last executing test programs: 8m22.888720951s ago: executing program 1 (id=459): mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x149042, 0x0) mount$auto(&(0x7f0000000100)='veth0_virt_wifi\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfs4\x00', 0x9, 0x0) socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x63c1, 0x7ff) newfstatat$auto(0xffffffffffffff9c, &(0x7f0000000040)='X))\x00', &(0x7f0000000200)={0x9, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x40, 0xff, 0x7, 0x8000000000000000, 0x7, 0x9, 0x3b, 0x0, 0x4}, 0x1000) mmap$auto(0x0, 0x400008, 0x200000000000df, 0x9b72, r0, 0x8) close_range$auto(0x0, 0x5, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop7\x00', 0x14f340, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) io_submit$auto(0x9, 0xfffffffffffffffa, 0x0) ioctl$auto_TCSBRKP2(r1, 0x5425, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2d, 0x3, @multicast1}, 0x4) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec4\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x4, 0x2, 0x0, 0x9b7, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", "ff7f62c9", ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) r3 = openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci6/msft_opcode\x00', 0x808c0, 0x0) close_range$auto(0xffffffffffffffff, r3, 0x7ffffffe) mmap$auto(0x0, 0x400007, 0xdb, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300004000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 8m22.22086181s ago: executing program 1 (id=460): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x81, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) sendmsg$auto_ILA_CMD_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)={0x2, 0x0, 0x5f, 0x4, &(0x7f00000001c0), 0x9, 0xeb8e, 0x0, @number_of_packets=0xb, 0x7, 0x800476, 0x0, [{0x6c64, 0x7}]}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x261c2, 0x184) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r1 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) listen$auto(0x3, 0x81) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xc}, 0x800009}, 0x5, 0x20000000) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) write$auto(0x4, 0x0, 0x100082) 8m21.040551507s ago: executing program 1 (id=465): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) read$auto(r0, 0x0, 0x1ff) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x4) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@raw=0x200, 0x1, 0x7f, 0x81, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d", @raw=0x2}, 0x503, 0x5, 0x4, @raw=0x7, @enumerated={0xc, 0x0, "cb0c80699beb33ab05dc27d4bf2a711a4378ba926b660e893ca63be6c004786ceac50991aa4975421eebb8e24b11006a359336cf5c603240dff7022f6bd2af13", 0x6, 0x10001}, "7a9fc199a16a2311eacf2fc7ae1d8778dc618090334fdd73340238d21000debe0eda71bdd709254592b67f9cb5adb17884a16f7ce8cbce0bb32791702b8d7c2d"}) r2 = socket(0x11, 0x3, 0x9) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x42}, 0x4) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x11}, 0x5, &(0x7f0000000180), 0x5, 0xe}, 0x5}, 0x2, 0x100) r3 = ioctl$auto_TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) ioctl$auto_EXT4_IOC_MOVE_EXT(r3, 0xc028660f, 0x0) socket(0x2, 0x1, 0x106) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 8m20.846330342s ago: executing program 1 (id=467): openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) readv$auto(r0, 0x0, 0x4) socket(0x3, 0x2, 0x2fc) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x48003, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) socket(0x2, 0x2, 0x88) mmap$auto(0x0, 0x400008, 0xdb, 0x9b72, 0x2, 0x5) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES16=r0, @ANYBLOB="03000000080002004cf73320321d3b18ce1dc52809897380e7fbf32ba56ddb7ed7d842df91b693b5a89edf203841a416ef82feced9cc0f5c803b079cb408467a6b5bd32fb4b28223dfcb9ad0715e728bb4d33194525970d67dbce2c9e58c0fbfeabb54c949e1e706ae21ee8782eba19fcfa0788fe0eb07d95b3519bbc878348924b362b941e21b3c3029171801aead113fa09500"/157, @ANYRES32=0x0, @ANYBLOB="060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a000500aaaaaaaaaabb00000a00010000000000000000000a000100bbbbbbbbbbbb0000060006000f00000008000400010000880a0011"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x6004000) mmap$auto(0x0, 0x80000001, 0x800000000000df, 0x9b72, 0x2, 0x8000) r2 = eventfd$auto(0x6) io_uring_setup$auto(0xc, 0x0) read$auto(0x3, 0x0, 0x80) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) close_range$auto(0x2, 0x8, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/008/001\x00', 0x204080, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/default_smp_affinity\x00', 0x40000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) socket(0xf, 0x1, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12", @ANYRES32=r2, @ANYBLOB="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", @ANYBLOB="fcd719cdf0af98d84da6a8fcab80cbdc552d0481e1ba79ea3b218105fc04e8e32d8c257698a00b15acf8bf73"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x5, 0x8c2, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @remote}, 0x54) semctl$auto_GETVAL(0x0, 0x1, 0xc, 0x10000) write$auto(0x3, 0x0, 0xfdf3) 8m20.533795982s ago: executing program 1 (id=469): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/net_prio.ifpriomap\x00', 0x10b142, 0x0) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r1, 0xc0104d08, r1) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/1/msr\x00', 0x101401, 0x0) r2 = openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) sendfile$auto(r0, r2, 0x0, 0x2) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) 8m20.334395204s ago: executing program 1 (id=471): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) r1 = epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) socket(0x2, 0x1, 0x106) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptye4\x00', 0x1838c2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x201, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdc, 0xeb5, 0x401, 0x41) mkdir$auto(0x0, 0x2) renameat2$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="110b27bd7000ffdbdf250900000800", @ANYRES32=0x0], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x1000) ioctl$auto_USB_RAW_IOCTL_EP_SET_HALT(r1, 0x4004550d, &(0x7f0000000180)=0x798) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0xf}, 0x3, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000440)={[0x10000000001ff, 0x4, 0xd, 0x1, 0x3, 0x10, 0x15f4da0a, 0x3, 0x5, 0x62, 0x80000023, 0x7, 0x6d3e, 0xd, 0xd, 0x40000000001]}, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setuid$auto(0xe) ioctl$auto(0x3, 0x400454ca, 0x38) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0) close_range$auto(0x0, 0x5, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) close_range$auto(0x2, 0x8, 0x2007fff) 8m5.088734758s ago: executing program 32 (id=471): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) r1 = epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) socket(0x2, 0x1, 0x106) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptye4\x00', 0x1838c2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x201, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdc, 0xeb5, 0x401, 0x41) mkdir$auto(0x0, 0x2) renameat2$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="110b27bd7000ffdbdf250900000800", @ANYRES32=0x0], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x1000) ioctl$auto_USB_RAW_IOCTL_EP_SET_HALT(r1, 0x4004550d, &(0x7f0000000180)=0x798) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0xf}, 0x3, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000440)={[0x10000000001ff, 0x4, 0xd, 0x1, 0x3, 0x10, 0x15f4da0a, 0x3, 0x5, 0x62, 0x80000023, 0x7, 0x6d3e, 0xd, 0xd, 0x40000000001]}, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setuid$auto(0xe) ioctl$auto(0x3, 0x400454ca, 0x38) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0) close_range$auto(0x0, 0x5, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) close_range$auto(0x2, 0x8, 0x2007fff) 2m8.445314601s ago: executing program 3 (id=1684): openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) readv$auto(r0, 0x0, 0x2) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) socket(0x11, 0x80003, 0x300) pidfd_open$auto(0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto(0x1a, 0x944, &(0x7f0000000440)={{0x400e025, 0x0, 0x0, 0xef5, 0x4, 0x5, 0x46a}, 0x0, &(0x7f0000000280)=0x7f, 0x5, 0x4, 0x541c, 0x6, 0x1, 0xfff7, 0x8, 0xb, @inferred, @raw=0xa6}) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9}, 0x3) r2 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r2, &(0x7f0000000400)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000440)="661b0cbd4aeb3c", 0x49}, 0x1, &(0x7f0000000200), 0x5, 0x3}, 0x5}, 0x2, 0x100) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0x6, 0x20, 0x4, 0x1, 0x95f4da0a, 0x6, 0x3, 0x62, 0x4, 0x0, 0x9, 0x100, 0x2000000000000008, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x3, 0x6, 0x3, 0x2, 0x3, 0x8003, 0x9, 0x2, 0x6d3c, 0x9, 0x2, 0x44a03bb0]}, 0x0) clock_gettime$auto(0x80000020, 0x0) unshare$auto(0x40000080) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20008, 0xfffffffffffffffe, 0x12, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/bpq4/statistics/rx_packets\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) mmap$auto(0x0, 0xe97f, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) pidfd_open$auto(0x1, 0x0) 2m3.155549897s ago: executing program 3 (id=1696): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0x0, 0x1, 0xfd5, 0x12, r0, 0x0) mmap$auto(0x9, 0x1ff, 0x4, 0x14, 0x3, 0x0) socket(0xa, 0x3, 0x73) mmap$auto(0xfffffffffffffff9, 0x2000a, 0x100000000009f, 0xeb2, 0x401, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x668401, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D1\x00', 0x242000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/reset\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x01\x00\x01\x00\x00\x00\x00\x00\xc7k', 0x81) r3 = io_uring_setup$auto(0x5, 0x0) close_range$auto(0x2, r3, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000140)=""/47, 0x2f) write$auto(r1, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x2}, 0xed7138c}, 0x2, 0x9) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sda1\x00', 0x8800, 0x0) setfsuid$auto(0xee00) cachestat$auto(r4, &(0x7f0000000640)={0x8, 0x4000000000008}, 0x0, 0x0) r5 = socket(0xa, 0x5, 0x84) sendto$auto(r5, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000700"}, 0x1c) getsockopt$auto(0xffffffffffffffff, 0x84, 0x85, 0x0, &(0x7f00000000c0)=0x1000c) 2m0.677527959s ago: executing program 3 (id=1705): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x5c, r1, 0x1, 0x70bd25, 0x25dfdbf7, {0x1, 0x0, 0x3f00}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) mincore$auto(0x1000, 0x8001, 0x0) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) 1m58.801479732s ago: executing program 3 (id=1714): r0 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/tracing/trace_options\x00', 0x40042, 0x0) setsockopt$auto_SO_OOBINLINE(r0, 0x0, 0xa, &(0x7f0000000140)='/sys/kernel/debug/tracing/trace_options\x00', 0xfffffffa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000300), r1) sendmsg$auto_ETHTOOL_MSG_PHC_VCLOCKS_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PHC_VCLOCKS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x40810) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), r1) r4 = openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim2/ports/3/ipsec\x00', 0x541000, 0x0) close_range$auto(r4, r0, 0x3ff) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r6, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x28, r5, 0x101, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x64004401}, 0x800) sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r5, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x280000}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0xa7a}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) sendmsg$auto_NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000600)={0x584, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@typed={0x4, 0x96}]}, @NL80211_ATTR_MLD_ADDR={0xd3, 0x13a, "6bd50b3d6429c2a20cf8bf460500601ce70c896c51bf8b59edc9a8636938ea52f1780af7303d8bb18dc6e6ff908873dd035ca56e3a7f4cd825fd3d2f0dafe208129a73eb6fca4e6511477b54efa946be5335da32646311eabf4292c16166186033a6be12f7094b53226b72c9b2dd3bafe53a373179e6de5f265c2689efaba55404615458a8273de83ac9bc4ecf7c27bc874b1177814e9ed2e8cb16ea8ea0d53e2a8ef1221e882a6a253b48b8e2482d756d31848cd9e880ca5223783ff09f56059609993d56db6e3dc2fda22525c829"}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x457, 0x84, 0x0, 0x1, [@nested={0x1e5, 0xab, 0x0, 0x1, [@nested={0x4, 0x13b}, @generic="cc1085dfa0af1142a70f3452b355822b39c112863761c50a3db8e87517c8d014d4f9835d916a4cf93c37608636080a3119ece02bb56cf8c68f686cc5eb789c073935c8390dd838add2fc15304ccb935d3bc4509a0fa07adcc9e0cc2b94d320e2efb5c363953bd608eb518c9352acbdb332a2cb20d6bb6b8516df3f5ca049c3a5894e368358429a3ddc00524a86f4ddeec7b52fa09fe2fa64105aa61958f85a67233356168593b5fbf37f6237d4bc961ef533c2ec7f2561d3238dbb", @generic="10cb433670381f3263492feaeff506678e13e62fcb4a34859e3237259eb25a5f1d82501f347502a2c2714d8adeae4a7667288792998218e087b9f8e445506df0b6eb", @nested={0x4, 0xf9}, @generic="dce35e645343cbe70e22b815d80641f34353372e4e4b908bd2d3dc7d9f4dc24d430a53da6616ff158cc7dafade94caa88972c14a3c300aeb0c3231bc3b7eb51d489e0f636395398bfed08ecfb64011c90cf1d8137e1a5e37688784fc2b5685d31f4d4793cf6b47136d15142ea04b6c04b83303e708e345d7d6d56a984969f2270fc1388975d14d926e198b03d74cdadd7e4f280ca3fb87699f8fa67e3f55368974d2155e292007a06abdcec8491c37ea0d9f7a8040b5ff9337879ea60aacd5d22caa4ed16bc5f176403935431871da57c5c46b7a306ebdd0ab1d03fe"]}, @generic="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", @generic="f4650b5d2bd3cd2a51375bf733", @generic="c8124a1d305ee9997cac9c837e3229e9baf1387b6b37158cf791ec5a49044ad6ea489969379ba9f6f13a3f5387c14a0c8a6f455970b7ff7d5fa9fde2867dcfa01858abdf88c93258c05c8c90a8c6777a0c8f4c2042935211dffc3113bc7db714bf41449b1e151bce4730520728e216668b31d1f3de5be5035348fb47662cb09ec24dc55c06cff76fccce9ce88849af64207d10eefc31f14b24c879de015307f9b2e49ce95eebb60771ffd6d5c603b9ca6b3b5edb9b397cf01d520018e035b5077be268520b5641d8cd68e692d734577386cb0516e01396070624", @nested={0x88, 0x82, 0x0, 0x1, [@nested={0x4, 0x1a}, @typed={0x8, 0x135, 0x0, 0x0, @fd=r0}, @typed={0x76, 0x4a, 0x0, 0x0, @binary="5dd1d077b12dbc927bef263c6a24d1c8a76845f6b8bb6940c8633b31ed7bfe6e9c2a9d9c982f1b31f424bbb45e5baedbe22b3453b12ddf860f7805a0b41640621d815d82b4682defcb65a1d20fd5a2e3a7208744a0c35ebe7b336299b01241cf9894f8356b1a5cf7c78ef61596152b166107"}]}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x81}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xff}, @NL80211_ATTR_SSID={0x21, 0x34, "e3608efad801576efb43b2b6a1ab23c11177f1b28509d3812fdf53e524"}]}, 0x584}, 0x1, 0x0, 0x0, 0x4010}, 0xd0) write$auto(r0, &(0x7f00000005c0)='norecovery', 0x7) 1m58.210929553s ago: executing program 3 (id=1717): close_range$auto(0x2, 0x8, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_MPATH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000d40)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000895}, 0x20008890) (async) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x841, 0x0) (async) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) (async) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) (async) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x1, 0xbc3, 0x800, 0x3, 0x8, 0xc, 0x400000000003, 0x3, 0x0, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x4]}, 0x0) openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) (async) pwrite64$auto(r1, 0x0, 0x8, 0x400000000000000) socket(0x2, 0x5, 0x0) (async) r3 = setfsuid$auto(0xee00) setreuid$auto(r3, 0x0) (async) r4 = setfsuid$auto(0xee00) r5 = setfsuid$auto(0xee01) setresuid$auto(r4, r5, r4) (async) setreuid$auto(r3, r4) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0x15, 0x5, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0xa00}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) (async) socket(0x10, 0x2, 0x0) 1m57.552615245s ago: executing program 3 (id=1719): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) pread64$auto(r0, 0x0, 0x10000000d, 0x5) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0xfdf3) close_range$auto(0xffffffffffffffff, r0, 0x9) r1 = socket(0xa, 0x3, 0x3c) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(r2, 0x0, 0x8880) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0xb213, 0x2c, 0x800}) sendmmsg$auto(r3, &(0x7f0000000100)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000080)={0x0, 0x5e0}, 0x1, 0x0, 0x8, 0x3}, 0x6}, 0x2, 0x100) setreuid$auto(0xffffffffffffffff, 0x8) prctl$auto_PR_SET_VMA_ANON_NAME(0x401, 0x0, 0x0, 0x30000001, 0x3) keyctl$auto(0x5, 0xffffffffffffffff, 0x0, 0x0, 0x80000000) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) setresuid$auto(0x0, 0x0, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, 0x0, 0xc59) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.stat\x00', 0x280, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, 0x0, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) 1m42.541924902s ago: executing program 33 (id=1719): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) pread64$auto(r0, 0x0, 0x10000000d, 0x5) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0xfdf3) close_range$auto(0xffffffffffffffff, r0, 0x9) r1 = socket(0xa, 0x3, 0x3c) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(r2, 0x0, 0x8880) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0xb213, 0x2c, 0x800}) sendmmsg$auto(r3, &(0x7f0000000100)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000080)={0x0, 0x5e0}, 0x1, 0x0, 0x8, 0x3}, 0x6}, 0x2, 0x100) setreuid$auto(0xffffffffffffffff, 0x8) prctl$auto_PR_SET_VMA_ANON_NAME(0x401, 0x0, 0x0, 0x30000001, 0x3) keyctl$auto(0x5, 0xffffffffffffffff, 0x0, 0x0, 0x80000000) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) setresuid$auto(0x0, 0x0, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, 0x0, 0xc59) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.stat\x00', 0x280, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, 0x0, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) 6.350746418s ago: executing program 2 (id=2091): r0 = socket(0xa, 0x801, 0x84) getsockopt$auto_SO_TIMESTAMPING_NEW(r0, 0x0, 0x41, 0x0, &(0x7f00000000c0)=0xffff) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_tipcv2(0x0, r1) getpid() sendmsg$auto_TIPC_NL_BEARER_ADD(r1, &(0x7f0000000040)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={0x0, 0x224c}, 0x1, 0x0, 0x0, 0x4048804}, 0x4000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) ioctl$auto_EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000000c0)=[0x800, 0x7]) r2 = prctl$auto(0x3d, 0x1, 0x0, 0x1, 0x3) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) recvmmsg$auto(0x3, 0x0, 0xfffc, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) r3 = gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@buf=0x0, 0x8ab0, 0x6c0000c000, 0xc000}, 0x4) ioperm$auto(0x3, 0x5, 0x149) kill$auto(r3, 0x11) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/disksize\x00', 0x2202, 0x0) write$auto(r4, &(0x7f00000001c0)='7K\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x3dec) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) ioctl$auto(r0, 0xfffffeff, r2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r5) r7 = ioctl$auto_SIOCGIFHWADDR2(r2, 0x8927, &(0x7f0000000280)="8e8f60f25134cbbcbb40c9ed327678be6667c512010d48fa0fb842aaca36b605e2930ee5d439d2c5a53d340c6465f2dfdeae26e515abbfeb11c20bca0cfa2b4da73ca7d8568ea6bc717ddafb5c54ca03753d91ebe797d858a6cd3af44bda2fce23426abc328e9646b02f8d64732de253fe4e2fde96b4d279080559f1080753a02883a0cd852ff27bebdeaadecd539f76f5827308894ad24735c105c5d0dafd57acfe29e1960fc071bec72dc61fd8628b20aa7547677fd335d9a1baa6392101927fb86796ea99b694158b709fdb3665395a9391b436d301a30766df334347ed6f16c054") sendmsg$auto_CTRL_CMD_GETPOLICY(r7, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, r6, 0x301, 0x4070bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0xc, 0x2, 'nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x30000881}, 0x8080) 5.981710027s ago: executing program 0 (id=2093): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000c80)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba4291bae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac10043676f3b2c7f1339b2d7468133fb8447d17846b6b78079ecc31d7d0f74caa4a3db1ac4d312bfdb34bd331f1f771a2396108561a52153d63a7b2a3a077a7e4c1a22bcb23e1f3e511fee310baa67904d2aad4d6671e8b77c7720e37e84e0efecb60a35f188cbe8b8b2fb3967b78aa482aabb103f23083baa9b2ae653731d5993db4", 0x144) madvise$auto(0x0, 0xffffffffffff0001, 0x15) unshare$auto(0x40000080) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x1002, 0x9, 0x4, 0x200000eb0, 0x401, 0x701cf82a) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/enabled\x00', 0x22b42, 0x0) sendfile$auto(r1, r1, 0x0, 0x6) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x68a41, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x10000010, 0x0, 0x0, &(0x7f00000001c0)={[0x1ff, 0x0, 0x7, 0xffd, 0x948b, 0xe, 0x15f4da0a, 0x3, 0x400, 0x62, 0x80000000, 0x4, 0x6d41, 0x8001, 0xa, 0xfffffffffffffdf7]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) getpid() rt_sigprocmask$auto(0x16, &(0x7f0000000080)={0x7fff}, 0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9c2e6065a00900948409", @ANYBLOB="010027bd7000fbdbdf2504000000080017000800000004001e"], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) setpriority$auto(0x2, 0x0, 0x80000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) connect$auto(0xffffffffffffffff, &(0x7f00000000c0)=@ethernet={0x306, @broadcast}, 0x55) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRES16=r3, @ANYRES8=r3, @ANYBLOB="816b95927081aa45b4ad5c528b14f805f6", @ANYRES8=r3, @ANYBLOB="8867d9304871d53f2ceb63143ad6e6f09229bfe142a797992f330cd0002a471194eaaa9d140a6d9387", @ANYRES8=r3, @ANYRES16=r3], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c880) 5.816768942s ago: executing program 2 (id=2094): futex$auto(&(0x7f0000000100)=0x8, 0x4, 0x7a, &(0x7f0000000140)={0xd, 0x80000000}, &(0x7f0000000180)=0x5, 0x7226b4e8) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r1, 0x0, 0x20) (async) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x5) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x6, 0x2, 0x1) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) sendfile$auto(r1, r1, &(0x7f0000000080)=0x5, 0xd320) (async) unshare$auto(0x40000080) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$auto(&(0x7f0000000040)=r0, 0xa) 4.84488152s ago: executing program 5 (id=2096): getrandom$auto(&(0x7f0000000000)=':$!