last executing test programs: 9m9.209600232s ago: executing program 1 (id=394): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x169780, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0xb8642, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80002, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_l2tp(0x0, r1) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000005c75fd6fcf7c0d55393fcc4aa20288a36093850186c10a9210b4873cec01875bad77c8c3c4bd9cd593b7630b4a720cc5ecbe0cec2baedf8fdb10ad7b8277c718a39c6dc5b19c1e20709c6026701036964b556cdadbe04b73ab", @ANYBLOB="1b0026bd7000fddbdf25030000000400080008000380"], 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x101002, 0x0) write$auto_proc_pid_attr_operations_base(r3, &(0x7f0000000200)="a597d9ce6359203d", 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r4 = socket(0x2b, 0x1, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/13/effective_affinity_list\x00', 0x2000, 0x0) pread64$auto(r5, 0x0, 0x1, 0xff) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/fail_over_mac\x00', 0x103b02, 0x0) sendfile$auto(r6, r6, 0x0, 0x8080000001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) connect$auto(0x3, 0x0, 0x55) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) io_uring_setup$auto(0x6, 0x0) r7 = socket(0x18, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x80047453, 0x0) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) 9m6.888688405s ago: executing program 1 (id=400): openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = mq_open$auto(&(0x7f0000000000)='\xbe\xf2\x82\xe7\x14g\xb5\xeeMQ\x13\xa2_g\xbf\t\xfa\xf2_N\xb0{\xf9\xb57v\xeeG\xd9l\xbf\x86q w\x96\xd9\xe9\xa8\xe1\xf0\xc7\x1f\x1e\xc4\xc4\x89u\x83\xe8}\xbd\x7fO\x91\xc1UVW.\xb6\xad\x04u\x02w.\xec`O\xc1\x0e\x15\xe7:\xc9\x1bK\xcddY\x03\x95\xd1\xae\xc1\x9b\x96\x9faj\xd2\xfc\xfc\x1f7\xaf\xcan\xf6\xc0wK\xce\xe7Q\xae\xc9Hg\x01\xef\xda[\xe5\xa3\xa3%\'\x8f\xcf\x96X:\x04Dkt\x7f\xde\x80\x01\xddX\x91\x88\xa1\t\xc3\xf1\xfe[\x93$O8 b\xb4\x92\xf4\xbc\xc5\xb9\x989\xfcF\xec\xdc@\xdd\xdaeM\xe0U\xc8;\xf5\xe7$Q8\xd2\x87\xdd\xc5\x9d\xc5\xe8\xb5\xb5\xb8\xdfD\xd0\xe8t\x8aS\xaa\xbe\xaa\xba\x9e^0\x1a\xf8Y\xf5Jp\bu\xba\x98\x00\xf0H5\xa9u\x0e\xc4\x04\x13\xf58p\x9f\x11\xc07\xefS*|\xd87\x12\xd8\xce\xde0\xd82;\xcd\x18\r\xccI\x99\n\xd2\x86', 0xdd1, 0x8, 0x0) mq_notify$auto(0x4, &(0x7f0000000140)={@sival_int, @raw, 0x2}) mmap$auto(0x0, 0x101, 0x4000000000df, 0xc0000000010, r0, 0x8000) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000800) mprotect$auto(0x200000000000, 0x806121, 0x8) newfstatat$auto(0xffffffffffffffff, &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x784a) ioctl$auto_MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) bind$auto(0x3, &(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x2}, 0x3}}, 0x7) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x8001, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) semctl$auto(0x2, 0x5, 0x13, 0x9) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mq_open$auto(&(0x7f0000000000)='\xbe\xf2\x82\xe7\x14g\xb5\xeeMQ\x13\xa2_g\xbf\t\xfa\xf2_N\xb0{\xf9\xb57v\xeeG\xd9l\xbf\x86q w\x96\xd9\xe9\xa8\xe1\xf0\xc7\x1f\x1e\xc4\xc4\x89u\x83\xe8}\xbd\x7fO\x91\xc1UVW.\xb6\xad\x04u\x02w.\xec`O\xc1\x0e\x15\xe7:\xc9\x1bK\xcddY\x03\x95\xd1\xae\xc1\x9b\x96\x9faj\xd2\xfc\xfc\x1f7\xaf\xcan\xf6\xc0wK\xce\xe7Q\xae\xc9Hg\x01\xef\xda[\xe5\xa3\xa3%\'\x8f\xcf\x96X:\x04Dkt\x7f\xde\x80\x01\xddX\x91\x88\xa1\t\xc3\xf1\xfe[\x93$O8 b\xb4\x92\xf4\xbc\xc5\xb9\x989\xfcF\xec\xdc@\xdd\xdaeM\xe0U\xc8;\xf5\xe7$Q8\xd2\x87\xdd\xc5\x9d\xc5\xe8\xb5\xb5\xb8\xdfD\xd0\xe8t\x8aS\xaa\xbe\xaa\xba\x9e^0\x1a\xf8Y\xf5Jp\bu\xba\x98\x00\xf0H5\xa9u\x0e\xc4\x04\x13\xf58p\x9f\x11\xc07\xefS*|\xd87\x12\xd8\xce\xde0\xd82;\xcd\x18\r\xccI\x99\n\xd2\x86', 0xdd1, 0x8, 0x0) (async) mq_notify$auto(0x4, &(0x7f0000000140)={@sival_int, @raw, 0x2}) (async) mmap$auto(0x0, 0x101, 0x4000000000df, 0xc0000000010, r0, 0x8000) (async) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000800) (async) mprotect$auto(0x200000000000, 0x806121, 0x8) (async) newfstatat$auto(0xffffffffffffffff, &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x784a) (async) ioctl$auto_MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) socket(0xa, 0x801, 0x84) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) bind$auto(0x3, &(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x2}, 0x3}}, 0x7) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) mmap$auto(0x0, 0x8001, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) (async) semctl$auto(0x2, 0x5, 0x13, 0x9) (async) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) 9m5.98738913s ago: executing program 1 (id=401): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x5b) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xa00005, 0x9, 0x40abe, r0, 0x7) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x40200, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) mmap$auto(0x0, 0x400008, 0xe4, 0x9b72, 0x2, 0x400) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1ea1c0, 0x0) bpf$auto(0x9, &(0x7f00000000c0)=@batch={0xffffffffffff3c77, 0x37, 0x2, 0x5, 0x9, 0x1, 0x6, 0x5852}, 0x18) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, 0x0, 0x0, 0x1, 0xfff, 0x0, 0x4, 0x9, 0x4, 0x9, 0xf, @raw=0x9}) write$auto_qrtr_tun_ops_tun(r1, &(0x7f00000002c0)="23af5824bf9bdb44f0024c44c7692fda8d36086b32b297f4ba8cc218129f492b7d95512af541ad36386872c9a0fef787544e17a805b01672b379ba6c3d48c858c4420aca0d32980686818d293f8a2d79da47b3863ec8e90109fec953ae0ecdc3b2ade9762e52d8e44d2a73a2814550b49570c4af215d6ba7da995d65c7232aa71bea2498fc792a900426f5a181ae7fbd6372636a4353a86f4b5648bfd5692d213029ef4125c176a8ad2c7a06804b3e1d7eef8b1cd3296aa5162a0f8fec68d44cb199b84246394ac65e", 0xc9) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000053c0), 0x41, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r2, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) r3 = openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080), 0x321800, 0x0) read$auto_proc_mountstats_operations_mnt_namespace(r3, 0x0, 0x0) 8m53.525811726s ago: executing program 1 (id=405): mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) futex$auto(&(0x7f0000000080)=0x2948, 0x9, 0x2948, 0x0, 0x0, 0x5) futex$auto(&(0x7f0000000000)=0xf0fe, 0x5, 0x4, 0x0, &(0x7f0000000080)=0x9, 0x4000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) socket(0x10, 0x2, 0x0) socket(0xa, 0x2, 0x3a) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/rpc/auth.unix.ip/channel\x00', 0x244881, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) ioctl$auto_SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045035, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(&(0x7f0000000000)='veth1_vlan\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='hfs\x00\x81\xe2\xde\xa8\xb7\xc4G[*}\xaa{\xf1\x86\xf7d@\xe8Y\xea\xb1H\x01\xff\"^\'6\xba\xa9s\x1d\xf4\xe1i\xc5\xb6_B\xa7KFS\xc1\xa7\x8e*h\xe3\x8b\x7f\xca\xfcNEi\x84?\x82\xff\xf2\xac\xd1\xee\xf4\x9a?\xac\x11\x88\aO\x84\xe6k\a\x9bY\xddx\xb8\xdf\vHv\xb5\f\xbc\b\xc0\xfa\xc0\xfe\xa6\xce\xbd\x03\x00\x93\xdc4\x97\xce\xd5&\x93\xae\x05q\xe9\xa8?\x00\xbdi\x88q\xd0w\xfd@\r\xce\xe4\xadrt`\xf8`b\xbf\xeci\x93a\xc6o\x9ej\xe4\xa3\x9d\xaa\xe1\xe1N\n\xbcq\n[\"5\xd4\xa6\x96#).\xbd\x8aD\x88>8J\v\xb5\x99H\xc5\a\xc9\xcf\xbc\x85\xbf\x85\x81\x0f\x7f8\x11\xdbK\xf3\xc2#\x18 \xdf\x05\xcd\xbb\xc03_\xb7Q@\xf2G', 0x7, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x6a742, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) ioctl$auto(0x3, 0x541b, 0x38) close_range$auto(0x2, 0x8, 0x0) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000040), 0x10082, 0x0) r4 = ioctl$auto_TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000000c0)=0x7) close_range$auto(r4, 0x8, 0xfffffffc) prctl$auto_PR_SCHED_CORE_CREATE(0x4a95f9a7, 0x1, 0xffffffffffffffff, 0x2, 0x5) 8m51.723984729s ago: executing program 1 (id=410): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x801, 0x84) openat$auto_ftrace_formats_fops_trace_printk(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/printk_formats\x00', 0x80080, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) lseek$auto(r0, 0x8a05, 0x1) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/fs/suid_dumpable\x00', 0x1a9402, 0x0) write$auto(r1, 0x0, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) io_uring_enter$auto(r1, 0x9, 0x6, 0x1, &(0x7f00000000c0)="75b9880a489d8b4abc40c7a30d3c69c186047c659a77e56fd60e975934216d9c6038813378adc20fa4b533fcd3960e6b5be3457337ab2f7a27ebb13d07a88ace0fd2064102098845a4cb0f826eff8d5231663cfe001bce80048a1247c06ebf3b255679fb429d9695b7aba5a6cd7519ce63c0ee", 0xa36) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27) 8m50.829994385s ago: executing program 1 (id=413): openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket(0x2, 0x1, 0x106) bpf$auto(0x2, 0x0, 0x4) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="08002dbd7000fddbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040050}, 0x24040015) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r3) sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="060000009314f8dbff03e60eefcf08000200", @ANYBLOB="0800010200", @ANYRES32=0x9], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000380), 0xffffffffffffffff) r6 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$auto(0x3, 0x400454da, r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xbf8, 0x0, 0x1, 0x10, r7, 0xff) sendmsg$auto_OVS_DP_CMD_DEL(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0109080000000000002502", @ANYRESHEX=r0], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/usb/usbmon/38u\x00', 0x0, 0x0) adjtimex$auto(&(0x7f0000000000)={0x14, 0x0, 0x7, 0x4, 0x7fffffff, 0x4, 0x100, 0x0, 0x5, 0xffffffffffff8000, 0x4, {0x3, 0xa}, 0xe5, 0x9, 0x9, 0x20004, 0x0, 0x8000000000000001, 0x6, 0x81, 0x20, 0xffffffffffff846f, 0x1000}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0) r8 = syz_clone(0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r8, 0x4, 0x7ff) ptrace$auto_PTRACE_SET_SYSCALL_USER_DISPATCH_CONFIG(0x4210, r8, 0x8, 0x8000000000000000) clock_nanosleep$auto(0x7, 0x98, 0x0, 0xffffffffffffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) 8m35.518846693s ago: executing program 32 (id=413): openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket(0x2, 0x1, 0x106) bpf$auto(0x2, 0x0, 0x4) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="08002dbd7000fddbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040050}, 0x24040015) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r3) sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="060000009314f8dbff03e60eefcf08000200", @ANYBLOB="0800010200", @ANYRES32=0x9], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000380), 0xffffffffffffffff) r6 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$auto(0x3, 0x400454da, r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xbf8, 0x0, 0x1, 0x10, r7, 0xff) sendmsg$auto_OVS_DP_CMD_DEL(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0109080000000000002502", @ANYRESHEX=r0], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/usb/usbmon/38u\x00', 0x0, 0x0) adjtimex$auto(&(0x7f0000000000)={0x14, 0x0, 0x7, 0x4, 0x7fffffff, 0x4, 0x100, 0x0, 0x5, 0xffffffffffff8000, 0x4, {0x3, 0xa}, 0xe5, 0x9, 0x9, 0x20004, 0x0, 0x8000000000000001, 0x6, 0x81, 0x20, 0xffffffffffff846f, 0x1000}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0) r8 = syz_clone(0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r8, 0x4, 0x7ff) ptrace$auto_PTRACE_SET_SYSCALL_USER_DISPATCH_CONFIG(0x4210, r8, 0x8, 0x8000000000000000) clock_nanosleep$auto(0x7, 0x98, 0x0, 0xffffffffffffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) 7m14.025373816s ago: executing program 4 (id=690): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = socket(0xa, 0x1, 0x84) mremap$auto(0x110c230000, 0x0, 0x101, 0x3, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) sendfile$auto(r0, r0, &(0x7f00000000c0)=0x8000, 0x3) r1 = prctl$auto_PR_SET_SECCOMP(0x16, 0x81, 0x4, 0x7, 0x8) ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR642(r1, 0xc0884123, &(0x7f0000000000)={0xfffffeff, 0x0, @reserved="e60b7afbd2498350cc17cf56c3d4a08b352746ef44e3ab598d061f605ef1900577018ec57399afee76084c8cb219671b651aa939b4b08dbac123044623223d59", @reserved="121c9a2ae1940e8c44abc650ec3e3f03f035bb490db71d673a9da516f4d8c1fad13965bfb171affad0ac2ea8e381aa3478b568ba8b7d4f486ca7a36186810ea1"}) 7m13.724519493s ago: executing program 4 (id=700): r0 = socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x1, 0x0) socket(0x2d, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x55) listen$auto(0x3, 0x81) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x4000c0, 0x0) pread64$auto(r1, 0x0, 0x0, 0x100000003) socket(0x6, 0x1, 0x106) bind$auto(r0, 0x0, 0x80) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:01.3/power/control\x00', 0xe3102, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) r3 = pidfd_open$auto(0x1, 0x0) setns(r3, 0x60020000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) pivot_root$auto(&(0x7f0000000100)='..\x00', &(0x7f0000000340)='.\x00z\x86E\xb8\xf1\xcbx\xf6cu<\x0e\xd8\xa5\xcd~\xaf\x80\xd3\xf4\xe5\x02\xf9q p\xe2\x8b\xc0\xedf\xba\x16*\x8ar\xa0\'$A\xe5\xc5\x89\xcb\xd5\xac\x98,\xd4Pycv\xdd\xa1\x84\xfb\xe9\r\x82\x15P*IM\xf7.\xf3v\x85Q\xbc:\xef\xd5\x1a\x9e\xbck\x1d\x114^\x1b\x02\xa1\xb0(\xa2\xdb\xbc\x1a\t\x94\x14\xbb\xc8\xfa\x18I\xff\x7f\xab\xf0\x8f\xd3Gr\xfb5\xf1,\x11\x052u&\xde\x9aF\n\xf0\x06\xfc\x1b\x17\x82%\x14\xb3\x19\x13\f\xbe_\xfdi\x17\xfcv\x82*\xbf<\xfa5\xfd\x8b\x1d\x99\a`\xde\xf4\x8a,\tP) \xf4\xdc\r\x17x\xc6\x18Y\xeaaUY\xeb\xd2\x81\xbare\x00\x8e\xfdA\x93\xb9\xac\xf1\x0eq\x85\xd9\x90\x8a%K\x95\x8fm\v\x98y\x9bc-\xa7;\x117\x19)\x04\xb4\nJ\x0e\x1b\x97e\xee\xdb\xc3\xca\xfe\xa7y\x12\xff\xce') openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x501080, 0x0) socketpair$auto(0x80001, 0x6, 0x10000000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0xd3c, 0x1, 0x948b, 0x5, 0xdfc6, 0xf, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0xfffffffffffffff7, 0xfffffffffffffffe]}, 0x0) 7m12.3071889s ago: executing program 4 (id=699): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000080), r0) (async) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000080), r0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="000227bd7000fcdbdf250a00005c36730eef52"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1080) mmap$auto(0x0, 0x40006, 0xe2, 0x20009b72, 0x7, 0x28000) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto(r2, 0x40044620, 0xffffffffffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40000, 0x0) init_module$auto(0x0, 0x1ff, &(0x7f00000002c0)='\x94\x19\xac\x80/der/S\x1auenc9\xf6a\x1b`\b\xab\xfaf\x94;\xc9\xc2,x1y\xd4\x1e\xba\xe4\x84\xcbWW\x8eK`lT\x9c\xc1\x98G \xad\v\x82U\x80w\xac\xe4OW?\xd6\x1e]\xac\x19\xf2\xc2\x98\x9d\xe3-\x95\xc1\x90\x99J\xccB\xd2,\x99R\x85\xd6h\xc8\xe4Ex\x18\x19\x8b\x9e\x05\a\x94l\xde\xc1x/lB\xf6\xe6\x00\xef6\xd6wJ') ioctl$auto_SNDCTL_SYNTH_MEMAVL(r3, 0xc004510e, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000400)='/dev/amidi2\x00', 0x201, 0x0) mmap$auto(0x0, 0x400008, 0x803c, 0x9b72, 0xffffffffffffffff, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x40a, 0x1, 0x44f, 0x7, 0x1, 0x1007181, 0x8a0d, 0x7, 0x7, 0x7, 0x86, 0x26, 0x4, 0x200000000001, 0xfffffffffffff343, 0xfffffffffffffffa, 0x500000000000000, 0x0, 0x30, 0x0, 0x864, 0xe, 0x22000, 0x9, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x9, 0xd) (async) statmount$auto(0x0, &(0x7f0000000180)={0x40a, 0x1, 0x44f, 0x7, 0x1, 0x1007181, 0x8a0d, 0x7, 0x7, 0x7, 0x86, 0x26, 0x4, 0x200000000001, 0xfffffffffffff343, 0xfffffffffffffffa, 0x500000000000000, 0x0, 0x30, 0x0, 0x864, 0xe, 0x22000, 0x9, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x9, 0xd) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) (async) r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffff7effffd06, &(0x7f00000001c0)) (async) ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffff7effffd06, &(0x7f00000001c0)) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card1\x00', 0x101002, 0x0) ioctl$auto(r5, 0x9000643a, 0xc35) (async) ioctl$auto(r5, 0x9000643a, 0xc35) connect$auto(0x3, 0x0, 0x55) r6 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010027bd7000fddbdf255c7c000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) 7m11.910674435s ago: executing program 4 (id=703): io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_CQM(r0, 0x0, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x28b42, 0x0) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x4000) timer_create$auto(0x0, 0x0, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/025/001\x00', 0x8901, 0x0) ioctl$auto(r1, 0x5522, r1) ioctl$auto(r1, 0x5521, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = io_uring_setup$auto(0x1, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz3\x00', 0x141541, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r3, 0x5412, 0x0) ioctl$auto_TIOCMBIS2(r2, 0x5416, &(0x7f0000000040)="78924ebf747b4f54af36228db48508a3cdb739af9031ac5f72ebb2e18e2c1964002cb7ea9fe66bf41eb210e02a3998d2306d944b308eabf80dd4c38cb6e8c37e68ae94dd782408ed6fb4f951e41f42212e06c1dc4f11f657a2c9a6cb5d144e75167be0a6982a9e15bad3bc60d6d7f82cc791ff3ad108") 7m11.291476122s ago: executing program 4 (id=706): socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) socket(0x10, 0x3, 0x6) (async) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) (async) 7m11.003573494s ago: executing program 4 (id=708): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42202, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x2000000000005, 0x9, 0x4000000000e3, 0x13, 0x401, 0x6) (async) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x191000, 0x0) mmap$auto(0xffffffffffffffc0, 0x6, 0x7fffffff, 0x13, r0, 0x8000) (async) connect$auto(0x3, 0x0, 0x40000000) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/net/dev_snmp6/veth0_virt_wifi\x00', 0x200000, 0x0) writev$auto(0x3, 0x0, 0x8009) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000040), r1) sendmsg$auto_OVS_FLOW_CMD_DEL(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200080c1}, 0x800) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) (async) mmap$auto(0x216, 0x402000f, 0x2000006, 0xeb1, 0x401, 0x103ff) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r3, 0x7d, &(0x7f0000000100)="6f48518673c52b419d9709dcdc22fff70b6ac6eaf746b0343a2f370976afa97b82fd31cc448d8873a39d83383dc5", 0x5) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async) unshare$auto(0x40000080) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) (async) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x7}, 0x5, 0x3, 0x9) read$auto(0x3, 0x0, 0xf34) 6m55.916601935s ago: executing program 33 (id=708): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42202, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x2000000000005, 0x9, 0x4000000000e3, 0x13, 0x401, 0x6) (async) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x191000, 0x0) mmap$auto(0xffffffffffffffc0, 0x6, 0x7fffffff, 0x13, r0, 0x8000) (async) connect$auto(0x3, 0x0, 0x40000000) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/net/dev_snmp6/veth0_virt_wifi\x00', 0x200000, 0x0) writev$auto(0x3, 0x0, 0x8009) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000040), r1) sendmsg$auto_OVS_FLOW_CMD_DEL(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200080c1}, 0x800) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) (async) mmap$auto(0x216, 0x402000f, 0x2000006, 0xeb1, 0x401, 0x103ff) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r3, 0x7d, &(0x7f0000000100)="6f48518673c52b419d9709dcdc22fff70b6ac6eaf746b0343a2f370976afa97b82fd31cc448d8873a39d83383dc5", 0x5) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async) unshare$auto(0x40000080) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) (async) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x7}, 0x5, 0x3, 0x9) read$auto(0x3, 0x0, 0xf34) 12.286888657s ago: executing program 0 (id=2408): syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8015) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'pim6reg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'pimreg1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10080}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)=ANY=[@ANYBLOB="30010000", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fedbdf252e0000000c000180080003000700000020000180140002007663616e300000000000000000000000080003008c9f000054000180140002006d616376746170300000000000000000080003000000008008000100", @ANYRES32=0x0, @ANYBLOB="14000200766972745f776966693000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="ff000400", @ANYRES32=0x0, @ANYBLOB="2000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3000000000000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="180001801400020076657468305f746f5f626174616476003800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="1400020076657468305f746f5f68737200000000080003000700000008000100", @ANYRES32=r1, @ANYBLOB="2000018008000100", @ANYRES32=r2, @ANYBLOB="1400020062617461647630000000000000000000"], 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001}, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x14, 0x2, 0x8000) r3 = socket(0x2, 0x1, 0x106) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x8, &(0x7f00000000c0)={[0xeeda, 0x7, 0x6, 0x9, 0x34, 0x1ff, 0x6, 0x4, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8e, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f00000001c0)={0x6, 0xcb}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fbe2df2502000000080002000100000028e5ff102d084475a9db785e92655ba955715583cc8a50063b3f5b86a34d4538191f112a8151d1cd40b92ef28fecf0ee5384dc719adb2cdb504b5061949d21c6c08399099c7aeb25a44be34571d51bd758e1d8a1135a4f734dc9494b025b6bdf4fbbf44b5355558911de93218243672f35b4eebeff5095141729de40aee41da2a874a3096581f618dd02d4f9ea95617b64f8b2b91222aa5c540d25e26833945b44d647c86bb617"], 0x1c}, 0x1, 0x0, 0x0, 0x24008054}, 