last executing test programs: 16m8.414524235s ago: executing program 0 (id=210): close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8402, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400007, 0x10000000de, 0x9b72, 0xffffffffffffffff, 0x100000) unshare$auto(0x40000080) unshare$auto(0x21) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0x40001, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0xa, 0x0) read$auto_rng_chrdev_ops_core(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2, 0xd, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$auto(0x3, 0xc08c5332, 0x38) setgroups$auto(0xe32, 0x0) mmap$auto(0x40000000, 0x2000000000005, 0x2, 0xb85b, 0x401, 0x300000000000) capget$auto(0x0, 0xfffffffffffffffe) clone3$auto(&(0x7f0000000400)={0x100008000, 0x980, 0x4, 0x6, 0x0, 0x2, 0x1, 0x8, 0x1, 0x0, 0x3}, 0x40) socket(0xa, 0x5, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x0, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x7, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/008/001\x00', 0x8901, 0x0) ioctl$auto(r0, 0x5522, r0) ioctl$auto(r0, 0x5523, 0xffffffffffffffff) 16m6.910243187s ago: executing program 0 (id=218): mmap$auto(0x0, 0xfffffffffffffffe, 0x3, 0x16, 0xfffffffffffffffa, 0x7fff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x3, 0x6, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x0, 0x0) mmap$auto(0x0, 0xe983, 0x5, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) io_uring_setup$auto(0x87, 0x0) socket(0xa, 0x1, 0x84) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/binderfs/binder0\x00', 0x0, 0x0) ioctl$auto_BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0xb) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xb8, 0x100000000, 0x5, 0x1b, 0x93c, 0x1ffdc, 0x7, 0x2000000000000006, 0x3, 0x9, 0x8, 0x2, 0x8001, 0xae, 0x9, 0x922, 0x7, 0x8005, 0x5, 0x3, 0xfffffffe, 0xfffffffc, 0x1fd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, [0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x1, 0xf, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x400, 0x8000000000000000, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3]}, 0x100000000, 0x83) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x1ff) mmap$auto(0x0, 0x2020009, 0x40000003, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = socket(0x2, 0x1, 0x0) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) sendmsg$auto_NL802154_CMD_STOP_BEACONS(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x184}}, 0xc0c1) ioctl$auto(0x3, 0x8905, r2) write$auto(0xffffffffffffffff, 0x0, 0x10080000003) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$auto(0x3, 0x541b, 0x38) pwrite64$auto(r3, &(0x7f0000000040)=':\'*&\x04!\x00', 0x2001, 0x27) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r4, @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x4880}, 0x20008015) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffec9, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0x10000}, 0x80000900}, 0x7, 0x400c) 16m6.678962358s ago: executing program 0 (id=220): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x11e, 0x1, 0x8000000000000000, 0x0) r0 = socket(0x11, 0x3, 0xfffff958) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, r0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x21002, 0xfffffffffffffffb, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) read$auto(r1, 0x0, 0x7) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/audio\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_RESET(r2, 0x5000, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x80402, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) syz_clone(0x40180311, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8954, 0x0) 16m5.53745109s ago: executing program 0 (id=224): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x200000000000, 0x4, 0x4, 0x3, 0x100000000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1c, &(0x7f0000000380), 0x1) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) 16m4.888062199s ago: executing program 0 (id=227): pipe$auto(&(0x7f0000000780)) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/kernel/mm/ksm/pages_skipped\x00', 0x40c00, 0x0) r0 = prctl$auto_PR_SET_MM_START_STACK(0x3, 0x5, 0x0, 0xd56, 0x98) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x200000, 0x0) ioctl$auto(r0, 0x7, r1) acct$auto(&(0x7f0000000040)='\x00') ioctl$auto_FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000080)={{0x8, 0x0, @identifier="4ad996fc0400b89884897c9dd94e66bd"}, '\x00', 0xdd90, 0x100, 0x2}) acct$auto(&(0x7f0000000100)='\x00') acct$auto(&(0x7f0000001580)=' Q\xd7\x81\xc3\x11\xdf\xc1\x89\x94\b\\\xbf\x80Mi\xe5\x8a\xac \x10\xa1\xde<\xc8\x92\xf3\"s\f\x14\x85\xe8VU\xbd\xee\xd2\xf2\x9e\xdb\xba\xcc\x9b\xe1') openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/bluetooth/hci5/force_devcoredump\x00', 0x40, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) acct$auto(&(0x7f00000002c0)='\x00') syz_clone3(&(0x7f00000014c0)={0x220238000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x3b}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f00000013c0)=""/152, &(0x7f0000001480)=[0x0], 0x1}, 0x58) r3 = creat$auto(&(0x7f0000001540)='./file0\x00', 0x81) fanotify_mark$auto(r2, 0x5, 0x3, r3, &(0x7f0000001600)='./file0\x00') acct$auto(&(0x7f0000001640)='/dev/b\xfa\xffderfs/binder1\x00') acct$auto(&(0x7f00000015c0)='/dev/video3\x00') mmap$auto(0x0, 0x2020009, 0x9ac7, 0x14, 0xffffffffffffffff, 0x8000) r4 = openat$auto_ht40allow_map_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/ieee80211/phy14/ht40allow_map\x00', 0x0, 0x0) read$auto_ht40allow_map_ops_debugfs(r4, &(0x7f00000009c0)=""/14, 0xe) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) readv$auto(r5, &(0x7f00000000c0)={0x0, 0x5}, 0x3) 16m3.807663065s ago: executing program 0 (id=231): mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) unshare$auto(0x40000080) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(0xffffffffffffffff, 0x0, 0x24000080) r0 = waitid$auto_P_ALL(0x0, 0x4, &(0x7f0000000040)={@siginfo_0_0={0x5, 0x1, 0x80000000, @_sigpoll={0x8}}}, 0x6, &(0x7f00000002c0)={{0x8, 0x8}, {0x80000000, 0xd}, 0x6, 0x9, 0x161, 0x7, 0x21, 0xfffffffffffffff7, 0x0, 0xfe, 0x465c, 0x5f4, 0x3, 0xe0, 0xc000000000000000}) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) fadvise64$auto_POSIX_FADV_DONTNEED(r1, 0x5, 0x700, 0x4) prctl$auto(0x1, 0xfffffffffffffff4, r0, 0xb3, 0xfffffffffffff001) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/geneve0/disable_policy\x00', 0x40180, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x82002, 0x0) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000000100)="fb", 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mount$auto(&(0x7f0000000440)='batadv_slave_1\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='\xb2', 0x7, &(0x7f0000000340)="336d2e8742921d21d5fc536fbc1966031ccdc90aec72e8ccd6de99a32296b164e46de9") timerfd_create$auto(0x8, 0x800) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/vxlan/parameters/udp_port\x00', 0x2400, 0x0) read$auto(r4, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x1007ff, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940800002000076cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x18, &(0x7f0000000380)=@bpf_attr_11={0x0, 0x9, 0x866b, 0x100005, 0x80000009, 0xfffffe01, 0xe6d9, r5}, 0x92) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3f553d81c49e000000000000000000", @ANYRES16=r6, @ANYBLOB="00012bbd7000fedbdf2549000000040034013a00800076c7d42bb3e8a3b0f58df9651061b494963d6cee076bb24cfa37a7dec9743400a327d78658d8908846faa4ab4862025e3d6916e746840000"], 0x54}, 0x1, 0x0, 0x0, 0x51}, 0x4000040) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x68140, 0x0) ioctl$auto(r7, 0x5457, 0xd8) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) write$auto(r2, 0x0, 0x5) 15m48.765437115s ago: executing program 32 (id=231): mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) unshare$auto(0x40000080) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(0xffffffffffffffff, 0x0, 0x24000080) r0 = waitid$auto_P_ALL(0x0, 0x4, &(0x7f0000000040)={@siginfo_0_0={0x5, 0x1, 0x80000000, @_sigpoll={0x8}}}, 0x6, &(0x7f00000002c0)={{0x8, 0x8}, {0x80000000, 0xd}, 0x6, 0x9, 0x161, 0x7, 0x21, 0xfffffffffffffff7, 0x0, 0xfe, 0x465c, 0x5f4, 0x3, 0xe0, 0xc000000000000000}) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) fadvise64$auto_POSIX_FADV_DONTNEED(r1, 0x5, 0x700, 0x4) prctl$auto(0x1, 0xfffffffffffffff4, r0, 0xb3, 0xfffffffffffff001) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/geneve0/disable_policy\x00', 0x40180, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x82002, 0x0) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000000100)="fb", 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mount$auto(&(0x7f0000000440)='batadv_slave_1\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='\xb2', 0x7, &(0x7f0000000340)="336d2e8742921d21d5fc536fbc1966031ccdc90aec72e8ccd6de99a32296b164e46de9") timerfd_create$auto(0x8, 0x800) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/vxlan/parameters/udp_port\x00', 0x2400, 0x0) read$auto(r4, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x1007ff, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940800002000076cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x18, &(0x7f0000000380)=@bpf_attr_11={0x0, 0x9, 0x866b, 0x100005, 0x80000009, 0xfffffe01, 0xe6d9, r5}, 0x92) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3f553d81c49e000000000000000000", @ANYRES16=r6, @ANYBLOB="00012bbd7000fedbdf2549000000040034013a00800076c7d42bb3e8a3b0f58df9651061b494963d6cee076bb24cfa37a7dec9743400a327d78658d8908846faa4ab4862025e3d6916e746840000"], 0x54}, 0x1, 0x0, 0x0, 0x51}, 0x4000040) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x68140, 0x0) ioctl$auto(r7, 0x5457, 0xd8) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) write$auto(r2, 0x0, 0x5) 16.051480845s ago: executing program 1 (id=4904): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) mmap$auto(0x0, 0x810001, 0x2000000efb, 0x8000000088011, r0, 0x8000) (async) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy0/aql_pending\x00', 0x28080, 0x0) readv$auto(r1, &(0x7f0000000100)={&(0x7f0000000280), 0x1}, 0x4) (async) socket(0x5, 0x2, 0x8b) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC0D0c\x00', 0x20000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS322(r2, 0x806c4120, &(0x7f0000000100)={0x0, 0x7, 0x95d7, 0x7f, 0x3, 0x1, 0x9, 0x2, 0x0, 0x7, 0xb, 0x8, 0x100, 0x2, 0x3, 0x3ff, 0x400, 0x80000000, "0c1056e3480805f935e214e44f620fa9eba8238cacc3d9e6fc45cf541e509fc2457ae4ae"}) get_robust_list$auto(0x0, 0x0, 0x0) (async) lsm_list_modules$auto(0x0, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) set_mempolicy$auto(0x1, 0x0, 0x803) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000000200), 0x500, 0x0) read$auto_dma_buf_debug_fops_(r3, &(0x7f0000000240)=""/83, 0x53) pwritev$auto(r3, &(0x7f0000000180)={&(0x7f0000000240)="b9e391e9f151a09469358e4365d5f7800af5098009f122fc7f75ec1e251859958e4831c6d117f9f885930be904f2134fc20c92eb4e677728f11cddcf1759ec7b35cdbec34425726839c7e47babc4df748b2e3cf5977cf2b522d98e5a0e179347408c513ce9317d137f8eba471438235020e528", 0x2}, 0x2, 0xfffffffffffff274, 0x6) (async) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x400) (async) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) (async) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008012, 0x3, 0x0) (async) r5 = socket(0x2b, 0x801, 0x106) sendmsg$auto_NL80211_CMD_SET_QOS_MAP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x24008041) (async) msync$auto(0x0, 0xe0, 0x6) (async) ioctl$auto_BLKGETZONESZ(r4, 0x80041284, 0x0) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) msgget$auto(0xc, 0x77d9) (async) msgrcv$auto(0x0, 0x0, 0xff9, 0x1, 0x3) 15.041466862s ago: executing program 1 (id=4910): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @rand_addr=0x64010100}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x0, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf2504000000000017000800000004000e00"], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="1100", 0x2) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r2 = gettid() futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) kill$auto(r2, 0x11) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x2000000000040, 0x0) r5 = socket(0x2, 0x3, 0xa) setsockopt$auto(r5, 0x0, 0x19, 0x0, 0x9) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC1\x00', 0x0, 0x0) sendfile$auto(r3, r4, 0x0, 0x1000200) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8600, 0x0) fcntl$auto(0x3, 0x4, 0xa553) 13.577186177s ago: executing program 1 (id=4916): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x242, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xf8, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram0\x00', 0x67f00, 0x0) preadv2$auto(r2, &(0x7f0000000080)={0x0, 0xa}, 0x6, 0xffffffffffffffff, 0x400, 0x2f) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) pread64$auto(r0, &(0x7f0000000200)='/proc/self/net/ip6_tables_targets\x00', 0x34b, 0x10000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2a, 0x2, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x7) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) 12.153931576s ago: executing program 1 (id=4923): r0 = socket(0x2, 0x1, 0x0) setsockopt$auto_SO_RCVBUFFORCE(r0, 0x6, 0x21, 0x0, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/ext4/sda1/last_trim_minblks\x00', 0x2400, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) (async) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x100) (async) r1 = getpid() process_vm_readv$auto(r1, 0x0, 0x1, 0x0, 0x6, 0x0) (async) setsockopt$auto(0xffffffffffffffff, 0x10000000084, 0x9, 0x0, 0x9c) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) connect$auto(0x3, 0x0, 0x51) (async) setsockopt$auto(r0, 0x7, 0x0, &(0x7f00000000c0)='*%&:/\x00', 0x7) socket(0xf, 0x3, 0x2) (async) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x70) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) ioctl$auto(r3, 0x5646, r3) (async) read$auto_v4l2_fops_v4l2_dev(r3, &(0x7f0000000280)=""/40, 0x28) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0) (async) r4 = socket(0x1e, 0x1, 0x0) bind$auto(r4, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x0, 0x2}}, 0x66) bind$auto(0x3, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x1, 0x3}}, 0x6a) close_range$auto(0x0, 0x5, 0x0) (async) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)={{0x93, 0x5469, 0x80000000, 0x3, 0x7}, "0a50741d04a179362c1d804dc244e4808e8ac2199149749e1d5102f7ceea65d9"}) 11.677160777s ago: executing program 1 (id=4925): r0 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) mmap$auto(0x3, 0x1, 0x4, 0xeb1, r0, 0x8002) r1 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer2\x00', 0x40000, 0x0) ioctl$auto_FS_IOC_FSGETXATTR(r1, 0x801c581f, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0005, 0x17) sendmsg$auto_IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x8050) setresgid$auto(0x81, 0x800000a0, 0x8) setresuid$auto(0x0, 0x7, 0x0) r2 = setfsuid$auto(0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/shm_next_id\x00', 0x88000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, 0x0) getpgrp(r3) prctl$auto(0x1000000003b, 0x1, r3, 0x200005, 0xe9b) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmctl$auto_SHM_STAT(0xa70, 0xd, &(0x7f0000000300)={{0x7f, r2, 0xee00, 0x7, 0x9, 0xed7c}, 0x2, 0x764eaca9, 0x1000, 0x6, @raw, @inferred=0xffffffffffffffff, 0xfffe, 0x0, &(0x7f00000001c0)="52d01e8d22863fcde5d14e90659c4f2a65382c11680412224a57219ed9a074f382f5a54d011f50a3394920203e269edcfb5162c45fa83190ee8000285a64d8a2987938c1a45f7616bb7b1b2819", &(0x7f0000000240)="99ea59ab3b9ae8765a9dc481698268ee9ac0f116903be82394255b036f2ca2d066e99df3a732d3556457b546a98dee613c78a9cf88086f72232a0349845c50e5b46506d4ad2857a78c25db5ebb7fbde375fe8fcdd186ba4fd36f3f9af69c0da12a6bd9b8163a18a66bd4dbb7d763eab72494b24e8463f69bc11f69e39e0cba5bc2b98153c78fdc1cf8e7e71349d343a0b6625fdc91f90f4ad3d32061b773ffe5f7769ac5ee288e991a"}) fsconfig$auto_FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='&\x93!\x00', &(0x7f0000000100)="ff6f1f0cfda46be4b453da2c3eadd4e88a9469880531deef265fdaad8aa430f2051ea67fbf9f40dcd03d3aa06f067ae6bd925fbe0f9c08db8cfe31901632d0216a26871694ffc2b13832eccf5e28343dba138249a8527cc43ecafbc1539916c93974ddfaeff71f468881e81c73c554f16578bdd80a959b8ecd12337e4ba014e6dfffa7dbb95fc57e4ba1a6e0e7e0adf92f5c841558010d88412553a0fdc9", r5) ptrace$auto(0x10, r4, 0x9, 0x7ff) 11.472444461s ago: executing program 1 (id=4927): keyctl$auto_KEYCTL_INSTANTIATE(0xc, 0x6, 0xff, 0x4263b2e8, 0xb4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xdfb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x28201, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setitimer$auto(0x100, &(0x7f0000000080)={{0x2, 0x7}, {0x0, 0x8000000018}}, 0x0) r0 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0) writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000000), 0x8}, 0x6) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) write$auto(0x3, 0x0, 0xffd8) r2 = socket(0x2, 0x5, 0x1c8) r3 = bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_4={0x1f, r2, 0x10000}, 0x8) mmap$auto(0x0, 0x2009, 0xdffffffffffffff9, 0x8000200008012, r3, 0x8000) 7.217479895s ago: executing program 2 (id=4948): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x64842, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/ptyq3\x00', 0x40001, 0x0) io_uring_setup$auto(0x1, 0x0) fcntl$auto(0x3, 0x4, 0xa553) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) uname$auto(0x0) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) r0 = openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f00000029c0), 0x42000, 0x0) pread64$auto(r0, &(0x7f0000003b00)='/sys/kernel/tracing/tracing_cpumask\x00', 0x2, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0xe4e5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r2, @ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000) io_uring_setup$auto(0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r3, 0x1, 0x7ff) ptrace$auto(0x4212, r3, 0x177, 0x3) signalfd$auto(r1, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd11/queue/read_ahead_kb\x00', 0x22b42, 0x0) 6.760240567s ago: executing program 2 (id=4951): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) set_robust_list$auto(0x0, 0x4) getsockopt$auto(r0, 0x84, 0x3, 0x0, 0x0) r1 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r1, 0x0, 0xfffffdf1) linkat$auto(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x222000, 0x154) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x0) r3 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) getsockopt$auto(r3, 0x0, 0xcf, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) move_pages$auto(0x0, 0x1001, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="0600", @ANYRES16=0x0, @ANYBLOB="010025bd"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='B'], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x4000, &(0x7f0000000100)={&(0x7f0000000080), 0x96bc}, 0x2, &(0x7f0000000380), 0x7, 0x4}, 0x9}, 0x7, 0x4008) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto_KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f00000000c0)=0xfffffffffffff800) ptrace$auto(0x10, r5, 0x5, 0x7) ptrace$auto_PTRACE_SETREGSET(0x4205, r5, 0x1, 0x9) set_mempolicy$auto(0x3, &(0x7f0000000040)=0x7, 0x3) r6 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000000)={{0x3, 0x1000, 0x1, 0x5, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e18441074052a3fa6c3ccf1bf00"}) 4.542541101s ago: executing program 3 (id=4958): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/ext4/sda1/trigger_fs_error\x00', 0xa801, 0x0) write$auto(r0, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\b\x86\xc6\xd7L\xc6\xd1\xf4h\xf2\xc4\x9aZ\x14\x83\f\x17\xf6\xb1u!\xbc\xbc8H\x94,3\xba\x8a\'\xef\b\x942W\xb5:\xb4\xe3[\x9d\xc1s\x13\xf9\xd5X\xe0\xfd\x7f\x95\xf8\xc9\x85\xe7\xd9u3\xc3\xcd\x1dJX\xcd\xab\xf5\xdf\xf1\xad\xa4\xf1\x9b\xc4\xf9\xac\xa2\x8f@W\x9d\xf4 \xd3di\x84\xff\xe2`\x9c7\xbc\xe7\xe1\x94\xcb\bt\xa0\x93]\xba\t\x92\xca\x1f\xc3\x00\x00\x00\x00\xf8\xeb\xc65\xd3\xd1\xc5\xbb\x96{\xa3\xe7\\y\xa9Em\xd5\x19\xef\xf8\xac!