ? _raw_spin_unlock_irq+0x23/0x50 [ 1266.766595][T27897] __x64_sys_openat+0x174/0x210 [ 1266.766612][T27897] ? __pfx___x64_sys_openat+0x10/0x10 [ 1266.766637][T27897] do_syscall_64+0xcd/0xf80 [ 1266.766659][T27897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1266.766675][T27897] RIP: 0033:0x7f085258f7c9 [ 1266.766688][T27897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1266.766703][T27897] RSP: 002b:00007f08507f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1266.766717][T27897] RAX: ffffffffffffffda RBX: 00007f08527e5fa0 RCX: 00007f085258f7c9 [ 1266.766728][T27897] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1266.766737][T27897] RBP: 00007f0852613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1266.766747][T27897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1266.766756][T27897] R13: 00007f08527e6038 R14: 00007f08527e5fa0 R15: 00007ffd4533f808 [ 1266.766776][T27897] [ 1267.022218][T27903] zswap: compressor not available [ 1267.325325][T26946] Bluetooth: hci4: command 0x0c1a tx timeout [ 1267.715740][T26946] Bluetooth: hci0: command 0x0c1a tx timeout [ 1267.784333][T27923] snd_aloop snd_aloop.0: Parsing timer source 'A' failed with -22 [ 1267.799321][T20153] Bluetooth: hci3: command 0x041b tx timeout [ 1267.876112][T26946] Bluetooth: hci1: command 0x0c1a tx timeout [ 1268.090876][T27929] FAULT_INJECTION: forcing a failure. [ 1268.090876][T27929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1268.147285][T27929] CPU: 0 UID: 0 PID: 27929 Comm: syz.6.4518 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1268.147322][T27929] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1268.147330][T27929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1268.147340][T27929] Call Trace: [ 1268.147346][T27929] [ 1268.147352][T27929] dump_stack_lvl+0x16c/0x1f0 [ 1268.147384][T27929] should_fail_ex+0x512/0x640 [ 1268.147406][T27929] _copy_from_user+0x2e/0xd0 [ 1268.147423][T27929] io_uring_setup+0xc1/0x1f60 [ 1268.147445][T27929] ? __pfx_io_uring_setup+0x10/0x10 [ 1268.147466][T27929] ? do_futex+0x122/0x350 [ 1268.147483][T27929] ? __pfx_do_futex+0x10/0x10 [ 1268.147509][T27929] ? xfd_validate_state+0x61/0x180 [ 1268.147523][T27929] ? __task_pid_nr_ns+0x1f5/0x500 [ 1268.147541][T27929] __x64_sys_io_uring_setup+0xc2/0x170 [ 1268.147560][T27929] do_syscall_64+0xcd/0xf80 [ 1268.147583][T27929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1268.147598][T27929] RIP: 0033:0x7fd76bb8f7c9 [ 1268.147611][T27929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1268.147625][T27929] RSP: 002b:00007fd76c95a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1268.147640][T27929] RAX: ffffffffffffffda RBX: 00007fd76bde5fa0 RCX: 00007fd76bb8f7c9 [ 1268.147650][T27929] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 1268.147659][T27929] RBP: 00007fd76bc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1268.147668][T27929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1268.147676][T27929] R13: 00007fd76bde6038 R14: 00007fd76bde5fa0 R15: 00007fff7bb40578 [ 1268.147696][T27929] syzkaller syzkaller login: [ 1269.613576][T27964] loop6: detected capacity change from 0 to 8 [ 1269.956175][T26946] Bluetooth: hci1: command 0x0c1a tx timeout [ 1270.172718][T27973] [U] [ 1270.175534][T27973] [U] [ 1270.178215][T27973] [U] [ 1270.180888][T27973] [U] [ 1270.479384][T27973] [U] [ 1270.482104][T27973] [U] [ 1270.484776][T27973] [U] [ 1270.487446][T27973] [U] [ 1270.795378][T27973] [U] [ 1270.798099][T27973] [U] [ 1270.800775][T27973] [U] [ 1270.803443][T27973] [U] [ 1271.085818][T27973] [U] [ 1271.371548][T27993] netlink: 342 bytes leftover after parsing attributes in process `syz.7.4529'. [ 1272.036242][T26946] Bluetooth: hci1: command 0x0c1a tx timeout [ 1273.822778][T28053] kvm: kvm [28042]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x4000000e) = 0x4 [ 1273.868744][T28063] FAULT_INJECTION: forcing a failure. [ 1273.868744][T28063] name failslab, interval 1, probability 393216, space 0, times 0 [ 1273.895748][T28063] CPU: 0 UID: 0 PID: 28063 Comm: syz.6.4546 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1273.895782][T28063] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1273.895790][T28063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1273.895799][T28063] Call Trace: [ 1273.895804][T28063] [ 1273.895811][T28063] dump_stack_lvl+0x16c/0x1f0 [ 1273.895836][T28063] should_fail_ex+0x512/0x640 [ 1273.895853][T28063] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 1273.895873][T28063] should_failslab+0xc2/0x120 [ 1273.895895][T28063] kmem_cache_alloc_node_noprof+0x86/0x800 [ 1273.895912][T28063] ? __alloc_skb+0x156/0x410 [ 1273.895927][T28063] ? __alloc_skb+0x35d/0x410 [ 1273.895945][T28063] ? __alloc_skb+0x156/0x410 [ 1273.895959][T28063] __alloc_skb+0x156/0x410 [ 1273.895973][T28063] ? __alloc_skb+0x35d/0x410 [ 1273.895987][T28063] ? __pfx___alloc_skb+0x10/0x10 [ 1273.896003][T28063] ? netlink_autobind.isra.0+0x158/0x370 [ 1273.896028][T28063] netlink_alloc_large_skb+0x69/0x140 [ 1273.896050][T28063] netlink_sendmsg+0x698/0xdd0 [ 1273.896073][T28063] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1273.896095][T28063] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1273.896122][T28063] __sys_sendto+0x4a3/0x520 [ 1273.896139][T28063] ? __pfx___sys_sendto+0x10/0x10 [ 1273.896161][T28063] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1273.896181][T28063] ? count_memcg_events+0x122/0x290 [ 1273.896212][T28063] __x64_sys_sendto+0xe0/0x1c0 [ 1273.896230][T28063] ? do_syscall_64+0x91/0xf80 [ 1273.896251][T28063] ? lockdep_hardirqs_on+0x7c/0x110 [ 1273.896271][T28063] do_syscall_64+0xcd/0xf80 [ 1273.896292][T28063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.896308][T28063] RIP: 0033:0x7fd76bb9165c [ 1273.896321][T28063] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 1273.896335][T28063] RSP: 002b:00007fd76c958ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1273.896349][T28063] RAX: ffffffffffffffda RBX: 00007fd76c958fc0 RCX: 00007fd76bb9165c [ 1273.896359][T28063] RDX: 0000000000000020 RSI: 00007fd76c959010 RDI: 0000000000000005 [ 1273.896369][T28063] RBP: 0000000000000000 R08: 00007fd76c958f14 R09: 000000000000000c [ 1273.896377][T28063] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 1273.896386][T28063] R13: 00007fd76c958f68 R14: 00007fd76c959010 R15: 0000000000000000 [ 1273.896405][T28063] [ 1275.383323][T28088] openvswitch: netlink: IP tunnel dst address not specified [ 1275.534125][T28094] vhci_hcd vhci_hcd.2: invalid port number 16 [ 1275.661665][T28094] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 1275.882373][T28046] kexec: Could not allocate control_code_buffer [ 1276.619443][T28122] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4562'. [ 1276.778263][T28122] HfR: entered promiscuous mode [ 1277.583020][T28148] zswap: compressor not available [ 1278.877008][T28175] futex_wake_op: syz.6.4573 tries to shift op by -2048; fix this program [ 1278.895729][T28175] futex_wake_op: syz.6.4573 tries to shift op by -2048; fix this program [ 1278.917568][T28175] 0x000000000001-0x000000020000 : "" [ 1278.931151][T28175] ftl_cs: FTL header corrupt! [ 1280.340595][T28197] EXT4-fs warning: 11 callbacks suppressed [ 1280.340612][T28197] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1280.615335][T28197] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1280.892119][T28203] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1281.055966][T28203] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1281.611656][T28213] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1281.612009][T28213] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1282.612371][T28258] ima: policy update failed [ 1282.711743][ T30] audit: type=1802 audit(4294969512.387:59): pid=28258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.4582" res=0 errno=0 [ 1284.795293][T28297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4589'. [ 1284.863295][T28301] kAFS: unparsable volume name [ 1285.877288][T26946] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1285.955153][T28337] ptp ptp0: only physical clock in use now [ 1286.491287][T20166] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 913 with max blocks 1 with error 117 [ 1286.549308][T20166] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1286.549308][T20166] [ 1287.682689][T28373] FAULT_INJECTION: forcing a failure. [ 1287.682689][T28373] name failslab, interval 1, probability 393216, space 0, times 0 [ 1287.772987][T28373] CPU: 0 UID: 0 PID: 28373 Comm: syz.7.4608 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1287.773031][T28373] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1287.773041][T28373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1287.773051][T28373] Call Trace: [ 1287.773057][T28373] [ 1287.773064][T28373] dump_stack_lvl+0x16c/0x1f0 [ 1287.773092][T28373] should_fail_ex+0x512/0x640 [ 1287.773109][T28373] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1287.773129][T28373] should_failslab+0xc2/0x120 [ 1287.773152][T28373] __kmalloc_cache_noprof+0x80/0x800 [ 1287.773170][T28373] ? snd_card_file_add+0x52/0x340 [ 1287.773187][T28373] ? snd_card_file_add+0x52/0x340 [ 1287.773199][T28373] ? __pfx_snd_ctl_open+0x10/0x10 [ 1287.773217][T28373] snd_card_file_add+0x52/0x340 [ 1287.773230][T28373] ? __pfx_snd_ctl_open+0x10/0x10 [ 1287.773248][T28373] ? __pfx_snd_ctl_open+0x10/0x10 [ 1287.773266][T28373] snd_ctl_open+0x9d/0x5f0 [ 1287.773286][T28373] ? __pfx_snd_ctl_open+0x10/0x10 [ 1287.773303][T28373] snd_open+0x22d/0x4c0 [ 1287.773325][T28373] ? __pfx_snd_open+0x10/0x10 [ 1287.773346][T28373] chrdev_open+0x234/0x6a0 [ 1287.773368][T28373] ? __pfx_apparmor_file_open+0x10/0x10 [ 1287.773383][T28373] ? __pfx_chrdev_open+0x10/0x10 [ 1287.773406][T28373] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1287.773432][T28373] do_dentry_open+0x748/0x1590 [ 1287.773454][T28373] ? __pfx_chrdev_open+0x10/0x10 [ 1287.773480][T28373] vfs_open+0x82/0x3f0 [ 1287.773498][T28373] path_openat+0x2078/0x3140 [ 1287.773525][T28373] ? __pfx_path_openat+0x10/0x10 [ 1287.773552][T28373] do_filp_open+0x20b/0x470 [ 1287.773573][T28373] ? __pfx_do_filp_open+0x10/0x10 [ 1287.773607][T28373] ? alloc_fd+0x471/0x7d0 [ 1287.773633][T28373] do_sys_openat2+0x121/0x290 [ 1287.773649][T28373] ? __pfx_do_sys_openat2+0x10/0x10 [ 1287.773672][T28373] __x64_sys_openat+0x174/0x210 [ 1287.773688][T28373] ? __pfx___x64_sys_openat+0x10/0x10 [ 1287.773712][T28373] do_syscall_64+0xcd/0xf80 [ 1287.773735][T28373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.773751][T28373] RIP: 0033:0x7f1ace78f7c9 [ 1287.773764][T28373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1287.773780][T28373] RSP: 002b:00007f1acf630038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1287.773795][T28373] RAX: ffffffffffffffda RBX: 00007f1ace9e5fa0 RCX: 00007f1ace78f7c9 [ 1287.773805][T28373] RDX: 0000000000000802 RSI: 00002000000010c0 RDI: ffffffffffffff9c [ 1287.773815][T28373] RBP: 00007f1ace813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1287.773824][T28373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1287.773834][T28373] R13: 00007f1ace9e6038 R14: 00007f1ace9e5fa0 R15: 00007ffe8454a018 [ 1287.773854][T28373] [ 1288.682004][T28397] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 1288.708962][T28393] netlink: 186 bytes leftover after parsing attributes in process `syz.6.4611'. [ 1290.155635][T28406] sd 0:0:1:0: PR command failed: 1026 [ 1290.187221][T28406] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1290.193982][T28406] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1291.955660][T26946] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1292.915624][T20153] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1293.004409][T28397] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4612'. [ 1295.564045][T28435] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4622'. [ 1295.577314][T28435] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4622'. [ 1295.759144][T28442] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1296.443535][T28453] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4627'. [ 1298.253095][T28485] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1298.446280][T28488] random: crng reseeded on system resumption [ 1299.156882][T28493] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4637'. [ 1300.742620][T28507] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78008 [ 1300.846653][T28507] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1300.950395][T28507] memcg:ffff88805e4a2281 [ 1301.004967][T28507] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1301.080643][T28507] page_type: f5(slab) [ 1301.125271][T28507] raw: 00fff00000000040 ffff88813ff303c0 0000000000000000 dead000000000001 [ 1301.200025][T28507] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff88805e4a2281 [ 1301.216458][T28511] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1301.285662][T28507] head: 00fff00000000040 ffff88813ff303c0 0000000000000000 dead000000000001 [ 1301.365705][T28507] head: 0000000000000000 0000000000080008 00000000f5000000 ffff88805e4a2281 [ 1301.476493][T28507] head: 00fff00000000003 ffffea0001e00201 00000000ffffffff 00000000ffffffff [ 1301.571012][T28507] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1301.651008][T28507] page dumped because: unmovable page [ 1301.699107][T28507] page_owner tracks the page as allocated [ 1301.757601][T28507] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6134, tgid 6131 (syz.1.40), ts 102636129860, free_ts 101637158123 [ 1301.962947][T28507] post_alloc_hook+0x1af/0x220 [ 1301.998988][T28507] get_page_from_freelist+0xd0b/0x31a0 [ 1302.004519][T28507] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 1302.023472][T28507] alloc_pages_mpol+0x1fb/0x550 [ 1302.035636][T28507] new_slab+0x2c3/0x430 [ 1302.039886][T28507] ___slab_alloc+0xe18/0x1c90 [ 1302.054787][T28507] __slab_alloc.constprop.0+0x63/0x110 [ 1302.065755][T28507] __kmalloc_node_track_caller_noprof+0x4d6/0x930 [ 1302.082487][T28507] kmemdup_noprof+0x29/0x60 [ 1302.092583][T28507] neigh_sysctl_register+0xb2/0x670 [ 1302.100585][T28507] devinet_sysctl_register+0xb6/0x200 [ 1302.113594][T28507] inetdev_init+0x2b8/0x580 [ 1302.128696][T28507] inetdev_event+0xc32/0x1870 [ 1302.143625][T28507] notifier_call_chain+0xbc/0x3e0 [ 1302.153725][T28507] call_netdevice_notifiers_info+0xbe/0x110 [ 1302.165148][T28507] register_netdevice+0x1792/0x21d0 [ 1302.181677][T28507] page last free pid 5841 tgid 5841 stack trace: [ 1302.191783][T28507] __free_frozen_pages+0x7df/0x1170 [ 1302.205656][T28507] sg_remove_scat+0x1bb/0x560 [ 1302.215744][T28507] sg_remove_sfp_usercontext+0x2da/0x5c0 [ 1302.231589][T28507] process_one_work+0x9ba/0x1b20 [ 1302.241685][T28507] worker_thread+0x6c8/0xf10 [ 1302.251774][T28507] kthread+0x3c5/0x780 [ 1302.260446][T28507] ret_from_fork+0x983/0xb10 [ 1302.271024][T28507] ret_from_fork_asm+0x1a/0x30 [ 1304.190522][T28542] sd 0:0:1:0: PR command failed: 1026 [ 1304.377993][T28559] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input85 [ 1304.426582][T28542] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1304.787473][T28542] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1304.956086][T28571] snd_aloop snd_aloop.0: Parsing timer source 'A' failed with -22 [ 1305.558138][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.564442][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.382867][T28587] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4658'. [ 1306.500172][T28587] veth1_macvtap: left promiscuous mode [ 1307.857706][T28621] __vm_enough_memory: pid: 28621, comm: syz.6.4667, bytes: 4398046511104 not enough memory for the allocation [ 1308.352358][T28630] program syz.6.4668 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1308.440600][T28631] sd 0:0:1:0: PR command failed: 1026 [ 1308.501769][T28631] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1308.637236][T28631] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1309.025659][T28618] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1309.114816][T28618] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1309.196964][T28634] kafs: addr_prefs: Invalid Command [ 1309.206915][T28618] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1309.277262][T28618] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1309.795766][T20153] Bluetooth: hci4: command 0x0c1a tx timeout [ 1310.585093][T28658] snd_aloop snd_aloop.0: Parsing timer source 'A' failed with -22 [ 1311.155694][T20153] Bluetooth: hci0: command 0x0c1a tx timeout [ 1311.235649][T20153] Bluetooth: hci3: command 0x041b tx timeout [ 1311.316934][T20153] Bluetooth: hci1: command 0x0c1a tx timeout [ 1313.284455][T28742] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4694'. [ 1313.393207][T28742] veth1_macvtap: left promiscuous mode [ 1313.759840][T28754] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1314.042363][T28748] netlink: 330 bytes leftover after parsing attributes in process `syz.7.4697'. [ 1314.150706][T28767] binder: 28766:28767 ioctl c0306201 0 returned -14 [ 1315.095230][T28790] netlink: 330 bytes leftover after parsing attributes in process `syz.6.4717'. [ 1315.333632][T28790] mac80211_hwsim hwsim70 ›: renamed from wlan0 (while UP) [ 1315.684692][T28808] snd_aloop snd_aloop.0: Parsing timer source 'A' failed with -22 [ 1315.837346][T28811] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4710'. [ 1315.929974][T28811] veth1_macvtap: left promiscuous mode [ 1316.332881][T28817] netlink: 'syz.1.4713': attribute type 15 has an invalid length. [ 1316.370514][T28817] netlink: 186 bytes leftover after parsing attributes in process `syz.1.4713'. [ 1317.065080][T28824] FAULT_INJECTION: forcing a failure. [ 1317.065080][T28824] name failslab, interval 1, probability 393216, space 0, times 0 [ 1317.285612][T28824] CPU: 0 UID: 0 PID: 28824 Comm: syz.1.4715 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1317.285649][T28824] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1317.285658][T28824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1317.285668][T28824] Call Trace: [ 1317.285674][T28824] [ 1317.285681][T28824] dump_stack_lvl+0x16c/0x1f0 [ 1317.285709][T28824] should_fail_ex+0x512/0x640 [ 1317.285726][T28824] ? fs_reclaim_acquire+0xae/0x150 [ 1317.285751][T28824] should_failslab+0xc2/0x120 [ 1317.285774][T28824] __kmalloc_noprof+0xeb/0x910 [ 1317.285792][T28824] ? ima_alloc_init_template+0xb5/0x720 [ 1317.285812][T28824] ? ima_alloc_init_template+0xb5/0x720 [ 1317.285827][T28824] ima_alloc_init_template+0xb5/0x720 [ 1317.285844][T28824] ? take_dentry_name_snapshot+0x319/0x7d0 [ 1317.285863][T28824] ima_store_measurement+0x1eb/0x5c0 [ 1317.285881][T28824] ? __pfx_ima_store_measurement+0x10/0x10 [ 1317.285896][T28824] ? release_dentry_name_snapshot+0x10/0x90 [ 1317.285920][T28824] ? ima_d_path+0x12b/0x2a0 [ 1317.285940][T28824] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1317.285965][T28824] process_measurement+0x17fa/0x22d0 [ 1317.285994][T28824] ? __pfx_process_measurement+0x10/0x10 [ 1317.286016][T28824] ? kasan_save_stack+0x42/0x60 [ 1317.286035][T28824] ? kasan_save_track+0x14/0x30 [ 1317.286053][T28824] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 1317.286075][T28824] ? find_held_lock+0x2b/0x80 [ 1317.286095][T28824] ? aa_file_perm+0x29e/0x1560 [ 1317.286135][T28824] ima_file_mmap+0x1b6/0x1e0 [ 1317.286158][T28824] ? __pfx_ima_file_mmap+0x10/0x10 [ 1317.286185][T28824] security_mmap_file+0x88c/0x990 [ 1317.286204][T28824] vm_mmap_pgoff+0xec/0x470 [ 1317.286227][T28824] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1317.286245][T28824] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1317.286263][T28824] ? hugetlbfs_get_inode+0x31f/0x700 [ 1317.286284][T28824] ksys_mmap_pgoff+0x1c8/0x5c0 [ 1317.286308][T28824] __x64_sys_mmap+0x125/0x190 [ 1317.286326][T28824] do_syscall_64+0xcd/0xf80 [ 1317.286349][T28824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.286365][T28824] RIP: 0033:0x7f085258f7c9 [ 1317.286380][T28824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1317.286395][T28824] RSP: 002b:00007f08507f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1317.286409][T28824] RAX: ffffffffffffffda RBX: 00007f08527e5fa0 RCX: 00007f085258f7c9 [ 1317.286420][T28824] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 1317.286430][T28824] RBP: 00007f0852613f91 R08: 0000000000000401 R09: 0000300000000000 [ 1317.286440][T28824] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1317.286449][T28824] R13: 00007f08527e6038 R14: 00007f08527e5fa0 R15: 00007ffd4533f808 [ 1317.286469][T28824] [ 1317.286701][ T30] audit: type=1804 audit(4294969546.967:60): pid=28824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.1.4715" name="anon_hugepage" dev="hugetlbfs" ino=145358 res=0 errno=0 [ 1317.796596][T28829] netlink: 252 bytes leftover after parsing attributes in process `syz.1.4715'. [ 