last executing test programs: 7m39.793924868s ago: executing program 0 (id=455): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) socket(0x29, 0x5, 0x0) select$auto(0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$auto_F_SETLKW(0xffffffffffffffff, 0x7, 0xca2) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x400c000) 7m39.117950157s ago: executing program 0 (id=456): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) socket(0x15, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vhci_hcd.8/usb25/25-0:1.0/usb25-port7/disable\x00', 0x838140, 0x0) write$auto(r3, &(0x7f0000000440)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x20, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x8}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) socket(0xf, 0x3, 0x2) preadv$auto(r1, &(0x7f0000000140)={0x0, 0x2}, 0x2, 0x4000001000, 0x9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0xf92b, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) gettid() futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x80001, 0x0) prctl$auto(0x23, 0x4, 0x7fffffffefff, 0x0, 0x0) getsockopt$auto(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) 7m38.103160373s ago: executing program 0 (id=460): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0xd, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x2584, 0x0) ioctl$auto(0x3, 0x40045542, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000100)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_prog_fd=r0}, 0xa3) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0xf3, 0x4, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xa2102, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) read$auto(r1, 0x0, 0x2) rseq$auto(&(0x7f0000000000)={0xe, 0x7, 0x100, 0xfffffffc, 0x6, 0x6, "65ad58b9dbceee4e8419a3c22a01ae4e11000379df7ac5943b2b6b306ab36dabe0b073"}, 0x7, 0x0, 0x5) capset$auto(0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x100fe) io_submit$auto(0x0, 0xfffffffffffffffd, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x261c2, 0x184) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) 7m37.832220171s ago: executing program 0 (id=462): unshare$auto(0x40000080) (async) unshare$auto(0xcda) (async, rerun: 32) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (rerun: 32) prctl$auto(0x7fff, 0x1, 0x0, 0xfffffffffffffffd, 0xcc7) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) keyctl$auto(0x1, 0x1, 0x0, 0x3, 0xb1ae) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0x200007, 0x19) (async) keyctl$auto_KEYCTL_CAPABILITIES(0x1f, 0x6, 0x7, 0x400, 0x8) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async, rerun: 32) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x149401, 0x0) (rerun: 32) ioctl$auto(r1, 0x540a, 0x0) mmap$auto(0x6, 0xa498, 0x9, 0x1d, r0, 0x8002) (async, rerun: 32) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x0) (rerun: 32) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4001af84, 0x0) (async) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async, rerun: 64) pwrite64$auto(0xc8, 0x0, 0x80000000002, 0x3) (rerun: 64) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0x40001, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x1, 0x3, 0xeb1, r0, 0x8000) (async, rerun: 32) socket(0x3, 0x5, 0xfff) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8800c0, 0x0) read$auto(r3, 0x0, 0x20) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/fail-nth\x00', 0x48342, 0x0) r4 = memfd_secret$auto(0x0) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0xffffffffffffffff, 0x20008, 0x4000000000e2, 0x4000000000000010, 0x401, 0x8000) (async, rerun: 32) close_range$auto(r4, 0xa, 0x0) (async, rerun: 32) setresgid$auto(0x0, 0x0, 0xffffffffffffffff) (async) keyctl$auto(0x8, 0x0, 0x0, 0x0, 0x1ff) 7m37.302072721s ago: executing program 0 (id=468): mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000) sysfs$auto(0x2, 0x41, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r0, 0x5, &(0x7f0000000180)='+\x00_\xe8\xdb\xff\x0f\\X\xc9#\xa0\xdc\x04\x0f\x99v\xbc\xc3\xf2\x03\xe2T\b\x9c\xe7J\xcd\x00\x00\x00\x00\x00\x00\x00\x00c\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0) socket(0x10, 0x2, 0xff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) socket(0x2, 0x80002, 0x73) chroot$auto(0xfffffffffffffffd) connect$auto(0x3, 0x0, 0x54) write$auto(0x3, 0x0, 0xfdef) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x183941, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'virt_wifi0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r4, @ANYBLOB="0a0005000180c200000e00000a07000000000000000e00000a000100000000000000000008000200", @ANYRES32=r4], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) 7m36.162517545s ago: executing program 0 (id=477): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async, rerun: 64) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r0, 0x0, 0x20) (async) writev$auto(r0, &(0x7f00000000c0)={0x0, 0x3}, 0x80000000000001) (async) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/security/tomoyo/query\x00', 0x62402, 0x0) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) (async) socket(0xa, 0x3, 0x3a) (async, rerun: 32) io_uring_setup$auto(0x1, 0x0) (rerun: 32) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x565) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) select$auto(0x2000e, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff4d, 0x5, 0x5, 0x800000000001, 0x0, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x4000000000008, 0xfffffffffffffffa, 0xab]}, 0x0) (async, rerun: 64) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x400007, 0x4000000df, 0x9b72, 0xffffffffffffffff, 0x0) (async) sendmsg$auto_NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESDEC], 0x3c}}, 0x0) (async, rerun: 64) writev$auto(0xffffffffffffffff, 0x0, 0x3) (rerun: 64) connect$auto(0x3, 0x0, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) (async) r1 = socket(0x2, 0x1, 0x106) setsockopt$auto(r1, 0x1, 0x40, 0x0, 0xbb) (async) close_range$auto(0x2, 0xa, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) (async, rerun: 32) unshare$auto(0x40000080) (async, rerun: 32) openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/make-it-fail\x00', 0x40002, 0x0) (async, rerun: 64) write$auto(0xca, &(0x7f0000000280)='\x04>\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00i$\x99\n\xd3\x94\xa3\xea\xf5\xda{\xef\x819\xfcsQ\xbb?\xac\xc1L\xa93\x1e\xc3\xdf\xd5u\xa2\xc4\x85g\xec\xcf\xb1L\'\xb1\xa6\xfa\xc1\x1e\xe6\x19\x94\xc7\x00\xb5B5\xc7\xb2\x84c\x12\x85\x9f\xb6}r\xb5\x94\xe4\x11\x11v9\xc8\x81Au\xbbC\x7f\xa8\x95\x9d\x13W\xd9\x1b}\x98U\x84w\xe9\xfekLd4!\xb1\xba7G\xfa\xda\xc8\x00\x96j\x86\xbfX\xb8fM\xad\xae\xaa\xd0\xca\x1b;\xb6\x94\xf4\xfd\xa3\x0e+\xb2\xe3\xa7\xf2\x9e\x88\x16\xe4\x11\xa9=$\x8e\xf2\x00\xdd.K', 0x7f) (async, rerun: 64) socket(0x26, 0x1, 0xfffffffc) 7m20.062616303s ago: executing program 32 (id=477): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async, rerun: 64) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r0, 0x0, 0x20) (async) writev$auto(r0, &(0x7f00000000c0)={0x0, 0x3}, 0x80000000000001) (async) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/security/tomoyo/query\x00', 0x62402, 0x0) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) (async) socket(0xa, 0x3, 0x3a) (async, rerun: 32) io_uring_setup$auto(0x1, 0x0) (rerun: 32) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x565) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) select$auto(0x2000e, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff4d, 0x5, 0x5, 0x800000000001, 0x0, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x4000000000008, 0xfffffffffffffffa, 0xab]}, 0x0) (async, rerun: 64) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x400007, 0x4000000df, 0x9b72, 0xffffffffffffffff, 0x0) (async) sendmsg$auto_NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESDEC], 0x3c}}, 0x0) (async, rerun: 64) writev$auto(0xffffffffffffffff, 0x0, 0x3) (rerun: 64) connect$auto(0x3, 0x0, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) (async) r1 = socket(0x2, 0x1, 0x106) setsockopt$auto(r1, 0x1, 0x40, 0x0, 0xbb) (async) close_range$auto(0x2, 0xa, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) (async, rerun: 32) unshare$auto(0x40000080) (async, rerun: 32) openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/make-it-fail\x00', 0x40002, 0x0) (async, rerun: 64) write$auto(0xca, &(0x7f0000000280)='\x04>\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00i$\x99\n\xd3\x94\xa3\xea\xf5\xda{\xef\x819\xfcsQ\xbb?\xac\xc1L\xa93\x1e\xc3\xdf\xd5u\xa2\xc4\x85g\xec\xcf\xb1L\'\xb1\xa6\xfa\xc1\x1e\xe6\x19\x94\xc7\x00\xb5B5\xc7\xb2\x84c\x12\x85\x9f\xb6}r\xb5\x94\xe4\x11\x11v9\xc8\x81Au\xbbC\x7f\xa8\x95\x9d\x13W\xd9\x1b}\x98U\x84w\xe9\xfekLd4!\xb1\xba7G\xfa\xda\xc8\x00\x96j\x86\xbfX\xb8fM\xad\xae\xaa\xd0\xca\x1b;\xb6\x94\xf4\xfd\xa3\x0e+\xb2\xe3\xa7\xf2\x9e\x88\x16\xe4\x11\xa9=$\x8e\xf2\x00\xdd.K', 0x7f) (async, rerun: 64) socket(0x26, 0x1, 0xfffffffc) 35.255677385s ago: executing program 3 (id=2454): openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$auto(0x3e, 0xfffffffffffffffd, 0x0, 0x1, 0xf5b) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r0, 0x4018620d, 0x9) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) r2 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$auto(r2, 0x10be, r1) socket(0x10, 0x2, 0x6) socketpair$auto(0x3, 0x2, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/dfscache\x00', 0x101a41, 0x0) write$auto(r3, 0x0, 0x6) socket(0x2, 0x3, 0xa) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/oom_adj\x00', 0x40000, 0x0) r4 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x505c7092d15d21b5, 0x0) poll$auto(&(0x7f0000000180)={r4, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto_VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$auto_TIOCSWINSZ(r5, 0x5414, &(0x7f0000000400)="a1875369") setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) write$auto(0x3, 0x0, 0x800) r6 = socket$nl_generic(0x11, 0x3, 0x10) bind$auto(r6, &(0x7f0000000200)=@generic={0x11, "00030f00"}, 0x80) openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/ieee80211/phy7/queues\x00', 0x24000, 0x0) 34.919562017s ago: executing program 3 (id=2456): prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) (async) mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async, rerun: 32) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0x4) (async, rerun: 64) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (rerun: 64) r1 = socket(0xa, 0x3, 0x3b) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) setsockopt$auto(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x8004) (async, rerun: 64) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async, rerun: 64) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_SET_MESH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fadbdf250f00000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x140000e4) (async) sendmsg$auto_BATADV_CMD_TP_METER(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="2420e5f0", @ANYRES16=r4, @ANYBLOB="040025bd7000fedbdf250200000005001100300000000800270002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x10, 0x2, 0x4) (async) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) sendmsg$auto_NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x220, r5, 0x100, 0x70bd2e, 0x25dfdbfb, {}, [@NL80211_ATTR_MLO_TTLM_ULINK={0xe3, 0x149, "f4d3b35ceb9222efcaf8f33a035208b5f1e281d0adb7641bdea47537359ba1cbde1016e057614b65c38b009d6a6679f1b575528710028390da3386c8929cfd67a35e9c60f09f357e4f7fe5271b829670a44dbfc21fe0b7dedf0a2909f911703153585636743d52f9d017d78d3b6c8e86bfc1791d8fcddf4188daac78f82493a5f7214bbc14d82d1a282ada3642fb7fc1c209c6ff5a25fed149dae5087393343ffe2b35f8e3eb9df99306f343980b51bc31175ee4286c0a00cff126d5a775553c8dbb21d3c963b64c3e2a1f466c3dc0a9872dadcb211b7aae7206f168544f21"}, @NL80211_ATTR_S1G_CAPABILITY_MASK={0x5c, 0x129, "1e5c1db8183b3fcd99fcbd10e36b6b31188e6a3618ab5518c4c31bb68512487f58d3e95cedf0d74f561810d8fd0e63219a8715affe9aecfdea26e5b363b319ad1e79f8e18964076fbd498fca81997a549f69337d841af494"}, @NL80211_ATTR_MLO_TTLM_DLINK={0xb0, 0x148, "223971d91e4c5366fb3c8ae249664cacd2d28be8e155cefdc4572f8389d656a3764d03b2ea9c2d1db56b9b2fb8467a95720debf06cb73a9631d5e7bbad0148a6e6185d142cd71467b3215cd66a51bce730a5db2f19d8fee5e75a391352a70c12dce709ba460129efa5f90c53cc018f2215bf1fd6632b8bfb5e501680826b4a7539dc66d8a194c245f90e6a7bdadbb90df1a8a7567ff1ae1e47e4bd3773a5c853e5b7ba8a4568006f8ed88757"}, @NL80211_ATTR_WDEV={0xc, 0x99, 0x5}, @NL80211_ATTR_HW_TIMESTAMP_ENABLED={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}]}, 0x220}, 0x1, 0x0, 0x0, 0x4001}, 0x800) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32", @ANYBLOB], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) (rerun: 32) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nbd15\x00', 0x101000, 0x0) (async, rerun: 32) statmount$auto(&(0x7f0000000180)={0x100, @raw=0x2, 0x7, 0x4, 0x101}, &(0x7f0000000580)={0x3, 0x81, 0x8, 0x2, 0x3, 0xf5, 0x1, 0x3ff, 0x8, 0x5f2, 0x3, 0x101, 0x809, 0x10, 0xffffffffe77feb82, 0x958, 0x0, 0xc, 0xbc6, 0x5, 0x9a, 0x7, 0xb422, 0x3, 0x9, 0x3ff, 0xb, 0x5, 0x7, 0x8, 0x7ff, [0x3, 0xdac, 0xfffffffffffffbff, 0xffffffff, 0x2, 0x81, 0x3, 0x1ff, 0x8, 0x12, 0x71, 0xffffffffffffff30, 0xfe2, 0x3, 0x0, 0x9, 0x6, 0xffffffff, 0xea, 0x100000001, 0xfffffffffffffbff, 0x3, 0x7, 0x62d6, 0x1, 0x6, 0x8, 0x0, 0x2, 0x3c, 0x64fa, 0xc, 0x40, 0x6, 0x6, 0x2, 0x61d, 0x1, 0x8000, 0x6, 0xfffffffffffffffb, 0x1e], "63004abb6d1765d72f998f93fe5ce6274b020dcd5977f4da2d59bcbe6d7b074f067ac3a797caf7773e5e8da95b164fde2c802b7ed3c9db87447c0c07439f7453201eee2aaf061aba931c83e9274954c687485f6df0f01b3e143f7c0634d407a1e33a3ab5f6a736637a24ebb96a71e4d3f17a28"}, 0xff, 0xda0) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x2000000009b72, 0xffffffffffffffff, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) capset$auto(0x0, 0x0) 33.864915812s ago: executing program 3 (id=2460): socket(0x2, 0x800, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ustat$auto(0x801, 0x0) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x400000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x4000000eb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop6/queue/rq_affinity\x00', 0x121281, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = pidfd_open$auto(0x1, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) setns(r1, 0x60020000) close_range$auto(r1, 0xfffffffffffff000, 0x7) landlock_create_ruleset$auto(&(0x7f0000000000)={0xfe, 0x2, 0x9}, 0x9, 0x0) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/profile\x00', 0x20002, 0x0) write$auto_tomoyo_operations_securityfs_if(r2, &(0x7f00000012c0)="0a1b9a3c3e20fd2da3d31791840bd7886d8ea582574c58e9865c33d76e1cadd6a7b7b426b7fcdc8e357080d70b5ab848770dc8f745d1c76eedaa12b9db053c00000000000030aeb5dfce3531f694dabdbc08f62cb37e5bc82e660cfd70f603b20416c7bf0e95345b899b4466bf6a70b1274b19782b41ac172a1fe65be53e69c6369b67a4cbd6383a0d767d84516183587530a17dbfd83a7678c6dad9918291c7c9de3d61af452f90cf22400c4bcbb841f7d7641b3bccd058f9f2bad31f2ce81e389e210b34f43b4a5af377a6d4353989b4e9d49b25230d1296ef8b30c6bcdf7a6edf5c3258be46ae9d15fc0417e6070000007b9a8b05b4ad586c7b72db5ae55e9d149330720a", 0x106) landlock_restrict_self$auto(r0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) getcwd$auto(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r3 = open$dir(&(0x7f0000000280)='./file0\x00', 0x100000, 0x0) utimensat$auto(r3, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x7, 0x8000000000000001}, 0x80000000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r4 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x128, r5, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_TIMEOUT_REASON={0x8, 0xf8, 0x2}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xa4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xed, 0xe8, "068d28681d9d94e53c6a6ffc2addb0c47e0c85b8f47c65b5b0b21f36f0485be96534bbdb39138f12fd4ea03dd6b47c20af71d70b4464456f53ecd6ec645b2ad426b34d67cda3d56989fca45b94770729977ec6c1fdd5e2dacca4223ff8dd104d4923b63550fc6e3172f381c010d666485072f7f251c35cfd198a7ae8ef505d6341e53b3f515b18ff74f990b2ed1827d0b326cc6b49d55f3c2736e4cf76f2d69db785660f6ec56f329a022229cf202532196c3d3b8184e11c31a1e978da38f1df58181ed2c22513f9c3146139d9c3ba32718f1e897176b6710f87fccf909ebf03d7218b4c1347ef461c"}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x17}]}, 0x128}, 0x1, 0x0, 0x0, 0x40000}, 0x50e70b289d29da2f) sendmsg$auto_NL80211_CMD_GET_POWER_SAVE(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000001400)={0x95c, r5, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_AP_ISOLATE={0x5}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_FILS_NONCES={0x102, 0xf3, "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"}, @NL80211_ATTR_FRAME={0x82c, 0x33, "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"}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0xff}]}, 0x95c}}, 0x24000001) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/loop13/queue/max_sectors_kb\x00', 0x529306, 0x0) 32.430416769s ago: executing program 3 (id=2463): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(r0, r0, 0x0, 0x7ffff003) vmsplice$auto(0x2, &(0x7f00000000c0)={0x0, 0x7ff}, 0x8000000000000001, 0x0) write$auto(0x1, 0x0, 0x80000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = setfsuid$auto(0xee00) setreuid$auto(r1, 0x0) timer_create$auto(0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x4) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x3, 0x0) shmctl$auto_SHM_STAT_ANY(0x0, 0xf, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) socket(0x28, 0x801, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) r4 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv$auto(r4, &(0x7f0000000080)={&(0x7f0000000040), 0x2}, 0x3, 0x5, 0x0) socket(0x2, 0x1, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x8, 0x62, 0x7, 0x1, 0x6d3f, 0xa, 0x20000000000005, 0x5]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) 30.77771123s ago: executing program 3 (id=2470): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x100000004, 0x2, 0xfffffffffffffffe, 0x13, 0xfffffffffffffffa, 0x41) sysfs$auto(0x2, 0xe, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="63000000ba454a114e", @ANYRES16=r1, @ANYRESOCT=r0], 0x40}, 0x1, 0x0, 0x0, 0x48890}, 0x20000004) lsm_list_modules$auto(0x0, 0x0, 0x0) getcwd$auto(0x0, 0x8000000000000000) (async) getcwd$auto(0x0, 0x8000000000000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) (async) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000340), r3) (async) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000340), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEC_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050025bd70c8f0b1d07a0fba01000c00018008000100", @ANYRES32=r5], 0x20}}, 0x4000000) (async) sendmsg$auto_ETHTOOL_MSG_FEC_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050025bd70c8f0b1d07a0fba01000c00018008000100", @ANYRES32=r5], 0x20}}, 0x4000000) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x40146f2c, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000003, 0x10, r0, 0x8) (async) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000003, 0x10, r0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_NEW(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x20000080) bpf$auto(0xd, 0x0, 0x6f5) (async) bpf$auto(0xd, 0x0, 0x6f5) mmap$auto(0xffffffffffffffff, 0x200004, 0x4000000000e3, 0x1b, 0xd, 0x300000000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101580, 0x0) mprotect$auto(0x0, 0x806121, 0x6) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x82100, 0x0) (async) r7 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x82100, 0x0) ioctl$auto_PAGEMAP_SCAN(r7, 0xc0606610, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.0/usb1/power/autosuspend_delay_ms\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r8, &(0x7f0000000000)='-7', 0xfffffc49) 29.357479258s ago: executing program 3 (id=2477): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/fs/o2cb/logmask/DLMFS\x00', 0x20a42, 0x0) write$auto(r2, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\xe0c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\xf0\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0xfffffdef) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd9\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x81, 0xd356, 0xeb2, 0x7f, 0x8000) msync$auto(0x0, 0x18fa, 0x4) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r5, 0x0, 0x1f40) r6 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r6, 0x0, 0x1) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) ioctl$auto(0x3, 0x541b, r4) r7 = ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000140)=0x100) sendmsg$auto_OVS_VPORT_CMD_SET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000002880)=ANY=[@ANYBLOB="54170000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="e3120a800069a19bc6a2e1fe1d5f9a7edd6bd7a01e6d27d7b164e0be91a247dd7d5aea19094b02dd164eb54597e973496f946df657fa41ab03dbf804000700ed1099800400618008002300", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=0xee00, @ANYBLOB="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"], 0x1754}, 0x1, 0x0, 0x0, 0x40}, 0x10) mmap$auto(0x4, 0x202000d, 0x4, 0x17, 0xfffffffffffffffa, 0x1000008000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x4, 0x0) fcntl$auto(r0, 0x6f4ebb34, r7) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/irq.pressure\x00', 0x101102, 0x0) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty36\x00', 0x80000, 0x0) socketpair$auto(0x2, 0x5, 0xd, 0x0) 24.46443872s ago: executing program 2 (id=2492): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) mmap$auto(0x0, 0x2020009, 0x40000003, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x22, 0x2, 0x3) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dri/renderD128\x00', 0x4042, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r0, &(0x7f0000000640)={{&(0x7f0000000000), 0x5ab, &(0x7f0000000100)={&(0x7f00000007c0)="4c030000000000002106000000000000005f6bba44181041", 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x1}, 0x2, 0x100) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x2, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000200)='4', 0x1) socket(0x2, 0x801, 0x106) r2 = socketpair$auto(0x1a, 0x9, 0x8000000000000000, 0x0) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtd0ro\x00', 0x0, 0x0) ioctl$auto_BLKPG2(r3, 0x1269, 0x0) socket(0x1d, 0x2, 0x6) r4 = socket(0x2, 0x5, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffffbf, &(0x7f0000000300)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r5, 0xfd}, 0x6a) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x6}, 0x1, 0x0, 0x3, 0xa}, 0x8}, 0x5, 0xffb) r6 = io_uring_setup$auto(0x7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r6) r8 