\xff@K\x1d\xeaE\xce=\x90\xe6O\x82X\xc1\xbfI:5\xac\xb0\x98\xbf\xf1\xba\xa4\x10s\xfb\xc1j;!\xa4+{\xe6\x02\xb8\x88\xea66$!v\xef\xce\x19eM\xae\xe3\xd9jc\x10\xa7\xf1\xce&\xd7\xb6\x06\xf3\xeb\xe8\x87[f\xe7\xdf\x8c\x0f\x80\xed\x04Z!\x89R\x8b-\xbcI\t:\xcf\x9b\xd5a\v\xf0^d$\xb6\x06\xbb\xdf\xa5\x88\x96\xd2V{\xb7n\x1b5N\xb9\xdc\x97\x16\x9e\aag\x1b\xf0K\xebtw\xe3\xf0\x03\xf8\xf2\xe3\xb7\x85\x8c\xe2\xca\xfdB\xa5\x82nlV\xac\xe6bK\xec\xa3.\xe7qeOd\x19\xeaX\x94N\x84\xa51\xec7:\xef\xd1\x8f\xd4JP\x81\xc3\xa3/Mz\x91f\xcf\xdaO\xe1l\xcc\x8b\xb0\xe5\xc9n\x95\x9a\xa6\xf3Tk\xdf\xf5m\x7fbC\x8a\x97\xdcM\x06\x8a\xd3g\xe5\'\xf2\x8c\x1a\xd00Z\x06\xf2\xacL\xe0\xab\x1d\x1e\x94?', 0x81) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf2502e0"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) syz_clone3(&(0x7f0000000540)={0x0, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x13}, &(0x7f0000000640)=""/173, 0xad, &(0x7f00000003c0)=""/181, &(0x7f0000000280)=[0x0, 0x0, 0xffffffffffffffff, 0x0], 0x4}, 0x58) process_madvise$auto_MADV_DODUMP(r1, &(0x7f0000000480)={&(0x7f00000005c0)="7407228c3e4d810b9d3e31ac499e39c001290fc41c36206dad706686fd5f047aea09737f80a51724959bcf23252ba4bbf45d4f9d5a70a8739fb048e1719e222724f4d1cffe2d1d4d699b02abcbdc4a23330ade8205450d3f5246e288e0007b", 0x4}, 0x5, 0x11, 0x581) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='\x00\x00\x00'], 0x1ac}}, 0x40000) bind$auto(0xffffffffffffffff, &(0x7f0000000180)=@phonet={0x23, 0x40, 0xff, 0x6}, 0x80) openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/ieee80211/phy4/netdev:wlan1/stations/08:02:11:00:00:00/eht_capa\x00', 0x22000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_stats_fops_2(0xffffffffffffff9c, &(0x7f00000001c0), 0x210881, 0x0) pread64$auto(r3, &(0x7f000000b040)='\x00', 0x7, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000800) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15a}, 0x6, 0x8, 0x5) write$auto(0x3, 0x0, 0xffd8) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) fanotify_init$auto(0x5, 0x2000000000002) r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close_range$auto(r2, r5, 0xfffffffe) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/anycast6\x00', 0x5ad40, 0x0) socket(0x1d, 0x2, 0x6) 4.423867741s ago: executing program 4 (id=4959): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) (async) socket(0xa, 0x1, 0x84) (async) r0 = eventfd$auto(0x80) readv$auto(r0, &(0x7f0000000380)={0x0, 0x8}, 0x8) (async) read$auto(r0, 0x0, 0xcc9c) (async) write$auto(r0, &(0x7f0000000400)='\'\x00', 0x8) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c) shutdown$auto(0x200000003, 0x2) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r1 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r1, 0x0, 0x1) (async) statmount$auto(&(0x7f0000000080)={0x6, @inferred, 0x3599, 0x4, 0x2}, &(0x7f00000000c0)={0x43bb, 0x3, 0x8, 0x5, 0x1, 0x3, 0x8, 0x7fff, 0x7fffffffffffffff, 0x5, 0x6, 0x24, 0x9, 0xff, 0x7ff, 0x800, 0x9, 0x8000, 0x5, 0xede2, 0x2, 0xad1, 0x6cf, 0x9, 0x2, 0x4, 0x101, 0x9, 0x7ff, 0x7a, 0x1000, [0x101, 0x4, 0x2, 0x921, 0x7, 0x30b2bf97, 0x4b, 0x100000000, 0xaac, 0x9, 0xfffffffffffffff9, 0x13b, 0x9, 0x5, 0xffffffff80000000, 0x8000000000000000, 0x80, 0x8, 0x5, 0x98c, 0xa, 0x7, 0x100000000, 0x6, 0x6bf, 0x2c, 0x1, 0x7ba, 0x8, 0x7, 0x6, 0x5, 0x10000, 0x979, 0xa62e, 0x2, 0xb, 0x3, 0x9, 0x8000, 0x4f7, 0x7fffffffffffffff, 0x5], "0299e436936bd2985ac26530bfa7c4637a78996ffe7923e23c026734832d344fa532303156c94f343b84d0cb75373f609c053adea3aa6888913f926ebfe62bf70c282548c6881358aa4edfc739769a3c07fba03bd58eb4389995ef2aa2c66700f97515bfae081b5e9491e921999a4399620b122e13f245bf78fe7ca4889c954f0a504e46ff004de15b4d2a808cd8b4dff1ac81a45bb3d1cc49"}, 0xffff, 0x595) (async) write$auto(0xffffffffffffffff, 0x0, 0x5) (async) socket(0x1f, 0x800, 0x0) (async) read$auto(r1, &(0x7f00000003c0)='!}#,\x00', 0x800) (async) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0xb, 0x0) (async) r2 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) (async) socket(0x2, 0x1, 0x84) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) sendmmsg$auto(r2, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x200009}, 0x1}, 0x2, 0x0) (async) close_range$auto(0x0, 0xffffeffe, 0x2) 4.294392098s ago: executing program 4 (id=4960): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket(0x2, 0x1, 0x106) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/admmidi2\x00', 0x3fee420f6b719683, 0x0) r2 = prctl$auto(0x401, 0xfffffffffffffffd, 0x0, 0x3, 0xfffffffffffffffc) (async) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xc04, 0x9b72, r1, 0x28000) (async) connect$auto(0x3, 0x0, 0x54) (async) recvmmsg$auto(0x3, 0x0, 0x10002, 0x0, 0x0) (async) set_mempolicy$auto(0x87f, &(0x7f00000000c0)=0x8, 0x1ffffffe) (async) mmap$auto(0x0, 0xa00006, 0x100, 0x80000000010, 0xffffffffffffffff, 0x118) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x200000000008000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) (async) getsockname$auto(0xffffffffffffffff, &(0x7f0000000440)=@nfc={0x27, 0x0, 0x0, 0x6}, 0x0) sysfs$auto(0x2, 0x1f, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x15, 0x5, 0x4) (async) r3 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) (async) setsockopt$auto(0x3, 0x10f, 0x83, 0x0, 0x12) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x40101ce, 0x0, 0x2, 0x0, 0x6, 0x9}, 0x1084f}, 0x7, 0x2000000) (async) mmap$auto(0x0, 0x400008, 0x0, 0x9b72, 0x2, 0x8000) (async) statmount$auto(&(0x7f0000000000)={0x18, @raw, 0x400000080000029, 0x100000001, 0x8}, 0x0, 0x207, 0x0) r4 = socket(0x2, 0x1, 0x106) bind$auto(r4, &(0x7f0000000040)=@in={0x2, 0x4e22, @multicast2}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x6, @private=0xa010100}, 0x6) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xb, 0x7, 0x36, 0x9, 0x1ffde, 0x9, 0x3, 0x20000002, 0xcc9, 0x3, 0x1, 0x2091, 0x400b4, 0x9, 0x6, 0x6, 0x7e, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000000]}, 0x1fe, 0x2) (async) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000140), r0) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x22d4701cbe0311bd}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="9c0000cc8e91e6236bb17bfe9f80db7ca850f42dd835ab4a7bafdc8eab9b09e63b46da97d1ad7244c599e6c3ed65097855b33999cd8a7974879ce66d38908f0f064d43ec4a7bfd71b280fe7e74ae7c5d5864fa4ecf30a4db21befcaf69846b6dbd1d5786a5d8d2418996b2afa17e370db6890839792410ee04a9d183423efc9ceee6358c1db591b4afde6f0070ea7d9a52e55e5715a66721fc718a7acfa332af077c9884a4e0b63abb96aa758bd642e8bcd5fd941b47a6793531ab0c67af993b2f4811d78fdbf9dd02b2de753b05aede14a3b22404af0e1742ed62c539fcb30000000000", @ANYRES16=r5, @ANYBLOB="02002cbd7000fddbdf251500000005000f000800000006000900f589000076002f8043216363a3900fbb6a9ddb80588ab17ee337f3c482612b397feeba40a8f04c54d26af4bfdfc9c4bf90c64d2ca5accae25690c1189f6546644dc6e3a2a3bb8f003d2106e30923f7fd753ec739c7eb4a3eca68611e7ae130ed4e4f503039e58d09bdafdaf9cabcefef3a55ece0174be2e630580000"], 0x9c}, 0x1, 0x0, 0x0, 0x24000004}, 0x48000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) 4.024453511s ago: executing program 2 (id=4961): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0x4020009, 0xdc, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_secret$auto(0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x8, 0xfffffffffffffffa, 0x13, 0x3, 0x0) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0x80000e9e, 0x3, 0xd, 0x250, 0x100000000, 0x2c2, 0x800002017d, 0x4, 0x40, 0xd, 0xd59, 0xfb, 0xff, 0x21, 0x100000005]}, 0x0, 0x0) r1 = openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/trace_marker\x00', 0x341, 0x0) r2 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_add_rule$auto(r2, 0x3, 0x0, 0x0) write$auto_tracing_mark_fops_trace(r1, 0x0, 0x1f) keyctl$auto(0x13, 0x4, 0x8, 0x204, 0x8) read$auto(0xffffffffffffffff, 0x0, 0x20) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) r3 = clone$auto(0x9001, 0x81, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) process_vm_writev$auto(r3, &(0x7f0000000080)={&(0x7f0000000280)="cacfc670350be0406fb8061b176b24514f9ecb004b912f64d4d12f65c32812efd582ecdc7583644a2fbb67f16f7cdf6e9674419be7eea474ef80aab43862277b3a5df408fc8d5b3468ef53815f57cc2f8e5e0f77c999e8aa7839d9521e7ab14ef825434a8e41d669b9adc8e6da56b051735e2e625deb1914dd308bdedf2ccb880df52b25a4359ce47bf28baa6a14b628ff57f3f2358b5acefe4f24e7d36d96609e44ea3f6de9d72c", 0x4}, 0xfffffffffffffffd, &(0x7f0000000240)={&(0x7f00000001c0)="724950be5021561797b267359c9cb2c8ec413a3cb7cf8ae6960a0000aa061b7b6dffaf2946db9e332c074323d0f7802cfaeb9e45dbdaa222473cb09a", 0x7}, 0x0, 0x1) 3.32807234s ago: executing program 3 (id=4962): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/security/tomoyo/stat\x00', 0x40802, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = getsockopt$auto(r0, 0x14438b9b, 0x4e39, &(0x7f00000001c0)='/dev/snd/controlC2\x00', &(0x7f0000000100)) dup$auto(r1) read$auto(r0, 0x0, 0xb4d3) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x7ffc) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x7, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) futex_wake$auto(0x0, 0x5, 0x4, 0xa) futex_wake$auto(&(0x7f0000000000)="facff2b53ab3522cb329b5a87bdbc091f5a6ad597f2789e870d64db4cf6503135f5a750abc973b65703b664991ab45d13445d9c4df1d25210345f44468854c9689b943d1c65073bf11fd0c98fb48f9f4d67c0908e7470167", 0xfffffffffffffffa, 0xfff, 0x7f) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x400, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/14/smp_affinity\x00', 0x40001, 0x0) write$auto(r3, &(0x7f0000000040)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x6) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000080)=0x1) ioctl$auto(0x3, 0x5420, 0x38) unshare$auto(0x40000080) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0xdca) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) prctl$auto(0x1000000003b, 0x2, 0x4, 0x5, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) 3.325002941s ago: executing program 4 (id=4970): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) set_robust_list$auto(0x0, 0x4) getsockopt$auto(r0, 0x84, 0x3, 0x0, 0x0) r1 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r1, 0x0, 0xfffffdf1) linkat$auto(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x222000, 0x154) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x0) r3 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) getsockopt$auto(r3, 0x0, 0xcf, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) move_pages$auto(0x0, 0x1001, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="0600", @ANYRES16=0x0, @ANYBLOB="010025bd"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='B'], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x4000, &(0x7f0000000100)={&(0x7f0000000080), 0x96bc}, 0x2, &(0x7f0000000380), 0x7, 0x4}, 0x9}, 0x7, 0x4008) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto_KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f00000000c0)=0xfffffffffffff800) ptrace$auto(0x10, r5, 0x5, 0x7) ptrace$auto_PTRACE_SETREGSET(0x4205, r5, 0x1, 0x9) set_mempolicy$auto(0x3, &(0x7f0000000040)=0x7, 0x3) r6 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000000)={{0x3, 0x1000, 0x1, 0x5, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e18441074052a3fa6c3ccf1bf00"}) 2.616027334s ago: executing program 2 (id=4963): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vivid.0/video4linux/radio1/name\x00', 0xa2500, 0x0) (async) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) flock$auto(r1, 0xffffffff) (async) flock$auto(r2, 0x5) (async) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000180)=""/108, 0x6c) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) (async, rerun: 32) openat$auto_clk_dump_fops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/clk/clk_dump\x00', 0x20002, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), 0xffffffffffffffff) process_vm_writev$auto(0x0, 0x0, 0x200000000017, 0x0, 0x7, 0x0) (async) r3 = open(0x0, 0x0, 0x64) fchdir$auto(r3) (async) flock$auto(r3, 0x2f0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) (async) linkat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) (async) mmap$auto(0x0, 0x202000c, 0x3, 0xeb2, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) r4 = io_uring_setup$auto(0x6, 0x0) r5 = bpf$auto(0x0, &(0x7f0000000440)=@info={0xffffffffffffffff, 0x5, 0x8}, 0x1000000f) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'veth0_to_bond\x00'}) (async) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000000280)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYRES64=r5, @ANYRESOCT=0x0, @ANYRESOCT=r0, @ANYBLOB="d0bf9d3c855f1aa4946741e9577de2fba3b3f41c52101e29ca1c", @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="140002006d616376746170300000000000000000140002006e6574706369300000000000000000001400020067656e65766531000000000000000000315f766972745f77696669000c000180080001000000000000000000", @ANYBLOB="3a17f2b80174b1ebe9d386b61d4fe29e2f7006c972993f21ef04e24301619abecacdbc85cfb98a96b00052a1919f3f7997ce9867596a683312690fda62cb7a9374e46d329ebdf0a4aa88b393c772093610d17d5a34ccb518a63a9311f42c139b00a2bc3bd892a3d38a3ab7d05139aa9f75286d5967d51a7abec2ca9788bf42cb0c6b8f1b5f6ed402ff9e4dc533017c0928c6ea985563526983e4b7b2f53ba6e164e2c361efefd415366e63a8f16b7cec3c34a059af91c2c6cdae0d0346b5c6463b0b8a316e82a7f352dbb629faefa2d1f16e1ef490526539c2191bf915545e4a", @ANYBLOB="0c00018008000300030000001400018008000100", @ANYRES32=0x0, @ANYBLOB="0800030003007c00"], 0xc0}, 0x1, 0x0, 0x0, 0x40000}, 0x8c0) (async, rerun: 32) socket(0x2, 0x1, 0x0) (async, rerun: 32) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) (async) recvmmsg$auto(r5, &(0x7f0000000580)={{&(0x7f00000000c0)="ee4b75ad48a15e7f75137990530f5d75c22c9ca4ce3a89c6a8ff68420cc18989d0027f298891ebb2e6273a", 0x200, &(0x7f00000003c0)={&(0x7f0000000300)="82eec7f9eedf2ac0814c097464ff4d953fcb04630755e26e8e234daeaa99647814b4663f6530e6f779fd2bbd74735373f1f8729bae3223c8aff678817dc0c65ca01f91c81bc749d507bfa2b6ad173a973902814f593cb0190bcf8b94d77d77263d99af7016b7a1abb139676e64d08b028f1f361cfc4abad7aecab4f0fcb2a17a38eb528c52d405f9905f3d9c758bd0", 0x1}, 0x7, &(0x7f00000007c0)="3f3e67da62797e85e472faca6dc26e8c6967a15ab05e941d3c519cb2b377c0adc1523bba835d81e5f11638d6ae36ea43e95e05a480a6c7282a2ac38afd63d60a4ae9635a336093d2ab2f4e322259abc6767d0ee0dc53c5afb77009770f3e74457f9de4895d2f40f32f6c9cdc3a20b854ae36294c881e304a9f4e6c1559", 0x6, 0x1}, 0x3b}, 0x68, 0x3, &(0x7f00000005c0)={0x5, 0x80000000}) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async) write$auto(0x3, 0x0, 0x7fffffff) 2.401677763s ago: executing program 2 (id=4964): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05082dbc7000fbdbdf257e0000004800db00", @ANYRES32=r2, @ANYBLOB="0c002e010010000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) recvmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/mtu\x00', 0xe3102, 0x0) sendfile$auto(r3, r3, 0x0, 0x2) r4 = openat$auto_fops_x16_ro_(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/dormant_links\x00', 0x8040, 0x0) io_uring_register$auto_IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000280)="b4dc694efa1149efce5bd03c592600a75e6cc91e39f5aebeed", 0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r5, 0x80004507, 0x10000000000402) madvise$auto(0x8000, 0x87fff, 0xc) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) 1.638410725s ago: executing program 4 (id=4965): mmap$auto(0xfffffffffffffffa, 0x1, 0xdf, 0xeb1, 0x401, 0x8003) rseq$auto(0x0, 0x18, 0x5d7, 0x6) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = gettid() socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @empty}, 0x68) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) recvmmsg$auto(0x3, 0x0, 0x10000, 0x2, 0x0) prctl$auto(0x3e, 0x1, r1, 0x1, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r2 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$auto_LOOP_CTL_ADD(r2, 0x4c80, 0xfffffffffffffffd) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000001c0), r3) sendmsg$auto_TIPC_NL_PUBL_GET(r3, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003900)={&(0x7f0000000000)={0x20, r4, 0xf01, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@typed={0x7, 0x2, 0x0, 0x0, @str='@+\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x840) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000001380)={&(0x7f0000000080), 0xc, &(0x7f0000001340)={&(0x7f00000013c0)={0x121c, r4, 0x800, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x1122, 0x4, 0x0, 0x1, [@typed={0x8, 0xc1, 0x0, 0x0, @fd=r2}, @nested={0x1018, 0x1, 0x0, 0x1, [@generic="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", @nested={0x4, 0xff}, @typed={0x8, 0xb6, 0x0, 0x0, @pid=r1}, @nested={0x4, 0x11a}, @nested={0x4, 0x5e}]}, @generic="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"]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@typed={0x4, 0xcc}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x14f, 0x0, 0x0, @pid=r1}]}, @TIPC_NLA_NODE={0xd0, 0x6, 0x0, 0x1, [@nested={0xac, 0x7, 0x0, 0x1, [@nested={0x4, 0x4}, @nested={0x4, 0x8a}, @typed={0x99, 0xe5, 0x0, 0x0, @binary="b87acc04c9f164ac27f5e4d3f85f1349fc618e439ae57490fec04720025dfdefa0ed3714231b4819a960f6f39cd298d38c8b4f19ae425674bd740520b4cb3949a3f47c58a658e7c83148c9f3ebf480132603c37611a7b54d6b816a1b9bb68e1a34e5503436b69e3f1ee97682cd6c755896c5373a55d40692e273ef2f930b9ec97e96a67c56b612ffe9a879aa44c7ae58729a4110cd"}, @nested={0x4, 0xb4}]}, @nested={0x18, 0x40, 0x0, 0x1, [@typed={0x8, 0x98, 0x0, 0x0, @pid=r1}, @nested={0x4, 0x87}, @typed={0x8, 0xd7, 0x0, 0x0, @u32=0x7}]}, @typed={0x8, 0xef, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}]}, 0x121c}, 0x1, 0x0, 0x0, 0x150}, 0x24044044) 1.376281562s ago: executing program 3 (id=4966): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80000}, 0x44000) bpf$auto(0x6, &(0x7f0000000100)=@bpf_attr_7={@btf_id=0x86, 0x5, 0x10}, 0x6f4) (async) bpf$auto(0x6, &(0x7f0000000100)=@bpf_attr_7={@btf_id=0x86, 0x5, 0x10}, 0x6f4) keyctl$auto(0x18, 0xfffffffffffffffd, 0x0, 0x0, 0x2) 733.544849ms ago: executing program 2 (id=4967): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x242, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xf8, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram0\x00', 0x67f00, 0x0) preadv2$auto(r2, &(0x7f0000000080)={0x0, 0xa}, 0x6, 0xffffffffffffffff, 0x400, 0x2f) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) pread64$auto(r0, &(0x7f0000000200)='/proc/self/net/ip6_tables_targets\x00', 0x34b, 0x10000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2a, 0x2, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x7) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) 733.210705ms ago: executing program 3 (id=4968): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000100)={0x1ff, 0xfff, 0x1000}) r0 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r0, 0x8000) bind$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYBLOB="040006"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r1) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000005c0), r1) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="f51b26bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="d781dcab9215eb95aac9895419067c41b3ccf193bad7b3f219c3dd576fd45dd4aea4e0ab35246fce5f80a81cbca208c1726213ce45a7ce3ac6d0a8ec297e19d2a431219e543bfa6362b343aba0224678b0177b3b43c806b22a6da7c1ae4f0cec520e84d451d6b019579319046c99f3743d5144d5a618de6cbcf1f3027d29b679bd11d680ab1c46247d719ccbea6c7becdd78"], 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x4000) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) r3 = memfd_secret$auto(0x0) fcntl$auto_F_UNLCK(r3, 0x8, 0x2) ioctl$auto_RTC_WKALM_SET(r3, 0x4028700f, &(0x7f00000000c0)={0x0, 0x40, {0x81, 0x1, 0x5, 0x10000, 0x5, 0x6, 0xa4dc, 0x6, 0x98b1}}) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0xc, 0x940, 0x1ffde, 0x7, 0x6, 0x3ff, 0x9, 0x1, 0x2, 0x7, 0x9, 0x8, 0x8, 0x407, 0x5, 0x7, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xf3, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe3a]}, 0x400, 0x81) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='p\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='.'], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) fanotify_init$auto(0x4005, 0x2000000000002) socketpair$auto(0x1, 0x5, 0x0, 0x0) 518.407193ms ago: executing program 4 (id=4969): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop5\x00', 