1317.884654][T28835] netlink: 252 bytes leftover after parsing attributes in process `syz.1.4715'. [ 1318.485968][T28852] snd_aloop snd_aloop.0: Parsing timer source 'A' failed with -22 [ 1318.611160][T28856] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4721'. [ 1318.629343][T28856] mac80211_hwsim hwsim67 ›: renamed from wlan0 [ 1320.037652][T28888] FAULT_INJECTION: forcing a failure. [ 1320.037652][T28888] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1320.216846][T28888] CPU: 0 UID: 0 PID: 28888 Comm: syz.1.4728 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1320.216883][T28888] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1320.216892][T28888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1320.216902][T28888] Call Trace: [ 1320.216907][T28888] [ 1320.216914][T28888] dump_stack_lvl+0x16c/0x1f0 [ 1320.216941][T28888] should_fail_ex+0x512/0x640 [ 1320.216960][T28888] get_futex_key+0x1d0/0x15f0 [ 1320.216979][T28888] ? __pfx_get_futex_key+0x10/0x10 [ 1320.216999][T28888] ? find_held_lock+0x2b/0x80 [ 1320.217024][T28888] futex_wake+0xea/0x530 [ 1320.217047][T28888] ? __pfx_futex_wake+0x10/0x10 [ 1320.217067][T28888] ? __pfx_vfs_writev+0x10/0x10 [ 1320.217089][T28888] ? do_writev+0x218/0x340 [ 1320.217111][T28888] do_futex+0x1e3/0x350 [ 1320.217127][T28888] ? __pfx_do_futex+0x10/0x10 [ 1320.217142][T28888] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1320.217170][T28888] __x64_sys_futex+0x1e0/0x4c0 [ 1320.217187][T28888] ? fput+0x70/0xf0 [ 1320.217201][T28888] ? __pfx___x64_sys_futex+0x10/0x10 [ 1320.217218][T28888] ? __pfx_do_writev+0x10/0x10 [ 1320.217242][T28888] do_syscall_64+0xcd/0xf80 [ 1320.217273][T28888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1320.217289][T28888] RIP: 0033:0x7f085258f7c9 [ 1320.217303][T28888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1320.217319][T28888] RSP: 002b:00007f08507d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1320.217334][T28888] RAX: ffffffffffffffda RBX: 00007f08527e6098 RCX: 00007f085258f7c9 [ 1320.217345][T28888] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f08527e609c [ 1320.217354][T28888] RBP: 00007f08527e6090 R08: 00007f0853335000 R09: 0000000000000000 [ 1320.217363][T28888] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 1320.217372][T28888] R13: 00007f08527e6128 R14: 00007ffd4533f720 R15: 00007ffd4533f808 [ 1320.217392][T28888] [ 1321.231994][ T30] audit: type=1326 audit(4294969550.907:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28893 comm="syz.1.4732" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f085258f7c9 code=0x0 [ 1322.317970][T28920] snd_aloop snd_aloop.0: Parsing timer source 'A' failed with -22 [ 1323.134233][T28936] netlink: 4552 bytes leftover after parsing attributes in process `syz.6.4743'. [ 1323.147550][T28933] bridge0: port 3(gretap0) entered blocking state [ 1323.214055][T28933] bridge0: port 3(gretap0) entered disabled state [ 1323.311486][T28933] gretap0: entered allmulticast mode [ 1323.354813][T28933] gretap0: entered promiscuous mode [ 1323.493107][T28943] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input86 [ 1324.200863][T28967] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4745'. [ 1324.242816][T28964] FAULT_INJECTION: forcing a failure. [ 1324.242816][T28964] name failslab, interval 1, probability 393216, space 0, times 0 [ 1324.265856][T28964] CPU: 0 UID: 0 PID: 28964 Comm: syz.6.4750 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1324.265891][T28964] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1324.265899][T28964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1324.265908][T28964] Call Trace: [ 1324.265913][T28964] [ 1324.265919][T28964] dump_stack_lvl+0x16c/0x1f0 [ 1324.265945][T28964] should_fail_ex+0x512/0x640 [ 1324.265961][T28964] ? __kmalloc_noprof+0xca/0x910 [ 1324.265979][T28964] should_failslab+0xc2/0x120 [ 1324.266001][T28964] __kmalloc_noprof+0xeb/0x910 [ 1324.266017][T28964] ? __register_sysctl_table+0xea2/0x1900 [ 1324.266040][T28964] ? __register_sysctl_table+0xea2/0x1900 [ 1324.266059][T28964] __register_sysctl_table+0xea2/0x1900 [ 1324.266082][T28964] ? __pfx___register_sysctl_table+0x10/0x10 [ 1324.266100][T28964] ? is_module_address+0x69/0xf0 [ 1324.266117][T28964] ? register_net_sysctl_sz+0x222/0x450 [ 1324.266137][T28964] __devinet_sysctl_register+0x1b9/0x360 [ 1324.266154][T28964] ? rcu_is_watching+0x12/0xc0 [ 1324.266175][T28964] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 1324.266188][T28964] ? __kmalloc_node_track_caller_noprof+0x370/0x930 [ 1324.266213][T28964] ? __asan_memcpy+0x3c/0x60 [ 1324.266232][T28964] devinet_init_net+0x347/0x910 [ 1324.266247][T28964] ? __pfx_devinet_init_net+0x10/0x10 [ 1324.266262][T28964] ops_init+0x1e2/0x5f0 [ 1324.266283][T28964] setup_net+0x11d/0x3a0 [ 1324.266302][T28964] ? __pfx_setup_net+0x10/0x10 [ 1324.266320][T28964] ? lockdep_init_map_type+0x5c/0x270 [ 1324.266336][T28964] ? mutex_init_lockep+0x110/0x150 [ 1324.266354][T28964] copy_net_ns+0x351/0x7c0 [ 1324.266376][T28964] create_new_namespaces+0x3ea/0xab0 [ 1324.266400][T28964] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1324.266421][T28964] ksys_unshare+0x45b/0xa40 [ 1324.266444][T28964] ? __pfx_ksys_unshare+0x10/0x10 [ 1324.266468][T28964] ? syscall_user_dispatch+0x78/0x140 [ 1324.266490][T28964] __x64_sys_unshare+0x31/0x40 [ 1324.266503][T28964] do_syscall_64+0xcd/0xf80 [ 1324.266525][T28964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.266541][T28964] RIP: 0033:0x7fd76bb8f7c9 [ 1324.266554][T28964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1324.266568][T28964] RSP: 002b:00007fd76c95a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1324.266583][T28964] RAX: ffffffffffffffda RBX: 00007fd76bde5fa0 RCX: 00007fd76bb8f7c9 [ 1324.266593][T28964] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1324.266602][T28964] RBP: 00007fd76bc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1324.266611][T28964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1324.266620][T28964] R13: 00007fd76bde6038 R14: 00007fd76bde5fa0 R15: 00007fff7bb40578 [ 1324.266639][T28964] [ 1324.266646][T28964] sysctl could not get directory: /net/ipv4/conf/default -12 [ 1324.724673][T28964] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4750'. [ 1324.857011][ T5902] usb usb38-port5: attempt power cycle [ 1325.313347][T28975] can0: slcan on ptm0. [ 1325.416287][ T5902] usb usb38-port5: unable to enumerate USB device [ 1325.436691][T28968] vhci_hcd vhci_hcd.2: default hub control req: 3132 v0a38 i0000 l0 [ 1325.486911][T28977] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1325.533755][T28977] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1325.656823][T28974] can0 (unregistered): slcan off ptm0. [ 1325.669165][T28979] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1325.725982][T28979] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1326.063084][T28983] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1326.264922][T28991] snd_aloop snd_aloop.0: Parsing timer source 'A' failed with -22 [ 1326.301133][T28983] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1326.646218][T29003] netlink: 186 bytes leftover after parsing attributes in process `syz.6.4759'. [ 1326.657761][T29003] netlink: 186 bytes leftover after parsing attributes in process `syz.6.4759'. [ 1327.207991][T28998] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1327.246431][T28998] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1327.281744][T28998] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1327.305462][T28998] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1327.549904][T29027] [U] [ 1327.552717][T29027] [U] [ 1327.555399][T29027] [U] [ 1327.558075][T29027] [U] [ 1327.571616][T29027] [U] [ 1327.574328][T29027] [U] [ 1327.577008][T29027] [U] [ 1327.579681][T29027] [U] [ 1327.597155][T29027] [U] [ 1327.599871][T29027] [U] [ 1327.602544][T29027] [U] [ 1327.605216][T29027] [U] [ 1327.626089][T29027] [U] [ 1327.628840][T29027] [U] [ 1327.631522][T29027] [U] [ 1327.634197][T29027] [U] [ 1327.644997][T29027] [U] [ 1327.647709][T29027] [U] [ 1327.650387][T29027] [U] [ 1327.653059][T29027] [U] [ 1327.662697][T29027] [U] [ 1327.665412][T29027] [U] [ 1327.668085][T29027] [U] [ 1327.670756][T29027] [U] [ 1327.679916][T29027] [U] [ 1327.682621][T29027] [U] [ 1327.685294][T29027] [U] [ 1327.687966][T29027] [U] [ 1327.704120][T29027] [U] [ 1327.706837][T29027] [U] [ 1327.709528][T29027] [U] [ 1327.712208][T29027] [U] [ 1327.727622][T29027] [U] [ 1327.730332][T29027] [U] [ 1327.733004][T29027] [U] [ 1327.735678][T29027] [U] [ 1327.753389][T29027] [U] [ 1327.756105][T29027] [U] [ 1327.758780][T29027] [U] [ 1327.761451][T29027] [U] [ 1327.770200][T29027] [U] [ 1327.772911][T29027] [U] [ 1327.775584][T29027] [U] [ 1327.778286][T29027] [U] [ 1327.787546][T29027] [U] [ 1327.790255][T29027] [U] [ 1327.792925][T29027] [U] [ 1327.795599][T29027] [U] [ 1327.803150][T29027] [U] [ 1327.805852][T29027] [U] [ 1327.808525][T29027] [U] [ 1327.811197][T29027] [U] [ 1327.825493][T29027] [U] [ 1327.828216][T29027] [U] [ 1327.830892][T29027] [U] [ 1327.833572][T29027] [U] [ 1327.867074][T29027] [U] [ 1327.869789][T29027] [U] [ 1327.872487][T29027] [U] [ 1327.875160][T29027] [U] [ 1327.885809][T29027] [U] [ 1327.888522][T29027] [U] [ 1327.891193][T29027] [U] [ 1327.893871][T29027] [U] [ 1327.897237][T29027] [U] [ 1327.899921][T29027] [U] [ 1327.902595][T29027] [U] [ 1327.905266][T29027] [U] [ 1327.915688][T29027] [U] [ 1327.918388][T29027] [U] [ 1327.921061][T29027] [U] [ 1327.923733][T29027] [U] [ 1327.930416][T29027] [U] [ 1327.933125][T29027] [U] [ 1327.935798][T29027] [U] [ 1327.938473][T29027] [U] [ 1327.953570][T29027] [U] [ 1327.956283][T29027] [U] [ 1327.958961][T29027] [U] [ 1327.961635][T29027] [U] [ 1327.985435][T29027] [U] [ 1327.988152][T29027] [U] [ 1327.990825][T29027] [U] [ 1327.993497][T29027] [U] [ 1328.010420][T29027] [U] [ 1328.013135][T29027] [U] [ 1328.015810][T29027] [U] [ 1328.018483][T29027] [U] [ 1328.025654][T29027] [U] [ 1328.028370][T29027] [U] [ 1328.031044][T29027] [U] [ 1328.033716][T29027] [U] [ 1328.048342][T29027] [U] [ 1328.051059][T29027] [U] [ 1328.053735][T29027] [U] [ 1328.056409][T29027] [U] [ 1328.065972][T29027] [U] [ 1328.068675][T29027] [U] [ 1328.071354][T29027] [U] [ 1328.074030][T29027] [U] [ 1328.079875][T29027] [U] [ 1328.082576][T29027] [U] [ 1328.085251][T29027] [U] [ 1328.087925][T29027] [U] [ 1328.097762][T29027] [U] [ 1328.100463][T29027] [U] [ 