@/\\-:{::\t:\x00', 0x7, 0x0) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon13\x00', 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_REG(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xdc, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_MLO_SUPPORT={0x4}, @NL80211_ATTR_FILS_NONCES={0xb4, 0xf3, "3facda71327dee192901221fb80b7fc855afd639aceea729810028344009fd8e29af0e80a8385677b2fc20edd8aa173dea745061a9fcd13983259db8b84f51907ea6937f6515129a1dd0d6b4ce19b83b7e0cdc759d5864a32b7f0687c41ec7b00450311f9279fc20b1ac3cf276d5cf34c73ad679d953028068916545ac9138cb7dabcb5fba492683fe8974f8d8e67c0ce02de2f5f8888c420bd355edcee39b4878a62ba0663d74233eac764237a7d79b"}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x3ff}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x5}]}, 0xdc}, 0x1, 0x0, 0x0, 0x2400c085}, 0x4045) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/hso/parameters/debug\x00', 0x490400, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptyeb\x00', 0x2800, 0x0) ioctl$auto_TCFLSH2(r4, 0x540b, &(0x7f0000000300)="ae497f2bea06990e74e2eeb3a5cf868135ad1d8bd479673be47b1a93485e0283d56afdd2588e6fab876295bebcbe31852da4c8439c3d8a1f8a14890a2d7bd789cce9dc495c1c7eeb16eaa3f487d6456005f5d568040697c917e070443e68493a3b99dacd8520e98b88e35213044666b9d5aa19d11c6d46afa0757f9775fce8c0f2ad30b726fbfabc0ea08b0debf7e4990bbf81b5df2e5824a5d448b397c8c90321db0e1df3dcb9aaf82baf05d0cfd2abbcc07ea62de17734fb7549a4cd1053179d9fbfc952411994e1c731937d0753aebd4a2c89da21c09fb004a37cf69aaf41b4c4876a5860dea3765e1f5de09d2a164189") fcntl$auto_F_GETLK(r3, 0x5, 0x7) getrandom$auto(&(0x7f0000000400)=':$!@/\\-:{::\t:\x00', 0x1, 0x7) arch_prctl$auto_ARCH_SET_FS(0x1001, 0x19) close_range$auto(r4, r3, 0x1000) r5 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000440), 0x12500, 0x0) ioctl$auto_UBI_IOCATT(r5, 0x40186f40, &(0x7f0000000480)={0x0, 0x4c68d590, 0x1c6a, 0x9, 0x3, 0x1}) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ram11\x00', 0x1, 0x0) setsockopt$auto_SO_DEBUG(r1, 0xe, 0x1, &(0x7f0000000500)='/dev/ram11\x00', 0xfffffffb) mbind$auto(0x100000001, 0x7, 0xdcd, &(0x7f0000000540)=0x9, 0x7, 0xfffffff8) setsockopt$auto(r6, 0x1, 0x400, &(0x7f0000000580)='/dev/ptyeb\x00', 0xffffffed) r7 = socketcall$auto_SYS_GETSOCKOPT(0xf, &(0x7f00000005c0)=0x7) io_uring_enter$auto(r7, 0x3ff, 0xfe, 0xffffffff, &(0x7f0000000600)="447428cb90131b5e4440651ea2f3f976542973927118c1ef2c2664cb0f4cc928c92e2aa23c963d0a0b53a546e6916e928b25a826d8e5bd44910873b4c8e5446fb0398776bae702bfad5ac224573eebd92fd02f46bbb4261bfebf285f3c2ecbb0c4ceea771bd0e647a7e3963e0ffc95b1c8637f39246177fc50d9b05d36a0d1595f7085df0358690cf2067ae7cb6ab5ef4eca4e746ef9a362353aa776da41a3ca49a80f3912e47565d9821d1d21fe1063e6bc71d662c3bc79005ba74aa01d5b4a995cbcfa720588ba2f37ef9c29c5d52d71f42c18b3eef2cbceb4905bc8", 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'netdevsim0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x3c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r8}, @NETDEV_A_QUEUE_ID={0x8}, @NETDEV_A_QUEUE_ID={0x8}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x7}, @NETDEV_A_QUEUE_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x48000) r9 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000880), r7) sendmsg$auto_OVS_METER_CMD_SET(r7, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r9, 0x200, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x4008045) seccomp$auto(0x81, 0x4, &(0x7f0000000980)="09dc8f477cd71c6bf614a66cfbead79909992ae68d4f29277d9563ae1598a67ebb01e4d70989070c9d16daeaa78cf1a742a0491fa4f77b1aeb7c9e996d1eda0adecac9bd6d88c80386f4f1711578320e1228429a76cfb0fad0b9af1d030704ec4216f97b18bcfcf8f20756f96b78bb7440d69f44818f2c2a89f0ebbd940d6300d843bc770bd6d71254e703c405a4bc51b9dc48c848f34fcd0f48d9d4") bpf$auto_BPF_MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)=@batch={0x4, 0x7, 0x1, 0x4f, 0x1, r0, 0xf, 0x7fffffffffffffff}, 0x4) r11 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000b40), r10) sendmsg$auto_NFSD_CMD_THREADS_SET(r7, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x38, r11, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x7}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xf524}, @NFSD_A_SERVER_LEASETIME={0x8}, @NFSD_A_SERVER_SCOPE={0xc, 0x4, 'nl80211\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4004008) r12 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000c80), r7) sendmsg$auto_NFC_CMD_DEP_LINK_UP(r10, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x9c, r12, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x4a4ab96b}, @NFC_ATTR_VENDOR_DATA={0x68, 0x1f, "a294baf62478b4b9d5ed88a1d3c36a1cdd23a9e055e9ab91972b330a42ff508e988677c6a6e0332870928125b025849ab135ba0351c7b835c1e90f612bc23669db01cf16e9221f0b6dcb20980de538012829a360b16786cffbbbd4148278caa747086db8"}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x10}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x100}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4048841}, 0x2004c901) 4.511500658s ago: executing program 5 (id=2097): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0xff) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, 0x0, 0x0) open(0x0, 0x1e7d43, 0xa6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x8000, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) r3 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile$auto(r2, r3, &(0x7f00000000c0)=0x100000000, 0x4e) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x801, 0x100106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) unshare$auto(0x40000080) r5 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x204, 0x1a00) read$auto(r5, 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x1f40) writev$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) close_range$auto(0x2, 0x8, 0x0) 4.249939293s ago: executing program 2 (id=2100): socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0x1, 0x2, 0x0) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x3) r0 = socketpair$auto(0x1e, 0x5, 0xfffffffe, 0x0) ioctl$auto_NS_GET_TGID_IN_PIDNS(r0, 0x8004b709, 0x0) ioctl$auto_UBI_IOCDET(r0, 0x40046f41, &(0x7f0000000300)=0xf3) socket(0x10, 0x2, 0xff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4000810) modify_ldt$auto(0x3, 0x0, 0x80) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x40100, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x113, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000040)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 3.734775876s ago: executing program 5 (id=2101): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) move_pages$auto(0xffffffffffffffff, 0x80000020004, 0x0, 0x0, 0x0, 0x8000000000000000) socketpair$auto(0x2, 0x4, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000) lsm_get_self_attr$auto(0x2, &(0x7f0000000000)={0x1, 0x4, 0x4, 0xf, "b4f273094038173f03ea1cc19e8667"}, &(0x7f0000000080)=0x2c1c9c84, 0x1ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x8, 0x2, 0x40000000de, 0x100000eb1, 0x401, 0x7fff) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) mmap$auto(0x3, 0x7, 0xe29d, 0x11, r0, 0x0) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0x6, 0xfffffffffffffffe, 0x5, 0xfffffffffffff9fe) statmount$auto(0x0, &(0x7f0000000180)={0xb896, 0x1, 0x9, 0x400000, 0x22, 0x940, 0x1ffde, 0x0, 0x4, 0x7, 0xa, 0x6, 0xfffffffffffffffe, 0x8000000000000001, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0xfffff7fe, 0x5, 0x2, 0x1000, 0x7, 0x9, 0x0, 0x1, 0x4, 0x0, 0xfffffffe, [0x0, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffeffa, 0x400000000, 0x0, 0x4, 0x1, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x7, 0xffffffffff, 0x1, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x5757, 0x80000000000000, 0x2, 0x1, 0x8000000000000, 0x53d, 0x0, 0x0, 0x2]}, 0x7, 0x281) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x900, &(0x7f0000000100)={0x0, 0x4}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x407, 0x4008) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000029, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x2201, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04#\x01\n2\x7f\x88\x83\xa9\xd7\xbea\xcd\x00\x00\x00\xef\xabJY\xee,\xf6\x80\xecP\x9f\x00\x00\x00\x00\x00\x00\x00\x80\xe0Z\x1bsZ\xac\xff\x92+\xc9\x9fs\xbf\xd8\f\xf5\xa7jUA\x11\xf9\xb4U\xc5\x92\xf1', 0x82) socketpair$auto(0x6c, 0x7f, 0xfffffeff, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x216641, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000840)={0x8, 0x1, 0xc, 0x100000a, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x5b, 0x4005, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x3, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40085, 0x1, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x4, 0x0, 0x0, 0xb8a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6]}, 0x1fe, 0x200c) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r4, @ANYRES16=r3], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.352004558s ago: executing program 0 (id=2102): r0 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000080), 0x20100, 0x0) pread64$auto(r0, 0x0, 0x7, 0x5) clone$auto(0xffffffffffffffff, 0x200, 0x0, 0x0, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) fchdir$auto(r1) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_SET(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x40044) 3.112632935s ago: executing program 0 (id=2103): statmount$auto(0x0, &(0x7f0000000380)={0xc, 0x1, 0x9, 0xa, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x6, 0x6, 0x5, 0x9, 0x20003, 0x5, 0x4, 0x80b4, 0x8000, 0x3, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x1, 0x40084, 0x0, 0x0, 0x0, 0x7, 0x0, [0x0, 0xfffffffffffffffc, 0x80000000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000000100, 0x4, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xb8a3, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffe], "9b937f1c42e16ae9a88aa68bf5e27f6a0d116461958dc9a2cd81299d5a2dff071b68f437c9eef3d7106acd1abc78801f2ee82d06869d0c64fbf969e9857dce22d5f22ee4a144132713f24de3c85b42a046d48e3d574352113974a1"}, 0x1fe, 0x200c) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f0000000000)=@link_update={0xffffffffffffffff, @new_map_fd, 0x7}, 0x3) madvise$auto(0x0, 0x8000000000000000, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) open_tree_attr$auto(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x9) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) socket(0x21, 0x2, 0x4) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x20282, 0x0) ioctl$auto_UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x9, 0x80}, "6a034a07c7b8edb8fc3b39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x6}) ioctl$auto_UI_DEV_CREATE(r3, 0x5501, 0x0) ioctl$auto_UI_SET_SNDBIT(r3, 0x4004556a, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000005d00)={'wlan0\x00'}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vhci_hcd.2/usb14/bConfigurationValue\x00', 0x412002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setfsuid$auto(0xee00) 2.984496581s ago: executing program 4 (id=2104): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, 0x0, 0x6a) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/hugepages-64kB/stats/nr_anon\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000002980)=""/4075, 0xfeb) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) sendto$auto(r0, 0x0, 0xa557, 0x19e2, 0x0, 0x1f) 2.622915898s ago: executing program 4 (id=2105): syz_genetlink_get_family_id$auto_net_shaper(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f00000000c0)={@config_section=0x0, 0x81}) socket(0x848000000015, 0x5, 0x0) madvise$auto(0x110c230000, 0x1, 0x9) getrandom$auto(0x0, 0x5, 0x1) mmap$auto(0x0, 0x9d90, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_IOCTL_VM_SOCKETS_GET_LOCAL_CID(0xffffffffffffffff, 0x7b9, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) fadvise64$auto(r1, 0x7fff, 0x6, 0x1) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r2 = fanotify_init$auto(0x1, 0x2) fanotify_mark$auto(r2, 0x205, 0x100002, 0x4, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/LookupCacheEnabled\x00', 0x48041, 0x0) setrlimit$auto(0x7, &(0x7f0000001380)={0x5, 0x6}) socket(0x22, 0x1, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x8029, 0xca, 0x0, 0x567) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r3, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80101, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0x8138ae83, 0x0) 2.466420957s ago: executing program 0 (id=2106): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0x1cbd01, 0x0) ioctl$auto_USBDEVFS_CONTROL32(r0, 0xc0105500, &(0x7f0000000280)={0x0, 0x9, 0x94, 0x1, 0x3ff, 0x6c4, 0x8b}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x129002, 0x0) (async) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0) read$auto(r1, &(0x7f0000000000)='\x00', 0x4) (async) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(0x3, 0x0, 0x6) (async) pread64$auto(r1, 0x0, 0x10001, 0x82a) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), r2) (async) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) ioctl$auto_BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000500)={0x40a, 0x3, 0x3ac, 0x8, {0x1, 0x4, 0xb, 0x3, 0x9, 0x4, 0x9, 0x2, 0xe, 0xa5, 0x1, 0x4, 0x0, 0xf, 0xff}}) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000040)={0x10, 0x3}) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/set_event\x00', 0x40000, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/netfilter/nf_log\x00', 0x101000, 0x0) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x2000, 0x0) (async) sendmsg$auto_TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000d3a8b14a457dc11dfc0af3ef7bffd9a124f493d766e3cfca88182933a41c06938331715dac44071f7f40614d95f1167eb7f6439952e6b7974796790074ad3ee8efa35f1e64296e2eab601d5ad51b4504bbadcfcb", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0xc050) (async) socket$nl_generic(0x10, 0x3, 0x10) shmctl$auto_SHM_STAT(0x4, 0xd, &(0x7f0000000380)={{0x100, 0xffffffffffffffff, 0xee01, 0x401, 0x5, 0xa, 0xf}, 0x3, 0xc, 0x1, 0x2, @inferred=0xffffffffffffffff, @raw=0x2, 0x9, 0x0, &(0x7f00000002c0)="91ec", &(0x7f0000000300)="c2fa66106e15567dc99285b185977c11ac6bdb2fdd6a9c6eedd4b9b07ad27e9d07c3c3dff9f7c9fd7c35ec8bd06bac5cdfbcae91c17e0ef9b9bb1eeda236fb0d8ac0e777918d9af1fc539a64c000"}) r4 = clone$auto(0x3, 0x2, 0x0, 0x0, 0x5836a4cc) ptrace$auto(0x4206, r4, 0x0, 0x200005) 2.461883741s ago: executing program 5 (id=2107): openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r0, 0x4018620d, 0x9) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r1, 0x4018620d, 0x9) r2 = socket(0x10, 0x2, 0x6) close_range$auto(0x2, r2, 0x0) socket(0x10, 0xa, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0xda0, 0x400, 0x718c1257}]}) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r5 = socket(0x1f, 0x4, 0x6) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r5, 0x50f, 0xffff, 0x0, 0x14) 2.409021569s ago: executing program 4 (id=2108): r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x324, r0, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x30c, 0x1, 0x0, 0x1, [@nested={0x308, 0x10, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @fd=r1}, @nested={0x2e3, 0xf4, 0x0, 0x1, [@nested={0x1bf, 0x143, 0x0, 0x1, [@generic="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", @generic="e4868ce1bee751f71d9167af7dccce2b350a0272f485b03d437d82505c29c9117757217a4a45889e9fed349d3885c99587d45ced3a81130ae6b63f36aa45395add8f55b99d83a5c398d8fe976b9184ddbbc57e5a7600c095c4892a0c429a5125eaa17cc8b28f0f96f87b22f2b6e5e7f49f51b3d03561c50be4670f8e5a80d0b8f04fafb5cad5030e521a7454ecdd03d9138ce29219", @typed={0xc, 0x13, 0x0, 0x0, @u64=0x5}, @nested={0x4, 0xbc}, @nested={0x4, 0x31}, @typed={0xc, 0x122, 0x0, 0x0, @u64=0x4}, @nested={0x4, 0x95}, @nested={0x4, 0x7}]}, @generic="8a11255627b96fcec904d8a2c472c190d19a5931402383c8da35d4b4e51174c2130d40ae27844845909f21a2e9ba29b6a381232e9c903962b29d37ef6cd10758a28af83ad83b4bf69af537f605ca133db3db00a0a4ec863994763bb012c0b26475699d1f7e989d232c89d67dfc093bb137bdd7ca27c771f72f05c5ed86124aab0cb011ec99b88860ee100975b098c9fb3d6ae74d5834ab8b5d402db5555f57e0bbb4faddfa6a61af714171831e19401807e113bad87a98357e380f8f1a9b54063c5ff97744943e76fbb6cf2a7b8cd7923e40c4a6afab5c", @typed={0x48, 0x95, 0x0, 0x0, @binary="ba75cea1a31df428ac1511a4b593a98c2416726f4b7ca612f9bc207862a1cf2569f6a5cc52a13f35e22e7a08c355957c2c9052d45e0dffbef31a5f982f97d4010b916eef"}]}, @nested={0x18, 0x30, 0x0, 0x1, [@typed={0x14, 0x7f, 0x0, 0x0, @ipv6=@local}]}]}]}]}, 0x324}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.net/net_prio.prioidx\x00', 0x20a42, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001080)=""/4076, 0xfec) 2.318753734s ago: executing program 2 (id=2109): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x4, 0x20009, 0x4000000000df, 0xeb1, r0, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r1 = io_uring_setup$auto(0x1, 0x0) setsockopt$auto(r0, 0x6, 0x2, 0x0, 0x1002) write$auto_fops_init_pkru_pkeys(r1, &(0x7f0000000280)="e7c2da8ba23469d9b78d2e257333bedaec957355b8c2c4c78f4a98e7180a2dfeddb935038a6350c625940925fc61f1b8b51df8f60e61c078ff39654003ba048fb5ce9f0cc683aa815dd3ad98c47fb90efa4ba1a790507d91d2a8beb4ce1934ec6dc65f", 0x63) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) mmap$auto(0xffffffffffffffff, 0x2020009, 0x3, 0xeb1, r2, 0x8000) socket(0x10, 0x2, 0x14) r3 = socket(0x1d, 0x2, 0x7) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r3], 0x1ac}}, 0x20008041) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r4, @ANYRESHEX=r0, @ANYRES16=r3, @ANYRESDEC=0x0], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x11) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0xd}, 0x2}, 0x3, 0x0) socket(0x1d, 0x3, 0x1) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x7f, 0xeb1, 0x401, 0x8000) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x5) r6 = socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r6) sendmsg$auto_NL80211_CMD_TDLS_OPER(r6, 0x0, 0x91) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="5b97b6ab5914130e8978e02b15eaa824c24f5025b973902946425cea9ccf067ccff62421208de7c53edd6ddd7c66c64dcc635e843b45a35cd1dbfa49d4a0115f0e9e1bcbd858d4240a66953d051463f511b3fd0d5c2b", @ANYRES16=r7, @ANYBLOB="01002dbd7000fddbdf25050000000500020008000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r7, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) futex$auto(&(0x7f0000000080)=0x3, 0x3, 0x0, 0x0, 0x0, 0x440a48d3) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 2.1473444s ago: executing program 4 (id=2110): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x2000048}) sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)="4c0300000000000000a3670400000000000000ba831c1b", 0x49}, 0x5, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r3 = socket(0xa, 0x1, 0x84) getsockopt$auto(r3, 0x0, 0x53, 0x0, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r4 = fanotify_init$auto(0x5, 0x0) epoll_create$auto(0x4) flistxattr$auto(0x3, 0x0, 0x3) fanotify_mark$auto(r4, 0x205, 0xa, 0x4, 0x0) readv$auto(0x3, 0x0, 0x7) socket(0x10, 0x2, 0x4) cachestat$auto(r2, 0x0, &(0x7f00000000c0)={0x6, 0xc, 0x2, 0xa, 0x5}, 0x0) r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x20282, 0x0) ioctl$auto_UI_DEV_SETUP(r5, 0x405c5503, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x9, 0x0, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x43, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = prctl$auto_PR_SET_MM_ENV_END(0x80000000, 0xb, 0xffffffffffffffff, 0xf546, 0x7de4) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r6, &(0x7f0000000100)=""/247, 0xf7) 1.963458141s ago: executing program 5 (id=2111): getpgid$auto(0xffffffffffffffff) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) shmctl$auto_IPC_SET(0x4, 0x1, &(0x7f0000000280)={{0x80, 0xee00, 0xee00, 0xca6d, 0x8, 0x4bd6, 0x5}, 0xd21, 0x5, 0x8000000000000000, 0x1, @inferred=0xffffffffffffffff, @raw=0x440, 0x9, 0x0, &(0x7f0000000140)="4f0d6995e943b6bc1919e836e1a6e889b4881e233d3b51e066bb0a054c9e474be535fd29da", &(0x7f0000000200)="e3ac9b01ee8d985b677531eeeee5cb5bf774d2df4d9ae6dccbc98def20b72c7c2826a585ba3a8d67815abade214708a4ade77c6faa2f2889ca3e7989f32645dd597a3ae1b46e8d8c7e03ae6b8aaa49f6bf64cc5fa98e25"}) fsconfig$auto(r0, 0x800, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_abort_count\x00', 0x0, r1) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11691c13403c82be", 0x7b) process_mrelease$auto(0xffffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2, 0x1, 0x106) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) bind$auto(r3, &(0x7f0000000000)=@in={0x2, 0x3, @multicast1}, 0x6a) connect$auto(r3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}, 0x54) clone$auto(0x8ffe, 0xfffffffffffffffa, 0xffffffffffffffff, 0xfffffffffffffffc, 0x8) ioctl$auto(0x3, 0x80000541b, 0x38) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000a80)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x882, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) syz_clone3(&(0x7f0000000380)={0x0, &(0x7f0000000180), 0x0, &(0x7f0000000340), {0x3b}, &(0x7f0000001500)=""/4097, 0x1001, &(0x7f0000001380)=""/5, &(0x7f0000000300)=[r2, r2, r2, 0x0, 0x0], 0x5}, 0x58) 1.801560285s ago: executing program 4 (id=2112): mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/027/001\x00', 0x4a901, 0x0) ioctl$auto_USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000001c0)={0x0, 0x80805513, 0x0}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) pwrite64$auto(0xc8, 0x0, 0x400f24, 0xc425) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x40000b, 