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000089c0)='/dev/mtd0\x00', 0x80000, 0x0) ioctl$auto_MEMREADOOB64(r8, 0xc0184d16, &(0x7f0000008a00)={0x2000000000000000, 0x0, 0xffffffff, 0xe94b}) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000e3d296673aafe53a1c58451f0200409cf9ecfa8093a2ea53007455fcd4de3b9d26cefb9930ad9eb90fbd2385d1777fc4b90bc62dec9f210f4bbb8f5252a541a646934a3fcf408b505c97af6dc9a11ad9711ed0c2293fa84b5accc1e9f77a3e2094cf4750f557ed393bd73a8ad2aa37073d1b898b2385d796a36a5af676ec0c713b10bb27fcf7e69cfb3ba2bca0e9bf6eb13bf33982857748801e4ebfc312fa02304ba48574aec1113defce9de6c4bf4f1ff1721994cef3372d829ff47630e1ea938ec2513aa7fb4554b083b4d5d049908cb5abe55afb427b89992214b2acdf125737a18d4e11f7c883619e9eb769855cd50d00c04e", @ANYRES16=r7, @ANYBLOB="000225bd7000ffdbdf250700000014000400626f6e643000000000000000000000000c000600070000000000000008000d00ff070000"], 0x3c}, 0x1, 0x0, 0x0, 0x4c011}, 0x4000000) 24.270864951s ago: executing program 2 (id=2494): r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r0, 0x8, 0x1) fstat$auto(r0, &(0x7f0000000100)={0x8, 0x7, 0x800000000007, 0xfffffffa, 0xee01, 0x0, 0x0, 0xbb1, 0x800000000008, 0x9, 0xc4, 0xf071, 0x0, 0x0, 0xffff, 0x800, 0xade2}) msgctl$auto_IPC_SET(0x1, 0x1, &(0x7f0000000200)={{0xcec, 0xffffffffffffffff, 0xffffffffffffffff, 0x81, 0x8, 0x2, 0x6}, &(0x7f0000000080), &(0x7f00000001c0)=0xb7, 0x6, 0x8, 0x4, 0x4, 0x945, 0x8, 0x5, 0x7}) r3 = semctl$auto(0x8, 0x1731, 0x6, 0x3) r4 = getsid$auto(0x0) pidfd_open$auto(r4, 0x3) msgctl$auto_MSG_STAT(0x8, 0xb, &(0x7f0000000300)={{0x3, r1, r2, 0x9, 0x8, 0x2, 0x8}, &(0x7f0000000280)=0x10, &(0x7f00000002c0), 0x0, 0x9, 0x2, 0x1, 0xfffffffffffffffd, 0x5, 0x9, 0x7, @inferred=r3, @inferred=r4}) fcntl$auto(r0, 0x11, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x189100, 0x0) setsockopt$auto_SO_KEEPALIVE(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000080)='%&+#*%-\xfc\x00', 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) socket(0xa, 0x1, 0x84) r5 = io_uring_setup$auto(0x2, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0x8) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) ioctl$auto_VHOST_SET_FEATURES2(r5, 0x4008af00, &(0x7f0000000200)=0x10cd000000) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x5, 0x5, 0x80000001, 0x40, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x7, 0xfffffffffffffff6, 0x7, 0x9, 0x79d, 0x6, 0x100000000000000, 0xfffffffffffffffe, 0xf]}, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/013/001\x00', 0xa901, 0x0) pread64$auto(0xffffffffffffffff, &(0x7f0000000040)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) shmget$auto(0x8, 0x10565, 0x7ff) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffff8) 23.306200162s ago: executing program 2 (id=2497): ioctl$auto_SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000140)={{0x3, 0xffffff2c, 0x10001, 0x0, 0xffffff98}, 0x6, 0x8001, "7558773f8cab0038cec94a366679d5e614d8fa9131d880b065ef33b4eddd5aca37afdda6b3942c1b05a4a746bddaa3c3e9416ff0768df32d020cadf60009e0bb", "f43abe13bd78888829019ad764acf6afa95e59d326d57e6c23c991a60f3d48fd32dbb998b40accadd0101b1617ab98639d7023f36c921c06f88f8ae8c03079ea55f4bd2067c7d292a2e01b6efb274267", 0x7, 0xc, 0x6, 0xbe, 0x1, "2e6f75b7431f004435205e6044494fd9be3657ce398e7ce58a7da9e7f2161bc1"}) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x10, 0x2, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c00018028003c8008001b"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="04000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) ppoll$auto(0x0, 0x6, 0x0, 0x0, 0x8) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) io_uring_setup$auto(0x401, 0x0) setresuid$auto(0x0, 0x7, 0x8080) setfsuid$auto(0x0) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r1, 0x5393, r0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) sendmsg$auto_NETDEV_CMD_BIND_RX(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="f9ffffff", @ANYRES16=0x0, @ANYBLOB="010027bd7000fedbdf250d00000008000100", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) 23.021159114s ago: executing program 2 (id=2506): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x800, 0x0) syz_clone(0x4000, &(0x7f00000002c0)="f03f0b0b", 0x4, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(r0, 0x8, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x1, 0x0) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x70) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82) ioctl$auto_PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x40100, 0x0) mmap$auto(0x0, 0x40, 0x5, 0x8000000008012, r3, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendto$auto(0x3, 0x0, 0x5, 0x5d9, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\r\xfb\xff\xf6OL\xc8\xbe\x94\xf2\xa2\x00\x00', 0x2d9) 22.048049677s ago: executing program 2 (id=2501): r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async) socket(0x18, 0x800, 0x2) (async) getpeername$auto(r0, &(0x7f0000000040)=@ax25={0x3, @bcast, 0x6}, &(0x7f0000000000)=0xed4) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0x8004ae98, 0x0) socket(0x25, 0x1, 0x0) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) fallocate$auto(r1, 0x1, 0x2, 0x6657) (async) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r3 = socket(0xa, 0x3, 0x87) (async) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x5c018}, 0x20000800) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "00800000ffefffffff0200000001"}, 0x55) mmap$auto(0x200000000000, 0x2020009, 0x0, 0xeb1, 0xffffffffffffffff, 0x8000) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2}, 0x0, 0xf, 0x9) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES8=r0, @ANYRESDEC=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40091}, 0x40) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) (async) ioctl$auto(0x3, 0x2287, 0xffffffffffffffff) (async) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x401, 0x0) msync$auto(0x7, 0x9, 0x0) (async) write$auto_proc_mem_operations_base(r4, &(0x7f0000001680)="a7", 0x80000) madvise$auto(0x0, 0x20200, 0x14) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) sendmsg$auto_NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="01000000", @ANYRES16=0x0, @ANYBLOB="100025bd7000fbdbdf2512000000bd00190098be5ec4f7d40e121ad0f9204bca1ea2929966cb15b8efd71aeab0e61940f1be3755abe3de6fd2248ed90f68bcc8d9b5f52acddfba3692c16b4c80e9200240a7d114d79ee37806a2d14bc9dcee49eeb7dab08c13ac24625261acbc31d16c73762348c1a77a7d91b5b49d1f650a4a9e316ec31d09d7eeaf6989dbce2331d409c16afe2873276f06e70b131e28e0ba54906c7f54b3aeb2141abb8baca887001842bd148daf8b2221516062160b21b8f5f954ee0cdd969386b163000000080001006abe000005000f00ff00000005000f000900000008000e00ffff0000"], 0xfffffffffffffc24}, 0x1, 0x0, 0x0, 0x4}, 0x40) 21.755666538s ago: executing program 2 (id=2502): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/fs/o2cb/logmask/DLMFS\x00', 0x20a42, 0x0) write$auto(r2, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\xe0c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\xf0\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0xfffffdef) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd9\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x81, 0xd356, 0xeb2, 0x7f, 0x8000) msync$auto(0x0, 0x18fa, 0x4) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r5, 0x0, 0x1f40) r6 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r6, 0x0, 0x1) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) ioctl$auto(0x3, 0x541b, r4) r7 = ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000140)=0x100) sendmsg$auto_OVS_VPORT_CMD_SET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000002880)=ANY=[@ANYBLOB="54170000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="e3120a800069a19bc6a2e1fe1d5f9a7edd6bd7a01e6d27d7b164e0be91a247dd7d5aea19094b02dd164eb54597e973496f946df657fa41ab03dbf804000700ed1099800400618008002300", @ANYRES32=r4, @ANYBLOB="83e510921cb65b4dd05034d941c6009a3af781e005d25f7fd8ad5b331d9a6ea7829dff508ca65ef885894485fd336fb5fe31bbde4646d612fb5078a914682f3c1455ae1256f0ba57346fe608cc8b378dbd5e35df7a4e52690c7263bc9d7aa1f9d50d5474a41746f7699d583b9425b6c7afd914398dec7313aaafd07f97a4e4ed85fd851b1af306cb1daa3cca3129d7f663a679c2d02f9b57c490e04f78aa05bbc0859d3b02519d6337e9e1547445d9c2ad1b59981bec9c9be7f13350ae745e33da93c2f7789226bfc2b36a9c062ebb6b4bbec607a5423a4c33dd9b8990c87cc36d368c3f490b9c120bcf43196ef523d3cf2bf8ed66c81d4e8d7977435927ab60cb47fce532777ed508135ebfef8bb540a3cd9d990b777598c82b819db739e56712c5532f971d9ef5b5c2810b5011a2116520e5a3ee33dca9cc2ed2c7314f81bc837b86ac1aa9f0b295ce955976961d88d681b86aa8d7f247be3cd592784fcb71db719dc25b969c85ab6067d88762805dd1a18f3fd4cb9c221071abc3b4143d1366400c594c708118a412355dfbd7f27faa2a57ace15f1f74c34deb588626d7111b88f8d5b10ea9545837238127e4fd800da2c6f99d35c473f6cf94de6af6a61bb1a1336c56bfa9e7265a9d9a9a5e32e3fa0600960c4abb73b37bbb1bc30de5af6c9774cc28849f479e627d2b27debb85edf6aa7fd73ed2e79906a86510d1febcce0a8b15686f6acdfccd5a8cae852ed5ff938c2c49162496734551311189f0fc43371dedc171e065b2f501c9c555b811052f70f603cf61c91b3e71f55f82502790845201d10550c3f4d0d6a1eed9afdd2cb3715660e9d8f97bf28e73dd5ca6b0a58cdd053bf80bcc89853c6fcd70d0ac77aed11c9a09f1cfa346ce0f5b2461d0e9780087c45d0f221f43e160c1e6d01b59ac171e559de82a2c0d417172508505d69be4aee0504628414f857916e45bb78c69da61e2237266f1d3d91d573539712525e8bd633a8dff071c855b8e430ae0a99e1447170690297fca3e8a1f97e34efded0dccb4b68686a4dc53b17e6a86a7809c32cc91b865eec0486738ecad7bf7873e940eb6c11f265cdfdf6b132b2a96d7bba626fc59a2bb7c712b8d674248254e92b94beffd81c09ca101bd7cd050f7a185716a209e0c6af6f3b7829242192647916fb902a0e16c995f58dfea83561f538872b8c9ef53de3c6b132fc899397b252998a3cddebee10cd9b17dfe929c497e4226e87db091d3f80a22f3a9b2d7e272cbde683a39fea79124521f21fd36c7f1cf1beebaa107dc50f20b13b042a35397e05832c8464f7ef9c266b80790d95b868e058d85d398046416e2fec8e2563729292b36f87ea91ec659ac607fd7920a13b464bc88ff5c9d71b2df3a70cc577021b5f861b8981e353bb428396112178e78549aef2cd32b4ad39035d9d7567ba22f7871e4db3a0dbd26e4ca8f1de92e89994d3831437b3416f6f0be4a61b947dc370b27fde5a641c815190bc6eb9a25432c4f29c595aa70353c57bdc5ca617fbc8f16529aeec0e6abcc741edf614dc7061cf21047f7d4887b7342c569b0e93f242ade9eda2734bc50ab96f8c2b5f66f390eb155e1baf27431265e0ac206ef8fe0809c30e75a5e1643c9f9d4e84962c4dc12e2c2e1389b031ae5031ab1a27125c64c43d0ecf30b64fbac2693f9ec5f20cf060836b91ba040ca7087364414ae407ee864944186919f2189a086af6e988fcde6fa45c53fe94e4c6495680785e1a87c82133b291a97217ce15313a12140e7b01d38d44dfea1c34a427d269a8ae717ed295d037a3f73fb6c9959094bbd330e070c0ada54074da0fe90000121c5565a53ae810a9b6cd07b3c337b4c4c8e6c99f17a4c523f0376d0c19354a32b5dcfe82330391cdd7c1c3114118f093b2f5109ff58c2e2e35354aea6f434ad0a8cdd444f45b100c70817fbe45a52add895db7f16dfd1059b34c9f038c1d7236004fe1cbdcbc8fd44de3cb310d3281b879257e73166f206508667c80d36817c662a62880c6e829cc4821a089c7a3ee20534f891784fbefc9adb47eaa067c0565c9325db46f89eac0497da824ca4220534d7b1f7bec10e4d11f11764982bac942f62467b0198c46380ff3d90e070b6b48a05bca8994b9d02f6ca2274726eec67c3e4c4937e91756a9c944d1fbc0da9352e2a63439e7c2fea894ed8785f837b57d12e136b37313740d2d2b06b67583d6181f958616e07133e929bc96eecef13b6bc18e5dcbaa773ad0ad822ab0b75bb8d053d755d6077cb2848b1a86605a44768e092abf33878caa6bd1d6011d58abec4caf4ba66de9c7de243433d2ef1d5189c0e91dcb8b72107cfeb4176920651cc9e0ffa2a41480cf58d93ef4e71ef6891ede5e812137647b88df5106d1295815560ddb3f269a5fe7ec994990a957bde3fa793ee741dbc57ed9923cf9897963760820c53025ee9f74e7f67f60c0ca9abafe50c236691785bf1f6a76f085b2e910094de9226228de45aa69b1c025776e48a6857fb2a83f4dd1c8af6022f1d219902e5532305949a87c72e853dd418904343ed49dc6be22c021170701aeef901000a2bc56abde0513177fd7fbb21fdd0fcc044e663a1d4e382433c592abd454f4003b4d7fd0096f9f37bc1abab9b6dee899b5517ec546387bd7b4568bcac15005eae932514a0b3ff43521ead0abe5fa2d58ce08a214f0d1560a6194f14be79626d21642b7b2bce33037446d3611237265af5f7fcdee24d728128d30ab02063837e71cc1d37f1126c38299be149bf1306ca2f60ecbaf841af56ff46d2ab95efefce8b173c6f6d8afc8d5d88ceedc0d1586e5ac1870a6fc02ab2f5935ea3aa1de0d1c73677630a98f76a61427d0e381591af0d66be411a339010801f28b5249ed2b4c7909d508da3d2b3d9b6663dedd085e1ef5e7879fe4b8d3833ccc660bf21bcb24978c4fbd32aa43a4f2262877f8625ad953a8d0be5be791595f7fdbd4c026e87b14a49a20c3b2081853a077b9f2fb43ca7c7989c917f276f5d1855f8cb577a98bfca807b30f2dfb7a7049340340b987cb580c1397fd7e4378324f15e7625b7df360ed9e282bd15289e39b41882ab697524dd7d1057e675a6b17f1ef50d1eace1e8fa34713c42c53daa7184b2162608cae7525fc82a2a8a36dee6b9415a959ec58ffa54a720d6dd2d39428910da87c4076b9aa9192825ac045d48ca4480c623240c6abbb14bb7cd20408982ad15998571bead1f8a7781dfb0f85653ea21ce97e70fea1ab1aac0310fd915b8334aa07d115b5a7e116d49fbbf4dfd86ffd48307e664fbb27bd8e843dcb89bc3d26c68cd6c97569c2b8c4b859631f7926be2ad17254273ccb32e73a3d3bb3013ff15c3e6f9f00846742500193c0c7b3c3699c0c9b621fbea9e302b06ef9ee3552a115b9bbe8509a6eb5e5cf4f028181f8139350ba3a77bea7e1ad0095b3503e0135b472178241d717bb666405864f864715ed1eb6c29fcdb7ea651d9f1675c2ab962fba7483700e788d4c4004082132d30c71784b65e0d66007b2a6ddc558cf178a1fd6b2ba5191ca3b5353684468856488a3cf4e56c9616d4e75b28214a30a9dc7ba621191c08489effbd39f5f34a39a3109818f73edce4119ce3b9094cd99f13fe2899c748fca513f25a163056acc14d223a6e092997caec9c6ad758481beb46d02df262a7eb06213b039a386f163f6df04c3994a20fb9a7c384b6e6d8ae06cb80745c258c00b4e6e6bf8424f3e4e6389de777ad898d58d418f8b4f3f373b929061fa2b9159a74e9e9be643abb6543144bcd0de4364a047915029644138ba09f085fe3a1dd3487d03d93e69e5332c02d15c9cfd3c36ec07db7d6e8c5926c7304a1120d9333c2986cfdcec13709bc55f511dd936612b77b177bb47ba7451654613c60933a361f46e5d86062f10146eb689d59dda2397ffb9e61ca5ed5befba0d9f3f3b219c3e9a66dbb5d01daa06926b6fa28880914507984e1c4fae46778fc50ca186300499da40f3c271998f0051bfaa89ded28c19da3c6eacf875073e0bc9bd4e641daa3d2b1f211496e35a0135f6c0cf352fecc639d51d90823dac2f2c3540775bdf841c29a3028a334af3d2c992799185c6c10a7b25fa718ce5e39ab1731d81bf8d308079fc51e13b801f179728ead0d0507b5c7164dd22c9a1cd67e38b07d1839a53ad27690c59a98c83ba6f6824c20842614a9e8b544e167a1cf6731d5f0fcc2bfdb0ae2e67ed013f541cfa20dc46ac82f8e1e61c99804bd5f1b5fe66651ac9b1970b9a3da736fa5a3c065988e9748033bb5219d60b6e1bc97f4e15a46afbfd101bfabfbb205a123c2ce236cffabdf5fdc159e684dbf944f6837cb2389b2a271bf0afbd94e49e1057df794a8c4674ecfc10daf9d2039aa046f25e27dbcf813c89341dd4059fb2154ced8ca2846d8c9ccad70baa7984d3a6ab8664aefdb122e0d6e0714019c0e13fe1725fb96d4ed206cfbd425d33613e1ad8088dd3f975032dfa468b5baa4babd49240afbf9396b4724216bd2f33c2ff66c001ddcbf42bb9f70adf2bbe952506d650a3315ec28fcb7acdcb4f47a3a157c817177417176f7a9451027c990cf74c8055a86b59fcfbc68aa4b4d33defade33c30668fbf9a92c6723deca03074a88fc3f79c45f7332345e90d2647433b8dc0ab4b92f6004a0ed7be9e06f3cf1dbf49d800fcab50f6f107f92956f8029b289ee67b52e42270e11b972939fae0b661c80cb58258dc134664509847785135402c4884a944cf6e525fb8806e1549575819c9b05b5104a1b15d5b602133d7ca22359f712c979a31b3a8be29097172762f64f140a228c01ea039a3821bf8099e26109f8658f224c60ed5020b69979340f5e2d7a9e86a3d7e8343d5ba1410c7ba574410ebd04c796cd20ac22c8f41cc505859e2b0c137d48cc360d9e3c10900cc35a744827fcf769f39db9afee9f4e24a2de492bbe9e10690b8f531655b8d92937e743263f069de778eab53cb253ecf9fc0e9634b47fda89a6b7326ed9a6e050d977221815f8fc0ff14b6e03cba5da05f85375d3ef5f25e250c071a1fe8958f136bc5b3e5076fc8aff6cd33e6e9f5266a8839ce3a984d14feb79dae801b10077a36ad9e0e7b70cf412e0025f793d1b6087c4a86848af2dda8d2d28363d287eb54c573d3390e70f56fadbe7d775ae0ef08144461cc53635784efa9967f82eff65e7f745b84cd64515b38c755a421c99cfe2c36687f0fa38e7b3aebc122e65379a6eba629c9f800460d0fcfdd19d7e826577c6c80fe6872d0e6f97ed5a93829bb5123ff057915703585bfa437ca550112d1bd7598b6d2393cb56140ab58414738538848bcab39bdea8b93e6ff87e0b727de3f53168313affd752c00ed6a885462929f27a9752913f1d454627df60948f32a146dd2d4c2ae5240ba8f84bb8bf1f141a75d4e74a31d19cdafa0682c8c71a2766fec1b6c50616cb4768161f8ba27d4d44db47a24ba47e7b7c529cb8b304b94bff9faa53a5462b3f287071d4c3ed70d43c92786197a8b4cdc7091609a67a1959a9e9d84dfe45f67f67796d7d47f5d7c17970acfc4b075d4489076d2c06a63a658168c39dddd997797cf996f9d2c830eed2a74cb11b3cf01e0caf37c3f382fbac1b0a556752afcb1f76a6b200e4dafb2589d1bddbd8602b4848fb7a7df1aaaafeab6254fb791e59ee5cf633643b26eaf48e25cfbf1b8f6ff3b8a734c04efe4983e366fe29505773c6ddf799103a8b8718f12403ee6df8d1cdf8ffe2d6cbc44a4cafc71e87abcfda0b5453e463f0f1a0538d158f05294394d8c2c558e6ea07e4c1f364a193855b9bdd2b2e105c3aa1f1510ea92501bc62ed8fb6fca4c872789b7a5bdb10fc22262d2432aec1755e945592c222b8c04ca2551d8a97743c799ef26927b26568c1bc8b048e38ab1593fe6b5016052828c3facff6eb3ab8dc1c995c7f44165355811d5749bd64f06ede071eddd05b48aa55eacda9597e590f37ed28b7b27a0f956148167e4b34e675eb72374704593ee54f6206c5fa5d7d28aef3cb7d69d0ee83110ed87a43e26272acf11091f5f01aa0d1be330d7bd1507581d5f5cdb7000000a501d58008007200", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=0xee00, @ANYBLOB="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"], 0x1754}, 0x1, 0x0, 0x0, 0x40}, 0x10) mmap$auto(0x4, 0x202000d, 0x4, 0x17, 0xfffffffffffffffa, 0x1000008000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x4, 0x0) fcntl$auto(r0, 0x6f4ebb34, r7) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/irq.pressure\x00', 0x101102, 0x0) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty36\x00', 0x80000, 0x0) socketpair$auto(0x2, 0x5, 0xd, 0x0) 6.238311966s ago: executing program 33 (id=2502): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/fs/o2cb/logmask/DLMFS\x00', 0x20a42, 0x0) write$auto(r2, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\xe0c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\xf0\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0xfffffdef) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd9\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x81, 0xd356, 0xeb2, 0x7f, 0x8000) msync$auto(0x0, 0x18fa, 0x4) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r5, 0x0, 0x1f40) r6 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r6, 0x0, 0x1) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) ioctl$auto(0x3, 0x541b, r4) r7 = ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000140)=0x100) sendmsg$auto_OVS_VPORT_CMD_SET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000002880)=ANY=[@ANYBLOB="54170000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="e3120a800069a19bc6a2e1fe1d5f9a7edd6bd7a01e6d27d7b164e0be91a247dd7d5aea19094b02dd164eb54597e973496f946df657fa41ab03dbf804000700ed1099800400618008002300", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=0xee00, @ANYBLOB="001c0003002f6465762f696e66696e6962616e642f72646d615f636d0008000900040000006c030480697542849907101129beb7b94f24201d69370d0178fdb8543b6e8b689c89a1dc074c4bbe1fa61c231b26339f51103c30945b16da816d57024518567caf7fe0a66cada28eb85f1203bc523c4c84b54e73fb1eb687e353d364e6ecbd16ec3a1e0beda4ca2e338800ff800400cc8032676b3bad65cd36566bf757a0f9632cc0fea1259fd5be83118b8c1ebb9f59a335a244758dcb1534895cb841e75019855fdf8117f0cd163d099a9025117fda68ffbe04b49038272c58a7643570bb03656efcf0e5b1602e2fbc30193ad1a7547eb12da4baa2463344fd129acf023cc291461b608613df644eefb6536ae31791850c00090007000000000000001c27efb221f5463e2aecfe9a13b33ea3439ac17bd7662dba0f5721f56118f7aa156e859dd642086af793c28e14a5d2fbd58fb24c2921a0ec31a36ee0b14856b30a8586902c75fa6ad78128beb164dd30c84891d06197c4fec40086bd405f3b7d45fca78bcc7ce4c9f76bb2b6728c4409736bdec9ae2ea08b1076df4964e16af266e61dfd18e669d5a60d3182e6ce1e8261adf3d842c91dba4869459c8ea30c1a23bebb9bebdd8661b18ab06c0d740ffe7eaba160e0e2909285aa54ca6d580980a736e2cd819e3eefe4c0156d7175d16d64a040c52a2bc708006b00040000008d0104803a5e5059afd89575de96c29a05bfcaba644c390cbbbbe26334bb8ea137cc05e599c6d1997fcee5f3191d759f7f676a731b5e8c3514517c35cc664f8dcc7e4c10f5307aa1bbbaafd1778ab542e721e0ac4a24b1529b18b1644a5066c534433e497b9a1a8741b835bf2a62958404b71d38fe2166dbcc4cd17c600657a06122db2a1e8c21fa8cc7c890f3f99b0bb88435465dad80317d2381d71d417cf52238594a9d9cb848a22ce709c921f2e6479ab0ee2eb0001200d43594d18ceda81ca11848b0dd581b20d2f5bb5411c4ed158f77d2263fd6122e3a6e7b016ab0e3613a0d4634547eef2c5f80c9856af2c5c15b36e4a94f1fab66ba0eeeb35359bc27a08998252dae2603df4b3014c64f18b38c25ae05c31a4169f53b7568b2a709aca193c463eb4bd15006d68dee4583c7248987394c6272b11a376cb0deefd35175d8901531b53e4420e9302787b53df6fc5d4a02cbf0c17f137f602a67ce831d4fb9cf8f2104000d801400fd00fe80000000000000000000000000002405008a000000000008002e00000000000000000800090004000000080001000b000000170003002f6465762f736e642f636f6e74726f6c43300000"], 0x1754}, 0x1, 0x0, 0x0, 0x40}, 0x10) mmap$auto(0x4, 0x202000d, 0x4, 0x17, 0xfffffffffffffffa, 0x1000008000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x4, 0x0) fcntl$auto(r0, 0x6f4ebb34, r7) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/irq.pressure\x00', 0x101102, 0x0) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty36\x00', 0x80000, 0x0) socketpair$auto(0x2, 0x5, 0xd, 0x0) 3.359054983s ago: executing program 4 (id=2547): mmap$auto(0x0, 0x40006, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0xc00, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) ioctl$auto(0xc8, 0x800454e1, 0x5c8d) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/est_cpulist\x00', 0x808a0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) get_robust_list$auto(0x1, 0x0, 0x0) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x8006, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSFLAGS(r2, 0x40047459, 0x0) read$auto(r1, 0x0, 0x20) write$auto(r0, 0x0, 0x7f) r3 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) getdents64$auto(r3, 0x0, 0x400) close_range$auto(0x0, 0xfffffffffffff000, 0x8000002) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) socket(0x11, 0x6, 0x5) landlock_add_rule$auto(r4, 0x1, 0x0, 0x0) r5 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media1\x00', 0x28202, 0x0) readv$auto(r5, &(0x7f00000000c0)={0x0, 0x547e0dec}, 0x9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TIOCMBIS2(r3, 0x5416, &(0x7f0000000140)="9556b433f59fcf037bfa1eaf6ef8feb49fbdb485a96c06129bb6eda99759f4709a9e89aad3c655407976dad30e2f49b56f0d27fa5b6b626ff3d9506a7cd2f24999068f5f5540751ef145c76a685428ab904e618b4bb7f2b92d7dfee8c2f794e5aafdd00def25e108428df3b3c24ef0636c11ffdc478fef850d151f30cad4147dd279f0") openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/all/accept_local\x00', 0x81, 0x0) 3.142591551s ago: executing program 4 (id=2549): syz_clone(0x1a508411, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0xa400, 0x0) r1 = clone3$auto(&(0x7f0000000040)={0x43, 0x4, 0xa5e7, 0x10000, 0x1, 0x8000000000000000, 0x10, 0x5, 0xf, 0x1ff, 0x5185}, 0x1) prctl$auto(0x3e, 0x1, r1, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f0000000200)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xbd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f^\xd5\xd0x\xb7\x9d\xbb\n\xa8\x83\x0e\xce\x9b\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(#b\x8a\x82\xdf\xd0\x8e;\xfa\xff\xb8\xa3\xf6C\xb1\x84\xd1\"$\xa0\f]\x14\x8cqp\xcd\x87\xfd\xc4\v|%\t\x1c', 0x0) mmap$auto(0x0, 0x2020009, 