0x201, 0x0) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/stack\x00', 0x343940, 0x0) read$auto_proc_single_file_operations_base(r1, &(0x7f0000000080)=""/201, 0xc9) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_STATION(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0xbc}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x7}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f00000002c0)={0x1000, 0x8, 0x1, 0x0, 0x3, 0x0}) r5 = prctl$auto(0x9, 0xffff, r4, 0x1ff, 0xc67) r6 = prctl$auto_PR_SET_MM_START_DATA(0x0, 0x3, r4, 0xfff, 0x475) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r6, 0x7ab, 0x0) mmap$auto(0xc5c0, 0xffffffff, 0xffffffffffffff96, 0x11, r2, 0x4) unshare$auto(0x7) setsockopt$auto_SO_RXQ_OVFL(r0, 0x0, 0x28, &(0x7f0000000300)='nl80211\x00', 0xbe) r7 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x14040, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) getdents$auto(r7, &(0x7f0000000380)={0x4cff, 0x9, 0x1, "c8159c6e9bebe5718d16f14ec6258981da711d35a7389a28900a6d71cd8bed45e3b1315a5714a153242bff28c8d85def03fd27cdfce024b16e6dc11a71c0f72b5e8add59978d00de9a1e1e75302c3bccf874c5180745c44367bcd3a432cf8464781e0e87eff2b75dbb0da60c435498290cb1516e1bb749cb93e80d5a00c24ed9f1feafe93639203af7d4d69d9ac68ea86940fb6fe7c2a67b2cb037f1b1fddebefb9ff2870ebfc63fd03db911628f8bb81db29a382860208c192a60"}, 0x2) unshare$auto(0x184c) ioctl$auto_XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f0000000480)={r7, 0x0, 0x7fffffff, 0x5f2, 0x0, 0xfffffffffffffff7, [0x9, 0x0, 0x2e8c35ab, 0x7d, 0x1df, 0x73]}) ioctl$auto_FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000500)="5456436e2557b2493359c92b790821639c049936022ed0b2dce08d964906790124ff516f91582584d410bd00f409d39b8cf9b737054d4ab68e8347cba7757080b129b5b9266acdeaba5ad9290c0bbb82dc923ab3b9eca830920f35749fd177b47b8b828bf248b1f300a1c7d6b89abd3734f39a2de3f81bd08bf60928eb6d1b3a0648c83d1f6187a5113f738ef0a6d30ac288438770e1d59aa6349df4f27668cb1a6f9ab2dff6cafbc70f457000304ef64ed4") r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000600), r8) sendmsg$auto_OVS_METER_CMD_SET(r9, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x203400}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xc8, r10, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@OVS_METER_ATTR_BANDS={0xab, 0x4, 0x0, 0x1, [@generic="f0dd4f0d861bea8e8a9d54b01cbeab9cda8d3ba474cf84003bf843be95d2eb81df682cedf515589e88bf420381d5e5cfc11ac6facf235678c80aa6423777de28c41b3f997db30cc8a61892a627e9c4de4931d73eb845481e0cbe3d16daf1348dd7e4ebd0f96b6c24789df844b05bb033f95f0acc64c098f234427716cfc1f479c702169100b732d620603233424b0c0ba4db342cd7e1c4d7070fb45bfab440", @typed={0x8, 0x54, 0x0, 0x0, @u32=0x7}]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0xba4e}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4002000}, 0x20000004) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000007c0), 0x4000, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000800)={'vxcan1\x00', 0x0}) bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000840)=@query={@target_ifindex=r11, 0x1, 0x6, 0xf26a, 0x8, @count=0xe230, 0x0, 0xffff, 0x6d8e3506, 0x9, 0x4}, 0x10001) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFC_CMD_GET_DEVICE(r12, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x50115a0beb7c8eee}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x2}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004) ioctl$auto_VHOST_GET_VRING_BASE(r6, 0xc008af12, &(0x7f0000000a00)={0x3, 0x2ce60}) shmat$auto(0x3, &(0x7f0000000a40)='-\x00', 0x7) 427.567816ms ago: executing program 3 (id=4971): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0xfffffffffffffffd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) (async) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) openat$auto_clk_dump_fops_(0xffffffffffffff9c, &(0x7f0000005f40)='/sys/kernel/debug/clk/clk_dump\x00', 0x8800, 0x0) socket(0x11, 0x80003, 0x300) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xa, 0x8000) socket(0x10, 0x2, 0x0) (async) socket(0x10, 0x2, 0x0) r1 = socket(0x18, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) (async) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r3 = socket(0x18, 0x5, 0x1) connect$auto(r3, &(0x7f0000000000)=@ethernet={0x1, @multicast}, 0x3a) (async) connect$auto(r3, &(0x7f0000000000)=@ethernet={0x1, @multicast}, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x80047437, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x80047437, 0x0) syz_genetlink_get_family_id$auto_nlbl_mgmt(0x0, r3) socket(0x26, 0xa, 0x5) (async) socket(0x26, 0xa, 0x5) socket(0x10, 0x3, 0x6) (async) r4 = socket(0x10, 0x3, 0x6) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02368008027a8087010c800800e800", @ANYRES32=r0, @ANYBLOB="0800fb00", @ANYRES32=r4], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/io.pressure\x00', 0x80000, 0x0) 369.531199ms ago: executing program 4 (id=4972): r0 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$auto_cachefiles_daemon_fops_internal(r0, &(0x7f0000000300)="a04f", 0x2) (async) unshare$auto(0x40000080) (async) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000040)=0x5) (async) unshare$auto(0x40000080) (async) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/set_event\x00', 0x101901, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) r1 = openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x800) (async) r2 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek$auto(r2, 0x0, 0x2) (async) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0x112, 0x5) (async) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) socket(0x2, 0x80802, 0x0) (async) socket(0xa, 0x801, 0x84) (async) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) (async) io_uring_setup$auto(0x6, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) (async) socket(0xa, 0x2, 0x88) (async) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 3 (id=4973): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x3, 0xfff, 0x9b72, 0xffffffffffffffff, 0x0) prctl$auto(0x4, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x108000, 0x800032, 0x4) unshare$auto(0x40000080) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) rt_sigsuspend$auto(&(0x7f00000000c0)={0x4}, 0x8) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r0, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x105}) ioctl$auto(0x3, 0x80004509, 0x10000000000402) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) bind$auto(0xffffffffffffffff, &(0x7f0000000100)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x10000}, 0x80000000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) timer_create$auto(0x2, 0x0, 0x0) ioctl$auto(0x3, 0x800005411, 0x38) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) syz_open_procfs$namespace(0x0, 0x0) socket(0x2, 0xa, 0xe) ioctl$auto(0x1, 0x890b, 0x8) kernel console output (not intermixed with test programs): 1382 res=1 errno=0 [ 796.330747][ T30] audit: type=1804 audit(4294977764.501:189): pid=20970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3281" name="file0" dev="tmpfs" ino=1382 res=1 errno=0 [ 796.437751][T20977] bonding: no command found in bonding_masters - use +ifname or -ifname [ 796.585636][T20978] bonding: no command found in bonding_masters - use +ifname or -ifname [ 796.997890][T21008] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 797.100695][ T30] audit: type=1804 audit(4294977765.366:190): pid=21009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3287" name="/newroot/112/file0" dev="tmpfs" ino=617 res=1 errno=0 [ 797.222171][ T30] audit: type=1804 audit(4294977765.406:191): pid=21012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3287" name="/newroot/112/file0" dev="tmpfs" ino=617 res=1 errno=0 [ 798.244822][T17570] Bluetooth: hci1: Malformed LE Event: 0x0b [ 798.497087][ T30] audit: type=1804 audit(4294977766.784:192): pid=21037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3293" name="/newroot/233/file0" dev="tmpfs" ino=1253 res=1 errno=0 [ 798.646932][ T30] audit: type=1804 audit(4294977766.804:193): pid=21038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3293" name="/newroot/233/file0" dev="tmpfs" ino=1253 res=1 errno=0 [ 799.206731][T21047] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 799.276703][ T30] audit: type=1804 audit(4294977767.559:194): pid=21048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3295" name="/newroot/234/file0" dev="tmpfs" ino=1259 res=1 errno=0 [ 799.421335][ T30] audit: type=1804 audit(4294977767.609:195): pid=21049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3295" name="/newroot/234/file0" dev="tmpfs" ino=1259 res=1 errno=0 [ 800.088303][ T30] audit: type=1804 audit(4294977768.383:196): pid=21073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3300" name="/newroot/235/file0" dev="tmpfs" ino=1265 res=1 errno=0 [ 800.162529][T21077] nvme_fabrics: unknown parameter or missing value 'û@è' in ctrl creation request [ 800.232385][ T30] audit: type=1804 audit(4294977768.403:197): pid=21074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3300" name="/newroot/235/file0" dev="tmpfs" ino=1265 res=1 errno=0 [ 800.658772][T21086] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3303'. [ 800.710791][T21086] dummy0: entered promiscuous mode [ 800.726127][T21086] dummy0: entered allmulticast mode [ 801.480525][T21097] zram: Added device: zram3 [ 801.870021][ T30] audit: type=1804 audit(4294977770.173:198): pid=21109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3308" name="/newroot/239/file0" dev="tmpfs" ino=1286 res=1 errno=0 [ 802.006656][ T30] audit: type=1804 audit(4294977770.214:199): pid=21112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3308" name="/newroot/239/file0" dev="tmpfs" ino=1286 res=1 errno=0 [ 802.690513][ T30] audit: type=1804 audit(4294977770.998:200): pid=21126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3314" name="/newroot/241/file0" dev="tmpfs" ino=1298 res=1 errno=0 [ 802.842665][ T30] audit: type=1804 audit(4294977771.028:201): pid=21129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3314" name="/newroot/241/file0" dev="tmpfs" ino=1298 res=1 errno=0 [ 803.442537][T21140] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 804.837186][ T30] audit: type=1804 audit(4294977773.150:202): pid=21167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3324" name="/newroot/120/file0" dev="tmpfs" ino=659 res=1 errno=0 [ 804.895930][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 804.909992][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 804.966343][ T30] audit: type=1804 audit(4294977773.191:203): pid=21169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3324" name="/newroot/120/file0" dev="tmpfs" ino=659 res=1 errno=0 [ 805.509517][ T30] audit: type=1804 audit(4294977773.824:204): pid=21192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3330" name="/newroot/122/file0" dev="tmpfs" ino=670 res=1 errno=0 [ 805.640478][T21197] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 805.682131][ T30] audit: type=1804 audit(4294977773.874:205): pid=21195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3330" name="/newroot/122/file0" dev="tmpfs" ino=670 res=1 errno=0 [ 806.368253][ T30] audit: type=1804 audit(4294977774.689:206): pid=21212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3336" name="file0" dev="tmpfs" ino=1447 res=1 errno=0 [ 806.486313][ T30] audit: type=1804 audit(4294977774.729:207): pid=21214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3336" name="file0" dev="tmpfs" ino=1447 res=1 errno=0 [ 806.522641][T21215] Invalid ELF header magic: != ELF [ 807.282998][T21234] nvme_fabrics: unknown parameter or missing value 'û@è' in ctrl creation request [ 808.475114][ T30] audit: type=1804 audit(4294977776.811:208): pid=21270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3348" name="file0" dev="tmpfs" ino=1468 res=1 errno=0 [ 809.249830][T21287] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 810.009706][ T30] audit: type=1804 audit(4294977778.360:209): pid=21316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3360" name="/newroot/252/file0" dev="tmpfs" ino=1355 res=1 errno=0 [ 810.119577][ T30] audit: type=1804 audit(4294977778.460:210): pid=21315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3360" name="/newroot/252/file0" dev="tmpfs" ino=1355 res=1 errno=0 [ 811.613632][ T30] audit: type=1804 audit(4294977779.969:211): pid=21351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3369" name="/newroot/256/file0" dev="tmpfs" ino=1376 res=1 errno=0 [ 811.706361][ T30] audit: type=1804 audit(4294977780.009:212): pid=21352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3369" name="/newroot/256/file0" dev="tmpfs" ino=1376 res=1 errno=0 [ 811.910752][ T30] audit: type=1326 audit(4294977780.271:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21355 comm="syz.2.3371" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2e32f8f7c9 code=0x0 [ 812.953015][T21385] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 814.618015][ T30] audit: type=1804 audit(4294977782.986:214): pid=21430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3384" name="/newroot/234/file0" dev="tmpfs" ino=1253 res=1 errno=0 [ 814.651217][T21432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3386'. [ 814.924538][ T30] audit: type=1804 audit(4294977783.298:215): pid=21425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3384" name="/newroot/234/file0" dev="tmpfs" ino=1253 res=1 errno=0 [ 816.288769][T21478] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 816.949656][T21485] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3399'. [ 817.065528][T21492] FAULT_INJECTION: forcing a failure. [ 817.065528][T21492] name failslab, interval 1, probability 0, space 0, times 0 [ 817.123799][T21492] CPU: 0 UID: 0 PID: 21492 Comm: syz.2.3401 Tainted: G U L syzkaller #0 PREEMPT(full) [ 817.123825][T21492] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 817.123831][T21492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 817.123839][T21492] Call Trace: [ 817.123843][T21492] [ 817.123849][T21492] dump_stack_lvl+0x16c/0x1f0 [ 817.123876][T21492] should_fail_ex+0x512/0x640 [ 817.123892][T21492] ? kmem_cache_alloc_noprof+0x62/0x770 [ 817.123911][T21492] should_failslab+0xc2/0x120 [ 817.123932][T21492] kmem_cache_alloc_noprof+0x83/0x770 [ 817.123948][T21492] ? create_new_namespaces+0x30/0xab0 [ 817.123971][T21492] ? create_new_namespaces+0x30/0xab0 [ 817.123988][T21492] create_new_namespaces+0x30/0xab0 [ 817.124005][T21492] ? bpf_lsm_capable+0x9/0x10 [ 817.124024][T21492] ? security_capable+0x7e/0x260 [ 817.124040][T21492] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 817.124060][T21492] ksys_unshare+0x45b/0xa40 [ 817.124072][T21492] ? __pfx_ksys_unshare+0x10/0x10 [ 817.124086][T21492] ? xfd_validate_state+0x61/0x180 [ 817.124103][T21492] __x64_sys_unshare+0x31/0x40 [ 817.124115][T21492] do_syscall_64+0xcd/0xf80 [ 817.124129][T21492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.124143][T21492] RIP: 0033:0x7f2e32f8f7c9 [ 817.124154][T21492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 817.124168][T21492] RSP: 002b:00007f2e33eb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 817.124181][T21492] RAX: ffffffffffffffda RBX: 00007f2e331e5fa0 RCX: 00007f2e32f8f7c9 [ 817.124190][T21492] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 817.124197][T21492] RBP: 00007f2e33013f91 R08: 0000000000000000 R09: 0000000000000000 [ 817.124205][T21492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 817.124212][T21492] R13: 00007f2e331e6038 R14: 00007f2e331e5fa0 R15: 00007ffe6a59cd08 [ 817.124230][T21492] [ 817.505164][T21500] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 818.938512][T21539] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 819.519458][ T30] audit: type=1804 audit(4294977787.924:216): pid=21549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3422" name="/newroot/138/file0" dev="tmpfs" ino=755 res=1 errno=0 [ 819.618800][ T30] audit: type=1804 audit(4294977787.954:217): pid=21551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3422" name="/newroot/138/file0" dev="tmpfs" ino=755 res=1 errno=0 [ 823.468251][T21625] __vm_enough_memory: pid: 21625, comm: syz.3.3429, bytes: 4398046511104 not enough memory for the allocation [ 825.151518][T21661] Invalid ELF header magic: != ELF [ 825.843366][ T30] audit: type=1804 audit(4294977794.280:218): pid=21678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3444" name="/newroot/146/file0" dev="tmpfs" ino=799 res=1 errno=0 [ 825.949774][ T30] audit: type=1804 audit(4294977794.310:219): pid=21679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3444" name="/newroot/146/file0" dev="tmpfs" ino=799 res=1 errno=0 [ 826.285554][T21683] __vm_enough_memory: pid: 21683, comm: syz.2.3445, bytes: 4398046511104 not enough memory for the allocation [ 826.903654][ T30] audit: type=1804 audit(4294977795.346:220): pid=21695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3447" name="/newroot/147/file0" dev="tmpfs" ino=805 res=1 errno=0 [ 827.024701][ T30] audit: type=1804 audit(4294977795.447:221): pid=21693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3447" name="/newroot/147/file0" dev="tmpfs" ino=805 res=1 errno=0 [ 827.451082][T21711] NFSD: Failed to start, no listeners configured. [ 828.078971][T21731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3454'. [ 828.096690][T21733] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 828.259542][T21730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3454'. [ 829.734156][ T30] audit: type=1804 audit(4294977798.192:222): pid=21744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3456" name="/newroot/277/file0" dev="tmpfs" ino=1489 res=1 errno=0 [ 829.854150][ T30] audit: type=1804 audit(4294977798.192:223): pid=21745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3456" name="/newroot/277/file0" dev="tmpfs" ino=1489 res=1 errno=0 [ 831.168640][T21771] netlink: 13 bytes leftover after parsing attributes in process `syz.3.3463'. [ 831.214114][T21771] mmap: syz.3.3463 (21771): VmData 45883392 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 831.440382][T21780] __vm_enough_memory: pid: 21780, comm: syz.1.3460, bytes: 4398046511104 not enough memory for the allocation [ 832.715746][T21813] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 832.846821][T21818] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 832.881612][T21812] rnbd_client L213: map_device: Parameters missing [ 833.822418][T21839] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3475'. [ 834.223547][T21843] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3478'. [ 834.712212][T21859] __vm_enough_memory: pid: 21859, comm: syz.4.3479, bytes: 4398046511104 not enough memory for the allocation [ 834.889453][T21850] sd 0:0:1:0: PR command failed: 1026 [ 834.993889][T21850] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 835.066500][ T30] audit: type=1804 audit(4294977803.563:224): pid=21866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3481" name="file0" dev="tmpfs" ino=1695 res=1 errno=0 [ 835.142252][T21850] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 835.184997][ T30] audit: type=1804 audit(4294977803.613:225): pid=21867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3481" name="file0" dev="tmpfs" ino=1695 res=1 errno=0 [ 836.835433][T21906] &#$@\]\-: entered promiscuous mode [ 837.018964][T21911] random: crng reseeded on system resumption [ 837.088862][T21914] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 838.590054][T21951] blktrace: Concurrent blktraces are not allowed on loop2 [ 841.637636][T22039] netlink: 'syz.2.3522': attribute type 1 has an invalid length. [ 842.797717][T22070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3529'. [ 844.189196][T22116] __vm_enough_memory: pid: 22116, comm: syz.2.3536, bytes: 4398046511104 not enough memory for the allocation [ 845.100126][T22134] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input67 [ 845.460133][T17570] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 846.135883][T22158] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 846.774634][T22179] netlink: 472 bytes leftover after parsing attributes in