0xdf, 0x9b72, 0x2, 0x108000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) futex$auto(0x0, 0x1, 0x40000006, 0x0, 0x0, 0x80000001) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x21, 0x80000, 0x0) r2 = socket(0xa, 0x3, 0xff) connect$auto(r2, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x385302, 0x0) shmget$auto(0x38, 0x3, 0x1) write$auto_proc_mem_operations_base(r0, &(0x7f0000001680)="a7", 0xfffffc96) mmap$auto(0x0, 0x400, 0xfffffffffffffffa, 0xeb1, 0x401, 0x8000) madvise$auto(0x4, 0x2004, 0x15) 1.416943879s ago: executing program 0 (id=2113): msgctl$auto_IPC_SET(0x2, 0x1, &(0x7f0000000080)={{0x40, 0xee01, 0xee01, 0x2, 0x28, 0x5, 0x1}, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x6, 0x0, 0x7ff, 0x3aba, 0x696fcb85, 0x1000, 0x5, 0x1ff, 0x8001, @inferred=0xffffffffffffffff, @inferred=0x0}) r3 = fcntl$auto_F_GETOWN(0xffffffffffffffff, 0x9, 0x4) msgctl$auto(0x3, 0x2c3a, &(0x7f0000000180)={{0xe6, r0, 0xffffffffffffffff, 0x9, 0x8000, 0xe3a, 0x4}, &(0x7f0000000100)=0x8, &(0x7f0000000140)=0x1, 0x800, 0x9, 0x1, 0x9, 0x825, 0x5, 0x47, 0x9, @raw=0x4, @inferred=r3}) r5 = waitid$auto(0x7f, 0xffffffffffffffff, &(0x7f0000000340)={@siginfo_0_0={0x468d3a90, 0x85, 0x301ed0fb, @_sigfault={&(0x7f0000000280)="d93a46a15712f52dd8b0c8c6b9e1ef632d510bc942969bef339326d2160af03cd823d9714f78f203b8bc396effb4cdc6b0130191060ae2622fc9e4f43ac15c2b2651f5ca6dec24a21045cb15d8c0351714df3ef6862811d41eed4241921d60d8dc65be8251ee943bb386a839a0269abec32126f97b6d3861ff59a9d0838a7e51b924bf0310b15a1318d74a81e56d454f6b0e19bc8fa22569baa1b490ff7c379b975825b72cc1bc44186bba", @_addr_pkey={"544fe2ddb8d25f2f", 0x1ff}}}}, 0x7, &(0x7f00000003c0)={{0x1}, {0x29, 0x5f}, 0x7, 0x20000, 0x401, 0x0, 0x0, 0x5, 0xa5, 0x10001, 0x6, 0x9, 0x100, 0x6, 0x1ff, 0x8}) msgctl$auto_MSG_STAT_ANY(0x6, 0xd, &(0x7f0000000480)={{0x6, r4, r1, 0x0, 0xffffff80, 0x4, 0x1}, &(0x7f0000000200)=0xad, &(0x7f0000000240)=0x7f, 0x2, 0x7, 0x9, 0xb, 0x4, 0x0, 0xfffb, 0xff, @inferred=r3, @inferred=r5}) r6 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r6, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@OVS_METER_ATTR_MAX_BANDS={0x8, 0x8, 0x2}, @OVS_METER_ATTR_MAX_BANDS={0x8, 0x8, 0x5}, @OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x40}, @OVS_METER_ATTR_STATS={0x14, 0x3, {0x8000000000000000, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0xc040) r7 = socketpair$auto(0x82e, 0x8, 0x5, &(0x7f0000000680)=0x800) unshare$auto(0x8) r8 = getpgrp(r2) r9 = prctl$auto_PR_SET_MM_START_DATA(0xfff, 0x3, r8, 0x4, 0x38a) madvise$auto(0x7d4bd09e, 0x10001, 0x1000) sendto$auto(r9, &(0x7f00000006c0)="c7a2a0afb6624ccf94fd8b6f94645717e174f7b88f559583636ecb8301e1b6d483b92d941eb94e1ae6a7ae8609", 0x7fffffffffffffff, 0x40, &(0x7f0000000700)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x2}, 0x9) getsockopt$auto_SO_RCVMARK(r7, 0x101, 0x4b, &(0x7f0000000740)='ovs_meter\x00', &(0x7f0000000780)=0x5) madvise$auto(0x9, 0x9, 0x1) r10 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000800), r9) sendmsg$auto_HANDSHAKE_CMD_DONE(r9, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x64, r10, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@HANDSHAKE_A_DONE_REMOTE_AUTH={0x8}, @HANDSHAKE_A_DONE_STATUS={0x8, 0x1, 0x778}, @HANDSHAKE_A_DONE_REMOTE_AUTH={0x8, 0x3, 0x9}, @HANDSHAKE_A_DONE_SOCKFD={0x8, 0x2, r7}, @HANDSHAKE_A_DONE_REMOTE_AUTH={0x8, 0x3, 0x8}, @HANDSHAKE_A_DONE_REMOTE_AUTH={0x8, 0x3, 0xffffffff}, @HANDSHAKE_A_DONE_STATUS={0x8, 0x1, 0x8}, @HANDSHAKE_A_DONE_REMOTE_AUTH={0x8, 0x3, 0x1ff}, @HANDSHAKE_A_DONE_SOCKFD={0x8, 0x2, r9}, @HANDSHAKE_A_DONE_SOCKFD={0x8, 0x2, r7}]}, 0x64}, 0x1, 0x0, 0x0, 0x801}, 0x4040804) clone$auto(0x0, 0x81, &(0x7f0000000940)=0x4, &(0x7f0000000980)=0x4, 0x5) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f00000009c0)=""/51, 0x33) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/snd/midiC2D2\x00', 0x4a842, 0x0) syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f0000000a40), r7) get_mempolicy$auto(&(0x7f0000000a80)=0x3, &(0x7f0000000ac0)=0x9, 0xd93, 0x6, 0x6) r11 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000b40), r7) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r9, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x2c, r11, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x7}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0xa}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x41) openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000c40), 0x18000, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000c80), r9) madvise$auto(0x4, 0x6, 0x2) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/sg1\x00', 0x4000, 0x0) r12 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000d40), r9) sendmsg$auto_IPVS_CMD_GET_CONFIG(r9, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xd8, r12, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0x51, 0x0, 0x1, [@nested={0x4, 0x136}, @nested={0x4, 0x7a}, @nested={0x4, 0xc6}]}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc}, @IPVS_CMD_ATTR_DAEMON={0x88, 0x3, 0x0, 0x1, [@generic="b2873bced2dc37d0e751fbf898355965cf32586643942ead914829669d2db4411e26f037341887b8202a38162fe36d1f61c06bdde90d8c1dafef0f93d6bc2f9dfce8daddfef43339c8c9a17b0130f8b7d73888be61350ffe336c14cb8a33c08e8403853fa3c42fc1b0797082e50797fb02c10ff749b0c40fab3d8dd7dd790fddee6f85ce"]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0xd8}, 0x1, 0x0, 0x0, 0x240048c0}, 0x47) 1.197044445s ago: executing program 2 (id=2114): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x8) close_range$auto(0x2, 0xa, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr9\x00', 0x40001, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) fcntl$auto(0x3, 0x4, 0xa553) swapon$auto(0x0, 0x200001) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x9a6, 0x0) prctl$auto(0x7ff, 0x3, 0x0, 0x10, 0x101000000000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x24) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socketcall$auto(0x8000, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000080)={0x2, 0x1, 0x800000ff, 0xffffff71, 0x10000}) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x60980, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(r0, 0xae5f, r1) ioctl$auto(0x3, 0xae41, r2) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto(0x3, 0xae41, r4) close_range$auto(0x2, 0x8, 0xa) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) 747.010452ms ago: executing program 4 (id=2115): r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x240009, 0xdf, 0x8000009b72, 0x7, 0x28000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) read$auto(r0, &(0x7f0000000040)='-}[*].!\x00', 0x4) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x28020400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/netfilter/nf_conntrack_log_invalid\x00', 0x101202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) write$auto(0x3, 0x0, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = openat$auto_fragmentation_threshold_ops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/fragmentation_threshold\x00', 0x400, 0x0) read$auto_fragmentation_threshold_ops_(r1, 0x0, 0x0) socket(0x2, 0x6, 0x0) capset$auto(0x0, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) write$auto(0x3, 0x0, 0xffd8) socket(0xa, 0x1, 0x84) (async) mmap$auto(0x0, 0x240009, 0xdf, 0x8000009b72, 0x7, 0x28000) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) read$auto(r0, &(0x7f0000000040)='-}[*].!\x00', 0x4) (async) unshare$auto(0x20000080) (async) syz_clone3(&(0x7f0000000300)={0x28020400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x8) (async) bind$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/netfilter/nf_conntrack_log_invalid\x00', 0x101202, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) (async) write$auto(0x3, 0x0, 0x7) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) openat$auto_fragmentation_threshold_ops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/fragmentation_threshold\x00', 0x400, 0x0) (async) read$auto_fragmentation_threshold_ops_(r1, 0x0, 0x0) (async) socket(0x2, 0x6, 0x0) (async) capset$auto(0x0, 0x0) (async) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) (async) write$auto(0x3, 0x0, 0xffd8) (async) 545.92964ms ago: executing program 0 (id=2116): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x8, 0x2, 0x40000000de, 0x100000eb1, 0x401, 0x7fff) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) mmap$auto(0x3, 0x7, 0xe29d, 0x11, r0, 0x0) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0x6, 0xfffffffffffffffe, 0x5, 0xfffffffffffff9fe) statmount$auto(0x0, &(0x7f0000000180)={0xb896, 0x1, 0x9, 0x400000, 0x22, 0x940, 0x1ffde, 0x0, 0x1, 0x7, 0xa, 0x6, 0xfffffffffffffffe, 0x8000000000000001, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0xfffff7fe, 0x5, 0x2, 0x1000, 0x7, 0x9, 0x0, 0x1, 0x4, 0x0, 0xfffffffe, [0x0, 0x7fffffff, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffeffa, 0x400000000, 0x0, 0x4, 0x1, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x7, 0x10000000003, 0x1, 0x1, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x5757, 0x80000000000000, 0x2, 0x1, 0x8000000000000, 0x53d, 0x0, 0x0, 0x2]}, 0x7, 0x281) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x900, &(0x7f0000000100)={0x0, 0x4}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x407, 0x4008) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000029, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x2201, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04#\x01\n2\x7f\x88\x83\xa9\xd7\xbea\xcd\x00\x00\x00\xef\xabJY\xee,\xf6\x80\xecP\x9f\x00\x00\x00\x00\x00\x00\x00\x80\xe0Z\x1bsZ\xac\xff\x92+\xc9\x9fs\xbf\xd8\f\xf5\xa7jUA\x11\xf9\xb4U\xc5\x92\xf1', 0x82) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r4, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x6, 0x0) msync$auto(0x0, 0xe0, 0x6) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x216641, 0x0) 416.540573ms ago: executing program 5 (id=2117): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x24004805) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sysfs$auto(0x2, 0x10000000000002a, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0xfdef) read$auto(0x3, 0x0, 0x8080) msgctl$auto_MSG_STAT_ANY(0x9, 0xd, &(0x7f00000000c0)={{0x10000, 0xee01, 0x0, 0x85d, 0x8, 0xe, 0x2}, &(0x7f0000000000)=0xf1, &(0x7f0000000080)=0x6, 0xf7, 0x1, 0x1, 0x0, 0x3, 0x7, 0xf5c, 0xe0}) lstat$auto(0x0, &(0x7f0000000180)={0x8, 0x31, 0x7f, 0xffffffff, 0x0, r0, 0x0, 0x1000000006, 0x6, 0x7, 0x3, 0x800000007ffffffb, 0x5, 0xffffffff80000003, 0x2, 0x5f, 0x401}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 0s ago: executing program 2 (id=2118): mmap$auto(0x0, 0x4020009, 0x2029, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/erspan0/ioam6_enabled\x00', 0x42b81, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/cpu/cpu0/cache/index0/size\x00', 0x0, 0x0) sendfile$auto(r0, r1, 0x0, 0x1000200) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/nr12/address\x00', 0x101800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/37, 0x25) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ioperm$auto(0x1, 0x37f, 0x80000000) kernel console output (not intermixed with test programs): ter_sysctl_table+0xea2/0x1900 [ 422.027464][ T8774] __register_sysctl_table+0xea2/0x1900 [ 422.027502][ T8774] ? __pfx___register_sysctl_table+0x10/0x10 [ 422.027534][ T8774] ? is_module_address+0x69/0xf0 [ 422.027560][ T8774] ? register_net_sysctl_sz+0x222/0x450 [ 422.027588][ T8774] ? __asan_memcpy+0x3c/0x60 [ 422.027618][ T8774] sysctl_route_net_init+0x15e/0x2c0 [ 422.027646][ T8774] ? __pfx_sysctl_route_net_init+0x10/0x10 [ 422.027672][ T8774] ops_init+0x1e2/0x5f0 [ 422.027708][ T8774] setup_net+0x11d/0x3a0 [ 422.027743][ T8774] ? __pfx_setup_net+0x10/0x10 [ 422.027775][ T8774] ? lockdep_init_map_type+0x5c/0x270 [ 422.027799][ T8774] ? mutex_init_lockep+0x110/0x150 [ 422.027827][ T8774] copy_net_ns+0x351/0x7c0 [ 422.027857][ T8774] create_new_namespaces+0x3ea/0xab0 [ 422.027897][ T8774] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 422.027932][ T8774] ksys_unshare+0x45b/0xa40 [ 422.027954][ T8774] ? __pfx_ksys_unshare+0x10/0x10 [ 422.027976][ T8774] ? xfd_validate_state+0x61/0x180 [ 422.028005][ T8774] __x64_sys_unshare+0x31/0x40 [ 422.028037][ T8774] do_syscall_64+0xcd/0xf80 [ 422.028060][ T8774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.028082][ T8774] RIP: 0033:0x7fedd298f7c9 [ 422.028100][ T8774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.028121][ T8774] RSP: 002b:00007fedd38cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 422.028141][ T8774] RAX: ffffffffffffffda RBX: 00007fedd2be6090 RCX: 00007fedd298f7c9 [ 422.028155][ T8774] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 422.028168][ T8774] RBP: 00007fedd2a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 422.028180][ T8774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.028193][ T8774] R13: 00007fedd2be6128 R14: 00007fedd2be6090 R15: 00007ffd5810cce8 [ 422.028222][ T8774] [ 422.028959][ T8774] sysctl could not get directory: /net/ipv4/route -12 [ 422.837114][ T8784] NFSD: Failed to start, no listeners configured. [ 428.397691][ T8846] zswap: compressor  not available [ 428.665585][ T8852] Invalid ELF header magic: != ELF [ 431.738307][ T8918] netlink: 28 bytes leftover after parsing attributes in process `syz.4.608'. [ 432.040306][ T5876] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 432.040337][ T5876] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 432.056430][ T5876] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 432.056467][ T5876] Bluetooth: hci2: Unknown advertising packet type: 0x33 [ 432.065248][ T5876] Bluetooth: hci2: adv larger than maximum supported [ 432.073712][ T5876] Bluetooth: hci2: adv larger than maximum supported [ 432.081482][ T5876] Bluetooth: hci2: Malformed LE Event: 0x0d [ 433.413644][ T8946] random: crng reseeded on system resumption [ 434.363664][ T8974] vhci_hcd vhci_hcd.1: default hub control req: 4002 v0000 i0000 l0 [ 434.443685][ T8969] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 434.722507][ T8984] vhci_hcd vhci_hcd.2: invalid port number 252 [ 434.828063][ T8984] vhci_hcd vhci_hcd.2: default hub control req: 040f v0772 i00fc l2 [ 436.676818][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.637'. [ 436.866345][ T9042] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek 13 [ 448.430154][ T9206] syz.2.663 uses obsolete (PF_INET,SOCK_PACKET) [ 449.539074][ T9206] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 449.665394][ T9206] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 449.818994][ T9206] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 449.963819][ T9206] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 450.118055][ T9206] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 450.371394][ T9206] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 450.555136][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.564105][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.508286][ T5876] Bluetooth: hci0: command 0x0c1a tx timeout [ 451.667291][ T5876] Bluetooth: hci3: command 0x0c1a tx timeout [ 451.830143][ T5876] Bluetooth: hci2: command 0x0c1a tx timeout [ 451.987188][ T5876] Bluetooth: hci4: command 0x0c1a tx timeout [ 453.600321][ T9275] CIFS mount error: No usable UNC path provided in device string! [ 453.600321][ T9275] [ 453.686365][ T9275] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 454.067395][ T5876] Bluetooth: hci4: command 0x0c1a tx timeout [ 456.039442][ T9304] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 456.148961][ T5876] Bluetooth: hci4: command 0x0c1a tx timeout [ 456.212082][ T30] audit: type=1800 audit(1768943699.993:8): pid=9309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.684" name="version" dev="configfs" ino=25963 res=0 errno=0 [ 456.645000][ T9321] vhci_hcd vhci_hcd.1: default hub control req: 4002 v0000 i0000 l0 [ 457.981685][ T9335] nfs4: Unknown parameter '8' [ 458.666008][ T9353] FAULT_INJECTION: forcing a failure. [ 458.666008][ T9353] name fail_futex, interval 1, probability 0, space 0, times 1 [ 458.938663][ T9364] vhci_hcd vhci_hcd.1: default hub control req: 4002 v0000 i0000 l0 [ 459.220769][ T9353] CPU: 0 UID: 0 PID: 9353 Comm: syz.2.694 Not tainted syzkaller #0 PREEMPT(full) [ 459.220800][ T9353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 459.220813][ T9353] Call Trace: [ 459.220827][ T9353] [ 459.220836][ T9353] dump_stack_lvl+0x16c/0x1f0 [ 459.220879][ T9353] should_fail_ex+0x512/0x640 [ 459.220911][ T9353] get_futex_key+0x1d0/0x15f0 [ 459.220940][ T9353] ? __pfx_get_futex_key+0x10/0x10 [ 459.220964][ T9353] ? find_held_lock+0x2b/0x80 [ 459.221003][ T9353] futex_wake+0xea/0x530 [ 459.221038][ T9353] ? __pfx_futex_wake+0x10/0x10 [ 459.221075][ T9353] ? rw_verify_area+0xcf/0x6c0 [ 459.221110][ T9353] do_futex+0x1e3/0x350 [ 459.221136][ T9353] ? __pfx_do_futex+0x10/0x10 [ 459.221163][ T9353] ? __pfx_do_sendfile+0x10/0x10 [ 459.221200][ T9353] __x64_sys_futex+0x1e0/0x4c0 [ 459.221230][ T9353] ? __pfx___x64_sys_futex+0x10/0x10 [ 459.221264][ T9353] ? xfd_validate_state+0x61/0x180 [ 459.221285][ T9353] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 459.221316][ T9353] do_syscall_64+0xcd/0xf80 [ 459.221340][ T9353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.221363][ T9353] RIP: 0033:0x7f1e2ab8f7c9 [ 459.221381][ T9353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.221403][ T9353] RSP: 002b:00007f1e2b9440e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 459.221424][ T9353] RAX: ffffffffffffffda RBX: 00007f1e2ade5fa8 RCX: 00007f1e2ab8f7c9 [ 459.221443][ T9353] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1e2ade5fac [ 459.221456][ T9353] RBP: 00007f1e2ade5fa0 R08: 00007f1e2b945000 R09: 0000000000000000 [ 459.221470][ T9353] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 459.221484][ T9353] R13: 00007f1e2ade6038 R14: 00007ffd966fbf60 R15: 00007ffd966fc048 [ 459.221513][ T9353] [ 460.629288][ T9386] FAULT_INJECTION: forcing a failure. [ 460.629288][ T9386] name failslab, interval 1, probability 0, space 0, times 0 [ 460.692683][ T9386] CPU: 0 UID: 0 PID: 9386 Comm: syz.4.702 Not tainted syzkaller #0 PREEMPT(full) [ 460.692715][ T9386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 460.692728][ T9386] Call Trace: [ 460.692735][ T9386] [ 460.692744][ T9386] dump_stack_lvl+0x16c/0x1f0 [ 460.692787][ T9386] should_fail_ex+0x512/0x640 [ 460.692814][ T9386] ? kmem_cache_alloc_noprof+0x62/0x770 [ 460.692846][ T9386] should_failslab+0xc2/0x120 [ 460.692882][ T9386] kmem_cache_alloc_noprof+0x83/0x770 [ 460.692909][ T9386] ? xfd_validate_state+0x61/0x180 [ 460.692931][ T9386] ? alloc_pid+0xd8/0x13c0 [ 460.692956][ T9386] ? alloc_pid+0xd8/0x13c0 [ 460.692975][ T9386] alloc_pid+0xd8/0x13c0 [ 460.692994][ T9386] ? fpu_clone+0xdd/0x770 [ 460.693032][ T9386] copy_process+0x4027/0x7430 [ 460.693068][ T9386] ? __pfx___futex_wait+0x10/0x10 [ 460.693111][ T9386] ? __pfx_copy_process+0x10/0x10 [ 460.693151][ T9386] ? find_held_lock+0x2b/0x80 [ 460.693185][ T9386] ? futex_private_hash_put+0x160/0x1b0 [ 460.693215][ T9386] kernel_clone+0xfc/0x910 [ 460.693252][ T9386] ? __pfx_kernel_clone+0x10/0x10 [ 460.693303][ T9386] __do_sys_clone+0xce/0x120 [ 460.693337][ T9386] ? __pfx___do_sys_clone+0x10/0x10 [ 460.693385][ T9386] ? xfd_validate_state+0x61/0x180 [ 460.693415][ T9386] do_syscall_64+0xcd/0xf80 [ 460.693438][ T9386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.693461][ T9386] RIP: 0033:0x7fedd298f7c9 [ 460.693479][ T9386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.693500][ T9386] RSP: 002b:00007fedd38ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 460.693521][ T9386] RAX: ffffffffffffffda RBX: 00007fedd2be5fa0 RCX: 00007fedd298f7c9 [ 460.693536][ T9386] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 460.693549][ T9386] RBP: 00007fedd2a13f91 R08: 0000000000000002 R09: 0000000000000000 [ 460.693563][ T9386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.693575][ T9386] R13: 00007fedd2be6038 R14: 00007fedd2be5fa0 R15: 00007ffd5810cce8 [ 460.693605][ T9386] [ 462.475159][ T9396] netlink: 24 bytes leftover after parsing attributes in process `syz.3.705'. [ 467.780189][ T9467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.720'. [ 470.234453][ T9488] netlink: 24 bytes leftover after parsing attributes in process `syz.4.725'. [ 470.595590][ T9497] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 470.625480][ T9493] netlink: 28 bytes leftover after parsing attributes in process `syz.0.726'. [ 470.806173][ T30] audit: type=1800 audit(1768945762.590:9): pid=9500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.728" name="version" dev="configfs" ino=26853 res=0 errno=0 [ 470.969995][ T9498] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 472.036700][ T9514] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 472.194787][ T30] audit: type=1800 audit(1768945763.987:10): pid=9520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.731" name="version" dev="configfs" ino=26935 res=0 errno=0 [ 472.623442][ T9518] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 474.952127][ T9558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.741'. [ 475.791935][ T5876] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 476.108515][ T9586] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.2.746: bg 5: bad block bitmap checksum [ 476.340246][ T9586] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 74 [ 476.548977][ T9586] EXT4-fs (sda1): This should not happen!! Data will be lost [ 476.548977][ T9586] [ 478.514396][ T9622] netlink: 'syz.0.758': attribute type 1 has an invalid length. [ 479.784987][ T30] audit: type=1107 audit(1768945771.616:11): pid=9635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='+' [ 479.875415][ T30] audit: type=1107 audit(1768945771.616:12): pid=9635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='+' [ 479.903282][ T9632] mkiss: ax0: crc mode is auto. [ 481.482041][ T9664] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 481.583582][ T9664] EXT4-fs (sda1): This should not happen!! Data will be lost [ 481.583582][ T9664] [ 481.688630][ T9670] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 481.724680][ T5876] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 482.328094][ T9675] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 483.753683][ T9698] netlink: 28 bytes leftover after parsing attributes in process `syz.2.774'. [ 484.378511][ T9707] vhci_hcd vhci_hcd.0: invalid port number 16 [ 484.458244][ T9712] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 485.737374][ T9734] EXT4-fs error (device sda1): ext4_discard_preallocations:5703: comm syz.3.778: Error -117 reading block bitmap for 5 [ 486.380076][ T9738] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 486.649347][ T9745] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 486.659864][ T9744] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 486.854194][ T9753] loop6: detected capacity change from 0 to 4194304 [ 487.516080][ T9758] FAULT_INJECTION: forcing a failure. [ 487.516080][ T9758] name failslab, interval 1, probability 0, space 0, times 0 [ 487.611576][ T9758] CPU: 0 UID: 0 PID: 9758 Comm: syz.2.785 Not tainted syzkaller #0 PREEMPT(full) [ 487.611607][ T9758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 487.611620][ T9758] Call Trace: [ 487.611627][ T9758] [ 487.611636][ T9758] dump_stack_lvl+0x16c/0x1f0 [ 487.611680][ T9758] should_fail_ex+0x512/0x640 [ 487.611707][ T9758] ? __kmalloc_cache_noprof+0x5f/0x800 [ 487.611736][ T9758] should_failslab+0xc2/0x120 [ 487.611772][ T9758] __kmalloc_cache_noprof+0x80/0x800 [ 487.611805][ T9758] ? fib6_net_init+0x26a/0xb20 [ 487.611845][ T9758] ? fib6_net_init+0x26a/0xb20 [ 487.611879][ T9758] fib6_net_init+0x26a/0xb20 [ 487.611928][ T9758] ? __pfx_fib6_net_init+0x10/0x10 [ 487.611961][ T9758] ops_init+0x1e2/0x5f0 [ 487.611995][ T9758] setup_net+0x11d/0x3a0 [ 487.612028][ T9758] ? __pfx_setup_net+0x10/0x10 [ 487.612058][ T9758] ? lockdep_init_map_type+0x5c/0x270 [ 487.612081][ T9758] ? mutex_init_lockep+0x110/0x150 [ 487.612107][ T9758] copy_net_ns+0x351/0x7c0 [ 487.612128][ T9758] create_new_namespaces+0x3ea/0xab0 [ 487.612165][ T9758] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 487.612198][ T9758] ksys_unshare+0x45b/0xa40 [ 487.612217][ T9758] ? __pfx_ksys_unshare+0x10/0x10 [ 487.612237][ T9758] ? xfd_validate_state+0x61/0x180 [ 487.612265][ T9758] __x64_sys_unshare+0x31/0x40 [ 487.612283][ T9758] do_syscall_64+0xcd/0xf80 [ 487.612305][ T9758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.612328][ T9758] RIP: 0033:0x7f1e2ab8f7c9 [ 487.612344][ T9758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.612364][ T9758] RSP: 002b:00007f1e2b944038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 487.612384][ T9758] RAX: ffffffffffffffda RBX: 00007f1e2ade5fa0 RCX: 00007f1e2ab8f7c9 [ 487.612398][ T9758] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 487.612410][ T9758] RBP: 00007f1e2ac13f91 R08: 0000000000000000 R09: 0000000000000000 [ 487.612423][ T9758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.612435][ T9758] R13: 00007f1e2ade6038 R14: 00007f1e2ade5fa0 R15: 00007ffd966fc048 [ 487.612463][ T9758] [ 489.235503][ T9802] input: f as /devices/virtual/input/input22 [ 491.013801][ T9826] netlink: 338 bytes leftover after parsing attributes in process `syz.0.802'. [ 491.111447][ T9829] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 493.531329][ T9872] rtc_cmos 00:00: Alarms can be up to one day in the future [ 494.120163][ T8522] rtc_cmos 00:00: Alarms can be up to one day in the future [ 494.179958][ T8522] rtc_cmos 00:00: Alarms can be up to one day in the future [ 494.223689][ T8522] rtc_cmos 00:00: Alarms can be up to one day in the future [ 494.260697][ T8522] rtc_cmos 00:00: Alarms can be up to one day in the future [ 494.331179][ T8522] rtc rtc0: __rtc_set_alarm: err=-22 [ 494.863235][ T9895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.820'. [ 495.070008][ T9885] mkiss: ax0: crc mode is auto. [ 496.167559][ T9916] ptrace attach of "./syz-executor exec"[5869] was attempted by "./syz-executor exec"[9916] [ 498.291477][ T9954] netlink: 338 bytes leftover after parsing attributes in process `syz.2.829'. [ 498.334347][ T9954] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 498.570934][ T9958] netlink: 25 bytes leftover after parsing attributes in process `syz.2.831'. [ 499.838028][ T9980] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 500.325659][ T9982] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 504.848096][T10038] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 505.052923][T10043] netlink: 256 bytes leftover after parsing attributes in process `syz.3.849'. [ 505.188232][T10040] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26 [ 508.593032][T10102] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27 [ 508.979846][T10104] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 510.131064][T10122] netlink: 186 bytes leftover after parsing attributes in process `syz.4.870'. [ 510.629325][T10127] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29 [ 511.133960][T10128] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30 [ 511.772882][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.779559][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.418751][ T30] audit: type=1800 audit(4294967345.656:13): pid=10149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.876" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 513.154713][ T30] audit: type=1800 audit(4294967346.400:14): pid=10146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.875" name="SYSV00000014" dev="hugetlbfs" ino=0 res=0 errno=0 [ 514.500393][T10190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.885'. [ 514.987805][T10197] zswap: compressor not available [ 516.442107][T10217] FAULT_INJECTION: forcing a failure. [ 516.442107][T10217] name fail_futex, interval 1, probability 0, space 0, times 0 [ 516.504289][T10217] CPU: 0 UID: 0 PID: 10217 Comm: syz.4.891 Not tainted syzkaller #0 PREEMPT(full) [ 516.504320][T10217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 516.504333][T10217] Call Trace: [ 516.504340][T10217] [ 516.504349][T10217] dump_stack_lvl+0x16c/0x1f0 [ 516.504402][T10217] should_fail_ex+0x512/0x640 [ 516.504426][T10217] ? kasan_save_free_info+0x3b/0x60 [ 516.504471][T10217] get_futex_key+0x1d0/0x15f0 [ 516.504498][T10217] ? __pfx_get_futex_key+0x10/0x10 [ 516.504544][T10217] futex_wake+0xea/0x530 [ 516.504576][T10217] ? __pfx_futex_wake+0x10/0x10 [ 516.504609][T10217] ? rcu_is_watching+0x12/0xc0 [ 516.504657][T10217] ? kasan_quarantine_put+0x10a/0x240 [ 516.504690][T10217] do_futex+0x1e3/0x350 [ 516.504716][T10217] ? __pfx_do_futex+0x10/0x10 [ 516.504739][T10217] ? putname+0xf5/0x1a0 [ 516.504766][T10217] __x64_sys_futex+0x1e0/0x4c0 [ 516.504795][T10217] ? __pfx___x64_sys_futex+0x10/0x10 [ 516.504832][T10217] do_syscall_64+0xcd/0xf80 [ 516.504854][T10217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.504876][T10217] RIP: 0033:0x7fedd298f7c9 [ 516.504893][T10217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.504913][T10217] RSP: 002b:00007fedd38ed0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 516.504934][T10217] RAX: ffffffffffffffda RBX: 00007fedd2be5fa8 RCX: 00007fedd298f7c9 [ 516.504948][T10217] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fedd2be5fac [ 516.504961][T10217] RBP: 00007fedd2be5fa0 R08: 00007fedd38ee000 R09: 0000000000000000 [ 516.504974][T10217] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 516.504987][T10217] R13: 00007fedd2be6038 R14: 00007ffd5810cc00 R15: 00007ffd5810cce8 [ 516.505015][T10217] [ 516.851485][T10222] __vm_enough_memory: pid: 10222, comm: syz.2.893, bytes: 4398046511104 not enough memory for the allocation [ 517.657909][T10242] usb usb37: usbfs: process 10242 (syz.4.891) did not claim interface 0 before use [ 518.644746][ T30] audit: type=1800 audit(4294967351.918:15): pid=10255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.901" name="SYSV40000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 521.443590][T10314] Invalid ELF header magic: != ELF [ 521.936709][T10317] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 521.992219][T10317] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 522.038104][T10317] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 522.108585][T10317] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 522.137935][T10317] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 522.177097][T10317] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 522.727006][T10324] zswap: compressor not available [ 523.197424][ T5876] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 523.942586][ T5876] Bluetooth: hci0: command 0x0c1a tx timeout [ 524.023441][ T5876] Bluetooth: hci3: command 0x0c1a tx timeout [ 524.104507][ T5876] Bluetooth: hci2: command 0x0c1a tx timeout [ 524.181547][ T5876] Bluetooth: hci4: command 0x0c1a tx timeout [ 526.091507][ T5876] Bluetooth: hci3: command 0x0c1a tx timeout [ 526.171354][ T5876] Bluetooth: hci2: command 0x0c1a tx timeout [ 526.773944][T10388] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 526.929748][T10385] ima: policy update failed [ 526.970590][ T30] audit: type=1802 audit(4294967360.282:16): pid=10385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.923" res=0 errno=0 [ 529.824558][T10422] netlink: 330 bytes leftover after parsing attributes in process `syz.3.931'. [ 530.471843][T10429] zswap: compressor not available [ 534.836506][T10488] netlink: 326 bytes leftover after parsing attributes in process `syz.2.947'. [ 538.360355][T10534] netlink: 338 bytes leftover after parsing attributes in process `syz.3.955'. [ 545.063326][T10614] netlink: 28 bytes leftover after parsing attributes in process `syz.4.971'. [ 545.345122][T10614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.395860][T10614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.458159][T10614] bond0 (unregistering): Released all slaves [ 545.593310][T10618] Invalid ELF header magic: != ELF [ 547.583615][T10640] bridge0: port 4(gretap0) entered blocking state [ 547.619242][T10640] bridge0: port 4(gretap0) entered disabled state [ 547.644100][T10640] gretap0: entered allmulticast mode [ 547.684260][T10640] gretap0: entered promiscuous mode [ 547.733592][T10640] bridge0: port 4(gretap0) entered blocking state [ 547.740196][T10640] bridge0: port 4(gretap0) entered forwarding state [ 548.568047][T10655] hub 1-0:1.0: USB hub found [ 548.611477][T10655] hub 1-0:1.0: 1 port detected [ 548.803600][T10664] bond0: invalid ARP target specified [ 549.133952][ T30] audit: type=1804 audit(4294967382.567:17): pid=10669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.986" name=2F6E6577726F6F742F3130382F22050820 dev="tmpfs" ino=590 res=1 errno=0 [ 549.300106][ T30] audit: type=1800 audit(4294967382.597:18): pid=10669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.986" name=22050820 dev="tmpfs" ino=590 res=0 errno=0 [ 549.442775][T10680] netlink: 'syz.0.989': attribute type 4 has an invalid length. [ 549.480262][T10680] netlink: 314 bytes leftover after parsing attributes in process `syz.0.989'. [ 551.948577][T10720] random: crng reseeded on system resumption [ 554.493833][ T5876] Bluetooth: hci3: Unexpected cc 0x7c89 with no status [ 557.169522][T10819] netlink: 346 bytes leftover after parsing attributes in process `syz.3.1017'. [ 558.343891][T10835] cougar: G6 mapped to space [ 560.112834][T10836] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 561.320970][T10888] FAULT_INJECTION: forcing a failure. [ 561.320970][T10888] name failslab, interval 1, probability 0, space 0, times 0 [ 561.383754][T10888] CPU: 0 UID: 0 PID: 10888 Comm: syz.2.1034 Tainted: G L syzkaller #0 PREEMPT(full) [ 561.383791][T10888] Tainted: [L]=SOFTLOCKUP [ 561.383801][T10888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 561.383815][T10888] Call Trace: [ 561.383821][T10888] [ 561.383829][T10888] dump_stack_lvl+0x16c/0x1f0 [ 561.383871][T10888] should_fail_ex+0x512/0x640 [ 561.383897][T10888] ? __kmalloc_noprof+0xca/0x910 [ 561.383925][T10888] should_failslab+0xc2/0x120 [ 561.383960][T10888] __kmalloc_noprof+0xeb/0x910 [ 561.383985][T10888] ? ops_init+0x77/0x5f0 [ 561.384021][T10888] ? ops_init+0x77/0x5f0 [ 561.384050][T10888] ? __pfx_synproxy_net_init+0x10/0x10 [ 561.384085][T10888] ops_init+0x77/0x5f0 [ 561.384120][T10888] setup_net+0x11d/0x3a0 [ 561.384153][T10888] ? __pfx_setup_net+0x10/0x10 [ 561.384184][T10888] ? lockdep_init_map_type+0x5c/0x270 [ 561.384213][T10888] ? mutex_init_lockep+0x110/0x150 [ 561.384241][T10888] copy_net_ns+0x351/0x7c0 [ 561.384264][T10888] create_new_namespaces+0x3ea/0xab0 [ 561.384301][T10888] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 561.384336][T10888] ksys_unshare+0x45b/0xa40 [ 561.384356][T10888] ? __pfx_ksys_unshare+0x10/0x10 [ 561.384377][T10888] ? xfd_validate_state+0x61/0x180 [ 561.384406][T10888] __x64_sys_unshare+0x31/0x40 [ 561.384425][T10888] do_syscall_64+0xcd/0xf80 [ 561.384448][T10888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.384470][T10888] RIP: 0033:0x7f1e2ab8f7c9 [ 561.384488][T10888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.384508][T10888] RSP: 002b:00007f1e2b944038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 561.384529][T10888] RAX: ffffffffffffffda RBX: 00007f1e2ade5fa0 RCX: 00007f1e2ab8f7c9 [ 561.384543][T10888] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 561.384556][T10888] RBP: 00007f1e2ac13f91 R08: 0000000000000000 R09: 0000000000000000 [ 561.384569][T10888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 561.384581][T10888] R13: 00007f1e2ade6038 R14: 00007f1e2ade5fa0 R15: 00007ffd966fc048 [ 561.384609][T10888] [ 562.401306][T10913] Console: switching to colour VGA+ 80x25 [ 564.061385][T10935] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1045'. [ 564.123125][T10936] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1045'. [ 564.788392][T10949] zswap: compressor not available [ 566.836587][T10987] netlink: 'syz.0.1056': attribute type 1 has an invalid length. [ 567.463785][T11003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1059'. [ 569.761945][T11043] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1071'. [ 569.792977][T11044] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1071'. [ 570.042908][T11047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1072'. [ 570.920519][T11064] netlink: 'syz.4.1075': attribute type 33 has an invalid length. [ 570.998654][T11064] netlink: 322 bytes leftover after parsing attributes in process `syz.4.1075'. [ 571.617678][T11083] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 571.648633][T11083] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 571.674708][T11083] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 571.695582][T11083] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 571.727264][T11083] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 572.890758][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.899126][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.685772][ T5876] Bluetooth: hci2: command 0x0c1a tx timeout [ 573.691874][ T5876] Bluetooth: hci3: command 0x0c1a tx timeout [ 573.699665][ T5876] Bluetooth: hci0: command 0x0c1a tx timeout [ 573.763609][ T5864] Bluetooth: hci4: command 0x0c1a tx timeout [ 573.891439][T11130] FAULT_INJECTION: forcing a failure. [ 573.891439][T11130] name failslab, interval 1, probability 0, space 0, times 0 [ 573.964278][T11130] CPU: 0 UID: 0 PID: 11130 Comm: syz.2.1090 Tainted: G L syzkaller #0 PREEMPT(full) [ 573.964314][T11130] Tainted: [L]=SOFTLOCKUP [ 573.964321][T11130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 573.964334][T11130] Call Trace: [ 573.964341][T11130] [ 573.964349][T11130] dump_stack_lvl+0x16c/0x1f0 [ 573.964391][T11130] should_fail_ex+0x512/0x640 [ 573.964418][T11130] ? __kvmalloc_node_noprof+0x129/0xa40 [ 573.964471][T11130] should_failslab+0xc2/0x120 [ 573.964508][T11130] __kvmalloc_node_noprof+0x14a/0xa40 [ 573.964542][T11130] ? io_uring_setup+0x2f1/0x1f80 [ 573.964580][T11130] ? io_uring_setup+0x2f1/0x1f80 [ 573.964611][T11130] io_uring_setup+0x2f1/0x1f80 [ 573.964658][T11130] ? __pfx_io_uring_setup+0x10/0x10 [ 573.964691][T11130] ? do_futex+0x122/0x350 [ 573.964717][T11130] ? __pfx_do_futex+0x10/0x10 [ 573.964757][T11130] ? xfd_validate_state+0x61/0x180 [ 573.964776][T11130] ? __pfx_ksys_write+0x10/0x10 [ 573.964814][T11130] __x64_sys_io_uring_setup+0xc2/0x170 [ 573.964847][T11130] do_syscall_64+0xcd/0xf80 [ 573.964869][T11130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.964891][T11130] RIP: 0033:0x7f1e2ab8f7c9 [ 573.964909][T11130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.964929][T11130] RSP: 002b:00007f1e28df6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 573.964949][T11130] RAX: ffffffffffffffda RBX: 00007f1e2ade6090 RCX: 00007f1e2ab8f7c9 [ 573.964964][T11130] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 573.964980][T11130] RBP: 00007f1e2ac13f91 R08: 0000000000000000 R09: 0000000000000000 [ 573.964993][T11130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 573.965006][T11130] R13: 00007f1e2ade6128 R14: 00007f1e2ade6090 R15: 00007ffd966fc048 [ 573.965054][T11130] [ 575.422880][T11148] zswap: compressor 000 not available [ 575.832790][ T5864] Bluetooth: hci4: command 0x0c1a tx timeout [ 575.970921][T11165] random: crng reseeded on system resumption [ 576.085530][T11165] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 579.046168][T11213] futex_wake_op: syz.4.1110 tries to shift op by -2048; fix this program [ 580.961642][ T30] audit: type=1800 audit(4294967414.552:19): pid=11248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1118" name="features" dev="configfs" ino=36215 res=0 errno=0 [ 581.101238][T11246] zswap: compressor not available [ 585.336679][T11330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1134'. [ 585.374332][T11340] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 585.457320][T11343] lo: entered allmulticast mode [ 585.549758][T11343] lo: left allmulticast mode [ 585.871031][T11330] zswap: compressor not available [ 585.904009][T11349] Setting dangerous option i915.mitigations - tainting kernel [ 587.319254][T11370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1141'. [ 587.494391][T11360] FAULT_INJECTION: forcing a failure. [ 587.494391][T11360] name failslab, interval 1, probability 0, space 0, times 0 [ 587.578921][T11360] CPU: 0 UID: 0 PID: 11360 Comm: syz.4.1139 Tainted: G U L syzkaller #0 PREEMPT(full) [ 587.578960][T11360] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 587.578968][T11360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 587.578982][T11360] Call Trace: [ 587.578990][T11360] [ 587.578998][T11360] dump_stack_lvl+0x16c/0x1f0 [ 587.579041][T11360] should_fail_ex+0x512/0x640 [ 587.579069][T11360] ? kmem_cache_alloc_noprof+0x62/0x770 [ 587.579101][T11360] should_failslab+0xc2/0x120 [ 587.579139][T11360] kmem_cache_alloc_noprof+0x83/0x770 [ 587.579167][T11360] ? kmem_cache_alloc_noprof+0x251/0x770 [ 587.579193][T11360] ? anon_vma_fork+0xe6/0x620 [ 587.579223][T11360] ? anon_vma_fork+0xe6/0x620 [ 587.579245][T11360] anon_vma_fork+0xe6/0x620 [ 587.579269][T11360] ? vm_area_dup+0x5a1/0x8d0 [ 587.579295][T11360] dup_mmap+0x12d3/0x20e0 [ 587.579327][T11360] ? __pfx_dup_mmap+0x10/0x10 [ 587.579366][T11360] copy_process+0x3b9f/0x7430 [ 587.579403][T11360] ? __pfx___futex_wait+0x10/0x10 [ 587.579446][T11360] ? __pfx_copy_process+0x10/0x10 [ 587.579480][T11360] ? find_held_lock+0x2b/0x80 [ 587.579514][T11360] ? futex_private_hash_put+0x160/0x1b0 [ 587.579544][T11360] kernel_clone+0xfc/0x910 [ 587.579581][T11360] ? __pfx_kernel_clone+0x10/0x10 [ 587.579632][T11360] __do_sys_clone+0xce/0x120 [ 587.579667][T11360] ? __pfx___do_sys_clone+0x10/0x10 [ 587.579716][T11360] ? xfd_validate_state+0x61/0x180 [ 587.579747][T11360] do_syscall_64+0xcd/0xf80 [ 587.579770][T11360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.579793][T11360] RIP: 0033:0x7fedd298f7c9 [ 587.579811][T11360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.579832][T11360] RSP: 002b:00007fedd38ecfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 587.579863][T11360] RAX: ffffffffffffffda RBX: 00007fedd2be5fa0 RCX: 00007fedd298f7c9 [ 587.579878][T11360] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 587.579891][T11360] RBP: 00007fedd2a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 587.579905][T11360] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 587.579922][T11360] R13: 00007fedd2be6038 R14: 00007fedd2be5fa0 R15: 00007ffd5810cce8 [ 587.579952][T11360] [ 588.407523][ T30] audit: type=1804 audit(4294967421.941:20): pid=11376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1142" name="file0" dev="tmpfs" ino=1649 res=1 errno=0 [ 588.483955][ T30] audit: type=1804 audit(4294967421.951:21): pid=11376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1142" name="file0" dev="tmpfs" ino=1649 res=1 errno=0 [ 588.611605][T11380] ptrace attach of "./syz-executor exec"[5871] was attempted by "./syz-executor exec"[11380] [ 589.524700][T11390] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1144'. [ 589.928689][T11393] netlink: 'syz.2.1144': attribute type 1 has an invalid length. [ 590.037225][T11395] Invalid ELF header magic: != ELF [ 590.846367][T11400] Invalid ELF header magic: != ELF [ 591.183862][T11411] netlink: 'syz.4.1149': attribute type 16 has an invalid length. [ 591.219610][T11411] netlink: 306 bytes leftover after parsing attributes in process `syz.4.1149'. [ 592.139188][T11417] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078000dc0 pfn:0x78000 [ 592.239917][T11417] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 592.296370][T11417] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 592.346243][T11417] raw: ffff888078000dc0 0000000000000000 00000001ffffffff 0000000000000000 [ 592.381780][T11417] page dumped because: unmovable page [ 592.418563][ T30] audit: type=1326 audit(4294967426.072:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11425 