last executing test programs: 4m46.709046922s ago: executing program 3 (id=955): r0 = socket(0x18, 0x4, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000240), r0) r1 = socket(0x28, 0xa, 0x84) bpf$auto(0xfffffffd, &(0x7f0000000000)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x6, 0x4, 0xffffffffffffffff, @relative_id=0xb99, 0xd}, 0xa3) gettimeofday$auto(&(0x7f0000000140)={0x58bf, 0x7}, &(0x7f0000000180)={0x0, 0xfffffff9}) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) getsockname$auto(r2, &(0x7f00000000c0)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, &(0x7f00000001c0)=0xa) pwrite64$auto(0xc8, &(0x7f00000011c0)='\vX\xb5n\x91\vI\x1eRN8\x99\x88\xca\xd9\xec\x1epJ\"ds\x1cJr\xde:\x00!\r>\x94\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18\x89\x15\x0e\x1b\x95\xaf\xee\xe69\x8d(<\xc7+\x83\xfcQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9\xb7\x9d\xb6r9\x02\x00\x00\x00\x00\x00\x00\xc3\xc3\xdbS\xdc\xfc\x19\xba\xab\xe4\x8b\xdeT3^\a\xb2\xf3}\t4\xa2^\xe4b?\xb2Q\x8d\x8c\x83\x8e\xfe\x8e\b\x93M\x9e3\xa5`hN\xe36\xc3\x99\xe7L\x12\xaar}\x90\x05>\xab\xc9\xb7^\xcc\r\xb9V\x10\xa5\x81\x96e\x80\'\xc6\x06', 0x10, 0x0) sendto$auto(r1, 0x0, 0x401, 0xffff, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) 4m46.369704989s ago: executing program 3 (id=956): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xaa102, 0x0) ioperm$auto(0x7, 0x800, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/capabilities/ff\x00', 0x300, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) socket(0x2, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x10, 0x2000c, 0x2e1, 0x11, 0xffffffffffffffff, 0x100000001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/misc/cpu_dma_latency/power/runtime_active_time\x00', 0x200, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r3, 0x401070cd, 0x5) ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000000)) statx$auto(r0, &(0x7f0000000180)='./file0\x00', 0x9, 0x5, &(0x7f0000000540)={0x5, 0x101, 0x0, 0x8b, 0xee00, 0x0, 0x4, 0xbd49, 0x8, 0x2, 0x100, 0x4, {0xffffffffffffffb1, 0xfffffffc}, {0x80000001, 0x2}, {0x100000000, 0x3}, {0xe}, 0x9, 0x4, 0xbf, 0x0, 0x9, 0x3, 0x2, 0x3, 0x481000, 0xfffffffe, 0x3, 0x6, [0x0, 0x2, 0x91, 0xb, 0x3, 0x2, 0xcd1, 0x3d7d, 0x2]}) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x5, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_fd, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) 4m44.729441366s ago: executing program 3 (id=961): mkdir$auto(&(0x7f0000004440)='./file0\x00', 0x1) mount$auto(&(0x7f0000000000)='wg2\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x5, 0x0) 4m44.662136176s ago: executing program 3 (id=962): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f0000000080)={{0x7, 0x3076000000000000}, {0x10, 0x401}}, &(0x7f00000000c0)={{0xd1f3, 0x100000000}, {0xf33, 0x8}}) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) lseek$auto(0x3, 0x8, 0x1) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x9f7, 0x7, 0xfff, 0x8000200008011, 0x3, 0x8000) msync$auto(0x0, 0xe0, 0x6) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) r4 = socket(0x2c, 0x3, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/tcp\x00', 0x181800, 0x0) pread64$auto(r5, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xba*G\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90~Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1\x00'/232, 0x3ef, 0x9) bind$auto(r4, &(0x7f0000000080)=@xdp={0x2c, 0xc, 0x0, 0x1c}, 0x6b) read$auto(r3, 0x0, 0x1f42) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) io_uring_register$auto_IORING_UNREGISTER_NAPI(0xffffffffffffffff, 0x1c, 0x0, 0x8) 4m39.948843364s ago: executing program 3 (id=973): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0xffff, 0x9, 0xbf3) mmap$auto(0x0, 0x280006, 0x3, 0x40eb1, 0xffffffffffffffff, 0x1300000000000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001580)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r2 = memfd_create$auto(0x0, 0xd) (async) ftruncate$auto(0x0, 0x8800000) (async) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x5, 0x0) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x6c) (async) ioctl$auto_TUNSETPERSIST(r2, 0x400454cb, &(0x7f0000000080)=0x3) (async) quotactl$auto(0x2, &(0x7f0000000040)='/dev/sda1\x00', 0x62a0, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x200, 0x0) (async) mmap$auto(0x0, 0x2000a, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) mmap$auto(0x1, 0x2020009, 0x6, 0x91, r0, 0x2) (async) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) write$auto(0x3, 0x0, 0xfdef) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044850}, 0x8040) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) 4m38.442091513s ago: executing program 3 (id=979): mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_lsm_ops_inode(0xffffffffffffff9c, &(0x7f0000000080), 0x44140, 0x0) r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xc000, 0x0) pread64$auto(r0, 0x0, 0x101, 0x103) read$auto_mon_fops_text_t_mon_text(r0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2b, 0x1, 0x0) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000240), 0x840, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfs4.idtoname/content\x00', 0x80, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/ext4/sda1/mb_best_avail_max_trim_order\x00', 0xa401, 0x0) kexec_load$auto(0x100000000, 0x4, &(0x7f00000001c0)={@kbuf=&(0x7f0000000140)="95cdee871e63f80615d972553e6517cb93dda0f091bb9e1cda7b21a26f5712597aaae7fe414c847b2227f943729c82633e9cd074c4d47ad01cfeff14c39b5525f5447f62239ec4115bc191575bcbe34d347439a4d62b8a3eda0bcd826d7e9f9452ff2051a853ea4e36026f8771e1bc56b7f911582407d8f48bd6a2", 0x9, 0x10001, 0x100000000}, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r1 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000200), 0x22000, 0x0) ioctl$auto_FS_IOC_GETFLAGS(r1, 0x80086601, 0x5) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dri/renderD128\x00', 0x0, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sysfs$auto(0x2, 0x4a, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x6, 0x20000000007, 0x1, 0xbc3, 0x800, 0x3, 0x8, 0xc, 0x159e, 0x3, 0x0, 0xffffffffffffffff, 0x800006, 0x9, 0xffffffffffffff81, 0x7]}, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_STALL(0xffffffffffffffff, 0x550c, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/neigh/veth1_to_team/ucast_solicit\x00', 0x208200, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x8, 0x1, 0x106) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) 4m23.351236715s ago: executing program 32 (id=979): mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_lsm_ops_inode(0xffffffffffffff9c, &(0x7f0000000080), 0x44140, 0x0) r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xc000, 0x0) pread64$auto(r0, 0x0, 0x101, 0x103) read$auto_mon_fops_text_t_mon_text(r0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2b, 0x1, 0x0) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000240), 0x840, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfs4.idtoname/content\x00', 0x80, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/ext4/sda1/mb_best_avail_max_trim_order\x00', 0xa401, 0x0) kexec_load$auto(0x100000000, 0x4, &(0x7f00000001c0)={@kbuf=&(0x7f0000000140)="95cdee871e63f80615d972553e6517cb93dda0f091bb9e1cda7b21a26f5712597aaae7fe414c847b2227f943729c82633e9cd074c4d47ad01cfeff14c39b5525f5447f62239ec4115bc191575bcbe34d347439a4d62b8a3eda0bcd826d7e9f9452ff2051a853ea4e36026f8771e1bc56b7f911582407d8f48bd6a2", 0x9, 0x10001, 0x100000000}, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r1 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000200), 0x22000, 0x0) ioctl$auto_FS_IOC_GETFLAGS(r1, 0x80086601, 0x5) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dri/renderD128\x00', 0x0, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sysfs$auto(0x2, 0x4a, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x6, 0x20000000007, 0x1, 0xbc3, 0x800, 0x3, 0x8, 0xc, 0x159e, 0x3, 0x0, 0xffffffffffffffff, 0x800006, 0x9, 0xffffffffffffff81, 0x7]}, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_STALL(0xffffffffffffffff, 0x550c, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/neigh/veth1_to_team/ucast_solicit\x00', 0x208200, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x8, 0x1, 0x106) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) 53.826667295s ago: executing program 0 (id=1738): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/syz_tun/ra_defrtr_metric\x00', 0x200200, 0x0) r1 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r2 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) io_uring_register$auto_IORING_REGISTER_FILES2(r2, 0xd, &(0x7f00000000c0)="d79626c45c09d8924bec1d308981d3c5d2a6089fda497be9fa9540cfe52420606eba03aee46e14fa0d2e5f865429da6162ddf9f0d8a560831e568a52520c4439ae3c7b29ad0f301e9560b55e41beab5e67d1db18bb95c861a4e37d8ad0936b0ff508c0efafaaf93229feb7249a53008bf7c27d5d0f98019243075abe236eda1d7498ca36488d829112105b8707415ce5135291fba1daf2db8d983925e7f3aa7b1481f24ca122c6dd33a8bc3c39c786f8020fbaae9cd466093d9f4f1618da5851e563210763d4b787e48edfc91b56717d038dea65", 0xfffffffc) setgroups$auto(0x1c4a, &(0x7f00000001c0)=0xfffffff7) recvfrom$auto(r2, &(0x7f0000000200)="6de5d07b54b4f01dbe94b1dcc3961884574fbee085b1ed1db809beb58408", 0x0, 0x0, &(0x7f0000000240)=@ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, &(0x7f0000000280)=0x81) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/irq/0/spurious\x00', 0x111000, 0x0) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r4, 0x10, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x42}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r6, 0x8, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4800) r7 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000005c0), r5) sendmsg$auto_SMC_NETLINK_GET_SYS_INFO(r5, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x94, r7, 0x200, 0x70bd2b, 0x25dfdbfe, {}, "1667f2a7f2cec38b136d1aed68a9c03b41f89da84569587fc03007622c834ed65d853eb7ec9c2051a4f5138c6a3017d9805c4a93c71d92bbaf1295a11651652c5ced1c29b1f4493f2c97a5e68dae5ce10e8c99bfa06b208337faec94e14874955bf0e54862b78ae7f172b0ed23b9b7daceceece70694351529987ca9c5"}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0xc840) r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sys/net/ipv6/conf/bridge_slave_1/router_solicitation_interval\x00', 0x2a0000, 0x0) pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD(r0, 0xe, &(0x7f00000007c0)={@siginfo_0_0={0x0, 0x4, 0x1142, @_sigpoll={0x767c, r8}}}, 0x1) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000880), r9) sendmsg$auto_NL80211_CMD_COLOR_CHANGE_REQUEST(r9, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x20, r10, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_DISABLE_HE={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x44040}, 0x0) r11 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000009c0), r2) syz_clone3(&(0x7f0000000d00)={0x4000200, &(0x7f0000000a00), &(0x7f0000000a40)=0x0, &(0x7f0000000a80), {0x29}, &(0x7f0000000ac0)=""/224, 0xe0, &(0x7f0000000bc0)=""/244, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x6, {r9}}, 0x58) r13 = waitid$auto_P_PIDFD(0x3, r9, &(0x7f0000000dc0)={@siginfo_0_0={0x3, 0xa6c, 0x9, @_sigsys={&(0x7f0000000d80)="94f73a2331200da56809e3bbe833456b104251bda48e8a06eae683a12c6784ee4b31c657d43b848bc2c837d3cb8258bb253ce5ef96edb55c65e813e7", 0x7f, 0x93df}}}, 0x6, &(0x7f0000000e40)={{0x4, 0x9}, {0x8, 0x8}, 0x7fff, 0x0, 0xfffffffffffffff7, 0x752a, 0x1ff, 0x4, 0x9, 0x7f, 0x7f, 0x5, 0x8, 0x552bf954, 0x31, 0xfffffffffffffff9}) sendmsg$auto_TIPC_NL_MEDIA_SET(r9, &(0x7f00000016c0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001680)={&(0x7f0000000f00)={0x770, r11, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x294, 0x9, 0x0, 0x1, [@typed={0x8, 0x140, 0x0, 0x0, @pid=r12}, @nested={0xe2, 0x12d, 0x0, 0x1, [@typed={0x8, 0xe4, 0x0, 0x0, @u32=0x8001}, @generic="21fd3d61f7aac0f78c72b7b5aaf69f8c1b0eb83c7b29051c88b1edac7b2a12933f295d7c3bbc079b93eff92d19c7471cc6ff965cf350135e91a75000bf9de427ada3b5cd08a646c56cde22b1", @typed={0x8, 0x14d, 0x0, 0x0, @fd=r2}, @nested={0x4, 0x123}, @generic="6b7dbc71a27379ff8d66c74a95b3fb276d6dcbe4561799c3209e4960967f1954548ab066cb32f28775010b3adc4675f83c3a5f7c8392c57c46406801d6f001671fa4556bf77d519b29e5052eb6c2b41f8972748f5fb18571ae29bd0be12f46f51e9a50e97f407953cc932dc9e7dd0a88c885649b70610a889c6df280459c"]}, @nested={0x4, 0x6c}, @nested={0x181, 0x14c, 0x0, 0x1, [@generic="aa9191810f222b46f94c7121debd90774b0269506fedc7de9df2358e9508bf4e5f020cd3480af117c72e4f993ac812c0c9d184a2ef8b679f7dd748e51047d89fb050d6d7beaa1cc946ccf55f781547e8d666c45f0de0b8912fc125f9d55ad7c5b24577fc81bcf5131bf4f968956c6eecadafd56bc3ce6c11eba6f0dbcb5b5cd54691c0cdf48d7eb47cf231517c7ed29d0e95decfae921153291221e767dec7d7333ddb184e461bb59daabbee33ecb27c8e3e", @generic="4a10ea7e512fed25a7c5692488c6debdbf12db6efe71ded97be328973ea7d474c376d9e91c664a5adcce7488a9fed1cf52ea18111989f0c009abd132948903e9e92d61c0b0d322eb6a3d5321044b94865989503a452342887b3d3be246071b7c4267d967dfd5a1", @nested={0x4, 0x10a}, @typed={0xc, 0x2b, 0x0, 0x0, @u64=0x4}, @generic="79ae6c4a6b516e94526ba90dc40779331766aff4e318d7c62aa32dc3c44ff368ea430a565722d63f75481d7a09037f45ad3e796275ff5ff44e64332478acce8853455175a452730a809ca803", @nested={0x4, 0x14}, @nested={0x4, 0xe2}]}, @nested={0x14, 0x10a, 0x0, 0x1, [@nested={0x4, 0x6e}, @typed={0x8, 0xc7, 0x0, 0x0, @u32=0x2}, @nested={0x4, 0x2}]}, @typed={0x8, 0x11e, 0x0, 0x0, @fd=r1}]}, @TIPC_NLA_MON={0x17c, 0x9, 0x0, 0x1, [@nested={0x177, 0x11, 0x0, 0x1, [@nested={0x4, 0x9b}, @typed={0x8, 0xa4, 0x0, 0x0, @pid=r13}, @generic="c9df07e962d714b3d115d3d99de6058e3a529defc60376cc88341b462de66d3c29bf4f12589212f2ea7dffeb934dfc3b3378bdeb882b2715113a94f4d0c2762930d43c1720caa411d3dad187c4e600c0b1f07b6cbff2b4053c304b0e4c0d6449243c4239979628128f8d1bc7cf6ffa2b7f1f653f5d28d550c0f54e", @nested={0x4, 0x136}, @generic="adc85fd7a27e4dc9fdcc8afd8d7eaf", @generic="b0503759eb6e257ab7291a051e351cd2cb1bbcf177b63d4523ed49deac4b65a9851202a0092042f90f14b2646b6ee5c238018aef5e1246fb7cadd744eae180e41c4855c8efc542794b9cb03c77d149cc5379d8d093ecddcb9d242878c0602ef71a87b8564d8bcddb63ca9cb4f891c9a38280330bed6f412892603137786a1fc0912dae099a4b66de578408ac8162117fe93554e3a780756aa2397ad59fac2bc7f3fde3e142b505afb7b7a5", @generic="3a6c78bd0ea2b42705c2af54c91cd71799e8dfc00e00348e95977badb310ed45811a", @nested={0x4, 0x54}, @typed={0x5, 0xea, 0x0, 0x0, @str='\x00'}]}]}, @TIPC_NLA_MON={0xe8, 0x9, 0x0, 0x1, [@nested={0x43, 0x94, 0x0, 0x1, [@generic="be545c12b9109d22a526b46b4842149d3640a78a5b8a0c7bcbe2c10dd6ee517b88e30e6c7a960641432f0a70", @generic="cf53f4b6d85a7444a5cebbd84c862feec6a1e7"]}, @nested={0xc, 0x113, 0x0, 0x1, [@typed={0x8, 0x8, 0x0, 0x0, @u32=0x2}]}, @generic="2aa480a92a62de8afd3c3335b217a581e0eaeeabb05e436f179d076922ebdd66a5e198a8b375d4421468ee0c569d2e9ed51da119949ce5a8e98166e00efab86d2dcc24edc885d083fa1eaffbbe34e6d733dd837c4f427c1638c3fa12f138d881bc10679ac4079a32aaf136cee44f4952d27e5b9af17a3b44098cae009b80462e4a9e31792b8fb8a88326c98a59fcc5ff280301ce"]}, @TIPC_NLA_LINK={0x101, 0x4, 0x0, 0x1, [@generic="9b64d19f957f76c4ef5092d74f45f1a4551cc3a98c0ae197dab9a8788e22e944a4f0af98cd4512620bd39c6409194af7dd39ec9afb469f6c055b31e0597f9fd6c541270182c54d9c061cc195dcb6267889f33442821852a1eee4700cd9b8d3afb5019b95d087b44f6060251aa70993bfc0c120f9d270c86ef3080e29efa6c146385220c5c4d9f9035e15cab155dad508f3114af0ada05d467ff75fb5c3f88536621f8cf3e04e693ec9d113b6f2b5d4e0b8df8da44af8694815404630b2f13837b3158271a50f404e19033a0ee0dc467a45fd2547c3e4a3c8ccfc8005526b82637ceee995b9b1d5dfa39dfb9d568976e3557f27c6a3", @typed={0x8, 0x90, 0x0, 0x0, @fd=r5}]}, @TIPC_NLA_NODE={0x65, 0x6, 0x0, 0x1, [@typed={0xc, 0x11a, 0x0, 0x0, @u64=0x7fffffffffffffff}, @generic="50513e23858f4aeba7eef9a8502c6113eb3b71b45eaf303556d89a46760b8964a405139f876be0ad1c5edf8ca4d978909a8f587d108c5b049b7fc29b0b828a4204d165273f070c362684a90ff87a39108ca7109c6a"]}, @TIPC_NLA_PUBL={0xf8, 0x3, 0x0, 0x1, [@generic="a22c3a57273a169fd2dfde1322f9439a781e92c7656a9295d24fe444b878f6c14aef6d9696b85002c3073dd66bd822762de689ca99f00694c445ae5c4a7f96b9a48afb74b849cba193abf4cb436de626eb4e5897635b94baf1ac5c7252abe74568662263ca285c8c563da03f956d4077d800ab8dbfb35aca6a7b8946e41fbd6985dd0ded5493c7a208f1c48429838246d9fb5412725889540afcf1349f6c16d48bc5dbbfd5090cf3f3d3283fd29ba7070901fda823cf9abe770a8630b07aa8a9ecada74135d9a32d8a3fe9dddaff64d1d0074f64cc08156ef04e678f727fae813f3e492f2f0ece4100dceddb", @typed={0x7, 0x25, 0x0, 0x0, @str='-%\x00'}]}]}, 0x770}, 0x1, 0x0, 0x0, 0x8880}, 0x4008005) r14 = ioctl$auto_KVM_CREATE_VM(r9, 0xae01, 0x0) r15 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000001740), r5) sendmsg$auto_IEEE802154_SET_MACPARAMS(r14, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r15, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SRC_HW_ADDR={0xc, 0xc, 0x55b3b564}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0xd}, @IEEE802154_ATTR_LBT_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$auto_cifs(&(0x7f0000001840), 0xffffffffffffffff) mmap$auto(0x0, 0x4, 0xfffffffffffffffd, 0xfffffffffffffff8, r2, 0x1) ioctl$auto_SNDCTL_DSP_GETIPTR(r9, 0x800c5011, &(0x7f0000001880)="6aa4c3cfe20eb410ab34183b857d5642d4883d9acf0d03984c23e866f2b7ef9f2bb561d60a0568a3a85ef7c0b5b056241a0e4cd330ab9fd1369f07ebaf2e801de8f3f54563524a6e9df9467292f154d6ecc63c448aa08a903cbc7b22fa8e43f51541ee11fe27cefcf4bf1c260b3cbc292e378b1ab12b73e25f3241b581b4bdd22f5cc8e31873afdc17fe84a74bf105d488eed327e7fd4b2f87beeeccdfa51048ca616d49aa4923082e2505205e63c2278f74a2e0de4297dabfce5298281dd824fb03ee90bbac137a611d") bpf$auto_BPF_ITER_CREATE(0x21, &(0x7f0000001980)=@info={r5, 0xff, 0x2}, 0x8) ioctl$auto_VHOST_SET_LOG_FD2(r16, 0x4004af07, &(0x7f0000001a40)=r3) 53.224612199s ago: executing program 0 (id=1743): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) openat$auto_fops_u64_ro_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ramdisk_pages/ram13\x00', 0x80000, 0x0) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000300), 0x60081, 0x0) ioctl$auto_PPPIOCATTACH(r0, 0x4004743d, 0x0) 52.867683147s ago: executing program 0 (id=1745): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) preadv2$auto(r0, 0x0, 0x6, 0xffffffffffffffff, 0x7e, 0x2e) write$auto(r0, &(0x7f00000001c0)='macvlan1\x00', 0x1) getpgrp(0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0xfff000000000000) read$auto(0xffffffffffffffff, 0x0, 0x20) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/stat\x00', 0xc0802, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/arch_status\x00', 0x109480, 0x0) mmap$auto(0x4000000000003, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_RXSA(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000ff5e1234d10027f3c35ca423f82874395abf6108a55d26978527d2d5ae5f97827d6863654a87c93463604894270b7399f9556979fb2e7efe6d791a32f45725d6bc261ceb51f4f3f86ff191af0021ac78fd22c0a2cfabe08baf052384ed2191056401929df310dc2f434928da3b7bfcf6cebdcdcc3c5be1ca4c4701385f787f54035aeabbde018942e54469d0627ec82073284ab7f2bbc8110a9d3318dd7f3621b81a3c3b9d69bb52b9e2693558d5959e00736e5bea3b9abd4b3d3091eb8d94b3661f191414640dbfb97752333a6ba83c2ce5cf", @ANYRES16=r3, @ANYBLOB="01052bbd7000ffdbdf25080000000400038008000100", @ANYRES32=0x0, @ANYBLOB="04000280"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/oom_adj\x00', 0x142, 0x0) read$auto(r4, 0x0, 0x4) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) setfsuid$auto(0x0) writev$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x8}, 0x0) mmap$auto(0x400, 0xc, 0x9c0f, 0xc4eb3, 0xffffffffffffffff, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x9, 0x2, 0x0) semctl$auto_IPC_INFO(0x10, 0x3, 0x3, 0x1) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xffeb, 0xe, &(0x7f0000000100)=@in={0x2, 0x4e22, @multicast2}, 0x19) 51.875353688s ago: executing program 0 (id=1748): close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = socket(0x2, 0x3, 0x6) (async) lsm_list_modules$auto(0x0, 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) (async) mkdir$auto(0x0, 0x353) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r1 = socket(0x2a, 0x2, 0x1) ioctl$auto(0x3, 0x800005411, 0x38) (async) connect$auto(r1, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) (async) socket(0x2, 0x5, 0x0) bind$auto(0x3, 0x0, 0x6a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x20000014) (async) io_uring_setup$auto(0x1, 0x0) (async) setsockopt$auto(0x3, 0x0, 0x2, 0x0, 0x3) (async) openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, 0x0, 0x2282, 0x0) (async) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) (async) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r3, &(0x7f0000003bc0)={0x0, 0x0, &(0x7f0000003b80)={&(0x7f0000000fc0)={0xd04, r2, 0x5, 0x70bd26, 0x25dfdbfd, {}, [@HWSIM_ATTR_PMSR_RESULT={0xcf0, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0xa74, 0x5, 0x0, 0x1, [{0xa70, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa55, 