process `syz.3.3549'. [ 848.773743][T22231] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 848.892068][T22227] netlink: 50 bytes leftover after parsing attributes in process `syz.3.3560'. [ 849.322984][T22238] could not allocate digest TFM handle [ 849.871146][T22264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3567'. [ 850.307506][T22283] netlink: 252 bytes leftover after parsing attributes in process `syz.1.3576'. [ 850.408347][T22285] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 851.509164][T22319] netlink: 252 bytes leftover after parsing attributes in process `syz.1.3588'. [ 852.306479][T22346] netlink: 354 bytes leftover after parsing attributes in process `syz.3.3594'. [ 853.398036][T22372] netlink: 504 bytes leftover after parsing attributes in process `syz.1.3599'. [ 854.361422][T22403] input: f¬ as /devices/virtual/input/input69 [ 854.613685][T22407] netlink: 252 bytes leftover after parsing attributes in process `syz.3.3607'. [ 854.898209][T22415] netlink: 504 bytes leftover after parsing attributes in process `syz.1.3610'. [ 856.534561][T22454] FAULT_INJECTION: forcing a failure. [ 856.534561][T22454] name failslab, interval 1, probability 0, space 0, times 0 [ 856.603214][T22454] CPU: 0 UID: 0 PID: 22454 Comm: syz.2.3620 Tainted: G U L syzkaller #0 PREEMPT(full) [ 856.603245][T22454] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 856.603251][T22454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 856.603259][T22454] Call Trace: [ 856.603264][T22454] [ 856.603270][T22454] dump_stack_lvl+0x16c/0x1f0 [ 856.603299][T22454] should_fail_ex+0x512/0x640 [ 856.603315][T22454] ? kmem_cache_alloc_noprof+0x62/0x770 [ 856.603334][T22454] should_failslab+0xc2/0x120 [ 856.603355][T22454] kmem_cache_alloc_noprof+0x83/0x770 [ 856.603371][T22454] ? __anon_vma_prepare+0xae/0x5e0 [ 856.603390][T22454] ? __anon_vma_prepare+0xae/0x5e0 [ 856.603404][T22454] __anon_vma_prepare+0xae/0x5e0 [ 856.603418][T22454] ? do_raw_spin_lock+0x12c/0x2b0 [ 856.603436][T22454] __vmf_anon_prepare+0x11c/0x240 [ 856.603457][T22454] do_huge_pmd_anonymous_page+0x161/0x2200 [ 856.603477][T22454] ? __pmd_alloc+0x6aa/0x9c0 [ 856.603498][T22454] __handle_mm_fault+0x25ca/0x2bb0 [ 856.603517][T22454] ? __pfx___handle_mm_fault+0x10/0x10 [ 856.603554][T22454] handle_mm_fault+0x3fe/0xad0 [ 856.603572][T22454] __get_user_pages+0x54e/0x3590 [ 856.603601][T22454] ? __pfx___get_user_pages+0x10/0x10 [ 856.603627][T22454] populate_vma_page_range+0x267/0x3f0 [ 856.603650][T22454] ? __pfx_populate_vma_page_range+0x10/0x10 [ 856.603670][T22454] ? __pfx_find_vma_intersection+0x10/0x10 [ 856.603690][T22454] ? do_mmap+0x69c/0x1210 [ 856.603710][T22454] __mm_populate+0x1d8/0x380 [ 856.603731][T22454] ? __pfx___mm_populate+0x10/0x10 [ 856.603752][T22454] ? up_write+0x282/0x4e0 [ 856.603768][T22454] vm_mmap_pgoff+0x37f/0x470 [ 856.603789][T22454] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 856.603812][T22454] ? __x64_sys_futex+0x1e0/0x4c0 [ 856.603826][T22454] ? __x64_sys_futex+0x1e9/0x4c0 [ 856.603844][T22454] ksys_mmap_pgoff+0x7d/0x5c0 [ 856.603861][T22454] ? xfd_validate_state+0x61/0x180 [ 856.603873][T22454] ? __pfx_ksys_write+0x10/0x10 [ 856.603895][T22454] __x64_sys_mmap+0x125/0x190 [ 856.603910][T22454] do_syscall_64+0xcd/0xf80 [ 856.603925][T22454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.603940][T22454] RIP: 0033:0x7f2e32f8f7c9 [ 856.603952][T22454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 856.603966][T22454] RSP: 002b:00007f2e33eb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 856.603979][T22454] RAX: ffffffffffffffda RBX: 00007f2e331e5fa0 RCX: 00007f2e32f8f7c9 [ 856.603988][T22454] RDX: 00000000000000df RSI: 0000000000400408 RDI: 0000000000000000 [ 856.603996][T22454] RBP: 00007f2e33013f91 R08: 0000000000000002 R09: 0000000000008000 [ 856.604004][T22454] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 856.604011][T22454] R13: 00007f2e331e6038 R14: 00007f2e331e5fa0 R15: 00007ffe6a59cd08 [ 856.604030][T22454] [ 857.220306][T22456] sd 0:0:1:0: PR command failed: 1026 [ 857.225711][T22456] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 857.284692][T22456] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 857.447804][T22461] netlink: 504 bytes leftover after parsing attributes in process `syz.4.3621'. [ 858.021920][T22470] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3625'. [ 859.547022][T22493] netlink: 504 bytes leftover after parsing attributes in process `syz.2.3632'. [ 859.788975][T22495] Invalid ELF header magic: != ELF [ 859.930336][T22504] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 860.042664][T22504] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 860.129516][T22504] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 860.231865][T22504] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 860.488560][T22518] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 860.580420][T22518] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 860.650473][T22518] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 860.751066][T22518] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 860.954887][T22525] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 861.087525][T22525] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 861.160177][T22525] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 861.257595][T22525] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 861.411029][T22534] netlink: 504 bytes leftover after parsing attributes in process `syz.2.3642'. [ 861.620184][T22539] input: f¬ as /devices/virtual/input/input70 [ 863.370770][T22584] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 863.481436][T22586] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 863.709887][T22594] netlink: 504 bytes leftover after parsing attributes in process `syz.1.3653'. [ 864.745949][T22623] netlink: 504 bytes leftover after parsing attributes in process `syz.1.3662'. [ 865.986447][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 865.993413][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 866.016702][T22661] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3668'. [ 866.965675][T22677] netlink: 504 bytes leftover after parsing attributes in process `syz.4.3672'. [ 867.599003][T22686] Invalid ELF header magic: != ELF [ 867.820628][T22695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3676'. [ 867.900901][T22693] NFSD: Failed to start, no listeners configured. [ 869.341061][T22717] netlink: 504 bytes leftover after parsing attributes in process `syz.4.3683'. [ 869.781751][T22729] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 870.685949][T22747] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 872.322605][T22768] Invalid ELF header magic: != ELF [ 872.956532][T22789] netlink: 74 bytes leftover after parsing attributes in process `syz.2.3700'. [ 873.141249][T22800] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3701'. [ 873.216816][T22800] veth0_macvtap: left promiscuous mode [ 873.245408][T22800] macvtap0: entered promiscuous mode [ 873.267980][T22800] macvtap0: entered allmulticast mode [ 874.975964][T22828] Invalid ELF header magic: != ELF [ 876.266481][T22849] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 876.383522][T22849] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 876.659164][T22859] netlink: 504 bytes leftover after parsing attributes in process `syz.1.3716'. [ 876.873022][T22868] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3718'. [ 877.078260][T22880] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 877.328807][T22888] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 877.712267][T22891] Invalid ELF header magic: != ELF [ 877.790453][T22894] netlink: 504 bytes leftover after parsing attributes in process `syz.4.3726'. [ 878.011796][ T30] audit: type=1804 audit(4294977846.737:226): pid=22901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3727" name="/newroot/341/file0" dev="tmpfs" ino=1823 res=1 errno=0 [ 878.113480][ T30] audit: type=1804 audit(4294977846.778:227): pid=22907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3727" name="/newroot/341/file0" dev="tmpfs" ino=1823 res=1 errno=0 [ 878.995556][T22934] netlink: 504 bytes leftover after parsing attributes in process `syz.4.3737'. [ 879.022931][T22926] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3732'. [ 879.222863][T22941] Invalid ELF header magic: != ELF [ 883.057824][T23020] netlink: 504 bytes leftover after parsing attributes in process `syz.1.3759'. [ 883.580035][T23039] bridge0: port 3(gretap0) entered blocking state [ 883.662346][T23039] bridge0: port 3(gretap0) entered disabled state [ 883.683127][T23038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3762'. [ 883.735140][T23039] gretap0: entered allmulticast mode [ 883.828630][T23039] gretap0: entered promiscuous mode [ 883.845730][T23028] zswap: compressor not available [ 883.889718][T23039] bridge0: port 3(gretap0) entered blocking state [ 883.896220][T23039] bridge0: port 3(gretap0) entered forwarding state [ 884.715623][T23071] netlink: 504 bytes leftover after parsing attributes in process `syz.3.3769'. [ 884.875204][T23056] binder: BINDER_SET_CONTEXT_MGR already set [ 884.930120][T23056] binder: 23053:23056 ioctl 4018620d 9 returned -16 [ 885.569281][T23104] FAULT_INJECTION: forcing a failure. [ 885.569281][T23104] name failslab, interval 1, probability 0, space 0, times 0 [ 885.616406][T23104] CPU: 0 UID: 0 PID: 23104 Comm: syz.1.3779 Tainted: G U L syzkaller #0 PREEMPT(full) [ 885.616431][T23104] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 885.616437][T23104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 885.616446][T23104] Call Trace: [ 885.616451][T23104] [ 885.616457][T23104] dump_stack_lvl+0x16c/0x1f0 [ 885.616489][T23104] should_fail_ex+0x512/0x640 [ 885.616506][T23104] ? kmem_cache_alloc_noprof+0x62/0x770 [ 885.616525][T23104] ? __pfx_nst_fop_open+0x10/0x10 [ 885.616543][T23104] should_failslab+0xc2/0x120 [ 885.616564][T23104] kmem_cache_alloc_noprof+0x83/0x770 [ 885.616581][T23104] ? seq_open+0x55/0x170 [ 885.616599][T23104] ? __pfx_nst_fop_open+0x10/0x10 [ 885.616616][T23104] ? seq_open+0x55/0x170 [ 885.616629][T23104] seq_open+0x55/0x170 [ 885.616645][T23104] __seq_open_private+0x3e/0xd0 [ 885.616663][T23104] nst_fop_open+0x24/0x120 [ 885.616681][T23104] full_proxy_open_regular+0x1b9/0x350 [ 885.616704][T23104] do_dentry_open+0x748/0x1590 [ 885.616724][T23104] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 885.616749][T23104] vfs_open+0x82/0x3f0 [ 885.616767][T23104] path_openat+0x2078/0x3140 [ 885.616794][T23104] ? __pfx_path_openat+0x10/0x10 [ 885.616821][T23104] do_filp_open+0x20b/0x470 [ 885.616841][T23104] ? __pfx_do_filp_open+0x10/0x10 [ 885.616875][T23104] ? alloc_fd+0x471/0x7d0 [ 885.616900][T23104] do_sys_openat2+0x121/0x290 [ 885.616915][T23104] ? __pfx_do_sys_openat2+0x10/0x10 [ 885.616937][T23104] __x64_sys_openat+0x174/0x210 [ 885.616953][T23104] ? __pfx___x64_sys_openat+0x10/0x10 [ 885.616976][T23104] do_syscall_64+0xcd/0xf80 [ 885.616991][T23104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.617005][T23104] RIP: 0033:0x7f7d5518f7c9 [ 885.617018][T23104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 885.617031][T23104] RSP: 002b:00007f7d56046038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 885.617044][T23104] RAX: ffffffffffffffda RBX: 00007f7d553e5fa0 RCX: 00007f7d5518f7c9 [ 885.617053][T23104] RDX: 0000000000000200 RSI: 0000200000001640 RDI: ffffffffffffff9c [ 885.617062][T23104] RBP: 00007f7d55213f91 R08: 0000000000000000 R09: 0000000000000000 [ 885.617070][T23104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 885.617078][T23104] R13: 00007f7d553e6038 R14: 00007f7d553e5fa0 R15: 00007fffe7ee2278 [ 885.617097][T23104] [ 886.188822][T23120] bond0: option slaves: interface -Âô does not exist! [ 886.633349][T23137] binder: BINDER_SET_CONTEXT_MGR already set [ 886.648915][T23137] binder: 23123:23137 ioctl 4018620d 9 returned -16 [ 886.960525][T23148] FAULT_INJECTION: forcing a failure. [ 886.960525][T23148] name failslab, interval 1, probability 0, space 0, times 0 [ 887.034969][T23148] CPU: 0 UID: 0 PID: 23148 Comm: syz.1.3789 Tainted: G U L syzkaller #0 PREEMPT(full) [ 887.034996][T23148] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 887.035003][T23148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 887.035011][T23148] Call Trace: [ 887.035016][T23148] [ 887.035023][T23148] dump_stack_lvl+0x16c/0x1f0 [ 887.035049][T23148] should_fail_ex+0x512/0x640 [ 887.035066][T23148] ? kmem_cache_alloc_noprof+0x62/0x770 [ 887.035086][T23148] should_failslab+0xc2/0x120 [ 887.035108][T23148] kmem_cache_alloc_noprof+0x83/0x770 [ 887.035125][T23148] ? __kernfs_new_node+0xd2/0x9b0 [ 887.035144][T23148] ? __kernfs_new_node+0xd2/0x9b0 [ 887.035159][T23148] __kernfs_new_node+0xd2/0x9b0 [ 887.035178][T23148] ? __pfx___kernfs_new_node+0x10/0x10 [ 887.035199][T23148] ? find_held_lock+0x2b/0x80 [ 887.035217][T23148] ? kernfs_root+0xee/0x2a0 [ 887.035236][T23148] kernfs_new_node+0x13c/0x1e0 [ 887.035258][T23148] __kernfs_create_file+0x53/0x350 [ 887.035281][T23148] sysfs_add_file_mode_ns+0x207/0x3c0 [ 887.035302][T23148] internal_create_group+0x597/0xf70 [ 887.035323][T23148] ? __pfx_internal_create_group+0x10/0x10 [ 887.035343][T23148] ? kernfs_create_link+0x1bd/0x240 [ 887.035359][T23148] internal_create_groups+0x9d/0x150 [ 887.035388][T23148] device_add+0x6f7/0x1980 [ 887.035412][T23148] ? __pfx_device_add+0x10/0x10 [ 887.035432][T23148] ? lockdep_init_map_type+0x5c/0x270 [ 887.035447][T23148] ? __init_waitqueue_head+0xca/0x150 [ 887.035468][T23148] netdev_register_kobject+0x1a9/0x3d0 [ 887.035486][T23148] register_netdevice+0x13c1/0x21e0 [ 887.035510][T23148] ? rcu_is_watching+0x12/0xc0 [ 887.035529][T23148] ? __pfx_register_netdevice+0x10/0x10 [ 887.035555][T23148] slip_open+0xb86/0x1150 [ 887.035573][T23148] ? __pfx_slip_open+0x10/0x10 [ 887.035586][T23148] ? down_write+0x14d/0x200 [ 887.035603][T23148] ? __pfx_slip_open+0x10/0x10 [ 887.035616][T23148] tty_ldisc_open+0x9f/0x120 [ 887.035636][T23148] tty_set_ldisc+0x32b/0x780 [ 887.035657][T23148] tty_ioctl+0xc2d/0x1650 [ 887.035677][T23148] ? __pfx_tty_ioctl+0x10/0x10 [ 887.035702][T23148] ? find_held_lock+0x2b/0x80 [ 887.035719][T23148] ? hook_file_ioctl_common+0x144/0x410 [ 887.035741][T23148] ? __fget_files+0x20e/0x3c0 [ 887.035763][T23148] ? __pfx_tty_ioctl+0x10/0x10 [ 887.035783][T23148] __x64_sys_ioctl+0x18e/0x210 [ 887.035801][T23148] do_syscall_64+0xcd/0xf80 [ 887.035816][T23148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.035830][T23148] RIP: 0033:0x7f7d5518f7c9 [ 887.035842][T23148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 887.035856][T23148] RSP: 002b:00007f7d56046038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 887.035869][T23148] RAX: ffffffffffffffda RBX: 00007f7d553e5fa0 RCX: 00007f7d5518f7c9 [ 887.035879][T23148] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000005 [ 887.035887][T23148] RBP: 00007f7d55213f91 R08: 0000000000000000 R09: 0000000000000000 [ 887.035896][T23148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 887.035905][T23148] R13: 00007f7d553e6038 R14: 00007f7d553e5fa0 R15: 00007fffe7ee2278 [ 887.035925][T23148] [ 888.376420][T23170] netlink: 334 bytes leftover after parsing attributes in process `syz.4.3794'. [ 888.769952][ T30] audit: type=1107 audit(4294977857.559:228): pid=23180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 888.842524][ T30] audit: type=1107 audit(4294977857.589:229): pid=23180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 889.839106][T23201] zswap: compressor not available [ 890.104241][T23220] netlink: 'syz.1.3804': attribute type 1 has an invalid length. [ 890.500657][T23232] FAULT_INJECTION: forcing a failure. [ 890.500657][T23232] name failslab, interval 1, probability 0, space 0, times 0 [ 890.590035][T23232] CPU: 0 UID: 0 PID: 23232 Comm: syz.2.3806 Tainted: G U L syzkaller #0 PREEMPT(full) [ 890.590062][T23232] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 890.590067][T23232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 890.590076][T23232] Call Trace: [ 890.590081][T23232] [ 890.590087][T23232] dump_stack_lvl+0x16c/0x1f0 [ 890.590115][T23232] should_fail_ex+0x512/0x640 [ 890.590133][T23232] ? __kmalloc_noprof+0xca/0x910 [ 890.590161][T23232] should_failslab+0xc2/0x120 [ 890.590184][T23232] __kmalloc_noprof+0xeb/0x910 [ 890.590200][T23232] ? cache_create_net+0x9d/0x220 [ 890.590223][T23232] ? cache_create_net+0x9d/0x220 [ 890.590242][T23232] cache_create_net+0x9d/0x220 [ 890.590264][T23232] gss_svc_init_net+0x122/0x660 [ 890.590283][T23232] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 890.590299][T23232] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 890.590319][T23232] ops_init+0x1e2/0x5f0 [ 890.590341][T23232] setup_net+0x11d/0x3a0 [ 890.590361][T23232] ? __pfx_setup_net+0x10/0x10 [ 890.590379][T23232] ? lockdep_init_map_type+0x5c/0x270 [ 890.590394][T23232] ? mutex_init_lockep+0x110/0x150 [ 890.590411][T23232] copy_net_ns+0x351/0x7c0 [ 890.590426][T23232] create_new_namespaces+0x3ea/0xab0 [ 890.590449][T23232] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 890.590469][T23232] ksys_unshare+0x45b/0xa40 [ 890.590482][T23232] ? __pfx_ksys_unshare+0x10/0x10 [ 890.590495][T23232] ? xfd_validate_state+0x61/0x180 [ 890.590514][T23232] __x64_sys_unshare+0x31/0x40 [ 890.590526][T23232] do_syscall_64+0xcd/0xf80 [ 890.590541][T23232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.590555][T23232] RIP: 0033:0x7f2e32f8f7c9 [ 890.590567][T23232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 890.590580][T23232] RSP: 002b:00007f2e33eb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 890.590593][T23232] RAX: ffffffffffffffda RBX: 00007f2e331e5fa0 RCX: 00007f2e32f8f7c9 [ 890.590602][T23232] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 890.590610][T23232] RBP: 00007f2e33013f91 R08: 0000000000000000 R09: 0000000000000000 [ 890.590618][T23232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 890.590626][T23232] R13: 00007f2e331e6038 R14: 00007f2e331e5fa0 R15: 00007ffe6a59cd08 [ 890.590645][T23232] [ 892.044117][T23259] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 892.079482][T23259] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 892.131248][T23259] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 892.180644][T23259] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 892.201217][T23259] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 892.321409][T23266] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3816'. [ 892.527115][T23279] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 892.582446][T23283] netlink: 504 bytes leftover after parsing attributes in process `syz.2.3818'. [ 892.610137][T23276] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3817'. [ 892.698173][T23278] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3817'. [ 892.737299][T23278] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3817'. [ 892.781709][T23278] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3817'. [ 892.839907][T23278] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3817'. [ 892.892243][T23278] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3817'. [ 892.916234][T23278] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3817'. [ 892.953579][T23278] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3817'. [ 894.059382][T17570] Bluetooth: hci1: command 0x0c1a tx timeout [ 894.132663][T23321] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 894.140793][T17570] Bluetooth: hci2: command 0x0c1a tx timeout [ 894.195125][T23321] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 894.220579][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 894.226602][T17570] Bluetooth: hci0: command 0x0c1a tx timeout [ 895.371764][T23348] Invalid ELF header magic: != ELF [ 896.127701][T17570] Bluetooth: hci1: command 0x0c1a tx timeout [ 896.555983][ T30] audit: type=1800 audit(4294977865.403:230): pid=23378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3839" name="discovery_nqn" dev="configfs" ino=111870 res=0 errno=0 [ 897.194088][T23401] Invalid ELF header magic: != ELF [ 898.480596][T23440] Invalid