comm="syz.3.1153" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a39b8f7c9 code=0x0 [ 592.442719][T11417] page_owner tracks the page as allocated [ 592.486395][T11417] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 8397, tgid 8397 (syz-executor), ts 393678582475, free_ts 383529765652 [ 592.540390][T11417] post_alloc_hook+0x1af/0x220 [ 592.558659][T11417] get_page_from_freelist+0xd0b/0x31a0 [ 592.580368][T11417] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 592.598303][T11417] alloc_pages_bulk_noprof+0x77a/0x1410 [ 592.618261][T11417] __kasan_populate_vmalloc+0xfb/0x220 [ 592.637112][T11417] alloc_vmap_area+0x98d/0x2a50 [ 592.655234][T11417] __get_vm_area_node+0x1ca/0x330 [ 592.672008][T11417] __vmalloc_node_range_noprof+0x247/0x16b0 [ 592.693478][T11417] vmalloc_user_noprof+0x9e/0xe0 [ 592.709600][T11417] kcov_ioctl+0x4c/0x6e0 [ 592.726657][T11417] __x64_sys_ioctl+0x18e/0x210 [ 592.742427][T11417] do_syscall_64+0xcd/0xf80 [ 592.759561][T11417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.780712][T11417] page last free pid 5949 tgid 5949 stack trace: [ 592.802758][T11417] __free_frozen_pages+0x7df/0x1170 [ 592.820836][T11417] pcpu_free_pages.constprop.0+0x126/0x210 [ 592.841719][T11417] pcpu_balance_workfn+0x26b/0xe00 [ 592.859773][T11417] process_one_work+0x9ba/0x1b20 [ 592.875177][T11417] worker_thread+0x6c8/0xf10 [ 592.895413][T11417] kthread+0x3c5/0x780 [ 592.910694][T11417] ret_from_fork+0x983/0xb10 [ 592.927169][T11417] ret_from_fork_asm+0x1a/0x30 [ 592.986357][T11420] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078000dc0 pfn:0x78000 [ 593.033344][T11420] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 593.055035][T11420] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 593.081916][T11420] raw: ffff888078000dc0 0000000000000000 00000001ffffffff 0000000000000000 [ 593.120236][T11420] page dumped because: unmovable page [ 593.158452][T11420] page_owner tracks the page as allocated [ 593.180688][T11420] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 8397, tgid 8397 (syz-executor), ts 393678582475, free_ts 383529765652 [ 593.242270][T11420] post_alloc_hook+0x1af/0x220 [ 593.252374][T11420] get_page_from_freelist+0xd0b/0x31a0 [ 593.279402][T11420] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 593.309730][T11420] alloc_pages_bulk_noprof+0x77a/0x1410 [ 593.332697][T11420] __kasan_populate_vmalloc+0xfb/0x220 [ 593.338243][T11420] alloc_vmap_area+0x98d/0x2a50 [ 593.386303][T11420] __get_vm_area_node+0x1ca/0x330 [ 593.411617][T11420] __vmalloc_node_range_noprof+0x247/0x16b0 [ 593.417653][T11420] vmalloc_user_noprof+0x9e/0xe0 [ 593.431950][T11420] kcov_ioctl+0x4c/0x6e0 [ 593.436254][T11420] __x64_sys_ioctl+0x18e/0x210 [ 593.441052][T11420] do_syscall_64+0xcd/0xf80 [ 593.480287][T11420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.497443][T11420] page last free pid 5949 tgid 5949 stack trace: [ 593.516640][T11420] __free_frozen_pages+0x7df/0x1170 [ 593.536820][T11420] pcpu_free_pages.constprop.0+0x126/0x210 [ 593.552939][T11420] pcpu_balance_workfn+0x26b/0xe00 [ 593.572686][T11420] process_one_work+0x9ba/0x1b20 [ 593.577692][T11420] worker_thread+0x6c8/0xf10 [ 593.613788][T11420] kthread+0x3c5/0x780 [ 593.617927][T11420] ret_from_fork+0x983/0xb10 [ 593.640133][T11420] ret_from_fork_asm+0x1a/0x30 [ 598.077231][T11481] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078000dc0 pfn:0x78000 [ 598.130765][T11481] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 598.173353][T11481] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 598.216049][T11481] raw: ffff888078000dc0 0000000000000000 00000001ffffffff 0000000000000000 [ 598.253656][T11481] page dumped because: unmovable page [ 598.269981][T11481] page_owner tracks the page as allocated [ 598.293723][T11481] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 8397, tgid 8397 (syz-executor), ts 393678582475, free_ts 383529765652 [ 598.335147][T11481] post_alloc_hook+0x1af/0x220 [ 598.353048][T11481] get_page_from_freelist+0xd0b/0x31a0 [ 598.389219][T11481] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 598.395197][T11481] alloc_pages_bulk_noprof+0x77a/0x1410 [ 598.444525][T11481] __kasan_populate_vmalloc+0xfb/0x220 [ 598.476549][T11481] alloc_vmap_area+0x98d/0x2a50 [ 598.496750][T11481] __get_vm_area_node+0x1ca/0x330 [ 598.511899][T11481] __vmalloc_node_range_noprof+0x247/0x16b0 [ 598.548469][T11481] vmalloc_user_noprof+0x9e/0xe0 [ 598.571599][T11481] kcov_ioctl+0x4c/0x6e0 [ 598.587002][T11481] __x64_sys_ioctl+0x18e/0x210 [ 598.612664][T11481] do_syscall_64+0xcd/0xf80 [ 598.635689][T11481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.646733][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1172'. [ 598.667385][T11481] page last free pid 5949 tgid 5949 stack trace: [ 598.693883][T11481] __free_frozen_pages+0x7df/0x1170 [ 598.709352][T11481] pcpu_free_pages.constprop.0+0x126/0x210 [ 598.736027][T11481] pcpu_balance_workfn+0x26b/0xe00 [ 598.783410][T11481] process_one_work+0x9ba/0x1b20 [ 598.808704][T11481] worker_thread+0x6c8/0xf10 [ 598.835854][T11481] kthread+0x3c5/0x780 [ 598.839999][T11481] ret_from_fork+0x983/0xb10 [ 598.890239][T11481] ret_from_fork_asm+0x1a/0x30 [ 599.840347][T11530] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1178'. [ 599.965054][T11530] veth0_macvtap: left promiscuous mode [ 600.017004][T11530] macvtap0: entered promiscuous mode [ 600.031270][T11530] macvtap0: entered allmulticast mode [ 601.361375][T11545] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 601.406225][T11545] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 601.459660][T11545] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 602.313130][T11572] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1187'. [ 602.504196][T11575] netlink: 'syz.0.1187': attribute type 1 has an invalid length. [ 603.575782][T11581] netlink: 'syz.0.1188': attribute type 33 has an invalid length. [ 603.620284][T11581] netlink: 322 bytes leftover after parsing attributes in process `syz.0.1188'. [ 605.302983][T11595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1192'. [ 607.812077][T11619] No such timeout policy "" [ 607.851241][T11619] netlink: Failed to associated timeout policy '' syzkaller syzkaller login: [ 609.300016][T11638] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.113051][T11638] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.620126][T11638] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.126345][T11638] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.678512][T11639] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.099939][T11639] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.335525][T11639] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.477854][T11639] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.553363][ T5864] Bluetooth: hci2: unexpected event 0x03 length: 725 > 11 [ 619.135879][ T5864] Bluetooth: hci0: unexpected event 0x03 length: 725 > 11 [ 619.246478][T11756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1226'. [ 619.549309][T11756] debugfs: '!PjE r' already exists in 'ieee80211' [ 619.585967][T11749] rtc_cmos 00:00: Alarms can be up to one day in the future [ 619.860878][T11770] netlink: 5536 bytes leftover after parsing attributes in process `syz.0.1230'. [ 621.228096][T11786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1233'. [ 621.752145][ T5864] Bluetooth: hci3: unexpected event 0x03 length: 725 > 11 [ 624.022344][T11847] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1248'. [ 626.033520][T11873] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1254'. [ 627.993031][T11916] FAULT_INJECTION: forcing a failure. [ 627.993031][T11916] name failslab, interval 1, probability 0, space 0, times 0 [ 628.055609][T11916] CPU: 0 UID: 0 PID: 11916 Comm: syz.4.1266 Tainted: G U L syzkaller #0 PREEMPT(full) [ 628.055648][T11916] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 628.055656][T11916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 628.055669][T11916] Call Trace: [ 628.055676][T11916] [ 628.055685][T11916] dump_stack_lvl+0x16c/0x1f0 [ 628.055726][T11916] should_fail_ex+0x512/0x640 [ 628.055753][T11916] ? fs_reclaim_acquire+0xae/0x150 [ 628.055792][T11916] should_failslab+0xc2/0x120 [ 628.055827][T11916] kmem_cache_alloc_noprof+0x83/0x770 [ 628.055854][T11916] ? __pfx_map_id_range_down+0x10/0x10 [ 628.055887][T11916] ? security_inode_alloc+0x3b/0x2b0 [ 628.055918][T11916] ? security_inode_alloc+0x3b/0x2b0 [ 628.055941][T11916] security_inode_alloc+0x3b/0x2b0 [ 628.055967][T11916] inode_init_always_gfp+0xced/0x1040 [ 628.056007][T11916] alloc_inode+0x86/0x240 [ 628.056033][T11916] new_inode+0x22/0x1c0 [ 628.056061][T11916] shmem_get_inode+0x19a/0xfb0 [ 628.056097][T11916] ? __vm_enough_memory+0x184/0x3f0 [ 628.056132][T11916] __shmem_file_setup+0x290/0x350 [ 628.056172][T11916] shmem_zero_setup+0x93/0x1b0 [ 628.056201][T11916] __mmap_region+0x2277/0x2a00 [ 628.056233][T11916] ? __pfx___mmap_region+0x10/0x10 [ 628.056273][T11916] ? trace_ignore_this_task+0xbc/0x100 [ 628.056322][T11916] ? finish_task_switch.isra.0+0x202/0xbd0 [ 628.056357][T11916] ? rcu_is_watching+0x12/0xc0 [ 628.056441][T11916] ? rcu_is_watching+0x12/0xc0 [ 628.056479][T11916] mmap_region+0x1ab/0x3f0 [ 628.056507][T11916] ? __get_unmapped_area+0x267/0x3f0 [ 628.056544][T11916] do_mmap+0xa3e/0x1210 [ 628.056582][T11916] ? __pfx_do_mmap+0x10/0x10 [ 628.056616][T11916] ? __pfx_down_write_killable+0x10/0x10 [ 628.056648][T11916] vm_mmap_pgoff+0x29e/0x470 [ 628.056685][T11916] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 628.056724][T11916] ? __x64_sys_futex+0x1e0/0x4c0 [ 628.056748][T11916] ? __x64_sys_futex+0x1e9/0x4c0 [ 628.056778][T11916] ksys_mmap_pgoff+0x7d/0x5c0 [ 628.056810][T11916] ? xfd_validate_state+0x61/0x180 [ 628.056830][T11916] ? __pfx_do_writev+0x10/0x10 [ 628.056864][T11916] __x64_sys_mmap+0x125/0x190 [ 628.056890][T11916] do_syscall_64+0xcd/0xf80 [ 628.056914][T11916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.056936][T11916] RIP: 0033:0x7fedd298f7c9 [ 628.056953][T11916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.056974][T11916] RSP: 002b:00007fedd38ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 628.056995][T11916] RAX: ffffffffffffffda RBX: 00007fedd2be5fa0 RCX: 00007fedd298f7c9 [ 628.057009][T11916] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 628.057022][T11916] RBP: 00007fedd2a13f91 R08: ffffffffffffffff R09: 0000000000008000 [ 628.057036][T11916] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 628.057049][T11916] R13: 00007fedd2be6038 R14: 00007fedd2be5fa0 R15: 00007ffd5810cce8 [ 628.057078][T11916] [ 631.998601][ T5864] Bluetooth: hci2: Malformed Event: 0x02 [ 633.019082][T12003] usb usb36: usbfs: process 12003 (syz.4.1284) did not claim interface 0 before use [ 633.066750][T12002] usb usb36: usbfs: process 12002 (syz.4.1284) did not claim interface 0 before use [ 633.442484][T11999] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1283'. [ 634.018648][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.030044][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.796583][T12036] FAULT_INJECTION: forcing a failure. [ 634.796583][T12036] name failslab, interval 1, probability 0, space 0, times 0 [ 634.862061][T12036] CPU: 0 UID: 0 PID: 12036 Comm: syz.2.1291 Tainted: G U L syzkaller #0 PREEMPT(full) [ 634.862101][T12036] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 634.862109][T12036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 634.862122][T12036] Call Trace: [ 634.862129][T12036] [ 634.862138][T12036] dump_stack_lvl+0x16c/0x1f0 [ 634.862179][T12036] should_fail_ex+0x512/0x640 [ 634.862207][T12036] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 634.862239][T12036] should_failslab+0xc2/0x120 [ 634.862275][T12036] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 634.862304][T12036] ? ktime_get_coarse_real_ts64_mg+0x240/0x300 [ 634.862331][T12036] ? ktime_get_coarse_real_ts64_mg+0x1d4/0x300 [ 634.862359][T12036] ? __d_alloc+0x35/0xa80 [ 634.862384][T12036] ? __d_alloc+0x35/0xa80 [ 634.862402][T12036] __d_alloc+0x35/0xa80 [ 634.862420][T12036] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 634.862461][T12036] d_alloc_pseudo+0x1c/0xc0 [ 634.862489][T12036] alloc_file_pseudo+0xcf/0x230 [ 634.862516][T12036] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 634.862542][T12036] ? security_inode_init_security_anon+0x79/0x240 [ 634.862576][T12036] __anon_inode_getfile+0xe8/0x280 [ 634.862599][T12036] ? _copy_to_user+0x48/0xd0 [ 634.862627][T12036] io_uring_setup+0x144c/0x1f80 [ 634.862672][T12036] ? __pfx_io_uring_setup+0x10/0x10 [ 634.862710][T12036] ? __pfx_do_futex+0x10/0x10 [ 634.862753][T12036] ? xfd_validate_state+0x61/0x180 [ 634.862781][T12036] __x64_sys_io_uring_setup+0xc2/0x170 [ 634.862816][T12036] do_syscall_64+0xcd/0xf80 [ 634.862840][T12036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.862875][T12036] RIP: 0033:0x7f1e2ab8f7c9 [ 634.862892][T12036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.862913][T12036] RSP: 002b:00007f1e2b944038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 634.862933][T12036] RAX: ffffffffffffffda RBX: 00007f1e2ade5fa0 RCX: 00007f1e2ab8f7c9 [ 634.862947][T12036] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 634.862960][T12036] RBP: 00007f1e2ac13f91 R08: 0000000000000000 R09: 0000000000000000 [ 634.862973][T12036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 634.862985][T12036] R13: 00007f1e2ade6038 R14: 00007f1e2ade5fa0 R15: 00007ffd966fc048 [ 634.863013][T12036] [ 636.850481][T12075] tipc: Started in network mode [ 636.878410][T12075] tipc: Node identity ffffffff, cluster identity 4711 [ 636.900259][T12075] tipc: Node number set to 4294967295 [ 638.213646][T12106] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1304'. [ 640.134356][T12139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1320'. [ 642.794536][T12179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1321'. [ 643.001523][T12189] FAULT_INJECTION: forcing a failure. [ 643.001523][T12189] name failslab, interval 1, probability 0, space 0, times 0 [ 643.204759][T12189] CPU: 0 UID: 0 PID: 12189 Comm: syz.4.1324 Tainted: G U L syzkaller #0 PREEMPT(full) [ 643.204797][T12189] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 643.204804][T12189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 643.204817][T12189] Call Trace: [ 643.204823][T12189] [ 643.204831][T12189] dump_stack_lvl+0x16c/0x1f0 [ 643.204872][T12189] should_fail_ex+0x512/0x640 [ 643.204905][T12189] ? __kmalloc_noprof+0xca/0x910 [ 643.204932][T12189] should_failslab+0xc2/0x120 [ 643.204966][T12189] __kmalloc_noprof+0xeb/0x910 [ 643.204991][T12189] ? sk_prot_alloc+0x1a8/0x2a0 [ 643.205016][T12189] ? sk_prot_alloc+0x1a8/0x2a0 [ 643.205034][T12189] sk_prot_alloc+0x1a8/0x2a0 [ 643.205055][T12189] sk_alloc+0x36/0xe30 [ 643.205084][T12189] __netlink_create+0x5e/0x2c0 [ 643.205112][T12189] ? __wake_up+0x3f/0x60 [ 643.205145][T12189] netlink_create+0x39e/0x620 [ 643.205174][T12189] ? __pfx_genl_bind+0x10/0x10 [ 643.205193][T12189] ? __pfx_genl_unbind+0x10/0x10 [ 643.205222][T12189] ? __pfx_genl_release+0x10/0x10 [ 643.205244][T12189] __sock_create+0x339/0x8a0 [ 643.205269][T12189] __sys_socket+0x14d/0x260 [ 643.205289][T12189] ? fput+0x70/0xf0 [ 643.205308][T12189] ? __pfx___sys_socket+0x10/0x10 [ 643.205328][T12189] ? xfd_validate_state+0x61/0x180 [ 643.205347][T12189] ? __pfx_ksys_write+0x10/0x10 [ 643.205381][T12189] __x64_sys_socket+0x72/0xb0 [ 643.205401][T12189] ? lockdep_hardirqs_on+0x7c/0x110 [ 643.205419][T12189] do_syscall_64+0xcd/0xf80 [ 643.205440][T12189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.205460][T12189] RIP: 0033:0x7fedd298f7c9 [ 643.205476][T12189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.205494][T12189] RSP: 002b:00007fedd38cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 643.205512][T12189] RAX: ffffffffffffffda RBX: 00007fedd2be6090 RCX: 00007fedd298f7c9 [ 643.205526][T12189] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 643.205537][T12189] RBP: 00007fedd2a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 643.205550][T12189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.205561][T12189] R13: 00007fedd2be6128 R14: 00007fedd2be6090 R15: 00007ffd5810cce8 [ 643.205587][T12189] [ 652.127751][T12345] netlink: 'syz.2.1355': attribute type 11 has an invalid length. [ 653.079641][T12367] sctp: [Deprecated]: syz.0.1359 (pid 12367) Use of int in maxseg socket option. [ 653.079641][T12367] Use struct sctp_assoc_value instead [ 654.133147][T12384] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 654.140096][T12384] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 657.407518][T12461] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1383'. [ 658.034333][T12472] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1384: iget: checksum invalid [ 658.189817][T12472] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 658.305322][T12472] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1384: iget: checksum invalid [ 658.418709][T12472] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 658.539014][T12472] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1384: iget: checksum invalid [ 658.648851][T12472] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 658.798176][T12472] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1384: iget: checksum invalid [ 658.924940][T12472] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 658.992868][T12472] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 659.085346][T12472] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 661.796135][ T5864] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 662.263868][T12536] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 662.816208][T12552] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1400'. [ 664.175683][T12582] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1972644166.1628069341.3902239349), cmd(3) [ 664.715123][T12574] Invalid ELF header magic: != ELF [ 666.054474][T12598] futex_wake_op: syz.4.1406 tries to shift op by -2048; fix this program [ 666.165456][T12598] futex_wake_op: syz.4.1406 tries to shift op by -2048; fix this program [ 666.234040][T12599] 0x000000000001-0x000000020000 : "" [ 666.475047][T12599] ftl_cs: FTL header corrupt! [ 671.919450][T12694] netlink: 'syz.2.1423': attribute type 1 has an invalid length. [ 672.062668][T12697] netlink: 'syz.4.1425': attribute type 3 has an invalid length. [ 672.296752][T12700] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1426'. [ 674.939052][T12730] QAT: Device 0 not found [ 675.006242][T12730] FAULT_INJECTION: forcing a failure. [ 675.006242][T12730] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 675.089012][T12730] CPU: 0 UID: 0 PID: 12730 Comm: syz.4.1436 Tainted: G U L syzkaller #0 PREEMPT(full) [ 675.089052][T12730] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 675.089061][T12730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 675.089074][T12730] Call Trace: [ 675.089090][T12730] [ 675.089100][T12730] dump_stack_lvl+0x16c/0x1f0 [ 675.089143][T12730] should_fail_ex+0x512/0x640 [ 675.089175][T12730] should_fail_alloc_page+0xe7/0x130 [ 675.089214][T12730] prepare_alloc_pages+0x401/0x670 [ 675.089252][T12730] ? rcu_is_watching+0x12/0xc0 [ 675.089288][T12730] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 675.089325][T12730] ? stack_trace_save+0x8e/0xc0 [ 675.089361][T12730] ? __pfx_stack_trace_save+0x10/0x10 [ 675.089398][T12730] ? stack_depot_save_flags+0x29/0x9b0 [ 675.089427][T12730] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 675.089460][T12730] ? kasan_save_stack+0x42/0x60 [ 675.089490][T12730] ? kasan_save_stack+0x33/0x60 [ 675.089520][T12730] ? kasan_save_track+0x14/0x30 [ 675.089549][T12730] ? __kasan_kmalloc+0xaa/0xb0 [ 675.089590][T12730] ? mon_bin_open+0x1a8/0x4a0 [ 675.089626][T12730] ? do_sys_openat2+0x121/0x290 [ 675.089650][T12730] ? __x64_sys_openat+0x174/0x210 [ 675.089674][T12730] ? do_syscall_64+0xcd/0xf80 [ 675.089693][T12730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.089720][T12730] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 675.089756][T12730] ? policy_nodemask+0xea/0x4e0 [ 675.089792][T12730] alloc_pages_mpol+0x1fb/0x550 [ 675.089828][T12730] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 675.089870][T12730] alloc_pages_noprof+0x131/0x390 [ 675.089905][T12730] get_zeroed_page_noprof+0x18/0xb0 [ 675.089939][T12730] mon_alloc_buff+0xce/0x1b0 [ 675.089972][T12730] ? kasan_save_track+0x14/0x30 [ 675.090005][T12730] mon_bin_open+0x207/0x4a0 [ 675.090044][T12730] ? __pfx_mon_bin_open+0x10/0x10 [ 675.090079][T12730] chrdev_open+0x234/0x6a0 [ 675.090121][T12730] ? __pfx_chrdev_open+0x10/0x10 [ 675.090158][T12730] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 675.090201][T12730] do_dentry_open+0x748/0x1590 [ 675.090233][T12730] ? __pfx_chrdev_open+0x10/0x10 [ 675.090275][T12730] vfs_open+0x82/0x3f0 [ 675.090302][T12730] path_openat+0x2078/0x3140 [ 675.090346][T12730] ? __pfx_path_openat+0x10/0x10 [ 675.090390][T12730] do_filp_open+0x20b/0x470 [ 675.090425][T12730] ? __pfx_do_filp_open+0x10/0x10 [ 675.090479][T12730] ? alloc_fd+0x471/0x7d0 [ 675.090519][T12730] do_sys_openat2+0x121/0x290 [ 675.090544][T12730] ? __pfx_do_sys_openat2+0x10/0x10 [ 675.090580][T12730] __x64_sys_openat+0x174/0x210 [ 675.090606][T12730] ? __pfx___x64_sys_openat+0x10/0x10 [ 675.090643][T12730] do_syscall_64+0xcd/0xf80 [ 675.090666][T12730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.090688][T12730] RIP: 0033:0x7fedd298f7c9 [ 675.090705][T12730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.090726][T12730] RSP: 002b:00007fedd38ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 675.090752][T12730] RAX: ffffffffffffffda RBX: 00007fedd2be5fa0 RCX: 00007fedd298f7c9 [ 675.090785][T12730] RDX: 0000000000086202 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 675.090799][T12730] RBP: 00007fedd2a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 675.090812][T12730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 