0x1, "aedac100bb5b6ac628e7919a25003a963f80e95f498472d4907b363942c8f73c78f5834f9db84ce63a08e831472948055fd0881e112a86c30b66d6ce432bff4000a4224ab0fdf2e1f8a2fa26fb04df898559a6d3e9b82a32291453a2e168b70d0bc50fb9366c91b25b01caab869883131d105b40ddc4ff7df415c6858d326b80f71b82029916fb99cb0e1472ce1073450c7b47c6726fa8f8d3d93eb5a31143fff18556b61b10791dc40de5f3e04930627a0619fa08dd9f659848a888c42f2577ea2a1cc3f6370b69e879588c183323d4e943719a9ea3e2074e99f1144d1b74b82ca037b870149105a15c02dcd1d4f8ab4239b50b92931a5e1a084a3a2d57546120e76ace075e84419b29bc8e53d759fd5de254925675ff3741dec40ff7f7dbb22ecc5169986cc6e799753f35c8b84d0cc55edbb16d382c0953dfe1ad5a88fcb8a2ea0d4a16adcf4dd833476158d9f913920d5cdd70485ed9ba2a70b61a858ad027ecc7eb13f14b86a6cf8c047a8b01e2a9f24a31b6ace9724808c44865a2c8916108b6288fa0e1ea5c6e1c745744bac772e25ad105fbf4d0fdd4547d2dcd4893a3c69b17a8d34b92c3af76f3d14194a83fab3e6635771fb0f0a00a5a11fcd7c7aa803688194563a9e079237c04c870bd343a397f13e9b9773d297c53ed60c691628cd1a1c4d16d867a7c9ff416c8ea54deb03d7d078d727412d2ad121100fd0a4c7d15b825760dde6cbeda9ba4e5801d272ee8ee58e2993e88f0e08cb2741e2360311b9f34720e59e76733ba96b331537e40e693891d89d13670078197a8fafe363ebef03a074719d0541988b08c459783ab68027a8fe5105dfd54583ac662a8ee530d1838db0e86c04bc596b7541bc950114c106f85c6dc01dc09cfcc72c87ad82d41e7ea0393247b31390c72ada72762e926c8531664ec51323c5fa05784ba6c942d0acef8dded73f7fb4f820c57cdec499a85cfd20574a71651585b884fa06d4e6474d2c6297ab2bb4b91f3940ff4d706c0134d19c257bfa7feb1ae704968d9b73cd2960f828586529b4a6461a6d20ca95244116dca4060b93243065ac8dcda3467598d80ab3782f7c68e5c4163771165771d96c5dba62615479ecaca5c6a4744f2df25634c81b8e17df9c0d5490767d2ccba42167a5cf2d97b81d60a6b5ef3b5f957a81b222a2d384dd9558f533c37ec4a5184556561211b8e46e005ee657eee7a6f61ffd0813a1a8ca72f93c3c08a42e5638d38125064845abc8e93064996a27ae57d366c60514112d187197e8ed9b4dfaf1f160ce7035cdf94946e6649126f333c7523643d2099939539996b17c7c8729e532cd19718e4ae15d50cdd7fb9b434ad771a58ac43331acce45d6bf992b8801b20bb3972837603b133bc2671fd8d2e50b42e031fc5db1b56f66937bb4b338942ce8ae07f5adacfc918acf44998a8c0fb175cff8defd7ac04859a030787189b9cd0ad319cd78d52d78b33080ef847ee9163f96fbc1f4a914c673b8791a481c306c8dfdb8aaa34356b598666ac933873918caf9df5d992cd924ac15f490e313300e41a9034fddb4b5ed9539aa0b94da570c79233d120fcb6332c6022159367ddd252fa3e59721aa63e1c4db724f2a6e11ad69b91fab7983ff170bfe6858a7d3503020608a3d158c2a9798217b4cc97a419b6672fdd3b1ce59021d906eaf57a72aecc5a34c13b75f1cd5b9b42596bd5e0ab7961b392e2dd7a666af0d62e9005c5a4323ef75a894d03e73eadd84426d3a06a1eb4e0b4a4bd82755edbe3895a23558266181b5451023bbbae7b23a350793e573bab785377552a52d56f79e192322e90cd1dd0a7a4412f088dd53b7155eb8d6e63fa27e357231e466c9b28e014b85b3baa26512e631efc40bcb0a46048e15459154a6461dc467f99ccff587355e67d84fe56f0feae0cd6d3ec129d397e768ac0819051132cc36aa7a03dcaac06316b3b35a3385ae7689b81fd88ca6a5a854603369e7cf63aef13661366541ef7bf61243151f884d3331916fbdb1dda3a83d4dd1f253136db1e311838cdbf4fa117e8296f1cc951f8ca63c595103f85d970ead3ae9cdc6edbc71c21611f5ccd9c51396ee38cb118163d9a08f9703a6cd00aea42da9f9e489b9b1e8b00bd3bb1f80582c0812b9be311835217e4c525f6f88e60cba5ca563bede59775551992eb6cc21791840d429037266bff5eb2ef3395c7dfa5ab26c914dbbe0e1365f8cecd29d506ae2a9c6daa595ad45202930c256d4309106aad45170a7f74f2a9f46bf094d12422e4f5cabe3cab0f9746c048f11b16e194e0fde4dfd55b115b6eef1a245219125b6db22c29a07e9af5dba84bc2f4f4c2ce34a46058a578b502bd851a6fec1e8b0ee21228272b705b6dec7a12e8576a50edd4ce46d217a1c563d75b252c0b6d84b9f7af5a2e11277d0b6bd36d799c4687b0bba3eee94eaffe8f25b726d2ecb6433cceecf64e888206396f19444e747e6b100a748669b1562e0ac8dff5c4e9050eed49e24270a15e45980d187208489d1f3927b108d700f61374f1eaaf1a716b3d2c25d98c91b0dfb3f3119873fdc04d6d90f3389f256eb28cd5f035e07f395b6b12e4a2815361dea64dc03d3df5a1c94025620a511268dcd0332de61c6648c3c56f2985029719453a226dcd98bb69d32960cd5c49411466fee507c0a2db2349a6afb2b1a4882104639e30aa607010df8775559596834cbfc406900388607b4f2f6df586d2c476a2b971b262e663514077a1594674056daa0a276c45ed68cfd4ef4e44c5cdf4dfed75b1767594a4a2962e054949c386f27cce1d49367f74aa0781bc54f4fdd552e930fb18f022805833b979db4be3313e9ce819a0c4373b0dd5a39d6102f9599cca6d2ae6e5b93048bee32d127a181e8fd2767e65cc67131f31c68e55f00201a264bca9843070888b5b3eebc902476858cd0115126d65104ef9bb501da550b66208bb85462aa1b189249d46b183ea1cee7f69a60afcee35fb238ac150feed6295baf3b4f853dc15f4a98e6b3a7fc1f07db0bb8f3c00b8047d8064ae6d10ec81677f665d98f6f438a203ef52d67cc57f472f18c997ff778a46168db112c340efde2111c7999d28f6a4855f991b3a9ddc43ea9463661e527a3575635c972305b0b07d4251e8b536097eb069d04c28a4a250f049e4a19099e6beb4f19cb7767263058c72a9c694f873686dd6b661b54ca34d07ebee8033600e9ee4429c8c03720ea1990ad594b3ad8fa55dc3786ca7d510fb612e44850c11c59ecc77dbdd6ca92a450cdee151d3460459a6e2823143da51b0a0f3e260aa035d3fce970dd7bf50d0ea5e07702e56bcda8eba0ac5c5a30e010d911383643cef8bb79811e729f3f38c7b331877bf7c0437d31a5cb17259d5ee59a92ee49ea86e4d8031d5b444c61072d030a4cc27b0fd7952eb1158e70d365b33f354569279762d930e15d3f457cf275eed7cd907d4f51854863cf0bb63d5a8ccae543fadb60371ba69f4881f1dd2b6227d0d0230fed9bb4d5fd531b8e0651917af6349118a905a5225601b81f1b1c5a7b38e798e0201a9c6462a47314dfabf22c99303ad4ff574c398dbcb3c3479c24507799e506696b14f16869be30009e0b9acc0771b821b7c6395ac083d399cb4fe7013a5b919b0b45bccd2c024a0f39ba714292718d147f10bdb6337762f182d3ae19c0cd2822b5c90f8477258bbf18e6dd378a8346592c9b0"}, @NL80211_PMSR_PEER_ATTR_RESP={0x4}, @NL80211_PMSR_PEER_ATTR_RESP={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x9}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x1a4, 0x5, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x14, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x12, 0x1, "954f70be27528385ac8ee92fc23a"}]}, {0x174, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x68, 0x1, "ac37fb8fd2cc80b3691336b3e47fd3faa2a0e079069e3bdf62ab7f50acc5f47e7e971d8981e7fe3adec3eaf791d14cfe414cbf162015d3349e57d84e5389c912591d505b9724b9c4b9ab88c3ed072e86f3eec5d112cda374077fedea7e732993230a719d"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x84, 0x1, "e4f2ddbbbfc16157b5f4b2828eadbf10376164ffb3a27a0ec665593feab53f41eef725ecfbf3296ba656d270808451b2053f9296ca00878b92327d92c40b1b8239f4b0502f644b9fc5896954c863e8ad6832c6808fd5337ad056b9a4cd7bb6dd7e5cd2db77988dd07f38234274c5e4c4ff8e76841588e5e52d1e9b73bc6ca4d8"}, @NL80211_PMSR_PEER_ATTR_RESP={0x84, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x9}, @NL80211_PMSR_RESP_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0xb}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x7fffffff}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x2}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0xd1}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0xfffffba5}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x7c9}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x10}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x226}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0xd4, 0x5, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xcc, 0x1, "190454b8d4c8138514b21aaff477e4b84898bed6bcbd32fc05e39a1e96901f2b8bd4074f075d68ebabd4086c7d3d05be860712e05eb094a682bec132a5385c2e2aef1f5964d68133d92e9603154e6646e8f953accd058eb496ed69c0de179b53c8a8b267952225b2bca4c05edc3c098faf9814420a4ae6917c2cf6a3207739d3e937f8e28b2695c3af3a24c90092c7f6d9b10082b70545c050501caeeb250780bcfdc4720f356a024c98b2f8c83b5bc81d1a43665c39c44dd276c5d27926c198e54e1c9340fb5d37"}]}]}]}]}, 0xd04}, 0x1, 0x0, 0x0, 0x4000000}, 0xc044) (async) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, 0x0, 0x200a40, 0x0) (async) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0x4800) shmctl$auto_IPC_STAT(0x6c65, 0x2, &(0x7f0000000040)={{0x5, 0xee01, 0x0, 0x9, 0xffffffff, 0x2, 0x9}, 0x6099, 0x6, 0x8, 0x9, @raw=0x8000, @inferred=0xffffffffffffffff, 0x4, 0x0, &(0x7f00000001c0)="ecf92d53215b8603b9b849b8d9456407fd3fb2549396a99efa352b2cd2decdacc0263adf1478729bca1d62c1a18e1b5869c0d9caba3b4999c303cca532df4877fe53acffa04808a7c10cd3c7e38bd2fcba5687d24268b71f96b08e4d78c90e2da7a19b595359eff4265e3497a51e945eeaf238ac80844ef60aa789eeba18c1755ba862f535a8e2a9b01214e3b9d312883bced0f5b1e9a15ecb7c42f4d03b3e0eb4b9f3d54c0f5f1f638fe24d918b3a2a1c6344db55328598378550339fed8f46924440ade391f430d70a0cee944056e129294675d667914ceb1a6507cc1ee25a6a54272ea7ca", &(0x7f00000002c0)="831130ce06160b789f5248297cf0bbee00e605ab988aead9fc0950b73ed43f4e4e9e0bb0d00ae9fc79075b23261a364f0d95"}) shmctl$auto_SHM_STAT_ANY(0x7fff, 0xf, 0x0) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)=""/82, 0x52) 51.23469029s ago: executing program 0 (id=1749): unshare$auto(0x40000080) semctl$auto_SETVAL(0x328, 0xd77, 0x10, 0x9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x1c8340, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000003c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) ioctl$auto_FIOQSIZE(r2, 0x5460, 0xff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001380)=""/134, 0x86) sendmsg$auto_MACSEC_CMD_DEL_TXSA(r0, &(0x7f00000056c0)={0x0, 0x0, &(0x7f0000005680)={&(0x7f0000000040)=ANY=[@ANYBLOB="00fd977b501cff009ca971b1d24dce0dd5ae37cdb78a06132fc4b91d1b3ed6c435e0a8889a7b9b06fe8052794cd43f26e4594dd0900eb615e11d8ec421c1c33fef39440bab6db8947cce2643ff1a5837a43cabb452699308c55de59d6ed6965e5035a8024e46e6f02aee2f2fdf91fc0e7e6a3a47", @ANYRES16=r1, @ANYBLOB="2bb22bbd7000fcdbdf25050000000400038008000100", @ANYRES32=0x0], 0x20}, 0x1, 0x0, 0x0, 0x20000050}, 0x40094) statmount$auto(0x0, &(0x7f0000000180)={0x5, 0x1, 0x4000000006, 0x5, 0x14, 0x944, 0x1ffe0, 0xa1b, 0x20006, 0x7, 0x9, 0x6, 0x4000fff, 0x800000a, 0x8001, 0xffffffffffffffff, 0x5, 0x3, 0x40, 0x7, 0x20, 0x309, 0x6, 0x0, 0x7fffffff, 0x200000, 0xa, 0x0, 0xffffffff, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x60f8d49e, 0x4, 0x0, 0x0, 0x0, 0x401, 0x1, 0x0, 0x81be, 0x83, 0x0, 0x7, 0x0, 0x1, 0x7f, 0x800000000004, 0x9, 0x20000000, 0x0, 0x100000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x4d]}, 0x1fb, 0x81) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0xa, 0x2, 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, r4, 0x300000000000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000881}, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) 50.814804948s ago: executing program 0 (id=1752): close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r0 = socket(0x11, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x3, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/smaps_rollup\x00', 0x2400, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) 50.4651187s ago: executing program 33 (id=1752): close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r0 = socket(0x11, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x3, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/smaps_rollup\x00', 0x2400, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) 12.551270746s ago: executing program 4 (id=1881): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001840)={0x924, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0x5f6, 0xa, 0x0, 0x1, [@typed={0x8, 0x9f, 0x0, 0x0, @pid}, @nested={0x14, 0x36, 0x0, 0x1, [@nested={0x4, 0x127}, @nested={0x4, 0xcd}, @typed={0x8, 0x11f, 0x0, 0x0, @u32=0x8}]}, @nested={0x140, 0x2d, 0x0, 0x1, [@typed={0xc, 0xc0, 0x0, 0x0, @u64=0x3}, @generic="54ad82622c3e69150de1b1c96515d641a896c6445200c5435cabdbe7732fdd4a727117e7c710ebbe411def40f4f35726e520d614b244ae4ccdba397b032756e7adb926bb3e2a2f3d9218ec5e70dc59c16f0351b53b39a1936b519ec89f94ab81fbf17c828e99610b39afbb7ed3e650a9b1d2c05acd5a9e5f2646d9548c75f204f071e4552a8962133f3dec05d5f7e5461c25e6f23087f493ce88eba3cc0355982f941ea3efb7ab6d09c65815e99994c99612bed114033bad2fb046d82e0ad2228bb444f3add810d0f87629", @generic="918e50d9b512ab732ba7a924576a55517279ea17901d8a1ae4c6f2bad24d9597cbe803e9f200b410fbb9ae0d557f7692acdc618f32e12bce0c48ab0b0924b90868bd70d4af753e07fa799d36bb5dad0f1ab0c3f6a6", @nested={0x4, 0x6e}, @typed={0x8, 0xd4, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0x97}]}, @nested={0x322, 0x6d, 0x0, 0x1, [@typed={0x8, 0xd7, 0x0, 0x0, @uid}, @typed={0xe0, 0xe, 0x0, 0x0, @binary="4a15e74c3a686d4ab3c68bbb2946aab986c4a41e6cbeef233be6b7054090cdeea483c58470d2c55fcbb9a3f02945c66f9a88d90cc2b5f3b2d2cd6dc0e8668a94cce4f7967538f172fff9e5af90679b543ecfc26dabc808d3ae9c5995971c5ba268fc67bdf8586b4bd2c255163e7de6a0a6bd43bb835bdd24d22bdb12b4354ea6834b45c73d84db1753018c4d49265c7bb03cf680dcb53042aca8a927749af087a99cfb3830a4fab5843ed8c0ffe3f31e37d2011ba1aadfd746e8d1308d466212c42ecc2e7e555517b60b3738e202f014859d0d6d11ed2c673a97fc71"}, @nested={0x4, 0x114}, @nested={0x4, 0x131}, @generic="1b659beb348a620fc735f0b95cf9ea6b0b4c65223ae3db27875e067e8a64fed6f5eda657554e69dd9dbfbb321db78e3fef81574aaedb8c88e64e5b62fc9dab54b70b796e16e6c76afa9b6de50ffcd8b73210a47119b075fe70ada370eec1", @generic="738775ca0a4949fcafb5e839c9d31bd8c0df8a40fbcaa3d34e94ecef47f4945106506cffae26661aafe8078cc47744dd24397aa74089216e2000861df7fc5dc798856f03a7cfcdf80df4490a7bf428ba05854a5d59861a92010e8ed80c7e2edcce3eff1a4dfbe0a891dec9f1de64abb8bf", @nested={0x4, 0xea}, @generic="73d9c7601effe7dd13c27b63f910009b5424be7bac29425a9fd71db78b3e4ec0cdf89e7140b56372855dfe4064a38f2c3af3cbebe62dc6926bc506cc265a019781a055e8f9742f6fc5391b6cbcb3e20dc7b68ce351712ed83cce45ccc5f6ca66be47fa384e503ac362b87f52982ed9a6c87b200c363963bbaa1ea0991f5230d1c16f45044edbbbc38bbd282a8523243a1230f351f40282745a07a687c23e13a7968f818b989178d25a70601ab9f31dc0f35c29f4ecd6b537c1134e7a6bf6b0", @nested={0x4, 0xef}, @typed={0x97, 0xe7, 0x0, 0x0, @binary="0e6a2136dcb6b7b543fdfc69a2dfe0f576e2bcfbfd764cd165e979ae91931658cae2814f4e2284743942d08beadf123a49d8852b47689eb8a10c6c48ff4cc023eebc99af24d3949e30933cbca9457c98586c34d2df55d707c2b141c28d998df781645eed3574a0ffa91f3ce978fe6b81124df9f2f45e9a435c213d100dcfb98358d90efacc7d334a099923ed790a39838e59ad"}]}, @generic="eabf08910ca56196efd3de22de6dfec9c4da52dd30d36c2a1c18a4080ba46bb7530ca54b6c8bace1394defbbff1f72c97b8f609ad0eeb3beb5921196e67644955e55721c0971e6eddacef81bb4d1c56c8bd7da2393ee88449a46beec05ac7b9b210b57b18e18c059abf3b9356ba162573b5c7568dd0b1ad71f167f8ad01bbddbf3e2daaa99493051e7ecbd4065b6efca1a90413cbee5926956dae7fcb91667090591209b5cb8f986b264609b1568a5f2b802f390f0e6c98df92e4f88c7eb99c107079e02b2eb6d4261b86256359e7f7fc1a7e689d82af53db7275205aa62df40e9ff13f560ba491bc9707bcc9850", @generic="e6961aa157c0eb0d8ff99644199abf429dc8b42fb89b07e78b6c95fafa37c0bbe25e79d1c208d41b4dd21f8681fd2a04b7a63ec45e9afe96e21f702f65a60339f3628d45e1ba1ca772685c78b3017f91321c44eb421c8bfa84d8dd5cdd40aa54a550aa6a59acaa4f934e4ab4e3aa6b3406f8e65acd5243eeb8e6580b58dd4d5d91515bff"]}, @OVS_VPORT_ATTR_OPTIONS={0x14, 0x4, 0x0, 0x1, [@nested={0x10, 0x11c, 0x0, 0x1, [@typed={0x4, 0xd}, @typed={0x8, 0x145, 0x0, 0x0, @pid=r0}]}]}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x7}, @OVS_VPORT_ATTR_STATS={0x44, 0x6, {0xe, 0x100000000, 0x5, 0xf9b, 0x4, 0x2e828496, 0x323}}, @OVS_VPORT_ATTR_NETNSID={0x8}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x2}, @OVS_VPORT_ATTR_UPCALL_STATS={0x274, 0xa, 0x0, 0x1, [@generic="c84871273fdf83a0bc74789fda7c6eda5282604e089806d0f7ce93159145606cd50841d5854171582854dcdf11279f994728018cd5b74a05ef27306a88f1ed59a57c85971dcc099c", @nested={0x228, 0xb2, 0x0, 0x1, [@typed={0x8, 0x75, 0x0, 0x0, @u32=0x1}, @generic="56d3cf4285038364a2b8a7dd806a28a5438842b15b10ed84db66ef3e98cfee893ae698df9ef2c2d35605624747fcdcb83e6cac0bdb90e0cf8952f99495d85cfb6ea49ab69265dfb3354dac068cac39f7fe3c63570ce31460e3708466d8507110d6485263e5a12c2cf06a1e45ac31af4c6b5f435f69bc3bf13188c52288ff904ea58449357fa90bf29b0d0f90a56e919cc9e1683f1e7248ab3a326453f0f72d754bce69c595afd974094f0d865567aae8c56adced5ba919bcc3cf9414ccc6de2411e71101fa46fbd5cfc1fdc0b150d21f66ed4a435183453564d99169d02287ab4b5e0b09d2ad0e227c05a93d7d", @generic="566cfcb47f7e86ba575f1874fd2d8afacbb8efd94a7d8fc1983d0ba0849a2ae0185cdf89d475dc61fc8b9ebdfae47018e91794410a6d7acda3ee6c6f22a9d244283cbc5bd29753c7b4e547fb4f4100d8a6fa8cebc761c0976a2f1281ded7625e1a5c1169cae917b321523f7ce53710021a5ff060c10e8e1c2411ad858f1c36528efa6431dd3561c31fd70fb4de13d7a378d950e247d65380e12d1efe06f0c7ee003ce510fc774614f85f6aa712f5766aa56d46d79e586dec2e4ef74fd46305bc98480135d7d243ce924b51d18b41f4f09d96", @generic="0ce10df7fd20713ac0e81ef2a01b00561c10bc6f6206023ec5a978aca5d1b963d68862973efc33d256a33f88dcbe4d628d4d9980004e7185ef07a9b2da0db929f71d6137c5396bf75d7b9393d288e6a8de932106f9aae0a9c56fb02189"]}]}, @OVS_VPORT_ATTR_UPCALL_PID={0x29, 0x5, "e6e6fb7045cf331d84683bd803be904711eca841ef1131d89ef0f8ffea094efb3c97042b77"}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x7}]}, 0x924}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r1 = syz_clone3(&(0x7f0000000100)={0x2100000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x440400, 0x0) prctl$auto_PR_SCHED_CORE_CREATE(0x7044, 0x1, r1, 0xb9ae, 0xfff) prctl$auto(0x6, 0x0, r1, 0x80, 0x9) ioctl$auto_VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000) read$auto(r2, 0x0, 0x80000003fe) madvise$auto(0x0, 0x2000040080000004, 0xe) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000140), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xebe, 0x401, 0x8000) r3 = pipe$auto(&(0x7f0000000080)) r4 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r4, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fsconfig$auto(r4, 0x80000008, 0x0, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x381202, 0x0) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) shutdown$auto(r5, 0x4) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x0, 0x0, 0xa3) ioctl$auto_VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x4, r5}) lstat$auto(0x0, 0x0) unshare$auto(0x40000080) 9.015981308s ago: executing program 4 (id=1891): socket(0x9a910c078196b399, 0x3, 0x88) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x3b) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r3 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000a40), 0x100, 0x0) pread64$auto(r3, 0x0, 0x3, 0x10000) ioctl$auto_TIOCSTI2(r2, 0x5412, 0x0) 5.718816974s ago: executing program 5 (id=1899): mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0xff, 0xfffffffffffffffe) r0 = open$dir(&(0x7f0000000040)='./file1\x00', 0x210000, 0x4) fchownat$auto(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x800) chmod$auto(&(0x7f0000000000)='./file0\x00', 0x2) 5.661517442s ago: executing program 5 (id=1900): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001840)={0x924, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0x5f6, 0xa, 0x0, 0x1, [@typed={0x8, 0x9f, 0x0, 0x0, @pid}, @nested={0x14, 0x36, 0x0, 0x1, [@nested={0x4, 0x127}, @nested={0x4, 0xcd}, @typed={0x8, 0x11f, 0x0, 0x0, @u32=0x8}]}, @nested={0x140, 0x2d, 0x0, 0x1, [@typed={0xc, 0xc0, 0x0, 0x0, @u64=0x3}, @generic="54ad82622c3e69150de1b1c96515d641a896c6445200c5435cabdbe7732fdd4a727117e7c710ebbe411def40f4f35726e520d614b244ae4ccdba397b032756e7adb926bb3e2a2f3d9218ec5e70dc59c16f0351b53b39a1936b519ec89f94ab81fbf17c828e99610b39afbb7ed3e650a9b1d2c05acd5a9e5f2646d9548c75f204f071e4552a8962133f3dec05d5f7e5461c25e6f23087f493ce88eba3cc0355982f941ea3efb7ab6d09c65815e99994c99612bed114033bad2fb046d82e0ad2228bb444f3add810d0f87629", @generic="918e50d9b512ab732ba7a924576a55517279ea17901d8a1ae4c6f2bad24d9597cbe803e9f200b410fbb9ae0d557f7692acdc618f32e12bce0c48ab0b0924b90868bd70d4af753e07fa799d36bb5dad0f1ab0c3f6a6", @nested={0x4, 0x6e}, @typed={0x8, 0xd4, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0x97}]}, @nested={0x322, 0x6d, 0x0, 0x1, [@typed={0x8, 0xd7, 0x0, 0x0, @uid}, @typed={0xe0, 0xe, 0x0, 0x0, @binary="4a15e74c3a686d4ab3c68bbb2946aab986c4a41e6cbeef233be6b7054090cdeea483c58470d2c55fcbb9a3f02945c66f9a88d90cc2b5f3b2d2cd6dc0e8668a94cce4f7967538f172fff9e5af90679b543ecfc26dabc808d3ae9c5995971c5ba268fc67bdf8586b4bd2c255163e7de6a0a6bd43bb835bdd24d22bdb12b4354ea6834b45c73d84db1753018c4d49265c7bb03cf680dcb53042aca8a927749af087a99cfb3830a4fab5843ed8c0ffe3f31e37d2011ba1aadfd746e8d1308d466212c42ecc2e7e555517b60b3738e202f014859d0d6d11ed2c673a97fc71"}, @nested={0x4, 0x114}, @nested={0x4, 0x131}, @generic="1b659beb348a620fc735f0b95cf9ea6b0b4c65223ae3db27875e067e8a64fed6f5eda657554e69dd9dbfbb321db78e3fef81574aaedb8c88e64e5b62fc9dab54b70b796e16e6c76afa9b6de50ffcd8b73210a47119b075fe70ada370eec1", @generic="738775ca0a4949fcafb5e839c9d31bd8c0df8a40fbcaa3d34e94ecef47f4945106506cffae26661aafe8078cc47744dd24397aa74089216e2000861df7fc5dc798856f03a7cfcdf80df4490a7bf428ba05854a5d59861a92010e8ed80c7e2edcce3eff1a4dfbe0a891dec9f1de64abb8bf", @nested={0x4, 0xea}, @generic="73d9c7601effe7dd13c27b63f910009b5424be7bac29425a9fd71db78b3e4ec0cdf89e7140b56372855dfe4064a38f2c3af3cbebe62dc6926bc506cc265a019781a055e8f9742f6fc5391b6cbcb3e20dc7b68ce351712ed83cce45ccc5f6ca66be47fa384e503ac362b87f52982ed9a6c87b200c363963bbaa1ea0991f5230d1c16f45044edbbbc38bbd282a8523243a1230f351f40282745a07a687c23e13a7968f818b989178d25a70601ab9f31dc0f35c29f4ecd6b537c1134e7a6bf6b0", @nested={0x4, 0xef}, @typed={0x97, 0xe7, 0x0, 0x0, @binary="0e6a2136dcb6b7b543fdfc69a2dfe0f576e2bcfbfd764cd165e979ae91931658cae2814f4e2284743942d08beadf123a49d8852b47689eb8a10c6c48ff4cc023eebc99af24d3949e30933cbca9457c98586c34d2df55d707c2b141c28d998df781645eed3574a0ffa91f3ce978fe6b81124df9f2f45e9a435c213d100dcfb98358d90efacc7d334a099923ed790a39838e59ad"}]}, @generic="eabf08910ca56196efd3de22de6dfec9c4da52dd30d36c2a1c18a4080ba46bb7530ca54b6c8bace1394defbbff1f72c97b8f609ad0eeb3beb5921196e67644955e55721c0971e6eddacef81bb4d1c56c8bd7da2393ee88449a46beec05ac7b9b210b57b18e18c059abf3b9356ba162573b5c7568dd0b1ad71f167f8ad01bbddbf3e2daaa99493051e7ecbd4065b6efca1a90413cbee5926956dae7fcb91667090591209b5cb8f986b264609b1568a5f2b802f390f0e6c98df92e4f88c7eb99c107079e02b2eb6d4261b86256359e7f7fc1a7e689d82af53db7275205aa62df40e9ff13f560ba491bc9707bcc9850", @generic="e6961aa157c0eb0d8ff99644199abf429dc8b42fb89b07e78b6c95fafa37c0bbe25e79d1c208d41b4dd21f8681fd2a04b7a63ec45e9afe96e21f702f65a60339f3628d45e1ba1ca772685c78b3017f91321c44eb421c8bfa84d8dd5cdd40aa54a550aa6a59acaa4f934e4ab4e3aa6b3406f8e65acd5243eeb8e6580b58dd4d5d91515bff"]}, @OVS_VPORT_ATTR_OPTIONS={0x14, 0x4, 0x0, 0x1, [@nested={0x10, 0x11c, 0x0, 0x1, [@typed={0x4, 0xd}, @typed={0x8, 0x145, 0x0, 0x0, @pid=r0}]}]}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x7}, @OVS_VPORT_ATTR_STATS={0x44, 0x6, {0xe, 0x100000000, 0x5, 0xf9b, 0x4, 0x2e828496, 0x323}}, @OVS_VPORT_ATTR_NETNSID={0x8}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x2}, @OVS_VPORT_ATTR_UPCALL_STATS={0x274, 0xa, 0x0, 0x1, [@generic="c84871273fdf83a0bc74789fda7c6eda5282604e089806d0f7ce93159145606cd50841d5854171582854dcdf11279f994728018cd5b74a05ef27306a88f1ed59a57c85971dcc099c", @nested={0x228, 0xb2, 0x0, 0x1, [@typed={0x8, 0x75, 0x0, 0x0, @u32=0x1}, @generic="56d3cf4285038364a2b8a7dd806a28a5438842b15b10ed84db66ef3e98cfee893ae698df9ef2c2d35605624747fcdcb83e6cac0bdb90e0cf8952f99495d85cfb6ea49ab69265dfb3354dac068cac39f7fe3c63570ce31460e3708466d8507110d6485263e5a12c2cf06a1e45ac31af4c6b5f435f69bc3bf13188c52288ff904ea58449357fa90bf29b0d0f90a56e919cc9e1683f1e7248ab3a326453f0f72d754bce69c595afd974094f0d865567aae8c56adced5ba919bcc3cf9414ccc6de2411e71101fa46fbd5cfc1fdc0b150d21f66ed4a435183453564d99169d02287ab4b5e0b09d2ad0e227c05a93d7d", @generic="566cfcb47f7e86ba575f1874fd2d8afacbb8efd94a7d8fc1983d0ba0849a2ae0185cdf89d475dc61fc8b9ebdfae47018e91794410a6d7acda3ee6c6f22a9d244283cbc5bd29753c7b4e547fb4f4100d8a6fa8cebc761c0976a2f1281ded7625e1a5c1169cae917b321523f7ce53710021a5ff060c10e8e1c2411ad858f1c36528efa6431dd3561c31fd70fb4de13d7a378d950e247d65380e12d1efe06f0c7ee003ce510fc774614f85f6aa712f5766aa56d46d79e586dec2e4ef74fd46305bc98480135d7d243ce924b51d18b41f4f09d96", @generic="0ce10df7fd20713ac0e81ef2a01b00561c10bc6f6206023ec5a978aca5d1b963d68862973efc33d256a33f88dcbe4d628d4d9980004e7185ef07a9b2da0db929f71d6137c5396bf75d7b9393d288e6a8de932106f9aae0a9c56fb02189"]}]}, @OVS_VPORT_ATTR_UPCALL_PID={0x29, 0x5, "e6e6fb7045cf331d84683bd803be904711eca841ef1131d89ef0f8ffea094efb3c97042b77"}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x7}]}, 0x924}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r1 = syz_clone3(&(0x7f0000000100)={0x2100000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x440400, 0x0) prctl$auto_PR_SCHED_CORE_CREATE(0x7044, 0x1, r1, 0xb9ae, 0xfff) prctl$auto(0x6, 0x0, r1, 0x80, 0x9) ioctl$auto_VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000) read$auto(r2, 0x0, 0x80000003fe) madvise$auto(0x0, 0x2000040080000004, 0xe) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000140), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xebe, 0x401, 0x8000) r3 = pipe$auto(&(0x7f0000000080)) r4 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r4, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fsconfig$auto(r4, 0x80000008, 0x0, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x381202, 0x0) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) shutdown$auto(r5, 0x4) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x0, 0x0, 0xa3) ioctl$auto_VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x4, r5}) lstat$auto(0x0, 0x0) unshare$auto(0x40000080) 5.580135884s ago: executing program 1 (id=1901): r0 = io_uring_setup$auto(0x7, &(0x7f00000001c0)={0x5, 0x5, 0xffffffff, 0xfffffffd, 0x53, 0x2, 0xffffffffffffffff, [0x40009575, 