ELF header magic: != ELF [ 899.076202][T23444] zswap: compressor not available [ 899.557890][T23471] netlink: 'syz.3.3861': attribute type 1 has an invalid length. [ 900.211589][T23486] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 901.251222][T23515] FAULT_INJECTION: forcing a failure. [ 901.251222][T23515] name failslab, interval 1, probability 0, space 0, times 0 [ 901.307710][T23515] CPU: 0 UID: 0 PID: 23515 Comm: syz.2.3875 Tainted: G U L syzkaller #0 PREEMPT(full) [ 901.307738][T23515] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 901.307743][T23515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 901.307751][T23515] Call Trace: [ 901.307757][T23515] [ 901.307762][T23515] dump_stack_lvl+0x16c/0x1f0 [ 901.307790][T23515] should_fail_ex+0x512/0x640 [ 901.307807][T23515] ? __kmalloc_cache_noprof+0x5f/0x800 [ 901.307825][T23515] should_failslab+0xc2/0x120 [ 901.307847][T23515] __kmalloc_cache_noprof+0x80/0x800 [ 901.307863][T23515] ? cuse_channel_open+0x4f/0x7f0 [ 901.307886][T23515] ? __pfx_cuse_channel_open+0x10/0x10 [ 901.307905][T23515] ? cuse_channel_open+0x4f/0x7f0 [ 901.307923][T23515] ? find_held_lock+0x2b/0x80 [ 901.307940][T23515] cuse_channel_open+0x4f/0x7f0 [ 901.307960][T23515] ? __pfx_cuse_channel_open+0x10/0x10 [ 901.307984][T23515] misc_open+0x26d/0x450 [ 901.308002][T23515] ? __pfx_misc_open+0x10/0x10 [ 901.308017][T23515] chrdev_open+0x234/0x6a0 [ 901.308038][T23515] ? __pfx_apparmor_file_open+0x10/0x10 [ 901.308054][T23515] ? __pfx_chrdev_open+0x10/0x10 [ 901.308075][T23515] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 901.308101][T23515] do_dentry_open+0x748/0x1590 [ 901.308120][T23515] ? __pfx_chrdev_open+0x10/0x10 [ 901.308146][T23515] vfs_open+0x82/0x3f0 [ 901.308163][T23515] path_openat+0x2078/0x3140 [ 901.308189][T23515] ? __pfx_path_openat+0x10/0x10 [ 901.308217][T23515] do_filp_open+0x20b/0x470 [ 901.308237][T23515] ? __pfx_do_filp_open+0x10/0x10 [ 901.308270][T23515] ? alloc_fd+0x471/0x7d0 [ 901.308295][T23515] do_sys_openat2+0x121/0x290 [ 901.308311][T23515] ? __pfx_do_sys_openat2+0x10/0x10 [ 901.308327][T23515] ? find_held_lock+0x2b/0x80 [ 901.308349][T23515] __x64_sys_openat+0x174/0x210 [ 901.308365][T23515] ? __pfx___x64_sys_openat+0x10/0x10 [ 901.308394][T23515] do_syscall_64+0xcd/0xf80 [ 901.308409][T23515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.308424][T23515] RIP: 0033:0x7f2e32f8f7c9 [ 901.308436][T23515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 901.308450][T23515] RSP: 002b:00007f2e33eb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 901.308464][T23515] RAX: ffffffffffffffda RBX: 00007f2e331e5fa0 RCX: 00007f2e32f8f7c9 [ 901.308473][T23515] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 901.308481][T23515] RBP: 00007f2e33013f91 R08: 0000000000000000 R09: 0000000000000000 [ 901.308490][T23515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 901.308498][T23515] R13: 00007f2e331e6038 R14: 00007f2e331e5fa0 R15: 00007ffe6a59cd08 [ 901.308517][T23515] [ 902.657544][T23534] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 903.081019][T23552] bridge0: port 3(netdevsim1) entered blocking state [ 903.135564][T23552] bridge0: port 3(netdevsim1) entered disabled state [ 903.206459][T23552] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 903.249883][T23552] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 903.280547][T23552] bridge0: port 3(netdevsim1) entered blocking state [ 903.287355][T23552] bridge0: port 3(netdevsim1) entered forwarding state [ 903.620510][T23569] __nla_validate_parse: 18 callbacks suppressed [ 903.620525][T23569] netlink: 326 bytes leftover after parsing attributes in process `syz.3.3887'. [ 903.656688][T23560] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 903.761014][T23571] tipc: Started in network mode [ 903.767336][T23560] File: /dev/ram5 PID: 23560 Comm: syz.4.3886 [ 903.784166][T23571] tipc: Node identity ee00, cluster identity 4711 [ 903.813135][T23571] tipc: Node number set to 60928 [ 903.948018][T23574] Invalid ELF header magic: != ELF [ 904.108179][T23579] FAULT_INJECTION: forcing a failure. [ 904.108179][T23579] name failslab, interval 1, probability 0, space 0, times 0 [ 904.145293][T23583] ecryptfs_miscdev_write: Invalid packet size [192] [ 904.185516][T23579] CPU: 0 UID: 0 PID: 23579 Comm: syz.2.3890 Tainted: G U L syzkaller #0 PREEMPT(full) [ 904.185542][T23579] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 904.185547][T23579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 904.185556][T23579] Call Trace: [ 904.185561][T23579] [ 904.185567][T23579] dump_stack_lvl+0x16c/0x1f0 [ 904.185594][T23579] should_fail_ex+0x512/0x640 [ 904.185611][T23579] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 904.185631][T23579] should_failslab+0xc2/0x120 [ 904.185652][T23579] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 904.185669][T23579] ? dquot_alloc_inode+0x51b/0xb90 [ 904.185685][T23579] ? __dquot_initialize+0x299/0xd50 [ 904.185700][T23579] ? __d_alloc+0x35/0xa80 [ 904.185716][T23579] ? __d_alloc+0x35/0xa80 [ 904.185727][T23579] __d_alloc+0x35/0xa80 [ 904.185741][T23579] d_alloc_pseudo+0x1c/0xc0 [ 904.185759][T23579] alloc_file_pseudo+0xcf/0x230 [ 904.185776][T23579] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 904.185796][T23579] __shmem_file_setup+0x1a8/0x350 [ 904.185821][T23579] shmem_zero_setup+0x93/0x1b0 [ 904.185838][T23579] __mmap_region+0x2277/0x2a00 [ 904.185856][T23579] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 904.185878][T23579] ? __pfx___mmap_region+0x10/0x10 [ 904.185903][T23579] ? mt_validate_nulls+0x1b7/0x9d0 [ 904.185927][T23579] ? __lock_acquire+0x436/0x2890 [ 904.185976][T23579] ? rcu_is_watching+0x12/0xc0 [ 904.186001][T23579] mmap_region+0x1ab/0x3f0 [ 904.186017][T23579] ? __get_unmapped_area+0x267/0x3f0 [ 904.186040][T23579] do_mmap+0xa3e/0x1210 [ 904.186063][T23579] ? __pfx_do_mmap+0x10/0x10 [ 904.186082][T23579] ? __pfx_down_write_killable+0x10/0x10 [ 904.186102][T23579] vm_mmap_pgoff+0x29e/0x470 [ 904.186125][T23579] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 904.186149][T23579] ? __x64_sys_futex+0x1e0/0x4c0 [ 904.186164][T23579] ? __x64_sys_futex+0x1e9/0x4c0 [ 904.186182][T23579] ksys_mmap_pgoff+0x7d/0x5c0 [ 904.186200][T23579] ? xfd_validate_state+0x61/0x180 [ 904.186217][T23579] __x64_sys_mmap+0x125/0x190 [ 904.186234][T23579] do_syscall_64+0xcd/0xf80 [ 904.186249][T23579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.186263][T23579] RIP: 0033:0x7f2e32f8f7c9 [ 904.186275][T23579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 904.186288][T23579] RSP: 002b:00007f2e33e77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 904.186302][T23579] RAX: ffffffffffffffda RBX: 00007f2e331e6180 RCX: 00007f2e32f8f7c9 [ 904.186311][T23579] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 904.186319][T23579] RBP: 00007f2e33013f91 R08: fffffffffffffffa R09: 0000000000008000 [ 904.186328][T23579] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 904.186336][T23579] R13: 00007f2e331e6218 R14: 00007f2e331e6180 R15: 00007ffe6a59cd08 [ 904.186354][T23579] [ 906.547818][T23620] Invalid ELF header magic: != ELF [ 906.615359][T23621] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3899'. [ 908.011622][T23652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3908'. [ 908.032887][T23652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3908'. [ 908.124683][T23657] random: crng reseeded on system resumption [ 908.609940][T23668] Invalid ELF header magic: != ELF [ 909.142627][T23692] could not allocate digest TFM handle [ 909.591929][T23700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3917'. [ 911.076657][T23728] warning: `syz.2.3923' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 911.867287][T23736] Invalid ELF header magic: != ELF [ 914.019389][T23784] Invalid ELF header magic: != ELF [ 914.471626][ T30] audit: type=1804 audit(4294977883.405:231): pid=23803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3939" name="/newroot/sys/kernel/tracing/trace_marker_raw" dev="tracefs" ino=1140 res=1 errno=0 [ 915.140841][T23835] futex_wake_op: syz.4.3946 tries to shift op by -2048; fix this program [ 915.216021][T23835] futex_wake_op: syz.4.3946 tries to shift op by -2048; fix this program [ 916.336253][T23860] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 916.920305][T23842] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3948'. [ 917.346738][T23874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3954'. [ 918.100373][T23884] NFSD: Failed to start, no listeners configured. [ 918.481069][T23892] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 918.621285][T23892] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 918.683923][T23892] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 918.793829][T23892] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 920.433710][T23918] hub 8-0:1.0: USB hub found [ 920.508933][T23918] hub 8-0:1.0: 1 port detected [ 920.550515][T17570] Bluetooth: hci1: command 0x0c1a tx timeout [ 920.631577][T17570] Bluetooth: hci2: command 0x0c1a tx timeout [ 920.709337][T17570] Bluetooth: hci3: command 0x0c1a tx timeout [ 920.788712][T17570] Bluetooth: hci0: command 0x0c1a tx timeout [ 921.112869][T23952] Invalid ELF header magic: != ELF [ 921.121687][T23958] futex_wake_op: syz.1.3970 tries to shift op by -2048; fix this program [ 921.153345][T23952] Invalid ELF header magic: != ELF [ 921.196278][T23958] futex_wake_op: syz.1.3970 tries to shift op by -2048; fix this program [ 921.350518][T23952] Invalid ELF header magic: != ELF [ 921.446249][T23952] Invalid ELF header magic: != ELF [ 921.499172][T23952] Invalid ELF header magic: != ELF [ 921.557403][T23952] Invalid ELF header magic: != ELF [ 921.598718][T23952] Invalid ELF header magic: != ELF [ 921.629179][T23952] Invalid ELF header magic: != ELF [ 921.672937][T23952] Invalid ELF header magic: != ELF [ 921.721877][T23952] Invalid ELF header magic: != ELF [ 921.764132][T23952] Invalid ELF header magic: != ELF [ 921.925302][T17570] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 922.857735][T23984] rtc_cmos 00:00: Alarms can be up to one day in the future [ 923.355330][T15234] rtc_cmos 00:00: Alarms can be up to one day in the future [ 923.412462][T15234] rtc_cmos 00:00: Alarms can be up to one day in the future [ 923.464270][T15234] rtc_cmos 00:00: Alarms can be up to one day in the future [ 923.516666][T15234] rtc_cmos 00:00: Alarms can be up to one day in the future [ 923.578740][T15234] rtc rtc0: __rtc_set_alarm: err=-22 [ 925.246582][T17570] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 925.436095][T24036] NFSD: Failed to start, no listeners configured. [ 926.675819][T24064] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 927.077688][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 927.084545][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 927.110572][T24060] Process accounting resumed [ 927.394268][T24074] Invalid ELF header magic: != ELF [ 930.372258][T24114] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 931.019623][T24129] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 931.063654][T24129] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 931.074242][T17570] Bluetooth: hci2: unexpected subevent 0x18 length: 123 > 19 [ 931.081731][T17570] Bluetooth: hci2: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 931.094539][T17570] Bluetooth: hci2: unexpected subevent 0x18 length: 123 > 19 [ 931.102025][T17570] Bluetooth: hci2: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 931.779442][T24147] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 932.291103][T24153] netlink: 504 bytes leftover after parsing attributes in process `syz.1.4014'. [ 933.892834][T24182] FAULT_INJECTION: forcing a failure. [ 933.892834][T24182] name failslab, interval 1, probability 0, space 0, times 0 [ 934.001865][T24182] CPU: 0 UID: 0 PID: 24182 Comm: syz.1.4023 Tainted: G U L syzkaller #0 PREEMPT(full) [ 934.001892][T24182] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 934.001898][T24182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 934.001907][T24182] Call Trace: [ 934.001912][T24182] [ 934.001919][T24182] dump_stack_lvl+0x16c/0x1f0 [ 934.001947][T24182] should_fail_ex+0x512/0x640 [ 934.001964][T24182] ? kmem_cache_alloc_noprof+0x62/0x770 [ 934.001983][T24182] should_failslab+0xc2/0x120 [ 934.002004][T24182] kmem_cache_alloc_noprof+0x83/0x770 [ 934.002021][T24182] ? security_file_alloc+0x34/0x2b0 [ 934.002049][T24182] ? security_file_alloc+0x34/0x2b0 [ 934.002065][T24182] security_file_alloc+0x34/0x2b0 [ 934.002083][T24182] init_file+0x93/0x4c0 [ 934.002100][T24182] alloc_empty_file+0x73/0x1e0 [ 934.002115][T24182] alloc_file_pseudo+0x13a/0x230 [ 934.002131][T24182] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 934.002147][T24182] ? security_inode_init_security_anon+0x79/0x240 [ 934.002166][T24182] __do_sys_memfd_secret+0x11d/0x490 [ 934.002187][T24182] do_syscall_64+0xcd/0xf80 [ 934.002202][T24182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.002216][T24182] RIP: 0033:0x7f7d5518f7c9 [ 934.002227][T24182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 934.002241][T24182] RSP: 002b:00007f7d56046038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 934.002255][T24182] RAX: ffffffffffffffda RBX: 00007f7d553e5fa0 RCX: 00007f7d5518f7c9 [ 934.002265][T24182] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 934.002273][T24182] RBP: 00007f7d55213f91 R08: 0000000000000000 R09: 0000000000000000 [ 934.002281][T24182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 934.002289][T24182] R13: 00007f7d553e6038 R14: 00007f7d553e5fa0 R15: 00007fffe7ee2278 [ 934.002307][T24182] [ 934.274230][T24193] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 934.332916][T24200] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4026'. [ 934.342381][T24200] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4026'. [ 934.353582][T24200] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4026'. [ 934.362780][T24200] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4026'. [ 934.378889][T24200] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4026'. [ 934.388125][T24200] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4026'. [ 934.397585][T24200] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4026'. [ 934.437594][T24200] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4026'. [ 934.479941][T24189] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4021'. [ 934.546039][T24199] can: request_module (can-proto-0) failed. [ 934.636952][T24199] can: request_module (can-proto-0) failed. [ 934.772421][T24199] can: request_module (can-proto-0) failed. [ 934.886252][T24199] can: request_module (can-proto-0) failed. [ 934.942450][T24184] Invalid ELF header magic: != ELF [ 934.959166][T24199] can: request_module (can-proto-0) failed. [ 935.043896][T24199] can: request_module (can-proto-0) failed. [ 935.132782][T24199] can: request_module (can-proto-0) failed. [ 935.373485][T24222] Invalid ELF header magic: != ELF [ 936.932114][T24266] Invalid ELF header magic: != ELF [ 937.637303][T24296] netlink: 'syz.1.4046': attribute type 1 has an invalid length. [ 938.814482][T24333] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input73 [ 938.877898][T24339] __nla_validate_parse: 58 callbacks suppressed [ 938.877915][T24339] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4055'. [ 939.375841][T24353] netlink: 'syz.2.4060': attribute type 2 has an invalid length. [ 939.406289][T24353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4060'. [ 940.032354][T24362] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 940.128731][T24364] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 940.706534][T24380] netlink: 504 bytes leftover after parsing attributes in process `syz.4.4076'. [ 943.243265][T24431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4082'. [ 944.115388][T24447] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 945.829652][T24480] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4095'. [ 947.510196][T24536] netlink: 'syz.4.4110': attribute type 1 has an invalid length. [ 948.245426][T24559] netlink: 342 bytes leftover after parsing attributes in process `syz.4.4115'. [ 948.930131][T24572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4118'. [ 949.107568][T24582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4118'. [ 951.306615][T24624] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 951.329519][T24606] kexec: Could not allocate control_code_buffer [ 951.351259][T24624] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 951.411751][T24624] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 951.468989][T24624] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 952.158451][T24644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4136'. [ 952.242486][T24650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4136'. [ 953.323208][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 953.329241][T17570] Bluetooth: hci2: command 0x0c1a tx timeout [ 953.401432][T17570] Bluetooth: hci3: command 0x0c1a tx timeout [ 953.481408][T17570] Bluetooth: hci0: command 0x0c1a tx timeout [ 953.779825][T24690] zswap: compressor û not available [ 954.337434][T24712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4154'. [ 954.402325][T24716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4154'. [ 954.474374][T24717] netlink: 'syz.2.4156': attribute type 1 has an invalid length. [ 954.512818][T24717] netlink: 350 bytes leftover after parsing attributes in process `syz.2.4156'. [ 958.526859][T24794] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4173'. [ 958.696126][T24799] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4175'. [ 962.784584][T24876] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4195'. [ 962.841319][T24876] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4195'. [ 964.718472][T24932] random: crng reseeded on system resumption [ 968.620402][T25044] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4:696e:672f:7365:745f, load rds_tcp or rds_rdma? [ 969.609817][ T30] audit: type=1800 audit(4294967373.859:232): pid=25053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4237" name="sr0" dev="tmpfs" ino=2761 res=0 errno=0 [ 970.617534][T25073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4243'. [ 970.658565][T25073] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4243'. [ 972.572743][T25117] could not allocate digest TFM handle [ 973.186066][T25086] kexec: Could not allocate control_code_buffer [ 973.514990][T25148] netlink: zone id is out of range [ 974.931988][T25198] Invalid ELF header magic: != ELF [ 975.707064][T25224] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4281'. [ 976.043523][T17570] bt_warn_ratelimited: 55 callbacks suppressed [ 976.043537][T17570] Bluetooth: hci3: unexpected event 0x03 length: 727 > 11 [ 976.998121][T25266] ptrace attach of "./syz-executor exec"[17124] was attempted by ""[25266] [ 977.562893][T25280] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4294'. [ 977.751567][T25283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4295'. [ 979.268581][T25333] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 983.242025][T25445] Invalid ELF header magic: != ELF [ 984.844165][T25500] netlink: 330 bytes leftover after parsing attributes in process `syz.4.4341'. [ 984.933180][T25500] gretap0: refused to change device tx_queue_len [ 988.176579][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 988.182970][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 989.339057][T25627] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4372'. [ 989.397412][T25627] ipvlan0: entered promiscuous mode [ 989.439428][T25627] ipvlan0: entered allmulticast mode [ 989.480597][T25627] veth0_vlan: entered allmulticast mode [ 989.489384][T25630] nfs: Unknown parameter 'nl802154' [ 989.651286][T25635] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4375'. [ 990.205846][T25657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4380'. [ 991.415372][T25705] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4391'. [ 991.474486][ T30] audit: type=1804 