0x40) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00+'], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) shutdown$auto(0x200000003, 0x2) 10.960400944s ago: executing program 0 (id=2420): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, &(0x7f00000001c0)=0x8) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000000)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x5}, 0x9}, 0x16d, 0x6, 0x0) r2 = socket(0x18, 0x800, 0x2) getpeername$auto(r2, &(0x7f0000000040)=@phonet={0x23, 0x7f, 0xc6, 0x8e}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fbdbdf250100000008100000040007800c000200010000000000000011da1cb476ec87ab3845c11691dcfc7b2446f56618ac65c2a8c8b8da805c553bfa1ad83cf853c67a7ba40aa5b6430024d80e029d52749cfe2e08e459528ceec518846a79e78a744bcd197e537bde718a62320c7c74d0b3acb270c85cd1f8ded3c91c1fb2be564b8753ab5de1a462db46bbd022e9481991fe636ea76c60373a21077e928ee60138c0248bf8f7e5ad3f675d0f523d5bcd511f0c1939d17839936593d192e49654bbd7faa49ff2d59eb9366e5cdcc7999d5276747bcc7ee0a08c32b81686c7858bafdcff307991639186360502f47dbe9112e14735a330871c674fee99ee26957bf1fa48b7098d7a5aa12efe876f5b46ae81e63ec38f11c0975c07f7a16e3e6295d4b2661af3c0449e3925b31290caecee618d3d7e68bce6c7e93168355f2a7beb1691df58c132a2a652b5179f09effb02d7f2cb05b8b949"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmsg$auto_NBD_CMD_DISCONNECT(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)={0x158, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_DEVICE_LIST={0x112, 0x9, 0x0, 0x1, [@nested={0x3c, 0xd9, 0x0, 0x1, [@typed={0x8, 0xd, 0x0, 0x0, @pid}, @nested={0x4, 0xdc}, @nested={0x4, 0x45}, @nested={0x4, 0x4c}, @generic="6cefb65980c95734bbc10aa57c17d82e5c4d4dcbb5a19454a173742b0e339af787fafa1b"]}, @typed={0x5, 0x143, 0x0, 0x0, @str='\x00'}, @generic, @generic="efc2747c0e81190020490499f70d39e82d3b298947b3d4e1e382df51aceba079a4f8b3faa9b24d93e62c3c36eaacfa6cc26f553f9b55a2c08ef39d8d0e5a615e5d2ca3298acd74bdcfd50fe74105f2cfacd8dc73fe723750ef4caa2d7a86bc2076bb1d548ca36bf1c67916e5340d58474d52228f29458bbdca2fa6d0a13dda36218372ef98ab4487da2bfb7e74b88bd375c79a035b4fc858fa1a3303f20d5c4bb5c0d1e4f7210447d970836ad853a031836c5c1336000926bc51709863ff6760362064adee7ff48a237b"]}, @NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, '/dev/sg0\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}]}, 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) r6 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) r7 = socket(0x2, 0x1, 0x106) r8 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/afs/cells\x00', 0x4a801, 0x0) write$auto_proc_reg_file_ops_compat_inode(r8, &(0x7f0000000280)="978693dc87b1c1fd2f1eb908a830a927544df29604e114be47d79b044b1020", 0x1f) mmap$auto_sg_fops_sg(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x1) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x95f4da0a, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x9, 0x6, 0xfffffffffffffffe]}, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x810) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TRIP(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001c00)={&(0x7f0000001c80)=ANY=[@ANYBLOB="28120000", @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf2502000000080005004f0c0000bb10018056efbdd70292994b5f9628f4692506922d06bc9c19cc2cae43341c9ecf511b56e02d6a8786dbe59f5821e0994aeb81173dba3f60159da7945e13ff379470d4c69091bba8486f2e12d258033a0c96ef49eb0be1fa89bf393558abd566ed4e0a6db16f856d5b855349cc43dcd23373c014d352d158a1b4202a886af8a16f417346ade69c7c2b3a5d57812861ea791e00f30c4b67e271962804002e80a4d3e09bebcfe9f1d75e041b6f1a6dd409835d6977b7290438d4764a392862b4b1a66fe90800f000", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0400410008003300", @ANYRES32=0x0, @ANYBLOB="132e2355a10400b90000000008001a0006000000080011000400000014001200766574683000000000000000000000000e000d004e4c424c5f4d474d540000000800060009000000e4000c800400b38086003980d71184aadf115c15d5bebb52cc84c18ce7eb6ccd9a7178e89f87f5e17acb44cbec266b56b9073cba17721a3349780cd93483152f8d27b3d0a1d7e5edf7ad8e721957db7eb62e7728303a625a1f86c60587af1ebbbabf017c9c9d3efb23b64fcde323701021930d0899c87828426c8c7db8b23e1db95e9d3dcdca53872cdd9e95914c00001000ad8008004a000024000004004d8008007e00", @ANYRES32, @ANYBLOB="080046800400f6800400818014002a00ff02000000000000000000000000000114008e0000000000000000000000ffffac1414bb08003700", @ANYRES32, @ANYBLOB], 0x1228}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) lstat$auto(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480)={0x0, 0x7, 0x1, 0x100, 0xee01, 0xffffffffffffffff, 0x0, 0x5, 0x6, 0x3, 0x6, 0x800007, 0xfff7fffffffffffe, 0x6, 0x3, 0xa, 0x800002}) 9.848412556s ago: executing program 2 (id=2413): r0 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim2/psample/enable\x00', 0x8000, 0x0) mmap$auto(0x80000, 0x401, 0x2, 0xeb1, r0, 0x8000000080) syz_clone(0x80000000, &(0x7f0000000000)="085a1056b6aa2f10d8ddee0633aea682a5ff", 0x12, 0x0, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x200000000000404, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev1\x00', 0x0, 0x0) ioctl$auto(r1, 0xc0945662, r1) socket(0x2, 0x5, 0x9) madvise$auto(0x1, 0x9, 0xa) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000100)={{@raw=0xfffffffe, 0x85, 0x20e, 0x9, "669cbbd9e9756f22fdffa188e0f106000000000000000b2f4ab8633824f2d2252ca5f200", @raw=0x6}, 0x0, @integer=@value=[0x42, 0x3, 0x4, 0x6, 0x9, 0xfffffffffffffffb, 0x9, 0x3, 0x101, 0xff, 0x22, 0x4, 0x6, 0x4, 0x7, 0xfffffffffffffffa, 0x1ff, 0x1, 0x400, 0x8, 0x5, 0x2, 0xe294, 0xa2, 0x8, 0x100000000, 0x2, 0x8, 0xae, 0xaeb, 0x3, 0xffffffffffffffff, 0x5, 0x8, 0xfffffffffffffffe, 0x10000, 0x55e2, 0x7, 0x8000, 0xe, 0xffffffffffffffff, 0x6, 0x9, 0x14f3, 0x1ff, 0x1, 0x6e7, 0x3, 0x8, 0x9, 0x0, 0x2, 0x7fffffff, 0x7, 0x9, 0x0, 0x401, 0x9, 0x6, 0x100000001, 0xffffffff, 0x800, 0x8001, 0x5, 0x5ed4, 0x1, 0x7, 0x80000000, 0x962, 0x5, 0xfffffffffffffffe, 0x8, 0xfffffffffffffff7, 0x401, 0x1, 0x3e44, 0x8, 0x4, 0x9, 0x1, 0xc98c, 0x68, 0x2, 0x6, 0x1, 0x3, 0xfffffffffffffffe, 0x4, 0xfffffffffffffffe, 0xffffffffffffffff, 0x55, 0x8, 0x30, 0x2d, 0x0, 0x3, 0x2, 0x0, 0x726, 0x7fffffff, 0x1000, 0x10000, 0x0, 0x4, 0x1, 0xbf, 0x2, 0x4, 0x0, 0x5, 0x1, 0x0, 0x6, 0x9, 0x8000, 0xffff, 0x7, 0x140, 0x0, 0xc7dd, 0xfc05, 0x0, 0x4, 0x6, 0x8, 0x0, 0x0, 0x4], "282f77b07e718ed4d99a34617774e3a82f982e0f05e516c299a28a585e87e0d908e2c8e50de5016f1de5d432da2cc20e951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c85"}) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r2, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socketpair$auto(0x9, 0x1, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) io_uring_setup$auto(0x1, 0x0) connect$auto(0x3, 0x0, 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) shutdown$auto(0x200000003, 0x2) r3 = mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5r3, 0x454f, 0xfff, 0x0, 0x0, r2, 0x80000000}, 0x6d4) flock$auto(r2, 0xc6) r6 = open(0x0, 0x4242, 0x59) flock$auto(r6, 0x6) mmap$auto(0x800, 0x9, 0x4, 0x40eb2, 0xffffffffffffffff, 0x300000000000) connect$auto(0x3, 0x0, 0x55) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x100, 0x0) ioctl$auto(0x3, 0x5411, 0x10000000000402) statmount$auto(0x0, &(0x7f0000000480)={0x8, 0x8, 0x1ff, 0x7c9, 0x25, 0x4909b6f5, 0x1ffe0, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0x68d, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0xffffffff, 0x0, 0x0, [0x8000000000000000, 0x101, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x6, 0xfffffffffffffffc, 0x0, 0x7, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x90, 0x6, 0xbdcc, 0x0, 0xfffffffffffffffe], "7c8dc650f63ac61e21142af067ba214de60bb257f34bcf0ecf65fe21765c0000000000000000003ad6c4685a5f3e8c381980f1d21fca51b1c89d2c59727b8f27d49ba8e8925f30510ad16aa42d479dedbc4fc951b9e906743ad6421706463ac7205d847f4e680e58f656073566058240d46b904b1b5fdb907b87ddabc013bb15fcff34cf1752fd74ad8df3a6a02b80569749d45c4032a7be8a7ef35c28b4c5a5f581f0d6a188056fe694a58882dd833066a6f92b8e8c0c"}, 0x1fe, 0x9) r7 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000140), r4) sendmsg$auto_L2TP_CMD_SESSION_GET(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r7, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, r5}, @L2TP_ATTR_USING_IPSEC={0x5, 0x15, 0x7}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xb8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffff7}]}, 0x68}}, 0x841) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000008}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) socket(0x10, 0x2, 0x0) r8 = openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000040), 0x50000, 0x0) sendmmsg$auto(r8, &(0x7f0000000200)={{0x0, 0x540c, &(0x7f0000000100)={&(0x7f0000000080), 0xfbe}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r0, 0x0, 0xfffffff9, 0x10000, 0x0) 8.735667447s ago: executing program 2 (id=2422): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) readv$auto(0x3, &(0x7f0000000280)={0x0, 0xf7}, 0x87) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x513f83, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x300, 0x0) mmap$auto(0x4, 0x9bd, 0x101, 0x39, r2, 0x101) unshare$auto(0x40000080) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, 0x0, 0x141000, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x842, 0x0) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r3, 0x405c5503, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) setpriority$auto_PRIO_USER(0x2, 0x0, 0x5) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) sendfile$auto(0x3, r4, 0x0, 0x2) madvise$auto(0x0, 0x2003f0, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/disksize\x00', 0x2202, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x183800, 0x0) 7.99367072s ago: executing program 2 (id=2423): syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8015) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'pim6reg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'pimreg1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10080}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)=ANY=[@ANYBLOB="30010000", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fedbdf252e0000000c000180080003000700000020000180140002007663616e300000000000000000000000080003008c9f000054000180140002006d616376746170300000000000000000080003000000008008000100", @ANYRES32=0x0, @ANYBLOB="14000200766972745f776966693000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="ff000400", @ANYRES32=0x0, @ANYBLOB="2000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3000000000000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="180001801400020076657468305f746f5f626174616476003800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="1400020076657468305f746f5f68737200000000080003000700000008000100", @ANYRES32=r1, @ANYBLOB="2000018008000100", @ANYRES32=r2, @ANYBLOB="1400020062617461647630000000000000000000"], 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001}, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x14, 0x2, 0x8000) r3 = socket(0x2, 0x1, 0x106) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x8, &(0x7f00000000c0)={[0xeeda, 0x7, 0x6, 0x9, 0x34, 0x1ff, 0x6, 0x4, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8e, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f00000001c0)={0x6, 0xcb}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fbe2df2502000000080002000100000028e5ff102d084475a9db785e92655ba955715583cc8a50063b3f5b86a34d4538191f112a8151d1cd40b92ef28fecf0ee5384dc719adb2cdb504b5061949d21c6c08399099c7aeb25a44be34571d51bd758e1d8a1135a4f734dc9494b025b6bdf4fbbf44b5355558911de93218243672f35b4eebeff5095141729de40aee41da2a874a3096581f618dd02d4f9ea95617b64f8b2b91222aa5c540d25e26833945b44d647c86bb617"], 0x1c}, 0x1, 0x0, 0x0, 0x24008054}, 0x40) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00+'], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) shutdown$auto(0x200000003, 0x2) 7.444836171s ago: executing program 3 (id=2424): prctl$auto(0x34, 0x200000002, 0x0, 0x0, 0x6) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) socket(0xa, 0x3, 0xff) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) open_tree_attr$auto(0xffffffffffffffff, 0x0, 0x3000, 0x0, 0x7ff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sysfs$auto(0x2, 0x23, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x4) rseq$auto(0x0, 0x8000, 0x0, 0x6) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) r1 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r1, 0x0, 0x1) r2 = openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/options/blk_classic\x00', 0x5, 0x0) write$auto(r2, 0x0, 0x6) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) 6.339149s ago: executing program 2 (id=2425): r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/midi2\x00', 0xaa101, 0x0) (async) close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48101, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/avoid_reset_quirk\x00', 0x68006, 0x0) write$auto(0x3, 0x0, 0x100082) (async) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, 0x0) (async) r2 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r2) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r3, 0x820, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x7}, @NL80211_ATTR_DISABLE_HE={0x4}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x1017}]}, 0x38}}, 0x8001) (async) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) (async) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000300), 0x224c0, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFC_CMD_LLC_SET_PARAMS(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x98, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0x74, 0x14, '\x8b\x0e\xa2\x98\xa1:\xb8\xd8_\x96n\xb4\xab\xb3\x01\xd9\xd1\xf6T\xd0\x7f\xa1\xaa\x82L\x9eAV%\x051U\xc8w\xee/r`lF\x19\x97dp\xcd\x87&\x13;\x19\\\xe4\xbaC\x17\x7f\xa0\xa2\x15\xd7;\xd8T5\x90n\xc6t\xd0q\xd3\x9c)\x9c\x05m\n\xbf\xb3\xf6\xca>D\xb0b#\x8d~*M.T\x94\xc3\xf8\x1c\x8b\xa1\x81\x97!\xfd}\xeb.\x01#h\f\vN\x9d'}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x9}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x40801) (async) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) (async) ioctl$auto_PPPIOCATTACH(r5, 0x4004743d, 0x0) close_range$auto(r0, 0x8, 0x0) 4.566769256s ago: executing program 0 (id=2426): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r1, 0x0, 0x1ff) socket(0x15, 0x5, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) setreuid$auto(0x0, 0x0) sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(r2, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYBLOB="000829bd7000ffdbdf25230000000c0006007f510000000000000800160001010000", @ANYBLOB="04002f800800", @ANYRES32], 0x278}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) msgctl$auto(0x4bd0, 0x5, 0x0) r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r3, r3, 0x0) sendmsg$auto_NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000180)={0x208, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x8}, @NL802154_ATTR_WPAN_PHY_NAME={0xc, 0x2, 'ns/time\x00'}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x62a2}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7}, @NL802154_ATTR_SEC_KEY={0x1c7, 0x30, 0x0, 0x1, [@typed={0x8, 0x54, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x117, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x8, 0xc1, 0x0, 0x0, @uid}, @generic="29980f5aaddb127fd7589767aed594244e1b6fab6aee0037e466380441a944e9094c330943b401b67de3efe02cae135325b67f6019e77437256deb3b12cc3ded6236e479e667d7a67790b1ba93a1830095ea218d8ae3f94db684387a72f15bee5b8e4cb3feb044cc4c3bf4fa27bf27eb9fbe45f3f09e519cc4529ee58db3166bf817394cc9", @typed={0x8, 0x14a, 0x0, 0x0, @fd=r3}, @generic="dee19301332eddcc16192ad866b73db5393a49211c99bd322c3f36dee2f2940fa528be70ca4bb36f91b37b535c87e2d99afbcc3a04b2ea0053ceea4a877c127e7653ce90ae6ebcbfc3772a0369aee3506d1c39607d1815e7dc8d3d3861aa70ef0655323d4b035d1fe127b67915bd2f594ee98b36a91cdc34fb0418b6bad146eecf14fc159b7041febe85f0ccc23bd410d7a82de4c6df6c7a90dfcb484c0874dc2e9632e20f065c15ecd35aa0202603e4620f54b791af57682b9a130029c00c17fb79febfac7bac1429b76b0b175b554325f81571d12ba38f5139dcfd72", @typed={0x4, 0x49}, @generic="c4f680c37616210afa110787133b175b5eab1d270aef6324ae596b95df301d08b27205e21ca2d947ba17510e3f9ebc7f5e", @nested={0xc, 0x65, 0x0, 0x1, [@typed={0x8, 0xd3, 0x0, 0x0, @u32=0x2}]}]}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x3}]}, 0x208}, 0x1, 0x0, 0x0, 0x4000010}, 0x2d81dfc4bcafbd77) prctl$auto(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x18, 0x2, 0x0) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x84d, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) r4 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xa4e00, 0x0) ioctl$auto_IOC_PR_PREEMPT_ABORT(r5, 0x401870cc, 0x0) ioctl$auto_VFIO_IOMMU_MAP_DMA(r4, 0x3b71, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x840141, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x800, 0x45e) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x40102, 0x1a00) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 4.563107639s ago: executing program 2 (id=2428): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = epoll_create1$auto(0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0xffffffffffffffff, 0xac62, r0) ioctl$auto(0x3, 0x4188aec6, 0x38) io_uring_register$auto(0xffffffffffffffff, 0x1f, 0x0, 0x1) r2 = socket(0x2, 0x1, 0x106) mmap$auto(0x400000, 0xfff, 0xbb0, 0x80eb1, 0xfffffffffffffffa, 0x8000) mount$auto(0x0, 0x0, &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0) setrlimit$auto(0x7, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000001700)=ANY=[@ANYBLOB="a4120000", @ANYRES16=0x0, @ANYBLOB="000829bd0200fcdbdf4001eded7f7a1c0eabda36cafba300000800010006a7560336495784f701f70dc07d191f59cd424849fc8e144402f03871ce1a2b0f93d7fef4ff9f6179061a56b1cf0b3fdd0c5b9e8efa710e4a6dd211eed7153abe9f50021b47d027bdbaeb38cd3d8f6e4926cd9d2d9d0df50de96fce195b68548838d199c4a073aa888f9bb393032109689e803eed8297161260e6e12c618549a7a10918312eea41c4f8dea93656bfdac8600d5e04c526e9a6e3283ea37839e69f7492db93cf493104f21f46eff07c4e37bc8c379538f3a9a86dc3baf4255b896ef747a4fe1e739b0996dd09a82fed5fe6a8", @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYBLOB="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"], 0x12a4}, 0x1, 0x0, 0x0, 0xd0539e27fb573b4}, 0x4044804) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0xfffffffffffff93f, 0x80003, 0x2, 0x1ff, r1, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x10001, 0x0) readv$auto(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000200)="f2271799863ca474424b177c192bafee437ec3a814ef69ac5873ba4260f00e1cded82a3f750662345e81c4037a43", 0x2}, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x1a001, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x6) pselect6$auto(0xce9e, &(0x7f0000000000)={[0x8, 0x404, 0x0, 0x6, 0x10000000001, 0x4000000000002bc8, 0x3fd6d3f5, 0x4, 0x4000000000000002, 0xffffffff, 0xc4e, 0x9, 0x2f, 0x2, 0xa, 0x7]}, 0x0, 0x0, 0x0, 0x0) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2}, 0x0, 0xf, 0x9) write$auto(r2, 0x0, 0x8) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x44, 0x0) 4.562652294s ago: executing program 3 (id=2430): r0 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, 0x0, 0x48402, 0x0) getsockname$auto(0xffffffffffffffff, &(0x7f0000000000)=@ethernet={0x1, @broadcast}, &(0x7f00000000c0)=0x5) semtimedop$auto(0xfffffffa, &(0x7f0000001000)={0x8000, 0x2, 0x1}, 0x4, &(0x7f0000001080)={0x11, 0x6}) read$auto(r0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x9, 0x5, 0x5, 0xfffffffffffffff6, 0x7, 0xfffffffffffe0002, 0xdffffffffffffff8, 0x2, 0x0, 0x10000005e58296f, 0x800000000020, 0x5, 0x3, 0x200, 0x1, 0x7]}, 0x0, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0x24000000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$auto_ILA_CMD_FLUSH(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1ce00000eeaebf1235de4605fb5eea67787cb51821af", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf25040000000500070003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x40008c4) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="032cbd7000fbdbdf250a006300060001001500000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4019}, 0x0) syz_clone(0x81000, &(0x7f0000000040)="70b5129cc0119c1d119582e3eadd52eb0079dc53a85920e2f58c146e4d04ed04f810164880e00944a92caf66c930688cf29df910935127037f04954a8435de62545a3e9b9bac28ce7bce02571f43fffef4a86564322324e683c6ee9506b0e71d609b6eb82580", 0x66, &(0x7f00000000c0), 0x0, &(0x7f00000001c0)) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/pci/drivers/pata_sch/new_id\x00', 0x4242, 0x0) r5 = socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c081}, 0x80) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000001040), 0x80, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x3, 0x2000b, 0x2, 0x8000000100000011, r0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/midi2\x00', 0xd82, 0x0) 4.441989504s ago: executing program 5 (id=2431): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x14}}, 0x8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) write$auto(r1, 0x0, 0xb8c5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) mmap$auto(0x0, 0xe983, 0x37, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="1100", 0x2) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D2\x00', 0x20401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) gettid() futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x4, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x1) io_uring_setup$auto(0xc, 0x0) socket(0x10, 0x2, 0x0) socket(0x2c, 0x3, 0x0) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) 3.451801961s ago: executing program 5 (id=2432): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x101002, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000200), 0xffffffffffffffff) lstat$auto(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x21535780, 0x8, 0x9, 0xaf, 0xee00, 0x0, 0x0, 0xf9b, 0x0, 0xe8, 0xd4e, 0x7f, 0x4, 0x7fff, 0x0, 0x0, 