0x7, 0x1], {0x9, 0x8002, 0x201, 0x4, 0x3d, 0x8000001, 0x5530, 0x400, 0x100}, {0x40003, 0x23, 0x5, 0x6, 0x400, 0x58, 0x5, 0x27, 0x40}}) ioctl$auto_SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000000)={0x3, 0xfc0, 0x1d7b, 0x7, 0xf1, 0x4, 0x0, 0x7, 0x2, 0x2, 0x1, 0x10, "ab1b5ea54fdfba0671938af672a210483092d72b2c673dfc0c6603ca145eeedd6cf91f50702d6fdd90928c1b892859f3cde111607d44ceb5"}) r2 = openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_pid\x00', 0x220201, 0x0) write$auto_ftrace_set_event_pid_fops_trace_events(r2, &(0x7f0000000040)="2f5407e72503b817a2e95c30af636c319419b38516ea4c42e7da394939bc1de7e648ab30f02f438341f3b858b8c65b914d33ceb57c3680c8615cb45a17a8b61ae24f81b66884051f3d50ca49a19bd65e28e050bfeaeb3d0ec11b537bb630bee989ae48cdb5a8e23f2ddd1abebce5a1", 0x6f) r3 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xe1, 0xeb1, r2, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24008054}, 0x854) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r2, @ANYRES64=0x0, @ANYRES16=r3, @ANYBLOB="88376768466e7f24c4be61854c7cf8d839d1ff5bc774406faf4a95db4907a48821be2b8f0cd7bf76d9888649abe520623f601733e0611e05f165c26a7fb13cf6730e731e39875d5fdd97896e6a30aef14931a204459e0a18e4bd6c41168000649d5918df7867e08d3412e359d54e97fc41c9d5a045985415c3f547c66f9ea1dc58b9817bb798da0674c52e8b4101d34137e0fd69e502949c81aacc69d45a5fe2ae18c3d40169801249586f6a8af115bc55af7a2128c8fd8290fe8ebd0d97603fbf90e8cb8a58", @ANYRESHEX=r3, @ANYRESDEC=r0, @ANYRES64], 0x14}, 0x1, 0x0, 0x0, 0x24008045}, 0x881) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r6 = socket(0x18, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x40047459, 0x0) ioctl$auto(0x3, 0x541b, r5) mmap$auto(0xc, 0x0, 0x5, 0x14, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram1/queue/read_ahead_kb\x00', 0x181482, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) preadv2$auto(r1, &(0x7f0000000180)={&(0x7f0000000880)="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", 0xc3d}, 0x1, 0x9, 0x7fffffffffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.155398705s ago: executing program 2 (id=1902): mmap$auto(0x4, 0x40000d, 0x4000000000df, 0x9b72, 0x8000000000000003, 0x18000) close_range$auto(0x2, 0x8, 0x0) socket(0x2d, 0x2, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x1, 0x0, 0x0, 0x0, 0x42) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0xa, 0x2, 0x73) sendto$auto(r1, 0x0, 0x402, 0x0, &(0x7f0000000000)=@in={0x2, 0x4e23, @empty}, 0x19) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="0600", @ANYRES16=0x0, @ANYBLOB="010025bd"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='B'], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x4000, &(0x7f0000000100)={&(0x7f0000000080), 0x96bc}, 0x2, &(0x7f0000000380), 0x7, 0x4}, 0x9}, 0x7, 0x4008) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x1a000, 0x0) r2 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x200000c4) getpid() unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) sendmsg$auto_TIPC_NL_NET_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_UNSPEC={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x80) getsockopt$auto(r2, 0x84, 0x7c, 0x0, &(0x7f0000000000)=0x7ffe) syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000b40)=""/99, 0x63) preadv$auto(0x40000000000003, 0x0, 0x6, 0x400000000000008, 0x5) openat$auto_hwflags_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/hwflags\x00', 0x523900, 0x0) read$auto(0x3, 0x0, 0x80) bpf$auto(0x9, 0x0, 0x26) 4.501907736s ago: executing program 1 (id=1903): r0 = socket(0x1b, 0x3, 0x1) madvise$auto(0x0, 0x2000040080000004, 0x4ba7) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000180)='//\xf2\x00', 0x7ffffffd) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media19\x00', 0x28801, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sysinfo$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, r1, 0x8000) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, &(0x7f0000000100)={0x62e, 0x4, 0xfffffffffffffffd, 0x100, 0x5, 0x0}) sendmsg$auto_NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0x314, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "0ad4495f9f042b9601b3bad93c13920650dca7dd082e9ff1fbc8"}, @NL80211_ATTR_FILS_ERP_RRK={0x1b, 0xfc, "8745fc80f8582026ab3f0cb6012bf9e71a71fda139df32"}, @NL80211_ATTR_BEACON_TAIL={0x11e, 0xf, "2dbc3fe907805441c7a70283773267b80a09dbcd6da0eae22de58be6045a4e78b748f3b7940f64aa9b04afe5af24c269351eda0babaf6525a49edfa1f2045854610536f2f9ed02cc6044eb2a92f96c3bcf5941300a117115c5fcdaeee7760249bc9b8c6a39e95b8e57c6d140a3f020d06a02ec73208b26917360036237a93ca66d3b78a90a0b748317e62211b653e74271c95e8a85828fcdbfac03e069411dbea27e6a8836e789e9e2e6ed1e2b32a2e8d217a36edbc4a0c42fc8938468bc63310a5a5a656fe5844cf366557345cd91e37f2fc5e7a50d5f09260bf8b2cefd4d42ce52808c750499c732d5b96f18b4f39a627970b45a9d88b92d5c7a9436ba7fe6853e9ec6ca93b1635337c1a8a1dbc9a4ca67de68156c2f9cab47"}, @NL80211_ATTR_MESH_CONFIG={0x13c, 0x23, 0x0, 0x1, [@nested={0x12d, 0x8e, 0x0, 0x1, [@generic="d147e98d2c5c545b9d2d08dc5822106ef32d72e8d46390a64c638b66dd8cb2997edaeee8ef8ce5996bf8fa0df4deefc7c28f79e95702", @typed={0x30, 0x13b, 0x0, 0x0, @binary="a54167b0b9a36d52540e356e37a486d8db68ec03f9897fd7d2b37f5d6bb081ea1b0644f69eb8ea705be987df"}, @nested={0x4, 0xb}, @generic="e1f275f006271d5e7e16dac129eba0e766b7836106c3181c8d3fbc74060802c8cba3f3f39d111c7ce4dd44ed8227740d3838429a865ce2e9e5723f6bb79369d68983434b4dadfff2c0a83f8f361147c506084b55194a86536ad376fc026c6ccec5c93b7289d5f15ef9e68af0a557d2e039adc85bcce89880ae9eb03e071997c59d5f015b739df16a6b126c3f5aa93433610576f1a905bcf97cb4a251db9686290203621c25f5586ccfefd58e478543bd332c592d46bec1", @typed={0x8, 0x69, 0x0, 0x0, @uid}]}, @typed={0x8, 0xd2, 0x0, 0x0, @pid=r2}]}, @NL80211_ATTR_VHT_CAPABILITY={0x54, 0x9d, "105003ae01fc0d035da00c590839bdfef6b19753900d4e52c24b8446716fa73de042daec1ca29ae336f160c38bc9fdc52e0cc50fa568cb326aa9c35cde43061901ff50dce4fc973f6ed9874338bb4c14"}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x7a74}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x21}]}, 0x314}, 0x1, 0x0, 0x0, 0x800}, 0x10004800) sysfs$auto(0x2, 0x1e, 0x0) fsopen$auto(0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0\x00'}) bpf$auto(0x0, &(0x7f0000000000)=@enable_stats={0x1b}, 0xa3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) msgctl$auto(0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) 4.190083399s ago: executing program 4 (id=1904): setresuid$auto(0x8, 0x8, 0x0) r0 = setfsuid$auto(0xee00) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) fcntl$auto(r1, 0x402, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) fcntl$auto(r2, 0x402, 0x2) close_range$auto(0x2, 0x8, 0x0) setreuid$auto(r0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)=""/173, 0xad) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r4, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={&(0x7f000000c1c0)={0x14, r5, 0x35712d2af9a9dbe3, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4) mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) getegid() waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000280)={@_si_pad}, 0x3, &(0x7f0000000440)={{0x8, 0x6}, {0x8, 0xc5e}, 0x100000001, 0x3, 0x1, 0xf9, 0xfffffffffffffffc, 0x5, 0x6274, 0x9, 0x0, 0xb, 0x35d, 0x439c, 0x9, 0x7}) open(&(0x7f0000000300)='./file0\x00', 0x7ffd, 0x2a) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0101, 0x15) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram1/queue/read_ahead_kb\x00', 0x181482, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) 3.694757503s ago: executing program 5 (id=1905): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu0/cache/index0/id\x00', 0x181400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/114, 0x72) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/netfs/volumes\x00', 0x40080, 0x0) pread64$auto(r3, 0x0, 0x8100000041, 0x413e) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x38, r4, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x10, 0x0, 0x1, [@typed={0x14, 0xd, 0x0, 0x0, @ipv6=@mcast1}, @generic="84abcee2"]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) r6 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0xa0801, 0x0) close_range$auto(0x2, 0x8, 0x0) r8 = socketcall$auto(0x8000, 0x0) r9 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r8) ioctl$auto_KVM_GET_MSRS(r7, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x40000071, 0x400, 0x2}]}) ioctl$auto_dvb_demux_fops_dmxdev(r6, 0x40146f2c, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r6, 0x140146f2c, 0x0) r10 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000005c0), 0x2000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_GSTATUS(r10, 0xc0505405, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x83, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ce424ce38d48b1bfd1be50eaa9cad7f70c1cb151348234777742e49b8cee4a63ef9713affcee14d2c615eed6de02630910fc76a6bf27e56d2ba43da5e29d19a80a002a664615e59c7347f5e17dace5472013efc7aaf1c37dee3c2f54f4ae68e5a4a5ed11ab1abf58e2dab1851125f14c578dcd3e25d7d04d34ce294e9be77e1d7fded51bff2c9311f2d8f9145ec96bb8ffa78aff7605e3a97b25e85677bf05719e069154b0a71f315abcceff9932eef4566333dca3b5fb9bf327e5", @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf25010000000c00078008000180040001800c0002000600000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) 3.694216784s ago: executing program 2 (id=1906): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x5, 0x0) mq_notify$auto(0xffffffffffffffff, &(0x7f0000001940)={@sival_ptr=&(0x7f0000001740), @raw=0x1, 0x2, @_sigev_thread={0x0, 0x0}}) setsockopt$auto(r0, 0x10000000084, 0x9, 0x0, 0x98) 3.511838795s ago: executing program 1 (id=1907): io_uring_setup$auto(0x7, &(0x7f00000001c0)={0x5, 0x5, 0xffffffff, 0xfffffffd, 0x53, 0x2, 0xffffffffffffffff, [0x40009574, 0x7, 0x1], {0x9, 0x2, 0x201, 0x4, 0x3d, 0x8000001, 0x5530, 0x400, 0x100}, {0x40003, 0x23, 0x5, 0x6, 0x400, 0x58, 0x5, 0x27, 0x40}}) ioctl$auto_SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000000)={0x3, 0xfc0, 0x1d7b, 0x7, 0xf1, 0x4, 0x0, 0x7, 0x2, 0x2, 0x1, 0x10, "ab1b5ea54fdfba0671938af672a210483092d72b2c673dfc0c6603ca145eeedd6cf91f50702d6fdd90928c1b892859f3cde111607d44ceb5"}) r1 = openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_pid\x00', 0xa0241, 0x0) write$auto_ftrace_set_event_pid_fops_trace_events(r1, &(0x7f0000000040)="2f5407e72503b817a2e95c30af636c319419b38516ea4c42e7da394939bc1de7e648ab30f02f438341f3b858b8c65b914d33ceb57c3680c8615cb45a17a8b61ae24f81b66884051f3d50ca49a19bd65e28e050bfeaeb3d0ec11b537bb630bee989ae48cdb5a8e23f2ddd1abebce5a1", 0x6f) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xe1, 0xeb1, r1, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8ffffff", @ANYRES16=0x0, @ANYBLOB="00045d5804a500fdff00"/22], 0x1c}, 0x1, 0x0, 0x0, 0x24008054}, 0x854) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) clock_nanosleep$auto(0x2, 0x6, &(0x7f0000000840)={0x0, 0xc025}, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = socket(0x18, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x40047459, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) mmap$auto(0xc, 0x2000a, 0x5, 0x14, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram1/queue/read_ahead_kb\x00', 0x181482, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) preadv2$auto(r0, &(0x7f0000000180)={&(0x7f0000000880)="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", 0xc3d}, 0x1, 0x9, 0x7fffffffffffffff, 0xa) close_range$auto(0x0, 0xfffffffffffff000, 0x0) pwrite64$auto(0xc8, 0x0, 0xfdf2, 0x3a) 3.440756347s ago: executing program 2 (id=1908): mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x4) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffff7fdffe00, &(0x7f0000000140)=';') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socket(0xa, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8842, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r3, 0x0, 0x20) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x3}, 0x3) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/002/001\x00', 0x40101, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_NEW_SEC_DEV(r1, 0x0, 0x44) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x55, 0x0) r4 = socket(0xa, 0x3, 0xff) connect$auto(r4, 0x0, 0x55) ioctl$auto_BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYBLOB, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x41000}, 0x64810) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$auto(0x3, 0x40046201, 0x38) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/loop12/queue/atomic_write_unit_min_bytes\x00', 0x101400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x23, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 2.586615726s ago: executing program 5 (id=1909): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x2) r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) write$auto(r0, &(0x7f0000008d40)='($}-)#@\x00', 0x3) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x10cc3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r1 = socket(0xf, 0xa, 0xf) setsockopt$auto(r1, 0x1, 0xc, 0x0, 0x7fffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) r2 = socket(0x2d, 0x2, 0x0) sendmsg$auto_SMC_NETLINK_ENABLE_SEID(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x20040804) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189082, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0) 2.430942873s ago: executing program 1 (id=1910): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000001bc0)="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", 0xd1a) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) ustat$auto(0x8, &(0x7f0000000080)={0x5, 0x5, "045186084b5e", "e80624ebb23f"}) read$auto_proc_iter_file_ops_compat_inode(r2, 0x0, 0x0) write$auto(r1, &(0x7f0000000400)='/\xff\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x100000a3d9) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r2, 0xfb85, 0x0, 0x9) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) shmctl$auto(0x0, 0xd, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D1\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000140), 0x8a700, 0x0) ioctl$auto(0x3, 0xc040563e, 0x38) socket(0x2, 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r3, 0x8000) memfd_create$auto(0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) 2.284857907s ago: executing program 2 (id=1911): openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) mremap$auto(0x110c230000, 0x0, 0x101, 0x3, 0x8000000000) close_range$auto(0x2, 0x8000, 0x0) socket(0xf, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/rose9/queues/tx-0/xps_rxqs\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)=""/58, 0x3a) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x6, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, 0x0, 0x1013) poll$auto(0x0, 0x7f, 0x9) socket(0x25, 0x5, 0x6) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x101000, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000000c0)={"58f99464", 0x8, 0x6, 0x1, 0x3, 0x5, "4bb69ec4b3f4c14539898e4c5682f5", "347f00", "a630df9d", "a0ed9959", ["cd9196b8fe1a8a7eb90401a9", "2f9c30017721de33c560b95a", "d3fe6c55a78d6932211c9b69", "ea334f1f1e5e27a1320d6edb"]}) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000048c0)='/dev/dsp1\x00', 0x20000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000180)="6da6b940dfe114cacac8b7cca871a393aaf922f69708e077a3ff54d760f973198c7f36202c9afdaf7bc2eb57e0") close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) 2.091579829s ago: executing program 4 (id=1912): mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) clock_gettime$auto(0xfffffffffffffff0, 0x0) clock_gettime$auto(0xfffffffffffffbfb, 0xfffffffffffffffc) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyy2\x00', 0x100, 0x0) r1 = socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x11, 0x2, 0x73) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x7e1b, 0x0) r4 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000140), r1) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYRES16=r3, @ANYRES16=r4, @ANYBLOB="000228bd7000fcdbdf2503000000080003000900000005000500000c0000000800078004007d80080003000000000005000500030000000500050002000000605c45ec887162cadd6c4bb456f6b62e36b0e291217448ec678723f499894d52d0bf4974ffe04b177fe9989cee09c2536ca2f93fe6d9a9535ab223a917a4b1aed6b612b4682d922e299024ff03b6b726bf79958d3f062b8aa3d82b8336d07db796a69a0010f6bd14673921bfe3abc188e24fb69678181128481b91b853f632e61d7be1b49d3f5dcecf724aa41b61781ee30a89cf54e51a57fb799746"], 0x4c}, 0x1, 0x0, 0x0, 0x200440c3}, 0xc0) socket(0x2, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) vmsplice$auto(r5, &(0x7f00000000c0)={&(0x7f0000000040)="cb6c3737a9d0db84a68dd34a2edd280a6d2d8b2c3abdcb3a87d163ea5c394ede66df271085ff025be3123674cf58fe2a1bf3e870ae17b16758858df080f1a2ee0698c4648caa1338edd06917597c34e1180d", 0x5}, 0x1, 0x3) socketpair$auto(0x1, 0x5, 0x100000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r6, 0x5423, 0x0) mknod$auto(0x0, 0x1, 0x4) lstat$auto(0x0, 0x0) ioctl$auto(0x3, 0x5420, 0x38) read$auto(r0, 0x0, 0x77) ioctl$auto(0x3, 0x402c542c, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) mq_open$auto(0x0, 0xde8, 0xb, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.010812116s ago: executing program 2 (id=1913): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/002/001\x00', 0x40101, 0x0) poll$auto(&(0x7f0000000380)={r0, 0xffff, 0x2a}, 0xffff, 0x4) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20000, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4004ae8b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$auto_RTC_PARAM_GET(r3, 0x40187013, &(0x7f0000000040)={0x0, @uvalue=0x2, 0x9}) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x80000, 0x0) syz_clone(0x0, &(0x7f00000002c0)="f664a0af", 0x4, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000001f80)) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x104, 0x6, 0x3}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) statmount$auto(0x0, &(0x7f0000000400)={0x80008, 0x1, 0x9, 0x3, 0xb, 0x940, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x3, 0x4, 0xb0, 0x7, 0x6, 0x3, 0x5, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3]}, 0x1fe, 0x2000081) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) unshare$auto(0x40000080) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1e2142, 0x0) sendfile$auto(r4, r4, 0x0, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) unshare$auto(0x40000080) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r5, r6, 0x0, 0x1000200) sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYBLOB="01002dbd7000fbdbdf250200000008000700", @ANYRES32, @ANYBLOB='\b'], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) 1.441415201s ago: executing program 5 (id=1914): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker\x00', 0x301, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mprotect$auto(0x200000000000, 0x806124, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r0, 0x17, &(0x7f0000000000), 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x1b) close_range$auto(0x2, 0xa, 0x0) openat$auto_hpet_fops_hpet(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x2, 0xe7bd, 0x1b) mbind$auto(0x8, 0x2091d1, 0x4, 0x0, 0x6, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) ioperm$auto(0x7, 0x5ad2, 0x8) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/veth1_vlan/stable_secret\x00', 0x20200, 0x0) preadv$auto(r1, &(0x7f0000000240)={0x0, 0x6}, 0xc, 0x9, 0x400) socket(0xa, 0x2, 0x0) socket(0xa, 0x3, 0xff) 887.628673ms ago: executing program 1 (id=1915): openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x101501, 0x0) (async) write$auto(0x3, 0x0, 0x81) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x10, 0x3, 0x6) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptyt2\x00', 0x400800, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x1ac}}, 0x801) (async) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = ioctl$auto_TUNSETVNETLE2(r0, 0x400454dc, &(0x7f0000000240)=0x8001) sendmsg$auto_NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES8=r2, @ANYRES16=r1, @ANYBLOB="010001f00400ffdbdf251d6f097c08000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20040084) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cec9\x00', 0x520c0, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000080)={"4532b34b", 0xc, 0xff, 0x5, 0x869, 0x7, "d97cd2a355ad6e1a1d0e49749352a7", "d99acbb7", "45973052", "c3875720", ["43a116f6d253f44a10f92b53", "809e49f838a00770409cf698", "8010633638e0cc9946ee116b", "bd782a8efa6c333a4edf9193"]}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) fchmod$auto(0xffffffffffffffff, 0x8) r5 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000001f00), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_ADD(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0100dcb7e6c7ece9ab8802000000"], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x40d0) (async) mmap$auto(0x0, 0x8000, 0x3, 0xeb1, 0xfffffffffffffffa, 0x10000000008000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x10, &(0x7f0000000000)={0x0, 0x10}, 0x2, 0x0, 0xe, 0x4}, 0x8}, 0x200, 0xb07e) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x119) (async) socket(0x2, 0x80802, 0x0) close_range$auto(0x2, 0xa, 0x0) (async) socket(0x18, 0xa, 0x1) (async) socket(0xa, 0x2, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01ffacf14496df29bbac80514fc50028d07000b9dbdf250f000000080003008c46c292b6bf5b58ff89ebfdebefd22752b7161dcd99e283eeb89ebb195f560ba08335b4685ec35892f8735f3507eb59fcb0de46309e04d3378b0f5de909ed711f12fb3d4e41f2251223b2ef01d7be0211bd9251ce0e6c364362a0693b9e2194bb2bbf6ba18b761ff7573fc460f25eda31a34d46506d7980aff1174a12b70470f7481243971ca0d52adc4823d9abdb0d9f77c59f4e96820b5e76ee55d65cf4e10e57cf0386dd5e6d11516c5cddcf8540d66c1ef9a6d29ff5d47b9040389c1f5b142a71e34e1f62f471e9b12a4c6711af965c11", @ANYRES32=r8, @ANYBLOB="0500370001000000"], 0x24}, 0x1, 0x0, 0x0, 0x44415}, 0x20000000) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) 883.826208ms ago: executing program 4 (id=1916): openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/block/nbd11/sched/async_depth\x00', 0x2000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2400, 0x0) socket(0x2, 0x3, 0x1) setsockopt$auto(0x3, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="72010000", @ANYBLOB='T'], 0x1ac}}, 0x40800) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x5, 0x2000a, 0x101, 0x10000000020ebe, 0x40000000000a5, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x100, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC1D0p\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2b, 0x1, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/ip6gre0/iflink\x00', 0x82500, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000340)=""/106, 0x6a) setsockopt$auto(0x3, 0x11e, 0x1, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x191942, 0x0) r3 = socket(0x10, 