audit(4294969443.832:233): pid=25710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4391" name="file0" dev="tmpfs" ino=2017 res=1 errno=0 [ 992.924582][T25760] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4404'. [ 993.114232][T25761] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4403'. [ 993.279506][T25761] veth0_macvtap: left promiscuous mode [ 993.364450][T25761] macvtap0: entered promiscuous mode [ 993.423235][T25761] macvtap0: entered allmulticast mode [ 994.211909][T25783] netlink: 334 bytes leftover after parsing attributes in process `syz.1.4409'. [ 994.367514][T25784] ptrace attach of "./syz-executor exec"[17124] was attempted by "./syz-executor exec"[25784] [ 994.512231][T25784] ptrace attach of "./syz-executor exec"[17124] was attempted by "./syz-executor exec"[25784] [ 994.596477][T25784] ptrace attach of "./syz-executor exec"[17124] was attempted by "./syz-executor exec"[25784] [ 994.705700][T25784] ptrace attach of "./syz-executor exec"[17124] was attempted by "./syz-executor exec"[25784] [ 994.848153][T25784] ptrace attach of "./syz-executor exec"[17124] was attempted by "./syz-executor exec"[25784] [ 998.657077][T25868] Invalid ELF header magic: != ELF [ 1001.042135][T25910] netlink: Conntrack attr has 4 unknown bytes [ 1001.553774][T25923] NFSD: Failed to start, no listeners configured. [ 1005.363326][T26010] netlink: 342 bytes leftover after parsing attributes in process `syz.4.4469'. [ 1005.416950][T26015] netlink: 342 bytes leftover after parsing attributes in process `syz.4.4469'. [ 1006.985391][T26037] kexec: Could not allocate control_code_buffer [ 1007.441754][T26087] netlink: 186 bytes leftover after parsing attributes in process `syz.2.4481'. [ 1008.123150][T26109] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4485'. [ 1008.349175][T26120] futex_wake_op: syz.3.4488 tries to shift op by -2048; fix this program [ 1008.397678][T26120] futex_wake_op: syz.3.4488 tries to shift op by -2048; fix this program [ 1008.847275][T26134] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4490'. [ 1009.169847][T26138] netlink: 326 bytes leftover after parsing attributes in process `syz.4.4491'. [ 1011.342068][T26197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4510'. [ 1011.965000][T26219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4514'. [ 1013.373605][T26280] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4526'. [ 1015.300324][T26331] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4542'. [ 1015.570197][T26352] Invalid ELF header magic: != ELF [ 1015.785262][T26331] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4542'. [ 1018.147717][T26425] netlink: 'syz.2.4561': attribute type 20 has an invalid length. [ 1018.202150][T26425] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4561'. [ 1018.314641][T26431] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4561'. [ 1020.227566][T26511] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4579'. [ 1023.222692][T26612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4603'. [ 1023.306631][T26606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4602'. [ 1023.466888][T26606] ip6g: entered promiscuous mode [ 1023.534181][T26609] HfR: entered promiscuous mode [ 1024.260042][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1024.272930][T26634] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1024.283321][T26634] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1024.294637][T26634] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1024.308130][T26634] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1025.081178][T26631] chnl_net:caif_netlink_parms(): no params data found [ 1025.269411][T26649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4613'. [ 1025.377601][ T6756] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.550355][ T6756] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.662943][ T6756] bridge0: port 3(netdevsim1) entered disabled state [ 1025.709825][ T6756] netdevsim netdevsim3 netdevsim1 (unregistering): left allmulticast mode [ 1025.729226][ T6756] netdevsim netdevsim3 netdevsim1 (unregistering): left promiscuous mode [ 1025.761626][ T6756] bridge0: port 3(netdevsim1) entered disabled state [ 1025.798137][ T6756] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.917592][ T6756] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.041953][T26631] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.065489][T26631] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.100187][T26631] bridge_slave_0: entered allmulticast mode [ 1026.119318][T26631] bridge_slave_0: entered promiscuous mode [ 1026.140202][T26631] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.164136][T26631] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.185258][T26631] bridge_slave_1: entered allmulticast mode [ 1026.197371][T26680] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4619'. [ 1026.216922][T26631] bridge_slave_1: entered promiscuous mode [ 1026.371116][T26634] Bluetooth: hci4: command tx timeout [ 1026.418130][T26631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1026.462694][T26631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1026.627353][T26683] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1026.689479][T26631] team0: Port device team_slave_0 added [ 1026.698803][T26683] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1026.729046][T26631] team0: Port device team_slave_1 added [ 1026.776116][T26683] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1026.804578][ T6756] bridge_slave_1: left allmulticast mode [ 1026.823244][ T6756] bridge_slave_1: left promiscuous mode [ 1026.842064][ T6756] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.856182][T26683] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1026.883663][ T6756] bridge_slave_0: left allmulticast mode [ 1026.903249][ T6756] bridge_slave_0: left promiscuous mode [ 1026.933450][ T6756] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.050772][T26692] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1027.116079][T26692] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1027.157472][T26692] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1027.212454][T26692] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1027.521334][ T6756] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1027.537966][ T6756] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1027.548009][ T6756] bond0 (unregistering): Released all slaves [ 1027.688469][ T6756] ip6g: left promiscuous mode [ 1027.707349][T26631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1027.715030][T26631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1027.758379][T26631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1027.782058][ T6756] HfR: left promiscuous mode [ 1027.800226][T26631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1027.817655][T26631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1027.850972][T26631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1027.923198][ T6756] tipc: Left network mode [ 1028.023089][T26631] hsr_slave_0: entered promiscuous mode [ 1028.029485][T26631] hsr_slave_1: entered promiscuous mode [ 1028.037525][T26631] debugfs: 'hsr0' already exists in 'hsr' [ 1028.048212][T26631] Cannot create hsr debugfs directory [ 1028.146186][T26712] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1028.234576][T26712] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1028.303943][T26712] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1028.366459][T26712] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1028.444837][T26634] Bluetooth: hci4: command tx timeout [ 1028.495366][T26719] tipc: Started in network mode [ 1028.519037][T26719] tipc: Node identity ffffffff, cluster identity 4711 [ 1028.546428][T26719] tipc: Node number set to 4294967295 [ 1028.563903][T26721] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1028.626377][T26721] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1028.681184][T26721] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1028.736769][T26721] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1029.192916][T26736] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1029.310112][T26736] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1029.377726][T26736] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1029.445649][ T6756] hsr_slave_0: left promiscuous mode [ 1029.468159][T26736] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1029.507766][ T6756] hsr_slave_1: left promiscuous mode [ 1029.526154][ T6756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1029.569662][ T6756] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1029.632939][ T6756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1029.668286][ T6756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1029.753672][ T6756] veth1_macvtap: left promiscuous mode [ 1029.771069][ T6756] veth0_macvtap: left promiscuous mode [ 1029.784820][T26755] __vm_enough_memory: pid: 26755, comm: syz.4.4636, bytes: 4398046511104 not enough memory for the allocation [ 1029.800990][ T6756] veth1_vlan: left promiscuous mode [ 1029.818002][ T6756] veth0_vlan: left promiscuous mode [ 1030.510653][T26634] Bluetooth: hci4: command tx timeout [ 1031.242977][ T6756] team0 (unregistering): Port device team_slave_1 removed [ 1031.332434][ T6756] team0 (unregistering): Port device team_slave_0 removed [ 1032.272980][T26781] EXT4-fs warning: 2 callbacks suppressed [ 1032.272993][T26781] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1032.371128][T26781] EXT4-fs error: 2 callbacks suppressed [ 1032.371140][T26781] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1032.458954][T26781] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1032.508194][T26781] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1032.580664][T26634] Bluetooth: hci4: command tx timeout [ 1032.842564][T26790] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1032.957063][T26790] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1033.052482][T26790] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1033.169889][T26790] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1033.394462][T26803] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1033.490977][T26803] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1033.573867][T26803] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1033.685820][T26803] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1033.894463][T26808] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1033.983327][T26808] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1034.024696][T26631] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1034.051885][T26808] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1034.095249][T26631] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1034.157765][T26808] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1034.176079][T26631] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1034.319705][T26631] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1034.694101][T26631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1034.762408][T26631] 8021q: adding VLAN 0 to HW filter on device team0 [ 1034.799531][ T6756] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.806680][ T6756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1034.846950][T26074] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.854088][T26074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1035.235083][T26631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1035.285556][T26831] Invalid ELF header magic: != ELF [ 1035.360180][T26631] veth0_vlan: entered promiscuous mode [ 1035.400669][T26631] veth1_vlan: entered promiscuous mode [ 1035.471624][T26631] veth0_macvtap: entered promiscuous mode [ 1035.506984][T26631] veth1_macvtap: entered promiscuous mode [ 1035.560405][T26631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1035.612047][T26631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1035.667989][T26074] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.705918][T26074] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.749251][T26074] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.800811][T26074] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.146521][T26847] could not allocate digest TFM handle  [ 1036.386410][ T3831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1036.437775][ T3831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1036.771936][ T8785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1036.815114][ T8785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.421594][T26915] netlink: 326 bytes leftover after parsing attributes in process `syz.2.4667'. [ 1039.647085][ T30] audit: type=1326 audit(4294967309.876:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26948 comm="syz.4.4679" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd83398f7c9 code=0x0 [ 1039.877429][T26955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4680'. [ 1040.007682][T26951] Invalid ELF header magic: != ELF [ 1040.040693][T26959] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1043.042814][T27009] random: crng reseeded on system resumption [ 1043.384579][T26995] kexec: Could not allocate control_code_buffer [ 1044.131588][T27032] netlink: 'syz.2.4701': attribute type 1 has an invalid length. [ 1044.232741][T27035] netlink: 'syz.2.4701': attribute type 1 has an invalid length. [ 1045.997829][T27087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4714'. [ 1046.040468][T27087] netlink: 354 bytes leftover after parsing attributes in process `syz.4.4714'. [ 1048.801746][T27152] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1049.295744][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1049.310500][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1050.771256][T27193] nbd: couldn't find a device at index 35644 [ 1052.476244][T27224] random: crng reseeded on system resumption [ 1052.569606][T27226] CIFS mount error: No usable UNC path provided in device string! [ 1052.569606][T27226] [ 1052.711025][T27226] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1057.345048][T27336] Invalid ELF header magic: != ELF [ 1059.583387][T27382] Invalid ELF header magic: != ELF [ 1060.795850][T17570] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1060.814269][T17570] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1060.836543][T17570] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1060.845684][T17570] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1060.862423][T17570] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1061.792315][T27408] chnl_net:caif_netlink_parms(): no params data found [ 1061.826361][T27435] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4:696e:672f:7365:745f, load rds_tcp or rds_rdma? [ 1062.290652][T27446] FAULT_INJECTION: forcing a failure. [ 1062.290652][T27446] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1062.335553][T27446] CPU: 0 UID: 0 PID: 27446 Comm: syz.3.4799 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1062.335580][T27446] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1062.335586][T27446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1062.335596][T27446] Call Trace: [ 1062.335601][T27446] [ 1062.335607][T27446] dump_stack_lvl+0x16c/0x1f0 [ 1062.335644][T27446] should_fail_ex+0x512/0x640 [ 1062.335664][T27446] should_fail_alloc_page+0xe7/0x130 [ 1062.335687][T27446] prepare_alloc_pages+0x401/0x670 [ 1062.335708][T27446] ? rcu_is_watching+0x12/0xc0 [ 1062.335729][T27446] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 1062.335746][T27446] ? should_fail_alloc_page+0xee/0x130 [ 1062.335768][T27446] ? rcu_is_watching+0x12/0xc0 [ 1062.335785][T27446] ? trace_mm_page_alloc+0x11b/0x180 [ 1062.335806][T27446] ? __alloc_frozen_pages_noprof+0x292/0x2430 [ 1062.335825][T27446] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1062.335842][T27446] ? find_held_lock+0x2b/0x80 [ 1062.335860][T27446] ? is_bpf_text_address+0x8a/0x1a0 [ 1062.335877][T27446] ? bpf_ksym_find+0x124/0x1c0 [ 1062.335894][T27446] ? kernel_text_address+0x8d/0x100 [ 1062.335909][T27446] ? __kernel_text_address+0xd/0x40 [ 1062.335923][T27446] ? unwind_get_return_address+0x59/0xa0 [ 1062.335947][T27446] alloc_pages_bulk_noprof+0x77a/0x1410 [ 1062.335963][T27446] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1062.335992][T27446] ? policy_nodemask+0xea/0x4e0 [ 1062.336015][T27446] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1062.336033][T27446] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1062.336065][T27446] __kasan_populate_vmalloc+0xfb/0x220 [ 1062.336087][T27446] alloc_vmap_area+0x98d/0x2a50 [ 1062.336115][T27446] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1062.336141][T27446] __get_vm_area_node+0x1ca/0x330 [ 1062.336163][T27446] ? ringbuf_map_alloc+0x518/0x8c0 [ 1062.336184][T27446] get_vm_area_caller+0x71/0xa0 [ 1062.336205][T27446] ? ringbuf_map_alloc+0x518/0x8c0 [ 1062.336225][T27446] vmap+0x135/0x320 [ 1062.336245][T27446] ? __pfx_vmap+0x10/0x10 [ 1062.336265][T27446] ? __bpf_map_area_alloc+0x1b8/0x200 [ 1062.336282][T27446] ringbuf_map_alloc+0x518/0x8c0 [ 1062.336305][T27446] ? __pfx_ringbuf_map_mem_usage+0x10/0x10 [ 1062.336326][T27446] map_create+0x65c/0x2a10 [ 1062.336344][T27446] ? preempt_schedule_thunk+0x16/0x30 [ 1062.336363][T27446] ? __pfx_map_create+0x10/0x10 [ 1062.336381][T27446] ? __might_fault+0xe3/0x190 [ 1062.336396][T27446] ? __might_fault+0xe3/0x190 [ 1062.336410][T27446] ? __might_fault+0x13b/0x190 [ 1062.336431][T27446] __sys_bpf+0x3d9d/0x4980 [ 1062.336444][T27446] ? futex_private_hash_put+0x160/0x1b0 [ 1062.336461][T27446] ? __pfx___sys_bpf+0x10/0x10 [ 1062.336475][T27446] ? __pfx_futex_wake+0x10/0x10 [ 1062.336494][T27446] ? percpu_counter_add_batch+0xca/0x200 [ 1062.336509][T27446] ? errseq_sample+0x53/0x70 [ 1062.336528][T27446] ? do_futex+0x122/0x350 [ 1062.336552][T27446] ? __sys_socket+0xac/0x260 [ 1062.336568][T27446] ? xfd_validate_state+0x61/0x180 [ 1062.336580][T27446] ? __pfx___do_sys_close_range+0x10/0x10 [ 1062.336604][T27446] __x64_sys_bpf+0x78/0xc0 [ 1062.336617][T27446] ? lockdep_hardirqs_on+0x7c/0x110 [ 1062.336631][T27446] do_syscall_64+0xcd/0xf80 [ 1062.336645][T27446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.336659][T27446] RIP: 0033:0x7f8a69f8f7c9 [ 1062.336678][T27446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1062.336693][T27446] RSP: 002b:00007f8a6ade1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1062.336708][T27446] RAX: ffffffffffffffda RBX: 00007f8a6a1e5fa0 RCX: 00007f8a69f8f7c9 [ 1062.336718][T27446] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000000 [ 1062.336727][T27446] RBP: 00007f8a6a013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1062.336735][T27446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1062.336744][T27446] R13: 00007f8a6a1e6038 R14: 00007f8a6a1e5fa0 R15: 00007ffd80a68758 [ 1062.336763][T27446] [ 1063.141483][T26634] Bluetooth: hci1: command tx timeout [ 1063.384835][ T6756] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.466183][T27408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.481264][T27408] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.498767][T27408] bridge_slave_0: entered allmulticast mode [ 1063.513475][T27408] bridge_slave_0: entered promiscuous mode [ 1063.529152][T27408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.546050][T27408] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.559844][T27408] bridge_slave_1: entered allmulticast mode [ 1063.575556][T27408] bridge_slave_1: entered promiscuous mode [ 1063.633821][T27408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1063.658106][T27408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1063.716852][T27408] team0: Port device team_slave_0 added [ 1063.735358][T27408] team0: Port device team_slave_1 added [ 1063.782971][T27408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1063.797755][T27408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1063.854110][T27408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1063.973968][T27408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1063.993003][T27408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1064.055072][T27408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1064.148022][ T6756] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.346819][ T6756] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.413593][T27408] hsr_slave_0: entered promiscuous mode [ 1064.440093][T27408] hsr_slave_1: entered promiscuous mode [ 1064.471733][T27408] debugfs: 'hsr0' already exists in 'hsr' [ 1064.477486][T27408] Cannot create hsr debugfs directory [ 1064.569414][ T6756] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.212588][T26634] Bluetooth: hci1: command tx timeout [ 1065.382022][T27472] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1065.399562][ T6756] netdevsim netdevsim100 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.471835][T27472] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1065.559053][T27472] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1065.669214][T27472] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1065.875094][ T30] audit: type=1800 audit(4294967336.243:235): pid=27482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4805" name="dbroot" dev="configfs" ino=135950 res=0 errno=0 [ 1065.919166][T27485] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1065.997953][ T6756] bridge_slave_1: left allmulticast mode [ 1066.020736][T27485] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1066.043712][ T6756] bridge_slave_1: left promiscuous mode [ 1066.055972][ T6756] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.083517][T27485] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1066.124269][ T6756] bridge_slave_0: left allmulticast mode [ 1066.152491][ T6756] bridge_slave_0: left promiscuous mode [ 1066.158194][ T6756] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.168282][T27485] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1067.022378][ T6756] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1067.033045][ T6756] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1067.049072][ T6756] bond0 (unregistering): Released all slaves [ 1067.277177][T26634] Bluetooth: hci1: command tx timeout [ 1067.292317][T27510] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1067.378787][T27510] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1067.442887][T27510] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1067.486909][T27510] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1067.657136][T27515] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1067.720863][T27515] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1067.802543][T27515] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1067.866517][T27515] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1068.049474][ T6756] hsr_slave_0: left promiscuous mode [ 1068.077651][ T6756] hsr_slave_1: left promiscuous mode [ 1068.109305][ T6756] veth1_macvtap: left promiscuous mode [ 1068.124682][ T6756] veth0_macvtap: left promiscuous mode [ 1068.803745][ T6756] team0 (unregistering): Port device team_slave_1 removed [ 1068.888511][ T6756] team0 (unregistering): Port device team_slave_0 removed [ 1069.354076][T26634] Bluetooth: hci1: command tx timeout [ 1069.597086][T27408] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1069.655958][T27408] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1069.755011][T27408] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1069.841558][T27408] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1069.899087][T27537] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1070.025666][T27537] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1070.119604][T27537] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1070.239130][T27537] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1070.473390][T27553] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1070.504023][T27408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1070.554301][T27553] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1070.588834][T27408] 8021q: adding VLAN 0 to HW filter on device team0 [ 1070.606530][ T3831] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.613669][ T3831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1070.635673][T27553] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1070.683085][ T3831] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.690215][ T3831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1070.707921][T27555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4823'. [ 1070.724932][T27553] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1071.044511][T27562] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1071.135888][T27562] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1071.202210][T27562] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1071.273531][T27562] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1071.499722][T27577] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1071.587329][T27577] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1071.639640][T27577] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1071.715184][T27577] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1071.776848][T27408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1071.911035][T27580] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1072.030178][T27580] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1072.112586][T27580] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1072.185798][T27580] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1072.292040][T27408] veth0_vlan: entered promiscuous mode [ 1072.360815][T27408] veth1_vlan: entered promiscuous mode [ 1072.404137][T27588] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1072.506491][T27588] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1072.598470][T27408] veth0_macvtap: entered promiscuous mode [ 1072.615204][T27588] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1072.636606][T27598] netlink: 342 bytes leftover after parsing attributes in process `syz.4.4830'. [ 1072.681662][T27408] veth1_macvtap: entered promiscuous mode [ 1072.727766][T27588] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1072.793558][T27408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1072.870916][T27408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1072.933109][T26634] Bluetooth: hci0: unexpected event 0x3d length: 726 > 14 [ 1072.935600][ T3831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.025988][ T3831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.059821][T27600] zswap: compressor not available [ 1073.135887][ T3831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.179684][ T3831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.479481][T12688] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1073.522129][T12688] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1073.769937][ T3831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1073.796970][ T3831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1074.391445][T17570] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1074.403805][T17570] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1074.413305][T17570] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1074.423811][T17570] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1074.433013][T17570] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1074.569768][T27642] FAULT_INJECTION: forcing a failure. [ 1074.569768][T27642] name failslab, interval 1, probability 0, space 0, times 0 [ 1074.669086][T27642] CPU: 0 UID: 0 PID: 27642 Comm: syz.3.4838 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1074.669118][T27642] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1074.669124][T27642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1074.669133][T27642] Call Trace: [ 1074.669139][T27642] [ 1074.669145][T27642] dump_stack_lvl+0x16c/0x1f0 [ 1074.669173][T27642] should_fail_ex+0x512/0x640 [ 1074.669190][T27642] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 1074.669213][T27642] should_failslab+0xc2/0x120 [ 1074.669235][T27642] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 1074.669255][T27642] ? sysctl_route_net_init+0x42/0x2c0 [ 1074.669278][T27642] ? __pfx_sysctl_route_net_init+0x10/0x10 [ 1074.669294][T27642] ? kmemdup_noprof+0x29/0x60 [ 1074.669310][T27642] kmemdup_noprof+0x29/0x60 [ 1074.669327][T27642] sysctl_route_net_init+0x42/0x2c0 [ 1074.669343][T27642] ? __pfx_sysctl_route_net_init+0x10/0x10 [ 1074.669358][T27642] ops_init+0x1e2/0x5f0 [ 1074.669380][T27642] setup_net+0x11d/0x3a0 [ 1074.669400][T27642] ? __pfx_setup_net+0x10/0x10 [ 1074.669417][T27642] ? lockdep_init_map_type+0x5c/0x270 [ 1074.669432][T27642] ? mutex_init_lockep+0x110/0x150 [ 1074.669449][T27642] copy_net_ns+0x351/0x7c0 [ 1074.669464][T27642] create_new_namespaces+0x3ea/0xab0 [ 1074.669487][T27642] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1074.669506][T27642] ksys_unshare+0x45b/0xa40 [ 1074.669520][T27642] ? __pfx_ksys_unshare+0x10/0x10 [ 1074.669533][T27642] ? xfd_validate_state+0x61/0x180 [ 1074.669551][T27642] __x64_sys_unshare+0x31/0x40 [ 1074.669563][T27642] do_syscall_64+0xcd/0xf80 [ 1074.669578][T27642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.669591][T27642] RIP: 0033:0x7f8a69f8f7c9 [ 1074.669603][T27642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1074.669617][T27642] RSP: 002b:00007f8a6adc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1074.669630][T27642] RAX: ffffffffffffffda RBX: 00007f8a6a1e6090 RCX: 00007f8a69f8f7c9 [ 1074.669640][T27642] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1074.669648][T27642] RBP: 00007f8a6a013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1074.669656][T27642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1074.669664][T27642] R13: 00007f8a6a1e6128 R14: 00007f8a6a1e6090 R15: 00007ffd80a68758 [ 1074.669684][T27642] [ 1074.929619][T27644] Unable to find swap-space signature [ 1075.042261][T27648] FAULT_INJECTION: forcing a failure. [ 1075.042261][T27648] name failslab, interval 1, probability 0, space 0, times 0 [ 1075.055257][T27648] CPU: 0 UID: 0 PID: 27648 Comm: syz.1.4839 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1075.055282][T27648] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1075.055288][T27648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1075.055298][T27648] Call Trace: [ 1075.055303][T27648] [ 1075.055309][T27648] dump_stack_lvl+0x16c/0x1f0 [ 1075.055336][T27648] should_fail_ex+0x512/0x640 [ 1075.055355][T27648] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1075.055374][T27648] should_failslab+0xc2/0x120 [ 1075.055396][T27648] kmem_cache_alloc_noprof+0x83/0x770 [ 1075.055414][T27648] ? getname_flags.part.0+0x4c/0x550 [ 1075.055434][T27648] ? getname_flags.part.0+0x4c/0x550 [ 1075.055448][T27648] getname_flags.part.0+0x4c/0x550 [ 1075.055465][T27648] getname_flags+0x93/0xf0 [ 1075.055483][T27648] do_sys_openat2+0xb9/0x290 [ 1075.055499][T27648] ? __pfx_do_sys_openat2+0x10/0x10 [ 1075.055521][T27648] __x64_sys_openat+0x174/0x210 [ 1075.055537][T27648] ? __pfx___x64_sys_openat+0x10/0x10 [ 1075.055561][T27648] do_syscall_64+0xcd/0xf80 [ 1075.055576][T27648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.055590][T27648] RIP: 0033:0x7fc1bc38f7c9 [ 1075.055603][T27648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1075.055617][T27648] RSP: 002b:00007fc1bd21a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1075.055631][T27648] RAX: ffffffffffffffda RBX: 00007fc1bc5e6180 RCX: 00007fc1bc38f7c9 [ 1075.055641][T27648] RDX: 0000000000000302 RSI: 00002000000009c0 RDI: ffffffffffffff9c [ 1075.055649][T27648] RBP: 00007fc1bc413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1075.055658][T27648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1075.055666][T27648] R13: 00007fc1bc5e6218 R14: 00007fc1bc5e6180 R15: 00007fffea0f6668 [ 1075.055685][T27648] [ 1075.461440][T12688] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.548507][T27637] chnl_net:caif_netlink_parms(): no params data found [ 1075.566799][T27652] netlink: zone id is out of range [ 1075.575296][T27652] netlink: zone id is out of range [ 1075.580625][T27652] netlink: zone id is out of range [ 1075.629655][T27652] netlink: zone id is out of range [ 1075.651751][T12688] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.676279][T27652] netlink: zone id is out of range [ 1075.681403][T27652] netlink: zone id is out of range [ 1075.757327][T27652] netlink: zone id is out of range [ 1075.775723][T27652] netlink: zone id is out of range [ 1075.814747][T27652] netlink: zone id is out of range [ 1075.824816][T27652] netlink: zone id is out of range [ 1075.836434][T12688] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.007843][T12688] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.090243][T27637] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.134572][T27637] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.160902][T27637] bridge_slave_0: entered allmulticast mode [ 1076.186946][T27637] bridge_slave_0: entered promiscuous mode [ 1076.213299][T27637] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.243853][T27637] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.273783][T27637] bridge_slave_1: entered allmulticast mode [ 1076.299771][T27637] bridge_slave_1: entered promiscuous mode [ 1076.432554][T27637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1076.511929][T17570] Bluetooth: hci2: command tx timeout [ 1076.540206][T27637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1076.618388][T27674] hub 3-0:1.0: USB hub found [ 1076.674195][T27674] hub 3-0:1.0: 1 port detected [ 1076.728901][T27637] team0: Port device team_slave_0 added [ 1076.757769][T12688] gretap0: left allmulticast mode [ 1076.762811][T12688] gretap0: left promiscuous mode [ 1076.806740][T27674] usb usb3: authorized to connect [ 1076.820685][T12688] bridge0: port 3(gretap0) entered disabled state [ 1076.869366][T27683] netlink: 252 bytes leftover after parsing attributes in process `syz.4.4847'. [ 1076.898263][T12688] bridge_slave_1: left allmulticast mode [ 1076.903920][T12688] bridge_slave_1: left promiscuous mode [ 1076.912866][T27679] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1076.941691][T27684] FAULT_INJECTION: forcing a failure. [ 1076.941691][T27684] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1076.967943][T12688] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.985407][T27679] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1077.008571][T27684] CPU: 0 UID: 0 PID: 27684 Comm: syz.1.4848 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1077.008596][T27684] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1077.008602][T27684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1077.008611][T27684] Call Trace: [ 1077.008616][T27684] [ 1077.008623][T27684] dump_stack_lvl+0x16c/0x1f0 [ 1077.008650][T27684] should_fail_ex+0x512/0x640 [ 1077.008669][T27684] get_futex_key+0x1d0/0x15f0 [ 1077.008688][T27684] ? __pfx_get_futex_key+0x10/0x10 [ 1077.008709][T27684] futex_wake+0xea/0x530 [ 1077.008726][T27684] ? futex_wait+0x120/0x380 [ 1077.008744][T27684] ? __pfx_futex_wait+0x10/0x10 [ 1077.008764][T27684] ? __pfx_futex_wake+0x10/0x10 [ 1077.008784][T27684] ? __lock_acquire+0x436/0x2890 [ 1077.008803][T27684] do_futex+0x1e3/0x350 [ 1077.008818][T27684] ? __pfx_do_futex+0x10/0x10 [ 1077.008837][T27684] ? find_held_lock+0x2b/0x80 [ 1077.008857][T27684] __x64_sys_futex+0x1e0/0x4c0 [ 1077.008874][T27684] ? find_held_lock+0x2b/0x80 [ 1077.008890][T27684] ? __pfx___x64_sys_futex+0x10/0x10 [ 1077.008920][T27684] do_syscall_64+0xcd/0xf80 [ 1077.008936][T27684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.008950][T27684] RIP: 0033:0x7fc1bc38f7c9 [ 1077.008963][T27684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1077.008977][T27684] RSP: 002b:00007fc1bd25c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1077.008991][T27684] RAX: ffffffffffffffda RBX: 00007fc1bc5e5fa8 RCX: 00007fc1bc38f7c9 [ 1077.009000][T27684] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc1bc5e5fac [ 1077.009009][T27684] RBP: 00007fc1bc5e5fa0 R08: 00007fc1bd25d000 R09: 0000000000000000 [ 1077.009018][T27684] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 1077.009026][T27684] R13: 00007fc1bc5e6038 R14: 00007fffea0f6580 R15: 00007fffea0f6668 [ 1077.009044][T27684] [ 1077.015178][T12688] bridge_slave_0: left allmulticast mode [ 1077.248725][T27679] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1077.291331][T27679] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1077.425431][T27690] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1077.457793][T27690] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1077.476572][T27690] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1077.494110][T27690] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1077.529748][T12688] bridge_slave_0: left promiscuous mode [ 1077.536351][T27688] netlink: 186 bytes leftover after parsing attributes in process `syz.3.4849'. [ 1077.567590][T12688] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.906919][T27704] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4850'. [ 1078.083999][T12688] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1078.095634][T12688] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1078.107713][T12688] bond0 (unregistering): Released all slaves [ 1078.118570][T27637] team0: Port device team_slave_1 added [ 1078.223949][T12688] tipc: Left network mode [ 1078.378411][T27637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1078.398404][T27637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1078.485771][T27637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1078.572531][T27637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1078.587740][T17570] Bluetooth: hci2: command tx timeout [ 1078.664146][T27637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1078.713399][T27714] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1078.790848][T27714] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1078.816545][T27637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1078.852588][T27714] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1078.933712][T27714] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1079.116541][T27718] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1079.180377][T27637] hsr_slave_0: entered promiscuous mode [ 1079.198732][T27718] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1079.224573][T27637] hsr_slave_1: entered promiscuous mode [ 1079.263937][T27718] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1079.340551][T27721] netlink: 74 bytes leftover after parsing attributes in process `syz.1.4854'. [ 1079.349599][T27718] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1079.819438][T12688] hsr_slave_0: left promiscuous mode [ 1079.842019][T12688] hsr_slave_1: left promiscuous mode [ 1079.868527][T12688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1079.884489][T27731] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1079.915465][T12688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1079.939698][T12688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1079.961300][T27731] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1079.981169][T12688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1080.018237][T27731] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1080.064279][T12688] veth1_macvtap: left promiscuous mode [ 1080.086179][T12688] veth1_vlan: left promiscuous mode [ 1080.094878][T27731] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1080.127753][T12688] veth0_vlan: left promiscuous mode [ 1080.173104][T27735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4858'. [ 1080.647284][T17570] Bluetooth: hci2: command tx timeout [ 1081.760065][T12688] team0 (unregistering): Port device team_slave_1 removed [ 1081.852103][T12688] team0 (unregistering): Port device team_slave_0 removed [ 1082.716419][T17570] Bluetooth: hci2: command tx timeout [ 1082.900382][T27752] EXT4-fs warning: 2 callbacks suppressed [ 1082.900396][T27752] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1083.023572][T27752] EXT4-fs error: 2 callbacks suppressed [ 1083.023587][T27752] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1083.098074][T27754] netlink: 