1328.103139][T29027] [U] [ 1328.105810][T29027] [U] [ 1328.118882][T29027] [U] [ 1328.121588][T29027] [U] [ 1328.124260][T29027] [U] [ 1328.126932][T29027] [U] [ 1328.135665][T29027] [U] [ 1328.138372][T29027] [U] [ 1328.141045][T29027] [U] [ 1328.143720][T29027] [U] [ 1328.157217][T29027] [U] [ 1328.159935][T29027] [U] [ 1328.162609][T29027] [U] [ 1328.165281][T29027] [U] [ 1328.175041][T29027] [U] [ 1328.177745][T29027] [U] [ 1328.180417][T29027] [U] [ 1328.183086][T29027] [U] [ 1328.208879][T29027] [U] [ 1328.211593][T29027] [U] [ 1328.214283][T29027] [U] [ 1328.232815][T29037] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4768'. [ 1328.252935][T29020] [U] [ 1328.381625][T29032] zswap: compressor not available [ 1328.595738][T20153] Bluetooth: hci4: command 0x0c1a tx timeout [ 1329.315719][T20123] Bluetooth: hci0: command 0x0c1a tx timeout [ 1329.321829][T26946] Bluetooth: hci3: command 0x041b tx timeout [ 1329.328111][T20153] Bluetooth: hci1: command 0x0c1a tx timeout [ 1329.828431][T29076] random: crng reseeded on system resumption [ 1330.071505][T29088] snd_aloop snd_aloop.0: Parsing timer source 'A' failed with -22 [ 1331.146814][T29125] snd_aloop snd_aloop.0: Parsing timer source 'A' failed with -22 [ 1331.253187][T29118] zswap: compressor not available [ 1331.573842][T29140] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4793'. [ 1331.630009][T29140] ipvlan0: entered promiscuous mode [ 1331.646728][T29140] ipvlan0: entered allmulticast mode [ 1331.667491][T29140] veth0_vlan: entered allmulticast mode [ 1332.271564][T29152] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input88 [ 1333.988732][T29189] netlink: 186 bytes leftover after parsing attributes in process `syz.1.4807'. [ 1334.035056][T29189] netlink: 186 bytes leftover after parsing attributes in process `syz.1.4807'. [ 1334.182306][T29193] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(131076.0.1), cmd(6) [ 1334.289004][T29203] snd_aloop snd_aloop.0: Parsing timer source 'A' failed with -22 [ 1334.726726][T29222] netlink: 338 bytes leftover after parsing attributes in process `syz.6.4816'. [ 1334.845711][T29222] bond_slave_0: entered allmulticast mode [ 1335.132737][T29230] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input89 [ 1336.246830][T29242] netlink: 186 bytes leftover after parsing attributes in process `syz.5.4819'. [ 1336.314106][T29242] netlink: 186 bytes leftover after parsing attributes in process `syz.5.4819'. [ 1336.369478][T29247] snd_aloop snd_aloop.0: Parsing timer source 'A' failed with -22 [ 1337.765758][T29263] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input90 [ 1338.819208][T29289] bridge0: port 3(gretap0) entered blocking state [ 1338.837994][T29289] bridge0: port 3(gretap0) entered disabled state [ 1338.844606][T29289] gretap0: entered allmulticast mode [ 1338.857747][T29289] gretap0: entered promiscuous mode [ 1338.866542][T29289] bridge0: port 3(gretap0) entered blocking state [ 1338.873047][T29289] bridge0: port 3(gretap0) entered forwarding state [ 1339.060307][T29295] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4834'. [ 1341.112939][T29326] bridge0: port 3(gretap0) entered blocking state [ 1341.185761][T29326] bridge0: port 3(gretap0) entered disabled state [ 1341.266065][T29326] gretap0: entered allmulticast mode [ 1341.327947][T29326] gretap0: entered promiscuous mode [ 1341.415221][T29326] bridge0: port 3(gretap0) entered blocking state [ 1341.421789][T29326] bridge0: port 3(gretap0) entered forwarding state [ 1341.630850][T29335] kvm: kvm [29334]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x1 [ 1342.926996][ T30] audit: type=1804 audit(4294969572.597:62): pid=29355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4848" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1343.237926][ T30] audit: type=1804 audit(4294969572.717:63): pid=29350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4848" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1343.380388][ T30] audit: type=1804 audit(4294969572.767:64): pid=29355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4848" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1345.974939][T29403] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4861'. [ 1346.418333][T29415] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4864'. [ 1346.603560][T29418] FAULT_INJECTION: forcing a failure. [ 1346.603560][T29418] name failslab, interval 1, probability 393216, space 0, times 0 [ 1346.628297][T29418] CPU: 0 UID: 0 PID: 29418 Comm: syz.6.4865 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1346.628332][T29418] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1346.628341][T29418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1346.628350][T29418] Call Trace: [ 1346.628356][T29418] [ 1346.628363][T29418] dump_stack_lvl+0x16c/0x1f0 [ 1346.628390][T29418] should_fail_ex+0x512/0x640 [ 1346.628407][T29418] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 1346.628429][T29418] should_failslab+0xc2/0x120 [ 1346.628453][T29418] kmem_cache_alloc_node_noprof+0x86/0x800 [ 1346.628471][T29418] ? __alloc_skb+0x156/0x410 [ 1346.628492][T29418] ? __alloc_skb+0x156/0x410 [ 1346.628506][T29418] __alloc_skb+0x156/0x410 [ 1346.628521][T29418] ? __alloc_skb+0x35d/0x410 [ 1346.628537][T29418] ? __pfx___alloc_skb+0x10/0x10 [ 1346.628553][T29418] ? skb_page_frag_refill+0x40/0x5c0 [ 1346.628578][T29418] ? sk_page_frag_refill+0x6c/0x340 [ 1346.628596][T29418] kcm_sendmsg+0x611/0x2ca0 [ 1346.628629][T29418] ? __pfx_kcm_sendmsg+0x10/0x10 [ 1346.628650][T29418] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1346.628678][T29418] sock_sendmsg+0x3cc/0x470 [ 1346.628702][T29418] ? ktime_get_coarse_real_ts64_mg+0x240/0x300 [ 1346.628721][T29418] ? __pfx_sock_sendmsg+0x10/0x10 [ 1346.628757][T29418] splice_to_socket+0xaf4/0x1110 [ 1346.628790][T29418] ? __pfx_splice_to_socket+0x10/0x10 [ 1346.628840][T29418] ? lockdep_init_map_type+0x5c/0x270 [ 1346.628857][T29418] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1346.628878][T29418] ? __pfx_splice_to_socket+0x10/0x10 [ 1346.628902][T29418] direct_splice_actor+0x192/0x6c0 [ 1346.628926][T29418] splice_direct_to_actor+0x345/0xa30 [ 1346.628950][T29418] ? __pfx_direct_splice_actor+0x10/0x10 [ 1346.628975][T29418] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1346.628999][T29418] ? futex_private_hash_put+0x160/0x1b0 [ 1346.629018][T29418] do_splice_direct+0x174/0x240 [ 1346.629040][T29418] ? __pfx_do_splice_direct+0x10/0x10 [ 1346.629062][T29418] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1346.629084][T29418] ? bpf_lsm_file_permission+0x9/0x10 [ 1346.629109][T29418] ? security_file_permission+0x71/0x210 [ 1346.629129][T29418] ? rw_verify_area+0xcf/0x6c0 [ 1346.629151][T29418] do_sendfile+0xb06/0xe50 [ 1346.629174][T29418] ? __pfx_do_sendfile+0x10/0x10 [ 1346.629197][T29418] ? __x64_sys_futex+0x1e0/0x4c0 [ 1346.629214][T29418] ? __x64_sys_futex+0x1e9/0x4c0 [ 1346.629233][T29418] __x64_sys_sendfile64+0x1d8/0x220 [ 1346.629249][T29418] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1346.629270][T29418] do_syscall_64+0xcd/0xf80 [ 1346.629293][T29418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.629309][T29418] RIP: 0033:0x7fd76bb8f7c9 [ 1346.629322][T29418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1346.629337][T29418] RSP: 002b:00007fd76c95a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1346.629352][T29418] RAX: ffffffffffffffda RBX: 00007fd76bde5fa0 RCX: 00007fd76bb8f7c9 [ 1346.629362][T29418] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 1346.629371][T29418] RBP: 00007fd76bc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1346.629380][T29418] R10: 000000007ffff011 R11: 0000000000000246 R12: 0000000000000000 [ 1346.629389][T29418] R13: 00007fd76bde6038 R14: 00007fd76bde5fa0 R15: 00007fff7bb40578 [ 1346.629409][T29418] [ 1349.590458][T29454] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input91 [ 1349.993500][T29453] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input92 [ 1350.239266][T29471] FAULT_INJECTION: forcing a failure. [ 1350.239266][T29471] name failslab, interval 1, probability 393216, space 0, times 0 [ 1350.507151][T29471] CPU: 0 UID: 0 PID: 29471 Comm: syz.1.4879 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1350.507187][T29471] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1350.507196][T29471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1350.507206][T29471] Call Trace: [ 1350.507212][T29471] [ 1350.507219][T29471] dump_stack_lvl+0x16c/0x1f0 [ 1350.507245][T29471] should_fail_ex+0x512/0x640 [ 1350.507262][T29471] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 1350.507284][T29471] should_failslab+0xc2/0x120 [ 1350.507306][T29471] kmem_cache_alloc_node_noprof+0x86/0x800 [ 1350.507324][T29471] ? __alloc_skb+0x156/0x410 [ 1350.507345][T29471] ? __alloc_skb+0x156/0x410 [ 1350.507359][T29471] __alloc_skb+0x156/0x410 [ 1350.507373][T29471] ? __alloc_skb+0x35d/0x410 [ 1350.507388][T29471] ? __pfx___alloc_skb+0x10/0x10 [ 1350.507404][T29471] ? skb_page_frag_refill+0x40/0x5c0 [ 1350.507430][T29471] ? sk_page_frag_refill+0x6c/0x340 [ 1350.507447][T29471] kcm_sendmsg+0x611/0x2ca0 [ 1350.507479][T29471] ? __pfx_kcm_sendmsg+0x10/0x10 [ 1350.507503][T29471] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1350.507532][T29471] sock_sendmsg+0x3cc/0x470 [ 1350.507554][T29471] ? ktime_get_coarse_real_ts64_mg+0x240/0x300 [ 1350.507573][T29471] ? __pfx_sock_sendmsg+0x10/0x10 [ 1350.507608][T29471] splice_to_socket+0xaf4/0x1110 [ 1350.507641][T29471] ? __pfx_splice_to_socket+0x10/0x10 [ 1350.507695][T29471] ? lockdep_init_map_type+0x5c/0x270 [ 1350.507712][T29471] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1350.507734][T29471] ? __pfx_splice_to_socket+0x10/0x10 [ 1350.507757][T29471] direct_splice_actor+0x192/0x6c0 [ 1350.507781][T29471] splice_direct_to_actor+0x345/0xa30 [ 1350.507804][T29471] ? __pfx_direct_splice_actor+0x10/0x10 [ 1350.507830][T29471] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1350.507854][T29471] ? futex_private_hash_put+0x160/0x1b0 [ 1350.507872][T29471] do_splice_direct+0x174/0x240 [ 1350.507894][T29471] ? __pfx_do_splice_direct+0x10/0x10 [ 1350.507916][T29471] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1350.507939][T29471] ? bpf_lsm_file_permission+0x9/0x10 [ 1350.507957][T29471] ? security_file_permission+0x71/0x210 [ 1350.507976][T29471] ? rw_verify_area+0xcf/0x6c0 [ 1350.507997][T29471] do_sendfile+0xb06/0xe50 [ 