675.090825][T12730] R13: 00007fedd2be6038 R14: 00007fedd2be5fa0 R15: 00007ffd5810cce8 [ 675.090855][T12730] [ 675.459366][T12735] Process accounting resumed [ 676.978051][T12754] netlink: 'syz.0.1439': attribute type 1 has an invalid length. [ 677.167094][ T30] audit: type=1800 audit(4294967357.367:23): pid=12760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1441" name="lu_gp_id" dev="configfs" ino=45008 res=0 errno=0 [ 677.974641][T12769] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1443'. [ 681.244109][T12792] sd 0:0:1:0: PR command failed: 1026 [ 681.366453][T12812] zswap: compressor not available [ 681.454366][T12792] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 681.461120][T12792] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 687.519524][T12902] zswap: compressor not available [ 688.497092][ T5864] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 688.497120][ T5864] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 688.513391][ T5864] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 688.513413][ T5864] Bluetooth: hci2: Unknown advertising packet type: 0x37 [ 688.520598][ T5864] Bluetooth: hci2: Unknown advertising packet type: 0x11 [ 688.530170][ T5864] Bluetooth: hci2: Unknown advertising packet type: 0x37 [ 688.541605][ T5864] Bluetooth: hci2: Malformed LE Event: 0x0d [ 688.957900][T12936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1472'. [ 689.034699][T12936] bridge0: port 3(bond0) entered disabled state [ 689.210755][T12936] bond0 (unregistering): left allmulticast mode [ 689.240535][T12936] bond_slave_0: left allmulticast mode [ 689.275342][T12936] bond_slave_1: left allmulticast mode [ 689.309492][T12936] bond0 (unregistering): left promiscuous mode [ 689.332552][T12936] bond_slave_0: left promiscuous mode [ 689.350276][T12936] bond_slave_1: left promiscuous mode [ 689.377427][T12936] bridge0: port 3(bond0) entered disabled state [ 689.443119][T12936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.523008][T12936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 689.586209][T12936] bond0 (unregistering): Released all slaves [ 689.917349][T12959] netlink: 146 bytes leftover after parsing attributes in process `syz.0.1478'. [ 690.233671][T12965] Invalid ELF header magic: != ELF [ 692.589369][T12987] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 692.900034][T13014] vhci_hcd vhci_hcd.2: invalid port number 252 [ 693.005170][T13014] vhci_hcd vhci_hcd.2: default hub control req: 040f v0772 i00fc l2 [ 693.679367][T13026] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1494'. [ 694.427020][T13048] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1498: iget: checksum invalid [ 694.656002][T13048] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 694.871668][T13048] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1498: iget: checksum invalid [ 695.110880][T13048] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 695.139129][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.155595][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.223239][T13060] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 695.256569][T13048] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1498: iget: checksum invalid [ 695.420218][T13048] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 695.481307][T13064] can: request_module (can-proto-0) failed. [ 695.640399][T13048] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1498: iget: checksum invalid [ 695.828830][T13048] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 696.020460][T13048] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 696.216721][T13048] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 696.537865][T13089] openvswitch: netlink: IP tunnel TTL not specified. [ 699.260724][T13116] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1514: iget: checksum invalid [ 699.295973][T13117] NFSD: Failed to start, no listeners configured. [ 699.332688][T13116] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 699.437482][T13116] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1514: iget: checksum invalid [ 699.562878][T13116] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 699.638967][T13116] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1514: iget: checksum invalid [ 699.711822][T13116] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 699.783566][T13116] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1514: iget: checksum invalid [ 699.879009][T13116] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 699.997079][T13116] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 700.006773][T13116] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 700.912802][T13142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1521'. [ 701.367826][ T5864] Bluetooth: hci0: Malformed HCI Event [ 702.082742][T13165] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1525'. [ 702.185040][ T5864] Bluetooth: hci4: unexpected event 0x23 length: 127 > 13 [ 703.036546][T13180] syz.2.1528 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 703.427425][T13184] hub 1-0:1.0: USB hub found [ 703.456633][T13184] hub 1-0:1.0: 1 port detected [ 704.893082][T13208] netlink: 350 bytes leftover after parsing attributes in process `syz.4.1534'. [ 706.791402][ T8008] netdevsim netdevsim1335 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.174200][T13241] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.1542: iget: checksum invalid [ 707.235821][T13243] netlink: 350 bytes leftover after parsing attributes in process `syz.2.1544'. [ 707.333929][T13241] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 707.497656][T13247] FAULT_INJECTION: forcing a failure. [ 707.497656][T13247] name failslab, interval 1, probability 0, space 0, times 0 [ 707.528198][T13241] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.1542: iget: checksum invalid [ 707.548905][T13247] CPU: 0 UID: 0 PID: 13247 Comm: syz.2.1545 Tainted: G U L syzkaller #0 PREEMPT(full) [ 707.548943][T13247] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 707.548952][T13247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 707.548966][T13247] Call Trace: [ 707.548973][T13247] [ 707.548981][T13247] dump_stack_lvl+0x16c/0x1f0 [ 707.549024][T13247] should_fail_ex+0x512/0x640 [ 707.549052][T13247] ? kmem_cache_alloc_noprof+0x62/0x770 [ 707.549083][T13247] should_failslab+0xc2/0x120 [ 707.549120][T13247] kmem_cache_alloc_noprof+0x83/0x770 [ 707.549148][T13247] ? prepare_creds+0x2c/0x940 [ 707.549190][T13247] ? prepare_creds+0x2c/0x940 [ 707.549215][T13247] prepare_creds+0x2c/0x940 [ 707.549244][T13247] __sys_setfsuid+0xda/0x350 [ 707.549275][T13247] ? rcu_is_watching+0x12/0xc0 [ 707.549310][T13247] do_syscall_64+0xcd/0xf80 [ 707.549334][T13247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.549357][T13247] RIP: 0033:0x7f1e2ab8f7c9 [ 707.549375][T13247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 707.549398][T13247] RSP: 002b:00007f1e2b944038 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 707.549419][T13247] RAX: ffffffffffffffda RBX: 00007f1e2ade5fa0 RCX: 00007f1e2ab8f7c9 [ 707.549434][T13247] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 707.549448][T13247] RBP: 00007f1e2ac13f91 R08: 0000000000000000 R09: 0000000000000000 [ 707.549461][T13247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 707.549474][T13247] R13: 00007f1e2ade6038 R14: 00007f1e2ade5fa0 R15: 00007ffd966fc048 [ 707.549504][T13247] [ 707.968112][T13241] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 708.066081][T13241] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.1542: iget: checksum invalid [ 708.194849][T13241] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 708.284814][T13241] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.1542: iget: checksum invalid [ 708.353863][T13241] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 708.423433][T13241] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 708.578413][T13241] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 712.383747][T13328] netlink: 'syz.4.1560': attribute type 2 has an invalid length. [ 715.745780][T13394] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1568'. [ 718.152654][T13421] FAULT_INJECTION: forcing a failure. [ 718.152654][T13421] name failslab, interval 1, probability 0, space 0, times 0 [ 718.213755][T13421] CPU: 0 UID: 0 PID: 13421 Comm: syz.4.1576 Tainted: G U L syzkaller #0 PREEMPT(full) [ 718.213793][T13421] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 718.213801][T13421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 718.213814][T13421] Call Trace: [ 718.213821][T13421] [ 718.213829][T13421] dump_stack_lvl+0x16c/0x1f0 [ 718.213872][T13421] should_fail_ex+0x512/0x640 [ 718.213899][T13421] ? fs_reclaim_acquire+0xae/0x150 [ 718.213938][T13421] should_failslab+0xc2/0x120 [ 718.213974][T13421] __kmalloc_noprof+0xeb/0x910 [ 718.213999][T13421] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 718.214039][T13421] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 718.214072][T13421] tomoyo_realpath_from_path+0xc2/0x6e0 [ 718.214113][T13421] tomoyo_check_open_permission+0x2ab/0x3c0 [ 718.214143][T13421] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 718.214201][T13421] ? do_raw_spin_lock+0x12c/0x2b0 [ 718.214235][T13421] tomoyo_file_open+0x6b/0x90 [ 718.214258][T13421] security_file_open+0x84/0x1e0 [ 718.214299][T13421] do_dentry_open+0x597/0x1590 [ 718.214348][T13421] ? security_inode_permission+0xbf/0x260 [ 718.214379][T13421] vfs_open+0x82/0x3f0 [ 718.214406][T13421] path_openat+0x2078/0x3140 [ 718.214448][T13421] ? __pfx_path_openat+0x10/0x10 [ 718.214521][T13421] do_filp_open+0x20b/0x470 [ 718.214555][T13421] ? __pfx_do_filp_open+0x10/0x10 [ 718.214608][T13421] ? alloc_fd+0x471/0x7d0 [ 718.214648][T13421] do_sys_openat2+0x121/0x290 [ 718.214672][T13421] ? __pfx_do_sys_openat2+0x10/0x10 [ 718.214708][T13421] __x64_sys_openat+0x174/0x210 [ 718.214733][T13421] ? __pfx___x64_sys_openat+0x10/0x10 [ 718.214769][T13421] do_syscall_64+0xcd/0xf80 [ 718.214791][T13421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.214813][T13421] RIP: 0033:0x7fedd298f7c9 [ 718.214830][T13421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 718.214851][T13421] RSP: 002b:00007fedd38ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 718.214870][T13421] RAX: ffffffffffffffda RBX: 00007fedd2be5fa0 RCX: 00007fedd298f7c9 [ 718.214885][T13421] RDX: 0000000000101e81 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 718.214898][T13421] RBP: 00007fedd2a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 718.214911][T13421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 718.214924][T13421] R13: 00007fedd2be6038 R14: 00007fedd2be5fa0 R15: 00007ffd5810cce8 [ 718.214952][T13421] [ 718.215072][T13421] ERROR: Out of memory at tomoyo_realpath_from_path. [ 718.539698][T13428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1575'. [ 719.266922][T13432] zswap: compressor not available [ 720.000016][T13455] FAULT_INJECTION: forcing a failure. [ 720.000016][T13455] name fail_futex, interval 1, probability 0, space 0, times 0 [ 720.064195][T13455] CPU: 0 UID: 0 PID: 13455 Comm: syz.2.1582 Tainted: G U L syzkaller #0 PREEMPT(full) [ 720.064234][T13455] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 720.064242][T13455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 720.064255][T13455] Call Trace: [ 720.064262][T13455] [ 720.064271][T13455] dump_stack_lvl+0x16c/0x1f0 [ 720.064312][T13455] should_fail_ex+0x512/0x640 [ 720.064343][T13455] get_futex_key+0x1d0/0x15f0 [ 720.064371][T13455] ? __pfx_get_futex_key+0x10/0x10 [ 720.064405][T13455] futex_wake+0xea/0x530 [ 720.064443][T13455] ? futex_wait+0x120/0x380 [ 720.064472][T13455] ? __pfx_futex_wait+0x10/0x10 [ 720.064500][T13455] ? __pfx_futex_wake+0x10/0x10 [ 720.064550][T13455] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 720.064590][T13455] do_futex+0x1e3/0x350 [ 720.064616][T13455] ? __pfx_do_futex+0x10/0x10 [ 720.064643][T13455] ? __pfx_sched_core_share_pid+0x10/0x10 [ 720.064680][T13455] __x64_sys_futex+0x1e0/0x4c0 [ 720.064710][T13455] ? __pfx___x64_sys_futex+0x10/0x10 [ 720.064736][T13455] ? __pfx___do_sys_prctl+0x10/0x10 [ 720.064769][T13455] do_syscall_64+0xcd/0xf80 [ 720.064791][T13455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.064814][T13455] RIP: 0033:0x7f1e2ab8f7c9 [ 720.064832][T13455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 720.064853][T13455] RSP: 002b:00007f1e28df60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 720.064873][T13455] RAX: ffffffffffffffda RBX: 00007f1e2ade6098 RCX: 00007f1e2ab8f7c9 [ 720.064888][T13455] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1e2ade609c [ 720.064901][T13455] RBP: 00007f1e2ade6090 R08: 00007f1e2b945000 R09: 0000000000000000 [ 720.064915][T13455] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 720.064929][T13455] R13: 00007f1e2ade6128 R14: 00007ffd966fbf60 R15: 00007ffd966fc048 [ 720.064957][T13455] [ 721.028522][T13278] delete_channel: no stack [ 721.588143][ T30] audit: type=1107 audit(4294969450.041:24): pid=13472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 721.650803][ T30] audit: type=1107 audit(4294969450.062:25): pid=13472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 721.715255][ T30] audit: type=1107 audit(4294969450.062:26): pid=13472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 721.917480][T13477] netlink: 'syz.4.1587': attribute type 1 has an invalid length. [ 723.403317][T13484] kexec: Could not allocate control_code_buffer [ 723.804038][T13516] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1595'. [ 723.899037][T13519] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 724.335559][T13521] zswap: compressor not available [ 726.222596][T13567] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1605'. [ 728.740786][T13610] netlink: 146 bytes leftover after parsing attributes in process `syz.2.1615'. [ 729.068655][T13620] vhci_hcd vhci_hcd.0: invalid port number 16 [ 729.523940][T13629] ima: policy update failed [ 729.552467][ T30] audit: type=1802 audit(4294969458.043:27): pid=13629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1619" res=0 errno=0 [ 729.591724][T13629] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1619'. [ 733.141724][T13666] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input34 [ 733.606127][T13672] block2mtd: too many arguments [ 734.679555][ T30] audit: type=1800 audit(4294969463.200:28): pid=13689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1630" name="features" dev="configfs" ino=49863 res=0 errno=0 [ 735.557048][T13696] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 735.591579][T13696] usb usb38: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 735.619313][T13696] vhci_hcd vhci_hcd.2: invalid port number 50 [ 735.638645][T13696] vhci_hcd vhci_hcd.2: default hub control req: 0400 v0000 i0032 l0 [ 736.083365][T13704] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1635'. [ 736.582512][T13716] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078000dc0 pfn:0x78000 [ 736.630951][T13716] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 736.719663][T13716] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 736.785389][T13716] raw: ffff888078000dc0 0000000000000000 00000001ffffffff 0000000000000000 [ 736.828322][T13716] page dumped because: unmovable page [ 736.855670][T13716] page_owner tracks the page as allocated [ 736.908694][T13716] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 8397, tgid 8397 (syz-executor), ts 393678582475, free_ts 383529765652 [ 736.981062][T13716] post_alloc_hook+0x1af/0x220 [ 736.999796][T13716] get_page_from_freelist+0xd0b/0x31a0 [ 737.074874][T13716] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 737.097916][T13716] alloc_pages_bulk_noprof+0x77a/0x1410 [ 737.114101][T13716] __kasan_populate_vmalloc+0xfb/0x220 [ 737.135968][T13716] alloc_vmap_area+0x98d/0x2a50 [ 737.170080][T13716] __get_vm_area_node+0x1ca/0x330 [ 737.179193][T13733] program syz.2.1642 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 737.188581][T13716] __vmalloc_node_range_noprof+0x247/0x16b0 [ 737.213532][T13716] vmalloc_user_noprof+0x9e/0xe0 [ 737.252228][T13716] kcov_ioctl+0x4c/0x6e0 [ 737.279313][T13716] __x64_sys_ioctl+0x18e/0x210 [ 737.295436][T13716] do_syscall_64+0xcd/0xf80 [ 737.368383][T13716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.435485][T13716] page last free pid 5949 tgid 5949 stack trace: [ 737.537660][T13716] __free_frozen_pages+0x7df/0x1170 [ 737.605135][T13716] pcpu_free_pages.constprop.0+0x126/0x210 [ 737.656577][T13716] pcpu_balance_workfn+0x26b/0xe00 [ 737.697053][T13716] process_one_work+0x9ba/0x1b20 [ 737.723719][T13716] worker_thread+0x6c8/0xf10 [ 737.728370][T13716] kthread+0x3c5/0x780 [ 737.782546][T13716] ret_from_fork+0x983/0xb10 [ 737.829748][T13716] ret_from_fork_asm+0x1a/0x30 [ 740.315587][T13784] NFSD: Failed to start, no listeners configured. [ 740.780573][T13793] random: crng reseeded on system resumption [ 742.400136][T13832] NFSD: Failed to start, no listeners configured. [ 744.131330][T13866] FAULT_INJECTION: forcing a failure. [ 744.131330][T13866] name failslab, interval 1, probability 0, space 0, times 0 [ 744.201915][T13866] CPU: 0 UID: 0 PID: 13866 Comm: syz.2.1669 Tainted: G U L syzkaller #0 PREEMPT(full) [ 744.201955][T13866] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 744.201965][T13866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 744.201978][T13866] Call Trace: [ 744.201985][T13866] [ 744.201994][T13866] dump_stack_lvl+0x16c/0x1f0 [ 744.202042][T13866] should_fail_ex+0x512/0x640 [ 744.202070][T13866] ? kmem_cache_alloc_noprof+0x62/0x770 [ 744.202101][T13866] should_failslab+0xc2/0x120 [ 744.202139][T13866] kmem_cache_alloc_noprof+0x83/0x770 [ 744.202167][T13866] ? getname_flags.part.0+0x4c/0x550 [ 744.202199][T13866] ? getname_flags.part.0+0x4c/0x550 [ 744.202223][T13866] getname_flags.part.0+0x4c/0x550 [ 744.202252][T13866] getname_flags+0x93/0xf0 [ 744.202284][T13866] do_sys_openat2+0xb9/0x290 [ 744.202310][T13866] ? __pfx_do_sys_openat2+0x10/0x10 [ 744.202347][T13866] __x64_sys_openat+0x174/0x210 [ 744.202374][T13866] ? __pfx___x64_sys_openat+0x10/0x10 [ 744.202412][T13866] do_syscall_64+0xcd/0xf80 [ 744.202436][T13866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.202459][T13866] RIP: 0033:0x7f1e2ab8f7c9 [ 744.202477][T13866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 744.202499][T13866] RSP: 002b:00007f1e2b944038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 744.202520][T13866] RAX: ffffffffffffffda RBX: 00007f1e2ade5fa0 RCX: 00007f1e2ab8f7c9 [ 744.202535][T13866] RDX: 0000000000000200 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 744.202549][T13866] RBP: 00007f1e2ac13f91 R08: 0000000000000000 R09: 0000000000000000 [ 744.202563][T13866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 744.202576][T13866] R13: 00007f1e2ade6038 R14: 00007f1e2ade5fa0 R15: 00007ffd966fc048 [ 744.202605][T13866] [ 744.396976][T13869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1668'. [ 744.407163][T13869] netlink: 'syz.4.1668': attribute type 1 has an invalid length. [ 744.414908][T13869] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1668'. [ 744.868458][T13876] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1670'. [ 744.931802][T13876] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1670'. [ 744.971669][T13876] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1670'. [ 744.981648][T13876] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1670'. [ 745.028520][T13876] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1670'. [ 745.038599][T13876] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1670'. [ 745.070529][T13881] futex_wake_op: syz.4.1671 tries to shift op by -2048; fix this program [ 745.079522][T13876] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1670'. [ 745.092571][T13881] futex_wake_op: syz.4.1671 tries to shift op by -2048; fix this program [ 745.103075][T13876] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1670'. [ 752.158836][T13967] kAFS: bad VL server IP address [ 753.040487][T13983] __nla_validate_parse: 1 callbacks suppressed [ 753.040504][T13983] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1690'. [ 753.190610][T13967] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 753.265350][T13967] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 753.310661][T13967] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 753.390992][T13967] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 753.712572][T13987] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1691'. [ 754.743642][ T5864] Bluetooth: hci0: command 0x0c1a tx timeout [ 755.303684][T11124] Bluetooth: hci3: command 0x0c1a tx timeout [ 755.310622][ T5864] Bluetooth: hci2: command 0x0c1a tx timeout [ 755.458575][T11124] Bluetooth: hci4: command 0x0c1a tx timeout [ 756.170557][ T30] audit: type=1804 audit(4294969484.791:29): pid=14012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1696" name="file0" dev="tmpfs" ino=2571 res=1 errno=0 [ 756.260816][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 756.267301][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 756.304514][ T30] audit: type=1804 audit(4294969484.831:30): pid=14027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1696" name="file0" dev="tmpfs" ino=2571 res=1 errno=0 [ 760.580322][T14092] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.1716: iget: checksum invalid [ 760.638756][T14092] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 760.701807][T14092] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.1716: iget: checksum invalid [ 760.782478][T14092] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 760.831040][T14092] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.1716: iget: checksum invalid [ 760.875987][T14092] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 760.920597][T14092] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.1716: iget: checksum invalid [ 760.981339][T14092] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 761.032757][T14092] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 761.073530][T14092] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 762.778695][T14131] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 764.592163][T14166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1733'. [ 765.947726][T14191] futex_wake_op: syz.2.1737 tries to shift op by -2048; fix this program [ 766.800049][T14210] FAULT_INJECTION: forcing a failure. [ 766.800049][T14210] name failslab, interval 1, probability 0, space 0, times 0 [ 766.844778][T14210] CPU: 0 UID: 0 PID: 14210 Comm: syz.4.1741 Tainted: G U L syzkaller #0 PREEMPT(full) [ 766.844816][T14210] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 766.844824][T14210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 766.844837][T14210] Call Trace: [ 766.844843][T14210] [ 766.844851][T14210] dump_stack_lvl+0x16c/0x1f0 [ 766.844892][T14210] should_fail_ex+0x512/0x640 [ 766.844917][T14210] ? kmem_cache_alloc_noprof+0x62/0x770 [ 766.844948][T14210] should_failslab+0xc2/0x120 [ 766.844982][T14210] kmem_cache_alloc_noprof+0x83/0x770 [ 766.845017][T14210] ? getname_flags.part.0+0x4c/0x550 [ 766.845047][T14210] ? getname_flags.part.0+0x4c/0x550 [ 766.845070][T14210] ? getname_flags.part.0+0x1c5/0x550 [ 766.845093][T14210] getname_flags.part.0+0x4c/0x550 [ 766.845121][T14210] getname_flags+0x93/0xf0 [ 766.845150][T14210] do_sys_openat2+0xb9/0x290 [ 766.845175][T14210] ? __pfx_do_sys_openat2+0x10/0x10 [ 766.845211][T14210] __x64_sys_open+0x153/0x1e0 [ 766.845236][T14210] ? __pfx___x64_sys_open+0x10/0x10 [ 766.845267][T14210] ? rcu_is_watching+0x12/0xc0 [ 766.845301][T14210] do_syscall_64+0xcd/0xf80 [ 766.845323][T14210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.845346][T14210] RIP: 0033:0x7fedd298f7c9 [ 766.845363][T14210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 766.845385][T14210] RSP: 002b:00007fedd38ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 766.845405][T14210] RAX: ffffffffffffffda RBX: 00007fedd2be5fa0 RCX: 00007fedd298f7c9 [ 766.845419][T14210] RDX: b5d1af1605322dd2 RSI: 0000000000080400 RDI: 0000000000000000 [ 766.845433][T14210] RBP: 00007fedd2a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 766.845446][T14210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 766.845459][T14210] R13: 00007fedd2be6038 R14: 00007fedd2be5fa0 R15: 00007ffd5810cce8 [ 766.845487][T14210] [ 771.500781][T14279] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 772.294738][T14288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1758'. [ 773.607368][T14299] zswap: compressor not available [ 775.812609][T14330] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 775.904409][T14330] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 775.980678][T14330] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 776.574757][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 776.598773][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 776.607002][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 776.615227][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 776.627636][ T5864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 777.525143][T14339] netlink: 'syz.4.1766': attribute type 15 has an invalid length. [ 777.533010][T14339] netlink: 186 bytes leftover after parsing attributes in process `syz.4.1766'. [ 777.840748][T14335] chnl_net:caif_netlink_parms(): no params data found [ 777.906218][ T8522] Process accounting resumed [ 778.206456][T14354] FAULT_INJECTION: forcing a failure. [ 778.206456][T14354] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 778.290082][T14354] CPU: 0 UID: 0 PID: 14354 Comm: syz.4.1769 Tainted: G U L syzkaller #0 PREEMPT(full) [ 778.290144][T14354] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 778.290153][T14354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 778.290166][T14354] Call Trace: [ 778.290175][T14354] [ 778.290184][T14354] dump_stack_lvl+0x16c/0x1f0 [ 778.290227][T14354] should_fail_ex+0x512/0x640 [ 778.290258][T14354] strncpy_from_user+0x3b/0x2e0 [ 778.290285][T14354] getname_flags.part.0+0x8f/0x550 [ 778.290315][T14354] getname_flags+0x93/0xf0 [ 778.290345][T14354] do_sys_openat2+0xb9/0x290 [ 778.290371][T14354] ? __pfx_do_sys_openat2+0x10/0x10 [ 778.290395][T14354] ? __pfx___might_resched+0x10/0x10 [ 778.290427][T14354] ? blkcg_maybe_throttle_current+0x650/0xf30 [ 778.290457][T14354] ? _raw_spin_unlock_irq+0x23/0x50 [ 778.290496][T14354] __x64_sys_openat+0x174/0x210 [ 778.290522][T14354] ? __pfx___x64_sys_openat+0x10/0x10 [ 778.290560][T14354] do_syscall_64+0xcd/0xf80 [ 778.290583][T14354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.290605][T14354] RIP: 0033:0x7fedd298f7c9 [ 778.290622][T14354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 778.290644][T14354] RSP: 002b:00007fedd38ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 778.290664][T14354] RAX: ffffffffffffffda RBX: 00007fedd2be5fa0 RCX: 00007fedd298f7c9 [ 778.290679][T14354] RDX: 0000000000008006 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 778.290693][T14354] RBP: 00007fedd2a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 778.290707][T14354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 778.290720][T14354] R13: 00007fedd2be6038 R14: 00007fedd2be5fa0 R15: 00007ffd5810cce8 [ 778.290748][T14354] [ 778.487691][T14335] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.494988][T14335] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.502221][T14335] bridge_slave_0: entered allmulticast mode [ 778.509732][T14335] bridge_slave_0: entered promiscuous mode [ 778.517618][T14335] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.525324][T14335] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.534053][T14335] bridge_slave_1: entered allmulticast mode [ 778.541652][T14335] bridge_slave_1: entered promiscuous mode [ 778.575579][T14335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 778.587536][T14335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 778.620998][T14335] team0: Port device team_slave_0 added [ 778.629734][T14335] team0: Port device team_slave_1 added [ 778.657803][T14335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 778.665656][T14335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 778.743778][T14335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 778.793293][ T5864] Bluetooth: hci1: command tx timeout [ 779.069664][T14335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.102541][T14335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 779.193177][T14335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.416588][T14335] hsr_slave_0: entered promiscuous mode [ 779.460284][T14335] hsr_slave_1: entered promiscuous mode [ 780.847248][ T5864] Bluetooth: hci1: command tx timeout [ 781.211493][T14335] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 781.285694][T14335] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 781.421757][T14335] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 781.488527][T14335] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 782.039517][T14396] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1777'. [ 782.153870][ T5864] Bluetooth: hci0: unexpected event 0x23 length: 127 > 13 [ 782.249960][T14397] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1777'. [ 782.312143][T14335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 782.896415][T14407] netlink: 186 bytes leftover after parsing attributes in process `syz.4.1779'. [ 782.916965][ T5864] Bluetooth: hci1: command tx timeout [ 782.943995][T14335] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.002422][ T4473] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.009715][ T4473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 783.128198][ T8013] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.135442][ T8013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 784.985369][ T5864] Bluetooth: hci1: command tx timeout [ 785.241020][T14335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 785.630376][T14455] Invalid ELF header magic: != ELF [ 786.550680][T14335] veth0_vlan: entered promiscuous mode [ 786.804315][T14335] veth1_vlan: entered promiscuous mode [ 787.058069][T14335] veth0_macvtap: entered promiscuous mode [ 787.133182][T14335] veth1_macvtap: entered promiscuous mode [ 787.258002][T14335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 787.334533][T14335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 787.420018][ T3739] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.489083][ T3739] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.578597][ T3739] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.683587][ T3739] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.907800][ T6590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.966674][ T6590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.054982][T14478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1792'. [ 788.080159][ T4473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.125533][ T4473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.376175][ T6587] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.841726][ T6587] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.232067][ T6587] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.622894][T14579] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1814'. [ 794.803707][T14583] FAULT_INJECTION: forcing a failure. [ 794.803707][T14583] name failslab, interval 1, probability 0, space 0, times 0 [ 794.875463][ T6587] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.943506][T14583] CPU: 0 UID: 0 PID: 14583 Comm: syz.5.1815 Tainted: G U L syzkaller #0 PREEMPT(full) [ 794.943553][T14583] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 794.943561][T14583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 794.943575][T14583] Call Trace: [ 794.943582][T14583] [ 794.943590][T14583] dump_stack_lvl+0x16c/0x1f0 [ 794.943633][T14583] should_fail_ex+0x512/0x640 [ 794.943660][T14583] ? __kmalloc_cache_noprof+0x5f/0x800 [ 794.943689][T14583] should_failslab+0xc2/0x120 [ 794.943724][T14583] __kmalloc_cache_noprof+0x80/0x800 [ 794.943771][T14583] ? netdev_create_hash+0x3c/0xc0 [ 794.943798][T14583] ? netdev_create_hash+0x3c/0xc0 [ 794.943818][T14583] ? __pfx_netdev_init+0x10/0x10 [ 794.943837][T14583] netdev_create_hash+0x3c/0xc0 [ 794.943858][T14583] ? __pfx_netdev_init+0x10/0x10 [ 794.943878][T14583] netdev_init+0x70/0x230 [ 794.943898][T14583] ops_init+0x1e2/0x5f0 [ 794.943936][T14583] setup_net+0x11d/0x3a0 [ 794.943970][T14583] ? __pfx_setup_net+0x10/0x10 [ 794.944002][T14583] ? lockdep_init_map_type+0x5c/0x270 [ 794.944027][T14583] ? mutex_init_lockep+0x110/0x150 [ 794.944055][T14583] copy_net_ns+0x351/0x7c0 [ 794.944078][T14583] create_new_namespaces+0x3ea/0xab0 [ 794.944116][T14583] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 794.944151][T14583] ksys_unshare+0x45b/0xa40 [ 794.944173][T14583] ? __pfx_ksys_unshare+0x10/0x10 [ 794.944194][T14583] ? xfd_validate_state+0x61/0x180 [ 794.944224][T14583] __x64_sys_unshare+0x31/0x40 [ 794.944244][T14583] do_syscall_64+0xcd/0xf80 [ 794.944267][T14583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.944291][T14583] RIP: 0033:0x7f043f58f7c9 [ 794.944308][T14583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 794.944331][T14583] RSP: 002b:00007f0440466038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 794.944352][T14583] RAX: ffffffffffffffda RBX: 00007f043f7e5fa0 RCX: 00007f043f58f7c9 [ 794.944367][T14583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 794.944381][T14583] RBP: 00007f043f613f91 R08: 0000000000000000 R09: 0000000000000000 [ 794.944395][T14583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 794.944408][T14583] R13: 00007f043f7e6038 R14: 00007f043f7e5fa0 R15: 00007ffd783d96e8 [ 794.944438][T14583] [ 796.705588][ T6587] bridge_slave_1: left allmulticast mode [ 796.711294][ T6587] bridge_slave_1: left promiscuous mode [ 796.774975][T14603] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 796.785503][ T6587] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.867624][ T6587] bridge_slave_0: left allmulticast mode [ 796.907194][ T6587] bridge_slave_0: left promiscuous mode [ 796.955330][ T6587] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.005219][T14625] zswap: compressor not available [ 798.950555][ T6587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 799.032839][ T6587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 799.084964][ T6587] bond0 (unregistering): Released all slaves [ 800.552200][T14648] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 800.915869][T14658] FAULT_INJECTION: forcing a failure. [ 800.915869][T14658] name failslab, interval 1, probability 0, space 0, times 0 [ 801.128552][T14658] CPU: 0 UID: 0 PID: 14658 Comm: syz.4.1826 Tainted: G U L syzkaller #0 PREEMPT(full) [ 801.128592][T14658] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 801.128601][T14658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 801.128615][T14658] Call Trace: [ 801.128622][T14658] [ 801.128630][T14658] dump_stack_lvl+0x16c/0x1f0 [ 801.128687][T14658] should_fail_ex+0x512/0x640 [ 801.128713][T14658] ? __kmalloc_noprof+0xca/0x910 [ 801.128741][T14658] should_failslab+0xc2/0x120 [ 801.128776][T14658] __kmalloc_noprof+0xeb/0x910 [ 801.128800][T14658] ? lsm_blob_alloc+0x68/0x90 [ 801.128839][T14658] ? lsm_blob_alloc+0x68/0x90 [ 801.128878][T14658] lsm_blob_alloc+0x68/0x90 [ 801.128913][T14658] security_prepare_creds+0x2f/0x270 [ 801.128948][T14658] prepare_creds+0x5d6/0x940 [ 801.128977][T14658] set_current_groups+0x15/0xd0 [ 801.129001][T14658] __do_sys_setgroups+0x3e0/0x4f0 [ 801.129030][T14658] do_syscall_64+0xcd/0xf80 [ 801.129053][T14658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.129075][T14658] RIP: 0033:0x7fedd298f7c9 [ 801.129092][T14658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 801.129114][T14658] RSP: 002b:00007fedd38cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 801.129135][T14658] RAX: ffffffffffffffda RBX: 00007fedd2be6090 RCX: 00007fedd298f7c9 [ 801.129149][T14658] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 801.129162][T14658] RBP: 00007fedd2a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 801.129175][T14658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 801.129188][T14658] R13: 00007fedd2be6128 R14: 00007fedd2be6090 R15: 00007ffd5810cce8 [ 801.129216][T14658] [ 802.636947][T14695] netlink: 78 bytes leftover after parsing attributes in process `syz.2.1833'. [ 806.177953][ T6587] hsr_slave_0: left promiscuous mode [ 806.256529][ T6587] hsr_slave_1: left promiscuous mode [ 806.272182][ T6587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 806.309617][ T6587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 807.469389][ T6587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 807.483404][ T6587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 807.613544][ T6587] veth1_macvtap: left promiscuous mode [ 807.628782][ T6587] veth0_macvtap: left promiscuous mode [ 808.571669][ T6587] team0 (unregistering): Port device team_slave_0 removed [ 810.349836][T14795] Invalid ELF header magic: != ELF [ 811.070526][T14805] vhci_hcd vhci_hcd.3: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 812.406417][T14825] netlink: 314 bytes leftover after parsing attributes in process `syz.0.1855'. [ 813.379492][T14856] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1863'. [ 813.429414][T14861] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1863'. [ 813.714263][T14868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1865'. [ 814.840154][T14884] vivid-009: ================= START STATUS ================= [ 814.882090][T14884] vivid-009: Radio HW Seek Mode: Bounded [ 814.909833][T14884] vivid-009: Radio Programmable HW Seek: false [ 814.916130][T14884] vivid-009: RDS Rx I/O Mode: Block I/O [ 814.961911][T14884] vivid-009: Generate RBDS Instead of RDS: false [ 814.968329][T14884] vivid-009: RDS Reception: true [ 815.028233][T14884] vivid-009: RDS Program Type: 0 inactive [ 815.068727][T14884] vivid-009: RDS PS Name: inactive [ 815.130507][T14884] vivid-009: RDS Radio Text: inactive [ 815.170615][T14884] vivid-009: RDS Traffic Announcement: false inactive [ 815.205669][T14884] vivid-009: RDS Traffic Program: false inactive [ 815.242210][T14884] vivid-009: RDS Music: false inactive [ 815.277726][T14884] vivid-009: ================== END STATUS ================== [ 815.520505][T14898] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1872'. [ 815.995309][T14914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1874'. [ 816.070602][T14905] NFSD: Failed to start, no listeners configured. [ 816.575102][T14926] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1877'. [ 817.129989][T14930] Invalid ELF header magic: != ELF [ 817.384847][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 817.391852][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 820.567554][T15012] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff8165a13a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 820.583343][T15012] Call Trace: [ 820.586646][T15012] [ 820.589613][T15012] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 820.596311][T15012] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 820.602155][T15012] ? debug_object_deactivate+0x1ec/0x3a0 [ 820.607834][T15012] mce_cpu_restart+0xd9/0x1f0 [ 820.612528][T15012] ? __pfx_mce_cpu_restart+0x10/0x10 [ 820.617823][T15012] smp_call_function_many_cond+0x1200/0x15e0 [ 820.623841][T15012] ? __pfx_mce_cpu_restart+0x10/0x10 [ 820.629143][T15012] ? mark_held_locks+0x49/0x80 [ 820.633932][T15012] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 820.639774][T15012] ? lockdep_hardirqs_on+0x7c/0x110 [ 820.645023][T15012] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 820.650869][T15012] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 820.657247][T15012] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 820.663266][T15012] ? __pfx_mce_cpu_restart+0x10/0x10 [ 820.668583][T15012] on_each_cpu_cond_mask+0x40/0x90 [ 820.673741][T15012] set_bank+0x240/0x3a0 [ 820.677912][T15012] ? __pfx_set_bank+0x10/0x10 [ 820.682600][T15012] ? find_held_lock+0x2b/0x80 [ 820.687308][T15012] ? __pfx_set_bank+0x10/0x10 [ 820.692000][T15012] dev_attr_store+0x58/0x80 [ 820.696528][T15012] ? __pfx_dev_attr_store+0x10/0x10 [ 820.701764][T15012] sysfs_kf_write+0xf2/0x150 [ 820.706381][T15012] kernfs_fop_write_iter+0x3af/0x570 [ 820.711687][T15012] ? __pfx_sysfs_kf_write+0x10/0x10 [ 820.716902][T15012] vfs_write+0x7d3/0x11d0 [ 820.721257][T15012] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 820.727109][T15012] ? __pfx_vfs_write+0x10/0x10 [ 820.731921][T15012] ksys_write+0x12a/0x250 [ 820.736317][T15012] ? __pfx_ksys_write+0x10/0x10 [ 820.741200][T15012] do_syscall_64+0xcd/0xf80 [ 820.745719][T15012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.751623][T15012] RIP: 0033:0x7fedd298f7c9 [ 820.756048][T15012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 820.775684][T15012] RSP: 002b:00007fedd38ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 820.784129][T15012] RAX: ffffffffffffffda RBX: 00007fedd2be5fa0 RCX: 00007fedd298f7c9 [ 820.792168][T15012] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003 [ 820.800152][T15012] RBP: 00007fedd2a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 820.808136][T15012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 820.816116][T15012] R13: 00007fedd2be6038 R14: 00007fedd2be5fa0 R15: 00007ffd5810cce8 [ 820.824114][T15012] [ 821.178837][T15012] ptrace attach of "./syz-executor exec"[8404] was attempted by "./syz-executor exec"[15012] [ 821.205771][T15012] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 821.277175][ T5864] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 821.924794][T15029] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 824.760588][T15109] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1908'. [ 824.829311][T15109] macsec0: entered promiscuous mode [ 824.864576][T15109] macsec0: entered allmulticast mode [ 824.900277][T15109] veth1_macvtap: entered allmulticast mode [ 832.580920][T15260] FAULT_INJECTION: forcing a failure. [ 832.580920][T15260] name failslab, interval 1, probability 0, space 0, times 0 [ 832.607465][T15260] CPU: 0 UID: 0 PID: 15260 Comm: syz.2.1938 Tainted: G U L syzkaller #0 PREEMPT(full) [ 832.607505][T15260] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 832.607514][T15260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 832.607527][T15260] Call Trace: [ 832.607534][T15260] [ 832.607544][T15260] dump_stack_lvl+0x16c/0x1f0 [ 832.607587][T15260] should_fail_ex+0x512/0x640 [ 832.607615][T15260] ? kmem_cache_alloc_noprof+0x62/0x770 [ 832.607648][T15260] should_failslab+0xc2/0x120 [ 832.607684][T15260] kmem_cache_alloc_noprof+0x83/0x770 [ 832.607713][T15260] ? stack_depot_save_flags+0x29/0x9b0 [ 832.607740][T15260] ? alloc_empty_file+0x55/0x1e0 [ 832.607770][T15260] ? alloc_empty_file+0x55/0x1e0 [ 832.607798][T15260] ? kasan_save_track+0x14/0x30 [ 832.607829][T15260] alloc_empty_file+0x55/0x1e0 [ 832.607861][T15260] path_openat+0xde/0x3140 [ 832.607895][T15260] ? do_syscall_64+0xcd/0xf80 [ 832.607915][T15260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.607947][T15260] ? __pfx_path_openat+0x10/0x10 [ 832.607992][T15260] do_filp_open+0x20b/0x470 [ 832.608028][T15260] ? __pfx_do_filp_open+0x10/0x10 [ 832.608083][T15260] ? alloc_fd+0x471/0x7d0 [ 832.608138][T15260] do_sys_openat2+0x121/0x290 [ 832.608165][T15260] ? __pfx_do_sys_openat2+0x10/0x10 [ 832.608203][T15260] __x64_sys_openat+0x174/0x210 [ 832.608230][T15260] ? __pfx___x64_sys_openat+0x10/0x10 [ 832.608259][T15260] ? syscall_user_dispatch+0x78/0x140 [ 832.608296][T15260] do_syscall_64+0xcd/0xf80 [ 832.608319][T15260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.608342][T15260] RIP: 0033:0x7f1e2ab8f7c9 [ 832.608359][T15260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 