0x6}) sendmsg$auto_OVS_FLOW_CMD_NEW(r2, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x148, r3, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@OVS_FLOW_ATTR_ACTIONS={0x99, 0x2, 0x0, 0x1, [@generic="9445737e8b397ceed597565979c5f64260053e6313181a9dd172d26552a3166fd775a862c7b86022e4d02ce5e2f76e2b6f0587e4750a3930c6b6d6301b", @typed={0x58, 0x19, 0x0, 0x0, @binary="b9a58a50bf045bb29060f0c000fa32347d1c2a55f764c1c0ffbf1e5110df7a284cb5bab55717ecb533f86e3564006f2b8392ef88d44b3f2f42c1c9e315b4dae288d14ee4f47c529346ab754ae5a2bb7b2b753d2a"}]}, @OVS_FLOW_ATTR_ACTIONS={0x8a, 0x2, 0x0, 0x1, [@generic="35274a5b52d98830da3f0c7fead2465ebbe72f8815806cbb7762603b379544d6148dc1e15c4128b339f223ee4da48238a29564752fe4d8151dd0b1dfdd6c7a91bc2e2284427b66cc8d0ae0b997e13f6ea728b0c622f249c5e22eca4f", @typed={0x8, 0xab, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x9f, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x21, 0x0, 0x0, @uid=r4}, @typed={0x8, 0x6e, 0x0, 0x0, @pid}, @generic="df68282cb25a2bdccd1f"]}, @OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x148}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080) close_range$auto(0x0, 0xfffffffffffff000, 0x8) fanotify_init$auto(0x602, 0x1) fanotify_mark$auto(0x400000000000, 0x559, 0xf2a, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x169443, 0x114) fcntl$auto(r5, 0x40a, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r6 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) lseek$auto(r6, 0x0, 0x0) pread64$auto(r1, 0x0, 0x10005, 0x830) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000003140), r8) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r8, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000003180)={0x14, r9, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40011}, 0x800) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbee, {0x7e, 0x0, 0x175c}}, 0x14}, 0x1, 0x68, 0x0, 0x20008044}, 0x400c0) write$auto(r0, 0x0, 0x100) 2.895087715s ago: executing program 5 (id=2435): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x18, 0x5, 0x1) connect$auto(r2, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x3b, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) r3 = socket(0x25, 0x2, 0x4) write$auto(r3, 0x0, 0x2fb) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x5, 0x2, 0x5) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen\x00', 0x80400, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x200009, 0x2, 0x40eb1, 0x602, 0xff) capset$auto(0x0, 0x0) prctl$auto_SECCOMP_MODE_STRICT(0xf, 0x1, 0x0, 0x9, 0x2) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/version\x00', 0x189082, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4008014) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000200), r1) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/mem\x00', 0x401, 0x0) 2.892121327s ago: executing program 3 (id=2442): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x101002, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000200), 0xffffffffffffffff) lstat$auto(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x21535780, 0x8, 0x9, 0xaf, 0xee00, 0x0, 0x0, 0xf9b, 0x0, 0xe8, 0xd4e, 0x7f, 0x4, 0x7fff, 0x0, 0x0, 0x6}) sendmsg$auto_OVS_FLOW_CMD_NEW(r2, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x148, r3, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@OVS_FLOW_ATTR_ACTIONS={0x99, 0x2, 0x0, 0x1, [@generic="9445737e8b397ceed597565979c5f64260053e6313181a9dd172d26552a3166fd775a862c7b86022e4d02ce5e2f76e2b6f0587e4750a3930c6b6d6301b", @typed={0x58, 0x19, 0x0, 0x0, @binary="b9a58a50bf045bb29060f0c000fa32347d1c2a55f764c1c0ffbf1e5110df7a284cb5bab55717ecb533f86e3564006f2b8392ef88d44b3f2f42c1c9e315b4dae288d14ee4f47c529346ab754ae5a2bb7b2b753d2a"}]}, @OVS_FLOW_ATTR_ACTIONS={0x8a, 0x2, 0x0, 0x1, [@generic="35274a5b52d98830da3f0c7fead2465ebbe72f8815806cbb7762603b379544d6148dc1e15c4128b339f223ee4da48238a29564752fe4d8151dd0b1dfdd6c7a91bc2e2284427b66cc8d0ae0b997e13f6ea728b0c622f249c5e22eca4f", @typed={0x8, 0xab, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x9f, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x21, 0x0, 0x0, @uid=r4}, @typed={0x8, 0x6e, 0x0, 0x0, @pid}, @generic="df68282cb25a2bdccd1f"]}, @OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x148}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080) close_range$auto(0x0, 0xfffffffffffff000, 0x8) fanotify_init$auto(0x602, 0x1) fanotify_mark$auto(0x400000000000, 0x559, 0xf2a, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x169443, 0x114) fcntl$auto(r5, 0x40a, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r6 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) lseek$auto(r6, 0x0, 0x0) pread64$auto(r1, 0x0, 0x10005, 0x830) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000003140), r8) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r8, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000003180)={0x14, r9, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40011}, 0x800) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbee, {0x7e, 0x0, 0x175c}}, 0x14}, 0x1, 0x68, 0x0, 0x20008044}, 0x400c0) write$auto(r0, 0x0, 0x100) 2.499666633s ago: executing program 5 (id=2436): syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8015) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'pim6reg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'pimreg1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10080}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)=ANY=[@ANYBLOB="30010000", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fedbdf252e0000000c000180080003000700000020000180140002007663616e300000000000000000000000080003008c9f000054000180140002006d616376746170300000000000000000080003000000008008000100", @ANYRES32=0x0, @ANYBLOB="14000200766972745f776966693000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="ff000400", @ANYRES32=0x0, @ANYBLOB="2000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3000000000000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="180001801400020076657468305f746f5f626174616476003800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="1400020076657468305f746f5f68737200000000080003000700000008000100", @ANYRES32=r1, @ANYBLOB="2000018008000100", @ANYRES32=r2, @ANYBLOB="1400020062617461647630000000000000000000"], 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001}, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x14, 0x2, 0x8000) r3 = socket(0x2, 0x1, 0x106) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x8, &(0x7f00000000c0)={[0xeeda, 0x7, 0x6, 0x9, 0x34, 0x1ff, 0x6, 0x4, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8e, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f00000001c0)={0x6, 0xcb}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fbe2df2502000000080002000100000028e5ff102d084475a9db785e92655ba955715583cc8a50063b3f5b86a34d4538191f112a8151d1cd40b92ef28fecf0ee5384dc719adb2cdb504b5061949d21c6c08399099c7aeb25a44be34571d51bd758e1d8a1135a4f734dc9494b025b6bdf4fbbf44b5355558911de93218243672f35b4eebeff5095141729de40aee41da2a874a3096581f618dd02d4f9ea95617b64f8b2b91222aa5c540d25e26833945b44d647c86bb617"], 0x1c}, 0x1, 0x0, 0x0, 0x24008054}, 0x40) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00+'], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) shutdown$auto(0x200000003, 0x2) 1.732029902s ago: executing program 5 (id=2437): mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) mmap$auto(0x0, 0x2000a, 0x200000df, 0xeb1, r0, 0x3) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000029, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/amidi2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x16240, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS(0x4d, 0xf, 0x0, 0x0, 0x0) execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5') socket(0x10, 0x2, 0x0) fallocate$auto(0x3, 0x0, 0xe, 0x8ec5) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) socket(0x18, 0x80000, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(r3, &(0x7f0000001240)={{&(0x7f0000000100)="b0e81c56217c8709c9d167467fda06bd7007c9561a06bdc18f3b10df635f5fa0b6be2161158ad003c0a4128ec57a580e3fe218641ebda1a339391cf51c066dde2c4f71b97fa7bed4fc1b983bc872d063d780901b76c9a88e03a2ac02ff4c4935f854272e47316754d93cacc333d401f6", 0x9d26, &(0x7f00000011c0)={&(0x7f00000001c0)="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", 0x9}, 0xfffffffffffff801, &(0x7f0000001200), 0x23, 0x2}, 0x2}, 0x7, 0xd529) writev$auto(0xca, &(0x7f0000000080)={&(0x7f00000000c0), 0x2}, 0x2000000000000003) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto_TUNGETVNETHDRSZ2(r2, 0x800454d7, &(0x7f0000000040)=0xf) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 1.616448276s ago: executing program 3 (id=2438): mmap$auto(0x0, 0xaaf, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0xb, 0xd, 0xfffffffd, 0x0) mmap$auto(0x0, 0x5, 0xdf, 0x1a, 0x2, 0x7ffc) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x401, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, r0, 0x8000) r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x4301, 0x0) pread64$auto(r3, 0x0, 0x1000f42d, 0x100) sysfs$auto(0x2, 0x23, 0x0) r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r4, 0x0, 0x4) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x2482, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) mmap$auto(0x0, 0x4, 0x3, 0x12, 0xfffffffffffffffa, 0xe4) r6 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000180), 0x583841, 0x0) ioctl$auto_PPPIOCSMRU(r6, 0xc004743e, 0x0) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(r2, 0x0, 0x85) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001f00), r7) sendmsg$auto_NBD_CMD_STATUS(r7, 0x0, 0x4008050) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2082, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000280)=""/175, 0xaf) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) 533.334348ms ago: executing program 5 (id=2439): r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) close_range$auto(0x0, r0, 0xbf9) (async) newfstatat$auto(r0, 0x0, 0x0, 0x1000) (async) mmap$auto(0x0, 0x40009, 0x1ff, 0x9b72, 0x7, 0x28000) (async) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) pipe2$auto(&(0x7f0000000000)=r1, 0xc4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_virt_wifi\x00'}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x800000000001, 0x6b) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) (async) r4 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) (async) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) (async) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) (async) recvmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) (async) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socketpair$auto(0x1f, 0x5, 0x8000000000000000, 0x0) (async) ioctl$auto_TCFLSH2(r6, 0x80045439, 0x0) (async) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) (async) ioctl$auto(r5, 0x89f0, r5) 230.194856ms ago: executing program 3 (id=2440): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose5/threaded\x00', 0x48001, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) msync$auto(0x6, 0x3, 0x7) r1 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r1, 0x0, 0x1) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x8c43, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/fib/nexthop_bucket_activity\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x3, 0x3, 0x3, 0x3, 0x8000000000000000, 0x2, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r3, 0xc0686611, &(0x7f0000000080)={0x68, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x9, 0x5, 0x5, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x7ff, 0x7, 0x9}) r4 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x1, 0x9, 0x7, 0x3d, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x43, 0x6, 0x4, 0xb2, 0x9, 0x3, 0xfffc, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x10000, [0x1000000001, 0x0, 0x6, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2000000]}, 0x202, 0xd) write$auto_evdev_fops_evdev(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) 0s ago: executing program 0 (id=2441): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/fcloop/ctl/del_local_port\x00', 0x80001, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) statx$auto(r1, 0x0, 0x6d7, 0x80000008, 0x0) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$auto_SO_PASSSEC(r1, 0x6, 0x22, &(0x7f0000000240)='\x00', 0xa) r3 = dup$auto(r0) r4 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000002c0), r1) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_GTP_CMD_ECHOREQ(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r4, 0x200, 0x70bd2d, 0x1, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDR6={0x14, 0xc, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000080) sendmsg$auto_BATADV_CMD_GET_MESH(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_ADDRESS={0xa, 0x5, @local}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_HARD_ADDRESS={0xa, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_TPMETER_BYTES={0xc, 0xc, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4090}, 0x80) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)="1da29ee40aeb5d07a7a5b142bd89cdff4fc5e7ad9d3b0f5c3a57752c9d55a4646913aa312b160209a1e4d3070978b4245aa2fdf8a93ba01428fb95051453166e0efbf231507d5e0db8c324ee6f8344369a48f5784480d0b3805f10d7cd64b9f8c55d2cc6e32f169bcc3af77f33caa134", 0x70) kernel console output (not intermixed with test programs): ss+0x10/0x10 [ 587.009958][T13728] ? _copy_from_user+0x59/0xd0 [ 587.009998][T13728] kernel_clone+0xfc/0x910 [ 587.010045][T13728] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 587.010085][T13728] ? __pfx_kernel_clone+0x10/0x10 [ 587.010144][T13728] ? css_rstat_updated+0x1d1/0x590 [ 587.010175][T13728] ? __lock_acquire+0x436/0x2890 [ 587.010205][T13728] __do_sys_clone3+0x212/0x290 [ 587.010252][T13728] ? __pfx___do_sys_clone3+0x10/0x10 [ 587.010318][T13728] ? count_memcg_events+0x122/0x290 [ 587.010387][T13728] ? do_user_addr_fault+0x843/0x1370 [ 587.010439][T13728] do_syscall_64+0xcd/0xf80 [ 587.010492][T13728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.010534][T13728] RIP: 0033:0x7f888318f7c9 [ 587.010560][T13728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.010590][T13728] RSP: 002b:00007f88813abf08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 587.010622][T13728] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f888318f7c9 [ 587.010643][T13728] RDX: 00007f88813abf20 RSI: 0000000000000058 RDI: 00007f88813abf20 [ 587.010664][T13728] RBP: 00007f8883213f91 R08: 0000000000000000 R09: 0000000000000058 [ 587.010685][T13728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 587.010704][T13728] R13: 00007f88833e6218 R14: 00007f88833e6180 R15: 00007ffdd09b34b8 [ 587.010748][T13728] [ 587.879580][T13746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1675'. [ 587.885324][T13747] bridge0: port 3(gretap0) entered blocking state [ 587.895586][T13747] bridge0: port 3(gretap0) entered disabled state [ 587.902923][T13747] gretap0: entered allmulticast mode [ 587.911189][T13747] gretap0: entered promiscuous mode [ 587.917318][T13747] bridge0: port 3(gretap0) entered blocking state [ 587.924030][T13747] bridge0: port 3(gretap0) entered forwarding state [ 588.713178][T13771] zswap: compressor not available [ 589.221555][T13792] sp0: Synchronizing with TNC [ 589.410775][T13795] ptp ptp0: new virtual clock ptp1 [ 589.454983][T13795] ptp ptp0: new virtual clock ptp2 [ 589.498852][T13795] ptp ptp0: new virtual clock ptp3 [ 589.547482][T13795] ptp ptp0: new virtual clock ptp4 [ 589.600399][T13795] ptp ptp0: new virtual clock ptp5 [ 589.624175][T13795] ptp ptp0: new virtual clock ptp6 [ 589.717199][T13795] ptp ptp0: new virtual clock ptp7 [ 589.761504][T13795] ptp ptp0: new virtual clock ptp8 [ 589.803534][T13795] ptp ptp0: new virtual clock ptp9 [ 589.841892][T13795] ptp ptp0: new virtual clock ptp10 [ 589.868997][T13795] ptp ptp0: guarantee physical clock free running [ 590.829768][T13835] Invalid ELF header magic: != ELF [ 591.468221][T13849] FAULT_INJECTION: forcing a failure. [ 591.468221][T13849] name failslab, interval 1, probability 0, space 0, times 0 [ 591.497539][T13849] CPU: 1 UID: 0 PID: 13849 Comm: syz.3.1697 Tainted: G L syzkaller #0 PREEMPT(full) [ 591.497598][T13849] Tainted: [L]=SOFTLOCKUP [ 591.497612][T13849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 591.497633][T13849] Call Trace: [ 591.497645][T13849] [ 591.497658][T13849] dump_stack_lvl+0x16c/0x1f0 [ 591.497722][T13849] should_fail_ex+0x512/0x640 [ 591.497760][T13849] ? __kmalloc_cache_noprof+0x5f/0x800 [ 591.497804][T13849] should_failslab+0xc2/0x120 [ 591.497866][T13849] __kmalloc_cache_noprof+0x80/0x800 [ 591.497906][T13849] ? vkms_atomic_crtc_duplicate_state+0x78/0x1d0 [ 591.497962][T13849] ? vkms_atomic_crtc_duplicate_state+0x78/0x1d0 [ 591.498008][T13849] vkms_atomic_crtc_duplicate_state+0x78/0x1d0 [ 591.498055][T13849] drm_atomic_get_crtc_state+0x1de/0x620 [ 591.498095][T13849] drm_atomic_get_plane_state+0x4a3/0x760 [ 591.498135][T13849] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 591.498182][T13849] ? rcu_is_watching+0x12/0xc0 [ 591.498237][T13849] ? __mutex_lock+0x27b/0x1ca0 [ 591.498290][T13849] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 591.498332][T13849] ? trace_contention_end+0xdd/0x110 [ 591.498404][T13849] drm_client_modeset_commit_locked+0x14d/0x580 [ 591.498454][T13849] drm_client_modeset_commit+0x4f/0x80 [ 591.498497][T13849] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 591.498542][T13849] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 591.498586][T13849] drm_fbdev_client_restore+0x1b/0x30 [ 591.498638][T13849] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 591.498707][T13849] drm_client_dev_restore+0x200/0x2a0 [ 591.498758][T13849] drm_release+0x2c6/0x360 [ 591.498801][T13849] ? __pfx_drm_release+0x10/0x10 [ 591.498847][T13849] __fput+0x402/0xb70 [ 591.498893][T13849] task_work_run+0x150/0x240 [ 591.498933][T13849] ? __pfx_task_work_run+0x10/0x10 [ 591.498970][T13849] ? __do_sys_close_range+0x278/0x730 [ 591.499055][T13849] exit_to_user_mode_loop+0xfb/0x540 [ 591.499103][T13849] do_syscall_64+0x4ee/0xf80 [ 591.499160][T13849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.499195][T13849] RIP: 0033:0x7fdc5db8f7c9 [ 591.499222][T13849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.499259][T13849] RSP: 002b:00007fdc5e95b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 591.499297][T13849] RAX: 0000000000000000 RBX: 00007fdc5dde5fa0 RCX: 00007fdc5db8f7c9 [ 591.499319][T13849] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 591.499340][T13849] RBP: 00007fdc5dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 591.499363][T13849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 591.499385][T13849] R13: 00007fdc5dde6038 R14: 00007fdc5dde5fa0 R15: 00007ffce6d5a1b8 [ 591.499435][T13849] [ 592.232483][T13854] futex_wake_op: syz.0.1699 tries to shift op by -2048; fix this program [ 592.241772][T13854] futex_wake_op: syz.0.1699 tries to shift op by -2048; fix this program [ 592.315031][T13854] 0x000000000001-0x000000020000 : "" [ 592.435678][T13854] ftl_cs: FTL header corrupt! [ 593.329031][T13892] FAULT_INJECTION: forcing a failure. [ 593.329031][T13892] name failslab, interval 1, probability 0, space 0, times 0 [ 593.356674][T13892] CPU: 0 UID: 0 PID: 13892 Comm: syz.0.1708 Tainted: G L syzkaller #0 PREEMPT(full) [ 593.356747][T13892] Tainted: [L]=SOFTLOCKUP [ 593.356762][T13892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 593.356785][T13892] Call Trace: [ 593.356798][T13892] [ 593.356813][T13892] dump_stack_lvl+0x16c/0x1f0 [ 593.356882][T13892] should_fail_ex+0x512/0x640 [ 593.356923][T13892] ? __kmalloc_cache_noprof+0x5f/0x800 [ 593.356970][T13892] should_failslab+0xc2/0x120 [ 593.357024][T13892] __kmalloc_cache_noprof+0x80/0x800 [ 593.357064][T13892] ? kvm_create_lapic+0xa9/0x4d0 [ 593.357123][T13892] ? kvm_create_lapic+0xa9/0x4d0 [ 593.357172][T13892] kvm_create_lapic+0xa9/0x4d0 [ 593.357222][T13892] kvm_arch_vcpu_create+0x283/0xb20 [ 593.357264][T13892] ? lockdep_init_map_type+0x5c/0x270 [ 593.357306][T13892] kvm_vm_ioctl+0x105e/0x4090 [ 593.357368][T13892] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 593.357430][T13892] ? kasan_quarantine_put+0x10a/0x240 [ 593.357471][T13892] ? lockdep_hardirqs_on+0x7c/0x110 [ 593.357525][T13892] ? find_held_lock+0x2b/0x80 [ 593.357567][T13892] ? tomoyo_path_number_perm+0x295/0x580 [ 593.357612][T13892] ? tomoyo_path_number_perm+0x18d/0x580 [ 593.357655][T13892] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 593.357708][T13892] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 593.357771][T13892] ? do_vfs_ioctl+0x128/0x14f0 [ 593.357812][T13892] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 593.357861][T13892] ? find_held_lock+0x2b/0x80 [ 593.357901][T13892] ? hook_file_ioctl_common+0x144/0x410 [ 593.357947][T13892] ? __fget_files+0x20e/0x3c0 [ 593.357999][T13892] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 593.358039][T13892] __x64_sys_ioctl+0x18e/0x210 [ 593.358083][T13892] do_syscall_64+0xcd/0xf80 [ 593.358138][T13892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.358174][T13892] RIP: 0033:0x7f888318f7c9 [ 593.358202][T13892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 593.358237][T13892] RSP: 002b:00007f88813cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 593.358271][T13892] RAX: ffffffffffffffda RBX: 00007f88833e6090 RCX: 00007f888318f7c9 [ 593.358293][T13892] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000003 [ 593.358314][T13892] RBP: 00007f8883213f91 R08: 0000000000000000 R09: 0000000000000000 [ 593.358335][T13892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 593.358355][T13892] R13: 00007f88833e6128 R14: 00007f88833e6090 R15: 00007ffdd09b34b8 [ 593.358400][T13892] [ 595.348754][T13931] netlink: 'syz.0.1718': attribute type 1 has an invalid length. [ 596.353023][T13942] netlink: 'syz.3.1720': attribute type 1 has an invalid length. [ 