1350.508020][T29471] ? __pfx_do_sendfile+0x10/0x10 [ 1350.508043][T29471] ? __x64_sys_futex+0x1e0/0x4c0 [ 1350.508060][T29471] ? __x64_sys_futex+0x1e9/0x4c0 [ 1350.508079][T29471] __x64_sys_sendfile64+0x1d8/0x220 [ 1350.508094][T29471] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1350.508115][T29471] do_syscall_64+0xcd/0xf80 [ 1350.508139][T29471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.508155][T29471] RIP: 0033:0x7f085258f7c9 [ 1350.508168][T29471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1350.508183][T29471] RSP: 002b:00007f08507f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1350.508197][T29471] RAX: ffffffffffffffda RBX: 00007f08527e5fa0 RCX: 00007f085258f7c9 [ 1350.508208][T29471] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 1350.508217][T29471] RBP: 00007f0852613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1350.508226][T29471] R10: 000000007ffff011 R11: 0000000000000246 R12: 0000000000000000 [ 1350.508235][T29471] R13: 00007f08527e6038 R14: 00007f08527e5fa0 R15: 00007ffd4533f808 [ 1350.508255][T29471] [ 1351.915343][T29511] snd_aloop snd_aloop.0: Parsing timer source 'A' failed with -22 [ 1352.038962][T29519] snd_aloop snd_aloop.0: Parsing timer source 'A' failed with -22 [ 1353.857951][T29560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4896'. [ 1353.961652][T29561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4896'. [ 1354.151964][T29565] netlink: 98 bytes leftover after parsing attributes in process `syz.1.4896'. [ 1354.192439][T29566] netlink: 98 bytes leftover after parsing attributes in process `syz.1.4896'. [ 1354.439458][T29567] netlink: 138 bytes leftover after parsing attributes in process `syz.5.4897'. [ 1354.807995][T29585] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4903'. [ 1354.832352][T29585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1354.842451][T29585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1354.873905][T29585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1354.882113][T29585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1355.706077][T29610] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1355.730804][T29610] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1355.749652][T29610] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1355.776025][T29610] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1356.710980][T29632] Invalid ELF header magic: != ELF [ 1356.913232][T29640] netlink: 'syz.6.4917': attribute type 14 has an invalid length. [ 1356.991702][T29641] FAULT_INJECTION: forcing a failure. [ 1356.991702][T29641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1357.039906][T29641] CPU: 0 UID: 0 PID: 29641 Comm: syz.6.4918 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1357.039941][T29641] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1357.039949][T29641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1357.039958][T29641] Call Trace: [ 1357.039963][T29641] [ 1357.039970][T29641] dump_stack_lvl+0x16c/0x1f0 [ 1357.039995][T29641] should_fail_ex+0x512/0x640 [ 1357.040014][T29641] _copy_from_user+0x2e/0xd0 [ 1357.040031][T29641] get_timespec64+0x8b/0x1b0 [ 1357.040046][T29641] ? __pfx_get_timespec64+0x10/0x10 [ 1357.040065][T29641] __x64_sys_futex+0x288/0x4c0 [ 1357.040084][T29641] ? __pfx___x64_sys_futex+0x10/0x10 [ 1357.040108][T29641] do_syscall_64+0xcd/0xf80 [ 1357.040130][T29641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.040145][T29641] RIP: 0033:0x7fd76bb8f7c9 [ 1357.040158][T29641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1357.040172][T29641] RSP: 002b:00007fff7bb406d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1357.040186][T29641] RAX: ffffffffffffffda RBX: 000000000014b3ca RCX: 00007fd76bb8f7c9 [ 1357.040196][T29641] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd76bde5fac [ 1357.040205][T29641] RBP: 0000000000000032 R08: 00007fd76c95b000 R09: 000000077bb409cf [ 1357.040214][T29641] R10: 00007fff7bb407d0 R11: 0000000000000246 R12: 00007fd76bde5fac [ 1357.040223][T29641] R13: 00007fff7bb407d0 R14: 000000000014b3fc R15: 00007fff7bb407f0 [ 1357.040242][T29641] [ 1357.327360][T29649] db_root: cannot open: òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿ [ 1357.715683][T20153] Bluetooth: hci4: command 0x0c1a tx timeout [ 1357.818011][T21528] Bluetooth: hci0: command 0x0c1a tx timeout [ 1357.824054][T26946] Bluetooth: hci1: command 0x0c1a tx timeout [ 1357.830492][T20123] Bluetooth: hci3: command 0x041b tx timeout [ 1357.962540][T29669] snd_aloop snd_aloop.0: Parsing timer source 'A' failed with -22 [ 1357.982838][T29649] zswap: compressor not available [ 1358.529541][T29680] batman_adv: Routing algorithm '7' is not supported [ 1358.911860][T29687] snd_aloop snd_aloop.0: Parsing timer source 'A' failed with -22 [ 1359.075505][T20813] netdevsim netdevsim511 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.327872][T29695] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1359.374576][T29695] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1359.414879][T29695] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1359.464521][T29695] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1359.493929][ T30] audit: type=1800 audit(4294969589.167:65): pid=29681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4926" name="lu_gp_id" dev="configfs" ino=150151 res=0 errno=0 [ 1361.396221][T20123] Bluetooth: hci4: command 0x0c1a tx timeout [ 1361.402342][T20153] Bluetooth: hci0: command 0x0c1a tx timeout [ 1361.475953][T20153] Bluetooth: hci3: command 0x041b tx timeout [ 1361.482584][T20123] Bluetooth: hci1: command 0x0c1a tx timeout [ 1361.957852][T29725] can: request_module (can-proto-4) failed. [ 1363.094950][T20123] Bluetooth: hci3: unexpected event 0x03 length: 725 > 11 [ 1366.086048][T29797] snd_aloop snd_aloop.0: Parsing timer source 'A' failed with -22 [ 1367.002856][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.021815][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.505110][T29836] snd_aloop snd_aloop.0: Parsing timer source 'A' failed with -22 [ 1369.231218][T29881] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input93 [ 1369.265270][T29885] snd_aloop snd_aloop.0: Parsing timer source 'A' failed with -22 [ 1369.520644][T29896] FAULT_INJECTION: forcing a failure. [ 1369.520644][T29896] name failslab, interval 1, probability 393216, space 0, times 0 [ 1369.549509][T29896] CPU: 0 UID: 0 PID: 29896 Comm: syz.6.4981 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1369.549548][T29896] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1369.549557][T29896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1369.549567][T29896] Call Trace: [ 1369.549573][T29896] [ 1369.549579][T29896] dump_stack_lvl+0x16c/0x1f0 [ 1369.549606][T29896] should_fail_ex+0x512/0x640 [ 1369.549625][T29896] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1369.549645][T29896] should_failslab+0xc2/0x120 [ 1369.549669][T29896] kmem_cache_alloc_noprof+0x83/0x770 [ 1369.549686][T29896] ? __pmd_alloc+0xbf/0x9c0 [ 1369.549711][T29896] ? __pmd_alloc+0xbf/0x9c0 [ 1369.549731][T29896] __pmd_alloc+0xbf/0x9c0 [ 1369.549751][T29896] ? __pud_alloc+0x57a/0x760 [ 1369.549774][T29896] walk_to_pmd+0x3a6/0x4c0 [ 1369.549797][T29896] __get_locked_pte+0x25/0xc0 [ 1369.549820][T29896] map_ldt_struct+0x3b0/0xa60 [ 1369.549842][T29896] ? __pfx_map_ldt_struct+0x10/0x10 [ 1369.549860][T29896] ? alloc_pages_noprof+0x23c/0x390 [ 1369.549885][T29896] write_ldt+0x8fa/0xd20 [ 1369.549905][T29896] ? __pfx_write_ldt+0x10/0x10 [ 1369.549923][T29896] ? fput+0x70/0xf0 [ 1369.549938][T29896] ? __pfx_ksys_write+0x10/0x10 [ 1369.549962][T29896] __x64_sys_modify_ldt+0xb1/0x170 [ 1369.549981][T29896] do_syscall_64+0xcd/0xf80 [ 1369.550003][T29896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1369.550019][T29896] RIP: 0033:0x7fd76bb8f7c9 [ 1369.550033][T29896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1369.550047][T29896] RSP: 002b:00007fd769df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 1369.550062][T29896] RAX: ffffffffffffffda RBX: 00007fd76bde6090 RCX: 00007fd76bb8f7c9 [ 1369.550072][T29896] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000001 [ 1369.550081][T29896] RBP: 00007fd76bc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1369.550090][T29896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1369.550099][T29896] R13: 00007fd76bde6128 R14: 00007fd76bde6090 R15: 00007fff7bb40578 [ 1369.550119][T29896] [ 1370.382892][T29888] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input94 [ 1371.637119][T29932] FAULT_INJECTION: forcing a failure. [ 1371.637119][T29932] name failslab, interval 1, probability 393216, space 0, times 0 [ 1371.737085][T29932] CPU: 0 UID: 0 PID: 29932 Comm: syz.7.4988 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1371.737122][T29932] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1371.737131][T29932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1371.737140][T29932] Call Trace: [ 1371.737146][T29932] [ 1371.737153][T29932] dump_stack_lvl+0x16c/0x1f0 [ 1371.737180][T29932] should_fail_ex+0x512/0x640 [ 1371.737196][T29932] ? fs_reclaim_acquire+0xae/0x150 [ 1371.737221][T29932] should_failslab+0xc2/0x120 [ 1371.737251][T29932] kmem_cache_alloc_noprof+0x83/0x770 [ 1371.737269][T29932] ? __pfx_map_id_range_down+0x10/0x10 [ 1371.737290][T29932] ? security_inode_alloc+0x3b/0x2b0 [ 1371.737309][T29932] ? security_inode_alloc+0x3b/0x2b0 [ 1371.737324][T29932] security_inode_alloc+0x3b/0x2b0 [ 1371.737340][T29932] inode_init_always_gfp+0xced/0x1040 [ 1371.737365][T29932] alloc_inode+0x86/0x240 [ 1371.737381][T29932] path_from_stashed+0x25b/0x750 [ 1371.737402][T29932] ? do_raw_spin_unlock+0x172/0x230 [ 1371.737423][T29932] ns_get_path+0x60/0x80 [ 1371.737445][T29932] proc_ns_get_link+0x121/0x230 [ 1371.737462][T29932] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1371.737481][T29932] ? atime_needs_update+0x8b/0x710 [ 1371.737501][T29932] pick_link+0xc96/0x13b0 [ 1371.737518][T29932] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1371.737537][T29932] step_into_slowpath+0x6c6/0xf50 [ 1371.737559][T29932] ? __pfx_step_into_slowpath+0x10/0x10 [ 1371.737578][T29932] ? find_held_lock+0x2b/0x80 [ 1371.737602][T29932] path_openat+0x10db/0x3140 [ 1371.737629][T29932] ? __pfx_path_openat+0x10/0x10 [ 1371.737656][T29932] do_filp_open+0x20b/0x470 [ 1371.737678][T29932] ? __pfx_do_filp_open+0x10/0x10 [ 1371.737712][T29932] ? alloc_fd+0x471/0x7d0 [ 