0x2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd14\x00', 0x0, 0x0) sendmsg$auto_NFC_CMD_DEV_UP(r1, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="93c1fe7f52ff8ee318fb020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x2b8}, 0x1, 0x0, 0x0, 0x1000}, 0x4008000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ttyS2\x00', 0x101e81, 0x0) writev$auto(r4, &(0x7f0000000080)={&(0x7f0000000000)="286d6175a30b45199cebab78", 0x200}, 0x3) statmount$auto(0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x7, 0x3b, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x9, 0x3, 0xfffc, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x4008) 727.163227ms ago: executing program 5 (id=1917): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000480), 0xffffffffffffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) r2 = waitid$auto_P_PGID(0x2, 0xffffffffffffffff, &(0x7f0000000340)={@siginfo_0_0={0x1ff, 0x2, 0x8000, @_sigsys={&(0x7f0000000240)="b089237097b88e40064c533331bb0ef0f3871bb6271d7c7ebbe31d346d27fcd831cda35f211ad5adaa038e646c925d67cb31086631f969ce129b0382463779415e39b70fdf797cdb0eca20afbf1e054a9d1bf9b9fa44a34ce03f43ec9f1a78f74d9ccfca985bd58f840af3597c60703d4620907775a0081ef431f8be10d6c7e35ff52ec27aa3d1eadd29fe6529475538b872e0ee7197cf928e9dff0c41514b651f787dcf714aff7f2ec83d8412b0ad30a25b00075552903ebc130811936d5bd79f1741067769d3a50baa767782d8d0426cfc0d", 0x9, 0xfffffffc}}}, 0x3ff, &(0x7f00000003c0)={{0x3, 0x6}, {0x6, 0x10000}, 0xc4, 0x5, 0x7f, 0xffffffffffffffff, 0x9, 0x5, 0x3ff, 0x6, 0x8, 0x978, 0x8, 0x6, 0x1, 0x819b}) kcmp$auto_KCMP_FILE(r2, 0xffffffffffffffff, 0x0, r1, r0) keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000000e) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) unshare$auto(0x40000080) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0) statmount$auto(0x0, &(0x7f00000004c0)={0x0, 0x2, 0x5ae, 0x5, 0x7, 0x6, 0x10000, 0x1, 0xa, 0x8, 0x6, 0x9, 0x5, 0x4, 0x1ff, 0x2, 0x8, 0x10000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000003]}, 0x6, 0x1000000) bpf$auto(0x12, &(0x7f0000000040)=@link_detach, 0x26) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D2\x00', 0x80980, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000000)="b2", 0x1) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r0, r4, 0x0, 0x1) 398.777763ms ago: executing program 1 (id=1918): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu0/cache/index0/id\x00', 0x181400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/114, 0x72) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/netfs/volumes\x00', 0x40080, 0x0) pread64$auto(r3, 0x0, 0x8100000041, 0x413e) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x38, r4, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x10, 0x0, 0x1, [@typed={0x14, 0xd, 0x0, 0x0, @ipv6=@mcast1}, @generic="84abcee2"]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) r6 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0xa0801, 0x0) close_range$auto(0x2, 0x8, 0x0) r8 = socketcall$auto(0x8000, 0x0) r9 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r8) ioctl$auto_KVM_GET_MSRS(r7, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x40000071, 0x400, 0x2}]}) ioctl$auto_dvb_demux_fops_dmxdev(r6, 0x40146f2c, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r6, 0x140146f2c, 0x0) r10 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000005c0), 0x2000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_GSTATUS(r10, 0xc0505405, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x83, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ce424ce38d48b1bfd1be50eaa9cad7f70c1cb151348234777742e49b8cee4a63ef9713affcee14d2c615eed6de02630910fc76a6bf27e56d2ba43da5e29d19a80a002a664615e59c7347f5e17dace5472013efc7aaf1c37dee3c2f54f4ae68e5a4a5ed11ab1abf58e2dab1851125f14c578dcd3e25d7d04d34ce294e9be77e1d7fded51bff2c9311f2d8f9145ec96bb8ffa78aff7605e3a97b25e85677bf05719e069154b0a71f315abcceff9932eef4566333dca3b5fb9bf327e5", @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf25010000000c00078008000180040001800c0002000600000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) 892.327µs ago: executing program 4 (id=1919): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setreuid$auto(0x81, 0xadaa) r0 = socket(0x2, 0x1, 0x0) getsockopt$auto(r0, 0x0, 0x43, 0x0, &(0x7f00000000c0)=0x1e) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x10001, 0xc, 0xc05, 0xffffffffffffffff, [0x7fd, 0x1001, 0x8], {0x9, 0x1, 0x6, 0x0, 0x420, 0x1001, 0x3fdc, 0x3, 0x5}, {0x2, 0x140, 0x54ed, 0x0, 0x101, 0xff, 0x7, 0xa, 0x3}}) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="000329bd7000fedbdf250900000008000c000100008008000300", @ANYRES32, @ANYBLOB="08002c000001000008001d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000828}, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = open(0x0, 0x22040, 0x75) socket(0x10, 0x2, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000300)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x4) mmap$auto(0xc, 0x4, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300000000000) mmap$auto(0x444e, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(0xffffffffffffffff, 0x541c, r4) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) readv$auto(0x3, 0x0, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x0, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) 0s ago: executing program 2 (id=1927): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000) msync$auto(0x0, 0x58fa, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x60400, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x111042, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/tty/tty55/power/runtime_suspended_time\x00', 0xd8020, 0x0) select$auto(0x11, 0x0, 0x0, 0x0, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x640, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) socket(0x6, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="13000000", @ANYRES16=r1, @ANYBLOB="01"], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000800) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000280), r3) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000440), 0xffffffffffffffff) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/usb/drivers/redrat3/remove_id\x00', 0x2, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000500)='/proc/fs/cifs/traceSMB\x00', 0xea102, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000180)=""/147, 0x93) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000300)=ANY=[@ANYBLOB="000000fb", @ANYBLOB="19ba435e1d429cd928fc64dcc3700757d78da7a5ca1f7701e2cb061dd562e0d4df669eaa0ca2a617b82cd9cc57da2f0b7d1b580fb4b6afd40853f88ffb69814c8537d3a00a01be5d1d602ace31a42b31c5aae8e35c7f4c1e3218761b00494a3b9e486bd82efe25f4222dfa2223bfcc36fd8ef8e8bf534e9bfb8aac622554654402c3e87847", @ANYRESDEC, @ANYRES32=r5, @ANYBLOB="0800010000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x810) kernel console output (not intermixed with test programs): 00000000000 R09: 0000000000000000 [ 461.051052][T12381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.051072][T12381] R13: 00007f035cde6038 R14: 00007f035cde5fa0 R15: 00007ffd24493178 [ 461.051118][T12381] [ 461.051293][T12381] input: 00 [ 461.051293][T12381] as /devices/virtual/input/input22 [ 462.614874][T12403] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1210'. [ 462.862867][T12408] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 463.034406][ T5862] Process accounting resumed [ 463.064384][T12418] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 464.143247][T12435] FAULT_INJECTION: forcing a failure. [ 464.143247][T12435] name failslab, interval 1, probability 0, space 0, times 0 [ 464.388027][T12435] CPU: 1 UID: 0 PID: 12435 Comm: syz.1.1215 Tainted: G U W I L XTNJ syzkaller #0 PREEMPT(full) [ 464.388096][T12435] Tainted: [U]=USER, [W]=WARN, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 464.388116][T12435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 464.388134][T12435] Call Trace: [ 464.388143][T12435] [ 464.388155][T12435] dump_stack_lvl+0x16c/0x1f0 [ 464.388206][T12435] should_fail_ex+0x512/0x640 [ 464.388256][T12435] ? __kmalloc_noprof+0xca/0x880 [ 464.388299][T12435] should_failslab+0xc2/0x120 [ 464.388331][T12435] __kmalloc_noprof+0xdd/0x880 [ 464.388364][T12435] ? lockdep_init_map_type+0x5c/0x280 [ 464.388401][T12435] ? xfrm_hash_alloc+0xd1/0x100 [ 464.388449][T12435] ? xfrm_hash_alloc+0xd1/0x100 [ 464.388486][T12435] xfrm_hash_alloc+0xd1/0x100 [ 464.388525][T12435] xfrm_net_init+0x35f/0xcc0 [ 464.388584][T12435] ? __pfx_xfrm_net_init+0x10/0x10 [ 464.388623][T12435] ops_init+0x1e2/0x5f0 [ 464.388680][T12435] setup_net+0x100/0x390 [ 464.388729][T12435] ? __pfx_setup_net+0x10/0x10 [ 464.388780][T12435] ? debug_mutex_init+0x37/0x70 [ 464.388829][T12435] copy_net_ns+0x2f8/0x690 [ 464.388866][T12435] create_new_namespaces+0x3ea/0xa90 [ 464.388922][T12435] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 464.388975][T12435] ksys_unshare+0x45b/0xa40 [ 464.389007][T12435] ? __pfx_ksys_unshare+0x10/0x10 [ 464.389045][T12435] ? xfd_validate_state+0x61/0x180 [ 464.389093][T12435] __x64_sys_unshare+0x31/0x40 [ 464.389125][T12435] do_syscall_64+0xcd/0xfa0 [ 464.389176][T12435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.389208][T12435] RIP: 0033:0x7f035cb8eec9 [ 464.389231][T12435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.389260][T12435] RSP: 002b:00007f035d93e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 464.389288][T12435] RAX: ffffffffffffffda RBX: 00007f035cde6180 RCX: 00007f035cb8eec9 [ 464.389309][T12435] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 464.389328][T12435] RBP: 00007f035cc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 464.389346][T12435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.389363][T12435] R13: 00007f035cde6218 R14: 00007f035cde6180 R15: 00007ffd24493178 [ 464.389407][T12435] [ 464.620620][ C1] vkms_vblank_simulate: vblank timer overrun [ 466.188695][T12446] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.4.1217: bg 7: bad block bitmap checksum [ 466.324575][T12446] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 74 [ 466.528673][T12460] netlink: 'syz.0.1218': attribute type 1 has an invalid length. [ 466.586464][T12446] EXT4-fs (sda1): This should not happen!! Data will be lost [ 466.586464][T12446] [ 466.926337][T12492] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 467.294131][T12499] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1223'. [ 467.907335][T12500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1222'. [ 468.128088][T12516] qrtr: Invalid version 0 [ 468.149129][T12490] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.1221: iget: checksum invalid [ 468.168177][T12490] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 468.180029][T12490] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.1221: iget: checksum invalid [ 468.217715][T12490] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 468.403615][T12490] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.1221: iget: checksum invalid [ 468.596767][T12490] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 468.638967][T12490] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.1221: iget: checksum invalid [ 468.720615][T12490] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 468.813690][T12490] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 468.900272][T12490] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 468.962788][T12516] FAULT_INJECTION: forcing a failure. [ 468.962788][T12516] name failslab, interval 1, probability 0, space 0, times 0 [ 469.020748][T12516] CPU: 1 UID: 0 PID: 12516 Comm: syz.0.1224 Tainted: G U W I L XTNJ syzkaller #0 PREEMPT(full) [ 469.020828][T12516] Tainted: [U]=USER, [W]=WARN, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 469.020852][T12516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 469.020873][T12516] Call Trace: [ 469.020884][T12516] [ 469.020896][T12516] dump_stack_lvl+0x16c/0x1f0 [ 469.020954][T12516] should_fail_ex+0x512/0x640 [ 469.021008][T12516] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 469.021059][T12516] should_failslab+0xc2/0x120 [ 469.021093][T12516] kmem_cache_alloc_noprof+0x75/0x6e0 [ 469.021140][T12516] ? __proc_create+0x2ce/0x8e0 [ 469.021195][T12516] ? __proc_create+0x2ce/0x8e0 [ 469.021229][T12516] __proc_create+0x2ce/0x8e0 [ 469.021268][T12516] ? __pfx___proc_create+0x10/0x10 [ 469.021308][T12516] ? kfree+0x2b8/0x6d0 [ 469.021360][T12516] proc_create_reg+0x7d/0x180 [ 469.021403][T12516] proc_create_data+0x86/0x110 [ 469.021443][T12516] ? __pfx_proc_create_data+0x10/0x10 [ 469.021487][T12516] ? net_generic+0xf4/0x2a0 [ 469.021536][T12516] nfs_net_init+0x11a/0x340 [ 469.021569][T12516] ? __pfx_nfs_net_init+0x10/0x10 [ 469.021601][T12516] ops_init+0x1e2/0x5f0 [ 469.021659][T12516] setup_net+0x100/0x390 [ 469.021713][T12516] ? __pfx_setup_net+0x10/0x10 [ 469.021769][T12516] ? debug_mutex_init+0x37/0x70 [ 469.021822][T12516] copy_net_ns+0x2f8/0x690 [ 469.021861][T12516] create_new_namespaces+0x3ea/0xa90 [ 469.021923][T12516] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 469.021978][T12516] ksys_unshare+0x45b/0xa40 [ 469.022010][T12516] ? native_tss_update_io_bitmap+0x3e1/0x770 [ 469.022053][T12516] ? __pfx_ksys_unshare+0x10/0x10 [ 469.022088][T12516] ? xfd_validate_state+0x61/0x180 [ 469.022137][T12516] __x64_sys_unshare+0x31/0x40 [ 469.022179][T12516] do_syscall_64+0xcd/0xfa0 [ 469.022233][T12516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.022268][T12516] RIP: 0033:0x7f745c78eec9 [ 469.022294][T12516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.022329][T12516] RSP: 002b:00007f745d5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 469.022361][T12516] RAX: ffffffffffffffda RBX: 00007f745c9e5fa0 RCX: 00007f745c78eec9 [ 469.022384][T12516] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 469.022404][T12516] RBP: 00007f745c811f91 R08: 0000000000000000 R09: 0000000000000000 [ 469.022425][T12516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.022445][T12516] R13: 00007f745c9e6038 R14: 00007f745c9e5fa0 R15: 00007fff4358ed08 [ 469.022491][T12516] [ 469.109637][T12527] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1225'. [ 469.113399][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.301807][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.307840][ C1] hrtimer: interrupt took 283760088 ns [ 469.407889][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.564466][T12529] ALSA: mixer_oss: invalid OSS volume '0' [ 469.570242][T12529] ALSA: mixer_oss: invalid OSS volume 'PHONET' [ 469.576956][T12529] ALSA: mixer_oss: invalid OSS volume 'L2TP/IPv6' [ 470.303054][T12541] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 470.318954][T12541] EXT4-fs (sda1): This should not happen!! Data will be lost [ 470.318954][T12541] [ 472.229805][T12572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1232'. [ 472.689216][ T30] audit: type=1800 audit(1760415383.931:29): pid=12584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1235" name="lu_gp_id" dev="configfs" ino=40243 res=0 errno=0 [ 474.043074][T12610] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 474.176046][T12615] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 477.079995][T12645] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 477.152724][T12645] EXT4-fs (sda1): This should not happen!! Data will be lost [ 477.152724][T12645] [ 477.682384][T12671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1249'. [ 477.711424][T12672] netlink: 'syz.1.1249': attribute type 1 has an invalid length. [ 477.719326][T12672] netlink: 'syz.1.1249': attribute type 6 has an invalid length. [ 479.218999][T12708] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 479.250841][T12707] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 479.271418][T12704] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 479.364298][T12707] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 479.372779][T12708] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 479.394738][T12706] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 479.407678][T12706] EXT4-fs (sda1): This should not happen!! Data will be lost [ 479.407678][T12706] [ 480.316718][T12734] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 481.392295][T12766] ICMPv6: process `syz.1.1265' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 481.952964][ T30] audit: type=1800 audit(4294967304.770:30): pid=12777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1266" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 482.094409][T12764] ICMPv6: process `syz.4.1264' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 482.280117][T12784] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 482.293437][T12784] EXT4-fs (sda1): This should not happen!! Data will be lost [ 482.293437][T12784] [ 484.843884][T12838] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 484.873402][T12838] EXT4-fs (sda1): This should not happen!! Data will be lost [ 484.873402][T12838] [ 485.807944][T12865] syz.1.1284 (12865): /proc/12864/oom_adj is deprecated, please use /proc/12864/oom_score_adj instead. [ 485.821407][T12865] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1284'. [ 485.838975][T12865] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.892938][T12865] bridge_slave_1 (unregistering): left allmulticast mode [ 485.904793][T12865] bridge_slave_1 (unregistering): left promiscuous mode [ 485.917175][T12865] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.219368][T12878] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 486.427820][T12863] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 486.453864][T12863] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 486.478009][T12863] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 486.484295][T12863] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 487.431311][T12910] openvswitch: netlink: Message has 8 unknown bytes. [ 487.628562][T12921] FAULT_INJECTION: forcing a failure. [ 487.628562][T12921] name failslab, interval 1, probability 0, space 0, times 0 [ 487.691082][T12921] CPU: 0 UID: 0 PID: 12921 Comm: syz.4.1298 Tainted: G U W I L XTNJ syzkaller #0 PREEMPT(full) [ 487.691156][T12921] Tainted: [U]=USER, [W]=WARN, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 487.691177][T12921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 487.691197][T12921] Call Trace: [ 487.691208][T12921] [ 487.691220][T12921] dump_stack_lvl+0x16c/0x1f0 [ 487.691277][T12921] should_fail_ex+0x512/0x640 [ 487.691339][T12921] ? __kmalloc_noprof+0xca/0x880 [ 487.691386][T12921] should_failslab+0xc2/0x120 [ 487.691421][T12921] __kmalloc_noprof+0xdd/0x880 [ 487.691463][T12921] ? devlink_fmsg_put_name+0xf0/0x3f0 [ 487.691526][T12921] ? devlink_fmsg_put_name+0xf0/0x3f0 [ 487.691577][T12921] devlink_fmsg_put_name+0xf0/0x3f0 [ 487.691637][T12921] devlink_fmsg_bool_pair_put+0xff/0x2f0 [ 487.691674][T12921] ? __pfx_devlink_fmsg_bool_pair_put+0x10/0x10 [ 487.691711][T12921] ? __kasan_kmalloc+0xaa/0xb0 [ 487.691764][T12921] ? devlink_fmsg_nest_common.part.0+0xcd/0x1e0 [ 487.691806][T12921] nsim_dev_dummy_fmsg_put+0x17e/0x1e0 [ 487.691857][T12921] devlink_health_do_dump+0x243/0x620 [ 487.691901][T12921] devlink_health_report+0x6c3/0xb00 [ 487.691946][T12921] ? __pfx_devlink_health_report+0x10/0x10 [ 487.691990][T12921] ? _copy_from_user+0x59/0xd0 [ 487.692027][T12921] nsim_dev_health_break_write+0x166/0x210 [ 487.692076][T12921] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 487.692137][T12921] full_proxy_write+0x131/0x1a0 [ 487.692172][T12921] ? __pfx_full_proxy_write+0x10/0x10 [ 487.692202][T12921] vfs_write+0x2a0/0x11d0 [ 487.692257][T12921] ? __pfx___mutex_lock+0x10/0x10 [ 487.692310][T12921] ? __pfx_vfs_write+0x10/0x10 [ 487.692377][T12921] ? __fget_files+0x20e/0x3c0 [ 487.692435][T12921] ksys_write+0x12a/0x250 [ 487.692483][T12921] ? __pfx_ksys_write+0x10/0x10 [ 487.692544][T12921] do_syscall_64+0xcd/0xfa0 [ 487.692597][T12921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.692630][T12921] RIP: 0033:0x7fce32f8eec9 [ 487.692657][T12921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.692690][T12921] RSP: 002b:00007fce33e8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 487.692723][T12921] RAX: ffffffffffffffda RBX: 00007fce331e6090 RCX: 00007fce32f8eec9 [ 487.692745][T12921] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000005 [ 487.692765][T12921] RBP: 00007fce33011f91 R08: 0000000000000000 R09: 0000000000000000 [ 487.692785][T12921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.692805][T12921] R13: 00007fce331e6128 R14: 00007fce331e6090 R15: 00007ffec3fef568 [ 487.692852][T12921] [ 488.038543][T12057] Bluetooth: hci1: command 0x0c1a tx timeout [ 488.220239][T12929] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 488.270567][T12929] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 488.482025][T12936] FAULT_INJECTION: forcing a failure. [ 488.482025][T12936] name failslab, interval 1, probability 0, space 0, times 0 [ 488.496716][T12936] CPU: 1 UID: 0 PID: 12936 Comm: syz.4.1305 Tainted: G U W I L XTNJ syzkaller #0 PREEMPT(full) [ 488.496789][T12936] Tainted: [U]=USER, [W]=WARN, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 488.496810][T12936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 488.496829][T12936] Call Trace: [ 488.496840][T12936] [ 488.496851][T12936] dump_stack_lvl+0x16c/0x1f0 [ 488.496906][T12936] should_fail_ex+0x512/0x640 [ 488.496957][T12936] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 488.497005][T12936] should_failslab+0xc2/0x120 [ 488.497036][T12936] kmem_cache_alloc_noprof+0x75/0x6e0 [ 488.497080][T12936] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 488.497110][T12936] ? acpi_ut_create_generic_state+0x61/0xc0 [ 488.497170][T12936] ? acpi_ut_create_generic_state+0x61/0xc0 [ 488.497220][T12936] acpi_ut_create_generic_state+0x61/0xc0 [ 488.497284][T12936] acpi_ps_init_scope+0x3a/0x240 [ 488.497319][T12936] acpi_ds_init_aml_walk+0x1f6/0x680 [ 488.497378][T12936] acpi_ps_execute_method+0x39d/0xe90 [ 488.497425][T12936] acpi_ns_evaluate+0x98c/0x16d0 [ 488.497475][T12936] acpi_evaluate_object+0x4ca/0xdf0 [ 488.497533][T12936] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 488.497588][T12936] ? __mutex_trylock_common+0xe9/0x250 [ 488.497633][T12936] acpi_evaluate_integer+0xdd/0x200 [ 488.497673][T12936] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 488.497727][T12936] ? __pfx_status_show+0x10/0x10 [ 488.497781][T12936] status_show+0xa0/0x120 [ 488.497832][T12936] ? __pfx_status_show+0x10/0x10 [ 488.497891][T12936] dev_attr_show+0x56/0xe0 [ 488.497952][T12936] ? __pfx_dev_attr_show+0x10/0x10 [ 488.498008][T12936] sysfs_kf_seq_show+0x216/0x3e0 [ 488.498074][T12936] seq_read_iter+0x50e/0x12d0 [ 488.498141][T12936] kernfs_fop_read_iter+0x46c/0x610 [ 488.498190][T12936] ? rw_verify_area+0xcf/0x6c0 [ 488.498270][T12936] vfs_read+0x8bf/0xcf0 [ 488.498330][T12936] ? __pfx___mutex_lock+0x10/0x10 [ 488.498391][T12936] ? __pfx_vfs_read+0x10/0x10 [ 488.498476][T12936] ksys_read+0x12a/0x250 [ 488.498527][T12936] ? __pfx_ksys_read+0x10/0x10 [ 488.498593][T12936] do_syscall_64+0xcd/0xfa0 [ 488.498653][T12936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.498691][T12936] RIP: 0033:0x7fce32f8eec9 [ 488.498720][T12936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.498757][T12936] RSP: 002b:00007fce33ead038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 488.498792][T12936] RAX: ffffffffffffffda RBX: 00007fce331e5fa0 RCX: 00007fce32f8eec9 [ 488.498818][T12936] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000004 [ 488.498840][T12936] RBP: 00007fce33011f91 R08: 0000000000000000 R09: 0000000000000000 [ 488.498862][T12936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.498885][T12936] R13: 00007fce331e6038 R14: 00007fce331e5fa0 R15: 00007ffec3fef568 [ 488.498936][T12936] [ 488.499143][T12057] Bluetooth: hci4: command 0x0c1a tx timeout [ 488.512745][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 488.521569][ T5830] Bluetooth: hci2: command 0x0c1a tx timeout [ 489.556654][ T8305] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1378 with max blocks 17 with error 117 [ 489.580104][ T8305] EXT4-fs (sda1): This should not happen!! Data will be lost [ 489.580104][ T8305] [ 489.595989][ T8305] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 489.610401][ T8305] EXT4-fs (sda1): This should not happen!! Data will be lost [ 489.610401][ T8305] [ 489.946992][ T8305] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 489.960120][ T8305] EXT4-fs (sda1): This should not happen!! Data will be lost [ 489.960120][ T8305] [ 490.519459][ T30] audit: type=1800 audit(4294967313.374:31): pid=12974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1312" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 491.344149][T12982] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 491.357679][T12982] EXT4-fs (sda1): This should not happen!! Data will be lost [ 491.357679][T12982] [ 491.634968][T12986] Falling back ldisc for ttynull. [ 492.275139][T12997] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 492.345189][T12997] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 492.357861][T12997] EXT4-fs (sda1): This should not happen!! Data will be lost [ 492.357861][T12997] [ 492.927697][T13004] Format for deleting device is "id" (uint). [ 493.003066][T13007] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 494.658364][T13045] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 494.719094][T13048] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 494.732184][T13048] EXT4-fs (sda1): This should not happen!! Data will be lost [ 494.732184][T13048] [ 495.129608][T13060] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 496.234366][T13074] FAULT_INJECTION: forcing a failure. [ 496.234366][T13074] name failslab, interval 1, probability 0, space 0, times 0 [ 496.278347][T13074] CPU: 1 UID: 0 PID: 13074 Comm: syz.2.1331 Tainted: G U W I L XTNJ syzkaller #0 PREEMPT(full) [ 496.278424][T13074] Tainted: [U]=USER, [W]=WARN, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 496.278446][T13074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 496.278465][T13074] Call Trace: [ 496.278475][T13074] [ 496.278488][T13074] dump_stack_lvl+0x16c/0x1f0 [ 496.278543][T13074] should_fail_ex+0x512/0x640 [ 496.278596][T13074] ? __kmalloc_cache_noprof+0x5f/0x780 [ 496.278642][T13074] should_failslab+0xc2/0x120 [ 496.278674][T13074] __kmalloc_cache_noprof+0x72/0x780 [ 496.278716][T13074] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 496.278769][T13074] ? shrinker_alloc+0xf5/0xbf0 [ 496.278831][T13074] ? shrinker_alloc+0xf5/0xbf0 [ 496.278879][T13074] shrinker_alloc+0xf5/0xbf0 [ 496.278930][T13074] ? mark_held_locks+0x49/0x80 [ 496.278963][T13074] ? pcpu_memcg_post_alloc_hook+0x1e/0x690 [ 496.279018][T13074] ? __pfx_shrinker_alloc+0x10/0x10 [ 496.279073][T13074] ? lockdep_init_map_type+0x5c/0x280 [ 496.279111][T13074] ? __raw_spin_lock_init+0x3a/0x110 [ 496.279151][T13074] ? __init_rwsem+0x12d/0x1b0 [ 496.279194][T13074] alloc_super+0x776/0xb60 [ 496.279246][T13074] sget_fc+0x116/0xc20 [ 496.279292][T13074] ? __pfx_set_anon_super_fc+0x10/0x10 [ 496.279335][T13074] ? __pfx_mqueue_fill_super+0x10/0x10 [ 496.279389][T13074] get_tree_nodev+0x28/0x190 [ 496.279437][T13074] mqueue_get_tree+0xf1/0x130 [ 496.279490][T13074] vfs_get_tree+0x8e/0x340 [ 496.279529][T13074] fc_mount_longterm+0x1a/0x270 [ 496.279564][T13074] mq_init_ns+0x426/0x620 [ 496.279592][T13074] copy_ipcs+0x2d6/0x550 [ 496.279621][T13074] create_new_namespaces+0x20a/0xa90 [ 496.279656][T13074] ? security_capable+0x7e/0x260 [ 496.279682][T13074] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 496.279721][T13074] ksys_unshare+0x45b/0xa40 [ 496.279744][T13074] ? __pfx_ksys_unshare+0x10/0x10 [ 496.279769][T13074] ? xfd_validate_state+0x61/0x180 [ 496.279810][T13074] __x64_sys_unshare+0x31/0x40 [ 496.279833][T13074] do_syscall_64+0xcd/0xfa0 [ 496.279871][T13074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.279895][T13074] RIP: 0033:0x7f131498eec9 [ 496.279914][T13074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.279937][T13074] RSP: 002b:00007f1315893038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 496.279959][T13074] RAX: ffffffffffffffda RBX: 00007f1314be6180 RCX: 00007f131498eec9 [ 496.279975][T13074] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 496.279989][T13074] RBP: 00007f1314a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 496.280003][T13074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.280017][T13074] R13: 00007f1314be6218 R14: 00007f1314be6180 R15: 00007ffce2f476c8 [ 496.280048][T13074] [ 496.639729][T13077] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1335'. [ 498.049101][T13101] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 498.055393][T13101] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 498.061634][T13101] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 498.067764][T13101] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 498.307743][T13114] netlink: 'syz.4.1343': attribute type 1 has an invalid length. [ 499.401615][T13126] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 499.437534][T13126] CPU: 1 UID: 0 PID: 13126 Comm: syz.2.1346 Tainted: G U W I L XTNJ syzkaller #0 PREEMPT(full) [ 499.437609][T13126] Tainted: [U]=USER, [W]=WARN, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 499.437631][T13126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 499.437652][T13126] Call Trace: [ 499.437665][T13126] [ 499.437678][T13126] dump_stack_lvl+0x16c/0x1f0 [ 499.437735][T13126] sysfs_warn_dup+0x7f/0xa0 [ 499.437789][T13126] sysfs_do_create_link_sd+0x124/0x140 [ 499.437846][T13126] sysfs_create_link+0x61/0xc0 [ 499.437905][T13126] device_add+0x62c/0x1aa0 [ 499.437941][T13126] ? __pfx_device_add+0x10/0x10 [ 499.437970][T13126] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 499.438017][T13126] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 499.438078][T13126] wiphy_register+0x1eb0/0x2b20 [ 499.438111][T13126] ? netdev_run_todo+0x864/0x1320 [ 499.438178][T13126] ? __pfx_wiphy_register+0x10/0x10 [ 499.438234][T13126] ieee80211_register_hw+0x253d/0x4120 [ 499.438285][T13126] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 499.438320][T13126] ? __pfx___debug_object_init+0x10/0x10 [ 499.438378][T13126] ? find_held_lock+0x2b/0x80 [ 499.438427][T13126] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 499.438478][T13126] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 499.438526][T13126] ? __hrtimer_setup+0x176/0x280 [ 499.438570][T13126] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 499.438635][T13126] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 499.438686][T13126] hwsim_new_radio_nl+0xba2/0x1330 [ 499.438728][T13126] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 499.438779][T13126] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 499.438818][T13126] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 499.438869][T13126] genl_family_rcv_msg_doit+0x209/0x2f0 [ 499.438910][T13126] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 499.438968][T13126] ? bpf_lsm_capable+0x9/0x10 [ 499.438999][T13126] ? security_capable+0x7e/0x260 [ 499.439033][T13126] ? ns_capable+0xd7/0x110 [ 499.439084][T13126] genl_rcv_msg+0x55c/0x800 [ 499.439126][T13126] ? __pfx_genl_rcv_msg+0x10/0x10 [ 499.439165][T13126] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 499.439218][T13126] netlink_rcv_skb+0x158/0x420 [ 499.439272][T13126] ? __pfx_genl_rcv_msg+0x10/0x10 [ 499.439310][T13126] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 499.439392][T13126] ? netlink_deliver_tap+0x1ae/0xd30 [ 499.439449][T13126] genl_rcv+0x28/0x40 [ 499.439481][T13126] netlink_unicast+0x5aa/0x870 [ 499.439540][T13126] ? __pfx_netlink_unicast+0x10/0x10 [ 499.439593][T13126] ? __pfx___might_resched+0x10/0x10 [ 499.439656][T13126] netlink_sendmsg+0x8c8/0xdd0 [ 499.439717][T13126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.439777][T13126] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 499.439819][T13126] ____sys_sendmsg+0xa98/0xc70 [ 499.439858][T13126] ? copy_msghdr_from_user+0x10a/0x160 [ 499.439907][T13126] ? __pfx_____sys_sendmsg+0x10/0x10 [ 499.439967][T13126] ___sys_sendmsg+0x134/0x1d0 [ 499.440015][T13126] ? futex_private_hash_put+0x176/0x300 [ 499.440071][T13126] ? __pfx____sys_sendmsg+0x10/0x10 [ 499.440119][T13126] ? __lock_acquire+0x622/0x1c90 [ 499.440207][T13126] __sys_sendmsg+0x16d/0x220 [ 499.440259][T13126] ? __pfx___sys_sendmsg+0x10/0x10 [ 499.440309][T13126] ? __x64_sys_futex+0x1e0/0x4c0 [ 499.440373][T13126] do_syscall_64+0xcd/0xfa0 [ 499.440427][T13126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.440460][T13126] RIP: 0033:0x7f131498eec9 [ 499.440486][T13126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.440519][T13126] RSP: 002b:00007f13158d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.440552][T13126] RAX: ffffffffffffffda RBX: 00007f1314be5fa0 RCX: 00007f131498eec9 [ 499.440575][T13126] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 499.440597][T13126] RBP: 00007f1314a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 499.440617][T13126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 499.440638][T13126] R13: 00007f1314be6038 R14: 00007f1314be5fa0 R15: 00007ffce2f476c8 [ 499.440685][T13126] [ 499.716415][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 500.114050][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 500.124421][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 500.130244][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout [ 501.739026][ T30] audit: type=1800 audit(4294967324.663:32): pid=13166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1354" name="lu_gp_id" dev="configfs" ino=43112 res=0 errno=0 [ 502.999494][T13188] kAFS: Invalid Command on /proc/fs/afs/cells file [ 503.361171][T13201] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 503.379167][T13201] EXT4-fs (sda1): This should not happen!! Data will be lost [ 503.379167][T13201] [ 503.943632][T13203] tipc: Started in network mode [ 503.979057][T13203] tipc: Node identity ee00, cluster identity 4711 [ 504.000121][T13203] tipc: Node number set to 60928 [ 504.068227][T13209] FAULT_INJECTION: forcing a failure. [ 504.068227][T13209] name failslab, interval 1, probability 0, space 0, times 0 [ 504.093304][T13209] CPU: 1 UID: 0 PID: 13209 Comm: syz.1.1364 Tainted: G U W I L XTNJ syzkaller #0 PREEMPT(full) [ 504.093373][T13209] Tainted: [U]=USER, [W]=WARN, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 504.093393][T13209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 504.093412][T13209] Call Trace: [ 504.093422][T13209] [ 504.093434][T13209] dump_stack_lvl+0x16c/0x1f0 [ 504.093486][T13209] should_fail_ex+0x512/0x640 [ 504.093535][T13209] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 504.093584][T13209] should_failslab+0xc2/0x120 [ 504.093615][T13209] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 504.093659][T13209] ? sock_alloc_inode+0x25/0x1c0 [ 504.093699][T13209] ? __pfx_sock_alloc_inode+0x10/0x10 [ 504.093730][T13209] ? sock_alloc_inode+0x25/0x1c0 [ 504.093759][T13209] sock_alloc_inode+0x25/0x1c0 [ 504.093790][T13209] alloc_inode+0x64/0x240 [ 504.093823][T13209] sock_alloc+0x40/0x280 [ 504.093853][T13209] __sock_create+0xc1/0x8d0 [ 504.093899][T13209] __sys_socketpair+0x25c/0x5a0 [ 504.093950][T13209] ? __pfx___sys_socketpair+0x10/0x10 [ 504.093989][T13209] ? fput+0x9b/0xd0 [ 504.094022][T13209] ? xfd_validate_state+0x61/0x180 [ 504.094054][T13209] ? __pfx_ksys_write+0x10/0x10 [ 504.094107][T13209] __x64_sys_socketpair+0x96/0x100 [ 504.094145][T13209] ? lockdep_hardirqs_on+0x7c/0x110 [ 504.094193][T13209] do_syscall_64+0xcd/0xfa0 [ 504.094242][T13209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.094274][T13209] RIP: 0033:0x7f035cb8eec9 [ 504.094300][T13209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.094330][T13209] RSP: 002b:00007f035d95f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 504.094360][T13209] RAX: ffffffffffffffda RBX: 00007f035cde6090 RCX: 00007f035cb8eec9 [ 504.094382][T13209] RDX: 8000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 504.094400][T13209] RBP: 00007f035cc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 504.094420][T13209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.094439][T13209] R13: 00007f035cde6128 R14: 00007f035cde6090 R15: 00007ffd24493178 [ 504.094483][T13209] [ 504.094498][T13209] socket: no more sockets [ 504.456985][T13213] openvswitch: netlink: IP tunnel dst address not specified [ 504.607856][T13219] hub 1-0:1.0: USB hub found [ 504.617672][T13223] openvswitch: netlink: IP tunnel dst address not specified [ 504.632994][T13219] hub 1-0:1.0: 1 port detected [ 505.453335][T13242] : Can't lookup blockdev [ 505.525196][ T30] audit: type=1800 audit(4294967328.452:33): pid=13242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1370" name="features" dev="configfs" ino=43363 res=0 errno=0 [ 506.482263][T13254] FAULT_INJECTION: forcing a failure. [ 506.482263][T13254] name failslab, interval 1, probability 0, space 0, times 0 [ 506.498324][T13254] CPU: 1 UID: 0 PID: 13254 Comm: syz.4.1375 Tainted: G U W I L XTNJ syzkaller #0 PREEMPT(full) [ 506.498392][T13254] Tainted: [U]=USER, [W]=WARN, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 506.498412][T13254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 506.498430][T13254] Call Trace: [ 506.498440][T13254] [ 506.498452][T13254] dump_stack_lvl+0x16c/0x1f0 [ 506.498503][T13254] should_fail_ex+0x512/0x640 [ 506.498549][T13254] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 506.498594][T13254] should_failslab+0xc2/0x120 [ 506.498626][T13254] kmem_cache_alloc_noprof+0x75/0x6e0 [ 506.498668][T13254] ? kcm_create+0x11e/0x690 [ 506.498714][T13254] ? kcm_create+0x11e/0x690 [ 506.498760][T13254] kcm_create+0x11e/0x690 [ 506.498800][T13254] __sock_create+0x338/0x8d0 [ 506.498845][T13254] __sys_socket+0x14d/0x260 [ 506.498882][T13254] ? __pfx___sys_socket+0x10/0x10 [ 506.498920][T13254] ? xfd_validate_state+0x61/0x180 [ 506.498951][T13254] ? __pfx_ksys_write+0x10/0x10 [ 506.499004][T13254] __x64_sys_socket+0x72/0xb0 [ 506.499040][T13254] ? lockdep_hardirqs_on+0x7c/0x110 [ 506.499087][T13254] do_syscall_64+0xcd/0xfa0 [ 506.499135][T13254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.499166][T13254] RIP: 0033:0x7fce32f8eec9 [ 506.499191][T13254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.499221][T13254] RSP: 002b:00007fce33ead038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 506.499248][T13254] RAX: ffffffffffffffda RBX: 00007fce331e5fa0 RCX: 00007fce32f8eec9 [ 506.499268][T13254] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 506.499286][T13254] RBP: 00007fce33011f91 R08: 0000000000000000 R09: 0000000000000000 [ 506.499305][T13254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.499323][T13254] R13: 00007fce331e6038 R14: 00007fce331e5fa0 R15: 00007ffec3fef568 [ 506.499365][T13254] [ 507.248834][T13274] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 507.914057][T12265] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 508.002961][T12265] EXT4-fs (sda1): This should not happen!! Data will be lost [ 508.002961][T12265] [ 508.186843][T13294] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 508.195340][T13291] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 509.868628][T13336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1390'. [ 510.066798][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 510.074281][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.274979][T13360] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 511.288323][T13360] EXT4-fs (sda1): This should not happen!! Data will be lost [ 511.288323][T13360] [ 512.033800][T13363] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 512.281147][T13372] FAULT_INJECTION: forcing a failure. [ 512.281147][T13372] name failslab, interval 1, probability 0, space 0, times 0 [ 512.316184][T13372] CPU: 1 UID: 0 PID: 13372 Comm: syz.2.1398 Tainted: G U W I L XTNJ syzkaller #0 PREEMPT(full) [ 512.316274][T13372] Tainted: [U]=USER, [W]=WARN, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 512.316296][T13372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 512.316317][T13372] Call Trace: [ 512.316327][T13372] [ 512.316339][T13372] dump_stack_lvl+0x16c/0x1f0 [ 512.316394][T13372] should_fail_ex+0x512/0x640 [ 512.316443][T13372] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 512.316490][T13372] should_failslab+0xc2/0x120 [ 512.316520][T13372] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 512.316564][T13372] ? __pfx___might_resched+0x10/0x10 [ 512.316612][T13372] ? sock_alloc_inode+0x25/0x1c0 [ 512.316650][T13372] ? __pfx_sock_alloc_inode+0x10/0x10 [ 512.316683][T13372] ? sock_alloc_inode+0x25/0x1c0 [ 512.316714][T13372] sock_alloc_inode+0x25/0x1c0 [ 512.316747][T13372] alloc_inode+0x64/0x240 [ 512.316781][T13372] sock_alloc+0x40/0x280 [ 512.316812][T13372] __sock_create+0xc1/0x8d0 [ 512.316858][T13372] __sys_socket+0x14d/0x260 [ 512.316899][T13372] ? __pfx___sys_socket+0x10/0x10 [ 512.316941][T13372] ? xfd_validate_state+0x61/0x180 [ 512.316975][T13372] ? __task_pid_nr_ns+0x1f5/0x500 [ 512.317019][T13372] __x64_sys_socket+0x72/0xb0 [ 512.317055][T13372] ? lockdep_hardirqs_on+0x7c/0x110 [ 512.317105][T13372] do_syscall_64+0xcd/0xfa0 [ 512.317158][T13372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.317191][T13372] RIP: 0033:0x7f131498eec9 [ 512.317217][T13372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.317250][T13372] RSP: 002b:00007f13158b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 512.317290][T13372] RAX: ffffffffffffffda RBX: 00007f1314be6090 RCX: 00007f131498eec9 [ 512.317312][T13372] RDX: 0000000000000006 RSI: 0000000000000003 RDI: 0000000000000010 [ 512.317331][T13372] RBP: 00007f1314a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 512.317350][T13372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.317370][T13372] R13: 00007f1314be6128 R14: 00007f1314be6090 R15: 00007ffce2f476c8 [ 512.317415][T13372] [ 512.317430][T13372] socket: no more sockets [ 513.593175][T13405] netlink: 'syz.0.1405': attribute type 16 has an invalid length. [ 513.624417][T13405] netlink: 306 bytes leftover after parsing attributes in process `syz.0.1405'. [ 513.826549][T13411] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 513.900502][T13411] EXT4-fs (sda1): This should not happen!! Data will be lost [ 513.900502][T13411] [ 515.373512][T13451] : Can't lookup blockdev [ 516.469856][T13472] binder: 13470:13472 ioctl c018620c 0 returned -14 [ 517.395383][T13504] EXT4-fs error (device sda1): ext4_discard_preallocations:5681: comm syz.0.1420: Error -117 reading block bitmap for 7 [ 517.815900][T13510] FAULT_INJECTION: forcing a failure. [ 517.815900][T13510] name failslab, interval 1, probability 0, space 0, times 0 [ 517.901583][T13510] CPU: 1 UID: 0 PID: 13510 Comm: syz.4.1424 Tainted: G U W I L XTNJ syzkaller #0 PREEMPT(full) [ 517.901654][T13510] Tainted: [U]=USER, [W]=WARN, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 517.901674][T13510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 517.901694][T13510] Call Trace: [ 517.901704][T13510] [ 517.901716][T13510] dump_stack_lvl+0x16c/0x1f0 [ 517.901766][T13510] should_fail_ex+0x512/0x640 [ 517.901813][T13510] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 517.901862][T13510] should_failslab+0xc2/0x120 [ 517.901895][T13510] kmem_cache_alloc_noprof+0x75/0x6e0 [ 517.901938][T13510] ? alloc_empty_file+0x55/0x1e0 [ 517.901980][T13510] ? alloc_empty_file+0x55/0x1e0 [ 517.902011][T13510] alloc_empty_file+0x55/0x1e0 [ 517.902053][T13510] alloc_file_pseudo+0x13a/0x230 [ 517.902091][T13510] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 517.902127][T13510] ? alloc_fd+0x471/0x7d0 [ 517.902175][T13510] sock_alloc_file+0x50/0x210 [ 517.902229][T13510] __sys_socket+0x1c0/0x260 [ 517.902268][T13510] ? __pfx___sys_socket+0x10/0x10 [ 517.902307][T13510] ? xfd_validate_state+0x61/0x180 [ 517.902354][T13510] __x64_sys_socket+0x72/0xb0 [ 517.902391][T13510] ? lockdep_hardirqs_on+0x7c/0x110 [ 517.902436][T13510] do_syscall_64+0xcd/0xfa0 [ 517.902486][T13510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.902518][T13510] RIP: 0033:0x7fce32f8eec9 [ 517.902542][T13510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.902573][T13510] RSP: 002b:00007fce33e8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 517.902602][T13510] RAX: ffffffffffffffda RBX: 00007fce331e6090 RCX: 00007fce32f8eec9 [ 517.902622][T13510] RDX: 000000000000000a RSI: 0000000000000003 RDI: 0000000000000002 [ 517.902639][T13510] RBP: 00007fce33011f91 R08: 0000000000000000 R09: 0000000000000000 [ 517.902656][T13510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 517.902673][T13510] R13: 00007fce331e6128 R14: 00007fce331e6090 R15: 00007ffec3fef568 [ 517.902715][T13510] [ 519.297623][T13529] batman_adv: Routing algorithm '' is not supported [ 519.318692][T13534] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 519.446369][T13539] batman_adv: Routing algorithm '10' is not supported [ 519.941528][T13546] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1428'. [ 519.985064][ T30] audit: type=1800 audit(4294967309.906:34): pid=13548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1429" name="members" dev="configfs" ino=45235 res=0 errno=0 [ 520.346132][T13554] FAULT_INJECTION: forcing a failure. [ 520.346132][T13554] name failslab, interval 1, probability 0, space 0, times 0 [ 520.363645][T13554] CPU: 1 UID: 0 PID: 13554 Comm: syz.0.1430 Tainted: G U W I L XTNJ syzkaller #0 PREEMPT(full) [ 520.363719][T13554] Tainted: [U]=USER, [W]=WARN, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 520.363740][T13554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 520.363760][T13554] Call Trace: [ 520.363771][T13554] [ 520.363783][T13554] dump_stack_lvl+0x16c/0x1f0 [ 520.363839][T13554] should_fail_ex+0x512/0x640 [ 520.363892][T13554] ? __kmalloc_cache_noprof+0x5f/0x780 [ 520.363938][T13554] should_failslab+0xc2/0x120 [ 520.363969][T13554] __kmalloc_cache_noprof+0x72/0x780 [ 520.364013][T13554] ? do_raw_spin_lock+0x12c/0x2b0 [ 520.364053][T13554] ? alloc_fdtable+0xbd/0x2d0 [ 520.364101][T13554] ? alloc_fdtable+0xbd/0x2d0 [ 520.364140][T13554] alloc_fdtable+0xbd/0x2d0 [ 520.364185][T13554] dup_fd+0x83b/0xb90 [ 520.364244][T13554] ksys_unshare+0x831/0xa40 [ 520.364277][T13554] ? __pfx_ksys_unshare+0x10/0x10 [ 520.364311][T13554] ? xfd_validate_state+0x61/0x180 [ 520.364358][T13554] __x64_sys_unshare+0x31/0x40 [ 520.364391][T13554] do_syscall_64+0xcd/0xfa0 [ 520.364444][T13554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.364479][T13554] RIP: 0033:0x7f745c78eec9 [ 520.364505][T13554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.364538][T13554] RSP: 002b:00007f745d5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 520.364577][T13554] RAX: ffffffffffffffda RBX: 00007f745c9e5fa0 RCX: 00007f745c78eec9 [ 520.364600][T13554] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 520.364620][T13554] RBP: 00007f745c811f91 R08: 0000000000000000 R09: 0000000000000000 [ 520.364641][T13554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 520.364661][T13554] R13: 00007f745c9e6038 R14: 00007f745c9e5fa0 R15: 00007fff4358ed08 [ 520.364706][T13554] [ 522.200171][T13579] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1437'. [ 522.839847][T13579] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 522.859151][T13579] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 522.865342][T13579] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 522.892626][T13579] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 523.452401][T13609] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1444'. [ 523.515171][ T80] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 931 with max blocks 9 with error 117 [ 523.574794][ T80] EXT4-fs (sda1): This should not happen!! Data will be lost [ 523.574794][ T80] [ 524.555786][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout [ 524.697378][T13633] Invalid ELF header magic: != ELF [ 524.888384][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout [ 524.896842][ T5830] Bluetooth: hci2: command 0x0c1a tx timeout [ 524.948220][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 525.160924][T13618] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 525.770051][T13649] FAULT_INJECTION: forcing a failure. [ 525.770051][T13649] name fail_futex, interval 1, probability 0, space 0, times 0 [ 525.795755][T13649] CPU: 1 UID: 0 PID: 13649 Comm: syz.1.1452 Tainted: G U W I L XTNJ syzkaller #0 PREEMPT(full) [ 525.795811][T13649] Tainted: [U]=USER, [W]=WARN, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 525.795826][T13649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 525.795840][T13649] Call Trace: [ 525.795848][T13649] [ 525.795857][T13649] dump_stack_lvl+0x16c/0x1f0 [ 525.795897][T13649] should_fail_ex+0x512/0x640 [ 525.795940][T13649] get_futex_key+0x1d0/0x1560 [ 525.795983][T13649] ? __pfx_get_futex_key+0x10/0x10 [ 525.796022][T13649] ? stack_trace_save+0x8e/0xc0 [ 525.796058][T13649] ? __pfx_stack_trace_save+0x10/0x10 [ 525.796094][T13649] ? stack_depot_save_flags+0x29/0x9c0 [ 525.796144][T13649] futex_wait_setup+0x9d/0x550 [ 525.796182][T13649] __futex_wait+0x193/0x2f0 [ 525.796214][T13649] ? __pfx___futex_wait+0x10/0x10 [ 525.796248][T13649] ? __pfx_futex_wake_mark+0x10/0x10 [ 525.796282][T13649] ? futex_private_hash_put+0x176/0x300 [ 525.796324][T13649] ? futex_private_hash_put+0x18a/0x300 [ 525.796365][T13649] futex_wait+0xe8/0x380 [ 525.796394][T13649] ? __pfx_futex_wait+0x10/0x10 [ 525.796429][T13649] ? kmem_cache_free+0x2d4/0x6c0 [ 525.796462][T13649] ? putname+0x154/0x1a0 [ 525.796489][T13649] do_futex+0x229/0x350 [ 525.796514][T13649] ? __pfx_do_futex+0x10/0x10 [ 525.796545][T13649] __x64_sys_futex+0x1e0/0x4c0 [ 525.796571][T13649] ? __x64_sys_openat+0x174/0x210 [ 525.796599][T13649] ? __pfx___x64_sys_futex+0x10/0x10 [ 525.796634][T13649] do_syscall_64+0xcd/0xfa0 [ 525.796672][T13649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.796696][T13649] RIP: 0033:0x7f035cb8eec9 [ 525.796714][T13649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.796737][T13649] RSP: 002b:00007f035d9800e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 525.796759][T13649] RAX: ffffffffffffffda RBX: 00007f035cde5fa8 RCX: 00007f035cb8eec9 [ 525.796775][T13649] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f035cde5fa8 [ 525.796789][T13649] RBP: 00007f035cde5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 525.796803][T13649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.796817][T13649] R13: 00007f035cde6038 R14: 00007ffd24493090 R15: 00007ffd24493178 [ 525.796848][T13649] [ 529.352414][T13700] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1462'. [ 529.542551][T13707] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1463'. [ 529.572206][T13709] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 530.411843][T13732] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1470'. [ 530.536283][T13737] netlink: 'syz.0.1470': attribute type 17 has an invalid length. [ 530.558659][T13737] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1470'. [ 530.592485][T13730] Invalid ELF header magic: != ELF [ 531.533774][T13751] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 531.548013][T13751] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 531.554345][T13751] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 531.569795][T13751] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 531.718787][T13762] netlink: 146 bytes leftover after parsing attributes in process `syz.2.1475'. [ 532.465862][T13761] FAULT_INJECTION: forcing a failure. [ 532.465862][T13761] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 532.516829][T13761] CPU: 1 UID: 0 PID: 13761 Comm: syz.1.1476 Tainted: G U W I L XTNJ syzkaller #0 PREEMPT(full) [ 532.516908][T13761] Tainted: [U]=USER, [W]=WARN, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 532.516931][T13761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 532.516950][T13761] Call Trace: [ 532.516960][T13761] [ 532.516972][T13761] dump_stack_lvl+0x16c/0x1f0 [ 532.517028][T13761] should_fail_ex+0x512/0x640 [ 532.517087][T13761] should_fail_alloc_page+0xe7/0x130 [ 532.517123][T13761] prepare_alloc_pages+0x3c2/0x610 [ 532.517163][T13761] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 532.517209][T13761] ? ring_buffer_alloc_read_page+0x139/0x6e0 [ 532.517246][T13761] ? tracing_buffers_read+0x60d/0xb00 [ 532.517279][T13761] ? ksys_read+0x12a/0x250 [ 532.517322][T13761] ? do_syscall_64+0xcd/0xfa0 [ 532.517367][T13761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.517419][T13761] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 532.517509][T13761] __alloc_pages_noprof+0xb/0x1b0 [ 532.517562][T13761] ring_buffer_alloc_read_page+0x4b3/0x6e0 [ 532.517606][T13761] ? __pfx_ring_buffer_alloc_read_page+0x10/0x10 [ 532.517654][T13761] ? __mutex_trylock_common+0xe9/0x250 [ 532.517696][T13761] tracing_buffers_read+0x60d/0xb00 [ 532.517737][T13761] ? rw_verify_area+0xcf/0x6c0 [ 532.517778][T13761] ? __pfx_tracing_buffers_read+0x10/0x10 [ 532.517814][T13761] vfs_read+0x1e4/0xcf0 [ 532.517867][T13761] ? __pfx___mutex_lock+0x10/0x10 [ 532.517924][T13761] ? __pfx_vfs_read+0x10/0x10 [ 532.517984][T13761] ? __fget_files+0x20e/0x3c0 [ 532.518041][T13761] ksys_read+0x12a/0x250 [ 532.518088][T13761] ? __pfx_ksys_read+0x10/0x10 [ 532.518148][T13761] do_syscall_64+0xcd/0xfa0 [ 532.518202][T13761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.518234][T13761] RIP: 0033:0x7f035cb8eec9 [ 532.518261][T13761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.518294][T13761] RSP: 002b:00007f035d980038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 532.518326][T13761] RAX: ffffffffffffffda RBX: 00007f035cde5fa0 RCX: 00007f035cb8eec9 [ 532.518349][T13761] RDX: 000000000000005f RSI: 0000200000000180 RDI: 0000000000000006 [ 532.518369][T13761] RBP: 00007f035cc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 532.518390][T13761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.518411][T13761] R13: 00007f035cde6038 R14: 00007f035cde5fa0 R15: 00007ffd24493178 [ 532.518457][T13761] [ 533.561345][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 533.640984][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 533.647146][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout [ 533.653783][T12057] Bluetooth: hci2: command 0x0c1a tx timeout [ 536.200977][T13811] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 536.238924][T13819] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 536.249727][T13820] netlink: 93 bytes leftover after parsing attributes in process `syz.0.1485'. [ 537.674831][T13836] ip6_vti0: entered allmulticast mode [ 538.616169][T13859] sg_write: data in/out 2359516/158 bytes for SCSI command 0x0-- guessing data in; [ 538.616169][T13859] program syz.1.1495 not setting count and/or reply_len properly [ 538.849658][T13860] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1493'. [ 540.042954][T13890] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 540.845013][T13900] netlink: 'syz.1.1505': attribute type 11 has an invalid length. [ 540.853020][T13900] netlink: 'syz.1.1505': attribute type 11 has an invalid length. [ 540.871515][T13900] netlink: 'syz.1.1505': attribute type 11 has an invalid length. [ 540.900987][T13900] netlink: 'syz.1.1505': attribute type 11 has an invalid length. [ 540.910490][T13900] netlink: 'syz.1.1505': attribute type 11 has an invalid length. [ 540.920606][T13900] netlink: 3280 bytes leftover after parsing attributes in process `syz.1.1505'. [ 540.940930][T13900] netlink: 48548 bytes leftover after parsing attributes in process `syz.1.1505'. [ 541.730085][T13917] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1509'. [ 541.741181][T13917] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1509'. [ 541.888209][T13919] hub 1-0:1.0: USB hub found [ 541.893265][T13919] hub 1-0:1.0: 1 port detected [ 541.923071][T13919] FAULT_INJECTION: forcing a failure. [ 541.923071][T13919] name failslab, interval 1, probability 0, space 0, times 0 [ 541.940863][T13919] CPU: 1 UID: 0 PID: 13919 Comm: syz.4.1511 Tainted: G U W I L XTNJ syzkaller #0 PREEMPT(full) [ 541.940939][T13919] Tainted: [U]=USER, [W]=WARN, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 541.940961][T13919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 541.940982][T13919] Call Trace: [ 541.940993][T13919] [ 541.941012][T13919] dump_stack_lvl+0x16c/0x1f0 [ 541.941068][T13919] should_fail_ex+0x512/0x640 [ 541.941118][T13919] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 541.941167][T13919] should_failslab+0xc2/0x120 [ 541.941200][T13919] kmem_cache_alloc_noprof+0x75/0x6e0 [ 541.941246][T13919] ? __kernfs_new_node+0xd2/0x8e0 [ 541.941308][T13919] ? __kernfs_new_node+0xd2/0x8e0 [ 541.941358][T13919] __kernfs_new_node+0xd2/0x8e0 [ 541.941415][T13919] ? __pfx___kernfs_new_node+0x10/0x10 [ 541.941480][T13919] ? find_held_lock+0x2b/0x80 [ 541.941528][T13919] ? kernfs_root+0xee/0x2a0 [ 541.941566][T13919] kernfs_new_node+0x13c/0x1e0 [ 541.941611][T13919] __kernfs_create_file+0x53/0x350 [ 541.941660][T13919] sysfs_add_file_mode_ns+0x207/0x3c0 [ 541.941723][T13919] internal_create_group+0x578/0xf30 [ 541.941764][T13919] ? sysfs_create_file_ns+0x154/0x1d0 [ 541.941814][T13919] ? __pfx_internal_create_group+0x10/0x10 [ 541.941850][T13919] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 541.941899][T13919] ? down_read+0x13d/0x480 [ 541.941936][T13919] ? acpi_device_notify+0x351/0x480 [ 541.941984][T13919] ? lockdep_init_map_type+0x5c/0x280 [ 541.942032][T13919] internal_create_groups+0x9d/0x150 [ 541.942069][T13919] device_add+0x77f/0x1aa0 [ 541.942105][T13919] ? __pfx_device_add+0x10/0x10 [ 541.942133][T13919] ? lockdep_init_map_type+0x5c/0x280 [ 541.942170][T13919] ? __init_waitqueue_head+0xca/0x150 [ 541.942226][T13919] usb_create_ep_devs+0x160/0x2b0 [ 541.942266][T13919] create_intf_ep_devs.isra.0+0x161/0x200 [ 541.942328][T13919] usb_set_configuration+0x11a7/0x1e20 [ 541.942412][T13919] bConfigurationValue_store+0x100/0x180 [ 541.942446][T13919] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 541.942480][T13919] ? find_held_lock+0x2b/0x80 [ 541.942526][T13919] ? sysfs_file_kobj+0xe4/0x290 [ 541.942574][T13919] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 541.942605][T13919] dev_attr_store+0x58/0x80 [ 541.942653][T13919] ? __pfx_dev_attr_store+0x10/0x10 [ 541.942701][T13919] sysfs_kf_write+0xf2/0x150 [ 541.942751][T13919] kernfs_fop_write_iter+0x3af/0x570 [ 541.942792][T13919] ? __pfx_sysfs_kf_write+0x10/0x10 [ 541.942844][T13919] iter_file_splice_write+0xa24/0x12e0 [ 541.942916][T13919] ? __pfx_iter_file_splice_write+0x10/0x10 [ 541.942971][T13919] ? __pfx_copy_splice_read+0x10/0x10 [ 541.943045][T13919] ? __pfx_iter_file_splice_write+0x10/0x10 [ 541.943093][T13919] direct_splice_actor+0x192/0x6c0 [ 541.943144][T13919] splice_direct_to_actor+0x345/0xa30 [ 541.943191][T13919] ? __pfx_direct_splice_actor+0x10/0x10 [ 541.943245][T13919] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 541.943302][T13919] do_splice_direct+0x174/0x240 [ 541.943346][T13919] ? __pfx_do_splice_direct+0x10/0x10 [ 541.943392][T13919] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 541.943441][T13919] ? rw_verify_area+0xcf/0x6c0 [ 541.943487][T13919] do_sendfile+0xb06/0xe50 [ 541.943541][T13919] ? __pfx_do_sendfile+0x10/0x10 [ 541.943586][T13919] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 541.943634][T13919] ? __x64_sys_futex+0x1e0/0x4c0 [ 541.943666][T13919] ? __x64_sys_futex+0x1e9/0x4c0 [ 541.943705][T13919] __x64_sys_sendfile64+0x1d8/0x220 [ 541.943740][T13919] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 541.943788][T13919] do_syscall_64+0xcd/0xfa0 [ 541.943840][T13919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.943874][T13919] RIP: 0033:0x7fce32f8eec9 [ 541.943901][T13919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.943934][T13919] RSP: 002b:00007fce33ead038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 541.943966][T13919] RAX: ffffffffffffffda RBX: 00007fce331e5fa0 RCX: 00007fce32f8eec9 [ 541.943989][T13919] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 541.944016][T13919] RBP: 00007fce33011f91 R08: 0000000000000000 R09: 0000000000000000 [ 541.944037][T13919] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 541.944056][T13919] R13: 00007fce331e6038 R14: 00007fce331e5fa0 R15: 00007ffec3fef568 [ 541.944103][T13919] [ 544.106989][T13942] random: crng reseeded on system resumption [ 547.006746][T13984] FAULT_INJECTION: forcing a failure. [ 547.006746][T13984] name failslab, interval 1, probability 0, space 0, times 0 [ 547.022549][T13984] CPU: 1 UID: 0 PID: 13984 Comm: syz.1.1527 Tainted: G U W I L XTNJ syzkaller #0 PREEMPT(full) [ 547.022634][T13984] Tainted: [U]=USER, [W]=WARN, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 547.022660][T13984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 547.022681][T13984] Call Trace: [ 547.022691][T13984] [ 547.022704][T13984] dump_stack_lvl+0x16c/0x1f0 [ 547.022766][T13984] should_fail_ex+0x512/0x640 [ 547.022819][T13984] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 547.022871][T13984] should_failslab+0xc2/0x120 [ 547.022907][T13984] kmem_cache_alloc_node_noprof+0x78/0x770 [ 547.022954][T13984] ? __alloc_skb+0x2b2/0x380 [ 547.023014][T13984] ? __alloc_skb+0x2b2/0x380 [ 547.023057][T13984] __alloc_skb+0x2b2/0x380 [ 547.023108][T13984] ? __pfx___alloc_skb+0x10/0x10 [ 547.023153][T13984] ? __pfx_add_uevent_var+0x10/0x10 [ 547.023199][T13984] ? __asan_memcpy+0x3c/0x60 [ 547.023248][T13984] alloc_uevent_skb+0x7d/0x210 [ 547.023285][T13984] ? __pfx_rx_queue_namespace+0x10/0x10 [ 547.023321][T13984] kobject_uevent_env+0x11cc/0x1870 [ 547.023369][T13984] ? kernfs_remove_by_name_ns+0x9f/0x110 [ 547.023418][T13984] __kobject_del+0x168/0x1f0 [ 547.023484][T13984] kobject_put+0x327/0x5a0 [ 547.023541][T13984] net_rx_queue_update_kobjects+0x54d/0x770 [ 547.023608][T13984] netdev_unregister_kobject+0x154/0x540 [ 547.023655][T13984] unregister_netdevice_many_notify+0x14f0/0x24c0 [ 547.023708][T13984] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 547.023753][T13984] ? __fsnotify_parent+0x24b/0xc40 [ 547.023805][T13984] ? __pfx___mutex_lock+0x10/0x10 [ 547.023869][T13984] unregister_netdevice_queue+0x305/0x3f0 [ 547.023906][T13984] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 547.023944][T13984] ? __pfx_locks_remove_file+0x10/0x10 [ 547.023997][T13984] ? __pfx_ppp_release+0x10/0x10 [ 547.024045][T13984] ppp_release+0x209/0x230 [ 547.024092][T13984] __fput+0x402/0xb70 [ 547.024139][T13984] task_work_run+0x150/0x240 [ 547.024185][T13984] ? __pfx_task_work_run+0x10/0x10 [ 547.024227][T13984] ? __pfx___do_sys_close_range+0x10/0x10 [ 547.024286][T13984] exit_to_user_mode_loop+0xec/0x130 [ 547.024328][T13984] do_syscall_64+0x426/0xfa0 [ 547.024386][T13984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.024421][T13984] RIP: 0033:0x7f035cb8eec9 [ 547.024448][T13984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.024487][T13984] RSP: 002b:00007f035d980038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 547.024519][T13984] RAX: 0000000000000000 RBX: 00007f035cde5fa0 RCX: 00007f035cb8eec9 [ 547.024541][T13984] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 547.024565][T13984] RBP: 00007f035cc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 547.024593][T13984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.024613][T13984] R13: 00007f035cde6038 R14: 00007f035cde5fa0 R15: 00007ffd24493178 [ 547.024663][T13984] [ 547.260372][T13982] kexec: Could not allocate control_code_buffer [ 547.418956][T13992] ALSA: mixer_oss: invalid OSS volume '0' [ 547.424734][T13992] ALSA: mixer_oss: invalid OSS volume 'PHONET' [ 547.431009][T13992] ALSA: mixer_oss: invalid OSS volume 'L2TP/IPv6' [ 550.141507][T14001] kexec: Could not allocate control_code_buffer [ 550.751858][T14051] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 550.901935][T14050] Process accounting resumed [ 551.423583][T14064] sp0: Synchronizing with TNC [ 552.491479][T14093] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 552.856726][T14107] snd_aloop snd_aloop.0: control 16781581:65539:6:i'x?F/zF˷:7 is already present [ 553.756937][T12265] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 931 with max blocks 9 with error 117 [ 553.770099][T12265] EXT4-fs (sda1): This should not happen!! Data will be lost [ 553.770099][T12265] [ 553.792930][T12265] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1372 with max blocks 23 with error 117 [ 553.806503][T12265] EXT4-fs (sda1): This should not happen!! Data will be lost [ 553.806503][T12265] [ 554.465652][T14127] sp0: Synchronizing with TNC [ 555.259232][T14143] aoe: could not set interface list: too many interfaces [ 556.688956][T14171] random: crng reseeded on system resumption [ 558.149534][T14186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1570'. [ 560.665050][T14231] random: crng reseeded on system resumption [ 560.767583][T14231] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 560.938635][T14235] bridge0: port 3(bond0) entered blocking state [ 560.979902][T14235] bridge0: port 3(bond0) entered disabled state [ 560.987986][T14235] bond0: entered allmulticast mode [ 561.000706][T14235] bond_slave_0: entered allmulticast mode [ 561.027253][T14235] bond_slave_1: entered allmulticast mode [ 561.055162][T14235] bond0: entered promiscuous mode [ 561.077033][T14235] bond_slave_0: entered promiscuous mode [ 561.102591][T14235] bond_slave_1: entered promiscuous mode [ 561.149108][T14236] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 561.162730][T14236] CPU: 0 UID: 0 PID: 14236 Comm: syz.4.1581 Tainted: G U W I L XTNJ syzkaller #0 PREEMPT(full) [ 561.162788][T14236] Tainted: [U]=USER, [W]=WARN, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 561.162803][T14236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 561.162816][T14236] Call Trace: [ 561.162824][T14236] [ 561.162832][T14236] dump_stack_lvl+0x16c/0x1f0 [ 561.162872][T14236] sysfs_warn_dup+0x7f/0xa0 [ 561.162908][T14236] sysfs_do_create_link_sd+0x124/0x140 [ 561.162946][T14236] sysfs_create_link+0x61/0xc0 [ 561.162982][T14236] device_add+0x62c/0x1aa0 [ 561.163006][T14236] ? __pfx_device_add+0x10/0x10 [ 561.163025][T14236] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 561.163057][T14236] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 561.163106][T14236] wiphy_register+0x1eb0/0x2b20 [ 561.163128][T14236] ? netdev_run_todo+0x864/0x1320 [ 561.163175][T14236] ? __pfx_wiphy_register+0x10/0x10 [ 561.163213][T14236] ieee80211_register_hw+0x253d/0x4120 [ 561.163248][T14236] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 561.163271][T14236] ? __pfx___debug_object_init+0x10/0x10 [ 561.163307][T14236] ? find_held_lock+0x2b/0x80 [ 561.163342][T14236] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 561.163372][T14236] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 561.163404][T14236] ? __hrtimer_setup+0x176/0x280 [ 561.163434][T14236] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 561.163477][T14236] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 561.163512][T14236] hwsim_new_radio_nl+0xba2/0x1330 [ 561.163545][T14236] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 561.163593][T14236] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 561.163631][T14236] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 561.163679][T14236] genl_family_rcv_msg_doit+0x209/0x2f0 [ 561.163716][T14236] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 561.163767][T14236] ? bpf_lsm_capable+0x9/0x10 [ 561.163799][T14236] ? security_capable+0x7e/0x260 [ 561.163832][T14236] ? ns_capable+0xd7/0x110 [ 561.163880][T14236] genl_rcv_msg+0x55c/0x800 [ 561.163921][T14236] ? __pfx_genl_rcv_msg+0x10/0x10 [ 561.163957][T14236] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 561.164007][T14236] netlink_rcv_skb+0x158/0x420 [ 561.164097][T14236] ? __pfx_genl_rcv_msg+0x10/0x10 [ 561.164135][T14236] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 561.164208][T14236] ? netlink_deliver_tap+0x1ae/0xd30 [ 561.164264][T14236] genl_rcv+0x28/0x40 [ 561.164292][T14236] netlink_unicast+0x5aa/0x870 [ 561.164349][T14236] ? __pfx_netlink_unicast+0x10/0x10 [ 561.164400][T14236] ? __pfx___might_resched+0x10/0x10 [ 561.164460][T14236] netlink_sendmsg+0x8c8/0xdd0 [ 