596.639395][T13949] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 596.702241][T13949] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1722'. [ 596.924706][T13949] team0: Port device team_slave_0 removed [ 597.258219][T13954] netlink: 206 bytes leftover after parsing attributes in process `syz.5.1724'. [ 597.711427][T13971] hub 1-0:1.0: USB hub found [ 597.722333][T13971] hub 1-0:1.0: 1 port detected [ 598.244955][ T5840] Bluetooth: hci0: unexpected event 0x05 length: 435 > 4 [ 598.425745][T13984] sysfs_service_op_show: Client not running :-5: [ 599.220576][T13999] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1733'. [ 599.247823][T14001] FAULT_INJECTION: forcing a failure. [ 599.247823][T14001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 599.278472][T14001] CPU: 0 UID: 0 PID: 14001 Comm: syz.3.1731 Tainted: G L syzkaller #0 PREEMPT(full) [ 599.278526][T14001] Tainted: [L]=SOFTLOCKUP [ 599.278539][T14001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 599.278559][T14001] Call Trace: [ 599.278571][T14001] [ 599.278585][T14001] dump_stack_lvl+0x16c/0x1f0 [ 599.278645][T14001] should_fail_ex+0x512/0x640 [ 599.278690][T14001] _copy_from_user+0x2e/0xd0 [ 599.278729][T14001] get_bitmap+0x6d/0x110 [ 599.278788][T14001] get_nodes+0x1df/0x210 [ 599.278830][T14001] ? __pfx_get_nodes+0x10/0x10 [ 599.278876][T14001] ? __x64_sys_futex+0x1e0/0x4c0 [ 599.278919][T14001] kernel_set_mempolicy+0x129/0x1e0 [ 599.278970][T14001] ? __pfx_kernel_set_mempolicy+0x10/0x10 [ 599.279031][T14001] do_syscall_64+0xcd/0xf80 [ 599.279084][T14001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.279117][T14001] RIP: 0033:0x7fdc5db8f7c9 [ 599.279141][T14001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.279173][T14001] RSP: 002b:00007fdc5e95b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ee [ 599.279205][T14001] RAX: ffffffffffffffda RBX: 00007fdc5dde5fa0 RCX: 00007fdc5db8f7c9 [ 599.279228][T14001] RDX: 0000000000000003 RSI: 0000200000000040 RDI: 0000000000000003 [ 599.279248][T14001] RBP: 00007fdc5dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 599.279268][T14001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.279287][T14001] R13: 00007fdc5dde6038 R14: 00007fdc5dde5fa0 R15: 00007ffce6d5a1b8 [ 599.279331][T14001] [ 600.884186][T14027] zswap: compressor not available [ 602.857009][T14060] FAULT_INJECTION: forcing a failure. [ 602.857009][T14060] name failslab, interval 1, probability 0, space 0, times 0 [ 602.870912][T14060] CPU: 1 UID: 0 PID: 14060 Comm: syz.0.1744 Tainted: G L syzkaller #0 PREEMPT(full) [ 602.870970][T14060] Tainted: [L]=SOFTLOCKUP [ 602.870984][T14060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 602.871004][T14060] Call Trace: [ 602.871014][T14060] [ 602.871027][T14060] dump_stack_lvl+0x16c/0x1f0 [ 602.871089][T14060] should_fail_ex+0x512/0x640 [ 602.871138][T14060] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 602.871202][T14060] should_failslab+0xc2/0x120 [ 602.871262][T14060] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 602.871312][T14060] ? snd_timer_instance_new+0x65/0x2e0 [ 602.871381][T14060] ? kstrdup+0x53/0x100 [ 602.871418][T14060] kstrdup+0x53/0x100 [ 602.871460][T14060] snd_timer_instance_new+0x65/0x2e0 [ 602.871516][T14060] __snd_timer_user_ioctl.isra.0+0x170b/0x27b0 [ 602.871557][T14060] ? lock_acquire+0x179/0x330 [ 602.871592][T14060] ? __pfx___snd_timer_user_ioctl.isra.0+0x10/0x10 [ 602.871636][T14060] ? __pfx___might_resched+0x10/0x10 [ 602.871687][T14060] ? rcu_is_watching+0x12/0xc0 [ 602.871746][T14060] ? do_vfs_ioctl+0x128/0x14f0 [ 602.871789][T14060] ? snd_timer_user_ioctl+0x4a/0xd0 [ 602.871828][T14060] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 602.871875][T14060] ? __pfx___mutex_lock+0x10/0x10 [ 602.871941][T14060] ? find_held_lock+0x2b/0x80 [ 602.872009][T14060] snd_timer_user_ioctl+0x76/0xd0 [ 602.872047][T14060] ? __pfx_snd_timer_user_ioctl+0x10/0x10 [ 602.872089][T14060] __x64_sys_ioctl+0x18e/0x210 [ 602.872146][T14060] do_syscall_64+0xcd/0xf80 [ 602.872210][T14060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.872250][T14060] RIP: 0033:0x7f888318f7c9 [ 602.872279][T14060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 602.872314][T14060] RSP: 002b:00007f88813cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 602.872352][T14060] RAX: ffffffffffffffda RBX: 00007f88833e6090 RCX: 00007f888318f7c9 [ 602.872376][T14060] RDX: 0000200000000080 RSI: 0000000040345410 RDI: 0000000000000004 [ 602.872399][T14060] RBP: 00007f8883213f91 R08: 0000000000000000 R09: 0000000000000000 [ 602.872421][T14060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 602.872442][T14060] R13: 00007f88833e6128 R14: 00007f88833e6090 R15: 00007ffdd09b34b8 [ 602.872489][T14060] [ 604.859752][T14109] FAULT_INJECTION: forcing a failure. [ 604.859752][T14109] name failslab, interval 1, probability 0, space 0, times 0 [ 604.913817][T14109] CPU: 1 UID: 0 PID: 14109 Comm: syz.0.1756 Tainted: G L syzkaller #0 PREEMPT(full) [ 604.913871][T14109] Tainted: [L]=SOFTLOCKUP [ 604.913883][T14109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 604.913902][T14109] Call Trace: [ 604.913913][T14109] [ 604.913926][T14109] dump_stack_lvl+0x16c/0x1f0 [ 604.913993][T14109] should_fail_ex+0x512/0x640 [ 604.914031][T14109] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 604.914076][T14109] should_failslab+0xc2/0x120 [ 604.914122][T14109] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 604.914158][T14109] ? __pfx___might_resched+0x10/0x10 [ 604.914201][T14109] ? sock_alloc_inode+0x25/0x1c0 [ 604.914250][T14109] ? __pfx_sock_alloc_inode+0x10/0x10 [ 604.914296][T14109] ? sock_alloc_inode+0x25/0x1c0 [ 604.914339][T14109] sock_alloc_inode+0x25/0x1c0 [ 604.914385][T14109] alloc_inode+0x64/0x240 [ 604.914424][T14109] sock_alloc+0x40/0x280 [ 604.914469][T14109] __sock_create+0xc2/0x8a0 [ 604.914508][T14109] __sys_socket+0x14d/0x260 [ 604.914537][T14109] ? __x64_sys_openat+0x174/0x210 [ 604.914577][T14109] ? __pfx___sys_socket+0x10/0x10 [ 604.914608][T14109] ? xfd_validate_state+0x61/0x180 [ 604.914650][T14109] __x64_sys_socket+0x72/0xb0 [ 604.914681][T14109] ? lockdep_hardirqs_on+0x7c/0x110 [ 604.914734][T14109] do_syscall_64+0xcd/0xf80 [ 604.914789][T14109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.914824][T14109] RIP: 0033:0x7f888318f7c9 [ 604.914857][T14109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 604.914891][T14109] RSP: 002b:00007f88813cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 604.914924][T14109] RAX: ffffffffffffffda RBX: 00007f88833e6090 RCX: 00007f888318f7c9 [ 604.914953][T14109] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 604.914973][T14109] RBP: 00007f8883213f91 R08: 0000000000000000 R09: 0000000000000000 [ 604.914994][T14109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.915014][T14109] R13: 00007f88833e6128 R14: 00007f88833e6090 R15: 00007ffdd09b34b8 [ 604.915060][T14109] [ 604.915154][T14109] socket: no more sockets [ 606.222004][T14142] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4) [ 606.961914][T14157] ecryptfs_parse_packet_length: Error parsing packet length [ 606.973447][T14157] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 607.072260][T14158] FAULT_INJECTION: forcing a failure. [ 607.072260][T14158] name fail_futex, interval 1, probability 0, space 0, times 0 [ 607.109616][T14158] CPU: 1 UID: 0 PID: 14158 Comm: syz.3.1768 Tainted: G L syzkaller #0 PREEMPT(full) [ 607.109657][T14158] Tainted: [L]=SOFTLOCKUP [ 607.109666][T14158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 607.109681][T14158] Call Trace: [ 607.109690][T14158] [ 607.109699][T14158] dump_stack_lvl+0x16c/0x1f0 [ 607.109746][T14158] should_fail_ex+0x512/0x640 [ 607.109781][T14158] get_futex_key+0x1d0/0x15f0 [ 607.109813][T14158] ? __pfx_get_futex_key+0x10/0x10 [ 607.109874][T14158] futex_wait_setup+0x9d/0x570 [ 607.109935][T14158] __futex_wait+0x193/0x2f0 [ 607.109981][T14158] ? __pfx___futex_wait+0x10/0x10 [ 607.110019][T14158] ? __pfx_futex_wake_mark+0x10/0x10 [ 607.110055][T14158] ? futex_hash+0x2c5/0x380 [ 607.110083][T14158] ? futex_private_hash_put+0x160/0x1b0 [ 607.110111][T14158] futex_wait+0xe8/0x380 [ 607.110143][T14158] ? __pfx_futex_wait+0x10/0x10 [ 607.110187][T14158] ? find_held_lock+0x2b/0x80 [ 607.110222][T14158] do_futex+0x229/0x350 [ 607.110250][T14158] ? __pfx_do_futex+0x10/0x10 [ 607.110285][T14158] __x64_sys_futex+0x1e0/0x4c0 [ 607.110315][T14158] ? fput+0x70/0xf0 [ 607.110339][T14158] ? __pfx___x64_sys_futex+0x10/0x10 [ 607.110367][T14158] ? xfd_validate_state+0x61/0x180 [ 607.110400][T14158] do_syscall_64+0xcd/0xf80 [ 607.110440][T14158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.110465][T14158] RIP: 0033:0x7fdc5db8f7c9 [ 607.110485][T14158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.110510][T14158] RSP: 002b:00007fdc5e95b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 607.110539][T14158] RAX: ffffffffffffffda RBX: 00007fdc5dde5fa8 RCX: 00007fdc5db8f7c9 [ 607.110555][T14158] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdc5dde5fa8 [ 607.110570][T14158] RBP: 00007fdc5dde5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 607.110585][T14158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 607.110599][T14158] R13: 00007fdc5dde6038 R14: 00007ffce6d5a0d0 R15: 00007ffce6d5a1b8 [ 607.110629][T14158] [ 607.958907][T14177] random: crng reseeded on system resumption [ 609.865873][T14241] can: request_module (can-proto-0) failed. [ 610.056167][T14241] can: request_module (can-proto-0) failed. [ 610.299098][T14241] can: request_module (can-proto-0) failed. [ 610.461391][T14241] can: request_module (can-proto-0) failed. [ 610.541223][T14241] can: request_module (can-proto-0) failed. [ 610.941810][T14270] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input33 [ 611.515316][T14294] bond0: option all_slaves_active: invalid value () [ 611.601817][T14301] netlink: 'syz.0.1803': attribute type 1 has an invalid length. [ 611.616583][T14300] netlink: 'syz.0.1803': attribute type 1 has an invalid length. [ 612.496480][T14288] blktrace: Concurrent blktraces are not allowed on ram7 [ 613.457326][T14352] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 613.469678][T14352] Unable to find swap-space signature [ 614.546959][T14379] netlink: 'syz.3.1821': attribute type 1 has an invalid length. [ 614.923889][T14390] random: crng reseeded on system resumption [ 616.256185][T14407] netlink: 'syz.3.1828': attribute type 2 has an invalid length. [ 617.104580][T14426] random: crng reseeded on system resumption [ 617.617759][T14440] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 621.158269][T14501] zswap: compressor 000 not available [ 622.435394][T14534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1853'. [ 623.373803][T14559] Invalid ELF header magic: != ELF [ 624.155919][T14584] FAULT_INJECTION: forcing a failure. [ 624.155919][T14584] name failslab, interval 1, probability 0, space 0, times 0 [ 624.221689][T14584] CPU: 0 UID: 0 PID: 14584 Comm: syz.3.1859 Tainted: G L syzkaller #0 PREEMPT(full) [ 624.221752][T14584] Tainted: [L]=SOFTLOCKUP [ 624.221766][T14584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 624.221789][T14584] Call Trace: [ 624.221802][T14584] [ 624.221817][T14584] dump_stack_lvl+0x16c/0x1f0 [ 624.221884][T14584] should_fail_ex+0x512/0x640 [ 624.221926][T14584] ? __kmalloc_cache_noprof+0x5f/0x800 [ 624.221974][T14584] should_failslab+0xc2/0x120 [ 624.222043][T14584] __kmalloc_cache_noprof+0x80/0x800 [ 624.222087][T14584] ? percpu_ref_init+0xec/0x410 [ 624.222145][T14584] ? percpu_ref_init+0xec/0x410 [ 624.222192][T14584] ? __pfx_free_ioctx_reqs+0x10/0x10 [ 624.222245][T14584] percpu_ref_init+0xec/0x410 [ 624.222297][T14584] ? __init_waitqueue_head+0xca/0x150 [ 624.222349][T14584] ioctx_alloc+0x3e0/0x2230 [ 624.222398][T14584] ? find_held_lock+0x2b/0x80 [ 624.222446][T14584] ? __pfx_ioctx_alloc+0x10/0x10 [ 624.222475][T14584] ? __might_fault+0x13b/0x190 [ 624.222528][T14584] __x64_sys_io_setup+0xc9/0x230 [ 624.222566][T14584] do_syscall_64+0xcd/0xf80 [ 624.222624][T14584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.222664][T14584] RIP: 0033:0x7fdc5db8f7c9 [ 624.222693][T14584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.222733][T14584] RSP: 002b:00007fdc5e95b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 624.222770][T14584] RAX: ffffffffffffffda RBX: 00007fdc5dde5fa0 RCX: 00007fdc5db8f7c9 [ 624.222795][T14584] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 624.222818][T14584] RBP: 00007fdc5dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 624.222840][T14584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.222862][T14584] R13: 00007fdc5dde6038 R14: 00007fdc5dde5fa0 R15: 00007ffce6d5a1b8 [ 624.222911][T14584] [ 624.430369][ T5840] Bluetooth: hci2: unexpected event 0x3e length: 508 > 260 [ 624.430421][ T5840] Bluetooth: hci2: unexpected subevent 0x02 length: 507 > 260 [ 624.449692][ T5840] Bluetooth: hci2: Dropping invalid advertising data [ 624.457353][ T5840] Bluetooth: hci2: unknown advertising packet type: 0xe9 [ 625.268603][T14617] netlink: 186 bytes leftover after parsing attributes in process `syz.5.1866'. [ 625.303299][T14617] netlink: 186 bytes leftover after parsing attributes in process `syz.5.1866'. [ 628.603970][T14706] FAULT_INJECTION: forcing a failure. [ 628.603970][T14706] name fail_futex, interval 1, probability 0, space 0, times 0 [ 628.677211][T14706] CPU: 1 UID: 0 PID: 14706 Comm: syz.0.1880 Tainted: G L syzkaller #0 PREEMPT(full) [ 628.677266][T14706] Tainted: [L]=SOFTLOCKUP [ 628.677278][T14706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 628.677297][T14706] Call Trace: [ 628.677310][T14706] [ 628.677322][T14706] dump_stack_lvl+0x16c/0x1f0 [ 628.677383][T14706] should_fail_ex+0x512/0x640 [ 628.677430][T14706] get_futex_key+0x1d0/0x15f0 [ 628.677472][T14706] ? __pfx_get_futex_key+0x10/0x10 [ 628.677507][T14706] ? __lock_acquire+0x436/0x2890 [ 628.677551][T14706] futex_wake+0xea/0x530 [ 628.677600][T14706] ? __pfx_futex_wake+0x10/0x10 [ 628.677661][T14706] ? __pfx_perf_event_namespaces+0x10/0x10 [ 628.677714][T14706] do_futex+0x1e3/0x350 [ 628.677759][T14706] ? __pfx_do_futex+0x10/0x10 [ 628.677801][T14706] ? ksys_unshare+0x687/0xa40 [ 628.677861][T14706] __x64_sys_futex+0x1e0/0x4c0 [ 628.677905][T14706] ? __pfx___x64_sys_futex+0x10/0x10 [ 628.677944][T14706] ? xfd_validate_state+0x61/0x180 [ 628.677990][T14706] do_syscall_64+0xcd/0xf80 [ 628.678044][T14706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.678078][T14706] RIP: 0033:0x7f888318f7c9 [ 628.678103][T14706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.678138][T14706] RSP: 002b:00007f88813ee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 628.678171][T14706] RAX: ffffffffffffffda RBX: 00007f88833e5fa8 RCX: 00007f888318f7c9 [ 628.678193][T14706] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f88833e5fac [ 628.678215][T14706] RBP: 00007f88833e5fa0 R08: 00007f8882ff8000 R09: 0000000000000000 [ 628.678237][T14706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 628.678257][T14706] R13: 00007f88833e6038 R14: 00007ffdd09b33d0 R15: 00007ffdd09b34b8 [ 628.678296][T14706] [ 629.198247][T14716] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.0.1882: bg 2: bad block bitmap checksum [ 629.254957][T14716] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 906 with max blocks 4 with error 74 [ 629.309548][T14716] EXT4-fs (sda1): This should not happen!! Data will be lost [ 629.309548][T14716] [ 629.604188][T14729] ubi: mtd0 is already attached to ubi31 [ 629.799621][T14739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1883'. [ 632.645317][T14779] FAULT_INJECTION: forcing a failure. [ 632.645317][T14779] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 632.676799][T14779] CPU: 1 UID: 0 PID: 14779 Comm: syz.0.1896 Tainted: G L syzkaller #0 PREEMPT(full) [ 632.676852][T14779] Tainted: [L]=SOFTLOCKUP [ 632.676864][T14779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 632.676883][T14779] Call Trace: [ 632.676894][T14779] [ 632.676907][T14779] dump_stack_lvl+0x16c/0x1f0 [ 632.676966][T14779] should_fail_ex+0x512/0x640 [ 632.677010][T14779] should_fail_alloc_page+0xe7/0x130 [ 632.677066][T14779] prepare_alloc_pages+0x401/0x670 [ 632.677116][T14779] ? rcu_is_watching+0x12/0xc0 [ 632.677168][T14779] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 632.677209][T14779] ? should_fail_alloc_page+0xee/0x130 [ 632.677272][T14779] ? rcu_is_watching+0x12/0xc0 [ 632.677317][T14779] ? trace_mm_page_alloc+0x11b/0x180 [ 632.677366][T14779] ? __alloc_frozen_pages_noprof+0x292/0x2430 [ 632.677405][T14779] ? stack_trace_save+0x8e/0xc0 [ 632.677458][T14779] ? __pfx_stack_trace_save+0x10/0x10 [ 632.677510][T14779] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 632.677552][T14779] ? find_held_lock+0x2b/0x80 [ 632.677599][T14779] ? kasan_save_stack+0x42/0x60 [ 632.677648][T14779] ? __get_vm_area_node+0x1ca/0x330 [ 632.677697][T14779] ? __kvmalloc_node_noprof+0x42c/0xa40 [ 632.677740][T14779] ? do_syscall_64+0xcd/0xf80 [ 632.677788][T14779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.677843][T14779] alloc_pages_bulk_noprof+0x77a/0x1410 [ 632.677883][T14779] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 632.677938][T14779] ? policy_nodemask+0xea/0x4e0 [ 632.677992][T14779] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 632.678037][T14779] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 632.678107][T14779] __kasan_populate_vmalloc+0xfb/0x220 [ 632.678159][T14779] alloc_vmap_area+0x98d/0x2a50 [ 632.678225][T14779] ? __pfx_alloc_vmap_area+0x10/0x10 [ 632.678294][T14779] __get_vm_area_node+0x1ca/0x330 [ 632.678352][T14779] __vmalloc_node_range_noprof+0x247/0x16b0 [ 632.678385][T14779] ? __do_sys_listmount+0x27f/0xf40 [ 632.678435][T14779] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 632.678487][T14779] ? policy_nodemask+0xea/0x4e0 [ 632.678534][T14779] ? __do_sys_listmount+0x27f/0xf40 [ 632.678580][T14779] ? alloc_pages_mpol+0x25a/0x550 [ 632.678629][T14779] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 632.678677][T14779] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 632.678722][T14779] ? ___kmalloc_large_node+0x10c/0x150 [ 632.678762][T14779] __kvmalloc_node_noprof+0x42c/0xa40 [ 632.678808][T14779] ? __do_sys_listmount+0x27f/0xf40 [ 632.678855][T14779] ? __do_sys_listmount+0x27f/0xf40 [ 632.678898][T14779] ? _copy_from_user+0x59/0xd0 [ 632.678940][T14779] ? __do_sys_listmount+0x27f/0xf40 [ 632.678983][T14779] __do_sys_listmount+0x27f/0xf40 [ 632.679040][T14779] ? __pfx___do_sys_listmount+0x10/0x10 [ 632.679100][T14779] ? fput+0x70/0xf0 [ 632.679142][T14779] do_syscall_64+0xcd/0xf80 [ 632.679182][T14779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.679206][T14779] RIP: 0033:0x7f888318f7c9 [ 632.679231][T14779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.679256][T14779] RSP: 002b:00007f88813ee038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 632.679279][T14779] RAX: ffffffffffffffda RBX: 00007f88833e5fa0 RCX: 00007f888318f7c9 [ 632.679296][T14779] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 632.679310][T14779] RBP: 00007f8883213f91 R08: 0000000000000000 R09: 0000000000000000 [ 632.679326][T14779] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 632.679341][T14779] R13: 00007f88833e6038 R14: 00007f88833e5fa0 R15: 00007ffdd09b34b8 [ 632.679372][T14779] [ 632.680713][T14779] syz.0.1896: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 633.087518][T14779] CPU: 1 UID: 0 PID: 14779 Comm: syz.0.1896 Tainted: G L syzkaller #0 PREEMPT(full) [ 633.087573][T14779] Tainted: [L]=SOFTLOCKUP [ 633.087585][T14779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 633.087604][T14779] Call Trace: [ 633.087617][T14779] [ 633.087630][T14779] dump_stack_lvl+0x16c/0x1f0 [ 633.087690][T14779] warn_alloc+0x248/0x3a0 [ 633.087736][T14779] ? __pfx_warn_alloc+0x10/0x10 [ 633.087791][T14779] ? __get_vm_area_node+0x2cd/0x330 [ 633.087848][T14779] ? __get_vm_area_node+0x2cd/0x330 [ 633.087893][T14779] ? __get_vm_area_node+0x208/0x330 [ 633.087960][T14779] __vmalloc_node_range_noprof+0xbe0/0x16b0 [ 633.088002][T14779] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 633.088054][T14779] ? policy_nodemask+0xea/0x4e0 [ 633.088101][T14779] ? __do_sys_listmount+0x27f/0xf40 [ 633.088145][T14779] ? alloc_pages_mpol+0x25a/0x550 [ 633.088193][T14779] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 633.088239][T14779] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 633.088281][T14779] ? ___kmalloc_large_node+0x10c/0x150 [ 633.088340][T14779] __kvmalloc_node_noprof+0x42c/0xa40 [ 633.088388][T14779] ? __do_sys_listmount+0x27f/0xf40 [ 633.088435][T14779] ? __do_sys_listmount+0x27f/0xf40 [ 633.088485][T14779] ? _copy_from_user+0x59/0xd0 [ 633.088528][T14779] ? __do_sys_listmount+0x27f/0xf40 [ 633.088571][T14779] __do_sys_listmount+0x27f/0xf40 [ 633.088628][T14779] ? __pfx___do_sys_listmount+0x10/0x10 [ 633.088675][T14779] ? fput+0x70/0xf0 [ 633.088726][T14779] do_syscall_64+0xcd/0xf80 [ 633.088778][T14779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.088814][T14779] RIP: 0033:0x7f888318f7c9 [ 633.088841][T14779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.088874][T14779] RSP: 002b:00007f88813ee038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 633.088907][T14779] RAX: ffffffffffffffda RBX: 00007f88833e5fa0 RCX: 00007f888318f7c9 [ 633.088929][T14779] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 633.088950][T14779] RBP: 00007f8883213f91 R08: 0000000000000000 R09: 0000000000000000 [ 633.088970][T14779] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 633.088991][T14779] R13: 00007f88833e6038 R14: 00007f88833e5fa0 R15: 00007ffdd09b34b8 [ 633.089035][T14779] [ 633.415779][T14779] Mem-Info: [ 633.432477][T14779] active_anon:49454 inactive_anon:9 isolated_anon:0 [ 633.432477][T14779] active_file:12569 inactive_file:48520 isolated_file:0 [ 633.432477][T14779] unevictable:768 dirty:277 writeback:0 [ 633.432477][T14779] slab_reclaimable:12633 slab_unreclaimable:96212 [ 633.432477][T14779] mapped:26519 shmem:17098 pagetables:1710 [ 633.432477][T14779] sec_pagetables:0 bounce:0 [ 633.432477][T14779] kernel_misc_reclaimable:0 [ 633.432477][T14779] free:1247754 free_pcp:26910 free_cma:0 [ 633.726972][T14779] Node 0 active_anon:191504kB inactive_anon:36kB active_file:50276kB inactive_file:193916kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:110160kB dirty:1184kB writeback:0kB shmem:52208kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:22528kB kernel_stack:13884kB pagetables:6932kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 633.770927][T14779] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:164kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 633.814734][T14779] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 633.878054][T14779] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 633.896270][T14779] Node 0 DMA32 free:1114836kB boost:0kB min:34332kB low:42912kB high:51492kB reserved_highatomic:0KB free_highatomic:0KB active_anon:180872kB inactive_anon:36kB active_file:50276kB inactive_file:193916kB unevictable:1536kB writepending:1184kB zspages:672kB present:3129332kB managed:2541024kB mlocked:0kB bounce:0kB free_pcp:70384kB local_pcp:33760kB free_cma:0kB [ 633.971118][T14794] FAULT_INJECTION: forcing a failure. [ 633.971118][T14794] name fail_futex, interval 1, probability 0, space 0, times 0 [ 634.020064][T14779] lowmem_reserve[]: 0 0 1 1 1 [ 634.024911][T14779] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 634.071499][T14794] CPU: 0 UID: 0 PID: 14794 Comm: syz.3.1899 Tainted: G L syzkaller #0 PREEMPT(full) [ 634.071551][T14794] Tainted: [L]=SOFTLOCKUP [ 634.071564][T14794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 634.071584][T14794] Call Trace: [ 634.071597][T14794] [ 634.071611][T14794] dump_stack_lvl+0x16c/0x1f0 [ 634.071673][T14794] should_fail_ex+0x512/0x640 [ 634.071718][T14794] get_futex_key+0x1d0/0x15f0 [ 634.071761][T14794] ? __pfx_get_futex_key+0x10/0x10 [ 634.071826][T14794] futex_wake+0xea/0x530 [ 634.071874][T14794] ? kasan_quarantine_put+0x10a/0x240 [ 634.071921][T14794] ? __pfx_futex_wake+0x10/0x10 [ 634.071971][T14794] ? putname+0xf5/0x1a0 [ 634.072012][T14794] do_futex+0x1e3/0x350 [ 634.072049][T14794] ? __pfx_do_futex+0x10/0x10 [ 634.072098][T14794] __x64_sys_futex+0x1e0/0x4c0 [ 634.072156][T14794] ? __x64_sys_openat+0x174/0x210 [ 634.072199][T14794] ? __pfx___x64_sys_futex+0x10/0x10 [ 634.072254][T14794] do_syscall_64+0xcd/0xf80 [ 634.072309][T14794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.072345][T14794] RIP: 0033:0x7fdc5db8f7c9 [ 634.072374][T14794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.072410][T14794] RSP: 002b:00007fdc5e95b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 634.072445][T14794] RAX: ffffffffffffffda RBX: 00007fdc5dde5fa8 RCX: 00007fdc5db8f7c9 [ 634.072468][T14794] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdc5dde5fac [ 634.072491][T14794] RBP: 00007fdc5dde5fa0 R08: 00007fdc5e95c000 R09: 0000000000000000 [ 634.072532][T14794] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 634.072554][T14794] R13: 00007fdc5dde6038 R14: 00007ffce6d5a0d0 R15: 00007ffce6d5a1b8 [ 634.072603][T14794] [ 634.145976][T14779] lowmem_reserve[]: 0 0 0 0 0 [ 634.365253][T14779] Node 1 Normal free:3894740kB boost:0kB min:55548kB low:69432kB high:83316kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:164kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20576kB local_pcp:9888kB free_cma:0kB [ 634.477043][T14779] lowmem_reserve[]: 0 0 0 0 0 [ 634.481884][T14779] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 634.495698][T14779] Node 0 DMA32: 1389*4kB (UME) 3247*8kB (UME) 2456*16kB (UME) 1071*32kB (UM) 834*64kB (UM) 626*128kB (UM) 414*256kB (UME) 200*512kB (UM) 125*1024kB (UME) 4*2048kB (UM) 130*4096kB (M) = 1115660kB [ 634.529599][T14779] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 634.551392][T14779] Node 1 Normal: 219*4kB (UME) 69*8kB (UME) 42*16kB (UME) 281*32kB (UME) 90*64kB (UME) 18*128kB (UME) 7*256kB (UME) 6*512kB (UM) 4*1024kB (UM) 2*2048kB (UE) 943*4096kB (M) = 3894740kB [ 634.609815][T14779] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 634.626530][T14779] Node 0 hugepages_total=3 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 634.646037][T14779] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 634.706524][T14779] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 634.732068][T14779] 68197 total pagecache pages [ 634.792173][T14779] 53 pages in swap cache [ 634.796944][T14779] Free swap = 124276kB [ 634.801146][T14779] Total swap = 124996kB [ 634.825596][T14779] 2097051 pages RAM [ 634.836443][T14779] 0 pages HighMem/MovableOnly [ 634.841212][T14779] 429769 pages reserved [ 634.893037][T14779] 0 pages cma reserved [ 635.389361][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 635.399770][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.622091][T14825] FAULT_INJECTION: forcing a failure. [ 635.622091][T14825] name failslab, interval 1, probability 0, space 0, times 0 [ 635.636126][T14825] CPU: 1 UID: 0 PID: 14825 Comm: syz.2.1906 Tainted: G L syzkaller #0 PREEMPT(full) [ 635.636188][T14825] Tainted: [L]=SOFTLOCKUP [ 635.636202][T14825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 635.636223][T14825] Call Trace: [ 635.636235][T14825] [ 635.636248][T14825] dump_stack_lvl+0x16c/0x1f0 [ 635.636329][T14825] should_fail_ex+0x512/0x640 [ 635.636369][T14825] ? __kmalloc_noprof+0xca/0x910 [ 635.636412][T14825] should_failslab+0xc2/0x120 [ 635.636466][T14825] __kmalloc_noprof+0xeb/0x910 [ 635.636504][T14825] ? lsm_blob_alloc+0x68/0x90 [ 635.636561][T14825] ? lsm_blob_alloc+0x68/0x90 [ 635.636608][T14825] lsm_blob_alloc+0x68/0x90 [ 635.636658][T14825] security_prepare_creds+0x2f/0x270 [ 635.636711][T14825] prepare_creds+0x5d6/0x940 [ 635.636758][T14825] __sys_setfsgid+0xe3/0x380 [ 635.636805][T14825] ? rcu_is_watching+0x12/0xc0 [ 635.636859][T14825] do_syscall_64+0xcd/0xf80 [ 635.636919][T14825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.636956][T14825] RIP: 0033:0x7f144dd8f7c9 [ 635.636984][T14825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 635.637022][T14825] RSP: 002b:00007f144eca8038 EFLAGS: 00000246 ORIG_RAX: 000000000000007b [ 635.637058][T14825] RAX: ffffffffffffffda RBX: 00007f144dfe5fa0 RCX: 00007f144dd8f7c9 [ 635.637082][T14825] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 635.637104][T14825] RBP: 00007f144de13f91 R08: 0000000000000000 R09: 0000000000000000 [ 635.637126][T14825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.637147][T14825] R13: 00007f144dfe6038 R14: 00007f144dfe5fa0 R15: 00007fff5976eba8 [ 635.637193][T14825] [ 636.376772][T14839] FAULT_INJECTION: forcing a failure. [ 636.376772][T14839] name fail_futex, interval 1, probability 0, space 0, times 0 [ 636.391001][T14839] CPU: 0 UID: 0 PID: 14839 Comm: syz.0.1909 Tainted: G L syzkaller #0 PREEMPT(full) [ 636.391061][T14839] Tainted: [L]=SOFTLOCKUP [ 636.391075][T14839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 636.391095][T14839] Call Trace: [ 636.391107][T14839] [ 636.391121][T14839] dump_stack_lvl+0x16c/0x1f0 [ 636.391186][T14839] should_fail_ex+0x512/0x640 [ 636.391237][T14839] get_futex_key+0x1d0/0x15f0 [ 636.391284][T14839] ? __pfx_get_futex_key+0x10/0x10 [ 636.391329][T14839] ? __pfx___fsnotify_parent+0x10/0x10 [ 636.391390][T14839] futex_wake+0xea/0x530 [ 636.391441][T14839] ? __pfx_futex_wake+0x10/0x10 [ 636.391488][T14839] ? vfs_write+0x15d/0x11d0 [ 636.391536][T14839] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 636.391586][T14839] do_futex+0x1e3/0x350 [ 636.391628][T14839] ? __pfx_do_futex+0x10/0x10 [ 636.391682][T14839] __x64_sys_futex+0x1e0/0x4c0 [ 636.391728][T14839] ? fput+0x70/0xf0 [ 636.391763][T14839] ? __pfx___x64_sys_futex+0x10/0x10 [ 636.391806][T14839] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 636.391883][T14839] do_syscall_64+0xcd/0xf80 [ 636.391969][T14839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.392008][T14839] RIP: 0033:0x7f888318f7c9 [ 636.392038][T14839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.392073][T14839] RSP: 002b:00007f88813ee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 636.392108][T14839] RAX: ffffffffffffffda RBX: 00007f88833e5fa8 RCX: 00007f888318f7c9 [ 636.392132][T14839] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f88833e5fac [ 636.392155][T14839] RBP: 00007f88833e5fa0 R08: 00007f8882ff8000 R09: 0000000000000000 [ 636.392177][T14839] R10: 000000000000004e R11: 0000000000000246 R12: 0000000000000000 [ 636.392201][T14839] R13: 00007f88833e6038 R14: 00007ffdd09b33d0 R15: 00007ffdd09b34b8 [ 636.392247][T14839] [ 637.574536][T14870] ptp ptp0: delete virtual clock ptp10 [ 637.671666][T14866] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 637.812061][T14870] ptp ptp0: delete virtual clock ptp9 [ 637.939798][T14870] ptp ptp0: delete virtual clock ptp8 [ 638.027852][T14870] ptp ptp0: delete virtual clock ptp7 [ 638.076803][T14870] ptp ptp0: delete virtual clock ptp6 [ 638.134741][T14870] ptp ptp0: delete virtual clock ptp5 [ 638.313859][T14870] ptp ptp0: delete virtual clock ptp4 [ 638.337539][T14870] ptp ptp0: delete virtual clock ptp3 [ 638.359455][T14870] ptp ptp0: delete virtual clock ptp2 [ 638.438655][T14870] ptp ptp0: delete virtual clock ptp1 [ 638.465894][T14870] ptp ptp0: only physical clock in use now [ 638.609012][T14898] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1920'. [ 638.742910][T14902] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1921'. getty: ttyS0: read error: Resource temporarily unavailable syzkaller syzkaller login: [ 642.943797][T14973] netlink: 'syz.0.1937': attribute type 1 has an invalid length. [ 643.175118][T14982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1939'. [ 643.399008][ T5840] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260 [ 643.399061][ T5840] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 643.414729][ T5840] Bluetooth: hci3: Dropping invalid advertising data [ 643.421804][ T5840] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 643.421853][ T5840] Bluetooth: hci3: Dropping invalid advertising data [ 643.436034][ T5840] Bluetooth: hci3: Malformed LE Event: 0x02 [ 643.449024][T14990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1941'. [ 643.458919][T14990] unsupported nlmsg_type 40 [ 643.717587][T14995] ptrace attach of "./syz-executor exec"[9588] was attempted by ""[14995] [ 644.483620][T15020] loop6: detected capacity change from 0 to 8 [ 644.956869][T15038] netlink: 'syz.3.1953': attribute type 1 has an invalid length. [ 645.005461][T15037] netlink: 'syz.3.1953': attribute type 1 has an invalid length. [ 645.583771][T15046] synth uevent: /devices/platform/vivid.0/cec23: unknown uevent action string [ 645.607174][T15046] cec cec23: uevent: failed to send synthetic uevent: -22 [ 647.839282][T15095] netlink: 'syz.2.1966': attribute type 2 has an invalid length. [ 648.081540][T15099] FAULT_INJECTION: forcing a failure. [ 648.081540][T15099] name failslab, interval 1, probability 0, space 0, times 0 [ 648.113815][T15099] CPU: 0 UID: 0 PID: 15099 Comm: syz.0.1967 Tainted: G L syzkaller #0 PREEMPT(full) [ 648.113858][T15099] Tainted: [L]=SOFTLOCKUP [ 648.113867][T15099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 648.113883][T15099] Call Trace: [ 648.113893][T15099] [ 648.113903][T15099] dump_stack_lvl+0x16c/0x1f0 [ 648.113953][T15099] should_fail_ex+0x512/0x640 [ 648.113984][T15099] ? kmem_cache_alloc_noprof+0x62/0x770 [ 648.114027][T15099] should_failslab+0xc2/0x120 [ 648.114068][T15099] kmem_cache_alloc_noprof+0x83/0x770 [ 648.114099][T15099] ? dup_fd+0x52/0xc70 [ 648.114140][T15099] ? dup_fd+0x52/0xc70 [ 648.114174][T15099] dup_fd+0x52/0xc70 [ 648.114219][T15099] __do_sys_close_range+0x4ca/0x730 [ 648.114267][T15099] ? __pfx___do_sys_close_range+0x10/0x10 [ 648.114315][T15099] do_syscall_64+0xcd/0xf80 [ 648.114358][T15099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.114384][T15099] RIP: 0033:0x7f888318f7c9 [ 648.114406][T15099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.114431][T15099] RSP: 002b:00007f88813ee038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 648.114456][T15099] RAX: ffffffffffffffda RBX: 00007f88833e5fa0 RCX: 00007f888318f7c9 [ 648.114472][T15099] RDX: 0004000000000002 RSI: fffffffffffff000 RDI: 0000000000000000 [ 648.114488][T15099] RBP: 00007f8883213f91 R08: 0000000000000000 R09: 0000000000000000 [ 648.114504][T15099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 648.114519][T15099] R13: 00007f88833e6038 R14: 00007f88833e5fa0 R15: 00007ffdd09b34b8 [ 648.114552][T15099] [ 652.279385][T15175] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1985'. [ 652.923457][T15187] binder: 15183:15187 ioctl 40046f41 0 returned -22 [ 653.494346][T15194] sd 0:0:1:0: PR command failed: 1026 [ 653.582424][T15194] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 653.617450][T15194] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 653.963268][T15207] sp0: Synchronizing with TNC [ 654.623017][T15214] FAULT_INJECTION: forcing a failure. [ 654.623017][T15214] name failslab, interval 1, probability 0, space 0, times 0 [ 654.670977][T15214] CPU: 0 UID: 0 PID: 15214 Comm: syz.3.1995 Tainted: G L syzkaller #0 PREEMPT(full) [ 654.671021][T15214] Tainted: [L]=SOFTLOCKUP [ 654.671030][T15214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 654.671046][T15214] Call Trace: [ 654.671056][T15214] [ 654.671066][T15214] dump_stack_lvl+0x16c/0x1f0 [ 654.671115][T15214] should_fail_ex+0x512/0x640 [ 654.671146][T15214] ? kmem_cache_alloc_noprof+0x62/0x770 [ 654.671182][T15214] should_failslab+0xc2/0x120 [ 654.671222][T15214] kmem_cache_alloc_noprof+0x83/0x770 [ 654.671254][T15214] ? vm_area_alloc+0x1f/0x160 [ 654.671286][T15214] ? vm_area_alloc+0x1f/0x160 [ 654.671317][T15214] vm_area_alloc+0x1f/0x160 [ 654.671343][T15214] __mmap_region+0x107a/0x2a00 [ 654.671377][T15214] ? __lock_acquire+0x436/0x2890 [ 654.671401][T15214] ? __pfx___mmap_region+0x10/0x10 [ 654.671440][T15214] ? lock_acquire+0x179/0x330 [ 654.671474][T15214] ? finish_task_switch.isra.0+0x207/0xbd0 [ 654.671567][T15214] ? rcu_is_watching+0x12/0xc0 [ 654.671611][T15214] mmap_region+0x1ab/0x3f0 [ 654.671641][T15214] ? __get_unmapped_area+0x267/0x3f0 [ 654.671683][T15214] do_mmap+0xa3e/0x1210 [ 654.671725][T15214] ? __pfx_do_mmap+0x10/0x10 [ 654.671762][T15214] ? __pfx_down_write_killable+0x10/0x10 [ 654.671796][T15214] vm_mmap_pgoff+0x29e/0x470 [ 654.671863][T15214] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 654.671912][T15214] ? __pfx_do_sendfile+0x10/0x10 [ 654.671976][T15214] ? __x64_sys_futex+0x1e0/0x4c0 [ 654.672008][T15214] ? __x64_sys_futex+0x1e9/0x4c0 [ 654.672042][T15214] ksys_mmap_pgoff+0x7d/0x5c0 [ 654.672080][T15214] ? syscall_user_dispatch+0x78/0x140 [ 654.672115][T15214] __x64_sys_mmap+0x125/0x190 [ 654.672145][T15214] do_syscall_64+0xcd/0xf80 [ 654.672185][T15214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.672212][T15214] RIP: 0033:0x7fdc5db8f7c9 [ 654.672233][T15214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.672258][T15214] RSP: 002b:00007fdc5bdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 654.672284][T15214] RAX: ffffffffffffffda RBX: 00007fdc5dde6090 RCX: 00007fdc5db8f7c9 [ 654.672309][T15214] RDX: 00000000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 654.672325][T15214] RBP: 00007fdc5dc13f91 R08: 0000000000000401 R09: 0000000000000000 [ 654.672340][T15214] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 654.672356][T15214] R13: 00007fdc5dde6128 R14: 00007fdc5dde6090 R15: 00007ffce6d5a1b8 [ 654.672390][T15214] [ 655.871362][T15223] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1997'. [ 657.912079][T15253] FAULT_INJECTION: forcing a failure. [ 657.912079][T15253] name fail_futex, interval 1, probability 0, space 0, times 0 [ 657.974826][T15253] CPU: 1 UID: 0 PID: 15253 Comm: syz.2.2006 Tainted: G L syzkaller #0 PREEMPT(full) [ 657.974887][T15253] Tainted: [L]=SOFTLOCKUP [ 657.974896][T15253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 657.974912][T15253] Call Trace: [ 657.974921][T15253] [ 657.974931][T15253] dump_stack_lvl+0x16c/0x1f0 [ 657.974976][T15253] should_fail_ex+0x512/0x640 [ 657.975009][T15253] get_futex_key+0x1d0/0x15f0 [ 657.975059][T15253] ? look_up_user_keyrings+0x351/0x790 [ 657.975090][T15253] ? __pfx_get_futex_key+0x10/0x10 [ 657.975117][T15253] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 657.975154][T15253] futex_wake+0xea/0x530 [ 657.975191][T15253] ? lookup_user_key+0x2ce/0x1300 [ 657.975219][T15253] ? __pfx_futex_wake+0x10/0x10 [ 657.975266][T15253] do_futex+0x1e3/0x350 [ 657.975300][T15253] ? __pfx_do_futex+0x10/0x10 [ 657.975330][T15253] ? _copy_to_user+0x48/0xd0 [ 657.975362][T15253] __x64_sys_futex+0x1e0/0x4c0 [ 657.975397][T15253] ? __pfx___x64_sys_futex+0x10/0x10 [ 657.975426][T15253] ? xfd_validate_state+0x61/0x180 [ 657.975460][T15253] do_syscall_64+0xcd/0xf80 [ 657.975501][T15253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.975527][T15253] RIP: 0033:0x7f144dd8f7c9 [ 657.975549][T15253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 657.975573][T15253] RSP: 002b:00007f144eca80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 657.975597][T15253] RAX: ffffffffffffffda RBX: 00007f144dfe5fa8 RCX: 00007f144dd8f7c9 [ 657.975614][T15253] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f144dfe5fac [ 657.975631][T15253] RBP: 00007f144dfe5fa0 R08: 00007f144eca9000 R09: 0000000000000000 [ 657.975646][T15253] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 657.975662][T15253] R13: 00007f144dfe6038 R14: 00007fff5976eac0 R15: 00007fff5976eba8 [ 657.975695][T15253] [ 658.317884][T15259] FAULT_INJECTION: forcing a failure. [ 658.317884][T15259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 658.331287][T15259] CPU: 1 UID: 0 PID: 15259 Comm: syz.3.2004 Tainted: G L syzkaller #0 PREEMPT(full) [ 658.331340][T15259] Tainted: [L]=SOFTLOCKUP [ 658.331352][T15259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 658.331372][T15259] Call Trace: [ 658.331384][T15259] [ 658.331396][T15259] dump_stack_lvl+0x16c/0x1f0 [ 658.331456][T15259] should_fail_ex+0x512/0x640 [ 658.331503][T15259] _copy_from_user+0x2e/0xd0 [ 658.331541][T15259] copy_msghdr_from_user+0x98/0x160 [ 658.331587][T15259] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 658.331639][T15259] ? __pfx__kstrtoull+0x10/0x10 [ 658.331693][T15259] ___sys_sendmsg+0xfe/0x1d0 [ 658.331736][T15259] ? __pfx____sys_sendmsg+0x10/0x10 [ 658.331798][T15259] ? find_held_lock+0x2b/0x80 [ 658.331870][T15259] __sys_sendmmsg+0x200/0x420 [ 658.331916][T15259] ? __pfx___sys_sendmmsg+0x10/0x10 [ 658.331973][T15259] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 658.332053][T15259] ? fput+0x70/0xf0 [ 658.332088][T15259] ? ksys_write+0x1ac/0x250 [ 658.332135][T15259] ? __pfx_ksys_write+0x10/0x10 [ 658.332185][T15259] __x64_sys_sendmmsg+0x9c/0x100 [ 658.332228][T15259] ? lockdep_hardirqs_on+0x7c/0x110 [ 658.332275][T15259] do_syscall_64+0xcd/0xf80 [ 658.332330][T15259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.332366][T15259] RIP: 0033:0x7fdc5db8f7c9 [ 658.332392][T15259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.332426][T15259] RSP: 002b:00007fdc5e95b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 658.332458][T15259] RAX: ffffffffffffffda RBX: 00007fdc5dde5fa0 RCX: 00007fdc5db8f7c9 [ 658.332481][T15259] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000004 [ 658.332501][T15259] RBP: 00007fdc5e95b090 R08: 0000000000000000 R09: 0000000000000000 [ 658.332522][T15259] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 658.332543][T15259] R13: 00007fdc5dde6038 R14: 00007fdc5dde5fa0 R15: 00007ffce6d5a1b8 [ 658.332589][T15259] [ 659.065257][T15270] netlink: 'syz.0.2009': attribute type 27 has an invalid length. [ 659.106026][T15270] netlink: 'syz.0.2009': attribute type 28 has an invalid length. [ 659.125244][T15270] netlink: 'syz.0.2009': attribute type 29 has an invalid length. [ 659.131946][T15272] nfs: Unknown parameter 'w¾Ã`_…à‚ûÏI+;ýá ÑöHYø º†»·«ÏLuõ>>ËÕuh*àéC<+ °ðÀÛ' [ 659.136512][T15270] netlink: 'syz.0.2009': attribute type 30 has an invalid length. [ 659.151033][T15270] netlink: 'syz.0.2009': attribute type 31 has an invalid length. [ 659.159407][T15270] netlink: 'syz.0.2009': attribute type 32 has an invalid length. [ 659.167509][T15270] netlink: 'syz.0.2009': attribute type 33 has an invalid length. [ 659.190242][T15270] netlink: 'syz.0.2009': attribute type 35 has an invalid length. [ 659.207758][T15270] netlink: 'syz.0.2009': attribute type 37 has an invalid length. [ 659.229531][T15270] netlink: 'syz.0.2009': attribute type 39 has an invalid length. [ 659.240212][T15270] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2009'. [ 660.325120][T15307] FAULT_INJECTION: forcing a failure. [ 660.325120][T15307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 660.338978][T15307] CPU: 1 UID: 0 PID: 15307 Comm: syz.3.2019 Tainted: G L syzkaller #0 PREEMPT(full) [ 660.339026][T15307] Tainted: [L]=SOFTLOCKUP [ 660.339037][T15307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 660.339056][T15307] Call Trace: [ 660.339066][T15307] [ 660.339078][T15307] dump_stack_lvl+0x16c/0x1f0 [ 660.339157][T15307] should_fail_ex+0x512/0x640 [ 660.339203][T15307] _copy_from_user+0x2e/0xd0 [ 660.339242][T15307] ____sys_sendmsg+0x607/0xc30 [ 660.339304][T15307] ? __pfx_____sys_sendmsg+0x10/0x10 [ 660.339365][T15307] ? __pfx__kstrtoull+0x10/0x10 [ 660.339420][T15307] ___sys_sendmsg+0x134/0x1d0 [ 660.339468][T15307] ? __pfx____sys_sendmsg+0x10/0x10 [ 660.339532][T15307] ? find_held_lock+0x2b/0x80 [ 660.339605][T15307] __sys_sendmmsg+0x200/0x420 [ 660.339652][T15307] ? __pfx___sys_sendmmsg+0x10/0x10 [ 