1371.737737][T29932] do_sys_openat2+0x121/0x290 [ 1371.737754][T29932] ? __pfx_do_sys_openat2+0x10/0x10 [ 1371.737777][T29932] __x64_sys_openat+0x174/0x210 [ 1371.737793][T29932] ? __pfx___x64_sys_openat+0x10/0x10 [ 1371.737817][T29932] do_syscall_64+0xcd/0xf80 [ 1371.737840][T29932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1371.737855][T29932] RIP: 0033:0x7f1ace78e010 [ 1371.737869][T29932] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 1371.737884][T29932] RSP: 002b:00007f1acf62ff10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1371.737902][T29932] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f1ace78e010 [ 1371.737912][T29932] RDX: 0000000000000002 RSI: 00007f1acf62ffa0 RDI: 00000000ffffff9c [ 1371.737922][T29932] RBP: 00007f1acf62ffa0 R08: 0000000000000000 R09: 0000000000000000 [ 1371.737933][T29932] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1371.737942][T29932] R13: 00007f1ace9e6038 R14: 00007f1ace9e5fa0 R15: 00007ffe8454a018 [ 1371.737961][T29932] [ 1373.103965][T29976] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4998'. [ 1373.106952][T29977] netlink: 354 bytes leftover after parsing attributes in process `syz.5.4998'. [ 1373.974049][T29987] hub 1-0:1.0: USB hub found [ 1373.974273][T29987] hub 1-0:1.0: 1 port detected [ 1374.053333][T29987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5000'. [ 1374.053464][T29987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5000'. [ 1374.092651][T29987] hub 1-0:1.0: USB hub found [ 1374.096763][T29987] hub 1-0:1.0: 1 port detected [ 1378.813561][T30018] netlink: 25 bytes leftover after parsing attributes in process `syz.7.5006'. [ 1382.213422][T30082] netlink: 342 bytes leftover after parsing attributes in process `syz.5.5021'. [ 1383.742849][T30113] zswap: compressor not available [ 1384.281716][T30136] futex_wake_op: syz.6.5036 tries to shift op by -2048; fix this program [ 1384.760990][T30152] snd_aloop snd_aloop.0: Parsing timer source 'A' failed with -22 [ 1385.349845][T30160] netlink: 4718 bytes leftover after parsing attributes in process `syz.6.5040'. [ 1385.508889][T30162] snd_aloop snd_aloop.0: Parsing timer source 'A' failed with -22 [ 1385.976713][T30170] ima: policy update failed [ 1385.984622][ T30] audit: type=1802 audit(4294969615.657:66): pid=30170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.5044" res=0 errno=0 [ 1386.765038][T30188] snd_aloop snd_aloop.0: Parsing timer source 'A' failed with -22 [ 1386.854925][T30191] futex_wake_op: syz.7.5049 tries to shift op by -2048; fix this program [ 1386.968015][T30191] size and base must be multiples of 4 kiB [ 1386.968034][T30191] CPU: 0 UID: 0 PID: 30191 Comm: syz.7.5049 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1386.968065][T30191] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1386.968073][T30191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1386.968083][T30191] Call Trace: [ 1386.968088][T30191] [ 1386.968095][T30191] dump_stack_lvl+0x16c/0x1f0 [ 1386.968123][T30191] mtrr_add+0xdf/0x110 [ 1386.968147][T30191] mtrr_ioctl+0x7ef/0xcf0 [ 1386.968162][T30191] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1386.968179][T30191] ? find_held_lock+0x2b/0x80 [ 1386.968204][T30191] ? __fget_files+0x20e/0x3c0 [ 1386.968225][T30191] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1386.968239][T30191] proc_reg_unlocked_ioctl+0x229/0x320 [ 1386.968257][T30191] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1386.968277][T30191] __x64_sys_ioctl+0x18e/0x210 [ 1386.968297][T30191] do_syscall_64+0xcd/0xf80 [ 1386.968319][T30191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.968334][T30191] RIP: 0033:0x7f1ace78f7c9 [ 1386.968347][T30191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1386.968361][T30191] RSP: 002b:00007f1acf60f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1386.968375][T30191] RAX: ffffffffffffffda RBX: 00007f1ace9e6090 RCX: 00007f1ace78f7c9 [ 1386.968385][T30191] RDX: 0000000000000000 RSI: 0000000040104d01 RDI: 0000000000000000 [ 1386.968394][T30191] RBP: 00007f1ace813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1386.968403][T30191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1386.968412][T30191] R13: 00007f1ace9e6128 R14: 00007f1ace9e6090 R15: 00007ffe8454a018 [ 1386.968431][T30191] [ 1387.308665][T30195] zswap: compressor not available [ 1389.523313][T30237] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5063'. [ 1389.523778][T30237] netlink: 25 bytes leftover after parsing attributes in process `syz.6.5063'. [ 1389.528634][T30237] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5063'. [ 1389.529054][T30237] netlink: 25 bytes leftover after parsing attributes in process `syz.6.5063'. [ 1389.877594][T30239] snd_aloop snd_aloop.0: Parsing timer source 'A' failed with -22 [ 1389.889763][T30239] snd_aloop snd_aloop.0: Parsing timer source 'A' failed with -22 [ 1390.756533][ T30] audit: type=1804 audit(4294969620.437:67): pid=30263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.5071" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1391.526621][T30284] binder: 30283:30284 ioctl c018620c 0 returned -1 [ 1391.553149][T30284] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5075'. [ 1393.209510][T30313] snd_aloop snd_aloop.0: Parsing timer source 'A' failed with -22 [ 1393.728600][T30330] netlink: 330 bytes leftover after parsing attributes in process `syz.6.5088'. [ 1393.762023][T20153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1393.772485][T20153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1393.780500][T20153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1393.789181][T20153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1393.801089][T20153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1394.962231][T30329] chnl_net:caif_netlink_parms(): no params data found [ 1394.999193][T30353] binder: 30352:30353 ioctl c018620c 0 returned -1 [ 1395.020633][T30353] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5092'. [ 1395.826769][T30369] netlink: 98 bytes leftover after parsing attributes in process `syz.7.5094'. [ 1395.881346][T20153] Bluetooth: hci2: command tx timeout [ 1395.934654][T30329] bridge0: port 1(bridge_slave_0) entered blocking state [ 1395.982266][T30329] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.076608][T30329] bridge_slave_0: entered allmulticast mode [ 1396.145941][T30329] bridge_slave_0: entered promiscuous mode [ 1396.252168][T30329] bridge0: port 2(bridge_slave_1) entered blocking state [ 1396.274365][T30329] bridge0: port 2(bridge_slave_1) entered disabled state [ 1396.308454][T30329] bridge_slave_1: entered allmulticast mode [ 1396.437680][T30329] bridge_slave_1: entered promiscuous mode [ 1396.626821][T30329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1396.675296][T30329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1396.809376][T30329] team0: Port device team_slave_0 added [ 1396.847323][T30329] team0: Port device team_slave_1 added [ 1396.944999][T30383] ubi0: attaching mtd0 [ 1396.958093][T30329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1396.973828][T30383] ubi0: scanning is finished [ 1396.988433][T30329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1397.035740][T30383] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1397.125800][T30329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1397.199887][T30329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1397.207869][T30383] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1397.292442][T30329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1397.433894][T30329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1397.701312][T30329] hsr_slave_0: entered promiscuous mode [ 1397.729856][T30329] hsr_slave_1: entered promiscuous mode [ 1397.758041][T30329] debugfs: 'hsr0' already exists in 'hsr' [ 1397.783468][T30329] Cannot create hsr debugfs directory [ 1397.956007][T20153] Bluetooth: hci2: command tx timeout [ 1398.573754][T30329] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1398.657530][T30329] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1398.725207][T30329] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1398.820757][T30329] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1398.979292][T30426] ptrace attach of "./syz-executor exec"[26972] was attempted by ""[30426] [ 1399.458476][T30329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1399.606549][T30329] 8021q: adding VLAN 0 to HW filter on device team0 [ 1399.712405][T20817] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.719547][T20817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1399.740744][T30445] netlink: 'syz.6.5114': attribute type 2 has an invalid length. [ 1399.759195][T30447] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5114'. [ 1399.873369][T20817] bridge0: port 2(bridge_slave_1) entered blocking state [ 1399.880537][T20817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1400.036177][T20153] Bluetooth: hci2: command tx timeout [ 1400.109160][T30454] ubi0: attaching mtd1 [ 1400.123333][T30454] ubi0: scanning is finished [ 1400.130765][T30454] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1400.350239][T30454] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22 [ 1400.621199][T30465] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5119'. [ 1400.646399][T30465] netlink: 354 bytes leftover after parsing attributes in process `syz.6.5119'. [ 1400.876406][T30472] input: f¬ as /devices/virtual/input/input95 [ 1401.217100][T30477] FAULT_INJECTION: forcing a failure. [ 1401.217100][T30477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1401.234529][T30477] CPU: 0 UID: 0 PID: 30477 Comm: syz.6.5122 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1401.234563][T30477] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1401.234571][T30477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1401.234580][T30477] Call Trace: [ 1401.234585][T30477] [ 1401.234592][T30477] dump_stack_lvl+0x16c/0x1f0 [ 1401.234618][T30477] should_fail_ex+0x512/0x640 [ 1401.234638][T30477] _copy_to_user+0x32/0xd0 [ 1401.234655][T30477] simple_read_from_buffer+0xcb/0x170 [ 1401.234676][T30477] proc_fail_nth_read+0x197/0x240 [ 1401.234701][T30477] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1401.234732][T30477] ? rw_verify_area+0xcf/0x6c0 [ 1401.234750][T30477] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1401.234773][T30477] vfs_read+0x1e4/0xcf0 [ 1401.234793][T30477] ? trace_inet_sock_set_state+0x194/0x1f0 [ 1401.234812][T30477] ? __pfx_vfs_read+0x10/0x10 [ 1401.234830][T30477] ? reacquire_held_locks+0xcd/0x1f0 [ 1401.234845][T30477] ? release_sock+0x21/0x220 [ 1401.234863][T30477] ? tcp_release_cb+0x272/0x4f0 [ 1401.234884][T30477] ? find_held_lock+0x2b/0x80 [ 1401.234903][T30477] ? inet_listen+0xa2/0xd0 [ 1401.234918][T30477] ? rcu_is_watching+0x12/0xc0 [ 1401.234940][T30477] ksys_read+0x12a/0x250 [ 1401.234959][T30477] ? __pfx_ksys_read+0x10/0x10 [ 1401.234978][T30477] ? __sys_listen_socket+0x11e/0x160 [ 1401.234998][T30477] do_syscall_64+0xcd/0xf80 [ 1401.235020][T30477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1401.235036][T30477] RIP: 0033:0x7fd76bb8e1dc [ 1401.235048][T30477] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1401.235062][T30477] RSP: 002b:00007fd76c95a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1401.235076][T30477] RAX: ffffffffffffffda RBX: 00007fd76bde5fa0 RCX: 00007fd76bb8e1dc [ 1401.235087][T30477] RDX: 000000000000000f RSI: 00007fd76c95a0a0 RDI: 0000000000000004 [ 1401.235095][T30477] RBP: 00007fd76c95a090 R08: 0000000000000000 R09: 0000000000000000 [ 1401.235104][T30477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1401.235113][T30477] R13: 00007fd76bde6038 R14: 00007fd76bde5fa0 R15: 00007fff7bb40578 [ 1401.235132][T30477] [ 1401.607687][T30016] BUG: Bad page map in process syz.1.5005 pte:80000000abe00007 [ 1401.608108][T30016] pgd:800000006ed2c067 p4d:800000006ed2c067 pud:6ed2b067 pmd:8a983067 [ 1401.624935][T30016] page: refcount:1 mapcount:-1 mapping:0000000000000000 index:0x200 pfn:0xabe00 [ 1401.634021][T30016] flags: 0xfff00000000014(referenced|dirty|node=0|zone=1|lastcpupid=0x7ff) [ 1401.642871][T30016] raw: 00fff00000000014 dead000000000100 dead000000000122 0000000000000000 [ 1401.663097][T30016] raw: 0000000000000200 0000000000000000 00000001fffffffe 0000000000000000 [ 1401.682108][T30016] page dumped because: bad page map [ 1401.693064][T30016] page_owner tracks the page as allocated [ 1401.700285][T30016] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 19188, tgid 19188 (syz-executor), ts 780491487850, free_ts 758750405403 [ 1401.720519][T30016] post_alloc_hook+0x1af/0x220 [ 1401.725374][T30016] get_page_from_freelist+0xd0b/0x31a0 [ 1401.731002][T30016] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 1401.737093][T30016] alloc_pages_mpol+0x1fb/0x550 [ 1401.741936][T30016] alloc_pages_noprof+0x131/0x390 [ 1401.747239][T30016] __vmalloc_node_range_noprof+0xe6c/0x16b0 [ 1401.753120][T30016] vmalloc_user_noprof+0x9e/0xe0 [ 1401.758089][T30016] kcov_ioctl+0x4c/0x6e0 [ 1401.762320][T30016] __x64_sys_ioctl+0x18e/0x210 [ 1401.767102][T30016] do_syscall_64+0xcd/0xf80 [ 1401.771595][T30016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1401.777502][T30016] page last free pid 18705 tgid 18703 stack trace: [ 1401.783982][T30016] free_unref_folios+0xa22/0x1610 [ 1401.789038][T30016] folios_put_refs+0x4be/0x750 [ 1401.793789][T30016] free_pages_and_swap_cache+0x3f0/0x4a0 [ 1401.799465][T30016] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 1401.805768][T30016] tlb_finish_mmu+0x168/0x7c0 [ 1401.810434][T30016] vms_clear_ptes+0x55a/0x790 [ 1401.815096][T30016] __mmap_region+0x627/0x2a00 [ 1401.820032][T30016] mmap_region+0x1ab/0x3f0 [ 1401.824436][T30016] do_mmap+0xa3e/0x1210 [ 1401.828703][T30016] vm_mmap_pgoff+0x29e/0x470 [ 1401.833280][T30016] ksys_mmap_pgoff+0x7d/0x5c0 [ 1401.837992][T30016] __x64_sys_mmap+0x125/0x190 [ 1401.842656][T30016] do_syscall_64+0xcd/0xf80 [ 1401.847272][T30016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1401.853175][T30016] addr:00007f0851dfd000 vm_flags:180400fb anon_vma:0000000000000000 mapping:ffff888149090728 index:200 [ 1401.864251][T30016] file:kcov fault:0x0 mmap:kcov_mmap mmap_prepare: 0x0 read_folio:0x0 [ 1401.872461][T30016] CPU: 0 UID: 0 PID: 30016 Comm: syz.1.5005 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1401.872493][T30016] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1401.872501][T30016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1401.872510][T30016] Call Trace: [ 1401.872516][T30016] [ 1401.872522][T30016] dump_stack_lvl+0x16c/0x1f0 [ 1401.872546][T30016] print_bad_page_map+0x4b5/0xa00 [ 1401.872570][T30016] ? __pfx_print_bad_page_map+0x10/0x10 [ 1401.872589][T30016] ? folio_remove_rmap_ptes+0x391/0xfb0 [ 1401.872608][T30016] unmap_page_range+0x1c5d/0x43c0 [ 1401.872650][T30016] ? __pfx_unmap_page_range+0x10/0x10 [ 1401.872670][T30016] ? mas_next_slot+0x12d3/0x1cb0 [ 1401.872696][T30016] ? uprobe_munmap+0x20/0x600 [ 1401.872715][T30016] unmap_single_vma+0x153/0x240 [ 1401.872737][T30016] unmap_vmas+0x218/0x470 [ 1401.872760][T30016] ? __pfx_unmap_vmas+0x10/0x10 [ 1401.872794][T30016] exit_mmap+0x1b0/0xb60 [ 1401.872817][T30016] ? __pfx_exit_mmap+0x10/0x10 [ 1401.872844][T30016] ? find_held_lock+0x2b/0x80 [ 1401.872874][T30016] __mmput+0x12a/0x410 [ 1401.872895][T30016] mmput+0x62/0x70 [ 1401.872913][T30016] do_exit+0x7d7/0x2bd0 [ 1401.872927][T30016] ? __pfx___might_resched+0x10/0x10 [ 1401.872950][T30016] ? __pfx_do_exit+0x10/0x10 [ 1401.872964][T30016] ? do_raw_spin_lock+0x12c/0x2b0 [ 1401.872980][T30016] ? find_held_lock+0x2b/0x80 [ 1401.873001][T30016] do_group_exit+0xd3/0x2a0 [ 1401.873016][T30016] get_signal+0x2671/0x26d0 [ 1401.873043][T30016] ? __pfx_get_signal+0x10/0x10 [ 1401.873060][T30016] ? kernel_move_pages+0xc60/0x12f0 [ 1401.873077][T30016] ? do_futex+0x122/0x350 [ 1401.873096][T30016] arch_do_signal_or_restart+0x8f/0x7a0 [ 1401.873118][T30016] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1401.873148][T30016] exit_to_user_mode_loop+0x8c/0x540 [ 1401.873169][T30016] do_syscall_64+0x4ee/0xf80 [ 1401.873191][T30016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1401.873207][T30016] RIP: 0033:0x7f085258f7c9 [ 1401.873219][T30016] Code: Unable to access opcode bytes at 0x7f085258f79f. [ 1401.873226][T30016] RSP: 002b:00007f08507f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1401.873240][T30016] RAX: fffffffffffffff2 RBX: 00007f08527e5fa0 RCX: 00007f085258f7c9 [ 1401.873250][T30016] RDX: 0000000000000000 RSI: 0002000000000003 RDI: 0000000000000001 [ 1401.873259][T30016] RBP: 00007f0852613f91 R08: 0000000000000000 R09: 8000400000000000 [ 1401.873268][T30016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1401.873276][T30016] R13: 00007f08527e6038 R14: 00007f08527e5fa0 R15: 00007ffd4533f808 [ 1401.873296][T30016] [ 1401.873301][T30016] Disabling lock debugging due to kernel taint [ 1402.152610][T30329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1402.234731][T20153] Bluetooth: hci2: command tx timeout [ 1402.628932][T30016] BUG: Bad page state in process syz.1.5005 pfn:abe00 [ 1402.686075][T30016] page: refcount:0 mapcount:-1 mapping:0000000000000000 index:0x200 pfn:0xabe00 [ 1402.695119][T30016] flags: 0xfff00000000014(referenced|dirty|node=0|zone=1|lastcpupid=0x7ff) [ 1402.792322][T30016] raw: 00fff00000000014 dead000000000100 dead000000000122 0000000000000000 [ 1402.845855][T30016] raw: 0000000000000200 0000000000000000 00000000fffffffe 0000000000000000 [ 1402.854532][T30016] page dumped because: nonzero mapcount [ 1402.894113][T30016] page_owner tracks the page as allocated [ 1402.902496][T30016] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 19188, tgid 19188 (syz-executor), ts 780491487850, free_ts 758750405403 [ 1402.934836][T30016] post_alloc_hook+0x1af/0x220 [ 1402.939884][T30016] get_page_from_freelist+0xd0b/0x31a0 [ 1402.945335][T30016] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 1402.951421][T30016] alloc_pages_mpol+0x1fb/0x550 [ 1402.956579][T30016] alloc_pages_noprof+0x131/0x390 [ 1402.961599][T30016] __vmalloc_node_range_noprof+0xe6c/0x16b0 [ 1402.969135][T30016] vmalloc_user_noprof+0x9e/0xe0 [ 1402.974149][T30016] kcov_ioctl+0x4c/0x6e0 [ 1402.978683][T30016] __x64_sys_ioctl+0x18e/0x210 [ 1402.983438][T30016] do_syscall_64+0xcd/0xf80 [ 1402.988113][T30016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1402.993992][T30016] page last free pid 18705 tgid 18703 stack trace: [ 1403.000811][T30016] free_unref_folios+0xa22/0x1610 [ 1403.007508][T30016] folios_put_refs+0x4be/0x750 [ 1403.012272][T30016] free_pages_and_swap_cache+0x3f0/0x4a0 [ 1403.018094][T30016] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 1403.024061][T30016] tlb_finish_mmu+0x168/0x7c0 [ 1403.029041][T30016] vms_clear_ptes+0x55a/0x790 [ 1403.034187][T30016] __mmap_region+0x627/0x2a00 [ 1403.039060][T30016] mmap_region+0x1ab/0x3f0 [ 1403.043463][T30016] do_mmap+0xa3e/0x1210 [ 1403.047779][T30016] vm_mmap_pgoff+0x29e/0x470 [ 1403.052358][T30016] ksys_mmap_pgoff+0x7d/0x5c0 [ 1403.057284][T30016] __x64_sys_mmap+0x125/0x190 [ 1403.061953][T30016] do_syscall_64+0xcd/0xf80 [ 1403.066622][T30016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.101450][T30016] Modules linked in: [ 1403.105376][T30016] CPU: 0 UID: 0 PID: 30016 Comm: syz.1.5005 Tainted: G BU W L XTNJ syzkaller #0 PREEMPT(full) [ 1403.105408][T30016] Tainted: [B]=BAD_PAGE, [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1403.105416][T30016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1403.105425][T30016] Call Trace: [ 1403.105430][T30016] [ 1403.105436][T30016] dump_stack_lvl+0x16c/0x1f0 [ 1403.105462][T30016] bad_page+0xcf/0x220 [ 1403.105482][T30016] ? __pfx_bad_page+0x10/0x10 [ 1403.105500][T30016] ? page_bad_reason+0x9d/0x1f0 [ 1403.105523][T30016] free_unref_folios+0xb43/0x1610 [ 1403.105546][T30016] folios_put_refs+0x4be/0x750 [ 1403.105565][T30016] ? __pfx_folios_put_refs+0x10/0x10 [ 1403.105581][T30016] ? sched_clock+0x38/0x60 [ 1403.105603][T30016] ? kvm_sched_clock_read+0x11/0x20 [ 1403.105622][T30016] ? sched_clock+0x38/0x60 [ 1403.105642][T30016] free_pages_and_swap_cache+0x3f0/0x4a0 [ 1403.105661][T30016] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 1403.105686][T30016] ? rcu_is_watching+0x12/0xc0 [ 1403.105711][T30016] ? lruvec_stat_mod_folio+0x25b/0x3b0 [ 1403.105730][T30016] ? __pfx___might_resched+0x10/0x10 [ 1403.105750][T30016] ? folio_remove_rmap_ptes+0x391/0xfb0 [ 1403.105766][T30016] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 1403.105782][T30016] tlb_flush_mmu+0xe9/0x5a0 [ 1403.105795][T30016] ? lock_release+0x201/0x2d0 [ 1403.105809][T30016] unmap_page_range+0x1e64/0x43c0 [ 1403.105836][T30016] ? __pfx_unmap_page_range+0x10/0x10 [ 1403.105856][T30016] ? mas_next_slot+0x12d3/0x1cb0 [ 1403.105879][T30016] ? uprobe_munmap+0x20/0x600 [ 1403.105896][T30016] unmap_single_vma+0x153/0x240 [ 1403.105916][T30016] unmap_vmas+0x218/0x470 [ 1403.105937][T30016] ? __pfx_unmap_vmas+0x10/0x10 [ 1403.105961][T30016] exit_mmap+0x1b0/0xb60 [ 1403.105982][T30016] ? __pfx_exit_mmap+0x10/0x10 [ 1403.106005][T30016] ? find_held_lock+0x2b/0x80 [ 1403.106027][T30016] __mmput+0x12a/0x410 [ 1403.106046][T30016] mmput+0x62/0x70 [ 1403.106064][T30016] do_exit+0x7d7/0x2bd0 [ 1403.106077][T30016] ? __pfx___might_resched+0x10/0x10 [ 1403.106097][T30016] ? __pfx_do_exit+0x10/0x10 [ 1403.106110][T30016] ? do_raw_spin_lock+0x12c/0x2b0 [ 1403.106126][T30016] ? find_held_lock+0x2b/0x80 [ 1403.106144][T30016] do_group_exit+0xd3/0x2a0 [ 1403.106158][T30016] get_signal+0x2671/0x26d0 [ 1403.106180][T30016] ? __pfx_get_signal+0x10/0x10 [ 1403.106198][T30016] ? kernel_move_pages+0xc60/0x12f0 [ 1403.106213][T30016] ? do_futex+0x122/0x350 [ 1403.106229][T30016] arch_do_signal_or_restart+0x8f/0x7a0 [ 1403.106249][T30016] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1403.106273][T30016] exit_to_user_mode_loop+0x8c/0x540 [ 1403.106291][T30016] do_syscall_64+0x4ee/0xf80 [ 1403.106312][T30016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.106327][T30016] RIP: 0033:0x7f085258f7c9 [ 1403.106339][T30016] Code: Unable to access opcode bytes at 0x7f085258f79f. [ 1403.106346][T30016] RSP: 002b:00007f08507f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1403.106360][T30016] RAX: fffffffffffffff2 RBX: 00007f08527e5fa0 RCX: 00007f085258f7c9 [ 1403.106369][T30016] RDX: 0000000000000000 RSI: 0002000000000003 RDI: 0000000000000001 [ 1403.106378][T30016] RBP: 00007f0852613f91 R08: 0000000000000000 R09: 8000400000000000 [ 1403.106388][T30016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1403.106396][T30016] R13: 00007f08527e6038 R14: 00007f08527e5fa0 R15: 00007ffd4533f808 [ 1403.106410][T30016] [ 1403.502576][T20215] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.539831][T20215] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.600643][T20215] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.627573][T30016] page: refcount:0 mapcount:-1 mapping:0000000000000000 index:0x200 pfn:0xabe00 [ 1403.639549][T20215] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.651443][T30016] flags: 0xfff00000000014(referenced|dirty|node=0|zone=1|lastcpupid=0x7ff) [ 1403.660331][T30016] raw: 00fff00000000014 dead000000000100 dead000000000122 0000000000000000 [ 1403.669980][T30016] raw: 0000000000000200 0000000000000000 00000000fffffffe 0000000000000000 [ 1403.717621][T20215] gretap0: left allmulticast mode [ 1403.722666][T20215] gretap0: left promiscuous mode [ 1403.727798][T20215] bridge0: port 3(gretap0) entered disabled state [ 1403.734959][T20215] bridge_slave_1: left allmulticast mode [ 1403.740749][T20215] bridge_slave_1: left promiscuous mode [ 1403.746544][T20215] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.754572][T20215] bridge_slave_0: left allmulticast mode [ 1403.760475][T20215] bridge_slave_0: left promiscuous mode [ 1403.766555][T20215] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.804198][T30016] page dumped because: VM_BUG_ON_PAGE(page_ref_count(page) == 0) [ 1403.823359][T30016] page_owner tracks the page as allocated [ 1403.830765][T30016] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 19188, tgid 19188 (syz-executor), ts 780491487850, free_ts 758750405403 [ 1403.851526][T30016] post_alloc_hook+0x1af/0x220 [ 1403.856440][T30016] get_page_from_freelist+0xd0b/0x31a0 [ 1403.861889][T30016] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 1403.868018][T30016] alloc_pages_mpol+0x1fb/0x550 [ 1403.872861][T30016] alloc_pages_noprof+0x131/0x390 [ 1403.879374][T30016] __vmalloc_node_range_noprof+0xe6c/0x16b0 [ 1403.885263][T30016] vmalloc_user_noprof+0x9e/0xe0 [ 1403.891806][T30016] kcov_ioctl+0x4c/0x6e0 [ 1403.896293][T30016] __x64_sys_ioctl+0x18e/0x210 [ 1403.901062][T30016] do_syscall_64+0xcd/0xf80 [ 1403.905903][T30016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.911785][T30016] page last free pid 18705 tgid 18703 stack trace: [ 1403.918468][T30016] free_unref_folios+0xa22/0x1610 [ 1403.923484][T30016] folios_put_refs+0x4be/0x750 [ 1403.928460][T30016] free_pages_and_swap_cache+0x3f0/0x4a0 [ 1403.934082][T30016] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 1403.940239][T30016] tlb_finish_mmu+0x168/0x7c0 [ 1403.944903][T30016] vms_clear_ptes+0x55a/0x790 [ 1403.949782][T30016] __mmap_region+0x627/0x2a00 [ 1403.954922][T30016] mmap_region+0x1ab/0x3f0 [ 1403.959582][T30016] do_mmap+0xa3e/0x1210 [ 1403.963744][T30016] vm_mmap_pgoff+0x29e/0x470 [ 1403.968702][T30016] ksys_mmap_pgoff+0x7d/0x5c0 [ 1403.973373][T30016] __x64_sys_mmap+0x125/0x190 [ 1403.978278][T30016] do_syscall_64+0xcd/0xf80 [ 1403.982771][T30016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.000471][T30016] ------------[ cut here ]------------ [ 1404.006161][T30016] kernel BUG at ./include/linux/mm.h:1288! [ 1404.015945][T20215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1404.024693][T30016] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 1404.030925][T30016] CPU: 0 UID: 0 PID: 30016 Comm: syz.1.5005 Tainted: G BU W L XTNJ syzkaller #0 PREEMPT(full) [ 1404.041850][T30016] Tainted: [B]=BAD_PAGE, [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1404.053105][T30016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1404.063139][T30016] RIP: 0010:___free_pages+0x1e5/0x220 [ 1404.068504][T30016] Code: 0f 94 c6 e9 b6 fe ff ff 48 c7 c6 20 f9 9c 8b 4c 89 ef e8 2e a6 ef ff 90 0f 0b 48 c7 c6 c0 0c 9d 8b 4c 89 ef e8 1c a6 ef ff 90 <0f> 0b 48 89 df e8 11 a1 0e 00 e9 c0 fe ff ff e8 37 a1 0e 00 e9 2f [ 1404.088098][T30016] RSP: 0018:ffffc9000bd0f998 EFLAGS: 00010293 [ 1404.094144][T30016] RAX: 0000000000000000 RBX: ffffea0002af8034 RCX: 0000000000000000 [ 1404.102093][T30016] RDX: ffff888076f45b80 RSI: ffffffff82189374 RDI: ffff888076f46004 [ 1404.110045][T30016] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1404.117995][T30016] R10: ffffffff9088e2d7 R11: 0000000000000000 R12: 0000000000000000 [ 1404.125945][T30016] R13: ffffea0002af8000 R14: 0000000000000000 R15: ffff88814d29eb00 [ 1404.133895][T30016] FS: 0000000000000000(0000) GS:ffff8881248fd000(0000) knlGS:0000000000000000 [ 1404.142804][T30016] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1404.149368][T30016] CR2: 000055a8e9d5f820 CR3: 000000003589a000 CR4: 00000000003526f0 [ 1404.157319][T30016] Call Trace: [ 1404.160587][T30016] [ 1404.163503][T30016] vfree+0x1fd/0xb50 [ 1404.167389][T30016] ? kcov_close+0x2b/0x60 [ 1404.171705][T30016] ? rcu_is_watching+0x12/0xc0 [ 1404.176453][T30016] ? rcu_is_watching+0x12/0xc0 [ 1404.181203][T30016] ? trace_irq_enable.constprop.0+0xd4/0x110 [ 1404.187171][T30016] ? __pfx_kcov_close+0x10/0x10 [ 1404.192004][T30016] kcov_close+0x34/0x60 [ 1404.196143][T30016] __fput+0x402/0xb70 [ 1404.200130][T30016] ? cleanup_mnt+0x26b/0x450 [ 1404.204705][T30016] task_work_run+0x150/0x240 [ 1404.209451][T30016] ? __pfx_task_work_run+0x10/0x10 [ 1404.214544][T30016] do_exit+0x87f/0x2bd0 [ 1404.218680][T30016] ? __pfx___might_resched+0x10/0x10 [ 1404.223952][T30016] ? __pfx_do_exit+0x10/0x10 [ 1404.228522][T30016] ? do_raw_spin_lock+0x12c/0x2b0 [ 1404.233530][T30016] ? find_held_lock+0x2b/0x80 [ 1404.238207][T30016] do_group_exit+0xd3/0x2a0 [ 1404.242720][T30016] get_signal+0x2671/0x26d0 [ 1404.247221][T30016] ? __pfx_get_signal+0x10/0x10 [ 1404.252074][T30016] ? kernel_move_pages+0xc60/0x12f0 [ 1404.257259][T30016] ? do_futex+0x122/0x350 [ 1404.261572][T30016] arch_do_signal_or_restart+0x8f/0x7a0 [ 1404.267105][T30016] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1404.273251][T30016] exit_to_user_mode_loop+0x8c/0x540 [ 1404.278522][T30016] do_syscall_64+0x4ee/0xf80 [ 1404.283102][T30016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.288978][T30016] RIP: 0033:0x7f085258f7c9 [ 1404.293373][T30016] Code: Unable to access opcode bytes at 0x7f085258f79f. [ 1404.300390][T30016] RSP: 002b:00007f08507f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1404.308789][T30016] RAX: fffffffffffffff2 RBX: 00007f08527e5fa0 RCX: 00007f085258f7c9 [ 1404.316742][T30016] RDX: 0000000000000000 RSI: 0002000000000003 RDI: 0000000000000001 [ 1404.324699][T30016] RBP: 00007f0852613f91 R08: 0000000000000000 R09: 8000400000000000 [ 1404.332653][T30016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1404.340603][T30016] R13: 00007f08527e6038 R14: 00007f08527e5fa0 R15: 00007ffd4533f808 [ 1404.348561][T30016] [ 1404.351559][T30016] Modules linked in: [ 1404.356143][T30016] ---[ end trace 0000000000000000 ]--- [ 1404.362955][T20215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1404.382098][T20215] bond0 (unregistering): Released all slaves [ 1404.434553][T30490] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1404.451877][T30016] RIP: 0010:___free_pages+0x1e5/0x220 [ 1404.457834][T30016] Code: 0f 94 c6 e9 b6 fe ff ff 48 c7 c6 20 f9 9c 8b 4c 89 ef e8 2e a6 ef ff 90 0f 0b 48 c7 c6 c0 0c 9d 8b 4c 89 ef e8 1c a6 ef ff 90 <0f> 0b 48 89 df e8 11 a1 0e 00 e9 c0 fe ff ff e8 37 a1 0e 00 e9 2f [ 1404.501200][T30490] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1404.522823][T30016] RSP: 0018:ffffc9000bd0f998 EFLAGS: 00010293 [ 1404.557295][T30016] RAX: 0000000000000000 RBX: ffffea0002af8034 RCX: 0000000000000000 [ 1404.565307][T30016] RDX: ffff888076f45b80 RSI: ffffffff82189374 RDI: ffff888076f46004 [ 1404.581400][T30491] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1404.600201][T30016] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1404.608446][T30016] R10: ffffffff9088e2d7 R11: 0000000000000000 R12: 0000000000000000 [ 1404.631509][T20215] hsr_slave_0: left promiscuous mode [ 1404.637171][T30491] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1404.654244][T20215] hsr_slave_1: left promiscuous mode [ 1404.660020][T30016] R13: ffffea0002af8000 R14: 0000000000000000 R15: ffff88814d29eb00 [ 1404.670822][T20215] veth0_macvtap: left promiscuous mode [ 1404.676522][T30016] FS: 0000000000000000(0000) GS:ffff8881248fd000(0000) knlGS:0000000000000000 [ 1404.685445][T30016] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1404.692166][T20215] veth1_vlan: left promiscuous mode [ 1404.701074][T20215] veth0_vlan: left promiscuous mode [ 1404.714523][T30016] CR2: 00007fca7f4d5feb CR3: 000000007c89a000 CR4: 00000000003526f0 [ 1404.731725][T30016] Kernel panic - not syncing: Fatal exception [ 1404.737855][T30016] Kernel Offset: disabled [ 1404.742164][T30016] Rebooting in 86400 seconds..