0x8000000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000180)="f1995ef72dde8a1bf724612e7a6312f462377c59035260966f5eae11460de049b80c39ce463cd0826a2901a458a67771340c5df037749e1fe60e21f61a0a2ad05c3e0f880d20b57d7e269753faa7bf799c201cff2e8ab844a0986edec6bb66d7cba6a23332048495a88ae8dddd9700"/127) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x6, 0x1) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8}, 0x1) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8) mmap$auto(0xffffffffffffffff, 0x400004, 0x9, 0x9b7e, r3, 0xf) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) rseq$auto(&(0x7f0000000340)={0xe, 0x401, 0x200, 0x806, 0xffffffff, 0x2}, 0x8000, 0x0, 0x8000008) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) r4 = socket(0xa, 0x1, 0x84) setsockopt$auto(r4, 0x10000000084, 0x85, 0x0, 0x9) 3.11653575s ago: executing program 1 (id=2550): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) ioctl$auto(0x3, 0x80000541b, 0x38) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) write$auto(0x1, 0x0, 0x80000000) (async) close_range$auto(0x2, 0xa, 0x0) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async, rerun: 64) fanotify_init$auto(0x5, 0xfffffffc) (rerun: 64) r0 = pipe$auto(0x0) (async) dup2$auto(0x5, 0x4) (async) write$auto(0x6, 0x0, 0x100000001) (async) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x400, 0x0) setreuid$auto(0x7, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, 0x0, 0x800, 0x0) preadv$auto(0x3, &(0x7f00000004c0)={0x0, 0x8000000}, 0x3, 0x10000, 0x10) splice$auto(0x4, 0x0, r0, 0x0, 0x80000001, 0x9) (async) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYRESDEC=r1], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40044) (async, rerun: 32) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0xa00}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) 1.986083748s ago: executing program 1 (id=2551): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) bpf$auto(0xfffffffc, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040), 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x1) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x80402, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x103040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) timer_settime$auto(0x1, 0x100, &(0x7f0000000140)={{0x3, 0xfffffffeffffffff}, {0x7, 0x3238}}, &(0x7f0000000180)={{0x7, 0x6}, {0x3, 0xb3}}) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) io_uring_setup$auto(0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/comm\x00', 0x800, 0x0) r2 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0) io_uring_setup$auto(0x6, 0x0) r3 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r3, 0x3b8e, r2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x8000000000000d3e, 0x2, 0x948f, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x6, 0x62, 0x80000000, 0x0, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) 1.9846792s ago: executing program 4 (id=2557): mmap$auto(0x0, 0x200000008, 0x200000df, 0x9b72, 0xffffffffffffffff, 0x40008000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x44890) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) fsconfig$auto(r0, 0x800, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_abort_count\x00', 0x0, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, 0x0, 0x0) process_mrelease$auto(0xffffffffffffffff, 0xa) mmap$auto(0x0, 0x40000b, 0xde, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) mkdir$auto(&(0x7f0000000100)='./file0\x00', 0xff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) socket(0x2, 0x1, 0x106) mmap$auto(0x1000000000, 0x100000400008, 0x1000000000000df, 0x4000009b73, r1, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xffffffffffffffff]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x2, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0xa4e2, 0xeb2, 0xfffffffffffffffb, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x0) 1.903787545s ago: executing program 1 (id=2552): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20000000001ff) io_setup$auto(0x3ff, 0xfffffffffffffffd) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa140, 0x0) ioctl$auto_BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) statx$auto(0xffffffffffffffff, 0x0, 0x1000, 0xbdfc, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) r3 = socket(0xa, 0x2, 0x0) ioctl$auto(0x3, 0xae41, r3) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ipvlan1\x00', 0x0}) r7 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r8, 0xfd}, 0x6a) sendmsg$auto_OVS_DP_CMD_DEL(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r4, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x2}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r5}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x800}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r6}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r8}, @OVS_DP_ATTR_NAME={0x5, 0x1, '\x00'}, @OVS_DP_ATTR_NAME={0x15, 0x1, '/dev/v4l-subdev5\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20048001}, 0x20040011) ioctl$auto(r2, 0xc0305602, r1) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x10) 1.790043112s ago: executing program 1 (id=2553): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x261c2, 0x184) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) readv$auto(0x3, 0x0, 0x400) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x59) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) socket(0x25, 0x80000, 0x1) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xc}, 0x800009}, 0x5, 0x20000000) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) 1.671132978s ago: executing program 1 (id=2554): connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x5b) sendmsg$auto_NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, 0x0, 0x4080) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendfile$auto(0x1, 0x3, 0x0, 0x74c) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2}, 0x6) r0 = socket(0x11, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000040)={&(0x7f0000000080), 0x49}, 0x5, &(0x7f0000000180), 0x8000, 0x1000}, 0x5}, 0x2, 0x100) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x3, 0x1) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/ati_remote2/parameters/mode_mask\x00', 0x80401, 0x0) write$auto(r2, 0x0, 0x800f) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000001bc0)="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", 0xd4f) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r4, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) 1.582732615s ago: executing program 4 (id=2555): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) setsockopt$auto(0x3, 0x114, 0x8, 0x0, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="df250c0000000000000000"], 0x14}}, 0x24048004) madvise$auto(0x0, 0x200007, 0x19) r2 = openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) lseek$auto(r2, 0x8a05, 0x1) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x420009, 0xdf, 0xeb5, 0x401, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) read$auto_proc_pid_maps_operations_internal(r3, &(0x7f00000020c0)=""/4093, 0xffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) 922.096115ms ago: executing program 4 (id=2556): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) ioctl$auto(r0, 0x2270, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x8001) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) setsockopt$auto(0x3, 0x10000000084, 0x82, 0x0, 0x8) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$auto(0x0, 0x0, 0x6f3) unshare$auto(0x40000080) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) read$auto(r1, 0x0, 0x8) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x88c00, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1, 0x3, 0x500, 0x1, 0x9, 0x800, 0x10000, 0xc, 0x8000000000000000, 0x4000005, 0x400000000000008, 0x7, 0x6d3f, 0x1, 0x5, 0x6]}, 0x0) clone$auto(0x7, 0x1, 0x0, 0x0, 0x100000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000840)="13") pselect6$auto(0x7, &(0x7f0000000100)={[0x0, 0xa222, 0x3ff, 0x9, 0x9, 0xc, 0x2, 0xf, 0x80, 0xb, 0xe8ff, 0x1, 0x4, 0x1, 0xffffffff80000000]}, &(0x7f0000000180)={[0x2, 0x1, 0x4, 0x2, 0x5, 0x9, 0x8, 0x4, 0x101, 0x0, 0x0, 0x5, 0x6, 0x101, 0x1, 0x2]}, &(0x7f0000000200)={[0x5ce, 0xffffffffffffffff, 0x8001, 0x0, 0xf, 0x2, 0xfffffffffffffff9, 0x6, 0x1, 0x3, 0x577, 0x10, 0x1, 0x7, 0x0, 0x3]}, &(0x7f0000000280)={0xffffffffffff81ea, 0x1}, &(0x7f0000000340)="f8b3ef3466f5a55563debc6c7b87f1eeb3806df6bd463351f0fe396ae2a676f2c649061a43aecf22c22624e24ffe3524bc0a27dbf2cdddf5003cc2099a38b0d86f216b18b032") ioctl$auto_TIOCSTI2(r2, 0x5412, 0x0) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) 716.174312ms ago: executing program 1 (id=2558): waitid$auto(0x8, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0x5, 0x98, 0x10, @_timer={0x0, 0x2, @sival_int=0x7, 0x2}}}, 0x3, &(0x7f0000000180)={{0xfffffffffffffff9, 0x80}, {0x2, 0x6}, 0x4, 0x2, 0x1, 0x3, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7fc, 0x2055}) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6, "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"}, 0x6, 0x3, 0xff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket(0x2c, 0x80003, 0x0) setsockopt$auto(r2, 0x11b, 0x6, 0xffffffffffffffff, 0x0) unshare$auto(0x40000080) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, 0x0, 0x100000a3d9) socket(0x2b, 0x1, 0x0) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/flags\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000180)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0xfdf1) lstat$auto(0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) 0s ago: executing program 4 (id=2559): close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) bpf$auto_BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)=@link_create={@map_fd=r0, @target_fd=r0, 0x4, 0x1, @bpf_attr_link_create_4_1={0x2, 0xd6}}, 0xb) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon33\x00', 0x2a400, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0xffe, 0x0) close_range$auto(0x2, 0x8, 0x0) kernel console output (not intermixed with test programs): hci1: Received unexpected HCI Event 0x00 [ 424.457019][ T5840] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 426.602275][T12632] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 428.451755][T12670] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1441'. [ 429.424267][T12683] can: request_module (can-proto-5) failed. [ 429.507047][T12688] netlink: 186 bytes leftover after parsing attributes in process `syz.4.1444'. [ 430.481640][T12714] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 430.572811][T12710] zswap: compressor not available [ 430.694662][T12722] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1455'. [ 432.562503][T12769] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1467'. [ 433.050497][T12788] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 434.122595][T12812] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 434.154593][T12813] FAULT_INJECTION: forcing a failure. [ 434.154593][T12813] name failslab, interval 1, probability 0, space 0, times 0 [ 434.192544][T12813] CPU: 0 UID: 0 PID: 12813 Comm: syz.3.1477 Tainted: G U L syzkaller #0 PREEMPT(full) [ 434.192573][T12813] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 434.192580][T12813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 434.192589][T12813] Call Trace: [ 434.192595][T12813] [ 434.192602][T12813] dump_stack_lvl+0x16c/0x1f0 [ 434.192630][T12813] should_fail_ex+0x512/0x640 [ 434.192647][T12813] ? kmem_cache_alloc_noprof+0x62/0x770 [ 434.192667][T12813] should_failslab+0xc2/0x120 [ 434.192691][T12813] kmem_cache_alloc_noprof+0x83/0x770 [ 434.192708][T12813] ? ioctx_alloc+0x1ad/0x2230 [ 434.192726][T12813] ? ioctx_alloc+0x1ad/0x2230 [ 434.192739][T12813] ioctx_alloc+0x1ad/0x2230 [ 434.192759][T12813] ? find_held_lock+0x2b/0x80 [ 434.192779][T12813] ? __pfx_ioctx_alloc+0x10/0x10 [ 434.192791][T12813] ? __might_fault+0x13b/0x190 [ 434.192813][T12813] __x64_sys_io_setup+0xc9/0x230 [ 434.192829][T12813] do_syscall_64+0xcd/0xf80 [ 434.192853][T12813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.192868][T12813] RIP: 0033:0x7f7e3e18f7c9 [ 434.192881][T12813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.192896][T12813] RSP: 002b:00007f7e3efbe038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 434.192911][T12813] RAX: ffffffffffffffda RBX: 00007f7e3e3e5fa0 RCX: 00007f7e3e18f7c9 [ 434.192921][T12813] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 434.192930][T12813] RBP: 00007f7e3e213f91 R08: 0000000000000000 R09: 0000000000000000 [ 434.192939][T12813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.192948][T12813] R13: 00007f7e3e3e6038 R14: 00007f7e3e3e5fa0 R15: 00007ffcc912c098 [ 434.192967][T12813] [ 435.698996][T12821] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 435.732759][T12821] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 435.779426][T12821] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 435.805180][T12821] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 436.530920][T12870] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 436.696673][T12875] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 436.763240][T12875] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 436.835211][T12875] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 436.970539][T12875] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 437.003803][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 437.070052][T12875] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 437.171442][T12887] zswap: compressor not available [ 437.211180][T12875] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 437.794071][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 437.800144][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 437.873707][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 437.950905][T12915] netlink: 'syz.2.1503': attribute type 1 has an invalid length. [ 438.567248][T12928] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1508'. [ 438.920203][T12928] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 442.013922][T12995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1524'. [ 442.634162][T13007] random: crng reseeded on system resumption [ 443.993226][T13036] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 444.657705][T13044] mkiss: ax0: crc mode is auto. [ 445.317630][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.326745][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.614095][ T5840] Bluetooth: hci0: unexpected event 0x33 length: 124 > 10 [ 448.423281][T13120] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1554'. [ 451.231859][T13160] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 451.682085][T13170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1567'. [ 452.307281][T13170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1567'. [ 452.900798][T13190] zswap: compressor not available [ 453.823195][T13215] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 454.618547][T13232] FAULT_INJECTION: forcing a failure. [ 454.618547][T13232] name failslab, interval 1, probability 0, space 0, times 0 [ 454.677742][T13232] CPU: 0 UID: 0 PID: 13232 Comm: syz.4.1580 Tainted: G U L syzkaller #0 PREEMPT(full) [ 454.677771][T13232] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 454.677776][T13232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 454.677785][T13232] Call Trace: [ 454.677791][T13232] [ 454.677797][T13232] dump_stack_lvl+0x16c/0x1f0 [ 454.677824][T13232] should_fail_ex+0x512/0x640 [ 454.677841][T13232] ? __kmalloc_cache_noprof+0x5f/0x800 [ 454.677860][T13232] should_failslab+0xc2/0x120 [ 454.677883][T13232] __kmalloc_cache_noprof+0x80/0x800 [ 454.677900][T13232] ? percpu_ref_init+0xec/0x410 [ 454.677924][T13232] ? percpu_ref_init+0xec/0x410 [ 454.677944][T13232] ? __pfx_free_ioctx_reqs+0x10/0x10 [ 454.677966][T13232] percpu_ref_init+0xec/0x410 [ 454.677985][T13232] ? __init_waitqueue_head+0xca/0x150 [ 454.678006][T13232] ioctx_alloc+0x3e0/0x2230 [ 454.678027][T13232] ? find_held_lock+0x2b/0x80 [ 454.678053][T13232] ? __pfx_ioctx_alloc+0x10/0x10 [ 454.678065][T13232] ? __might_fault+0x13b/0x190 [ 454.678088][T13232] __x64_sys_io_setup+0xc9/0x230 [ 454.678104][T13232] do_syscall_64+0xcd/0xf80 [ 454.678128][T13232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.678144][T13232] RIP: 0033:0x7f355918f7c9 [ 454.678156][T13232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.678171][T13232] RSP: 002b:00007f3559f9c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 454.678185][T13232] RAX: ffffffffffffffda RBX: 00007f35593e5fa0 RCX: 00007f355918f7c9 [ 454.678195][T13232] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 454.678205][T13232] RBP: 00007f3559213f91 R08: 0000000000000000 R09: 0000000000000000 [ 454.678214][T13232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 454.678222][T13232] R13: 00007f35593e6038 R14: 00007f35593e5fa0 R15: 00007ffd973750d8 [ 454.678242][T13232] [ 455.455187][T13242] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1582'. [ 455.498815][T13242] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1582'. [ 455.564522][T13245] futex_wake_op: syz.3.1583 tries to shift op by -2048; fix this program [ 455.681322][T13245] futex_wake_op: syz.3.1583 tries to shift op by -2048; fix this program [ 456.980978][T13277] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 457.838230][T13289] netlink: 'syz.3.1592': attribute type 11 has an invalid length. [ 461.229817][T13320] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 461.329612][T13315] zswap: compressor not available [ 461.813215][T13329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1602'. [ 462.588033][T13337] could not allocate digest TFM handle 0 [ 462.588033][T13337] [ 463.258768][T13369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1612'. [ 463.284611][T13370] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 464.820170][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1622'. [ 465.567268][T13418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1625'. [ 466.468158][T13434] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 466.531813][T13436] FAULT_INJECTION: forcing a failure. [ 466.531813][T13436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.588034][T13436] CPU: 0 UID: 0 PID: 13436 Comm: syz.3.1632 Tainted: G U L syzkaller #0 PREEMPT(full) [ 466.588061][T13436] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 466.588068][T13436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 466.588077][T13436] Call Trace: [ 466.588082][T13436] [ 466.588089][T13436] dump_stack_lvl+0x16c/0x1f0 [ 466.588115][T13436] should_fail_ex+0x512/0x640 [ 466.588136][T13436] _copy_from_user+0x2e/0xd0 [ 466.588153][T13436] ip6_mroute_setsockopt+0x2a1e/0x39e0 [ 466.588180][T13436] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 466.588198][T13436] ? find_held_lock+0x2b/0x80 [ 466.588219][T13436] ? bpf_ksym_find+0x124/0x1c0 [ 466.588236][T13436] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 466.588262][T13436] ? is_bpf_text_address+0x94/0x1a0 [ 466.588282][T13436] ? kernel_text_address+0x8d/0x100 [ 466.588299][T13436] ? __kernel_text_address+0xd/0x40 [ 466.588316][T13436] ? rcu_is_watching+0x12/0xc0 [ 466.588335][T13436] ? irqentry_exit+0x1dd/0x8c0 [ 466.588370][T13436] ? do_ipv6_setsockopt+0x880/0x4570 [ 466.588385][T13436] do_ipv6_setsockopt+0x880/0x4570 [ 466.588403][T13436] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 466.588424][T13436] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 466.588448][T13436] ? find_held_lock+0x2b/0x80 [ 466.588467][T13436] ? get_pid_task+0xfc/0x250 [ 466.588486][T13436] ? __pfx___might_resched+0x10/0x10 [ 466.588513][T13436] ? __lock_acquire+0x436/0x2890 [ 466.588531][T13436] ? ipv6_setsockopt+0xcb/0x170 [ 466.588545][T13436] ipv6_setsockopt+0xcb/0x170 [ 466.588562][T13436] rawv6_setsockopt+0xd1/0x6a0 [ 466.588585][T13436] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 466.588611][T13436] ? sock_common_setsockopt+0x2e/0xf0 [ 466.588634][T13436] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 466.588657][T13436] do_sock_setsockopt+0xf3/0x1d0 [ 466.588682][T13436] __sys_setsockopt+0x120/0x1a0 [ 466.588702][T13436] __x64_sys_setsockopt+0xbd/0x160 [ 466.588719][T13436] ? do_syscall_64+0x91/0xf80 [ 466.588741][T13436] ? lockdep_hardirqs_on+0x7c/0x110 [ 466.588762][T13436] do_syscall_64+0xcd/0xf80 [ 466.588785][T13436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.588801][T13436] RIP: 0033:0x7f7e3e18f7c9 [ 466.588814][T13436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.588828][T13436] RSP: 002b:00007f7e3efbe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 466.588842][T13436] RAX: ffffffffffffffda RBX: 00007f7e3e3e5fa0 RCX: 00007f7e3e18f7c9 [ 466.588852][T13436] RDX: 00000000000000d3 RSI: 0000000000000029 RDI: 0400000000000003 [ 466.588861][T13436] RBP: 00007f7e3efbe090 R08: 0000000000000567 R09: 0000000000000000 [ 466.588871][T13436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.588879][T13436] R13: 00007f7e3e3e6038 R14: 00007f7e3e3e5fa0 R15: 00007ffcc912c098 [ 466.588904][T13436] [ 467.131769][T13445] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1635'. [ 467.204311][T13445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.218279][T13445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.241400][T13445] bond0 (unregistering): Released all slaves [ 468.049897][T13465] netlink: 'syz.4.1643': attribute type 11 has an invalid length. [ 468.601607][T13476] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 468.942427][T13486] FAULT_INJECTION: forcing a failure. [ 468.942427][T13486] name failslab, interval 1, probability 0, space 0, times 0 [ 469.006691][T13486] CPU: 0 UID: 0 PID: 13486 Comm: syz.3.1647 Tainted: G U L syzkaller #0 PREEMPT(full) [ 469.006720][T13486] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 469.006726][T13486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 469.006735][T13486] Call Trace: [ 469.006741][T13486] [ 469.006747][T13486] dump_stack_lvl+0x16c/0x1f0 [ 469.006775][T13486] should_fail_ex+0x512/0x640 [ 469.006795][T13486] should_failslab+0xc2/0x120 [ 469.006819][T13486] kmem_cache_alloc_node_noprof+0x86/0x800 [ 469.006838][T13486] ? __alloc_skb+0x156/0x410 [ 469.006859][T13486] ? __alloc_skb+0x156/0x410 [ 469.006874][T13486] __alloc_skb+0x156/0x410 [ 469.006888][T13486] ? __alloc_skb+0x35d/0x410 [ 469.006903][T13486] ? __pfx___alloc_skb+0x10/0x10 [ 469.006925][T13486] ? find_held_lock+0x10/0x80 [ 469.006945][T13486] ? atomic_notifier_call_chain+0x9e/0x1c0 [ 469.006964][T13486] mr6_netlink_event+0xde/0x190 [ 469.006985][T13486] ip6_mroute_setsockopt+0x232c/0x39e0 [ 469.007011][T13486] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 469.007030][T13486] ? find_held_lock+0x2b/0x80 [ 469.007050][T13486] ? bpf_ksym_find+0x124/0x1c0 [ 469.007068][T13486] ? kernel_text_address+0x8d/0x100 [ 469.007097][T13486] ? __lock_acquire+0x436/0x2890 [ 469.007109][T13486] ? _parse_integer_limit+0x17f/0x1d0 [ 469.007134][T13486] ? do_ipv6_setsockopt+0x880/0x4570 [ 469.007148][T13486] ? __pfx__kstrtoull+0x10/0x10 [ 469.007166][T13486] do_ipv6_setsockopt+0x880/0x4570 [ 469.007185][T13486] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 469.007208][T13486] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 469.007232][T13486] ? find_held_lock+0x2b/0x80 [ 469.007251][T13486] ? get_pid_task+0xfc/0x250 [ 469.007271][T13486] ? __pfx___might_resched+0x10/0x10 [ 469.007292][T13486] ? __lock_acquire+0x436/0x2890 [ 469.007309][T13486] ? ipv6_setsockopt+0xcb/0x170 [ 469.007323][T13486] ipv6_setsockopt+0xcb/0x170 [ 469.007339][T13486] rawv6_setsockopt+0xd1/0x6a0 [ 469.007363][T13486] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 469.007432][T13486] ? sock_common_setsockopt+0x2e/0xf0 [ 469.007456][T13486] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 469.007479][T13486] do_sock_setsockopt+0xf3/0x1d0 [ 469.007503][T13486] __sys_setsockopt+0x120/0x1a0 [ 469.007525][T13486] __x64_sys_setsockopt+0xbd/0x160 [ 469.007542][T13486] ? do_syscall_64+0x91/0xf80 [ 469.007563][T13486] ? lockdep_hardirqs_on+0x7c/0x110 [ 469.007588][T13486] do_syscall_64+0xcd/0xf80 [ 469.007611][T13486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.007626][T13486] RIP: 0033:0x7f7e3e18f7c9 [ 469.007639][T13486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.007654][T13486] RSP: 002b:00007f7e3efbe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 469.007675][T13486] RAX: ffffffffffffffda RBX: 00007f7e3e3e5fa0 RCX: 00007f7e3e18f7c9 [ 469.007685][T13486] RDX: 00000000000000d3 RSI: 0000000000000029 RDI: 0400000000000003 [ 469.007695][T13486] RBP: 00007f7e3efbe090 R08: 0000000000000567 R09: 0000000000000000 [ 469.007704][T13486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.007713][T13486] R13: 00007f7e3e3e6038 R14: 00007f7e3e3e5fa0 R15: 00007ffcc912c098 [ 469.007735][T13486] [ 469.849529][T13494] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 470.099404][T13503] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1651'. [ 470.326152][T13503] bridge0: port 3(bond0) entered disabled state [ 470.419439][T13503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.482616][T13503] bond_slave_0: left promiscuous mode [ 470.520896][T13503] bond_slave_0: left allmulticast mode [ 470.572542][T13503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.634891][T13503] bond_slave_1: left promiscuous mode [ 470.680010][T13503] bond_slave_1: left allmulticast mode [ 470.757466][T13503] bond0 (unregistering): Released all slaves [ 471.844818][T13523] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 472.477485][T13547] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 473.043562][T13554] zswap: compressor not available [ 473.520998][T13565] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1664'. [ 473.596205][ T30] audit: type=1807 audit(1767705882.267:16): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 473.611914][T13566] ima: policy update failed [ 473.662998][ T30] audit: type=1802 audit(1767705882.287:17): pid=13567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.1666" res=0 errno=0 [ 473.715995][T13565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.753598][ T30] audit: type=1802 audit(1767705882.297:18): pid=13566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1666" res=0 errno=0 [ 473.810633][T13565] bond0 (unregistering): Released all slaves [ 474.028438][T13575] futex_wake_op: syz.1.1667 tries to shift op by -2048; fix this program [ 474.174542][T13575] futex_wake_op: syz.1.1667 tries to shift op by -2048; fix this program [ 474.395658][T13575] futex_wake_op: syz.1.1667 tries to shift op by -2048; fix this program [ 474.477781][T13601] FAULT_INJECTION: forcing a failure. [ 474.477781][T13601] name failslab, interval 1, probability 0, space 0, times 0 [ 474.578217][T13601] CPU: 0 UID: 0 PID: 13601 Comm: syz.2.1675 Tainted: G U L syzkaller #0 PREEMPT(full) [ 474.578248][T13601] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 474.578254][T13601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 474.578264][T13601] Call Trace: [ 474.578270][T13601] [ 474.578277][T13601] dump_stack_lvl+0x16c/0x1f0 [ 474.578306][T13601] should_fail_ex+0x512/0x640 [ 474.578324][T13601] ? kmem_cache_alloc_noprof+0x62/0x770 [ 474.578345][T13601] should_failslab+0xc2/0x120 [ 474.578368][T13601] kmem_cache_alloc_noprof+0x83/0x770 [ 474.578387][T13601] ? alloc_empty_file+0x55/0x1e0 [ 474.578406][T13601] ? alloc_empty_file+0x55/0x1e0 [ 474.578421][T13601] alloc_empty_file+0x55/0x1e0 [ 474.578437][T13601] path_openat+0xde/0x3140 [ 474.578465][T13601] ? __pfx_path_openat+0x10/0x10 [ 474.578486][T13601] ? __pfx_stack_trace_save+0x10/0x10 [ 474.578510][T13601] ? stack_depot_save_flags+0x29/0x9b0 [ 474.578532][T13601] do_filp_open+0x20b/0x470 [ 474.578553][T13601] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 474.578571][T13601] ? __pfx_do_filp_open+0x10/0x10 [ 474.578592][T13601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.578628][T13601] do_open_execat+0xf9/0x3a0 [ 474.578647][T13601] ? __pfx_do_open_execat+0x10/0x10 [ 474.578673][T13601] alloc_bprm+0x2d/0x710 [ 474.578693][T13601] do_execveat_common.isra.0+0x1ce/0x610 [ 474.578718][T13601] __x64_sys_execve+0x8e/0xb0 [ 474.578739][T13601] do_syscall_64+0xcd/0xf80 [ 474.578763][T13601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.578778][T13601] RIP: 0033:0x7fae81b8f7c9 [ 474.578791][T13601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.578806][T13601] RSP: 002b:00007fae829b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 474.578820][T13601] RAX: ffffffffffffffda RBX: 00007fae81de5fa0 RCX: 00007fae81b8f7c9 [ 474.578830][T13601] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 474.578839][T13601] RBP: 00007fae81c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 474.578848][T13601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.578857][T13601] R13: 00007fae81de6038 R14: 00007fae81de5fa0 R15: 00007fffab1da928 [ 474.578877][T13601] [ 477.550344][T13649] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 479.343202][T13690] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 480.027706][T13703] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078003a80 pfn:0x78000 [ 480.087992][T13703] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 480.171282][T13703] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 480.358603][T13703] raw: ffff888078003a80 0000000000000000 00000001ffffffff 0000000000000000 [ 480.499003][T13729] futex_wake_op: syz.3.1706 tries to shift op by -2048; fix this program [ 480.511333][T13703] page dumped because: unmovable page [ 480.571086][T13703] page_owner tracks the page as allocated [ 480.592463][T13728] vmstat_refresh: nr_hugetlb -12800 [ 480.678164][T13703] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x92820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC), pid 13406, tgid 13405 (syz.2.1622), ts 465088818855, free_ts 464795709816 [ 480.906515][T13703] post_alloc_hook+0x1af/0x220 [ 480.943008][T13703] get_page_from_freelist+0xd0b/0x31a0 [ 480.997361][T13703] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 481.030391][T13703] alloc_pages_mpol+0x1fb/0x550 [ 481.052592][T13703] alloc_pages_noprof+0x131/0x390 [ 481.079761][T13703] stack_depot_save_flags+0x8fe/0x9b0 [ 481.097679][T13703] kasan_save_stack+0x42/0x60 [ 481.124886][T13703] kasan_save_track+0x14/0x30 [ 481.142007][T13703] __kasan_slab_alloc+0x89/0x90 [ 481.163035][T13703] kmem_cache_alloc_noprof+0x25e/0x770 [ 481.190087][T13703] radix_tree_node_alloc.constprop.0+0x1e8/0x350 [ 481.213582][T13703] idr_get_free+0x528/0xa30 [ 481.233712][T13703] idr_alloc_u32+0x1ac/0x320 [ 481.253758][T13703] idr_alloc_cyclic+0x10b/0x230 [ 481.273747][T13703] __kernfs_new_node+0x11a/0x9b0 [ 481.278774][T13703] kernfs_new_node+0x13c/0x1e0 [ 481.318632][T13703] page last free pid 13406 tgid 13405 stack trace: [ 481.350491][T13703] __free_frozen_pages+0x7df/0x1170 [ 481.364925][T13703] device_release+0xa4/0x240 [ 481.391838][T13703] kobject_put+0x1ef/0x6f0 [ 481.421390][T13703] netdev_run_todo+0x7da/0x12a0 [ 481.437013][T13703] tun_chr_close+0xea/0x230 [ 481.456150][T13703] __fput+0x402/0xb70 [ 481.460178][T13703] task_work_run+0x150/0x240 [ 481.497198][T13703] exit_to_user_mode_loop+0xfb/0x540 [ 481.502556][T13703] do_syscall_64+0x4ee/0xf80 [ 481.543763][T13703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.593897][T13704] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078003a80 pfn:0x78000 [ 481.621535][T13741] binder: 13739:13741 ioctl c018620c 0 returned -1 [ 481.637990][T13704] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 481.664428][T13704] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 481.724512][T13704] raw: ffff888078003a80 0000000000000000 00000001ffffffff 0000000000000000 [ 481.733151][T13704] page dumped because: unmovable page [ 481.789354][T13704] page_owner tracks the page as allocated [ 481.816818][T13704] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x92820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC), pid 13406, tgid 13405 (syz.2.1622), ts 465088818855, free_ts 464795709816 [ 481.920672][T13704] post_alloc_hook+0x1af/0x220 [ 481.930804][T13704] get_page_from_freelist+0xd0b/0x31a0 [ 481.961305][T13704] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 481.984555][T13704] alloc_pages_mpol+0x1fb/0x550 [ 482.011343][T13704] alloc_pages_noprof+0x131/0x390 [ 482.026783][T13704] stack_depot_save_flags+0x8fe/0x9b0 [ 482.055204][T13704] kasan_save_stack+0x42/0x60 [ 482.083396][T13704] kasan_save_track+0x14/0x30 [ 482.105309][T13704] __kasan_slab_alloc+0x89/0x90 [ 482.110227][T13704] kmem_cache_alloc_noprof+0x25e/0x770 [ 482.158736][T13704] radix_tree_node_alloc.constprop.0+0x1e8/0x350 [ 482.189043][T13704] idr_get_free+0x528/0xa30 [ 482.193597][T13704] idr_alloc_u32+0x1ac/0x320 [ 482.216051][T13704] idr_alloc_cyclic+0x10b/0x230 [ 482.243758][T13704] __kernfs_new_node+0x11a/0x9b0 [ 482.248756][T13704] kernfs_new_node+0x13c/0x1e0 [ 482.283840][T13704] page last free pid 13406 tgid 13405 stack trace: [ 482.326572][T13704] __free_frozen_pages+0x7df/0x1170 [ 482.331828][T13704] device_release+0xa4/0x240 [ 482.368194][T13704] kobject_put+0x1ef/0x6f0 [ 482.372784][T13704] netdev_run_todo+0x7da/0x12a0 [ 482.414002][T13704] tun_chr_close+0xea/0x230 [ 482.441039][T13704] __fput+0x402/0xb70 [ 482.458610][T13704] task_work_run+0x150/0x240 [ 482.483811][T13704] exit_to_user_mode_loop+0xfb/0x540 [ 482.506859][T13704] do_syscall_64+0x4ee/0xf80 [ 482.541626][T13704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.472284][T13757] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 483.500013][T13759] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1714'. [ 484.642047][T13773] zswap: compressor not available [ 485.467392][T13790] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 485.561173][T13794] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1724'. [ 486.461757][T13809] FAULT_INJECTION: forcing a failure. [ 486.461757][T13809] name failslab, interval 1, probability 0, space 0, times 0 [ 486.509609][T13809] CPU: 0 UID: 0 PID: 13809 Comm: syz.2.1727 Tainted: G U L syzkaller #0 PREEMPT(full) [ 486.509636][T13809] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 486.509642][T13809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 486.509652][T13809] Call Trace: [ 486.509657][T13809] [ 486.509663][T13809] dump_stack_lvl+0x16c/0x1f0 [ 486.509690][T13809] should_fail_ex+0x512/0x640 [ 486.509707][T13809] ? kmem_cache_alloc_noprof+0x62/0x770 [ 486.509727][T13809] should_failslab+0xc2/0x120 [ 486.509750][T13809] kmem_cache_alloc_noprof+0x83/0x770 [ 486.509767][T13809] ? posix_lock_inode+0x1b7/0x2260 [ 486.509792][T13809] ? posix_lock_inode+0x1b7/0x2260 [ 486.509811][T13809] posix_lock_inode+0x1b7/0x2260 [ 486.509838][T13809] ? __pfx_posix_lock_inode+0x10/0x10 [ 486.509864][T13809] vfs_lock_file+0xfb/0x150 [ 486.509885][T13809] fcntl_setlk+0x3ff/0xdf0 [ 486.509908][T13809] ? __pfx_fcntl_setlk+0x10/0x10 [ 486.509937][T13809] ? rep_movs_alternative+0x30/0x90 [ 486.509957][T13809] do_fcntl+0x43d/0x1660 [ 486.509973][T13809] ? __pfx_do_fcntl+0x10/0x10 [ 486.509995][T13809] ? tomoyo_file_fcntl+0x6c/0xc0 [ 486.510021][T13809] __x64_sys_fcntl+0x163/0x200 [ 486.510039][T13809] do_syscall_64+0xcd/0xf80 [ 486.510068][T13809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.510084][T13809] RIP: 0033:0x7fae81b8f7c9 [ 486.510097][T13809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.510112][T13809] RSP: 002b:00007fae829b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 486.510127][T13809] RAX: ffffffffffffffda RBX: 00007fae81de5fa0 RCX: 00007fae81b8f7c9 [ 486.510138][T13809] RDX: 0000000000001298 RSI: 0000000000000026 RDI: 0000000000000006 [ 486.510146][T13809] RBP: 00007fae81c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 486.510156][T13809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.510165][T13809] R13: 00007fae81de6038 R14: 00007fae81de5fa0 R15: 00007fffab1da928 [ 486.510184][T13809] [ 486.926923][T13810] random: crng reseeded on system resumption [ 486.984679][T13810] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1727'. [ 487.004516][T13811] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1727'. [ 487.235716][T13819] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1730'. [ 488.809065][ T5840] Bluetooth: hci4: unexpected subevent 0x01 length: 3 < 18 [ 488.887577][T13849] netlink: 9872 bytes leftover after parsing attributes in process `syz.4.1734'. [ 491.761266][T13914] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1754'. [ 492.369511][T13921] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1755'. [ 493.953766][ T5840] Bluetooth: hci1: unexpected subevent 0x01 length: 3 < 18 [ 493.966064][T13964] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 493.998099][T13965] netlink: 9872 bytes leftover after parsing attributes in process `syz.1.1764'. [ 494.895702][T13970] zswap: compressor not available [ 495.895021][T14005] futex_wake_op: syz.3.1775 tries to shift op by -2048; fix this program [ 495.983997][T14005] futex_wake_op: syz.3.1775 tries to shift op by -2048; fix this program [ 495.997812][ T5840] Bluetooth: hci0: unexpected event 0x1d length: 6 > 5 [ 496.054351][T14007] 0x000000000001-0x000000020000 : "" [ 496.263171][T14007] ftl_cs: FTL header corrupt! [ 496.461926][ T30] audit: type=1804 audit(1767705916.164:19): pid=14017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1777" name="kvm" dev="tmpfs" ino=1886 res=1 errno=0 [ 497.048305][ T5840] Bluetooth: hci2: unexpected subevent 0x01 length: 3 < 18 [ 497.165426][T14030] netlink: 9872 bytes leftover after parsing attributes in process `syz.3.1780'. [ 497.361609][T14034] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 498.592480][T14061] FAULT_INJECTION: forcing a failure. [ 498.592480][T14061] name fail_futex, interval 1, probability 0, space 0, times 0 [ 498.761499][T14061] CPU: 0 UID: 0 PID: 14061 Comm: syz.2.1786 Tainted: G U L syzkaller #0 PREEMPT(full) [ 498.761528][T14061] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 498.761534][T14061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 498.761544][T14061] Call Trace: [ 498.761549][T14061] [ 498.761556][T14061] dump_stack_lvl+0x16c/0x1f0 [ 498.761584][T14061] should_fail_ex+0x512/0x640 [ 498.761601][T14061] ? unwind_get_return_address+0x59/0xa0 [ 498.761623][T14061] get_futex_key+0x1d0/0x15f0 [ 498.761642][T14061] ? __pfx_get_futex_key+0x10/0x10 [ 498.761658][T14061] ? stack_trace_save+0x8e/0xc0 [ 498.761681][T14061] ? __pfx_stack_trace_save+0x10/0x10 [ 498.761707][T14061] futex_wait_setup+0x9d/0x570 [ 498.761732][T14061] __futex_wait+0x193/0x2f0 [ 498.761753][T14061] ? __pfx___futex_wait+0x10/0x10 [ 498.761776][T14061] ? __pfx_futex_wake_mark+0x10/0x10 [ 498.761798][T14061] ? futex_hash+0x2c5/0x380 [ 498.761814][T14061] ? futex_private_hash_put+0x160/0x1b0 [ 498.761831][T14061] futex_wait+0xe8/0x380 [ 498.761851][T14061] ? __pfx_futex_wait+0x10/0x10 [ 498.761883][T14061] ? kmem_cache_free+0x171/0x770 [ 498.761904][T14061] do_futex+0x229/0x350 [ 498.761922][T14061] ? __pfx_do_futex+0x10/0x10 [ 498.761938][T14061] ? __pfx___might_resched+0x10/0x10 [ 498.761959][T14061] ? blkcg_maybe_throttle_current+0x650/0xf30 [ 498.761977][T14061] ? _raw_spin_unlock_irq+0x23/0x50 [ 498.761999][T14061] __x64_sys_futex+0x1e0/0x4c0 [ 498.762017][T14061] ? __do_sys_close_range+0x278/0x730 [ 498.762041][T14061] ? __pfx___x64_sys_futex+0x10/0x10 [ 498.762059][T14061] ? rcu_is_watching+0x12/0xc0 [ 498.762085][T14061] do_syscall_64+0xcd/0xf80 [ 498.762109][T14061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.762125][T14061] RIP: 0033:0x7fae81b8f7c9 [ 498.762138][T14061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.762153][T14061] RSP: 002b:00007fae829770e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 498.762167][T14061] RAX: ffffffffffffffda RBX: 00007fae81de6188 RCX: 00007fae81b8f7c9 [ 498.762178][T14061] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fae81de6188 [ 498.762187][T14061] RBP: 00007fae81de6180 R08: 0000000000000000 R09: 0000000000000000 [ 498.762196][T14061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.762205][T14061] R13: 00007fae81de6218 R14: 00007fffab1da840 R15: 00007fffab1da928 [ 498.762224][T14061] [ 499.958933][T14073] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1789'. [ 500.808980][T14089] futex_wake_op: syz.4.1794 tries to shift op by -2048; fix this program [ 500.859440][T14089] futex_wake_op: syz.4.1794 tries to shift op by -2048; fix this program [ 500.910149][T14089] 0x000000000001-0x000000020000 : "" [ 500.944485][T14089] ftl_cs: FTL header corrupt! [ 501.526221][T14101] FAULT_INJECTION: forcing a failure. [ 501.526221][T14101] name fail_futex, interval 1, probability 0, space 0, times 0 [ 501.596922][T14101] CPU: 0 UID: 0 PID: 14101 Comm: syz.3.1798 Tainted: G U L syzkaller #0 PREEMPT(full) [ 501.596952][T14101] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 501.596958][T14101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 501.596968][T14101] Call Trace: [ 501.596974][T14101] [ 501.596981][T14101] dump_stack_lvl+0x16c/0x1f0 [ 501.597009][T14101] should_fail_ex+0x512/0x640 [ 501.597033][T14101] get_futex_key+0x1d0/0x15f0 [ 501.597052][T14101] ? __pfx_get_futex_key+0x10/0x10 [ 501.597075][T14101] futex_wake+0xea/0x530 [ 501.597097][T14101] ? __pfx_futex_wake+0x10/0x10 [ 501.597121][T14101] ? rcu_is_watching+0x12/0xc0 [ 501.597146][T14101] do_futex+0x1e3/0x350 [ 501.597163][T14101] ? __pfx_do_futex+0x10/0x10 [ 501.597184][T14101] __x64_sys_futex+0x1e0/0x4c0 [ 501.597202][T14101] ? fd_install+0x223/0x570 [ 501.597223][T14101] ? __pfx___x64_sys_futex+0x10/0x10 [ 501.597247][T14101] do_syscall_64+0xcd/0xf80 [ 501.597271][T14101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.597286][T14101] RIP: 0033:0x7f7e3e18f7c9 [ 501.597299][T14101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.597313][T14101] RSP: 002b:00007f7e3efbe0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 501.597328][T14101] RAX: ffffffffffffffda RBX: 00007f7e3e3e5fa8 RCX: 00007f7e3e18f7c9 [ 501.597338][T14101] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7e3e3e5fac [ 501.597347][T14101] RBP: 00007f7e3e3e5fa0 R08: 00007f7e3efbf000 R09: 0000000000000000 [ 501.597357][T14101] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 501.597366][T14101] R13: 00007f7e3e3e6038 R14: 00007ffcc912bfb0 R15: 00007ffcc912c098 [ 501.597385][T14101] [ 502.375886][T14119] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 505.006911][T14182] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 505.350420][T14191] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 506.672687][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.681370][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.713202][T14219] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 507.864640][T14251] FAULT_INJECTION: forcing a failure. [ 507.864640][T14251] name failslab, interval 1, probability 0, space 0, times 0 [ 507.920788][T14251] CPU: 0 UID: 0 PID: 14251 Comm: syz.2.1834 Tainted: G U L syzkaller #0 PREEMPT(full) [ 507.920818][T14251] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 507.920824][T14251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 507.920834][T14251] Call Trace: [ 507.920840][T14251] [ 507.920847][T14251] dump_stack_lvl+0x16c/0x1f0 [ 507.920874][T14251] should_fail_ex+0x512/0x640 [ 507.920895][T14251] should_failslab+0xc2/0x120 [ 507.920918][T14251] kmem_cache_alloc_noprof+0x83/0x770 [ 507.920937][T14251] ? dst_alloc+0x99/0x1a0 [ 507.920958][T14251] ? dst_alloc+0x99/0x1a0 [ 507.920973][T14251] dst_alloc+0x99/0x1a0 [ 507.920992][T14251] rt_dst_alloc+0x35/0x3a0 [ 507.921007][T14251] ip_route_output_key_hash_rcu+0x87a/0x28e0 [ 507.921033][T14251] ip_route_output_key_hash+0x10f/0x2b0 [ 507.921052][T14251] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 507.921085][T14251] ? __call_rcu_common.constprop.0+0x3f0/0xa10 [ 507.921106][T14251] ? lockdep_hardirqs_on+0x7c/0x110 [ 507.921130][T14251] ? percpu_counter_add_batch+0xca/0x200 [ 507.921148][T14251] ip_route_output_flow+0x27/0x150 [ 507.921169][T14251] tcp_v4_connect+0x1448/0x1c10 [ 507.921192][T14251] ? __pfx_tcp_v4_connect+0x10/0x10 [ 507.921211][T14251] ? __local_bh_enable_ip+0xa4/0x120 [ 507.921234][T14251] mptcp_connect+0x4b5/0xae0 [ 507.921253][T14251] __inet_stream_connect+0x915/0xf50 [ 507.921276][T14251] ? __pfx___inet_stream_connect+0x10/0x10 [ 507.921293][T14251] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 507.921313][T14251] ? __pfx_inet_stream_connect+0x10/0x10 [ 507.921330][T14251] ? __local_bh_enable_ip+0xa4/0x120 [ 507.921353][T14251] ? __pfx_inet_stream_connect+0x10/0x10 [ 507.921369][T14251] inet_stream_connect+0x57/0xa0 [ 507.921387][T14251] __sys_connect_file+0x141/0x1a0 [ 507.921406][T14251] __sys_connect+0x13b/0x160 [ 507.921421][T14251] ? __pfx___sys_connect+0x10/0x10 [ 507.921444][T14251] ? xfd_validate_state+0x61/0x180 [ 507.921463][T14251] __x64_sys_connect+0x72/0xb0 [ 507.921478][T14251] ? lockdep_hardirqs_on+0x7c/0x110 [ 507.921500][T14251] do_syscall_64+0xcd/0xf80 [ 507.921523][T14251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.921539][T14251] RIP: 0033:0x7fae81b8f7c9 [ 507.921552][T14251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.921567][T14251] RSP: 002b:00007fae829b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 507.921582][T14251] RAX: ffffffffffffffda RBX: 00007fae81de5fa0 RCX: 00007fae81b8f7c9 [ 507.921592][T14251] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 