561.164519][T14236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.164577][T14236] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 561.164617][T14236] ____sys_sendmsg+0xa98/0xc70 [ 561.164655][T14236] ? copy_msghdr_from_user+0x10a/0x160 [ 561.164703][T14236] ? __pfx_____sys_sendmsg+0x10/0x10 [ 561.164736][T14236] ? __page_table_check_ptes_set+0x1ae/0x420 [ 561.164793][T14236] ? do_pte_missing+0x8a3/0x3ba0 [ 561.164842][T14236] ___sys_sendmsg+0x134/0x1d0 [ 561.164895][T14236] ? __pfx____sys_sendmsg+0x10/0x10 [ 561.164942][T14236] ? __lock_acquire+0x622/0x1c90 [ 561.165030][T14236] __sys_sendmsg+0x16d/0x220 [ 561.165088][T14236] ? __pfx___sys_sendmsg+0x10/0x10 [ 561.165137][T14236] ? find_held_lock+0x2b/0x80 [ 561.165193][T14236] ? do_user_addr_fault+0x843/0x1370 [ 561.165247][T14236] do_syscall_64+0xcd/0xfa0 [ 561.165298][T14236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.165331][T14236] RIP: 0033:0x7fce32f8eec9 [ 561.165357][T14236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.165388][T14236] RSP: 002b:00007fce33e4a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 561.165418][T14236] RAX: ffffffffffffffda RBX: 00007fce331e6270 RCX: 00007fce32f8eec9 [ 561.165440][T14236] RDX: 0000000004000800 RSI: 00002000000000c0 RDI: 0000000000000006 [ 561.165458][T14236] RBP: 00007fce33011f91 R08: 0000000000000000 R09: 0000000000000000 [ 561.165476][T14236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 561.165494][T14236] R13: 00007fce331e6308 R14: 00007fce331e6270 R15: 00007ffec3fef568 [ 561.165538][T14236] [ 562.206431][T14254] bond0: option all_slaves_active: invalid value () [ 563.295049][T14275] random: crng reseeded on system resumption [ 563.389280][T14277] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1588'. [ 565.632197][T14287] [U]  [ 565.635041][T14287] [U] [ 565.637750][T14287] [U] [ 565.640472][T14287] [U] [ 565.645090][T14287] [U] [ 565.647820][T14287] [U] [ 565.650529][T14287] [U] [ 565.653263][T14287] [U] [ 565.683661][T14287] [U] [ 565.686466][T14287] [U] [ 565.689177][T14287] [U] [ 565.691909][T14287] [U] [ 565.753743][T14287] [U] [ 565.756493][T14287] [U] [ 565.759202][T14287] [U] [ 565.761909][T14287] [U] [ 565.772973][T14287] [U] [ 565.775748][T14287] [U] [ 565.778459][T14287] [U] [ 565.781176][T14287] [U] [ 565.784440][T14287] [U] [ 565.787167][T14287] [U] [ 565.789880][T14287] [U] [ 565.792599][T14287] [U] [ 565.831043][T14287] [U] [ 565.833797][T14287] [U] [ 565.836509][T14287] [U] [ 565.839230][T14287] [U] [ 565.864651][T14287] [U] [ 565.867428][T14287] [U] [ 565.870140][T14287] [U] [ 565.872853][T14287] [U] [ 565.924901][T14287] [U] [ 566.296868][T14311] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 566.314133][T14311] CPU: 0 UID: 0 PID: 14311 Comm: syz.2.1594 Tainted: G U W I L XTNJ syzkaller #0 PREEMPT(full) [ 566.314210][T14311] Tainted: [U]=USER, [W]=WARN, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 566.314232][T14311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 566.314253][T14311] Call Trace: [ 566.314264][T14311] [ 566.314276][T14311] dump_stack_lvl+0x16c/0x1f0 [ 566.314334][T14311] sysfs_warn_dup+0x7f/0xa0 [ 566.314387][T14311] sysfs_do_create_link_sd+0x124/0x140 [ 566.314446][T14311] sysfs_create_link+0x61/0xc0 [ 566.314500][T14311] device_add+0x62c/0x1aa0 [ 566.314535][T14311] ? __pfx_device_add+0x10/0x10 [ 566.314564][T14311] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 566.314621][T14311] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 566.314691][T14311] wiphy_register+0x1eb0/0x2b20 [ 566.314724][T14311] ? netdev_run_todo+0x864/0x1320 [ 566.314792][T14311] ? __pfx_wiphy_register+0x10/0x10 [ 566.314850][T14311] ieee80211_register_hw+0x253d/0x4120 [ 566.314901][T14311] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 566.314936][T14311] ? __pfx___debug_object_init+0x10/0x10 [ 566.314988][T14311] ? find_held_lock+0x2b/0x80 [ 566.315036][T14311] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 566.315083][T14311] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 566.315129][T14311] ? __hrtimer_setup+0x176/0x280 [ 566.315174][T14311] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 566.315240][T14311] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 566.315291][T14311] hwsim_new_radio_nl+0xba2/0x1330 [ 566.315333][T14311] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 566.315385][T14311] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 566.315426][T14311] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 566.315476][T14311] genl_family_rcv_msg_doit+0x209/0x2f0 [ 566.315517][T14311] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 566.315572][T14311] ? bpf_lsm_capable+0x9/0x10 [ 566.315603][T14311] ? security_capable+0x7e/0x260 [ 566.315645][T14311] ? ns_capable+0xd7/0x110 [ 566.315698][T14311] genl_rcv_msg+0x55c/0x800 [ 566.315740][T14311] ? __pfx_genl_rcv_msg+0x10/0x10 [ 566.315780][T14311] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 566.315834][T14311] netlink_rcv_skb+0x158/0x420 [ 566.315888][T14311] ? __pfx_genl_rcv_msg+0x10/0x10 [ 566.315928][T14311] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 566.316002][T14311] ? netlink_deliver_tap+0x1ae/0xd30 [ 566.316062][T14311] genl_rcv+0x28/0x40 [ 566.316094][T14311] netlink_unicast+0x5aa/0x870 [ 566.316156][T14311] ? __pfx_netlink_unicast+0x10/0x10 [ 566.316209][T14311] ? __pfx___might_resched+0x10/0x10 [ 566.316270][T14311] netlink_sendmsg+0x8c8/0xdd0 [ 566.316333][T14311] ? __pfx_netlink_sendmsg+0x10/0x10 [ 566.316395][T14311] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 566.316440][T14311] ____sys_sendmsg+0xa98/0xc70 [ 566.316480][T14311] ? copy_msghdr_from_user+0x10a/0x160 [ 566.316532][T14311] ? __pfx_____sys_sendmsg+0x10/0x10 [ 566.316581][T14311] ? __pfx_futex_wake_mark+0x10/0x10 [ 566.316630][T14311] ___sys_sendmsg+0x134/0x1d0 [ 566.316685][T14311] ? futex_private_hash_put+0x176/0x300 [ 566.316745][T14311] ? __pfx____sys_sendmsg+0x10/0x10 [ 566.316792][T14311] ? __lock_acquire+0x622/0x1c90 [ 566.316881][T14311] __sys_sendmsg+0x16d/0x220 [ 566.316935][T14311] ? __pfx___sys_sendmsg+0x10/0x10 [ 566.316985][T14311] ? __x64_sys_futex+0x1e0/0x4c0 [ 566.317048][T14311] do_syscall_64+0xcd/0xfa0 [ 566.317103][T14311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.317138][T14311] RIP: 0033:0x7f131498eec9 [ 566.317166][T14311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.317201][T14311] RSP: 002b:00007f13158d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 566.317233][T14311] RAX: ffffffffffffffda RBX: 00007f1314be5fa0 RCX: 00007f131498eec9 [ 566.317256][T14311] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000004 [ 566.317277][T14311] RBP: 00007f1314a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 566.317298][T14311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 566.317319][T14311] R13: 00007f1314be6038 R14: 00007f1314be5fa0 R15: 00007ffce2f476c8 [ 566.317366][T14311] [ 567.824677][ T30] audit: type=1804 audit(4294967357.995:35): pid=14311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1594" name="/newroot/sys/kernel/debug/tracing/dynamic_events" dev="tracefs" ino=31 res=1 errno=0 [ 567.831220][T14311] kernel read not supported for file /dynamic_events (pid: 14311 comm: syz.2.1594) [ 567.867056][T14334] __vm_enough_memory: pid: 14334, comm: syz.0.1599, bytes: 4398046511104 not enough memory for the allocation [ 567.907746][ T30] audit: type=1800 audit(4294967358.065:36): pid=14311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1594" name="dynamic_events" dev="tracefs" ino=31 res=0 errno=0 [ 568.179503][T14334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.198152][T14334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.226284][T12265] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.334713][T14344] __vm_enough_memory: pid: 14344, comm: syz.0.1599, bytes: 4398046511104 not enough memory for the allocation [ 568.416980][ T8313] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.576690][T14355] Format for adding new port is "id [perm_addr]" (uint MAC). [ 568.691350][T14341] Format for adding new port is "id [perm_addr]" (uint MAC). [ 568.884603][T14368] zram: Added device: zram1 [ 569.088788][T14368] zswap: compressor 000 not available [ 569.416856][T14378] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1606'. [ 569.456984][T14378] ubi8: attaching mtd0 [ 569.465734][T14378] ubi8 error: ubi_attach_mtd_dev: bad VID header (262144) or data offsets (262208) [ 572.046212][T14441] random: crng reseeded on system resumption [ 572.995647][T14456] random: crng reseeded on system resumption [ 579.601852][T14560] __vm_enough_memory: pid: 14560, comm: syz.1.1647, bytes: 4398046511104 not enough memory for the allocation [ 581.455886][T14576] FAULT_INJECTION: forcing a failure. [ 581.455886][T14576] name failslab, interval 1, probability 0, space 0, times 0 [ 581.490986][T14576] CPU: 1 UID: 0 PID: 14576 Comm: syz.2.1652 Tainted: G U W I L XTNJ syzkaller #0 PREEMPT(full) [ 581.491063][T14576] Tainted: [U]=USER, [W]=WARN, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 581.491085][T14576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 581.491105][T14576] Call Trace: [ 581.491116][T14576] [ 581.491128][T14576] dump_stack_lvl+0x16c/0x1f0 [ 581.491185][T14576] should_fail_ex+0x512/0x640 [ 581.491237][T14576] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 581.491289][T14576] should_failslab+0xc2/0x120 [ 581.491322][T14576] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 581.491371][T14576] ? __d_alloc+0x32/0xae0 [ 581.491428][T14576] ? __d_alloc+0x32/0xae0 [ 581.491475][T14576] __d_alloc+0x32/0xae0 [ 581.491522][T14576] ? do_raw_spin_unlock+0x172/0x230 [ 581.491571][T14576] d_alloc+0x4a/0x1e0 [ 581.491623][T14576] d_alloc_name+0x83/0xb0 [ 581.491672][T14576] ? __pfx_d_alloc_name+0x10/0x10 [ 581.491744][T14576] simple_fill_super+0x2eb/0x720 [ 581.491796][T14576] ? __pfx_nfsd_fill_super+0x10/0x10 [ 581.491837][T14576] nfsd_fill_super+0x90/0x5a0 [ 581.491872][T14576] ? __pfx_set_anon_super_fc+0x10/0x10 [ 581.491915][T14576] ? __pfx_nfsd_fill_super+0x10/0x10 [ 581.491953][T14576] get_tree_keyed+0x10e/0x1d0 [ 581.492001][T14576] vfs_get_tree+0x8e/0x340 [ 581.492036][T14576] path_mount+0x7b9/0x23a0 [ 581.492093][T14576] ? __pfx_path_mount+0x10/0x10 [ 581.492146][T14576] ? kmem_cache_free+0x2d4/0x6c0 [ 581.492190][T14576] ? putname+0x154/0x1a0 [ 581.492227][T14576] ? putname+0x154/0x1a0 [ 581.492254][T14576] ? putname+0x154/0x1a0 [ 581.492288][T14576] ? __x64_sys_mount+0x293/0x310 [ 581.492337][T14576] __x64_sys_mount+0x293/0x310 [ 581.492387][T14576] ? __pfx___x64_sys_mount+0x10/0x10 [ 581.492452][T14576] do_syscall_64+0xcd/0xfa0 [ 581.492505][T14576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.492538][T14576] RIP: 0033:0x7f131498eec9 [ 581.492565][T14576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.492599][T14576] RSP: 002b:00007f13158b4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 581.492631][T14576] RAX: ffffffffffffffda RBX: 00007f1314be6090 RCX: 00007f131498eec9 [ 581.492654][T14576] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000000000000000 [ 581.492676][T14576] RBP: 00007f1314a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 581.492703][T14576] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 581.492723][T14576] R13: 00007f1314be6128 R14: 00007f1314be6090 R15: 00007ffce2f476c8 [ 581.492770][T14576] [ 582.097802][T14571] Process accounting paused [ 582.496483][T14595] Malformed UNC in devname [ 582.496483][T14595] [ 582.503153][T14595] CIFS: VFS: Malformed UNC in devname [ 588.208565][T14679] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1668'. [ 588.310287][ T8302] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 926 with max blocks 14 with error 117 [ 588.325261][T14680] netlink: 186 bytes leftover after parsing attributes in process `syz.4.1667'. [ 588.336723][T14680] ubi0: attaching mtd0 [ 588.339733][ T8302] EXT4-fs (sda1): This should not happen!! Data will be lost [ 588.339733][ T8302] [ 588.342767][T14680] ubi0 error: ubi_attach_mtd_dev: bad VID header (262144) or data offsets (262208) [ 588.418359][ T8302] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1376 with max blocks 19 with error 117 [ 588.461839][ T8302] EXT4-fs (sda1): This should not happen!! Data will be lost [ 588.461839][ T8302] [ 592.688105][T14723] tipc: Started in network mode [ 592.763507][T14723] tipc: Node identity ee00, cluster identity 4711 [ 592.769994][T14723] tipc: Node number set to 60928 [ 592.981762][T14736] mmap: syz.2.1678 (14736): VmData 45883392 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 593.279978][ T30] audit: type=1800 audit(4294967383.587:37): pid=14739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=53604 res=0 errno=0 [ 594.431001][T14746] random: crng reseeded on system resumption [ 598.284261][T14835] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 598.904873][T14847] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1704'. [ 599.225763][T14855] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 599.457193][T14857] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27 [ 602.306821][ T52] Bluetooth: hci2: Malformed LE Event: 0x0b [ 603.003721][T14930] hub 1-0:1.0: USB hub found [ 603.012879][T14930] hub 1-0:1.0: 1 port detected [ 603.933536][T14925] FAULT_INJECTION: forcing a failure. [ 603.933536][T14925] name failslab, interval 1, probability 0, space 0, times 0 [ 603.964232][T14925] CPU: 1 UID: 0 PID: 14925 Comm: syz.2.1718 Tainted: G U W I L XTNJ syzkaller #0 PREEMPT(full) [ 603.964309][T14925] Tainted: [U]=USER, [W]=WARN, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 603.964330][T14925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 603.964350][T14925] Call Trace: [ 603.964361][T14925] [ 603.964374][T14925] dump_stack_lvl+0x16c/0x1f0 [ 603.964429][T14925] should_fail_ex+0x512/0x640 [ 603.964482][T14925] ? __kmalloc_noprof+0xca/0x880 [ 603.964538][T14925] should_failslab+0xc2/0x120 [ 603.964572][T14925] __kmalloc_noprof+0xdd/0x880 [ 603.964613][T14925] ? lsm_blob_alloc+0x68/0x90 [ 603.964672][T14925] ? lsm_blob_alloc+0x68/0x90 [ 603.964722][T14925] lsm_blob_alloc+0x68/0x90 [ 603.964775][T14925] security_sk_alloc+0x30/0x270 [ 603.964812][T14925] sk_prot_alloc+0x1c7/0x2a0 [ 603.964853][T14925] sk_alloc+0x36/0xc20 [ 603.964901][T14925] tun_chr_open+0x80/0x5e0 [ 603.964932][T14925] ? __pfx_tun_chr_open+0x10/0x10 [ 603.964963][T14925] misc_open+0x26d/0x450 [ 603.965016][T14925] ? __pfx_misc_open+0x10/0x10 [ 603.965068][T14925] chrdev_open+0x234/0x6a0 [ 603.965122][T14925] ? __pfx_chrdev_open+0x10/0x10 [ 603.965172][T14925] ? fsnotify_open_perm_and_set_mode+0x95/0xa60 [ 603.965223][T14925] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 603.965279][T14925] do_dentry_open+0x982/0x1530 [ 603.965332][T14925] ? __pfx_chrdev_open+0x10/0x10 [ 603.965391][T14925] vfs_open+0x82/0x3f0 [ 603.965430][T14925] path_openat+0x1de4/0x2cb0 [ 603.965501][T14925] ? __pfx_path_openat+0x10/0x10 [ 603.965557][T14925] ? __lock_acquire+0xb8a/0x1c90 [ 603.965596][T14925] do_filp_open+0x20b/0x470 [ 603.965646][T14925] ? __pfx_do_filp_open+0x10/0x10 [ 603.965723][T14925] ? alloc_fd+0x471/0x7d0 [ 603.965778][T14925] do_sys_openat2+0x11b/0x1d0 [ 603.965814][T14925] ? __pfx_do_sys_openat2+0x10/0x10 [ 603.965867][T14925] __x64_sys_openat+0x174/0x210 [ 603.965904][T14925] ? __pfx___x64_sys_openat+0x10/0x10 [ 603.965958][T14925] do_syscall_64+0xcd/0xfa0 [ 603.966008][T14925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.966040][T14925] RIP: 0033:0x7f131498eec9 [ 603.966067][T14925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.966100][T14925] RSP: 002b:00007f1315872038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 603.966132][T14925] RAX: ffffffffffffffda RBX: 00007f1314be6270 RCX: 00007f131498eec9 [ 603.966155][T14925] RDX: 0000000000002002 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 603.966177][T14925] RBP: 00007f1314a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 603.966198][T14925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 603.966218][T14925] R13: 00007f1314be6308 R14: 00007f1314be6270 R15: 00007ffce2f476c8 [ 603.966265][T14925] [ 604.319120][T14950] WARNING! power/level is deprecated; use power/control instead [ 604.793953][T14961] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 604.836911][T14961] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 605.118352][T14971] FAULT_INJECTION: forcing a failure. [ 605.118352][T14971] name failslab, interval 1, probability 0, space 0, times 0 [ 605.138767][T14971] CPU: 1 UID: 0 PID: 14971 Comm: syz.1.1730 Tainted: G U W I L XTNJ syzkaller #0 PREEMPT(full) [ 605.138821][T14971] Tainted: [U]=USER, [W]=WARN, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 605.138837][T14971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 605.138852][T14971] Call Trace: [ 605.138859][T14971] [ 605.138868][T14971] dump_stack_lvl+0x16c/0x1f0 [ 605.138909][T14971] should_fail_ex+0x512/0x640 [ 605.138947][T14971] ? __kmalloc_cache_noprof+0x5f/0x780 [ 605.138981][T14971] should_failslab+0xc2/0x120 [ 605.139004][T14971] __kmalloc_cache_noprof+0x72/0x780 [ 605.139035][T14971] ? trace_parse_run_command+0x58/0x400 [ 605.139069][T14971] ? __pfx_dyn_event_write+0x10/0x10 [ 605.139103][T14971] ? trace_parse_run_command+0x58/0x400 [ 605.139132][T14971] trace_parse_run_command+0x58/0x400 [ 605.139161][T14971] ? __pfx_create_dyn_event+0x10/0x10 [ 605.139200][T14971] ? __pfx_dyn_event_write+0x10/0x10 [ 605.139233][T14971] vfs_writev+0x5df/0xde0 [ 605.139273][T14971] ? __pfx_vfs_writev+0x10/0x10 [ 605.139302][T14971] ? __mutex_lock+0x1c5/0x1060 [ 605.139348][T14971] ? __pfx___mutex_lock+0x10/0x10 [ 605.139395][T14971] ? __fget_files+0x20e/0x3c0 [ 605.139442][T14971] ? do_writev+0x132/0x340 [ 605.139471][T14971] do_writev+0x132/0x340 [ 605.139502][T14971] ? __pfx_do_writev+0x10/0x10 [ 605.139543][T14971] do_syscall_64+0xcd/0xfa0 [ 605.139580][T14971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.139605][T14971] RIP: 0033:0x7f035cb8eec9 [ 605.139623][T14971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.139647][T14971] RSP: 002b:00007f035d980038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 605.139670][T14971] RAX: ffffffffffffffda RBX: 00007f035cde5fa0 RCX: 00007f035cb8eec9 [ 605.139686][T14971] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 605.139700][T14971] RBP: 00007f035cc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 605.139715][T14971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 605.139729][T14971] R13: 00007f035cde6038 R14: 00007f035cde5fa0 R15: 00007ffd24493178 [ 605.139760][T14971] [ 605.843757][T14978] random: crng reseeded on system resumption [ 606.066001][T14985] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 607.066065][T15001] bond0: option all_slaves_active: invalid value () [ 607.146225][T15017] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 607.683362][T15022] netlink: 268 bytes leftover after parsing attributes in process `syz.4.1735'. [ 607.751167][T15022] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.1735: iget: checksum invalid [ 607.767759][T15022] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 607.790279][T15022] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.1735: iget: checksum invalid [ 607.869228][T15022] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 607.884025][T15022] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.1735: iget: checksum invalid [ 607.979317][T15022] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 607.990493][T15022] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.1735: iget: checksum invalid [ 608.003060][T15022] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 608.012571][T15022] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 608.024893][T15022] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 608.533845][T15043] nvme_fabrics: missing parameter 'transport=%s' [ 608.544641][T15043] nvme_fabrics: missing parameter 'nqn=%s' [ 609.375383][T15065] random: crng reseeded on system resumption [ 609.467983][T15063] vhci_hcd: invalid port number 23 [ 609.473164][T15063] vhci_hcd: default hub control req: a009 v8001 i0017 l145 [ 609.561063][T15069] netlink: 'syz.0.1748': attribute type 11 has an invalid length. [ 609.569870][T15069] netlink: 'syz.0.1748': attribute type 11 has an invalid length. [ 609.579821][T15069] netlink: 'syz.0.1748': attribute type 11 has an invalid length. [ 609.587745][T15069] netlink: 'syz.0.1748': attribute type 11 has an invalid length. [ 609.600718][T15069] netlink: 'syz.0.1748': attribute type 11 has an invalid length. [ 610.724110][ T8312] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.918632][ T8312] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.008726][T15090] FAULT_INJECTION: forcing a failure. [ 611.008726][T15090] name failslab, interval 1, probability 0, space 0, times 0 [ 611.083087][T15090] CPU: 1 UID: 0 PID: 15090 Comm: syz.1.1754 Tainted: G U W I L XTNJ syzkaller #0 PREEMPT(full) [ 611.083176][T15090] Tainted: [U]=USER, [W]=WARN, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 611.083198][T15090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 611.083218][T15090] Call Trace: [ 611.083229][T15090] [ 611.083241][T15090] dump_stack_lvl+0x16c/0x1f0 [ 611.083298][T15090] should_fail_ex+0x512/0x640 [ 611.083351][T15090] ? __kmalloc_cache_noprof+0x5f/0x780 [ 611.083399][T15090] should_failslab+0xc2/0x120 [ 611.083432][T15090] __kmalloc_cache_noprof+0x72/0x780 [ 611.083477][T15090] ? nl80211_dump_station+0x26f/0xa80 [ 611.083537][T15090] ? nl80211_dump_station+0x26f/0xa80 [ 611.083589][T15090] nl80211_dump_station+0x26f/0xa80 [ 611.083656][T15090] ? __pfx_nl80211_dump_station+0x10/0x10 [ 611.083769][T15090] ? __alloc_skb+0x200/0x380 [ 611.083832][T15090] genl_dumpit+0x125/0x230 [ 611.083870][T15090] netlink_dump+0x539/0xd30 [ 611.083927][T15090] ? __pfx_netlink_dump+0x10/0x10 [ 611.083997][T15090] ? __asan_memset+0x23/0x50 [ 611.084043][T15090] ? genl_start+0x67f/0x980 [ 611.084083][T15090] __netlink_dump_start+0x6d6/0x990 [ 611.084143][T15090] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 611.084191][T15090] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 611.084230][T15090] ? genl_op_from_small+0x25/0x440 [ 611.084273][T15090] ? __pfx_genl_get_cmd+0x10/0x10 [ 611.084300][T15090] ? __pfx_genl_start+0x10/0x10 [ 611.084327][T15090] ? __pfx_genl_dumpit+0x10/0x10 [ 611.084357][T15090] ? __pfx_genl_done+0x10/0x10 [ 611.084393][T15090] ? __radix_tree_lookup+0x21f/0x2c0 [ 611.084445][T15090] genl_rcv_msg+0x46e/0x800 [ 611.084488][T15090] ? __pfx_genl_rcv_msg+0x10/0x10 [ 611.084526][T15090] ? __pfx_nl80211_dump_station+0x10/0x10 [ 611.084588][T15090] ? netlink_rcv_skb+0x130/0x420 [ 611.084648][T15090] netlink_rcv_skb+0x158/0x420 [ 611.084703][T15090] ? __pfx_genl_rcv_msg+0x10/0x10 [ 