832.608382][T15260] RSP: 002b:00007f1e2b944038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 832.608403][T15260] RAX: ffffffffffffffda RBX: 00007f1e2ade5fa0 RCX: 00007f1e2ab8f7c9 [ 832.608418][T15260] RDX: 0000000000121000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 832.608433][T15260] RBP: 00007f1e2ac13f91 R08: 0000000000000000 R09: 0000000000000000 [ 832.608447][T15260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 832.608462][T15260] R13: 00007f1e2ade6038 R14: 00007f1e2ade5fa0 R15: 00007ffd966fc048 [ 832.608492][T15260] [ 834.452498][T15291] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1946'. [ 835.124318][ T5864] Bluetooth: hci3: command 0x1003 tx timeout [ 835.124405][T11124] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 835.311570][T15310] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1951: iget: checksum invalid [ 835.354232][T15310] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 835.354472][T15310] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1951: iget: checksum invalid [ 835.355232][T15310] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 835.355410][T15310] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1951: iget: checksum invalid [ 835.356034][T15310] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 835.356191][T15310] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1951: iget: checksum invalid [ 835.356690][T15310] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 835.356727][T15310] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 835.356755][T15310] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 836.379077][T15335] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1956'. [ 839.812013][T15404] random: crng reseeded on system resumption [ 840.570208][T15418] netlink: 29 bytes leftover after parsing attributes in process `syz.5.1974'. [ 840.618542][T15417] netlink: 29 bytes leftover after parsing attributes in process `syz.5.1974'. [ 842.134176][T15445] FAULT_INJECTION: forcing a failure. [ 842.134176][T15445] name failslab, interval 1, probability 0, space 0, times 0 [ 842.234412][T15445] CPU: 0 UID: 0 PID: 15445 Comm: syz.5.1980 Tainted: G U L syzkaller #0 PREEMPT(full) [ 842.234452][T15445] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 842.234461][T15445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 842.234474][T15445] Call Trace: [ 842.234481][T15445] [ 842.234489][T15445] dump_stack_lvl+0x16c/0x1f0 [ 842.234531][T15445] should_fail_ex+0x512/0x640 [ 842.234558][T15445] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 842.234595][T15445] should_failslab+0xc2/0x120 [ 842.234631][T15445] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 842.234665][T15445] ? __udp_init+0x37/0x80 [ 842.234695][T15445] ? kmemdup_noprof+0x29/0x60 [ 842.234720][T15445] kmemdup_noprof+0x29/0x60 [ 842.234746][T15445] ? __pfx___udp_init+0x10/0x10 [ 842.234770][T15445] __udp_init+0x37/0x80 [ 842.234795][T15445] ip_vs_protocol_net_init+0x194/0x300 [ 842.234824][T15445] __ip_vs_init+0x239/0x520 [ 842.234856][T15445] ? __pfx___ip_vs_init+0x10/0x10 [ 842.234909][T15445] ops_init+0x1e2/0x5f0 [ 842.234945][T15445] setup_net+0x11d/0x3a0 [ 842.234979][T15445] ? __pfx_setup_net+0x10/0x10 [ 842.235009][T15445] ? lockdep_init_map_type+0x5c/0x270 [ 842.235034][T15445] ? mutex_init_lockep+0x110/0x150 [ 842.235060][T15445] copy_net_ns+0x351/0x7c0 [ 842.235083][T15445] create_new_namespaces+0x3ea/0xab0 [ 842.235121][T15445] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 842.235154][T15445] ksys_unshare+0x45b/0xa40 [ 842.235174][T15445] ? __pfx_ksys_unshare+0x10/0x10 [ 842.235195][T15445] ? xfd_validate_state+0x61/0x180 [ 842.235224][T15445] __x64_sys_unshare+0x31/0x40 [ 842.235250][T15445] do_syscall_64+0xcd/0xf80 [ 842.235274][T15445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.235296][T15445] RIP: 0033:0x7f043f58f7c9 [ 842.235313][T15445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 842.235335][T15445] RSP: 002b:00007f0440466038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 842.235356][T15445] RAX: ffffffffffffffda RBX: 00007f043f7e5fa0 RCX: 00007f043f58f7c9 [ 842.235370][T15445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 842.235383][T15445] RBP: 00007f043f613f91 R08: 0000000000000000 R09: 0000000000000000 [ 842.235396][T15445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 842.235409][T15445] R13: 00007f043f7e6038 R14: 00007f043f7e5fa0 R15: 00007ffd783d96e8 [ 842.235449][T15445] [ 843.552584][T15468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1988'. [ 843.919975][T15474] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1991'. [ 844.033055][T11124] Bluetooth: hci1: unexpected event 0x23 length: 127 > 13 [ 844.233674][T15483] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1991'. [ 845.022045][T15474] bond0: (slave bond_slave_1): Releasing backup interface [ 846.662425][T15526] tipc: Can't bind to reserved service type 0 [ 849.205780][ T30] audit: type=1800 audit(4295035115.308:31): pid=15570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2016" name="dbroot" dev="configfs" ino=62665 res=0 errno=0 [ 849.272286][T15569] Invalid ELF header magic: != ELF [ 849.929957][T15569] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input36 [ 852.679084][T15610] netlink: 'syz.4.2025': attribute type 3 has an invalid length. [ 852.782631][T15610] netlink: 332 bytes leftover after parsing attributes in process `syz.4.2025'. [ 853.923851][T15631] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.2029: iget: checksum invalid [ 854.045443][T15631] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 854.156955][T15631] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.2029: iget: checksum invalid [ 854.263734][T15631] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 854.370405][T15631] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.2029: iget: checksum invalid [ 854.430322][T15642] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2033'. [ 854.479869][T15631] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 854.520630][T15642] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2033'. [ 854.546768][T11124] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 854.639471][T15631] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.2029: iget: checksum invalid [ 854.746652][T15631] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 854.857765][T15631] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 854.964429][T15631] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 858.993334][ T30] audit: type=1326 audit(4295035125.159:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15696 comm="syz.4.2048" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fedd298f7c9 code=0x0 [ 859.018509][T15698] openvswitch: netlink: Flow key attribute not present in set flow. [ 859.811135][T15720] input: 9%vJ,6 as /devices/virtual/input/input37 [ 861.341904][T15738] netlink: 62 bytes leftover after parsing attributes in process `syz.0.2058'. [ 861.482944][T15740] netlink: 62 bytes leftover after parsing attributes in process `syz.0.2058'. [ 861.728736][T15740] netlink: 62 bytes leftover after parsing attributes in process `syz.0.2058'. [ 861.835824][T15740] netlink: 62 bytes leftover after parsing attributes in process `syz.0.2058'. [ 862.065180][T15740] netlink: 62 bytes leftover after parsing attributes in process `syz.0.2058'. [ 862.201827][T15740] netlink: 62 bytes leftover after parsing attributes in process `syz.0.2058'. [ 862.350283][T15740] netlink: 62 bytes leftover after parsing attributes in process `syz.0.2058'. [ 862.441517][T15740] netlink: 62 bytes leftover after parsing attributes in process `syz.0.2058'. [ 862.724016][T15756] random: crng reseeded on system resumption [ 862.852317][T15757] ptrace attach of "./syz-executor exec"[5869] was attempted by ""[15757] [ 862.894604][T15740] netlink: 62 bytes leftover after parsing attributes in process `syz.0.2058'. [ 862.977369][T15740] netlink: 62 bytes leftover after parsing attributes in process `syz.0.2058'. [ 864.046513][T15769] FAULT_INJECTION: forcing a failure. [ 864.046513][T15769] name failslab, interval 1, probability 0, space 0, times 0 [ 864.110058][T15769] CPU: 0 UID: 0 PID: 15769 Comm: syz.2.2067 Tainted: G U L syzkaller #0 PREEMPT(full) [ 864.110100][T15769] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 864.110108][T15769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 864.110122][T15769] Call Trace: [ 864.110129][T15769] [ 864.110138][T15769] dump_stack_lvl+0x16c/0x1f0 [ 864.110185][T15769] should_fail_ex+0x512/0x640 [ 864.110212][T15769] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 864.110246][T15769] should_failslab+0xc2/0x120 [ 864.110289][T15769] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 864.110318][T15769] ? __pfx___might_resched+0x10/0x10 [ 864.110350][T15769] ? sock_alloc_inode+0x25/0x1c0 [ 864.110385][T15769] ? __pfx_sock_alloc_inode+0x10/0x10 [ 864.110405][T15769] ? sock_alloc_inode+0x25/0x1c0 [ 864.110424][T15769] sock_alloc_inode+0x25/0x1c0 [ 864.110444][T15769] alloc_inode+0x64/0x240 [ 864.110472][T15769] sock_alloc+0x40/0x280 [ 864.110512][T15769] __sock_create+0xc2/0x8a0 [ 864.110542][T15769] __sys_socket+0x14d/0x260 [ 864.110567][T15769] ? __pfx___sys_socket+0x10/0x10 [ 864.110591][T15769] ? xfd_validate_state+0x61/0x180 [ 864.110619][T15769] __x64_sys_socket+0x72/0xb0 [ 864.110642][T15769] ? lockdep_hardirqs_on+0x7c/0x110 [ 864.110663][T15769] do_syscall_64+0xcd/0xf80 [ 864.110686][T15769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.110709][T15769] RIP: 0033:0x7f1e2ab916e7 [ 864.110727][T15769] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 864.110749][T15769] RSP: 002b:00007f1e2b942fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 864.110770][T15769] RAX: ffffffffffffffda RBX: 00007f1e2ade5fa0 RCX: 00007f1e2ab916e7 [ 864.110785][T15769] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 864.110799][T15769] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 864.110812][T15769] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 864.110829][T15769] R13: 00007f1e2ade6038 R14: 00007f1e2ade5fa0 R15: 00007ffd966fc048 [ 864.110860][T15769] [ 864.110891][T15769] socket: no more sockets [ 866.394095][T15779] kexec: Could not allocate control_code_buffer [ 872.232417][T15895] zram0: detected capacity change from 0 to 16 [ 872.397032][T15902] futex_wake_op: syz.4.2092 tries to shift op by -2048; fix this program [ 872.457054][T15902] futex_wake_op: syz.4.2092 tries to shift op by -2048; fix this program [ 872.969652][T15906] zswap: compressor not available [ 873.938816][T15928] FAULT_INJECTION: forcing a failure. [ 873.938816][T15928] name failslab, interval 1, probability 0, space 0, times 0 [ 874.012155][T15928] CPU: 0 UID: 0 PID: 15928 Comm: syz.5.2097 Tainted: G U L syzkaller #0 PREEMPT(full) [ 874.012199][T15928] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 874.012209][T15928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 874.012224][T15928] Call Trace: [ 874.012232][T15928] [ 874.012242][T15928] dump_stack_lvl+0x16c/0x1f0 [ 874.012289][T15928] should_fail_ex+0x512/0x640 [ 874.012320][T15928] ? __kmalloc_noprof+0xca/0x910 [ 874.012351][T15928] should_failslab+0xc2/0x120 [ 874.012391][T15928] __kmalloc_noprof+0xeb/0x910 [ 874.012419][T15928] ? snd_pcm_plugin_build+0x434/0x650 [ 874.012455][T15928] ? snd_pcm_plugin_build+0x434/0x650 [ 874.012493][T15928] snd_pcm_plugin_build+0x434/0x650 [ 874.012528][T15928] snd_pcm_plugin_build_io+0x207/0x5f0 [ 874.012561][T15928] ? __pfx_snd_pcm_plugin_build_io+0x10/0x10 [ 874.012596][T15928] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 874.012635][T15928] snd_pcm_oss_change_params_locked+0x2eae/0x3ad0 [ 874.012678][T15928] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 874.012732][T15928] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 874.012762][T15928] snd_pcm_oss_sync+0x1de/0x840 [ 874.012792][T15928] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 874.012821][T15928] snd_pcm_oss_release+0x28b/0x310 [ 874.012850][T15928] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 874.012877][T15928] __fput+0x402/0xb70 [ 874.012909][T15928] task_work_run+0x150/0x240 [ 874.012938][T15928] ? __pfx_task_work_run+0x10/0x10 [ 874.012964][T15928] ? __do_sys_close_range+0x278/0x730 [ 874.013012][T15928] exit_to_user_mode_loop+0xfb/0x540 [ 874.013047][T15928] do_syscall_64+0x4ee/0xf80 [ 874.013073][T15928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.013099][T15928] RIP: 0033:0x7f043f58f7c9 [ 874.013119][T15928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 874.013144][T15928] RSP: 002b:00007f0440466038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 874.013168][T15928] RAX: 0000000000000000 RBX: 00007f043f7e5fa0 RCX: 00007f043f58f7c9 [ 874.013184][T15928] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 874.013199][T15928] RBP: 00007f043f613f91 R08: 0000000000000000 R09: 0000000000000000 [ 874.013214][T15928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 874.013228][T15928] R13: 00007f043f7e6038 R14: 00007f043f7e5fa0 R15: 00007ffd783d96e8 [ 874.013260][T15928] [ 874.717838][T15942] __nla_validate_parse: 6 callbacks suppressed [ 874.717857][T15942] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2101'. [ 874.817496][T11124] Bluetooth: hci1: unexpected event 0x23 length: 127 > 13 [ 875.333466][T15950] Invalid ELF header magic: != ELF [ 875.968790][T15963] binder: BINDER_SET_CONTEXT_MGR already set [ 875.975740][T15971] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 876.002030][T15963] binder: 15959:15963 ioctl 4018620d 9 returned -16 [ 877.666564][T16003] sctp: [Deprecated]: syz.4.2115 (pid 16003) Use of struct sctp_assoc_value in delayed_ack socket option. [ 877.666564][T16003] Use struct sctp_sack_info instead [ 877.980287][T16009] sctp: [Deprecated]: syz.4.2115 (pid 16009) Use of struct sctp_assoc_value in delayed_ack socket option. [ 877.980287][T16009] Use struct sctp_sack_info instead [ 878.244643][T16021] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2116'. [ 878.388784][T11124] Bluetooth: hci0: unexpected event 0x23 length: 127 > 13 [ 878.505958][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 878.528599][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 878.537978][ T1300] ------------[ cut here ]------------ [ 878.544055][ T1300] WARNING: ./include/linux/skbuff.h:3227 at lowpan_xmit+0xea9/0x1210, CPU#0: aoe_tx0/1300 [ 878.554080][ T1300] Modules linked in: [ 878.558474][ T1300] CPU: 0 UID: 0 PID: 1300 Comm: aoe_tx0 Tainted: G U L syzkaller #0 PREEMPT(full) [ 878.569142][ T1300] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 878.574362][ T1300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 878.584486][ T1300] RIP: 0010:lowpan_xmit+0xea9/0x1210 [ 878.589830][ T1300] Code: ff ff 4c 89 ff 48 01 81 38 02 00 00 e8 40 b8 0f fe e9 e6 fb ff ff e8 76 30 8f f6 90 0f 0b 90 e9 a3 f5 ff ff e8 68 30 8f f6 90 <0f> 0b 90 e9 86 f6 ff ff e8 5a 30 8f f6 0f b7 8d e0 fe ff ff 44 8b [ 878.609603][ T1300] RSP: 0018:ffffc9000475f860 EFLAGS: 00010293 [ 878.615871][ T1300] RAX: 0000000000000000 RBX: ffffc9000475f8e0 RCX: ffffffff8b2f27dc [ 878.624027][ T1300] RDX: ffff888028ab9e80 RSI: ffffffff8b2f3158 RDI: 0000000000000003 [ 878.632205][ T1300] RBP: ffffc9000475f9f0 R08: 0000000000000003 R09: 000000000000ffff [ 878.640238][ T1300] R10: 000000000000ffff R11: 0000000000000000 R12: ffff8880343525b6 [ 878.648278][ T1300] R13: 000000000000ffff R14: ffff888028578d90 R15: ffff888034352500 [ 878.656275][ T1300] FS: 0000000000000000(0000) GS:ffff8881248f8000(0000) knlGS:0000000000000000 [ 878.665353][ T1300] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 878.671991][ T1300] CR2: 00007fd13c36b6b0 CR3: 000000002a7f0000 CR4: 00000000003526f0 [ 878.680021][ T1300] Call Trace: [ 878.683337][ T1300] [ 878.686322][ T1300] ? __pfx_lowpan_xmit+0x10/0x10 [ 878.691367][ T1300] ? lockdep_unlock+0x64/0xd0 [ 878.696071][ T1300] ? __lock_acquire+0x12c2/0x2890 [ 878.701151][ T1300] ? __pfx_netif_skb_features+0x10/0x10 [ 878.706728][ T1300] ? dev_hard_start_xmit+0x97/0x6e0 [ 878.711977][ T1300] dev_hard_start_xmit+0x97/0x6e0 [ 878.717204][ T1300] __dev_queue_xmit+0x6d7/0x46c0 [ 878.722203][ T1300] ? rcu_is_watching+0x12/0xc0 [ 878.727002][ T1300] ? finish_task_switch.isra.0+0x207/0xbd0 [ 878.732877][ T1300] ? __pfx___dev_queue_xmit+0x10/0x10 [ 878.738308][ T1300] ? __lock_acquire+0x436/0x2890 [ 878.743364][ T1300] ? ref_tracker_free+0x37c/0x830 [ 878.748461][ T1300] ? do_raw_spin_lock+0x12c/0x2b0 [ 878.753517][ T1300] ? find_held_lock+0x2b/0x80 [ 878.758272][ T1300] ? skb_dequeue+0x126/0x180 [ 878.762886][ T1300] ? find_held_lock+0x2b/0x80 [ 878.767644][ T1300] ? rcu_is_watching+0x12/0xc0 [ 878.772452][ T1300] tx+0xcc/0x190 [ 878.776063][ T1300] ? __pfx_tx+0x10/0x10 [ 878.780272][ T1300] kthread+0x1e4/0x3e0 [ 878.784374][ T1300] ? find_held_lock+0x2b/0x80 [ 878.789132][ T1300] ? __pfx_kthread+0x10/0x10 [ 878.793759][ T1300] ? __pfx_default_wake_function+0x10/0x10 [ 878.799715][ T1300] ? lockdep_hardirqs_on+0x7c/0x110 [ 878.804943][ T1300] ? __kthread_parkme+0x19e/0x250 [ 878.810028][ T1300] ? __pfx_kthread+0x10/0x10 [ 878.814652][ T1300] kthread+0x3c5/0x780 [ 878.818784][ T1300] ? __pfx_kthread+0x10/0x10 [ 878.823396][ T1300] ? rcu_is_watching+0x12/0xc0 [ 878.828214][ T1300] ? __pfx_kthread+0x10/0x10 [ 878.832839][ T1300] ret_from_fork+0x983/0xb10 [ 878.837482][ T1300] ? __pfx_ret_from_fork+0x10/0x10 [ 878.842614][ T1300] ? __switch_to+0x7af/0x10d0 [ 878.847359][ T1300] ? __pfx_kthread+0x10/0x10 [ 878.851996][ T1300] ret_from_fork_asm+0x1a/0x30 [ 878.856951][ T1300] [ 878.860011][ T1300] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 878.867327][ T1300] CPU: 0 UID: 0 PID: 1300 Comm: aoe_tx0 Tainted: G U L syzkaller #0 PREEMPT(full) [ 878.877940][ T1300] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 878.883231][ T1300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 878.893303][ T1300] Call Trace: [ 878.896600][ T1300] [ 878.899546][ T1300] dump_stack_lvl+0x3d/0x1f0 [ 878.904178][ T1300] vpanic+0x640/0x6f0 [ 878.908179][ T1300] ? lowpan_xmit+0xea9/0x1210 [ 878.912870][ T1300] panic+0xca/0xd0 [ 878.916606][ T1300] ? __pfx_panic+0x10/0x10 [ 878.921048][ T1300] ? check_panic_on_warn+0x1f/0xb0 [ 878.926183][ T1300] check_panic_on_warn+0xab/0xb0 [ 878.931144][ T1300] __warn+0x108/0x3c0 [ 878.935215][ T1300] __report_bug+0x2a0/0x520 [ 878.939836][ T1300] ? lowpan_xmit+0xea9/0x1210 [ 878.944543][ T1300] ? __pfx___report_bug+0x10/0x10 [ 878.949617][ T1300] ? kasan_save_stack+0x42/0x60 [ 878.954499][ T1300] ? kasan_save_stack+0x33/0x60 [ 878.959496][ T1300] ? kasan_save_track+0x14/0x30 [ 878.964399][ T1300] ? kasan_save_free_info+0x3b/0x60 [ 878.969624][ T1300] ? __kasan_slab_free+0x5f/0x80 [ 878.974603][ T1300] ? kmem_cache_free+0x2d8/0x770 [ 878.979566][ T1300] ? kfree_skbmem+0x1a4/0x1f0 [ 878.984376][ T1300] ? tx+0xcc/0x190 [ 878.988123][ T1300] ? kthread+0x1e4/0x3e0 [ 878.992397][ T1300] ? lowpan_xmit+0xea9/0x1210 [ 878.997110][ T1300] report_bug+0xb2/0x220 [ 879.001557][ T1300] ? lowpan_xmit+0xea9/0x1210 [ 879.006288][ T1300] handle_bug+0x127/0x260 [ 879.010644][ T1300] exc_invalid_op+0x17/0x50 [ 879.015209][ T1300] asm_exc_invalid_op+0x1a/0x20 [ 879.020082][ T1300] RIP: 0010:lowpan_xmit+0xea9/0x1210 [ 879.025421][ T1300] Code: ff ff 4c 89 ff 48 01 81 38 02 00 00 e8 40 b8 0f fe e9 e6 fb ff ff e8 76 30 8f f6 90 0f 0b 90 e9 a3 f5 ff ff e8 68 30 8f f6 90 <0f> 0b 90 e9 86 f6 ff ff e8 5a 30 8f f6 0f b7 8d e0 fe ff ff 44 8b [ 879.045076][ T1300] RSP: 0018:ffffc9000475f860 EFLAGS: 00010293 [ 879.051223][ T1300] RAX: 0000000000000000 RBX: ffffc9000475f8e0 RCX: ffffffff8b2f27dc [ 879.059298][ T1300] RDX: ffff888028ab9e80 RSI: ffffffff8b2f3158 RDI: 0000000000000003 [ 879.067284][ T1300] RBP: ffffc9000475f9f0 R08: 0000000000000003 R09: 000000000000ffff [ 879.075363][ T1300] R10: 000000000000ffff R11: 0000000000000000 R12: ffff8880343525b6 [ 879.083347][ T1300] R13: 000000000000ffff R14: ffff888028578d90 R15: ffff888034352500 [ 879.091434][ T1300] ? lowpan_xmit+0x52c/0x1210 [ 879.096138][ T1300] ? lowpan_xmit+0xea8/0x1210 [ 879.100847][ T1300] ? __pfx_lowpan_xmit+0x10/0x10 [ 879.105824][ T1300] ? lockdep_unlock+0x64/0xd0 [ 879.110545][ T1300] ? __lock_acquire+0x12c2/0x2890 [ 879.115596][ T1300] ? __pfx_netif_skb_features+0x10/0x10 [ 879.121288][ T1300] ? dev_hard_start_xmit+0x97/0x6e0 [ 879.126509][ T1300] dev_hard_start_xmit+0x97/0x6e0 [ 879.131655][ T1300] __dev_queue_xmit+0x6d7/0x46c0 [ 879.136623][ T1300] ? rcu_is_watching+0x12/0xc0 [ 879.141425][ T1300] ? finish_task_switch.isra.0+0x207/0xbd0 [ 879.147296][ T1300] ? __pfx___dev_queue_xmit+0x10/0x10 [ 879.152716][ T1300] ? __lock_acquire+0x436/0x2890 [ 879.157675][ T1300] ? ref_tracker_free+0x37c/0x830 [ 879.162724][ T1300] ? do_raw_spin_lock+0x12c/0x2b0 [ 879.167780][ T1300] ? find_held_lock+0x2b/0x80 [ 879.172484][ T1300] ? skb_dequeue+0x126/0x180 [ 879.177095][ T1300] ? find_held_lock+0x2b/0x80 [ 879.181801][ T1300] ? rcu_is_watching+0x12/0xc0 [ 879.186776][ T1300] tx+0xcc/0x190 [ 879.190344][ T1300] ? __pfx_tx+0x10/0x10 [ 879.194515][ T1300] kthread+0x1e4/0x3e0 [ 879.198619][ T1300] ? find_held_lock+0x2b/0x80 [ 879.203320][ T1300] ? __pfx_kthread+0x10/0x10 [ 879.207943][ T1300] ? __pfx_default_wake_function+0x10/0x10 [ 879.213789][ T1300] ? lockdep_hardirqs_on+0x7c/0x110 [ 879.219031][ T1300] ? __kthread_parkme+0x19e/0x250 [ 879.224106][ T1300] ? __pfx_kthread+0x10/0x10 [ 879.228724][ T1300] kthread+0x3c5/0x780 [ 879.232814][ T1300] ? __pfx_kthread+0x10/0x10 [ 879.237462][ T1300] ? rcu_is_watching+0x12/0xc0 [ 879.242255][ T1300] ? __pfx_kthread+0x10/0x10 [ 879.246869][ T1300] ret_from_fork+0x983/0xb10 [ 879.251478][ T1300] ? __pfx_ret_from_fork+0x10/0x10 [ 879.256609][ T1300] ? __switch_to+0x7af/0x10d0 [ 879.261307][ T1300] ? __pfx_kthread+0x10/0x10 [ 879.265920][ T1300] ret_from_fork_asm+0x1a/0x30 [ 879.270728][ T1300] [ 879.273817][ T1300] Kernel Offset: disabled [ 879.278150][ T1300] Rebooting in 86400 seconds..