660.339709][T15307] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 660.339780][T15307] ? fput+0x70/0xf0 [ 660.339813][T15307] ? ksys_write+0x1ac/0x250 [ 660.339861][T15307] ? __pfx_ksys_write+0x10/0x10 [ 660.339917][T15307] __x64_sys_sendmmsg+0x9c/0x100 [ 660.339969][T15307] ? lockdep_hardirqs_on+0x7c/0x110 [ 660.340020][T15307] do_syscall_64+0xcd/0xf80 [ 660.340074][T15307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.340112][T15307] RIP: 0033:0x7fdc5db8f7c9 [ 660.340139][T15307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.340174][T15307] RSP: 002b:00007fdc5e95b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 660.340207][T15307] RAX: ffffffffffffffda RBX: 00007fdc5dde5fa0 RCX: 00007fdc5db8f7c9 [ 660.340230][T15307] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000004 [ 660.340250][T15307] RBP: 00007fdc5e95b090 R08: 0000000000000000 R09: 0000000000000000 [ 660.340271][T15307] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 660.340291][T15307] R13: 00007fdc5dde6038 R14: 00007fdc5dde5fa0 R15: 00007ffce6d5a1b8 [ 660.340336][T15307] [ 660.741879][T15279] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 662.220675][T15344] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 662.646123][ T5840] Bluetooth: hci2: unexpected event 0x3c length: 254 > 7 [ 663.793963][T15373] FAULT_INJECTION: forcing a failure. [ 663.793963][T15373] name failslab, interval 1, probability 0, space 0, times 0 [ 663.884290][T15373] CPU: 1 UID: 0 PID: 15373 Comm: syz.2.2035 Tainted: G L syzkaller #0 PREEMPT(full) [ 663.884352][T15373] Tainted: [L]=SOFTLOCKUP [ 663.884366][T15373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 663.884388][T15373] Call Trace: [ 663.884401][T15373] [ 663.884415][T15373] dump_stack_lvl+0x16c/0x1f0 [ 663.884480][T15373] should_fail_ex+0x512/0x640 [ 663.884527][T15373] ? fs_reclaim_acquire+0xae/0x150 [ 663.884592][T15373] should_failslab+0xc2/0x120 [ 663.884659][T15373] __kmalloc_noprof+0xeb/0x910 [ 663.884701][T15373] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 663.884759][T15373] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 663.884806][T15373] tomoyo_realpath_from_path+0xc2/0x6e0 [ 663.884867][T15373] tomoyo_check_open_permission+0x2ab/0x3c0 [ 663.884913][T15373] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 663.884997][T15373] ? do_raw_spin_lock+0x12c/0x2b0 [ 663.885051][T15373] tomoyo_file_open+0x6b/0x90 [ 663.885111][T15373] security_file_open+0x84/0x1e0 [ 663.885159][T15373] do_dentry_open+0x597/0x1590 [ 663.885215][T15373] ? security_inode_permission+0xbf/0x260 [ 663.885262][T15373] vfs_open+0x82/0x3f0 [ 663.885305][T15373] path_openat+0x2078/0x3140 [ 663.885372][T15373] ? __pfx_path_openat+0x10/0x10 [ 663.885440][T15373] do_filp_open+0x20b/0x470 [ 663.885494][T15373] ? __pfx_do_filp_open+0x10/0x10 [ 663.885576][T15373] ? alloc_fd+0x471/0x7d0 [ 663.885648][T15373] do_sys_openat2+0x121/0x290 [ 663.885689][T15373] ? __pfx_do_sys_openat2+0x10/0x10 [ 663.885748][T15373] __x64_sys_openat+0x174/0x210 [ 663.885792][T15373] ? __pfx___x64_sys_openat+0x10/0x10 [ 663.885849][T15373] do_syscall_64+0xcd/0xf80 [ 663.885904][T15373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.885943][T15373] RIP: 0033:0x7f144dd8f7c9 [ 663.885973][T15373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 663.886010][T15373] RSP: 002b:00007f144eca8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 663.886045][T15373] RAX: ffffffffffffffda RBX: 00007f144dfe5fa0 RCX: 00007f144dd8f7c9 [ 663.886065][T15373] RDX: 0000000000068880 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 663.886086][T15373] RBP: 00007f144de13f91 R08: 0000000000000000 R09: 0000000000000000 [ 663.886106][T15373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 663.886125][T15373] R13: 00007f144dfe6038 R14: 00007f144dfe5fa0 R15: 00007fff5976eba8 [ 663.886173][T15373] [ 663.887587][T15373] ERROR: Out of memory at tomoyo_realpath_from_path. [ 664.232371][T15375] zswap: compressor not available [ 666.210260][T15423] FAULT_INJECTION: forcing a failure. [ 666.210260][T15423] name fail_futex, interval 1, probability 0, space 0, times 0 [ 666.265635][T15423] CPU: 0 UID: 0 PID: 15423 Comm: syz.2.2046 Tainted: G L syzkaller #0 PREEMPT(full) [ 666.265697][T15423] Tainted: [L]=SOFTLOCKUP [ 666.265712][T15423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 666.265736][T15423] Call Trace: [ 666.265748][T15423] [ 666.265763][T15423] dump_stack_lvl+0x16c/0x1f0 [ 666.265841][T15423] should_fail_ex+0x512/0x640 [ 666.265923][T15423] get_futex_key+0x1d0/0x15f0 [ 666.265968][T15423] ? __pfx_get_futex_key+0x10/0x10 [ 666.266022][T15423] futex_wake+0xea/0x530 [ 666.266068][T15423] ? lockdep_hardirqs_on+0x7c/0x110 [ 666.266126][T15423] ? __pfx_futex_wake+0x10/0x10 [ 666.266170][T15423] ? kmem_cache_free+0x2d8/0x770 [ 666.266217][T15423] ? getname_flags.part.0+0x24c/0x550 [ 666.266265][T15423] ? getname_flags.part.0+0x24c/0x550 [ 666.266302][T15423] ? getname_flags.part.0+0x1c5/0x550 [ 666.266346][T15423] do_futex+0x1e3/0x350 [ 666.266386][T15423] ? __pfx_do_futex+0x10/0x10 [ 666.266430][T15423] ? 0xffffffffff600000 [ 666.266464][T15423] __x64_sys_futex+0x1e0/0x4c0 [ 666.266509][T15423] ? __x64_sys_openat+0x174/0x210 [ 666.266550][T15423] ? __pfx___x64_sys_futex+0x10/0x10 [ 666.266615][T15423] do_syscall_64+0xcd/0xf80 [ 666.266675][T15423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.266713][T15423] RIP: 0033:0x7f144dd8f7c9 [ 666.266741][T15423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 666.266777][T15423] RSP: 002b:00007f144eca80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 666.266815][T15423] RAX: ffffffffffffffda RBX: 00007f144dfe5fa8 RCX: 00007f144dd8f7c9 [ 666.266840][T15423] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f144dfe5fac [ 666.266862][T15423] RBP: 00007f144dfe5fa0 R08: 00007f144eca9000 R09: 0000000000000000 [ 666.266884][T15423] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 666.266907][T15423] R13: 00007f144dfe6038 R14: 00007fff5976eac0 R15: 00007fff5976eba8 [ 666.266952][T15423] [ 666.890689][T15430] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2047'. [ 666.958189][T15430] hsr_slave_0: left promiscuous mode [ 667.013482][T15430] hsr_slave_1: left promiscuous mode [ 668.765143][T15474] __vm_enough_memory: pid: 15474, comm: syz.0.2053, bytes: 4398046511104 not enough memory for the allocation [ 668.802148][T15476] netlink: 'syz.5.2055': attribute type 11 has an invalid length. [ 670.829077][T15537] openvswitch: netlink: Key type 198 is out of range max 32 [ 670.844076][T15525] FAULT_INJECTION: forcing a failure. [ 670.844076][T15525] name fail_futex, interval 1, probability 0, space 0, times 0 [ 670.957357][T15525] CPU: 1 UID: 0 PID: 15525 Comm: syz.3.2056 Tainted: G L syzkaller #0 PREEMPT(full) [ 670.957419][T15525] Tainted: [L]=SOFTLOCKUP [ 670.957432][T15525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 670.957455][T15525] Call Trace: [ 670.957467][T15525] [ 670.957482][T15525] dump_stack_lvl+0x16c/0x1f0 [ 670.957550][T15525] should_fail_ex+0x512/0x640 [ 670.957598][T15525] get_futex_key+0x1d0/0x15f0 [ 670.957643][T15525] ? __pfx_get_futex_key+0x10/0x10 [ 670.957685][T15525] ? __pfx_fs_bdev_sync+0x10/0x10 [ 670.957735][T15525] ? invalidate_bdev+0x88/0xa0 [ 670.957776][T15525] futex_wake+0xea/0x530 [ 670.957827][T15525] ? __pfx_futex_wake+0x10/0x10 [ 670.957885][T15525] ? do_vfs_ioctl+0x128/0x14f0 [ 670.957932][T15525] do_futex+0x1e3/0x350 [ 670.957972][T15525] ? __pfx_do_futex+0x10/0x10 [ 670.958014][T15525] ? find_held_lock+0x2b/0x80 [ 670.958065][T15525] __x64_sys_futex+0x1e0/0x4c0 [ 670.958108][T15525] ? __pfx_blkdev_ioctl+0x10/0x10 [ 670.958150][T15525] ? __pfx___x64_sys_futex+0x10/0x10 [ 670.958201][T15525] ? xfd_validate_state+0x61/0x180 [ 670.958252][T15525] do_syscall_64+0xcd/0xf80 [ 670.958313][T15525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.958363][T15525] RIP: 0033:0x7fdc5db8f7c9 [ 670.958391][T15525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.958430][T15525] RSP: 002b:00007fdc5bdf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 670.958468][T15525] RAX: ffffffffffffffda RBX: 00007fdc5dde6098 RCX: 00007fdc5db8f7c9 [ 670.958493][T15525] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdc5dde609c [ 670.958516][T15525] RBP: 00007fdc5dde6090 R08: 00007fdc5e95c000 R09: 0000000000000000 [ 670.958549][T15525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 670.958571][T15525] R13: 00007fdc5dde6128 R14: 00007ffce6d5a0d0 R15: 00007ffce6d5a1b8 [ 670.958622][T15525] [ 671.420516][ T5840] Bluetooth: hci0: unexpected event 0x1c length: 725 > 5 [ 671.543091][T15539] Process accounting resumed [ 672.048706][T15562] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xeffffd12 [ 673.765648][T15603] batman_adv: batadv0: adding TT local entry 00:00:03:00:00:00 to non-existent VLAN 16 [ 674.088747][T15605] zswap: compressor not available [ 674.833256][T15637] netlink: set zone limit has 8 unknown bytes [ 674.846359][T15637] netlink: zone id is out of range [ 674.851890][T15637] netlink: del zone limit has 4 unknown bytes [ 674.994539][T15641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2087'. [ 675.279277][T15646] FAULT_INJECTION: forcing a failure. [ 675.279277][T15646] name failslab, interval 1, probability 0, space 0, times 0 [ 675.366651][T15646] CPU: 1 UID: 0 PID: 15646 Comm: syz.0.2088 Tainted: G L syzkaller #0 PREEMPT(full) [ 675.366712][T15646] Tainted: [L]=SOFTLOCKUP [ 675.366726][T15646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 675.366749][T15646] Call Trace: [ 675.366762][T15646] [ 675.366777][T15646] dump_stack_lvl+0x16c/0x1f0 [ 675.366853][T15646] should_fail_ex+0x512/0x640 [ 675.366896][T15646] ? __kmalloc_cache_noprof+0x5f/0x800 [ 675.366946][T15646] should_failslab+0xc2/0x120 [ 675.367003][T15646] __kmalloc_cache_noprof+0x80/0x800 [ 675.367046][T15646] ? assoc_array_insert+0x2fa/0x3970 [ 675.367101][T15646] ? assoc_array_insert+0x2fa/0x3970 [ 675.367148][T15646] assoc_array_insert+0x2fa/0x3970 [ 675.367196][T15646] ? __mutex_lock+0x27b/0x1ca0 [ 675.367253][T15646] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 675.367311][T15646] ? key_link+0x28a/0x310 [ 675.367377][T15646] ? __pfx_assoc_array_insert+0x10/0x10 [ 675.367425][T15646] ? __pfx___might_resched+0x10/0x10 [ 675.367484][T15646] ? down_write+0x14d/0x200 [ 675.367516][T15646] ? __pfx_down_write+0x10/0x10 [ 675.367556][T15646] __key_link_begin+0xf5/0x260 [ 675.367610][T15646] key_link+0x103/0x310 [ 675.367662][T15646] ? __pfx_key_link+0x10/0x10 [ 675.367709][T15646] ? bpf_lsm_key_permission+0x9/0x10 [ 675.367760][T15646] ? key_task_permission+0x2e5/0x400 [ 675.367810][T15646] keyctl_get_persistent+0x5c3/0x8c0 [ 675.367864][T15646] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 675.367920][T15646] ? __x64_sys_futex+0x1e0/0x4c0 [ 675.367962][T15646] ? __x64_sys_futex+0x1e9/0x4c0 [ 675.368013][T15646] ? xfd_validate_state+0x61/0x180 [ 675.368044][T15646] ? __pfx_ksys_write+0x10/0x10 [ 675.368103][T15646] __do_sys_keyctl+0x1a9/0x590 [ 675.368141][T15646] do_syscall_64+0xcd/0xf80 [ 675.368197][T15646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.368233][T15646] RIP: 0033:0x7f888318f7c9 [ 675.368261][T15646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.368297][T15646] RSP: 002b:00007f88813ac038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 675.368334][T15646] RAX: ffffffffffffffda RBX: 00007f88833e6180 RCX: 00007f888318f7c9 [ 675.368359][T15646] RDX: 7fffffffffffffff RSI: 000000000000ee00 RDI: 0000000000000016 [ 675.368384][T15646] RBP: 00007f8883213f91 R08: 000000000000000c R09: 0000000000000000 [ 675.368407][T15646] R10: 00000000000099a7 R11: 0000000000000246 R12: 0000000000000000 [ 675.368430][T15646] R13: 00007f88833e6218 R14: 00007f88833e6180 R15: 00007ffdd09b34b8 [ 675.368479][T15646] [ 678.604588][T15689] FAULT_INJECTION: forcing a failure. [ 678.604588][T15689] name failslab, interval 1, probability 0, space 0, times 0 [ 678.665315][T15689] CPU: 1 UID: 0 PID: 15689 Comm: syz.2.2099 Tainted: G L syzkaller #0 PREEMPT(full) [ 678.665501][T15689] Tainted: [L]=SOFTLOCKUP [ 678.665543][T15689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 678.665610][T15689] Call Trace: [ 678.665651][T15689] [ 678.665685][T15689] dump_stack_lvl+0x16c/0x1f0 [ 678.665857][T15689] should_fail_ex+0x512/0x640 [ 678.665984][T15689] should_failslab+0xc2/0x120 [ 678.666115][T15689] kmem_cache_alloc_node_noprof+0x86/0x800 [ 678.666238][T15689] ? __alloc_skb+0x156/0x410 [ 678.666368][T15689] ? __alloc_skb+0x156/0x410 [ 678.666450][T15689] __alloc_skb+0x156/0x410 [ 678.666549][T15689] ? __alloc_skb+0x35d/0x410 [ 678.666646][T15689] ? __pfx___alloc_skb+0x10/0x10 [ 678.666745][T15689] ? kasan_quarantine_put+0x10a/0x240 [ 678.666846][T15689] ? lockdep_hardirqs_on+0x10/0x110 [ 678.667001][T15689] __pskb_copy_fclone+0xef/0xb50 [ 678.667103][T15689] tipc_sk_mcast_rcv+0x52d/0xfa0 [ 678.667162][T15689] ? __pfx_tipc_sk_mcast_rcv+0x10/0x10 [ 678.667319][T15689] ? find_held_lock+0x2b/0x80 [ 678.667448][T15689] ? tipc_mcast_xmit+0x6d5/0xfe0 [ 678.667579][T15689] tipc_mcast_xmit+0x711/0xfe0 [ 678.667679][T15689] ? __pfx__copy_from_iter+0x10/0x10 [ 678.667784][T15689] ? __pfx___alloc_skb+0x10/0x10 [ 678.667905][T15689] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 678.668008][T15689] ? __lock_acquire+0x436/0x2890 [ 678.668204][T15689] ? tipc_send_group_bcast+0x803/0xa50 [ 678.668355][T15689] tipc_send_group_bcast+0x803/0xa50 [ 678.668542][T15689] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 678.668715][T15689] ? __pfx_woken_wake_function+0x10/0x10 [ 678.668767][T15689] ? __pfx_css_rstat_updated+0x10/0x10 [ 678.668813][T15689] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 678.668948][T15689] __tipc_sendmsg+0x4ab/0x1970 [ 678.669059][T15689] ? update_load_avg+0x233/0x2220 [ 678.669164][T15689] ? __pfx___tipc_sendmsg+0x10/0x10 [ 678.669276][T15689] ? __lock_acquire+0x436/0x2890 [ 678.669454][T15689] ? __local_bh_enable_ip+0xa4/0x120 [ 678.669621][T15689] tipc_sendmsg+0x4f/0x70 [ 678.669727][T15689] sock_write_iter+0x566/0x610 [ 678.669856][T15689] ? __pfx_sock_write_iter+0x10/0x10 [ 678.670036][T15689] ? __futex_wait+0x24b/0x2f0 [ 678.670187][T15689] ? copy_iovec_from_user+0x131/0x170 [ 678.670288][T15689] do_iter_readv_writev+0x662/0x9e0 [ 678.670425][T15689] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 678.670505][T15689] ? common_file_perm+0x1b1/0x500 [ 678.670559][T15689] ? bpf_lsm_file_permission+0x9/0x10 [ 678.670604][T15689] ? security_file_permission+0x71/0x210 [ 678.670654][T15689] ? rw_verify_area+0xcf/0x6c0 [ 678.670703][T15689] vfs_writev+0x35f/0xde0 [ 678.670752][T15689] ? __lock_acquire+0x436/0x2890 [ 678.670786][T15689] ? __pfx_vfs_writev+0x10/0x10 [ 678.670858][T15689] ? __fget_files+0x20e/0x3c0 [ 678.670919][T15689] ? do_writev+0x28c/0x340 [ 678.670959][T15689] do_writev+0x28c/0x340 [ 678.671007][T15689] ? __pfx_do_writev+0x10/0x10 [ 678.671063][T15689] do_syscall_64+0xcd/0xf80 [ 678.671121][T15689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.671159][T15689] RIP: 0033:0x7f144dd8f7c9 [ 678.671187][T15689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 678.671221][T15689] RSP: 002b:00007f144eca8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 678.671253][T15689] RAX: ffffffffffffffda RBX: 00007f144dfe5fa0 RCX: 00007f144dd8f7c9 [ 678.671275][T15689] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 678.671300][T15689] RBP: 00007f144de13f91 R08: 0000000000000000 R09: 0000000000000000 [ 678.671321][T15689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 678.671340][T15689] R13: 00007f144dfe6038 R14: 00007f144dfe5fa0 R15: 00007fff5976eba8 [ 678.671383][T15689] [ 679.085076][T15689] tipc: Failed to clone mcast rcv buffer [ 679.369186][T15703] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2101'. [ 679.605156][T15706] can: request_module (can-proto-0) failed. [ 679.615891][T15711] FAULT_INJECTION: forcing a failure. [ 679.615891][T15711] name fail_futex, interval 1, probability 0, space 0, times 0 [ 679.631299][T15711] CPU: 1 UID: 0 PID: 15711 Comm: syz.0.2104 Tainted: G L syzkaller #0 PREEMPT(full) [ 679.631350][T15711] Tainted: [L]=SOFTLOCKUP [ 679.631363][T15711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 679.631383][T15711] Call Trace: [ 679.631395][T15711] [ 679.631408][T15711] dump_stack_lvl+0x16c/0x1f0 [ 679.631470][T15711] should_fail_ex+0x512/0x640 [ 679.631516][T15711] get_futex_key+0x1d0/0x15f0 [ 679.631559][T15711] ? __pfx_get_futex_key+0x10/0x10 [ 679.631607][T15711] futex_wake+0xea/0x530 [ 679.631658][T15711] ? __pfx_futex_wake+0x10/0x10 [ 679.631720][T15711] do_futex+0x1e3/0x350 [ 679.631758][T15711] ? __pfx_do_futex+0x10/0x10 [ 679.631790][T15711] ? __might_fault+0xe3/0x190 [ 679.631840][T15711] mm_release+0x24e/0x300 [ 679.631888][T15711] do_exit+0x69e/0x2bd0 [ 679.631927][T15711] ? __pfx_do_exit+0x10/0x10 [ 679.631958][T15711] ? do_raw_spin_lock+0x12c/0x2b0 [ 679.631997][T15711] ? find_held_lock+0x2b/0x80 [ 679.632052][T15711] do_group_exit+0xd3/0x2a0 [ 679.632086][T15711] get_signal+0x2671/0x26d0 [ 679.632139][T15711] ? aa_sk_perm+0x2f2/0xae0 [ 679.632187][T15711] ? __pfx_get_signal+0x10/0x10 [ 679.632233][T15711] ? do_futex+0x122/0x350 [ 679.632273][T15711] arch_do_signal_or_restart+0x8f/0x7a0 [ 679.632324][T15711] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 679.632385][T15711] ? __pfx___x64_sys_futex+0x10/0x10 [ 679.632431][T15711] exit_to_user_mode_loop+0x8c/0x540 [ 679.632479][T15711] do_syscall_64+0x4ee/0xf80 [ 679.632534][T15711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.632568][T15711] RIP: 0033:0x7f888318f7c9 [ 679.632594][T15711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.632629][T15711] RSP: 002b:00007f88813cd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 679.632662][T15711] RAX: fffffffffffffe00 RBX: 00007f88833e6098 RCX: 00007f888318f7c9 [ 679.632685][T15711] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f88833e6098 [ 679.632706][T15711] RBP: 00007f88833e6090 R08: 0000000000000000 R09: 0000000000000000 [ 679.632727][T15711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 679.632747][T15711] R13: 00007f88833e6128 R14: 00007ffdd09b33d0 R15: 00007ffdd09b34b8 [ 679.632793][T15711] [ 681.973292][T15769] blktrace: Concurrent blktraces are not allowed on loop2 [ 682.440380][T15755] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 682.449542][T15755] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 682.494183][T15755] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 682.502625][T15755] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 682.525650][T15755] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 682.546344][T15755] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 683.405961][T15801] netlink: 354 bytes leftover after parsing attributes in process `syz.5.2128'. [ 683.419519][T15801] netlink: 130 bytes leftover after parsing attributes in process `syz.5.2128'. [ 683.612754][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 684.486903][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 684.566901][ T5840] Bluetooth: hci0: command 0x0419 tx timeout [ 684.573502][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 685.560618][T15832] Process accounting resumed [ 685.683604][ T5149] Bluetooth: hci1: command 0x0c1a tx timeout [ 686.557767][ T5149] Bluetooth: hci3: command 0x0c1a tx timeout [ 687.487976][T15877] QAT: Device 0 not found [ 687.584650][T15882] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 687.755322][T15882] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 688.217617][T15882] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 688.281971][T15882] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 688.308865][T15882] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 688.357064][T15882] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 688.380359][T15882] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 688.406722][T15882] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 688.455862][T15882] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 688.469871][T15882] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 688.600583][T15882] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 688.635489][T15882] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 688.695310][T15882] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 688.715135][T15882] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 688.756728][T15882] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 688.776525][T15882] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 688.795885][T15882] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 688.854784][T15882] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 688.868928][T15882] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 688.882613][T15882] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 688.907296][T15882] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 688.957022][T15882] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 688.969245][T15882] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 688.987977][T15882] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 689.019071][T15882] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 689.034844][T15882] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 689.058820][T15882] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 689.073221][T15882] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 689.085424][T15882] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 689.097409][T15882] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 689.113077][T15882] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 689.125223][T15882] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 689.137241][T15882] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 690.034325][T15926] mmap: syz.0.2154 (15926): VmData 45883392 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 