507.921602][T14251] RBP: 00007fae81c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 507.921611][T14251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.921621][T14251] R13: 00007fae81de6038 R14: 00007fae81de5fa0 R15: 00007fffab1da928 [ 507.921642][T14251] [ 508.979777][T14261] zswap: compressor not available [ 510.639426][T14312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1846'. [ 510.924746][T14321] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 510.981591][T14322] tipc: Started in network mode [ 510.986762][T14322] tipc: Node identity ee00, cluster identity 4711 [ 511.001040][T14322] tipc: Node number set to 60928 [ 512.631609][T14368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1860'. [ 512.679229][T14368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1860'. [ 512.714174][T14368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1860'. [ 513.575721][T14378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1862'. [ 513.589291][T14381] zswap: compressor not available [ 513.703461][T14378] FAULT_INJECTION: forcing a failure. [ 513.703461][T14378] name failslab, interval 1, probability 0, space 0, times 0 [ 513.817318][T14378] CPU: 0 UID: 0 PID: 14378 Comm: syz.4.1862 Tainted: G U L syzkaller #0 PREEMPT(full) [ 513.817348][T14378] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 513.817355][T14378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 513.817364][T14378] Call Trace: [ 513.817371][T14378] [ 513.817378][T14378] dump_stack_lvl+0x16c/0x1f0 [ 513.817408][T14378] should_fail_ex+0x512/0x640 [ 513.817425][T14378] ? __kmalloc_noprof+0xca/0x910 [ 513.817444][T14378] should_failslab+0xc2/0x120 [ 513.817467][T14378] __kmalloc_noprof+0xeb/0x910 [ 513.817483][T14378] ? __register_sysctl_table+0xb3/0x1900 [ 513.817508][T14378] ? __register_sysctl_table+0xb3/0x1900 [ 513.817527][T14378] __register_sysctl_table+0xb3/0x1900 [ 513.817546][T14378] ? is_module_address+0x5f/0xf0 [ 513.817568][T14378] ? __pfx___register_sysctl_table+0x10/0x10 [ 513.817588][T14378] ? is_module_address+0x69/0xf0 [ 513.817604][T14378] ? register_net_sysctl_sz+0x222/0x450 [ 513.817621][T14378] ? __asan_memcpy+0x3c/0x60 [ 513.817640][T14378] xfrm_sysctl_init+0x1f5/0x2d0 [ 513.817662][T14378] xfrm_net_init+0x842/0xcc0 [ 513.817683][T14378] ? __pfx_xfrm_net_init+0x10/0x10 [ 513.817703][T14378] ops_init+0x1e2/0x5f0 [ 513.817725][T14378] setup_net+0x11d/0x3a0 [ 513.817746][T14378] ? __pfx_setup_net+0x10/0x10 [ 513.817764][T14378] ? lockdep_init_map_type+0x5c/0x270 [ 513.817787][T14378] ? mutex_init_lockep+0x110/0x150 [ 513.817807][T14378] copy_net_ns+0x351/0x7c0 [ 513.817831][T14378] create_new_namespaces+0x3ea/0xab0 [ 513.817856][T14378] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 513.817878][T14378] ksys_unshare+0x45b/0xa40 [ 513.817902][T14378] ? __pfx_ksys_unshare+0x10/0x10 [ 513.817926][T14378] ? xfd_validate_state+0x61/0x180 [ 513.817946][T14378] __x64_sys_unshare+0x31/0x40 [ 513.817969][T14378] do_syscall_64+0xcd/0xf80 [ 513.817993][T14378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.818009][T14378] RIP: 0033:0x7f355918f7c9 [ 513.818022][T14378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.818038][T14378] RSP: 002b:00007f3559f9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 513.818053][T14378] RAX: ffffffffffffffda RBX: 00007f35593e5fa0 RCX: 00007f355918f7c9 [ 513.818064][T14378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 513.818073][T14378] RBP: 00007f3559213f91 R08: 0000000000000000 R09: 0000000000000000 [ 513.818082][T14378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.818091][T14378] R13: 00007f35593e6038 R14: 00007f35593e5fa0 R15: 00007ffd973750d8 [ 513.818110][T14378] [ 514.850593][T14408] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 515.020677][T14408] serio: Serial port pty6 [ 515.928002][T14431] zswap: compressor not available [ 517.361724][ T30] audit: type=1326 audit(1767705937.172:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14450 comm="syz.4.1882" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f355918f7c9 code=0x0 [ 517.862975][ T5840] Bluetooth: hci2: Malformed Event: 0x02 [ 518.068325][T14477] netlink: 146 bytes leftover after parsing attributes in process `syz.3.1890'. [ 518.209828][T14483] zswap: compressor not available [ 518.433220][T14492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1893'. [ 518.469632][T14492] FAULT_INJECTION: forcing a failure. [ 518.469632][T14492] name failslab, interval 1, probability 0, space 0, times 0 [ 518.515562][T14492] CPU: 0 UID: 0 PID: 14492 Comm: syz.3.1893 Tainted: G U L syzkaller #0 PREEMPT(full) [ 518.515591][T14492] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 518.515597][T14492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 518.515607][T14492] Call Trace: [ 518.515613][T14492] [ 518.515620][T14492] dump_stack_lvl+0x16c/0x1f0 [ 518.515648][T14492] should_fail_ex+0x512/0x640 [ 518.515665][T14492] ? __kmalloc_noprof+0xca/0x910 [ 518.515690][T14492] should_failslab+0xc2/0x120 [ 518.515713][T14492] __kmalloc_noprof+0xeb/0x910 [ 518.515729][T14492] ? lockdep_init_map_type+0x5c/0x270 [ 518.515745][T14492] ? xfrm_hash_alloc+0xd1/0x100 [ 518.515763][T14492] ? __pfx_xfrm_net_init+0x10/0x10 [ 518.515780][T14492] ? xfrm_hash_alloc+0xd1/0x100 [ 518.515795][T14492] xfrm_hash_alloc+0xd1/0x100 [ 518.515811][T14492] xfrm_net_init+0x244/0xcc0 [ 518.515831][T14492] ? __pfx_xfrm_net_init+0x10/0x10 [ 518.515848][T14492] ops_init+0x1e2/0x5f0 [ 518.515871][T14492] setup_net+0x11d/0x3a0 [ 518.515891][T14492] ? __pfx_setup_net+0x10/0x10 [ 518.515909][T14492] ? lockdep_init_map_type+0x5c/0x270 [ 518.515924][T14492] ? mutex_init_lockep+0x110/0x150 [ 518.515943][T14492] copy_net_ns+0x351/0x7c0 [ 518.515966][T14492] create_new_namespaces+0x3ea/0xab0 [ 518.515992][T14492] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 518.516014][T14492] ksys_unshare+0x45b/0xa40 [ 518.516038][T14492] ? __pfx_ksys_unshare+0x10/0x10 [ 518.516061][T14492] ? xfd_validate_state+0x61/0x180 [ 518.516081][T14492] __x64_sys_unshare+0x31/0x40 [ 518.516103][T14492] do_syscall_64+0xcd/0xf80 [ 518.516127][T14492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.516142][T14492] RIP: 0033:0x7f7e3e18f7c9 [ 518.516155][T14492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.516170][T14492] RSP: 002b:00007f7e3efbe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 518.516184][T14492] RAX: ffffffffffffffda RBX: 00007f7e3e3e5fa0 RCX: 00007f7e3e18f7c9 [ 518.516194][T14492] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 518.516204][T14492] RBP: 00007f7e3e213f91 R08: 0000000000000000 R09: 0000000000000000 [ 518.516213][T14492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 518.516222][T14492] R13: 00007f7e3e3e6038 R14: 00007f7e3e3e5fa0 R15: 00007ffcc912c098 [ 518.516242][T14492] [ 518.931242][ T5840] Bluetooth: hci1: unexpected subevent 0x01 length: 3 < 18 [ 518.968036][T14495] zswap: compressor not available [ 520.220658][T14530] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 520.790166][T14544] block nbd2: Unsupported socket: should be TCP or UNIX. [ 521.245843][T14548] zswap: compressor not available [ 522.843917][T14600] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 523.648500][T14615] zswap: compressor not available [ 524.305114][ T5840] Bluetooth: hci4: unexpected subevent 0x01 length: 3 < 18 [ 524.848884][T14660] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 525.048545][T14668] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 526.719441][T14700] zswap: compressor not available [ 527.811027][ T5840] Bluetooth: hci2: unexpected subevent 0x01 length: 3 < 18 [ 527.829989][T14727] zswap: compressor not available [ 528.141158][T14745] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 528.803369][T14770] futex_wake_op: syz.4.1950 tries to shift op by -2048; fix this program [ 529.033901][T14770] futex_wake_op: syz.4.1950 tries to shift op by -2048; fix this program [ 530.588425][T14811] ptrace attach of "./syz-executor exec"[5836] was attempted by "./syz-executor exec"[14811] [ 530.913709][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 3 < 18 [ 530.964334][T14797] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 531.003195][T14797] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 531.025404][T14797] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 531.034587][T14811] ptrace attach of "./syz-executor exec"[5836] was attempted by "./syz-executor exec"[14811] [ 531.057608][T14797] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 531.166045][T14811] ptrace attach of "./syz-executor exec"[5836] was attempted by "./syz-executor exec"[14811] [ 531.926329][T14847] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 532.295891][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 532.948520][T14881] zswap: compressor not available [ 533.012530][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 533.091689][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 533.097832][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 533.152820][T14888] zswap: compressor not available [ 533.437203][ T30] audit: type=1800 audit(1767705953.336:21): pid=14908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1988" name="features" dev="configfs" ino=58169 res=0 errno=0 [ 534.005994][T14925] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 534.612050][T14942] tipc: Started in network mode [ 534.646581][T14942] tipc: Node identity ffffffff, cluster identity 4711 [ 534.681304][T14942] tipc: Node number set to 4294967295 [ 534.945579][T14950] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4:2f68:756e:675f:7461, load rds_tcp or rds_rdma? [ 535.400933][T14954] zswap: compressor not available [ 536.377194][T14966] ima: policy update failed [ 536.388163][ T30] audit: type=1802 audit(1767705956.301:22): pid=14966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2002" res=0 errno=0 [ 536.876915][T14986] random: crng reseeded on system resumption [ 538.267552][T15014] zswap: compressor not available [ 539.288166][T15047] block nbd2: Unsupported socket: should be TCP or UNIX. [ 541.594925][T15086] zswap: compressor not available [ 543.554330][T15136] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 545.279300][T15170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2058'. [ 545.936123][T15191] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2066'. [ 546.744113][T15191] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 546.777433][T15191] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 546.820947][T15191] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 546.851003][T15191] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 547.140629][T15215] ubi0: attaching mtd0 [ 547.145560][T15215] ubi0 warning: ubi_attach: valid VID header but corrupted EC header at PEB 0 [ 547.218985][T15215] ubi0: scanning is finished [ 547.572768][T15215] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 547.615657][T15215] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 547.631196][T15224] zswap: compressor not available [ 547.671874][T15215] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 547.734273][T15215] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 547.779824][T15215] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 547.837135][T15215] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 547.876318][T15215] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1202861388 [ 547.947654][T15215] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 548.014829][T15233] ubi0: background thread "ubi_bgt0d" started, PID 15233 [ 548.023129][T15219] ubi0: detaching mtd0 [ 548.055582][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 548.067779][T15219] ubi0: mtd0 is detached [ 548.770507][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 548.851405][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 548.857793][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 549.099367][T15259] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 549.532857][ T30] audit: type=1800 audit(1767708017.511:23): pid=15268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2081" name="trace_pipe" dev="tracefs" ino=1194 res=0 errno=0 [ 549.783959][T15270] zswap: compressor not available [ 550.520420][T15297] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 550.568057][ T5833] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 551.743788][T15341] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 552.540909][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 552.552380][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 552.560904][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 552.569542][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 552.582589][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 552.858224][T15366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2104'. [ 553.671431][ T77] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.794504][ T77] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.890411][ T77] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.964471][ T77] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.991042][T15357] chnl_net:caif_netlink_parms(): no params data found [ 554.226781][T15357] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.244493][T15357] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.253223][T15357] bridge_slave_0: entered allmulticast mode [ 554.260395][T15357] bridge_slave_0: entered promiscuous mode [ 554.299075][T15357] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.323095][T15357] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.339828][T15357] bridge_slave_1: entered allmulticast mode [ 554.356523][T15357] bridge_slave_1: entered promiscuous mode [ 554.375794][ T77] bridge_slave_1: left allmulticast mode [ 554.384702][ T77] bridge_slave_1: left promiscuous mode [ 554.396097][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.415004][ T77] bridge_slave_0: left allmulticast mode [ 554.426313][ T77] bridge_slave_0: left promiscuous mode [ 554.439993][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.661870][ T5840] Bluetooth: hci3: command tx timeout [ 555.000513][T15411] zswap: compressor not available [ 555.347421][ T77] tipc: Left network mode [ 555.369148][T15357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.448462][T15357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.641951][T15357] team0: Port device team_slave_0 added [ 555.701042][T15357] team0: Port device team_slave_1 added [ 555.785182][T15433] syz.4.2115 (15433): /proc/15430/oom_adj is deprecated, please use /proc/15430/oom_score_adj instead. [ 555.864178][T15357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.871194][T15357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.057453][T15357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.129735][T15357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.163117][T15357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.310888][T15357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.408836][T15455] FAULT_INJECTION: forcing a failure. [ 556.408836][T15455] name failslab, interval 1, probability 0, space 0, times 0 [ 556.480626][T15455] CPU: 0 UID: 0 PID: 15455 Comm: syz.4.2118 Tainted: G U L syzkaller #0 PREEMPT(full) [ 556.480656][T15455] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 556.480663][T15455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 556.480673][T15455] Call Trace: [ 556.480679][T15455] [ 556.480685][T15455] dump_stack_lvl+0x16c/0x1f0 [ 556.480713][T15455] should_fail_ex+0x512/0x640 [ 556.480731][T15455] ? __kmalloc_cache_noprof+0x5f/0x800 [ 556.480750][T15455] ? __pfx_sync_info_debugfs_open+0x10/0x10 [ 556.480771][T15455] should_failslab+0xc2/0x120 [ 556.480794][T15455] ? __pfx_sync_info_debugfs_open+0x10/0x10 [ 556.480812][T15455] __kmalloc_cache_noprof+0x80/0x800 [ 556.480828][T15455] ? __debugfs_file_get+0x1fe/0x840 [ 556.480848][T15455] ? single_open+0x4d/0x1f0 [ 556.480867][T15455] ? __pfx_sync_info_debugfs_open+0x10/0x10 [ 556.480885][T15455] ? __pfx_sync_info_debugfs_show+0x10/0x10 [ 556.480903][T15455] ? single_open+0x4d/0x1f0 [ 556.480919][T15455] single_open+0x4d/0x1f0 [ 556.480937][T15455] open_proxy_open+0x21f/0x310 [ 556.480959][T15455] do_dentry_open+0x748/0x1590 [ 556.480981][T15455] ? __pfx_open_proxy_open+0x10/0x10 [ 556.481006][T15455] vfs_open+0x82/0x3f0 [ 556.481024][T15455] path_openat+0x2078/0x3140 [ 556.481053][T15455] ? __pfx_path_openat+0x10/0x10 [ 556.481081][T15455] do_filp_open+0x20b/0x470 [ 556.481104][T15455] ? __pfx_do_filp_open+0x10/0x10 [ 556.481139][T15455] ? alloc_fd+0x471/0x7d0 [ 556.481165][T15455] do_sys_openat2+0x121/0x290 [ 556.481182][T15455] ? __pfx_do_sys_openat2+0x10/0x10 [ 556.481205][T15455] __x64_sys_openat+0x174/0x210 [ 556.481223][T15455] ? __pfx___x64_sys_openat+0x10/0x10 [ 556.481247][T15455] do_syscall_64+0xcd/0xf80 [ 556.481272][T15455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.481287][T15455] RIP: 0033:0x7f355918f7c9 [ 556.481300][T15455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.481315][T15455] RSP: 002b:00007f3559f9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 556.481330][T15455] RAX: ffffffffffffffda RBX: 00007f35593e5fa0 RCX: 00007f355918f7c9 [ 556.481340][T15455] RDX: 0000000000000100 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 556.481350][T15455] RBP: 00007f3559213f91 R08: 0000000000000000 R09: 0000000000000000 [ 556.481359][T15455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.481368][T15455] R13: 00007f35593e6038 R14: 00007f35593e5fa0 R15: 00007ffd973750d8 [ 556.481388][T15455] [ 556.568727][T15457] netlink: 'syz.4.2118': attribute type 1 has an invalid length. [ 556.658085][T15357] hsr_slave_0: entered promiscuous mode [ 556.662353][T15357] hsr_slave_1: entered promiscuous mode [ 556.662827][T15357] debugfs: 'hsr0' already exists in 'hsr' [ 556.662844][T15357] Cannot create hsr debugfs directory [ 556.729883][ T5840] Bluetooth: hci3: command tx timeout [ 558.798189][ T5840] Bluetooth: hci3: command tx timeout [ 558.940812][T15357] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 559.048047][T15357] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 559.098118][T15357] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 559.180387][T15357] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 560.868838][ T5840] Bluetooth: hci3: command tx timeout [ 561.026556][ T77] hsr_slave_0: left promiscuous mode [ 561.047635][ T77] hsr_slave_1: left promiscuous mode [ 561.086578][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.135871][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.158872][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.215348][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.316296][ T77] veth1_macvtap: left promiscuous mode [ 561.321859][ T77] veth0_macvtap: left promiscuous mode [ 564.738242][T15357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.815015][T15357] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.880317][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.887461][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.981307][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.988459][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.606365][T15357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.613816][T15588] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2130'. [ 565.754984][T15357] veth0_vlan: entered promiscuous mode [ 565.840320][T15357] veth1_vlan: entered promiscuous mode [ 566.505883][T15601] zswap: compressor not available [ 566.530939][T15357] veth0_macvtap: entered promiscuous mode [ 566.705895][T15357] veth1_macvtap: entered promiscuous mode [ 566.774221][T15357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 566.820220][T15357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 566.875237][ T3729] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.910547][ T3729] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.938471][ T3729] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.975021][ T3729] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.067354][T15615] zswap: compressor not available [ 567.163064][ T3025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.194426][ T3025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.236517][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.245882][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.794426][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.802431][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.019070][T15638] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 568.782820][T15650] zswap: compressor not available [ 568.930775][T15664] bond0: option packets_per_slave: invalid value ( Xµn‘pæ) [ 568.948950][T15664] bond0: option packets_per_slave: allowed values 0 - 65535 [ 569.155782][T15671] zswap: compressor not available [ 569.514825][T15686] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 570.067659][ T5840] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 571.097477][T15735] zswap: compressor not available [ 572.115788][T15780] FAULT_INJECTION: forcing a failure. [ 572.115788][T15780] name failslab, interval 1, probability 0, space 0, times 0 [ 572.115822][T15780] CPU: 0 UID: 0 PID: 15780 Comm: syz.2.2174 Tainted: G U L syzkaller #0 PREEMPT(full) [ 572.115845][T15780] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 572.115851][T15780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 572.115860][T15780] Call Trace: [ 572.115865][T15780] [ 572.115871][T15780] dump_stack_lvl+0x16c/0x1f0 [ 572.115897][T15780] should_fail_ex+0x512/0x640 [ 572.115914][T15780] ? kmem_cache_alloc_noprof+0x62/0x770 [ 572.115935][T15780] should_failslab+0xc2/0x120 [ 572.115957][T15780] kmem_cache_alloc_noprof+0x83/0x770 [ 572.115975][T15780] ? alloc_empty_file+0x55/0x1e0 [ 572.115994][T15780] ? alloc_empty_file+0x55/0x1e0 [ 572.116008][T15780] alloc_empty_file+0x55/0x1e0 [ 572.116024][T15780] alloc_file_pseudo+0x13a/0x230 [ 572.116041][T15780] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 572.116064][T15780] ? alloc_fd+0x471/0x7d0 [ 572.116089][T15780] sock_alloc_file+0x50/0x210 [ 572.116110][T15780] __sys_socket+0x1c0/0x260 [ 572.116124][T15780] ? fput+0x70/0xf0 [ 572.116137][T15780] ? __pfx___sys_socket+0x10/0x10 [ 572.116151][T15780] ? xfd_validate_state+0x61/0x180 [ 572.116164][T15780] ? __pfx_ksys_write+0x10/0x10 [ 572.116189][T15780] __x64_sys_socket+0x72/0xb0 [ 572.116202][T15780] ? lockdep_hardirqs_on+0x7c/0x110 [ 572.116225][T15780] do_syscall_64+0xcd/0xf80 [ 572.116248][T15780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.116263][T15780] RIP: 0033:0x7fae81b8f7c9 [ 572.116276][T15780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.116290][T15780] RSP: 