'syz.1.4862': attribute type 1 has an invalid length. [ 1083.127568][T27752] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1083.228945][T27752] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1083.390255][T27756] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1083.468011][T27756] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1083.518135][T27756] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1083.583009][T27756] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1083.787255][T27759] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1083.895428][T27759] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1083.930116][T27762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4864'. [ 1083.968371][T27759] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1084.034051][T27637] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1084.042928][T27759] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1084.168286][T27637] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1084.241107][T27637] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1084.321900][T27637] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1084.346043][T27768] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1084.442551][T27768] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1084.536304][T27768] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1084.638489][T27768] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1084.717228][T27637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1084.792102][T27761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1084.807797][T27637] 8021q: adding VLAN 0 to HW filter on device team0 [ 1084.843564][T27776] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1084.886936][ T6754] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.894099][ T6754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1084.947702][T27776] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1084.975624][ T6754] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.982740][ T6754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1085.027741][T27776] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1085.135730][T27776] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1085.158786][T27637] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1085.783336][T27788] zswap: compressor not available [ 1086.006715][T27637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1086.153182][T27637] veth0_vlan: entered promiscuous mode [ 1086.222069][T27637] veth1_vlan: entered promiscuous mode [ 1086.538278][T27637] veth0_macvtap: entered promiscuous mode [ 1086.656279][T27637] veth1_macvtap: entered promiscuous mode [ 1086.775915][T27637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1086.879372][T27637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1087.122952][ T8766] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.222963][ T8766] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.303167][ T8766] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.560618][ T8766] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.735639][ T3645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.770847][ T3645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.840675][T12688] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.863324][T12688] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1088.600274][T27826] __vm_enough_memory: pid: 27826, comm: syz.1.4874, bytes: 4398046511104 not enough memory for the allocation [ 1088.745456][T27825] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1089.111476][T27829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4875'. [ 1090.459211][T27866] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1093.483527][T27936] netlink: 'syz.4.4899': attribute type 21 has an invalid length. [ 1093.535869][T27936] netlink: 326 bytes leftover after parsing attributes in process `syz.4.4899'. [ 1093.855656][T27942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4900'. [ 1094.645307][T27956] zswap: compressor not available [ 1094.727511][T27962] futex_wake_op: syz.4.4906 tries to shift op by -2048; fix this program [ 1094.788522][T27962] futex_wake_op: syz.4.4906 tries to shift op by -2048; fix this program [ 1094.815520][T27892] syz.3.4887 (27892) used greatest stack depth: 18656 bytes left [ 1095.358936][T27977] netlink: 'syz.2.4911': attribute type 21 has an invalid length. [ 1095.368285][T27979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4910'. [ 1095.436112][T27977] netlink: 326 bytes leftover after parsing attributes in process `syz.2.4911'. [ 1095.546285][T27974] FAULT_INJECTION: forcing a failure. [ 1095.546285][T27974] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.637292][T27974] CPU: 0 UID: 0 PID: 27974 Comm: syz.3.4908 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1095.637319][T27974] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1095.637324][T27974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1095.637333][T27974] Call Trace: [ 1095.637338][T27974] [ 1095.637345][T27974] dump_stack_lvl+0x16c/0x1f0 [ 1095.637373][T27974] should_fail_ex+0x512/0x640 [ 1095.637389][T27974] ? __kmalloc_noprof+0xca/0x910 [ 1095.637408][T27974] should_failslab+0xc2/0x120 [ 1095.637428][T27974] __kmalloc_noprof+0xeb/0x910 [ 1095.637444][T27974] ? lsm_blob_alloc+0x68/0x90 [ 1095.637467][T27974] ? lsm_blob_alloc+0x68/0x90 [ 1095.637485][T27974] lsm_blob_alloc+0x68/0x90 [ 1095.637505][T27974] security_sk_alloc+0x2f/0x270 [ 1095.637521][T27974] sk_prot_alloc+0xfb/0x2a0 [ 1095.637536][T27974] sk_alloc+0x36/0xe30 [ 1095.637554][T27974] unix_create1+0xa6/0x700 [ 1095.637571][T27974] unix_create+0x110/0x270 [ 1095.637586][T27974] __sock_create+0x339/0x8a0 [ 1095.637603][T27974] __sys_socketpair+0x25c/0x5a0 [ 1095.637620][T27974] ? __pfx___sys_socketpair+0x10/0x10 [ 1095.637633][T27974] ? fput+0x70/0xf0 [ 1095.637654][T27974] ? xfd_validate_state+0x61/0x180 [ 1095.637667][T27974] ? __pfx_do_writev+0x10/0x10 [ 1095.637689][T27974] __x64_sys_socketpair+0x96/0x100 [ 1095.637705][T27974] ? lockdep_hardirqs_on+0x7c/0x110 [ 1095.637719][T27974] do_syscall_64+0xcd/0xf80 [ 1095.637734][T27974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.637748][T27974] RIP: 0033:0x7f8a69f8f7c9 [ 1095.637760][T27974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1095.637774][T27974] RSP: 002b:00007f8a6ade1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1095.637788][T27974] RAX: ffffffffffffffda RBX: 00007f8a6a1e5fa0 RCX: 00007f8a69f8f7c9 [ 1095.637797][T27974] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 1095.637806][T27974] RBP: 00007f8a6a013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1095.637814][T27974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1095.637823][T27974] R13: 00007f8a6a1e6038 R14: 00007f8a6a1e5fa0 R15: 00007ffd80a68758 [ 1095.637841][T27974] [ 1096.736465][T28002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4915'. [ 1097.510759][T28031] FAULT_INJECTION: forcing a failure. [ 1097.510759][T28031] name failslab, interval 1, probability 0, space 0, times 0 [ 1097.572798][T28031] CPU: 0 UID: 0 PID: 28031 Comm: syz.3.4920 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1097.572826][T28031] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1097.572832][T28031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1097.572840][T28031] Call Trace: [ 1097.572846][T28031] [ 1097.572852][T28031] dump_stack_lvl+0x16c/0x1f0 [ 1097.572879][T28031] should_fail_ex+0x512/0x640 [ 1097.572896][T28031] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1097.572917][T28031] should_failslab+0xc2/0x120 [ 1097.572938][T28031] kmem_cache_alloc_noprof+0x83/0x770 [ 1097.572954][T28031] ? prepare_creds+0x2c/0x940 [ 1097.572973][T28031] ? prepare_creds+0x2c/0x940 [ 1097.572988][T28031] prepare_creds+0x2c/0x940 [ 1097.573004][T28031] __sys_setresgid+0x4af/0x1150 [ 1097.573025][T28031] do_syscall_64+0xcd/0xf80 [ 1097.573040][T28031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.573054][T28031] RIP: 0033:0x7f8a69f8f7c9 [ 1097.573065][T28031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1097.573078][T28031] RSP: 002b:00007f8a6ade1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000077 [ 1097.573091][T28031] RAX: ffffffffffffffda RBX: 00007f8a6a1e5fa0 RCX: 00007f8a69f8f7c9 [ 1097.573100][T28031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000081 [ 1097.573108][T28031] RBP: 00007f8a6a013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1097.573116][T28031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1097.573126][T28031] R13: 00007f8a6a1e6038 R14: 00007f8a6a1e5fa0 R15: 00007ffd80a68758 [ 1097.573144][T28031] [ 1098.219899][T28039] vivid-007: ================= START STATUS ================= [ 1098.234262][T28039] vivid-007: Generate PTS: true [ 1098.244305][T28039] vivid-007: Generate SCR: true [ 1098.290458][T28039] tpg source WxH: 320x240 (Y'CbCr) [ 1098.310145][T28039] tpg field: 1 [ 1098.324899][T28039] tpg crop: (0,0)/320x240 [ 1098.365146][T28039] tpg compose: (0,0)/320x240 [ 1098.387715][T28039] tpg colorspace: 8 [ 1098.404563][T28039] tpg transfer function: 0/0 [ 1098.432915][T28039] tpg Y'CbCr encoding: 0/0 [ 1098.461619][T28039] tpg quantization: 0/0 [ 1098.491298][T28039] tpg RGB range: 0/2 [ 1098.518964][T28039] vivid-007: ================== END STATUS ================== [ 1098.582817][T28050] netlink: 'syz.2.4924': attribute type 28 has an invalid length. [ 1098.606162][T28050] netlink: 'syz.2.4924': attribute type 3 has an invalid length. [ 1098.638474][T28050] netlink: 306 bytes leftover after parsing attributes in process `syz.2.4924'. [ 1099.197309][T28067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4928'. [ 1100.015122][T28081] netlink: 'syz.3.4929': attribute type 21 has an invalid length. [ 1100.064928][T28081] netlink: 326 bytes leftover after parsing attributes in process `syz.3.4929'. [ 1100.752062][T28098] zswap: compressor not available [ 1101.548758][T28121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4940'. [ 1102.063520][ T30] audit: type=1800 audit(4294970443.607:236): pid=28143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4943" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 1105.975425][T28216] EXT4-fs error: 8 callbacks suppressed [ 1105.975441][T28216] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.3.4958: 7 [ 1106.655895][T28233] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1106.695991][T28229] zswap: compressor not available [ 1107.967973][T28260] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4964'. [ 1108.147947][T28260] EXT4-fs warning: 8 callbacks suppressed [ 1108.147960][T28260] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.2.4964: No space for directory leaf checksum. Please run e2fsck -D. [ 1108.326722][T28260] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.2.4964: checksumming directory block 0 [ 1108.457269][T28260] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1108.561832][T28260] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.2.4964: No space for directory leaf checksum. Please run e2fsck -D. [ 1108.688560][T28260] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.2.4964: checksumming directory block 0 [ 1108.780540][T28260] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1108.880807][T28260] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.2.4964: No space for directory leaf checksum. Please run e2fsck -D. [ 1109.010610][T28260] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.2.4964: checksumming directory block 0 [ 1109.033695][T28268] netlink: 'syz.4.4965': attribute type 2 has an invalid length. [ 1109.109290][T28260] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1109.177283][T28260] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.2.4964: No space for directory leaf checksum. Please run e2fsck -D. [ 1109.258975][T28260] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.2.4964: checksumming directory block 0 [ 1109.325685][T28260] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1109.378598][T28260] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1109.426404][T28260] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1109.691331][T28276] netlink: 326 bytes leftover after parsing attributes in process `syz.3.4968'. [ 1109.845466][T28280] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4969'. [ 1110.119448][T28282] netlink: 252 bytes leftover after parsing attributes in process `syz.3.4971'. [ 1110.422795][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1110.430806][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1110.441270][ T1298] ------------[ cut here ]------------ [ 1110.447164][ T1298] WARNING: ./include/linux/skbuff.h:3227 at lowpan_xmit+0xea9/0x1210, CPU#0: aoe_tx0/1298 [ 1110.457143][ T1298] Modules linked in: [ 1110.461501][ T1298] CPU: 0 UID: 0 PID: 1298 Comm: aoe_tx0 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1110.472123][ T1298] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1110.477312][ T1298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1110.487375][ T1298] RIP: 0010:lowpan_xmit+0xea9/0x1210 [ 1110.492670][ T1298] Code: ff ff 4c 89 ff 48 01 81 38 02 00 00 e8 40 b8 0f fe e9 e6 fb ff ff e8 76 30 8f f6 90 0f 0b 90 e9 a3 f5 ff ff e8 68 30 8f f6 90 <0f> 0b 90 e9 86 f6 ff ff e8 5a 30 8f f6 0f b7 8d e0 fe ff ff 44 8b [ 1110.512291][ T1298] RSP: 0018:ffffc9000446f860 EFLAGS: 00010293 [ 1110.518361][ T1298] RAX: 0000000000000000 RBX: ffffc9000446f8e0 RCX: ffffffff8b2f27dc [ 1110.526312][ T1298] RDX: ffff888029470000 RSI: ffffffff8b2f3158 RDI: 0000000000000003 [ 1110.534287][ T1298] RBP: ffffc9000446f9f0 R08: 0000000000000003 R09: 000000000000ffff [ 1110.542256][ T1298] R10: 000000000000ffff R11: 0000000000000000 R12: ffff88805f164e76 [ 1110.550225][ T1298] R13: 000000000000ffff R14: ffff8880291e8d90 R15: ffff88805f164dc0 [ 1110.558192][ T1298] FS: 0000000000000000(0000) GS:ffff8881248f8000(0000) knlGS:0000000000000000 [ 1110.567113][ T1298] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1110.573732][ T1298] CR2: 00007f8a6ad1d680 CR3: 000000004cab6000 CR4: 00000000003526f0 [ 1110.581719][ T1298] Call Trace: [ 1110.584988][ T1298] [ 1110.587936][ T1298] ? __pfx_lowpan_xmit+0x10/0x10 [ 1110.592872][ T1298] ? lockdep_unlock+0x64/0xd0 [ 1110.597570][ T1298] ? __lock_acquire+0x12c2/0x2890 [ 1110.602613][ T1298] ? __pfx_netif_skb_features+0x10/0x10 [ 1110.608165][ T1298] ? dev_hard_start_xmit+0x97/0x6e0 [ 1110.613346][ T1298] dev_hard_start_xmit+0x97/0x6e0 [ 1110.618370][ T1298] __dev_queue_xmit+0x6d7/0x46c0 [ 1110.623297][ T1298] ? rcu_is_watching+0x12/0xc0 [ 1110.628064][ T1298] ? finish_task_switch.isra.0+0x207/0xbd0 [ 1110.633857][ T1298] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1110.639240][ T1298] ? __lock_acquire+0x436/0x2890 [ 1110.644161][ T1298] ? ref_tracker_free+0x37c/0x830 [ 1110.649187][ T1298] ? do_raw_spin_lock+0x12c/0x2b0 [ 1110.654195][ T1298] ? find_held_lock+0x2b/0x80 [ 1110.658874][ T1298] ? skb_dequeue+0x126/0x180 [ 1110.663444][ T1298] ? find_held_lock+0x2b/0x80 [ 1110.668118][ T1298] ? rcu_is_watching+0x12/0xc0 [ 1110.672869][ T1298] tx+0xcc/0x190 [ 1110.676397][ T1298] ? __pfx_tx+0x10/0x10 [ 1110.680561][ T1298] kthread+0x1e4/0x3e0 [ 1110.684619][ T1298] ? find_held_lock+0x2b/0x80 [ 1110.689295][ T1298] ? __pfx_kthread+0x10/0x10 [ 1110.693872][ T1298] ? __pfx_default_wake_function+0x10/0x10 [ 1110.699681][ T1298] ? lockdep_hardirqs_on+0x7c/0x110 [ 1110.704859][ T1298] ? __kthread_parkme+0x19e/0x250 [ 1110.709887][ T1298] ? __pfx_kthread+0x10/0x10 [ 1110.714462][ T1298] kthread+0x3c5/0x780 [ 1110.718528][ T1298] ? __pfx_kthread+0x10/0x10 [ 1110.723102][ T1298] ? rcu_is_watching+0x12/0xc0 [ 1110.727864][ T1298] ? __pfx_kthread+0x10/0x10 [ 1110.732432][ T1298] ret_from_fork+0x983/0xb10 [ 1110.737001][ T1298] ? __pfx_ret_from_fork+0x10/0x10 [ 1110.742108][ T1298] ? __switch_to+0x7af/0x10d0 [ 1110.746769][ T1298] ? __pfx_kthread+0x10/0x10 [ 1110.751364][ T1298] ret_from_fork_asm+0x1a/0x30 [ 1110.756127][ T1298] [ 1110.759146][ T1298] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1110.766408][ T1298] CPU: 0 UID: 0 PID: 1298 Comm: aoe_tx0 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1110.776973][ T1298] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1110.782141][ T1298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1110.792180][ T1298] Call Trace: [ 1110.795442][ T1298] [ 1110.798351][ T1298] dump_stack_lvl+0x3d/0x1f0 [ 1110.802934][ T1298] vpanic+0x640/0x6f0 [ 1110.806896][ T1298] ? lowpan_xmit+0xea9/0x1210 [ 1110.811558][ T1298] panic+0xca/0xd0 [ 1110.815259][ T1298] ? __pfx_panic+0x10/0x10 [ 1110.819660][ T1298] ? check_panic_on_warn+0x1f/0xb0 [ 1110.824751][ T1298] check_panic_on_warn+0xab/0xb0 [ 1110.829666][ T1298] __warn+0x108/0x3c0 [ 1110.833628][ T1298] __report_bug+0x2a0/0x520 [ 1110.838115][ T1298] ? lowpan_xmit+0xea9/0x1210 [ 1110.842772][ T1298] ? __pfx___report_bug+0x10/0x10 [ 1110.847783][ T1298] ? stack_trace_save+0x8e/0xc0 [ 1110.852619][ T1298] ? __pfx_stack_trace_save+0x10/0x10 [ 1110.857982][ T1298] ? lowpan_xmit+0xea9/0x1210 [ 1110.862637][ T1298] report_bug+0xb2/0x220 [ 1110.866863][ T1298] ? lowpan_xmit+0xea9/0x1210 [ 1110.871520][ T1298] handle_bug+0x127/0x260 [ 1110.875835][ T1298] exc_invalid_op+0x17/0x50 [ 1110.880317][ T1298] asm_exc_invalid_op+0x1a/0x20 [ 1110.885147][ T1298] RIP: 0010:lowpan_xmit+0xea9/0x1210 [ 1110.890417][ T1298] Code: ff ff 4c 89 ff 48 01 81 38 02 00 00 e8 40 b8 0f fe e9 e6 fb ff ff e8 76 30 8f f6 90 0f 0b 90 e9 a3 f5 ff ff e8 68 30 8f f6 90 <0f> 0b 90 e9 86 f6 ff ff e8 5a 30 8f f6 0f b7 8d e0 fe ff ff 44 8b [ 1110.910002][ T1298] RSP: 0018:ffffc9000446f860 EFLAGS: 00010293 [ 1110.916046][ T1298] RAX: 0000000000000000 RBX: ffffc9000446f8e0 RCX: ffffffff8b2f27dc [ 1110.923997][ T1298] RDX: ffff888029470000 RSI: ffffffff8b2f3158 RDI: 0000000000000003 [ 1110.931946][ T1298] RBP: ffffc9000446f9f0 R08: 0000000000000003 R09: 000000000000ffff [ 1110.939897][ T1298] R10: 000000000000ffff R11: 0000000000000000 R12: ffff88805f164e76 [ 1110.947864][ T1298] R13: 000000000000ffff R14: ffff8880291e8d90 R15: ffff88805f164dc0 [ 1110.955820][ T1298] ? lowpan_xmit+0x52c/0x1210 [ 1110.960479][ T1298] ? lowpan_xmit+0xea8/0x1210 [ 1110.965144][ T1298] ? __pfx_lowpan_xmit+0x10/0x10 [ 1110.970066][ T1298] ? lockdep_unlock+0x64/0xd0 [ 1110.974723][ T1298] ? __lock_acquire+0x12c2/0x2890 [ 1110.979727][ T1298] ? __pfx_netif_skb_features+0x10/0x10 [ 1110.985259][ T1298] ? dev_hard_start_xmit+0x97/0x6e0 [ 1110.990440][ T1298] dev_hard_start_xmit+0x97/0x6e0 [ 1110.995448][ T1298] __dev_queue_xmit+0x6d7/0x46c0 [ 1111.000373][ T1298] ? rcu_is_watching+0x12/0xc0 [ 1111.005120][ T1298] ? finish_task_switch.isra.0+0x207/0xbd0 [ 1111.010910][ T1298] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1111.016269][ T1298] ? __lock_acquire+0x436/0x2890 [ 1111.021183][ T1298] ? ref_tracker_free+0x37c/0x830 [ 1111.026195][ T1298] ? do_raw_spin_lock+0x12c/0x2b0 [ 1111.031201][ T1298] ? find_held_lock+0x2b/0x80 [ 1111.035860][ T1298] ? skb_dequeue+0x126/0x180 [ 1111.040429][ T1298] ? find_held_lock+0x2b/0x80 [ 1111.045087][ T1298] ? rcu_is_watching+0x12/0xc0 [ 1111.049837][ T1298] tx+0xcc/0x190 [ 1111.053364][ T1298] ? __pfx_tx+0x10/0x10 [ 1111.057497][ T1298] kthread+0x1e4/0x3e0 [ 1111.061552][ T1298] ? find_held_lock+0x2b/0x80 [ 1111.066209][ T1298] ? __pfx_kthread+0x10/0x10 [ 1111.070785][ T1298] ? __pfx_default_wake_function+0x10/0x10 [ 1111.076576][ T1298] ? lockdep_hardirqs_on+0x7c/0x110 [ 1111.081752][ T1298] ? __kthread_parkme+0x19e/0x250 [ 1111.086760][ T1298] ? __pfx_kthread+0x10/0x10 [ 1111.091337][ T1298] kthread+0x3c5/0x780 [ 1111.095386][ T1298] ? __pfx_kthread+0x10/0x10 [ 1111.099954][ T1298] ? rcu_is_watching+0x12/0xc0 [ 1111.104699][ T1298] ? __pfx_kthread+0x10/0x10 [ 1111.109274][ T1298] ret_from_fork+0x983/0xb10 [ 1111.113843][ T1298] ? __pfx_ret_from_fork+0x10/0x10 [ 1111.118936][ T1298] ? __switch_to+0x7af/0x10d0 [ 1111.123598][ T1298] ? __pfx_kthread+0x10/0x10 [ 1111.128170][ T1298] ret_from_fork_asm+0x1a/0x30 [ 1111.132931][ T1298] [ 1111.135983][ T1298] Kernel Offset: disabled [ 1111.140290][ T1298] Rebooting in 86400 seconds..