690.159164][T15930] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2156'. [ 690.332864][T15938] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 694.171121][T16015] usb usb36: usbfs: process 16015 (syz.3.2174) did not claim interface 0 before use [ 696.512984][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.527916][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 697.918718][T16081] misc userio: Invalid payload size [ 698.097814][T16089] can: request_module (can-proto-0) failed. [ 698.443169][T16104] futex_wake_op: syz.2.2192 tries to shift op by -2048; fix this program [ 698.542282][T16104] futex_wake_op: syz.2.2192 tries to shift op by -2048; fix this program [ 702.190687][T16155] netlink: 346 bytes leftover after parsing attributes in process `syz.2.2207'. [ 702.581194][T16141] Process accounting paused [ 702.677881][T16172] validate_nla: 1 callbacks suppressed [ 702.677915][T16172] netlink: 'syz.2.2208': attribute type 5 has an invalid length. [ 703.309572][ T5915] Process accounting resumed [ 704.472480][T16223] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 705.209166][ T30] audit: type=1800 audit(4294967483.514:22): pid=16238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2224" name="lu_gp_id" dev="configfs" ino=72720 res=0 errno=0 [ 706.276443][T16259] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 706.593838][T16263] delete_channel: no stack [ 707.373370][ T5149] Bluetooth: hci2: Unable to find connection for big 0xd2 [ 707.551027][T16277] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2234'. [ 707.655969][T16277] openvswitch: HfR: Dropping previously announced user features [ 708.303382][ T30] audit: type=1800 audit(4294967486.651:23): pid=16287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2237" name="discovery_nqn" dev="configfs" ino=72675 res=0 errno=0 [ 708.598052][T16293] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 708.877214][T16302] FAULT_INJECTION: forcing a failure. [ 708.877214][T16302] name failslab, interval 1, probability 0, space 0, times 0 [ 708.969695][T16302] CPU: 1 UID: 0 PID: 16302 Comm: syz.3.2240 Tainted: G L syzkaller #0 PREEMPT(full) [ 708.969757][T16302] Tainted: [L]=SOFTLOCKUP [ 708.969770][T16302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 708.969792][T16302] Call Trace: [ 708.969804][T16302] [ 708.969818][T16302] dump_stack_lvl+0x16c/0x1f0 [ 708.969893][T16302] should_fail_ex+0x512/0x640 [ 708.969939][T16302] ? __kmalloc_noprof+0xca/0x910 [ 708.969983][T16302] should_failslab+0xc2/0x120 [ 708.970038][T16302] __kmalloc_noprof+0xeb/0x910 [ 708.970076][T16302] ? cache_create_net+0x9d/0x220 [ 708.970138][T16302] ? cache_create_net+0x9d/0x220 [ 708.970188][T16302] cache_create_net+0x9d/0x220 [ 708.970240][T16302] ? __pfx_nfsd_net_init+0x10/0x10 [ 708.970297][T16302] nfsd_idmap_init+0x62/0x250 [ 708.970339][T16302] ? __pfx_nfsd_net_init+0x10/0x10 [ 708.970390][T16302] nfsd_net_init+0x69/0x3d0 [ 708.970446][T16302] ? __pfx_nfsd_net_init+0x10/0x10 [ 708.970499][T16302] ops_init+0x1e2/0x5f0 [ 708.970552][T16302] setup_net+0x11d/0x3a0 [ 708.970600][T16302] ? __pfx_setup_net+0x10/0x10 [ 708.970645][T16302] ? lockdep_init_map_type+0x5c/0x270 [ 708.970685][T16302] ? mutex_init_lockep+0x110/0x150 [ 708.970727][T16302] copy_net_ns+0x351/0x7c0 [ 708.970783][T16302] create_new_namespaces+0x3ea/0xab0 [ 708.970850][T16302] copy_namespaces+0x468/0x570 [ 708.970912][T16302] copy_process+0x2a70/0x7430 [ 708.970966][T16302] ? preempt_schedule_thunk+0x16/0x30 [ 708.971023][T16302] ? __pfx_copy_process+0x10/0x10 [ 708.971074][T16302] ? find_held_lock+0x2b/0x80 [ 708.971125][T16302] ? futex_private_hash_put+0x160/0x1b0 [ 708.971171][T16302] kernel_clone+0xfc/0x910 [ 708.971224][T16302] ? __pfx_futex_wake+0x10/0x10 [ 708.971268][T16302] ? __pfx_kernel_clone+0x10/0x10 [ 708.971317][T16302] ? __pfx_vfs_writev+0x10/0x10 [ 708.971391][T16302] __do_sys_clone+0xce/0x120 [ 708.971446][T16302] ? __pfx___do_sys_clone+0x10/0x10 [ 708.971518][T16302] ? xfd_validate_state+0x61/0x180 [ 708.971551][T16302] ? __pfx_do_writev+0x10/0x10 [ 708.971607][T16302] do_syscall_64+0xcd/0xf80 [ 708.971666][T16302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.971704][T16302] RIP: 0033:0x7fdc5db8f7c9 [ 708.971732][T16302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 708.971769][T16302] RSP: 002b:00007fdc5bdd4fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 708.971806][T16302] RAX: ffffffffffffffda RBX: 00007fdc5dde6180 RCX: 00007fdc5db8f7c9 [ 708.971830][T16302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040180211 [ 708.971850][T16302] RBP: 00007fdc5dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 708.971884][T16302] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 708.971907][T16302] R13: 00007fdc5dde6218 R14: 00007fdc5dde6180 R15: 00007ffce6d5a1b8 [ 708.971956][T16302] [ 714.933684][T16406] FAULT_INJECTION: forcing a failure. [ 714.933684][T16406] name failslab, interval 1, probability 0, space 0, times 0 [ 714.949710][T16406] CPU: 1 UID: 0 PID: 16406 Comm: syz.2.2259 Tainted: G L syzkaller #0 PREEMPT(full) [ 714.949763][T16406] Tainted: [L]=SOFTLOCKUP [ 714.949776][T16406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 714.949796][T16406] Call Trace: [ 714.949807][T16406] [ 714.949820][T16406] dump_stack_lvl+0x16c/0x1f0 [ 714.949879][T16406] should_fail_ex+0x512/0x640 [ 714.949918][T16406] ? __kmalloc_noprof+0xca/0x910 [ 714.949959][T16406] should_failslab+0xc2/0x120 [ 714.950011][T16406] __kmalloc_noprof+0xeb/0x910 [ 714.950049][T16406] ? cache_create_net+0x9d/0x220 [ 714.950105][T16406] ? cache_create_net+0x9d/0x220 [ 714.950159][T16406] cache_create_net+0x9d/0x220 [ 714.950212][T16406] nfsd_idmap_init+0x11f/0x250 [ 714.950251][T16406] ? __pfx_nfsd_net_init+0x10/0x10 [ 714.950299][T16406] nfsd_net_init+0x69/0x3d0 [ 714.950349][T16406] ? __pfx_nfsd_net_init+0x10/0x10 [ 714.950399][T16406] ops_init+0x1e2/0x5f0 [ 714.950449][T16406] setup_net+0x11d/0x3a0 [ 714.950492][T16406] ? __pfx_setup_net+0x10/0x10 [ 714.950534][T16406] ? lockdep_init_map_type+0x5c/0x270 [ 714.950570][T16406] ? mutex_init_lockep+0x110/0x150 [ 714.950610][T16406] copy_net_ns+0x351/0x7c0 [ 714.950662][T16406] create_new_namespaces+0x3ea/0xab0 [ 714.950718][T16406] copy_namespaces+0x468/0x570 [ 714.950766][T16406] copy_process+0x2a70/0x7430 [ 714.950815][T16406] ? preempt_schedule_thunk+0x16/0x30 [ 714.950865][T16406] ? __pfx_copy_process+0x10/0x10 [ 714.950913][T16406] ? find_held_lock+0x2b/0x80 [ 714.950962][T16406] ? futex_private_hash_put+0x160/0x1b0 [ 714.951005][T16406] kernel_clone+0xfc/0x910 [ 714.951055][T16406] ? __pfx_futex_wake+0x10/0x10 [ 714.951099][T16406] ? __pfx_kernel_clone+0x10/0x10 [ 714.951179][T16406] __do_sys_clone+0xce/0x120 [ 714.951229][T16406] ? __pfx___do_sys_clone+0x10/0x10 [ 714.951300][T16406] ? syscall_user_dispatch+0x78/0x140 [ 714.951354][T16406] do_syscall_64+0xcd/0xf80 [ 714.951410][T16406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.951443][T16406] RIP: 0033:0x7f144dd8f7c9 [ 714.951471][T16406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 714.951502][T16406] RSP: 002b:00007f144eca7fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 714.951535][T16406] RAX: ffffffffffffffda RBX: 00007f144dfe5fa0 RCX: 00007f144dd8f7c9 [ 714.951558][T16406] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040180211 [ 714.951578][T16406] RBP: 00007f144de13f91 R08: 0000000000000000 R09: 0000000000000000 [ 714.951598][T16406] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 714.951618][T16406] R13: 00007f144dfe6038 R14: 00007f144dfe5fa0 R15: 00007fff5976eba8 [ 714.951664][T16406] [ 715.862680][T16424] Invalid ELF header magic: != ELF [ 718.066336][T16474] Invalid ELF header magic: != ELF [ 718.118532][T16473] FAULT_INJECTION: forcing a failure. [ 718.118532][T16473] name failslab, interval 1, probability 0, space 0, times 0 [ 718.173240][T16473] CPU: 1 UID: 0 PID: 16473 Comm: syz.3.2272 Tainted: G L syzkaller #0 PREEMPT(full) [ 718.173303][T16473] Tainted: [L]=SOFTLOCKUP [ 718.173317][T16473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 718.173339][T16473] Call Trace: [ 718.173351][T16473] [ 718.173366][T16473] dump_stack_lvl+0x16c/0x1f0 [ 718.173434][T16473] should_fail_ex+0x512/0x640 [ 718.173475][T16473] ? kmem_cache_alloc_noprof+0x62/0x770 [ 718.173527][T16473] should_failslab+0xc2/0x120 [ 718.173586][T16473] kmem_cache_alloc_noprof+0x83/0x770 [ 718.173629][T16473] ? __proc_create+0x2c8/0x8d0 [ 718.173687][T16473] ? __proc_create+0x2c8/0x8d0 [ 718.173731][T16473] __proc_create+0x2c8/0x8d0 [ 718.173780][T16473] ? __pfx___proc_create+0x10/0x10 [ 718.173843][T16473] ? _raw_write_unlock+0x28/0x50 [ 718.173897][T16473] ? proc_register+0x559/0x8b0 [ 718.173957][T16473] proc_create_reg+0x7d/0x180 [ 718.174010][T16473] ? __pfx_sctp_snmp_seq_show+0x10/0x10 [ 718.174066][T16473] proc_create_net_single+0x86/0x180 [ 718.174121][T16473] ? __pfx_proc_create_net_single+0x10/0x10 [ 718.174184][T16473] sctp_proc_init+0xaa/0x270 [ 718.174234][T16473] ? __pfx_sctp_defaults_init+0x10/0x10 [ 718.174287][T16473] sctp_defaults_init+0x758/0xd90 [ 718.174343][T16473] ? __pfx_sctp_defaults_init+0x10/0x10 [ 718.174399][T16473] ops_init+0x1e2/0x5f0 [ 718.174457][T16473] setup_net+0x11d/0x3a0 [ 718.174509][T16473] ? __pfx_setup_net+0x10/0x10 [ 718.174554][T16473] ? lockdep_init_map_type+0x5c/0x270 [ 718.174594][T16473] ? mutex_init_lockep+0x110/0x150 [ 718.174637][T16473] copy_net_ns+0x351/0x7c0 [ 718.174702][T16473] create_new_namespaces+0x3ea/0xab0 [ 718.174763][T16473] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 718.174816][T16473] ksys_unshare+0x45b/0xa40 [ 718.174889][T16473] ? __pfx_ksys_unshare+0x10/0x10 [ 718.174947][T16473] ? xfd_validate_state+0x61/0x180 [ 718.174995][T16473] __x64_sys_unshare+0x31/0x40 [ 718.175027][T16473] do_syscall_64+0xcd/0xf80 [ 718.175086][T16473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.175120][T16473] RIP: 0033:0x7fdc5db8f7c9 [ 718.175146][T16473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 718.175183][T16473] RSP: 002b:00007fdc5e95b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 718.175218][T16473] RAX: ffffffffffffffda RBX: 00007fdc5dde5fa0 RCX: 00007fdc5db8f7c9 [ 718.175240][T16473] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 718.175262][T16473] RBP: 00007fdc5dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 718.175284][T16473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 718.175305][T16473] R13: 00007fdc5dde6038 R14: 00007fdc5dde5fa0 R15: 00007ffce6d5a1b8 [ 718.175351][T16473] [ 719.512779][T16496] FAULT_INJECTION: forcing a failure. [ 719.512779][T16496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 719.529834][T16496] CPU: 1 UID: 0 PID: 16496 Comm: syz.3.2275 Tainted: G L syzkaller #0 PREEMPT(full) [ 719.529895][T16496] Tainted: [L]=SOFTLOCKUP [ 719.529909][T16496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 719.529930][T16496] Call Trace: [ 719.529943][T16496] [ 719.529958][T16496] dump_stack_lvl+0x16c/0x1f0 [ 719.530034][T16496] should_fail_ex+0x512/0x640 [ 719.530083][T16496] strncpy_from_user+0x3b/0x2e0 [ 719.530125][T16496] getname_flags.part.0+0x8f/0x550 [ 719.530174][T16496] getname_flags+0x93/0xf0 [ 719.530223][T16496] do_sys_openat2+0xb9/0x290 [ 719.530265][T16496] ? __pfx_do_sys_openat2+0x10/0x10 [ 719.530300][T16496] ? __pfx___might_resched+0x10/0x10 [ 719.530352][T16496] ? blkcg_maybe_throttle_current+0x650/0xf30 [ 719.530409][T16496] __x64_sys_openat+0x174/0x210 [ 719.530449][T16496] ? __pfx___x64_sys_openat+0x10/0x10 [ 719.530505][T16496] do_syscall_64+0xcd/0xf80 [ 719.530560][T16496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.530597][T16496] RIP: 0033:0x7fdc5db8f7c9 [ 719.530624][T16496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 719.530676][T16496] RSP: 002b:00007fdc5bdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 719.530713][T16496] RAX: ffffffffffffffda RBX: 00007fdc5dde6090 RCX: 00007fdc5db8f7c9 [ 719.530738][T16496] RDX: 00000000000e0180 RSI: 00002000000011c0 RDI: ffffffffffffff9c [ 719.530761][T16496] RBP: 00007fdc5dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 719.530782][T16496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 719.530803][T16496] R13: 00007fdc5dde6128 R14: 00007fdc5dde6090 R15: 00007ffce6d5a1b8 [ 719.530861][T16496] [ 720.102694][T16501] FAULT_INJECTION: forcing a failure. [ 720.102694][T16501] name failslab, interval 1, probability 0, space 0, times 0 [ 720.193389][T16501] CPU: 0 UID: 0 PID: 16501 Comm: syz.2.2278 Tainted: G L syzkaller #0 PREEMPT(full) [ 720.193453][T16501] Tainted: [L]=SOFTLOCKUP [ 720.193466][T16501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 720.193490][T16501] Call Trace: [ 720.193503][T16501] [ 720.193518][T16501] dump_stack_lvl+0x16c/0x1f0 [ 720.193589][T16501] should_fail_ex+0x512/0x640 [ 720.193632][T16501] ? __kmalloc_cache_noprof+0x5f/0x800 [ 720.193682][T16501] should_failslab+0xc2/0x120 [ 720.193740][T16501] __kmalloc_cache_noprof+0x80/0x800 [ 720.193781][T16501] ? single_open+0x4d/0x1f0 [ 720.193829][T16501] ? __pfx_proc_setgroups_show+0x10/0x10 [ 720.193906][T16501] ? single_open+0x4d/0x1f0 [ 720.193949][T16501] single_open+0x4d/0x1f0 [ 720.193994][T16501] proc_setgroups_open+0x346/0x7e0 [ 720.194036][T16501] do_dentry_open+0x748/0x1590 [ 720.194090][T16501] ? __pfx_proc_setgroups_open+0x10/0x10 [ 720.194138][T16501] vfs_open+0x82/0x3f0 [ 720.194180][T16501] path_openat+0x2078/0x3140 [ 720.194245][T16501] ? __pfx_path_openat+0x10/0x10 [ 720.194313][T16501] do_filp_open+0x20b/0x470 [ 720.194365][T16501] ? __pfx_do_filp_open+0x10/0x10 [ 720.194431][T16501] ? __pfx_kfree_link+0x10/0x10 [ 720.194488][T16501] ? alloc_fd+0x471/0x7d0 [ 720.194552][T16501] do_sys_openat2+0x121/0x290 [ 720.194591][T16501] ? __pfx_do_sys_openat2+0x10/0x10 [ 720.194627][T16501] ? __do_sys_ustat+0x126/0x1f0 [ 720.194687][T16501] __x64_sys_openat+0x174/0x210 [ 720.194736][T16501] ? __pfx___x64_sys_openat+0x10/0x10 [ 720.194793][T16501] do_syscall_64+0xcd/0xf80 [ 720.194860][T16501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.194909][T16501] RIP: 0033:0x7f144dd8f7c9 [ 720.194939][T16501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 720.194973][T16501] RSP: 002b:00007f144eca8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 720.195004][T16501] RAX: ffffffffffffffda RBX: 00007f144dfe5fa0 RCX: 00007f144dd8f7c9 [ 720.195028][T16501] RDX: 0000000000183200 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 720.195049][T16501] RBP: 00007f144de13f91 R08: 0000000000000000 R09: 0000000000000000 [ 720.195070][T16501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 720.195090][T16501] R13: 00007f144dfe6038 R14: 00007f144dfe5fa0 R15: 00007fff5976eba8 [ 720.195134][T16501] [ 721.510185][T16523] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 721.575560][T16523] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 721.622795][T16523] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 721.890579][T16525] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 1: bad block bitmap checksum [ 723.078865][T15818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 723.091266][T15818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 723.111938][T15818] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 723.122657][T15818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 723.136973][T15818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 724.135335][T16552] zswap: compressor not available [ 724.376630][T12665] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.402077][T16532] chnl_net:caif_netlink_parms(): no params data found [ 724.601055][T12665] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.911560][T12665] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.012656][T16532] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.039603][T16532] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.052982][T16532] bridge_slave_0: entered allmulticast mode [ 725.063036][T16532] bridge_slave_0: entered promiscuous mode [ 725.116134][T16587] futex_wake_op: syz.5.2297 tries to shift op by -1; fix this program [ 725.127778][T12665] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.175087][T16532] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.196174][T16532] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.203621][T16532] bridge_slave_1: entered allmulticast mode [ 725.227497][T16532] bridge_slave_1: entered promiscuous mode [ 725.248622][ T5149] Bluetooth: hci4: command tx timeout [ 725.510180][T16532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.590573][T16532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.895967][T16532] team0: Port device team_slave_0 added [ 725.917697][T16605] FAULT_INJECTION: forcing a failure. [ 725.917697][T16605] name failslab, interval 1, probability 0, space 0, times 0 [ 725.950811][T16605] CPU: 1 UID: 0 PID: 16605 Comm: syz.0.2300 Tainted: G L syzkaller #0 PREEMPT(full) [ 725.950872][T16605] Tainted: [L]=SOFTLOCKUP [ 725.950885][T16605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 725.950907][T16605] Call Trace: [ 725.950918][T16605] [ 725.950932][T16605] dump_stack_lvl+0x16c/0x1f0 [ 725.951013][T16605] should_fail_ex+0x512/0x640 [ 725.951061][T16605] ? __kvmalloc_node_noprof+0x129/0xa40 [ 725.951116][T16605] should_failslab+0xc2/0x120 [ 725.951180][T16605] __kvmalloc_node_noprof+0x14a/0xa40 [ 725.951232][T16605] ? lockdep_init_map_type+0x5c/0x270 [ 725.951271][T16605] ? __v4l2_subdev_state_alloc+0x1ac/0x400 [ 725.951328][T16605] ? __v4l2_subdev_state_alloc+0x1ac/0x400 [ 725.951369][T16605] __v4l2_subdev_state_alloc+0x1ac/0x400 [ 725.951417][T16605] subdev_open+0xa6/0x540 [ 725.951461][T16605] v4l2_open+0x1d2/0x5e0 [ 725.951512][T16605] ? __pfx_v4l2_open+0x10/0x10 [ 725.951558][T16605] chrdev_open+0x234/0x6a0 [ 725.951609][T16605] ? __pfx_apparmor_file_open+0x10/0x10 [ 725.951646][T16605] ? __pfx_chrdev_open+0x10/0x10 [ 725.951700][T16605] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 725.951765][T16605] do_dentry_open+0x748/0x1590 [ 725.951814][T16605] ? __pfx_chrdev_open+0x10/0x10 [ 725.951873][T16605] vfs_open+0x82/0x3f0 [ 725.951914][T16605] path_openat+0x2078/0x3140 [ 725.951979][T16605] ? __pfx_path_openat+0x10/0x10 [ 725.952044][T16605] do_filp_open+0x20b/0x470 [ 725.952098][T16605] ? __pfx_do_filp_open+0x10/0x10 [ 725.952192][T16605] ? alloc_fd+0x471/0x7d0 [ 725.952261][T16605] do_sys_openat2+0x121/0x290 [ 725.952303][T16605] ? __pfx_do_sys_openat2+0x10/0x10 [ 725.952358][T16605] __x64_sys_openat+0x174/0x210 [ 725.952399][T16605] ? __pfx___x64_sys_openat+0x10/0x10 [ 725.952456][T16605] do_syscall_64+0xcd/0xf80 [ 725.952512][T16605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.952549][T16605] RIP: 0033:0x7f888318f7c9 [ 725.952577][T16605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 725.952614][T16605] RSP: 002b:00007f88813ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 725.952648][T16605] RAX: ffffffffffffffda RBX: 00007f88833e5fa0 RCX: 00007f888318f7c9 [ 725.952672][T16605] RDX: 000000000008a240 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 725.952696][T16605] RBP: 00007f8883213f91 R08: 0000000000000000 R09: 0000000000000000 [ 725.952716][T16605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 725.952737][T16605] R13: 00007f88833e6038 R14: 00007f88833e5fa0 R15: 00007ffdd09b34b8 [ 725.952788][T16605] [ 726.282307][T16532] team0: Port device team_slave_1 added [ 727.308715][ T5149] Bluetooth: hci4: command tx timeout [ 727.744526][T12665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 727.814422][T12665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 727.871793][T12665] bond0 (unregistering): Released all slaves [ 727.957208][T16637] random: crng reseeded on system resumption [ 728.016722][T16638] sd 0:0:1:0: PR command failed: 1026 [ 728.022319][T16638] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 728.029233][T16638] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 728.088708][T12665] ovs_: left promiscuous mode [ 728.136540][T16532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 728.155739][T16532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 728.211430][T16532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 728.300471][T12665] HfR: left promiscuous mode [ 728.347248][T16532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 728.355040][T16532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 728.435410][T16647] netlink: 'syz.0.2307': attribute type 11 has an invalid length. [ 728.443631][T16532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 728.474942][T12665] tipc: Left network mode [ 728.726124][T16532] hsr_slave_0: entered promiscuous mode [ 728.742522][T16532] hsr_slave_1: entered promiscuous mode [ 728.764601][T16532] debugfs: 'hsr0' already exists in 'hsr' [ 728.774716][T16532] Cannot create hsr debugfs directory [ 729.374209][ T5149] Bluetooth: hci4: command tx timeout [ 729.563488][T16658] FAULT_INJECTION: forcing a failure. [ 729.563488][T16658] name failslab, interval 1, probability 0, space 0, times 0 [ 729.591847][T16658] CPU: 1 UID: 0 PID: 16658 Comm: syz.0.2308 Tainted: G L syzkaller #0 PREEMPT(full) [ 729.591907][T16658] Tainted: [L]=SOFTLOCKUP [ 729.591921][T16658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 729.591944][T16658] Call Trace: [ 729.591956][T16658] [ 729.591971][T16658] dump_stack_lvl+0x16c/0x1f0 [ 729.592036][T16658] should_fail_ex+0x512/0x640 [ 729.592079][T16658] ? kmem_cache_alloc_noprof+0x62/0x770 [ 729.592129][T16658] should_failslab+0xc2/0x120 [ 729.592187][T16658] kmem_cache_alloc_noprof+0x83/0x770 [ 729.592228][T16658] ? do_raw_spin_lock+0x12c/0x2b0 [ 729.592272][T16658] ? ptlock_alloc+0x1f/0x70 [ 729.592313][T16658] ? ptlock_alloc+0x1f/0x70 [ 729.592347][T16658] ptlock_alloc+0x1f/0x70 [ 729.592382][T16658] pte_alloc_one+0x84/0x3d0 [ 729.592436][T16658] __pte_alloc+0x6d/0x3f0 [ 729.592473][T16658] ? __pfx___pte_alloc+0x10/0x10 [ 729.592508][T16658] ? __pfx___might_resched+0x10/0x10 [ 729.592545][T16658] ? copy_page_range+0x22fb/0x6780 [ 729.592576][T16658] copy_page_range+0x3f3e/0x6780 [ 729.592640][T16658] ? __pfx_copy_page_range+0x10/0x10 [ 729.592669][T16658] ? mas_store+0xb4b/0x12f0 [ 729.592697][T16658] ? __vma_enter_locked+0x1dc/0x770 [ 729.592724][T16658] ? __pfx_mas_store+0x10/0x10 [ 729.592765][T16658] dup_mmap+0xbea/0x20e0 [ 729.592799][T16658] ? __pfx_dup_mmap+0x10/0x10 [ 729.592867][T16658] copy_process+0x3b9f/0x7430 [ 729.592906][T16658] ? preempt_schedule_thunk+0x16/0x30 [ 729.592945][T16658] ? __pfx_copy_process+0x10/0x10 [ 729.592983][T16658] ? find_held_lock+0x2b/0x80 [ 729.593019][T16658] ? futex_private_hash_put+0x160/0x1b0 [ 729.593054][T16658] kernel_clone+0xfc/0x910 [ 729.593094][T16658] ? __pfx_futex_wake+0x10/0x10 [ 729.593126][T16658] ? __pfx_kernel_clone+0x10/0x10 [ 729.593161][T16658] ? __pfx_vfs_writev+0x10/0x10 [ 729.593211][T16658] __do_sys_clone+0xce/0x120 [ 729.593247][T16658] ? __pfx___do_sys_clone+0x10/0x10 [ 729.593297][T16658] ? xfd_validate_state+0x61/0x180 [ 729.593319][T16658] ? __pfx_do_writev+0x10/0x10 [ 729.593360][T16658] do_syscall_64+0xcd/0xf80 [ 729.593399][T16658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.593425][T16658] RIP: 0033:0x7f888318f7c9 [ 729.593446][T16658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 729.593470][T16658] RSP: 002b:00007f88813ccfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 729.593495][T16658] RAX: ffffffffffffffda RBX: 00007f88833e6090 RCX: 00007f888318f7c9 [ 729.593512][T16658] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 729.593539][T16658] RBP: 00007f8883213f91 R08: 0000000000000000 R09: 0000000000000000 [ 729.593554][T16658] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 729.593569][T16658] R13: 00007f88833e6128 R14: 00007f88833e6090 R15: 00007ffdd09b34b8 [ 729.593602][T16658] [ 730.624953][T12665] hsr_slave_0: left promiscuous mode [ 730.632074][T12665] hsr_slave_1: left promiscuous mode [ 730.726731][T12665] veth0_macvtap: left promiscuous mode [ 731.444042][ T5149] Bluetooth: hci4: command tx timeout [ 731.859587][T12665] team0 (unregistering): Port device team_slave_1 removed [ 732.098718][T12665] team0 (unregistering): Port device team_slave_0 removed [ 732.953853][T12665] smc: removing net device dummy0 with user defined pnetid DUMMY0 [ 733.190146][T16718] Process accounting resumed [ 733.913688][T16736] FAULT_INJECTION: forcing a failure. [ 733.913688][T16736] name failslab, interval 1, probability 0, space 0, times 0 [ 733.960536][T16736] CPU: 0 UID: 0 PID: 16736 Comm: syz.0.2321 Tainted: G L syzkaller #0 PREEMPT(full) [ 733.960580][T16736] Tainted: [L]=SOFTLOCKUP [ 733.960589][T16736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 733.960606][T16736] Call Trace: [ 733.960614][T16736] [ 733.960625][T16736] dump_stack_lvl+0x16c/0x1f0 [ 733.960672][T16736] should_fail_ex+0x512/0x640 [ 733.960704][T16736] ? kmem_cache_alloc_noprof+0x62/0x770 [ 733.960740][T16736] should_failslab+0xc2/0x120 [ 733.960780][T16736] kmem_cache_alloc_noprof+0x83/0x770 [ 733.960810][T16736] ? security_file_alloc+0x34/0x2b0 [ 733.960849][T16736] ? security_file_alloc+0x34/0x2b0 [ 733.960880][T16736] security_file_alloc+0x34/0x2b0 [ 733.960913][T16736] init_file+0x93/0x4c0 [ 733.960939][T16736] alloc_empty_file+0x73/0x1e0 [ 733.960967][T16736] alloc_file_pseudo+0x13a/0x230 [ 733.960996][T16736] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 733.961023][T16736] ? alloc_fd+0x471/0x7d0 [ 733.961065][T16736] sock_alloc_file+0x50/0x210 [ 733.961104][T16736] __sys_socket+0x1c0/0x260 [ 733.961128][T16736] ? __pfx___sys_socket+0x10/0x10 [ 733.961151][T16736] ? xfd_validate_state+0x61/0x180 [ 733.961175][T16736] ? __pfx_do_writev+0x10/0x10 [ 733.961214][T16736] __x64_sys_socket+0x72/0xb0 [ 733.961236][T16736] ? lockdep_hardirqs_on+0x7c/0x110 [ 733.961275][T16736] do_syscall_64+0xcd/0xf80 [ 733.961316][T16736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.961341][T16736] RIP: 0033:0x7f888318f7c9 [ 733.961362][T16736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 733.961387][T16736] RSP: 002b:00007f88813ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 733.961411][T16736] RAX: ffffffffffffffda RBX: 00007f88833e5fa0 RCX: 00007f888318f7c9 [ 733.961427][T16736] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 733.961442][T16736] RBP: 00007f8883213f91 R08: 0000000000000000 R09: 0000000000000000 [ 733.961458][T16736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 733.961472][T16736] R13: 00007f88833e6038 R14: 00007f88833e5fa0 R15: 00007ffdd09b34b8 [ 733.961504][T16736] [ 734.227899][T16532] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 734.464455][T16532] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 734.576112][T16532] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 734.614740][T16532] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 735.047343][T16532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.337146][T16532] 8021q: adding VLAN 0 to HW filter on device team0 [ 735.637293][ T1301] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.644521][ T1301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 735.920257][T16532] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 735.964866][T16532] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 735.994590][ T1301] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.001869][ T1301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 736.818475][T16802] zswap: compressor not available [ 737.227238][T16532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 737.528485][T16828] Process accounting resumed [ 737.600262][ T5149] Bluetooth: hci0: unexpected event 0x22 length: 440 > 260 [ 737.600316][ T5149] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 737.764120][T16532] veth0_vlan: entered promiscuous mode [ 737.878597][T16532] veth1_vlan: entered promiscuous mode [ 738.054095][T16532] veth0_macvtap: entered promiscuous mode [ 738.092231][T16532] veth1_macvtap: entered promiscuous mode [ 738.211077][T16532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 738.432450][T16532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 738.521494][ T1034] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.545856][ T1034] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.589743][ T1034] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.623508][ T1034] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.133649][ T6597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.141562][ T6597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.526073][T12665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.535322][T12665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.342716][T16910] CIFS mount error: No usable UNC path provided in device string! [ 740.342716][T16910] [ 740.387023][T16910] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 740.694294][T15818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 740.707970][T15818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 740.716646][T15818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 740.728676][T15818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 740.737975][T15818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 741.265998][T16931] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 742.143054][ T6690] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.190158][T16921] chnl_net:caif_netlink_parms(): no params data found [ 742.293428][ T6690] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.440679][ T6690] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.607359][ T6690] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.698341][T16921] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.707265][T16921] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.716000][T16921] bridge_slave_0: entered allmulticast mode [ 742.727969][T16921] bridge_slave_0: entered promiscuous mode [ 742.738796][ T5149] Bluetooth: hci4: unknown advertising packet type: 0xea [ 742.745851][T16921] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.760881][T16921] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.774657][T16921] bridge_slave_1: entered allmulticast mode [ 742.786302][T16952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2357'. [ 742.792759][T16921] bridge_slave_1: entered promiscuous mode [ 742.826215][ T5149] Bluetooth: hci1: command tx timeout [ 743.109184][T16921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 743.216733][T16921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.439193][T16921] team0: Port device team_slave_0 added [ 743.516504][T16921] team0: Port device team_slave_1 added [ 743.751060][ T6690] netdevsim netdevsim511 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.788192][T16921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.799473][T16921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.859338][T16921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.901647][T16921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.924799][T16921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.960819][T16921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 744.240530][T16921] hsr_slave_0: entered promiscuous mode [ 744.255015][T16921] hsr_slave_1: entered promiscuous mode [ 744.267173][T16921] debugfs: 'hsr0' already exists in 'hsr' [ 744.276662][T16921] Cannot create hsr debugfs directory [ 744.282770][ T6690] gretap0: left allmulticast mode [ 744.297361][ T6690] gretap0: left promiscuous mode [ 744.306349][ T6690] bridge0: port 3(gretap0) entered disabled state [ 744.387338][ T6690] bridge_slave_1: left allmulticast mode [ 744.408695][ T6690] bridge_slave_1: left promiscuous mode [ 744.414650][ T6690] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.446708][ T6690] bridge_slave_0: left allmulticast mode [ 744.452521][ T6690] bridge_slave_0: left promiscuous mode [ 744.465288][ T6690] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.893077][ T5149] Bluetooth: hci1: command tx timeout [ 745.784251][ T6690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 745.814648][ T6690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 745.854133][ T6690] bond0 (unregistering): Released all slaves [ 746.083204][ T6690] HfR: left promiscuous mode [ 746.263992][ T6690] tipc: Left network mode [ 746.916166][ T5149] Bluetooth: hci0: unknown advertising packet type: 0xea [ 746.963548][ T5149] Bluetooth: hci1: command tx timeout [ 747.056129][T17012] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2368'. [ 747.724883][ T6690] hsr_slave_0: left promiscuous mode [ 747.767813][ T6690] hsr_slave_1: left promiscuous mode [ 747.843430][ T6690] veth1_macvtap: left promiscuous mode [ 747.857635][ T6690] veth0_macvtap: left promiscuous mode [ 748.925973][ T6690] team0 (unregistering): Port device team_slave_1 removed [ 749.031523][ T5149] Bluetooth: hci1: command tx timeout [ 749.051760][ T6690] team0 (unregistering): Port device team_slave_0 removed [ 750.446869][T16921] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 750.540484][T16921] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 750.616191][T16921] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 750.733648][T16921] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 751.310854][T16921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 751.436932][T16921] 8021q: adding VLAN 0 to HW filter on device team0 [ 751.470133][ T1975] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.477431][ T1975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 751.542412][T12665] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.549720][T12665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.745917][T16921] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 752.701464][T16921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 752.927153][T16921] veth0_vlan: entered promiscuous mode [ 752.949770][T16921] veth1_vlan: entered promiscuous mode [ 753.018450][T16921] veth0_macvtap: entered promiscuous mode [ 753.054493][T16921] veth1_macvtap: entered promiscuous mode [ 753.125709][T16921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 753.189337][T16921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 753.227841][ T6597] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.262190][ T6597] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.273580][ T6597] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.291278][ T6597] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.536147][T12665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.571259][T12665] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.716166][ T6597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.740739][ T6597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.189687][ T5149] Bluetooth: hci1: unknown advertising packet type: 0xea [ 754.263115][T17133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2382'. [ 755.772717][T17176] vhci_hcd vhci_hcd.2: invalid port number 252 [ 755.813857][T17176] vhci_hcd vhci_hcd.2: default hub control req: 040f v0772 i00fc l2 [ 756.278743][T17186] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2395'. [ 756.296417][T17186] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2395'. [ 756.306370][T17186] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2395'. [ 756.333623][T17186] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2395'. [ 756.344213][T17186] nbd: must specify at least one socket [ 756.631416][T17188] kAFS: Invalid Command on /proc/fs/afs/cells file [ 756.911488][T17181] binder: 17179:17181 ioctl c0306201 200000000000 returned -11 [ 757.258885][T17195] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 757.632057][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.641825][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.834216][T17204] phram: not enough arguments [ 759.064317][T17233] nvme_fabrics: unknown parameter or missing value 'û@è' in ctrl creation request [ 759.103820][T17231] nvme_fabrics: unknown parameter or missing value 'û@è' in ctrl creation request [ 759.781248][T17242] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2406'. [ 759.919024][T17242] bond0: (slave bond_slave_1): Releasing backup interface [ 760.646098][T17250] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2409'. [ 760.687968][T17250] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2409'. [ 760.698143][T17250] nbd: must specify at least one socket [ 760.786680][T17257] kAFS: Invalid Command on /proc/fs/afs/cells file [ 761.844351][T17270] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2420'. [ 761.871371][T17270] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2420'. [ 761.889806][T17270] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2420'. [ 761.933494][T17270] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2420'. [ 761.944677][T17270] nbd: must specify at least one socket [ 762.111295][T17273] kAFS: Invalid Command on /proc/fs/afs/cells file syzkaller syzkaller login: [ 767.918874][T17280] Process accounting paused [ 769.084634][T17358] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 769.099540][T17358] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 769.118624][T17358] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 769.132652][T17358] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 769.238230][T17358] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 769.305816][T17358] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 769.441684][T17358] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 769.466943][T17358] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 770.440126][ T5149] Bluetooth: hci2: command 0x0c1a tx timeout [ 770.640140][T15818] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 770.656899][T15818] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 770.668470][T15818] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 770.681130][T15818] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 770.690904][T15818] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 771.008725][T17391] chnl_net:caif_netlink_parms(): no params data found [ 771.156338][T15818] Bluetooth: hci0: command 0x0419 tx timeout [ 771.157608][ T5149] Bluetooth: hci4: command 0x0c1a tx timeout [ 771.282784][T17391] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.325407][ T5149] Bluetooth: hci1: command 0x0c1a tx timeout [ 771.344885][T17391] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.354129][T17391] bridge_slave_0: entered allmulticast mode [ 771.393149][T17391] bridge_slave_0: entered promiscuous mode [ 771.638739][T17391] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.665409][T17391] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.672931][T17391] bridge_slave_1: entered allmulticast mode [ 771.747012][T17391] bridge_slave_1: entered promiscuous mode [ 772.273158][T12666] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.396173][T17391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.416987][T17391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.692984][T12666] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.733339][T17391] team0: Port device team_slave_0 added [ 772.762543][ T5149] Bluetooth: hci3: command tx timeout [ 772.782148][T17391] team0: Port device team_slave_1 added [ 772.846435][T12666] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.892416][T17417] nvme_fcloop: unknown parameter or missing value '¢žä' [ 772.913647][T17418] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 772.921507][T17418] #PF: supervisor instruction fetch in kernel mode [ 772.928057][T17418] #PF: error_code(0x0010) - not-present page [ 772.934132][T17418] PGD 800000005e620067 P4D 800000005e620067 PUD 0 [ 772.940710][T17418] Oops: Oops: 0010 [#1] SMP KASAN PTI [ 772.946148][T17418] CPU: 1 UID: 0 PID: 17418 Comm: syz.3.2440 Tainted: G L syzkaller #0 PREEMPT(full) [ 772.957145][T17418] Tainted: [L]=SOFTLOCKUP [ 772.961479][T17418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 772.971550][T17418] RIP: 0010:0x0 [ 772.975034][T17418] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 772.982436][T17418] RSP: 0018:ffffc9000473f988 EFLAGS: 00010283 [ 772.988520][T17418] RAX: 00000000000008e5 RBX: 0000000000000000 RCX: ffffc9001a00b000 [ 772.996544][T17418] RDX: 0000000000080000 RSI: ffffea00013eb400 RDI: ffff888031a33dc0 [ 773.004542][T17418] RBP: ffffea00013eb400 R08: 0000000000000007 R09: 0000000000000000 [ 773.012527][T17418] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920008e7f32 [ 773.020514][T17418] R13: ffff888031a33dc0 R14: 0000000000000000 R15: dffffc0000000000 [ 773.028673][T17418] FS: 00007faae44576c0(0000) GS:ffff8881249fc000(0000) knlGS:0000000000000000 [ 773.037633][T17418] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 773.044250][T17418] CR2: ffffffffffffffd6 CR3: 0000000031a46000 CR4: 00000000003526f0 [ 773.052245][T17418] Call Trace: [ 773.055551][T17418] [ 773.058487][T17418] filemap_read_folio+0xc8/0x2a0 [ 773.063453][T17418] ? __pfx_filemap_read_folio+0x10/0x10 [ 773.069018][T17418] do_read_cache_folio+0x266/0x5c0 [ 773.074161][T17418] freader_get_folio+0x33a/0x930 [ 773.079131][T17418] freader_fetch+0xbd/0x740 [ 773.083666][T17418] ? __asan_memset+0x23/0x50 [ 773.088298][T17418] __build_id_parse.isra.0+0xdd/0x6c0 [ 773.093808][T17418] ? query_matching_vma+0x48e/0x7d0 [ 773.099034][T17418] ? __pfx___build_id_parse.isra.0+0x10/0x10 [ 773.105067][T17418] do_procmap_query+0xb0e/0x1080 [ 773.110042][T17418] ? __pfx_do_procmap_query+0x10/0x10 [ 773.115439][T17418] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 773.121368][T17418] ? do_vfs_ioctl+0x128/0x14f0 [ 773.126171][T17418] ? __fget_files+0x20e/0x3c0 [ 773.130893][T17418] procfs_procmap_ioctl+0x9d/0xe0 [ 773.135962][T17418] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 773.141725][T17418] __x64_sys_ioctl+0x18e/0x210 [ 773.146533][T17418] do_syscall_64+0xcd/0xf80 [ 773.151114][T17418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.157034][T17418] RIP: 0033:0x7faae358f7c9 [ 773.161471][T17418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 773.181108][T17418] RSP: 002b:00007faae4457038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 773.189636][T17418] RAX: ffffffffffffffda RBX: 00007faae37e6090 RCX: 00007faae358f7c9 [ 773.197625][T17418] RDX: 0000200000000080 RSI: 00000000c0686611 RDI: 000000000000000d [ 773.205609][T17418] RBP: 00007faae3613f91 R08: 0000000000000000 R09: 0000000000000000 [ 773.213595][T17418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 773.221585][T17418] R13: 00007faae37e6128 R14: 00007faae37e6090 R15: 00007ffd946ba058 [ 773.229583][T17418] [ 773.232609][T17418] Modules linked in: [ 773.236525][T17418] CR2: 0000000000000000 [ 773.240724][T17418] ---[ end trace 0000000000000000 ]--- [ 773.246283][T17418] RIP: 0010:0x0 [ 773.249772][T17418] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 773.257159][T17418] RSP: 0018:ffffc9000473f988 EFLAGS: 00010283 [ 773.263249][T17418] RAX: 00000000000008e5 RBX: 0000000000000000 RCX: ffffc9001a00b000 [ 773.271237][T17418] RDX: 0000000000080000 RSI: ffffea00013eb400 RDI: ffff888031a33dc0 [ 773.279226][T17418] RBP: ffffea00013eb400 R08: 0000000000000007 R09: 0000000000000000 [ 773.287215][T17418] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920008e7f32 [ 773.295280][T17418] R13: ffff888031a33dc0 R14: 0000000000000000 R15: dffffc0000000000 [ 773.303300][T17418] FS: 00007faae44576c0(0000) GS:ffff8881249fc000(0000) knlGS:0000000000000000 [ 773.312265][T17418] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 773.318876][T17418] CR2: ffffffffffffffd6 CR3: 0000000031a46000 CR4: 00000000003526f0 [ 773.326871][T17418] Kernel panic - not syncing: Fatal exception [ 773.333704][T17418] Kernel Offset: disabled [ 773.338058][T17418] Rebooting in 86400 seconds..