002b:00007fae829b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 572.116305][T15780] RAX: ffffffffffffffda RBX: 00007fae81de5fa0 RCX: 00007fae81b8f7c9 [ 572.116315][T15780] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 572.116324][T15780] RBP: 00007fae81c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 572.116333][T15780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.116342][T15780] R13: 00007fae81de6038 R14: 00007fae81de5fa0 R15: 00007fffab1da928 [ 572.116361][T15780] [ 572.695153][T15801] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 573.705648][T15828] input: f¬ as /devices/virtual/input/input23 [ 573.938478][T15837] batman_adv: Routing algorithm '7' is not supported [ 573.972572][T15837] bridge0: port 2(dummy0) entered blocking state [ 574.021211][T15837] bridge0: port 2(dummy0) entered disabled state [ 574.054674][T15837] dummy0: entered allmulticast mode [ 574.080762][T15837] dummy0: entered promiscuous mode [ 574.121599][T15837] bridge0: port 2(dummy0) entered blocking state [ 574.128125][T15837] bridge0: port 2(dummy0) entered forwarding state [ 574.212107][T15839] zswap: compressor not available [ 574.238441][T15836] batman_adv: Routing algorithm '7' is not supported [ 574.957707][T15876] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 575.572870][T15897] FAULT_INJECTION: forcing a failure. [ 575.572870][T15897] name failslab, interval 1, probability 0, space 0, times 0 [ 575.688174][T15897] CPU: 0 UID: 0 PID: 15897 Comm: syz.1.2193 Tainted: G U L syzkaller #0 PREEMPT(full) [ 575.688209][T15897] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 575.688214][T15897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 575.688223][T15897] Call Trace: [ 575.688229][T15897] [ 575.688235][T15897] dump_stack_lvl+0x16c/0x1f0 [ 575.688262][T15897] should_fail_ex+0x512/0x640 [ 575.688280][T15897] ? fs_reclaim_acquire+0xae/0x150 [ 575.688307][T15897] should_failslab+0xc2/0x120 [ 575.688336][T15897] __kmalloc_noprof+0xeb/0x910 [ 575.688352][T15897] ? tomoyo_encode2+0x100/0x3e0 [ 575.688375][T15897] ? tomoyo_encode2+0x100/0x3e0 [ 575.688394][T15897] tomoyo_encode2+0x100/0x3e0 [ 575.688416][T15897] tomoyo_encode+0x29/0x50 [ 575.688435][T15897] tomoyo_realpath_from_path+0x18f/0x6e0 [ 575.688461][T15897] tomoyo_check_open_permission+0x2ab/0x3c0 [ 575.688484][T15897] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 575.688520][T15897] ? do_raw_spin_lock+0x12c/0x2b0 [ 575.688546][T15897] tomoyo_file_open+0x6b/0x90 [ 575.688571][T15897] security_file_open+0x84/0x1e0 [ 575.688591][T15897] do_dentry_open+0x597/0x1590 [ 575.688615][T15897] ? security_inode_permission+0xbf/0x260 [ 575.688636][T15897] vfs_open+0x82/0x3f0 [ 575.688654][T15897] path_openat+0x2078/0x3140 [ 575.688690][T15897] ? __pfx_path_openat+0x10/0x10 [ 575.688719][T15897] do_filp_open+0x20b/0x470 [ 575.688741][T15897] ? __pfx_do_filp_open+0x10/0x10 [ 575.688770][T15897] ? __pfx_kfree_link+0x10/0x10 [ 575.688794][T15897] ? alloc_fd+0x471/0x7d0 [ 575.688821][T15897] do_sys_openat2+0x121/0x290 [ 575.688837][T15897] ? __pfx_do_sys_openat2+0x10/0x10 [ 575.688852][T15897] ? __do_sys_ustat+0x126/0x1f0 [ 575.688879][T15897] __x64_sys_openat+0x174/0x210 [ 575.688896][T15897] ? __pfx___x64_sys_openat+0x10/0x10 [ 575.688920][T15897] do_syscall_64+0xcd/0xf80 [ 575.688944][T15897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.688960][T15897] RIP: 0033:0x7f9c9638f7c9 [ 575.688972][T15897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.688987][T15897] RSP: 002b:00007f9c971ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 575.689002][T15897] RAX: ffffffffffffffda RBX: 00007f9c965e6090 RCX: 00007f9c9638f7c9 [ 575.689012][T15897] RDX: 0000000000183200 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 575.689022][T15897] RBP: 00007f9c96413f91 R08: 0000000000000000 R09: 0000000000000000 [ 575.689031][T15897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.689040][T15897] R13: 00007f9c965e6128 R14: 00007f9c965e6090 R15: 00007ffd54410048 [ 575.689060][T15897] [ 576.174610][T15897] ERROR: Out of memory at tomoyo_realpath_from_path. [ 576.609513][T15924] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 576.923017][T15928] zswap: compressor not available [ 577.550074][T15949] scsi_strcpy_devinfo: vendor string 'íÙ/&cžÀ~n] ò | [ 577.550074][T15949] MÅ' is too long [ 577.591537][T15949] scsi_strcpy_devinfo: model string '’Dd5‚ ÕK€2bÛ [ 577.591537][T15949] ††½WÏõ›ú «ú' is too long [ 577.875381][T15958] netlink: 354 bytes leftover after parsing attributes in process `syz.4.2208'. [ 578.343295][T15966] zswap: compressor not available [ 579.015443][T15980] FAULT_INJECTION: forcing a failure. [ 579.015443][T15980] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 579.059696][T15980] CPU: 0 UID: 0 PID: 15980 Comm: syz.3.2214 Tainted: G U L syzkaller #0 PREEMPT(full) [ 579.059723][T15980] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 579.059729][T15980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 579.059739][T15980] Call Trace: [ 579.059744][T15980] [ 579.059750][T15980] dump_stack_lvl+0x16c/0x1f0 [ 579.059778][T15980] should_fail_ex+0x512/0x640 [ 579.059798][T15980] should_fail_alloc_page+0xe7/0x130 [ 579.059823][T15980] prepare_alloc_pages+0x401/0x670 [ 579.059849][T15980] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 579.059872][T15980] ? irqentry_exit+0x1dd/0x8c0 [ 579.059894][T15980] ? lockdep_hardirqs_on+0x7c/0x110 [ 579.059915][T15980] ? irqentry_exit+0x1dd/0x8c0 [ 579.059935][T15980] ? trace_irq_disable.constprop.0+0xd4/0x110 [ 579.059961][T15980] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 579.059986][T15980] ? rep_movs_alternative+0x4a/0x90 [ 579.060004][T15980] ? _copy_from_iter+0x161/0x16c0 [ 579.060022][T15980] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 579.060045][T15980] ? policy_nodemask+0xea/0x4e0 [ 579.060069][T15980] alloc_pages_mpol+0x1fb/0x550 [ 579.060092][T15980] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 579.060119][T15980] alloc_pages_noprof+0x131/0x390 [ 579.060141][T15980] anon_pipe_write+0xeb0/0x1bd0 [ 579.060167][T15980] ? find_held_lock+0x11/0x80 [ 579.060190][T15980] ? __pfx_anon_pipe_write+0x10/0x10 [ 579.060212][T15980] ? common_file_perm+0x1b1/0x500 [ 579.060232][T15980] ? bpf_lsm_file_permission+0x9/0x10 [ 579.060249][T15980] ? security_file_permission+0x71/0x210 [ 579.060269][T15980] ? rw_verify_area+0xcf/0x6c0 [ 579.060294][T15980] vfs_write+0x7d3/0x11d0 [ 579.060316][T15980] ? __pfx_anon_pipe_write+0x10/0x10 [ 579.060340][T15980] ? __pfx_vfs_write+0x10/0x10 [ 579.060359][T15980] ? find_held_lock+0x2b/0x80 [ 579.060389][T15980] ksys_write+0x1f8/0x250 [ 579.060409][T15980] ? __pfx_ksys_write+0x10/0x10 [ 579.060429][T15980] ? syscall_user_dispatch+0x78/0x140 [ 579.060452][T15980] do_syscall_64+0xcd/0xf80 [ 579.060475][T15980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.060491][T15980] RIP: 0033:0x7f7e3e18f7c9 [ 579.060504][T15980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.060518][T15980] RSP: 002b:00007f7e3efbe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 579.060534][T15980] RAX: ffffffffffffffda RBX: 00007f7e3e3e5fa0 RCX: 00007f7e3e18f7c9 [ 579.060544][T15980] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 579.060552][T15980] RBP: 00007f7e3e213f91 R08: 0000000000000000 R09: 0000000000000000 [ 579.060561][T15980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.060570][T15980] R13: 00007f7e3e3e6038 R14: 00007f7e3e3e5fa0 R15: 00007ffcc912c098 [ 579.060590][T15980] [ 579.576987][T16003] zswap: compressor not available [ 579.847012][T16017] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 579.853699][T16017] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 581.340909][T16061] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 582.248453][T16084] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2236'. [ 582.341437][T16084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 582.446105][T16084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.570603][T16084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.666504][T16084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.799203][T16110] QAT: Device 0 not found [ 583.651858][T16119] zswap: compressor not available [ 584.840873][T16159] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2246'. [ 586.460991][T16188] zswap: compressor not available [ 586.580216][T16204] netlink: 'syz.1.2249': attribute type 1 has an invalid length. [ 587.162151][T16220] bond0: invalid ARP target specified [ 588.395051][T16246] zswap: compressor not available [ 588.826012][T16266] netlink: 'syz.3.2269': attribute type 4 has an invalid length. [ 588.855423][T16266] netlink: 314 bytes leftover after parsing attributes in process `syz.3.2269'. [ 588.889775][T16266] IPv6: NLM_F_CREATE should be specified when creating new route [ 588.908632][T16262] zswap: compressor not available [ 591.015615][T16303] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 591.015615][T16303] [ 591.845251][T16318] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 592.012189][T16314] zswap: compressor not available [ 592.756305][T16330] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 593.256056][ T30] audit: type=1800 audit(1767708061.458:24): pid=16356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2295" name="lu_gp_id" dev="configfs" ino=67018 res=0 errno=0 [ 593.940571][ T5840] Bluetooth: hci4: unexpected event 0x31 length: 19 > 6 [ 594.098780][T16377] futex_wake_op: syz.4.2299 tries to shift op by -2048; fix this program [ 594.213369][T16377] futex_wake_op: syz.4.2299 tries to shift op by -2048; fix this program [ 594.260483][T16378] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2299'. [ 594.693790][T16387] nbd: couldn't find device at index 33904 [ 594.852141][T16390] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 595.589732][T16401] zswap: compressor û not available [ 596.309325][ T5840] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 598.607447][T16460] zswap: compressor not available [ 599.258974][T16476] netlink: 25 bytes leftover after parsing attributes in process `syz.4.2320'. [ 600.660793][T16474] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 600.679178][T16474] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 600.709275][T16474] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 600.841755][T16474] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 600.859426][T16474] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 600.911554][T16474] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 600.938930][T16474] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 601.051130][T16474] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 601.297028][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 602.545964][ T5840] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 602.729581][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 602.890605][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 602.968739][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 604.798737][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 604.958061][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 605.037463][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 605.053409][T16552] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 605.096211][T16552] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 605.161348][T16552] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 605.227551][T16552] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 605.287647][T16552] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 605.358677][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 607.107134][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 607.169075][T16589] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 607.186496][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 607.266904][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 607.329650][T16596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2347'. [ 607.462921][T16591] zswap: compressor û not available [ 607.651009][T16594] zswap: compressor not available [ 608.640442][T16618] zswap: compressor not available [ 608.662480][T16626] futex_wake_op: syz.2.2352 tries to shift op by -1; fix this program [ 608.853271][T16629] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 609.253432][T16639] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2355'. [ 609.335238][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 609.403615][T16643] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 609.858098][T16653] zswap: compressor 000 not available [ 610.163154][T16668] zswap: compressor not available [ 611.416749][T16681] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 611.438376][T16681] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 611.463759][T16681] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 611.491689][T16681] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 611.785217][T16702] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 611.967848][T16704] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26 [ 612.279850][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 613.058254][T16733] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 613.137466][T16722] zswap: compressor ûW–îë“;Å0못„?u=8å}Öƒ•L­Ö(£E‘¤¤Ö¹‰jj–8+ÕÄxp¥—Èœ‹ŒNkR³¦°¤uoêÇo‹ÿ¬<µSÔH ¾}ïEd }¡ìöP¢…8a 10 [ 616.507635][T16806] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2394'. [ 618.270922][T16842] zswap: compressor 000 not available [ 618.582362][ T5840] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 618.590038][ T5840] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 619.298332][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 619.308909][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 619.317777][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 619.334673][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 619.342099][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 619.563571][T16879] vhci_hcd vhci_hcd.2: default hub control req: 3132 v0a38 i0000 l0 [ 619.642186][T16872] FAULT_INJECTION: forcing a failure. [ 619.642186][T16872] name failslab, interval 1, probability 0, space 0, times 0 [ 619.772100][T16872] CPU: 0 UID: 0 PID: 16872 Comm: syz.4.2409 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 619.772136][T16872] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 619.772145][T16872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 619.772155][T16872] Call Trace: [ 619.772161][T16872] [ 619.772168][T16872] dump_stack_lvl+0x16c/0x1f0 [ 619.772196][T16872] should_fail_ex+0x512/0x640 [ 619.772214][T16872] ? __kmalloc_noprof+0xca/0x910 [ 619.772233][T16872] should_failslab+0xc2/0x120 [ 619.772256][T16872] __kmalloc_noprof+0xeb/0x910 [ 619.772272][T16872] ? __register_sysctl_table+0xb3/0x1900 [ 619.772297][T16872] ? __register_sysctl_table+0xb3/0x1900 [ 619.772316][T16872] __register_sysctl_table+0xb3/0x1900 [ 619.772336][T16872] ? is_module_address+0x5f/0xf0 [ 619.772356][T16872] ? __pfx___register_sysctl_table+0x10/0x10 [ 619.772376][T16872] ? is_module_address+0x69/0xf0 [ 619.772392][T16872] ? register_net_sysctl_sz+0x222/0x450 [ 619.772409][T16872] ? __asan_memcpy+0x3c/0x60 [ 619.772429][T16872] devinet_init_net+0x378/0x910 [ 619.772446][T16872] ? __pfx_devinet_init_net+0x10/0x10 [ 619.772461][T16872] ops_init+0x1e2/0x5f0 [ 619.772483][T16872] setup_net+0x11d/0x3a0 [ 619.772504][T16872] ? __pfx_setup_net+0x10/0x10 [ 619.772578][T16872] ? lockdep_init_map_type+0x5c/0x270 [ 619.772595][T16872] ? mutex_init_lockep+0x110/0x150 [ 619.772615][T16872] copy_net_ns+0x351/0x7c0 [ 619.772639][T16872] create_new_namespaces+0x3ea/0xab0 [ 619.772664][T16872] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 619.772687][T16872] ksys_unshare+0x45b/0xa40 [ 619.772711][T16872] ? __pfx_ksys_unshare+0x10/0x10 [ 619.772735][T16872] ? xfd_validate_state+0x61/0x180 [ 619.772754][T16872] __x64_sys_unshare+0x31/0x40 [ 619.772782][T16872] do_syscall_64+0xcd/0xf80 [ 619.772808][T16872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.772823][T16872] RIP: 0033:0x7f355918f7c9 [ 619.772837][T16872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.772852][T16872] RSP: 002b:00007f3559f9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 619.772867][T16872] RAX: ffffffffffffffda RBX: 00007f35593e5fa0 RCX: 00007f355918f7c9 [ 619.772878][T16872] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 619.772888][T16872] RBP: 00007f3559213f91 R08: 0000000000000000 R09: 0000000000000000 [ 619.772897][T16872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.772906][T16872] R13: 00007f35593e6038 R14: 00007f35593e5fa0 R15: 00007ffd973750d8 [ 619.772927][T16872] [ 620.843633][T16884] ima: policy update failed [ 620.853121][ T30] audit: type=1802 audit(1767708089.201:26): pid=16884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2411" res=0 errno=0 [ 620.996331][T16892] nvme_fcloop: unknown parameter or missing value '7' [ 621.335000][ T3574] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.370172][T16875] chnl_net:caif_netlink_parms(): no params data found [ 621.436872][ T5840] Bluetooth: hci1: command tx timeout [ 621.544450][ T3574] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.656116][ T3574] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.821536][ T3574] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.969803][ T3574] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.088650][T16875] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.110476][T16875] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.127017][T16875] bridge_slave_0: entered allmulticast mode [ 622.143676][T16875] bridge_slave_0: entered promiscuous mode [ 622.181173][T16875] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.199712][T16875] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.219772][T16875] bridge_slave_1: entered allmulticast mode [ 622.235783][T16875] bridge_slave_1: entered promiscuous mode [ 622.321616][T16875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.395640][T16875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.552216][T16920] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2418'. [ 622.578538][T16875] team0: Port device team_slave_0 added [ 622.646953][T16921] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [104] [ 622.733188][T16875] team0: Port device team_slave_1 added [ 622.752067][ T3574] bridge_slave_1: left allmulticast mode [ 622.773135][ T3574] bridge_slave_1: left promiscuous mode [ 622.797025][ T3574] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.833734][ T3574] bridge_slave_0: left allmulticast mode [ 622.858523][ T3574] bridge_slave_0: left promiscuous mode [ 622.894827][ T3574] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.028559][T16929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2421'. [ 623.056748][T16929] netlink: 354 bytes leftover after parsing attributes in process `syz.3.2421'. [ 623.102472][T16929] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 623.509855][ T5840] Bluetooth: hci1: command tx timeout [ 623.803388][T16935] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 624.305408][ T3574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 624.348630][ T3574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 624.370934][ T5840] Bluetooth: hci2: unexpected event 0x33 length: 124 > 10 [ 624.382806][ T3574] bond0 (unregistering): Released all slaves [ 624.447830][T16943] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2425'. [ 624.767287][T16875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.804663][T16875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.912385][T16875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.996205][T16875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.022941][T16875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.113140][T16875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.232179][T16957] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2428'. [ 625.355658][T16959] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [104] [ 625.432456][T16875] hsr_slave_0: entered promiscuous mode [ 625.472984][T16875] hsr_slave_1: entered promiscuous mode [ 625.496342][T16875] debugfs: 'hsr0' already exists in 'hsr' [ 625.535429][T16875] Cannot create hsr debugfs directory [ 625.570985][ T5840] Bluetooth: hci1: command tx timeout [ 626.237038][T16975] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 626.537185][T16989] FAULT_INJECTION: forcing a failure. [ 626.537185][T16989] name fail_futex, interval 1, probability 0, space 0, times 0 [ 626.761380][T16989] CPU: 0 UID: 0 PID: 16989 Comm: syz.4.2432 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 626.761414][T16989] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 626.761422][T16989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 626.761431][T16989] Call Trace: [ 626.761437][T16989] [ 626.761443][T16989] dump_stack_lvl+0x16c/0x1f0 [ 626.761469][T16989] should_fail_ex+0x512/0x640 [ 626.761490][T16989] get_futex_key+0x1d0/0x15f0 [ 626.761509][T16989] ? __pfx_get_futex_key+0x10/0x10 [ 626.761530][T16989] futex_wake+0xea/0x530 [ 626.761549][T16989] ? futex_wait+0x120/0x380 [ 626.761569][T16989] ? __pfx_futex_wait+0x10/0x10 [ 626.761589][T16989] ? __pfx_futex_wake+0x10/0x10 [ 626.761611][T16989] ? find_held_lock+0x2b/0x80 [ 626.761630][T16989] ? __might_fault+0xe3/0x190 [ 626.761647][T16989] ? __might_fault+0x13b/0x190 [ 626.761665][T16989] do_futex+0x1e3/0x350 [ 626.761682][T16989] ? __pfx_do_futex+0x10/0x10 [ 626.761699][T16989] ? cap_task_prctl+0x2af/0xa80 [ 626.761716][T16989] __x64_sys_futex+0x1e0/0x4c0 [ 626.761736][T16989] ? __pfx___x64_sys_futex+0x10/0x10 [ 626.761754][T16989] ? syscall_user_dispatch+0x78/0x140 [ 626.761778][T16989] do_syscall_64+0xcd/0xf80 [ 626.761802][T16989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.761817][T16989] RIP: 0033:0x7f355918f7c9 [ 626.761830][T16989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 626.761845][T16989] RSP: 002b:00007f35573f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 626.761866][T16989] RAX: ffffffffffffffda RBX: 00007f35593e6278 RCX: 00007f355918f7c9 [ 626.761876][T16989] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f35593e627c [ 626.761885][T16989] RBP: 00007f35593e6270 R08: 00007f3559f9d000 R09: 0000000000000000 [ 626.761895][T16989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 626.761903][T16989] R13: 00007f35593e6308 R14: 00007ffd97374ff0 R15: 00007ffd973750d8 [ 626.761923][T16989] [ 627.646685][ T5840] Bluetooth: hci1: command tx timeout [ 627.710093][T16998] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27 [ 627.987350][T16875] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 628.056547][T17001] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 628.119790][T16875] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 628.223937][T16875] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 628.314542][T16875] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 628.436699][T17015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2437'. [ 628.499880][T17015] netlink: 354 bytes leftover after parsing attributes in process `syz.4.2437'. [ 628.562915][T17027] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 628.920555][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.933358][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.978338][T16875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.134352][T16875] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.197597][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.204893][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.286503][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.293684][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.346364][ T3574] hsr_slave_0: left promiscuous mode [ 630.405845][ T3574] hsr_slave_1: left promiscuous mode [ 630.427748][ T3574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 630.446813][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.485854][ T3574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 630.496787][T17071] vhci_hcd vhci_hcd.0: invalid port number 16 [ 630.509844][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.543513][ T3574] veth1_macvtap: left promiscuous mode [ 630.573022][ T3574] veth0_macvtap: left promiscuous mode [ 630.592622][ T3574] veth1_vlan: left promiscuous mode [ 630.611447][ T3574] veth0_vlan: left promiscuous mode [ 631.286236][T17077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2448'. [ 631.322270][T17077] netlink: 354 bytes leftover after parsing attributes in process `syz.1.2448'. [ 631.361077][T17077] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 632.168244][T17094] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2452'. [ 632.405614][ T3574] team0 (unregistering): Port device team_slave_1 removed [ 632.548347][ T3574] team0 (unregistering): Port device team_slave_0 removed [ 632.753372][T17099] aoe: invalid device specification [ 633.534273][T17094] veth1_macvtap: left promiscuous mode [ 633.784779][T16875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.198905][T16875] veth0_vlan: entered promiscuous mode [ 634.233205][T17112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2456'. [ 634.354340][T16875] veth1_vlan: entered promiscuous mode [ 634.389354][T17120] hub 1-0:1.0: USB hub found [ 634.443719][T17120] hub 1-0:1.0: 1 port detected [ 634.711668][T16875] veth0_macvtap: entered promiscuous mode [ 634.759996][T16875] veth1_macvtap: entered promiscuous mode [ 634.826355][T16875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.871143][T16875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.932735][ T3025] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.967258][ T3025] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.195246][ T3025] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.285940][ T3025] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.623995][ T3025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.673936][ T3025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.768509][T16094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.801343][T16094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.968879][T17149] FAULT_INJECTION: forcing a failure. [ 635.968879][T17149] name failslab, interval 1, probability 0, space 0, times 0 [ 636.035101][T17149] CPU: 0 UID: 0 PID: 17149 Comm: syz.2.2406 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 636.035139][T17149] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 636.035148][T17149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 636.035158][T17149] Call Trace: [ 636.035164][T17149] [ 636.035172][T17149] dump_stack_lvl+0x16c/0x1f0 [ 636.035201][T17149] should_fail_ex+0x512/0x640 [ 636.035218][T17149] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 636.035240][T17149] should_failslab+0xc2/0x120 [ 636.035264][T17149] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 636.035282][T17149] ? inode_set_ctime_to_ts+0x137/0x3b0 [ 636.035306][T17149] ? __d_alloc+0x35/0xa80 [ 636.035321][T17149] ? __d_alloc+0x35/0xa80 [ 636.035333][T17149] __d_alloc+0x35/0xa80 [ 636.035347][T17149] d_alloc_pseudo+0x1c/0xc0 [ 636.035365][T17149] alloc_file_pseudo+0xcf/0x230 [ 636.035383][T17149] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 636.035398][T17149] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 636.035424][T17149] create_pipe_files+0x36d/0x9a0 [ 636.035449][T17149] do_pipe2+0xaf/0x1c0 [ 636.035471][T17149] ? __pfx_do_pipe2+0x10/0x10 [ 636.035494][T17149] ? xfd_validate_state+0x61/0x180 [ 636.035507][T17149] ? __pfx_ksys_write+0x10/0x10 [ 636.035533][T17149] __x64_sys_pipe+0x33/0x50 [ 636.035555][T17149] do_syscall_64+0xcd/0xf80 [ 636.035579][T17149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.035594][T17149] RIP: 0033:0x7f9ed3b8f7c9 [ 636.035607][T17149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.035622][T17149] RSP: 002b:00007f9ed4986038 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 636.035636][T17149] RAX: ffffffffffffffda RBX: 00007f9ed3de5fa0 RCX: 00007f9ed3b8f7c9 [ 636.035646][T17149] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 636.035655][T17149] RBP: 00007f9ed3c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 636.035664][T17149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.035672][T17149] R13: 00007f9ed3de6038 R14: 00007f9ed3de5fa0 R15: 00007ffd0da38cd8 [ 636.035691][T17149] [ 637.153744][T17162] FAULT_INJECTION: forcing a failure. [ 637.153744][T17162] name fail_futex, interval 1, probability 0, space 0, times 0 [ 637.252946][T17149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2406'. [ 637.319260][T17162] CPU: 0 UID: 0 PID: 17162 Comm: syz.1.2465 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 637.319295][T17162] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 637.319303][T17162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 637.319312][T17162] Call Trace: [ 637.319318][T17162] [ 637.319324][T17162] dump_stack_lvl+0x16c/0x1f0 [ 637.319351][T17162] should_fail_ex+0x512/0x640 [ 637.319371][T17162] get_futex_key+0x1d0/0x15f0 [ 637.319390][T17162] ? __pfx_get_futex_key+0x10/0x10 [ 637.319407][T17162] ? mmap_region+0x1ee/0x3f0 [ 637.319425][T17162] ? __get_unmapped_area+0x267/0x3f0 [ 637.319449][T17162] futex_wake+0xea/0x530 [ 637.319472][T17162] ? __pfx_futex_wake+0x10/0x10 [ 637.319499][T17162] ? up_write+0x282/0x4e0 [ 637.319518][T17162] do_futex+0x1e3/0x350 [ 637.319534][T17162] ? __pfx_do_futex+0x10/0x10 [ 637.319556][T17162] __x64_sys_futex+0x1e0/0x4c0 [ 637.319574][T17162] ? fput+0x70/0xf0 [ 637.319588][T17162] ? __pfx___x64_sys_futex+0x10/0x10 [ 637.319604][T17162] ? ksys_mmap_pgoff+0x85/0x5c0 [ 637.319624][T17162] ? __pfx_ksys_write+0x10/0x10 [ 637.319650][T17162] do_syscall_64+0xcd/0xf80 [ 637.319674][T17162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.319690][T17162] RIP: 0033:0x7f9c9638f7c9 [ 637.319703][T17162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.319718][T17162] RSP: 002b:00007f9c971db0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 637.319733][T17162] RAX: ffffffffffffffda RBX: 00007f9c965e5fa8 RCX: 00007f9c9638f7c9 [ 637.319743][T17162] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9c965e5fac [ 637.319752][T17162] RBP: 00007f9c965e5fa0 R08: 00007f9c971dc000 R09: 0000000000000000 [ 637.319762][T17162] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 637.319771][T17162] R13: 00007f9c965e6038 R14: 00007ffd5440ff60 R15: 00007ffd54410048 [ 637.319805][T17162] [ 638.053110][T17180] bdi 7:8: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 638.301974][T17191] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 639.287490][T17206] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 639.735673][T17213] netlink: 5948 bytes leftover after parsing attributes in process `syz.3.2477'. [ 640.272258][T17226] binder: 17224:17226 ioctl c018620c 0 returned -1 [ 640.976153][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 640.985332][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 640.993866][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 641.001666][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 641.017369][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 642.069201][ T30] audit: type=1800 audit(4294967342.711:27): pid=17258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2483" name="lu_gp_id" dev="configfs" ino=74111 res=0 errno=0 [ 642.372632][ T3574] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.596985][T17283] Console: switching to colour VGA+ 80x25 [ 643.079839][ T5833] Bluetooth: hci0: command tx timeout [ 643.334234][T17244] chnl_net:caif_netlink_parms(): no params data found [ 643.591030][T17244] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.610217][T17244] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.626922][T17244] bridge_slave_0: entered allmulticast mode [ 643.644067][T17244] bridge_slave_0: entered promiscuous mode [ 643.658753][T17244] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.676118][T17244] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.686240][T17244] bridge_slave_1: entered allmulticast mode [ 643.699469][T17244] bridge_slave_1: entered promiscuous mode [ 643.753343][T17244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.776698][T17244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.831086][T17244] team0: Port device team_slave_0 added [ 643.856718][T17244] team0: Port device team_slave_1 added [ 643.996854][ T3574] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.117271][T17244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.134727][T17244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.189195][T17244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.213085][ T3574] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.239721][T17244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.251535][T17244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.295036][T17244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.324066][ T3574] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.392408][T17244] hsr_slave_0: entered promiscuous mode [ 644.406217][T17244] hsr_slave_1: entered promiscuous mode [ 644.808082][ T3574] netdevsim netdevsim26 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.987209][ T30] audit: type=1800 audit(4294967345.646:28): pid=17316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2494" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 645.149423][ T5833] Bluetooth: hci0: command tx timeout [ 645.171635][T17324] usbip-vudc usbip-vudc.0: gadget not bound [ 645.287233][T17328] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 645.707996][T17336] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2497'. [ 645.733019][T17338] Invalid ELF header len 5 [ 645.749355][T17339] Invalid ELF header len 10 [ 646.004767][ T3574] : left promiscuous mode [ 646.024458][ T3574] bridge0: port 2() entered disabled state [ 646.262756][ T5833] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 646.262782][ T5833] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 646.279031][ T5833] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 646.279069][ T5833] Bluetooth: hci1: Unknown advertising packet type: 0x35 [ 646.287372][ T5833] Bluetooth: hci1: Unknown advertising packet type: 0x14 [ 646.294823][ T5833] Bluetooth: hci1: Unknown advertising packet type: 0x3b [ 646.301924][ T5833] Bluetooth: hci1: Unknown advertising packet type: 0x73 [ 646.309190][ T5833] Bluetooth: hci1: Malformed LE Event: 0x0d [ 646.916396][T17371] random: crng reseeded on system resumption [ 647.114936][ T3574] bridge_slave_0: left allmulticast mode [ 647.122445][ T3574] bridge_slave_0: left promiscuous mode [ 647.129861][ T3574] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.218681][ T5833] Bluetooth: hci0: command tx timeout [ 647.328792][T17378] netlink: 5948 bytes leftover after parsing attributes in process `syz.2.2502'. [ 648.234030][ T3574] tipc: Left network mode [ 649.296650][ T5840] Bluetooth: hci0: command tx timeout [ 649.760004][ T3574] hsr_slave_0: left promiscuous mode [ 649.790233][ T3574] hsr_slave_1: left promiscuous mode [ 649.843731][ T3574] veth0_macvtap: left promiscuous mode [ 649.890738][T17414] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2508'. [ 650.233145][ T3574] team0 (unregistering): Port device team_slave_1 removed [ 650.280697][ T3574] team0 (unregistering): Port device team_slave_0 removed [ 651.786036][T17447] program syz.1.2510 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 651.814586][T17447] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 651.895768][T17453] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 652.218981][T17463] random: crng reseeded on system resumption [ 652.460658][T17466] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 652.526428][T17466] FAULT_INJECTION: forcing a failure. [ 652.526428][T17466] name failslab, interval 1, probability 0, space 0, times 0 [ 652.633653][T17466] CPU: 0 UID: 0 PID: 17466 Comm: syz.4.2513 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 652.633693][T17466] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 652.633702][T17466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 652.633712][T17466] Call Trace: [ 652.633718][T17466] [ 652.633724][T17466] dump_stack_lvl+0x16c/0x1f0 [ 652.633759][T17466] should_fail_ex+0x512/0x640 [ 652.633778][T17466] ? __kmalloc_cache_noprof+0x5f/0x800 [ 652.633798][T17466] should_failslab+0xc2/0x120 [ 652.633822][T17466] __kmalloc_cache_noprof+0x80/0x800 [ 652.633843][T17466] ? rfkill_fop_open+0x1b6/0x750 [ 652.633866][T17466] ? rfkill_fop_open+0x1b6/0x750 [ 652.633884][T17466] rfkill_fop_open+0x1b6/0x750 [ 652.633906][T17466] ? __pfx_rfkill_fop_open+0x10/0x10 [ 652.633925][T17466] misc_open+0x26d/0x450 [ 652.633942][T17466] ? __pfx_misc_open+0x10/0x10 [ 652.633961][T17466] chrdev_open+0x234/0x6a0 [ 652.633984][T17466] ? __pfx_apparmor_file_open+0x10/0x10 [ 652.634006][T17466] ? __pfx_chrdev_open+0x10/0x10 [ 652.634032][T17466] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 652.634061][T17466] do_dentry_open+0x748/0x1590 [ 652.634082][T17466] ? __pfx_chrdev_open+0x10/0x10 [ 652.634110][T17466] vfs_open+0x82/0x3f0 [ 652.634128][T17466] path_openat+0x2078/0x3140 [ 652.634156][T17466] ? __pfx_path_openat+0x10/0x10 [ 652.634185][T17466] do_filp_open+0x20b/0x470 [ 652.634207][T17466] ? __pfx_do_filp_open+0x10/0x10 [ 652.634243][T17466] ? alloc_fd+0x471/0x7d0 [ 652.634270][T17466] do_sys_openat2+0x121/0x290 [ 652.634286][T17466] ? __pfx_do_sys_openat2+0x10/0x10 [ 652.634311][T17466] __x64_sys_openat+0x174/0x210 [ 652.634328][T17466] ? __pfx___x64_sys_openat+0x10/0x10 [ 652.634353][T17466] do_syscall_64+0xcd/0xf80 [ 652.634377][T17466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.634393][T17466] RIP: 0033:0x7f355918f7c9 [ 652.634414][T17466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.634430][T17466] RSP: 002b:00007f3559f9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 652.634446][T17466] RAX: ffffffffffffffda RBX: 00007f35593e5fa0 RCX: 00007f355918f7c9 [ 652.634456][T17466] RDX: 0000000000002000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 652.634467][T17466] RBP: 00007f3559213f91 R08: 0000000000000000 R09: 0000000000000000 [ 652.634477][T17466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 652.634487][T17466] R13: 00007f35593e6038 R14: 00007f35593e5fa0 R15: 00007ffd973750d8 [ 652.634508][T17466] [ 653.218925][T17475] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 653.465243][T17487] ubi0: attaching mtd0 [ 653.515190][T17487] ubi0: scanning is finished [ 653.540769][T17487] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 654.002174][T17487] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 656.035533][T17527] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 656.058422][T17527] FAULT_INJECTION: forcing a failure. [ 656.058422][T17527] name failslab, interval 1, probability 0, space 0, times 0 [ 656.082570][T17527] CPU: 0 UID: 0 PID: 17527 Comm: syz.1.2525 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 656.082607][T17527] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 656.082616][T17527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 656.082627][T17527] Call Trace: [ 656.082632][T17527] [ 656.082638][T17527] dump_stack_lvl+0x16c/0x1f0 [ 656.082666][T17527] should_fail_ex+0x512/0x640 [ 656.082684][T17527] ? __kmalloc_cache_noprof+0x5f/0x800 [ 656.082704][T17527] should_failslab+0xc2/0x120 [ 656.082727][T17527] __kmalloc_cache_noprof+0x80/0x800 [ 656.082745][T17527] ? rfkill_fop_open+0x1b6/0x750 [ 656.082767][T17527] ? rfkill_fop_open+0x1b6/0x750 [ 656.082785][T17527] rfkill_fop_open+0x1b6/0x750 [ 656.082807][T17527] ? __pfx_rfkill_fop_open+0x10/0x10 [ 656.082826][T17527] misc_open+0x26d/0x450 [ 656.082844][T17527] ? __pfx_misc_open+0x10/0x10 [ 656.082860][T17527] chrdev_open+0x234/0x6a0 [ 656.082883][T17527] ? __pfx_apparmor_file_open+0x10/0x10 [ 656.082898][T17527] ? __pfx_chrdev_open+0x10/0x10 [ 656.082922][T17527] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 656.082949][T17527] do_dentry_open+0x748/0x1590 [ 656.082971][T17527] ? __pfx_chrdev_open+0x10/0x10 [ 656.082999][T17527] vfs_open+0x82/0x3f0 [ 656.083017][T17527] path_openat+0x2078/0x3140 [ 656.083045][T17527] ? __pfx_path_openat+0x10/0x10 [ 656.083084][T17527] do_filp_open+0x20b/0x470 [ 656.083108][T17527] ? __pfx_do_filp_open+0x10/0x10 [ 656.083144][T17527] ? alloc_fd+0x471/0x7d0 [ 656.083172][T17527] do_sys_openat2+0x121/0x290 [ 656.083189][T17527] ? __pfx_do_sys_openat2+0x10/0x10 [ 656.083213][T17527] __x64_sys_openat+0x174/0x210 [ 656.083231][T17527] ? __pfx___x64_sys_openat+0x10/0x10 [ 656.083256][T17527] do_syscall_64+0xcd/0xf80 [ 656.083280][T17527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.083296][T17527] RIP: 0033:0x7f9c9638f7c9 [ 656.083309][T17527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.083324][T17527] RSP: 002b:00007f9c971db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 656.083339][T17527] RAX: ffffffffffffffda RBX: 00007f9c965e5fa0 RCX: 00007f9c9638f7c9 [ 656.083350][T17527] RDX: 0000000000002000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 656.083360][T17527] RBP: 00007f9c96413f91 R08: 0000000000000000 R09: 0000000000000000 [ 656.083375][T17527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 656.083384][T17527] R13: 00007f9c965e6038 R14: 00007f9c965e5fa0 R15: 00007ffd54410048 [ 656.083406][T17527] [ 657.079435][T17534] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 657.706139][T17549] Invalid ELF header len 5 [ 657.745691][T17546] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2526'. [ 657.782824][T17546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 657.816502][T17546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.852269][T17546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 657.881213][T17546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 662.784825][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 662.796241][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 662.804692][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 662.812470][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 662.820888][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 662.953068][T17573] chnl_net:caif_netlink_parms(): no params data found [ 663.022886][T17573] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.030735][T17573] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.038355][T17573] bridge_slave_0: entered allmulticast mode [ 663.045354][T17573] bridge_slave_0: entered promiscuous mode [ 663.054280][T17573] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.061847][T17573] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.069202][T17573] bridge_slave_1: entered allmulticast mode [ 663.076617][T17573] bridge_slave_1: entered promiscuous mode [ 663.104148][T17573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 663.118584][T17573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.148014][T17573] team0: Port device team_slave_0 added [ 663.156427][T17573] team0: Port device team_slave_1 added [ 663.179518][T17573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.186557][T17573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.212962][T17573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.228629][T17573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.235800][T17573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.262817][T17573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.302353][T17573] hsr_slave_0: entered promiscuous mode [ 663.308957][T17573] hsr_slave_1: entered promiscuous mode [ 663.315606][T17573] debugfs: 'hsr0' already exists in 'hsr' [ 663.321325][T17573] Cannot create hsr debugfs directory [ 663.722451][T17584] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [6] [ 663.731578][T17585] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 663.850735][T17586] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 664.316027][ T30] audit: type=1800 audit(4294967365.076:29): pid=17604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2541" name="dbroot" dev="configfs" ino=76055 res=0 errno=0 [ 664.887401][ T5840] Bluetooth: hci2: command tx timeout [ 665.227378][T17619] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2544'. [ 666.955870][ T5840] Bluetooth: hci2: command tx timeout [ 666.968183][T17661] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 667.089216][T17662] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 668.093761][T17684] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 669.029063][ T5840] Bluetooth: hci2: command tx timeout [ 671.094446][ T5840] Bluetooth: hci2: command tx timeout [ 690.041991][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.050248][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 700.407589][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 700.418034][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 700.426163][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 700.433928][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 700.442485][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 700.676406][T17701] chnl_net:caif_netlink_parms(): no params data found [ 700.740815][T17701] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.748627][T17701] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.756556][T17701] bridge_slave_0: entered allmulticast mode [ 700.763771][T17701] bridge_slave_0: entered promiscuous mode [ 700.771853][T17701] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.780921][T17701] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.788200][T17701] bridge_slave_1: entered allmulticast mode [ 700.795842][T17701] bridge_slave_1: entered promiscuous mode [ 700.823888][T17701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.835764][T17701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.863682][T17701] team0: Port device team_slave_0 added [ 700.871272][T17701] team0: Port device team_slave_1 added [ 700.893485][T17701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.900845][T17701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.930197][T17701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.942419][T17701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.950252][T17701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.976662][T17701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.014203][T17701] hsr_slave_0: entered promiscuous mode [ 701.020717][T17701] hsr_slave_1: entered promiscuous mode [ 701.027487][T17701] debugfs: 'hsr0' already exists in 'hsr' [ 701.035443][T17701] Cannot create hsr debugfs directory [ 702.530695][ T5840] Bluetooth: hci5: command tx timeout [ 704.599866][ T5840] Bluetooth: hci5: command tx timeout [ 706.669103][ T5840] Bluetooth: hci5: command tx timeout [ 708.738298][ T5840] Bluetooth: hci5: command tx timeout [ 722.839466][ T5833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 722.850153][ T5833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 722.858794][ T5833] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 722.866581][ T5833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 722.875806][ T5833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 723.029435][T17713] chnl_net:caif_netlink_parms(): no params data found [ 723.092603][T17713] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.099980][T17713] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.107545][T17713] bridge_slave_0: entered allmulticast mode [ 723.114863][T17713] bridge_slave_0: entered promiscuous mode [ 723.122544][T17713] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.130754][T17713] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.139260][T17713] bridge_slave_1: entered allmulticast mode [ 723.149320][T17713] bridge_slave_1: entered promiscuous mode [ 723.175895][T17713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 723.187513][T17713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.215287][T17713] team0: Port device team_slave_0 added [ 723.223578][T17713] team0: Port device team_slave_1 added [ 723.248166][T17713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.256317][T17713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.283441][T17713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.296485][T17713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.304162][T17713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.330575][T17713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.373176][T17713] hsr_slave_0: entered promiscuous mode [ 723.379469][T17713] hsr_slave_1: entered promiscuous mode [ 723.386882][T17713] debugfs: 'hsr0' already exists in 'hsr' [ 723.392946][T17713] Cannot create hsr debugfs directory [ 724.894752][ T5833] Bluetooth: hci6: command tx timeout [ 726.963976][ T5833] Bluetooth: hci6: command tx timeout [ 729.033039][ T5833] Bluetooth: hci6: command tx timeout [ 731.102279][ T5833] Bluetooth: hci6: command tx timeout [ 743.043931][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 751.164105][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 751.174879][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 760.866428][ T5833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 760.878062][ T5833] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 760.886307][ T5833] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 760.894907][ T5833] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 760.902647][ T5833] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 761.067731][T17727] chnl_net:caif_netlink_parms(): no params data found [ 761.130326][T17727] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.138193][T17727] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.145366][T17727] bridge_slave_0: entered allmulticast mode [ 761.155191][T17727] bridge_slave_0: entered promiscuous mode [ 761.163662][T17727] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.170913][T17727] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.178449][T17727] bridge_slave_1: entered allmulticast mode [ 761.186134][T17727] bridge_slave_1: entered promiscuous mode [ 761.214308][T17727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.226284][T17727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.257550][T17727] team0: Port device team_slave_0 added [ 761.271268][T17727] team0: Port device team_slave_1 added [ 761.296734][T17727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 761.303819][T17727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.330857][T17727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 761.343101][T17727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 761.370415][T17727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.424373][T17727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 761.499855][T17727] hsr_slave_0: entered promiscuous mode [ 761.524774][T17727] hsr_slave_1: entered promiscuous mode [ 761.531094][T17727] debugfs: 'hsr0' already exists in 'hsr' [ 761.543905][T17727] Cannot create hsr debugfs directory [ 762.936537][ T5833] Bluetooth: hci7: command tx timeout [ 763.420688][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 765.006785][ T5833] Bluetooth: hci7: command tx timeout [ 767.075087][ T5833] Bluetooth: hci7: command tx timeout [ 769.144122][ T5833] Bluetooth: hci7: command tx timeout [ 782.909312][ T5840] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 782.918862][ T5840] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 782.927442][ T5840] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 782.935136][ T5840] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 782.942556][ T5840] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 783.100385][T17740] chnl_net:caif_netlink_parms(): no params data found [ 783.165294][T17740] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.174303][T17740] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.181973][T17740] bridge_slave_0: entered allmulticast mode [ 783.189002][T17740] bridge_slave_0: entered promiscuous mode [ 783.197161][T17740] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.204632][T17740] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.212313][T17740] bridge_slave_1: entered allmulticast mode [ 783.219335][T17740] bridge_slave_1: entered promiscuous mode [ 783.248577][T17740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 783.261244][T17740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 783.290763][T17740] team0: Port device team_slave_0 added [ 783.299044][T17740] team0: Port device team_slave_1 added [ 783.323732][T17740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.330867][T17740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.357851][T17740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.371054][T17740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.378372][T17740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.407740][T17740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.448007][T17740] hsr_slave_0: entered promiscuous mode [ 783.454571][T17740] hsr_slave_1: entered promiscuous mode [ 783.461151][T17740] debugfs: 'hsr0' already exists in 'hsr' [ 783.467542][T17740] Cannot create hsr debugfs directory [ 784.981984][ T5840] Bluetooth: hci8: command tx timeout [ 787.051154][ T5840] Bluetooth: hci8: command tx timeout [ 788.881679][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 789.120360][ T5833] Bluetooth: hci8: command tx timeout [ 791.189630][ T5833] Bluetooth: hci8: command tx timeout [ 796.999969][ T31] INFO: task syz-executor:17244 blocked for more than 143 seconds. [ 797.007993][ T31] Tainted: G U W L XTNJ syzkaller #0 [ 797.017658][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 797.028284][ T31] task:syz-executor state:D stack:23864 pid:17244 tgid:17244 ppid:1 task_flags:0x480140 flags:0x00080002 [ 797.042819][ T31] Call Trace: [ 797.046123][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 797.049411][ T31] ? __schedule+0x10b9/0x6150 [ 797.059742][ T31] __schedule+0x1139/0x6150 [ 797.064272][ T31] ? __lock_acquire+0x436/0x2890 [ 797.080991][ T31] ? __pfx___schedule+0x10/0x10 [ 797.088937][ T31] ? find_held_lock+0x2b/0x80 [ 797.093633][ T31] ? schedule+0x2d7/0x3a0 [ 797.097960][ T31] schedule+0xe7/0x3a0 [ 797.118761][ T31] schedule_timeout+0x257/0x290 [ 797.123643][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 797.138974][ T31] ? mark_held_locks+0x49/0x80 [ 797.143769][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 797.228724][ T31] __wait_for_common+0x2fc/0x4e0 [ 797.233724][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 797.277921][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 797.283537][ T31] remove_one+0x312/0x420 [ 797.307672][ T31] ? find_next_child+0x18f/0x280 [ 797.312645][ T31] __simple_recursive_removal+0x15b/0x610 [ 797.347711][ T31] ? __pfx_remove_one+0x10/0x10 [ 797.352604][ T31] debugfs_remove+0x5d/0x80 [ 797.357190][ T31] nsim_drv_remove+0xd2/0x1d0 [ 797.391297][ T31] ? __pfx_nsim_bus_remove+0x10/0x10 [ 797.396631][ T31] device_remove+0xcb/0x170 [ 797.428546][ T31] device_release_driver_internal+0x44b/0x620 [ 797.434664][ T31] bus_remove_device+0x22f/0x450 [ 797.467172][ T31] device_del+0x396/0x9f0 [ 797.471542][ T31] ? __pfx_device_del+0x10/0x10 [ 797.476383][ T31] ? __lock_acquire+0x436/0x2890 [ 797.516660][ T31] device_unregister+0x1d/0xe0 [ 797.521462][ T31] del_device_store+0x355/0x4a0 [ 797.546421][ T31] ? __pfx_del_device_store+0x10/0x10 [ 797.551829][ T31] ? find_held_lock+0x2b/0x80 [ 797.571329][T14633] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 797.580118][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 797.584969][ T31] ? __pfx_del_device_store+0x10/0x10 [ 797.616249][ T31] bus_attr_store+0x74/0xb0 [ 797.620789][ T31] ? __pfx_bus_attr_store+0x10/0x10 [ 797.640212][T14633] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 797.650605][ T31] sysfs_kf_write+0xf2/0x150 [ 797.655213][ T31] kernfs_fop_write_iter+0x3af/0x570 [ 797.668978][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 797.674198][ T31] vfs_write+0x7d3/0x11d0 [ 797.679671][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 797.685498][ T31] ? __pfx_vfs_write+0x10/0x10 [ 797.690538][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 797.696948][ T31] ksys_write+0x12a/0x250 [ 797.701292][ T31] ? __pfx_ksys_write+0x10/0x10 [ 797.707116][T15350] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 797.716724][ T31] do_syscall_64+0xcd/0xf80 [ 797.721362][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.735540][ T31] RIP: 0033:0x7fbf1ad8e27f [ 797.739989][ T31] RSP: 002b:00007ffcdad516c0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 797.754377][T15350] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 797.764796][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fbf1ad8e27f [ 797.773355][ T31] RDX: 0000000000000001 RSI: 00007ffcdad51710 RDI: 0000000000000005 [ 797.781647][ T31] RBP: 00007fbf1ae152cb R08: 0000000000000000 R09: 00007ffcdad51517 [ 797.790035][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 797.800069][ T31] R13: 00007ffcdad51710 R14: 00007fbf1bb14620 R15: 0000000000000003 [ 797.808618][ T31] [ 797.854866][ T31] INFO: task syz.2.2502:17377 blocked for more than 144 seconds. [ 797.862693][ T31] Tainted: G U W L XTNJ syzkaller #0 [ 797.904540][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 797.913230][ T31] task:syz.2.2502 state:D stack:26680 pid:17377 tgid:17376 ppid:16875 task_flags:0x400140 flags:0x00080002 [ 797.954713][ T31] Call Trace: [ 797.958030][ T31] [ 797.960948][ T31] ? __schedule+0x10b9/0x6150 [ 797.975856][ T31] __schedule+0x1139/0x6150 [ 797.980377][ T31] ? __lock_acquire+0x436/0x2890 [ 797.994347][ T31] ? __pfx___schedule+0x10/0x10 [ 797.999223][ T31] ? find_held_lock+0x2b/0x80 [ 798.014252][ T31] ? schedule+0x2d7/0x3a0 [ 798.018611][ T31] schedule+0xe7/0x3a0 [ 798.022678][ T31] schedule_preempt_disabled+0x13/0x30 [ 798.044466][ T31] __mutex_lock+0xc69/0x1ca0 [ 798.049095][ T31] ? nsim_bus_dev_max_vfs_write+0x206/0x410 [ 798.085164][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 798.090232][ T31] ? trace_kmalloc+0x2b/0xb0 [ 798.104575][ T31] ? __kmalloc_noprof+0x35d/0x910 [ 798.109656][ T31] ? nsim_bus_dev_max_vfs_write+0x1bb/0x410 [ 798.116131][ T31] ? nsim_bus_dev_max_vfs_write+0x206/0x410 [ 798.122018][ T31] nsim_bus_dev_max_vfs_write+0x206/0x410 [ 798.128131][ T31] ? __pfx_nsim_bus_dev_max_vfs_write+0x10/0x10 [ 798.135144][ T31] ? __debugfs_file_get+0x1fe/0x840 [ 798.140354][ T31] full_proxy_write+0x131/0x1a0 [ 798.145485][ T31] ? __pfx_full_proxy_write+0x10/0x10 [ 798.150855][ T31] vfs_write+0x2a0/0x11d0 [ 798.155805][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 798.160848][ T31] ? __pfx_vfs_write+0x10/0x10 [ 798.166004][ T31] ? __fget_files+0x20e/0x3c0 [ 798.170700][ T31] ksys_write+0x12a/0x250 [ 798.175467][ T31] ? __pfx_ksys_write+0x10/0x10 [ 798.180425][ T31] do_syscall_64+0xcd/0xf80 [ 798.185183][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.191089][ T31] RIP: 0033:0x7f9ed3b8f7c9 [ 798.198989][ T31] RSP: 002b:00007f9ed4986038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 798.208350][ T31] RAX: ffffffffffffffda RBX: 00007f9ed3de5fa0 RCX: 00007f9ed3b8f7c9 [ 798.216601][ T31] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000007 [ 798.227489][ T31] RBP: 00007f9ed3c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 798.236299][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 798.244499][ T31] R13: 00007f9ed3de6038 R14: 00007f9ed3de5fa0 R15: 00007ffd0da38cd8 [ 798.252475][ T31] [ 798.284676][ T31] [ 798.284676][ T31] Showing all locks held in the system: [ 798.292434][ T31] 1 lock held by khungtaskd/31: [ 798.299190][ T31] #0: ffffffff8e3c9520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 798.312118][ T31] 3 locks held by kworker/u8:15/3574: [ 798.317848][ T31] #0: ffff88813ff69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 798.329545][ T31] #1: ffffc9000c5d7c90 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 798.340921][ T31] #2: ffffffff90145528 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 798.350608][ T31] 3 locks held by kworker/0:7/5932: [ 798.357002][ T31] #0: ffff88813ff55948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 798.368122][ T31] #1: ffff8880b8424608 (psi_seq){-.-.}-{0:0}, at: __schedule+0x19b1/0x6150 [ 798.377442][ T31] #2: ffff8880388b8240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b8/0x65f0 [ 798.387897][ T31] 4 locks held by kworker/u8:49/9373: [ 798.394215][ T31] #0: ffff88801badf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 798.405274][ T31] #1: ffffc9000b6d7c90 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 798.417638][ T31] #2: ffffffff9012ed50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x830 [ 798.427462][ T31] #3: ffffffff90145528 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1b/0x260 [ 798.437276][ T31] 2 locks held by syz-executor/15357: [ 798.443691][ T31] #0: ffffffff90145528 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 798.452953][ T31] #1: ffffffff8e3d4c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 798.463225][ T31] 2 locks held by getty/16870: [ 798.467977][ T31] #0: ffff888035aa80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 798.478062][ T31] #1: ffffc9000c8cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 798.488828][ T31] 7 locks held by syz-executor/17244: [ 798.494385][ T31] #0: ffff888034be8420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 798.503575][ T31] #1: ffff8880331d8888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 798.519219][ T31] #2: ffff888028aaa008 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 798.530958][ T31] #3: ffffffff8f6bb148 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 798.542803][ T31] #4: ffff88807687a0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620 [ 798.553753][ T31] #5: ffff88807687b250 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1d0 [ 798.564008][ T31] #6: ffff88807e396480 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0x354/0x610 [ 798.575975][ T31] 3 locks held by syz.2.2502/17377: [ 798.581393][ T31] #0: ffff888035aeaef8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 798.590546][ T31] #1: ffff88801e6ec420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 798.600474][ T31] #2: ffff88807687b250 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_bus_dev_max_vfs_write+0x206/0x410 [ 798.611840][ T31] 4 locks held by syz-executor/17573: [ 798.617928][ T31] #0: ffff888034be8420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 798.627218][ T31] #1: ffff88805a3d7888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 798.638818][ T31] #2: ffff888028aaa008 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 798.649841][ T31] #3: ffffffff8f6bb148 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 798.660489][ T31] 4 locks held by syz-executor/17701: [ 798.666210][ T31] #0: ffff888034be8420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 798.675970][ T31] #1: ffff888031f77488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 798.686083][ T31] #2: ffff888028aaa008 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 798.696374][ T31] #3: ffffffff8f6bb148 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 798.707183][ T31] 4 locks held by syz-executor/17713: [ 798.712895][ T31] #0: ffff888034be8420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 798.722655][ T31] #1: ffff88805a254488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 798.732707][ T31] #2: ffff888028aaa008 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 798.745553][ T31] #3: ffffffff8f6bb148 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 798.756755][ T31] 4 locks held by syz-executor/17727: [ 798.762420][ T31] #0: ffff888034be8420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 798.771945][ T31] #1: ffff88805a095888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 798.781911][ T31] #2: ffff888028aaa008 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 798.792300][ T31] #3: ffffffff8f6bb148 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 798.802789][ T31] 4 locks held by syz-executor/17740: [ 798.808168][ T31] #0: ffff888034be8420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 798.818388][ T31] #1: ffff88805b663c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 798.828444][ T31] #2: ffff888028aaa008 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 798.840550][ T31] #3: ffffffff8f6bb148 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 798.882526][ T9373] netdevsim netdevsim15 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.895643][ T31] [ 798.897983][ T31] ============================================= [ 798.897983][ T31] [ 798.908751][ T31] NMI backtrace for cpu 0 [ 798.908768][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 798.908798][ T31] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 798.908806][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 798.908815][ T31] Call Trace: [ 798.908820][ T31] [ 798.908827][ T31] dump_stack_lvl+0x116/0x1f0 [ 798.908854][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 798.908872][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 798.908888][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 798.908907][ T31] sys_info+0x133/0x180 [ 798.908921][ T31] watchdog+0xe66/0x1180 [ 798.908947][ T31] ? rcu_is_watching+0x12/0xc0 [ 798.908967][ T31] ? __pfx_watchdog+0x10/0x10 [ 798.908987][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 798.909010][ T31] ? __kthread_parkme+0x19e/0x250 [ 798.909038][ T31] ? __pfx_watchdog+0x10/0x10 [ 798.909059][ T31] kthread+0x3c5/0x780 [ 798.909074][ T31] ? __pfx_kthread+0x10/0x10 [ 798.909089][ T31] ? rcu_is_watching+0x12/0xc0 [ 798.909109][ T31] ? __pfx_kthread+0x10/0x10 [ 798.909123][ T31] ret_from_fork+0x983/0xb10 [ 798.909139][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 798.909155][ T31] ? __switch_to+0x7af/0x10d0 [ 798.909174][ T31] ? __pfx_kthread+0x10/0x10 [ 798.909189][ T31] ret_from_fork_asm+0x1a/0x30 [ 798.909223][ T31] [ 799.088015][ T9373] dummy0: left allmulticast mode [ 799.094686][ T9373] dummy0: left promiscuous mode [ 799.099959][ T9373] bridge0: port 2(dummy0) entered disabled state [ 799.107623][ T9373] bridge_slave_0: left allmulticast mode [ 799.113551][ T9373] bridge_slave_0: left promiscuous mode [ 799.119385][ T9373] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.290378][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 799.297274][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 799.308040][ T31] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 799.318083][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 799.328350][ T31] Call Trace: [ 799.331626][ T31] [ 799.334545][ T31] dump_stack_lvl+0x3d/0x1f0 [ 799.339180][ T31] vpanic+0x640/0x6f0 [ 799.343154][ T31] panic+0xca/0xd0 [ 799.346880][ T31] ? __pfx_panic+0x10/0x10 [ 799.351337][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 799.357409][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 799.363560][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 799.369703][ T31] ? watchdog+0xe83/0x1180 [ 799.374111][ T31] ? watchdog+0xe76/0x1180 [ 799.378526][ T31] watchdog+0xe94/0x1180 [ 799.382764][ T31] ? rcu_is_watching+0x12/0xc0 [ 799.387522][ T31] ? __pfx_watchdog+0x10/0x10 [ 799.392186][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 799.397376][ T31] ? __kthread_parkme+0x19e/0x250 [ 799.402390][ T31] ? __pfx_watchdog+0x10/0x10 [ 799.407061][ T31] kthread+0x3c5/0x780 [ 799.411129][ T31] ? __pfx_kthread+0x10/0x10 [ 799.415721][ T31] ? rcu_is_watching+0x12/0xc0 [ 799.420493][ T31] ? __pfx_kthread+0x10/0x10 [ 799.425082][ T31] ret_from_fork+0x983/0xb10 [ 799.429666][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 799.434763][ T31] ? __switch_to+0x7af/0x10d0 [ 799.439518][ T31] ? __pfx_kthread+0x10/0x10 [ 799.444208][ T31] ret_from_fork_asm+0x1a/0x30 [ 799.449006][ T31] [ 799.452079][ T31] Kernel Offset: disabled [ 799.456484][ T31] Rebooting in 86400 seconds..