611.084742][T15090] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 611.084816][T15090] ? netlink_deliver_tap+0x1ae/0xd30 [ 611.084875][T15090] genl_rcv+0x28/0x40 [ 611.084906][T15090] netlink_unicast+0x5aa/0x870 [ 611.084967][T15090] ? __pfx_netlink_unicast+0x10/0x10 [ 611.085040][T15090] netlink_sendmsg+0x8c8/0xdd0 [ 611.085102][T15090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.085169][T15090] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 611.085214][T15090] ____sys_sendmsg+0xa98/0xc70 [ 611.085254][T15090] ? copy_msghdr_from_user+0x10a/0x160 [ 611.085306][T15090] ? __pfx_____sys_sendmsg+0x10/0x10 [ 611.085355][T15090] ? __pfx_futex_wake_mark+0x10/0x10 [ 611.085404][T15090] ___sys_sendmsg+0x134/0x1d0 [ 611.085451][T15090] ? futex_private_hash_put+0x176/0x300 [ 611.085508][T15090] ? __pfx____sys_sendmsg+0x10/0x10 [ 611.085556][T15090] ? __lock_acquire+0x622/0x1c90 [ 611.085646][T15090] __sys_sendmsg+0x16d/0x220 [ 611.085698][T15090] ? __pfx___sys_sendmsg+0x10/0x10 [ 611.085749][T15090] ? __x64_sys_futex+0x1e0/0x4c0 [ 611.085810][T15090] do_syscall_64+0xcd/0xfa0 [ 611.085862][T15090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.085896][T15090] RIP: 0033:0x7f035cb8eec9 [ 611.085922][T15090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 611.085955][T15090] RSP: 002b:00007f035d980038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 611.085988][T15090] RAX: ffffffffffffffda RBX: 00007f035cde5fa0 RCX: 00007f035cb8eec9 [ 611.086011][T15090] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 611.086032][T15090] RBP: 00007f035cc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 611.086052][T15090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 611.086072][T15090] R13: 00007f035cde6038 R14: 00007f035cde5fa0 R15: 00007ffd24493178 [ 611.086119][T15090] [ 611.487400][ T8312] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.556395][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 611.568251][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 611.577377][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 611.586886][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 611.595644][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 612.265115][ T8312] bond0: left allmulticast mode [ 612.270056][ T8312] bond_slave_0: left allmulticast mode [ 612.306241][ T8312] bond_slave_1: left allmulticast mode [ 612.332520][ T8312] bond0: left promiscuous mode [ 612.346980][ T8312] bond_slave_0: left promiscuous mode [ 612.362439][ T8312] bond_slave_1: left promiscuous mode [ 612.384066][ T8312] bridge0: port 3(bond0) entered disabled state [ 612.404186][ T8312] bridge_slave_1: left allmulticast mode [ 612.409910][ T8312] bridge_slave_1: left promiscuous mode [ 612.418044][ T8312] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.456757][ T8312] bridge_slave_0: left allmulticast mode [ 612.469820][ T8312] bridge_slave_0: left promiscuous mode [ 612.491114][ T8312] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.926676][T15118] Process accounting resumed [ 613.463971][ T8312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 613.477821][ T8312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 613.489017][ T8312] bond0 (unregistering): Released all slaves [ 613.530923][T15123] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1759'. [ 613.664911][ T8312] tipc: Left network mode [ 613.684544][ T5830] Bluetooth: hci2: command tx timeout [ 614.140812][T15096] chnl_net:caif_netlink_parms(): no params data found [ 614.281033][T15153] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 614.731484][T15174] random: crng reseeded on system resumption [ 614.906243][T15164] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 614.991872][T15096] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.025692][T15096] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.063253][T15096] bridge_slave_0: entered allmulticast mode [ 615.092402][T15096] bridge_slave_0: entered promiscuous mode [ 615.198764][T15096] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.290035][T15096] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.306357][T15096] bridge_slave_1: entered allmulticast mode [ 615.322650][T15096] bridge_slave_1: entered promiscuous mode [ 615.717045][T15096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 615.755515][ T5830] Bluetooth: hci2: command tx timeout [ 615.777480][T15096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.974117][T15205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1769'. [ 616.046595][T15096] team0: Port device team_slave_0 added [ 616.175588][ T8312] hsr_slave_0: left promiscuous mode [ 616.181920][ T8312] hsr_slave_1: left promiscuous mode [ 616.230795][ T8312] veth1_macvtap: left promiscuous mode [ 616.245763][ T8312] veth0_macvtap: left promiscuous mode [ 616.262170][ T8312] veth1_vlan: left promiscuous mode [ 616.271276][ T8312] veth0_vlan: left promiscuous mode [ 616.342849][T15214] FAULT_INJECTION: forcing a failure. [ 616.342849][T15214] name failslab, interval 1, probability 0, space 0, times 0 [ 616.356759][T15214] CPU: 0 UID: 0 PID: 15214 Comm: syz.1.1770 Tainted: G U W I L XTNJ syzkaller #0 PREEMPT(full) [ 616.356837][T15214] Tainted: [U]=USER, [W]=WARN, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 616.356860][T15214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 616.356879][T15214] Call Trace: [ 616.356891][T15214] [ 616.356903][T15214] dump_stack_lvl+0x16c/0x1f0 [ 616.356958][T15214] should_fail_ex+0x512/0x640 [ 616.357011][T15214] ? __kmalloc_cache_noprof+0x5f/0x780 [ 616.357058][T15214] should_failslab+0xc2/0x120 [ 616.357090][T15214] __kmalloc_cache_noprof+0x72/0x780 [ 616.357132][T15214] ? devlink_fmsg_put_value+0xaa/0x2d0 [ 616.357166][T15214] ? devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 616.357209][T15214] ? devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 616.357242][T15214] devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 616.357282][T15214] devlink_fmsg_bool_pair_put+0x270/0x2f0 [ 616.357320][T15214] ? __pfx_devlink_fmsg_bool_pair_put+0x10/0x10 [ 616.357358][T15214] ? __kasan_kmalloc+0x10/0xb0 [ 616.357408][T15214] ? devlink_fmsg_nest_common.part.0+0xcd/0x1e0 [ 616.357448][T15214] nsim_dev_dummy_fmsg_put+0x17e/0x1e0 [ 616.357507][T15214] devlink_health_do_dump+0x243/0x620 [ 616.357551][T15214] devlink_health_report+0x6c3/0xb00 [ 616.357597][T15214] ? __pfx_devlink_health_report+0x10/0x10 [ 616.357640][T15214] ? _copy_from_user+0x59/0xd0 [ 616.357678][T15214] nsim_dev_health_break_write+0x166/0x210 [ 616.357726][T15214] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 616.357790][T15214] full_proxy_write+0x131/0x1a0 [ 616.357825][T15214] ? __pfx_full_proxy_write+0x10/0x10 [ 616.357856][T15214] vfs_write+0x2a0/0x11d0 [ 616.357911][T15214] ? __pfx___mutex_lock+0x10/0x10 [ 616.357970][T15214] ? __pfx_vfs_write+0x10/0x10 [ 616.358029][T15214] ? __fget_files+0x20e/0x3c0 [ 616.358085][T15214] ksys_write+0x12a/0x250 [ 616.358133][T15214] ? __pfx_ksys_write+0x10/0x10 [ 616.358195][T15214] do_syscall_64+0xcd/0xfa0 [ 616.358248][T15214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.358283][T15214] RIP: 0033:0x7f035cb8eec9 [ 616.358309][T15214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.358342][T15214] RSP: 002b:00007f035d980038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 616.358374][T15214] RAX: ffffffffffffffda RBX: 00007f035cde5fa0 RCX: 00007f035cb8eec9 [ 616.358396][T15214] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000005 [ 616.358415][T15214] RBP: 00007f035cc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 616.358434][T15214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 616.358453][T15214] R13: 00007f035cde6038 R14: 00007f035cde5fa0 R15: 00007ffd24493178 [ 616.358505][T15214] [ 617.539533][ T8312] team0 (unregistering): Port device team_slave_0 removed [ 617.825755][ T5830] Bluetooth: hci2: command tx timeout [ 617.945326][ T5830] Bluetooth: hci1: unexpected event 0x02 length: 726 > 260 [ 618.632484][T15096] team0: Port device team_slave_1 added [ 618.792866][T15096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 618.799887][T15096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.889048][T15096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.016983][T15096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.046972][T15096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.160755][T15096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.388786][T15096] hsr_slave_0: entered promiscuous mode [ 619.415596][T15096] hsr_slave_1: entered promiscuous mode [ 619.426100][T15096] debugfs: 'hsr0' already exists in 'hsr' [ 619.433211][T15096] Cannot create hsr debugfs directory [ 619.867550][T15244] zswap: compressor  not available [ 619.902052][ T5830] Bluetooth: hci2: command tx timeout [ 620.104624][T15244] zswap: compressor  not available [ 620.211433][T15266] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 620.272910][T15269] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 620.865725][T15096] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 620.901390][T15096] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 620.989605][T15096] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 621.111298][T15096] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 621.822415][T15096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.951221][T15337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1790'. [ 622.001596][T15341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1790'. [ 622.034346][T15096] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.099803][T11105] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.107085][T11105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.220395][T11105] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.227579][T11105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.370101][T15096] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 622.413582][T15096] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 622.729726][T15357] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1792'. [ 622.739162][T15357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 622.974428][T15357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.124279][T15096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.129320][T15096] veth0_vlan: entered promiscuous mode [ 624.237189][T15096] veth1_vlan: entered promiscuous mode [ 624.313653][T15096] veth0_macvtap: entered promiscuous mode [ 624.326080][T15096] veth1_macvtap: entered promiscuous mode [ 624.353950][T15096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.380269][T15096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.501275][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.549502][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.569776][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.633312][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.362732][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.379412][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.480515][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.498904][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.718053][T15414] netlink: 'syz.1.1800': attribute type 23 has an invalid length. [ 625.877779][T15423] FAULT_INJECTION: forcing a failure. [ 625.877779][T15423] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 625.883261][T15423] CPU: 1 UID: 0 PID: 15423 Comm: syz.1.1800 Tainted: G U W I L XTNJ syzkaller #0 PREEMPT(full) [ 625.883332][T15423] Tainted: [U]=USER, [W]=WARN, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 625.883353][T15423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 625.883372][T15423] Call Trace: [ 625.883383][T15423] [ 625.883395][T15423] dump_stack_lvl+0x16c/0x1f0 [ 625.883444][T15423] should_fail_ex+0x512/0x640 [ 625.883485][T15423] should_fail_alloc_page+0xe7/0x130 [ 625.883511][T15423] prepare_alloc_pages+0x3c2/0x610 [ 625.883533][T15423] ? arch_stack_walk+0xa6/0x100 [ 625.883568][T15423] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 625.883608][T15423] ? stack_trace_save+0x8e/0xc0 [ 625.883643][T15423] ? __pfx_stack_trace_save+0x10/0x10 [ 625.883680][T15423] ? stack_depot_save_flags+0x29/0x9c0 [ 625.883721][T15423] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 625.883755][T15423] ? kasan_save_stack+0x42/0x60 [ 625.883789][T15423] ? kasan_save_stack+0x33/0x60 [ 625.883823][T15423] ? kasan_save_track+0x14/0x30 [ 625.883857][T15423] ? __kasan_slab_alloc+0x89/0x90 [ 625.883892][T15423] ? kmem_cache_alloc_noprof+0x250/0x6e0 [ 625.883922][T15423] ? security_inode_alloc+0x3b/0x2b0 [ 625.883947][T15423] ? inode_init_always_gfp+0xce4/0x1030 [ 625.883989][T15423] ? do_syscall_64+0xcd/0xfa0 [ 625.884023][T15423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.884054][T15423] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 625.884088][T15423] ? policy_nodemask+0xea/0x4e0 [ 625.884113][T15423] alloc_pages_mpol+0x1fb/0x550 [ 625.884137][T15423] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 625.884169][T15423] ___kmalloc_large_node+0xed/0x160 [ 625.884192][T15423] ? __lock_acquire+0x622/0x1c90 [ 625.884218][T15423] __kmalloc_large_node_noprof+0x1c/0x70 [ 625.884246][T15423] __kmalloc_noprof.cold+0xc/0x62 [ 625.884282][T15423] ? sk_prot_alloc+0x1a8/0x2a0 [ 625.884311][T15423] ? sk_prot_alloc+0x1a8/0x2a0 [ 625.884334][T15423] sk_prot_alloc+0x1a8/0x2a0 [ 625.884361][T15423] sk_alloc+0x36/0xc20 [ 625.884395][T15423] can_create+0x1e5/0x630 [ 625.884435][T15423] __sock_create+0x338/0x8d0 [ 625.884467][T15423] __sys_socket+0x14d/0x260 [ 625.884495][T15423] ? __pfx___sys_socket+0x10/0x10 [ 625.884523][T15423] ? xfd_validate_state+0x61/0x180 [ 625.884547][T15423] ? __pfx_ksys_write+0x10/0x10 [ 625.884587][T15423] __x64_sys_socket+0x72/0xb0 [ 625.884614][T15423] ? lockdep_hardirqs_on+0x7c/0x110 [ 625.884649][T15423] do_syscall_64+0xcd/0xfa0 [ 625.884685][T15423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.884709][T15423] RIP: 0033:0x7f035cb8eec9 [ 625.884727][T15423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.884749][T15423] RSP: 002b:00007f035d93e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 625.884771][T15423] RAX: ffffffffffffffda RBX: 00007f035cde6180 RCX: 00007f035cb8eec9 [ 625.884787][T15423] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000001d [ 625.884801][T15423] RBP: 00007f035cc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 625.884815][T15423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.884829][T15423] R13: 00007f035cde6218 R14: 00007f035cde6180 R15: 00007ffd24493178 [ 625.884861][T15423] [ 625.975522][T15423] IPVS: length: 7562853 != 24 [ 630.255560][T15485] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 630.929668][T15480] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1814'. [ 631.014332][T15480] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.1814: iget: checksum invalid [ 631.118835][T15480] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 631.130832][T15480] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.1814: iget: checksum invalid [ 631.145144][T15480] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 631.157362][T15480] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.1814: iget: checksum invalid [ 631.169160][T15480] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 631.180265][T15480] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.1814: iget: checksum invalid [ 631.191790][T15480] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 631.322266][T15494] netlink: 'syz.5.1817': attribute type 1 has an invalid length. [ 631.390497][T15480] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 631.413439][T15480] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 634.903504][T15556] netlink: 'syz.5.1829': attribute type 1 has an invalid length. [ 636.167443][T15579] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 636.167443][T15579] The task syz.2.1833 (15579) triggered the difference, watch for misbehavior. [ 636.871428][T15597] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 638.053413][ T5830] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 638.066361][T15611] tipc: Started in network mode [ 638.075897][T15611] tipc: Node identity ee00, cluster identity 4711 [ 638.091538][T15611] tipc: Node number set to 60928 [ 639.237174][T15630] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 639.330781][T12212] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1382 with max blocks 13 with error 117 [ 639.372131][T12212] EXT4-fs (sda1): This should not happen!! Data will be lost [ 639.372131][T12212] [ 639.799599][T15651] Console: switching to colour frame buffer device 128x48 [ 640.443992][T15667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1843'. [ 640.677729][T15671] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1845'. [ 641.804058][T15681] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 641.852612][T15681] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 641.892585][T15681] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 641.911929][T15681] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 641.921882][T15681] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 642.095739][T15681] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 642.282339][T15701] openvswitch: netlink: IP tunnel dst address not specified [ 642.791512][T15701] zswap: compressor 000 not available [ 643.067948][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout [ 643.862601][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout [ 643.941203][T15683] Process accounting paused [ 643.942486][ T5830] Bluetooth: hci2: command 0x0c1a tx timeout [ 643.947528][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 644.368655][T15724] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 644.382051][T15724] FAULT_INJECTION: forcing a failure. [ 644.382051][T15724] name failslab, interval 1, probability 0, space 0, times 0 [ 644.396431][T15724] CPU: 1 UID: 0 PID: 15724 Comm: syz.4.1858 Tainted: G U W I L XTNJ syzkaller #0 PREEMPT(full) [ 644.396507][T15724] Tainted: [U]=USER, [W]=WARN, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 644.396528][T15724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 644.396549][T15724] Call Trace: [ 644.396565][T15724] [ 644.396577][T15724] dump_stack_lvl+0x16c/0x1f0 [ 644.396634][T15724] should_fail_ex+0x512/0x640 [ 644.396687][T15724] ? fs_reclaim_acquire+0xae/0x150 [ 644.396725][T15724] should_failslab+0xc2/0x120 [ 644.396757][T15724] __kmalloc_noprof+0xdd/0x880 [ 644.396798][T15724] ? kfree+0x252/0x6d0 [ 644.396836][T15724] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 644.396890][T15724] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 644.396939][T15724] tomoyo_realpath_from_path+0xc2/0x6e0 [ 644.396991][T15724] ? tomoyo_profile+0x47/0x60 [ 644.397049][T15724] tomoyo_path_number_perm+0x245/0x580 [ 644.397118][T15724] ? tomoyo_path_number_perm+0x237/0x580 [ 644.397164][T15724] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 644.397245][T15724] ? d_alloc_parallel+0xae4/0x1480 [ 644.397286][T15724] ? current_check_access_path+0x33c/0x460 [ 644.397340][T15724] ? __pfx_current_check_access_path+0x10/0x10 [ 644.397413][T15724] tomoyo_path_mknod+0x10c/0x190 [ 644.397468][T15724] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 644.397533][T15724] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 644.397587][T15724] security_path_mknod+0x161/0x310 [ 644.397635][T15724] lookup_open.isra.0+0xc17/0x1580 [ 644.397688][T15724] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 644.397740][T15724] ? find_held_lock+0x2b/0x80 [ 644.397798][T15724] ? __pfx_down_write+0x10/0x10 [ 644.397843][T15724] path_openat+0x893/0x2cb0 [ 644.397906][T15724] ? __pfx_path_openat+0x10/0x10 [ 644.397956][T15724] ? __lock_acquire+0xb8a/0x1c90 [ 644.397996][T15724] do_filp_open+0x20b/0x470 [ 644.398047][T15724] ? __pfx_do_filp_open+0x10/0x10 [ 644.398129][T15724] ? alloc_fd+0x471/0x7d0 [ 644.398187][T15724] do_sys_openat2+0x11b/0x1d0 [ 644.398224][T15724] ? __pfx_do_sys_openat2+0x10/0x10 [ 644.398279][T15724] __x64_sys_openat+0x174/0x210 [ 644.398319][T15724] ? __pfx___x64_sys_openat+0x10/0x10 [ 644.398382][T15724] do_syscall_64+0xcd/0xfa0 [ 644.398435][T15724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.398470][T15724] RIP: 0033:0x7fce32f8eec9 [ 644.398499][T15724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.398531][T15724] RSP: 002b:00007fce33ead038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 644.398563][T15724] RAX: ffffffffffffffda RBX: 00007fce331e5fa0 RCX: 00007fce32f8eec9 [ 644.398585][T15724] RDX: 0000000000183841 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 644.398608][T15724] RBP: 00007fce33011f91 R08: 0000000000000000 R09: 0000000000000000 [ 644.398629][T15724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 644.398649][T15724] R13: 00007fce331e6038 R14: 00007fce331e5fa0 R15: 00007ffec3fef568 [ 644.398696][T15724] [ 644.734230][T15724] ERROR: Out of memory at tomoyo_realpath_from_path. [ 646.016122][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 647.974391][T15807] netlink: 186 bytes leftover after parsing attributes in process `syz.5.1876'. [ 648.018963][T15807] netlink: 146 bytes leftover after parsing attributes in process `syz.5.1876'. [ 648.082942][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 648.641270][T15831] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 648.694826][T15831] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1880'. [ 648.776680][T15831] ipvlan0: entered promiscuous mode [ 648.793475][T15831] ipvlan0: entered allmulticast mode [ 648.800309][T15831] veth0_vlan: entered allmulticast mode [ 648.932452][T15838] FAULT_INJECTION: forcing a failure. [ 648.932452][T15838] name failslab, interval 1, probability 0, space 0, times 0 [ 648.946046][T15838] CPU: 1 UID: 0 PID: 15838 Comm: syz.2.1889 Tainted: G U W I L XTNJ syzkaller #0 PREEMPT(full) [ 648.946115][T15838] Tainted: [U]=USER, [W]=WARN, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 648.946136][T15838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 648.946156][T15838] Call Trace: [ 648.946166][T15838] [ 648.946178][T15838] dump_stack_lvl+0x16c/0x1f0 [ 648.946231][T15838] should_fail_ex+0x512/0x640 [ 648.946281][T15838] ? fs_reclaim_acquire+0xae/0x150 [ 648.946317][T15838] should_failslab+0xc2/0x120 [ 648.946349][T15838] __kmalloc_noprof+0xdd/0x880 [ 648.946391][T15838] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 648.946447][T15838] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 648.946493][T15838] tomoyo_realpath_from_path+0xc2/0x6e0 [ 648.946544][T15838] ? tomoyo_profile+0x47/0x60 [ 648.946598][T15838] tomoyo_path_number_perm+0x245/0x580 [ 648.946634][T15838] ? tomoyo_path_number_perm+0x237/0x580 [ 648.946677][T15838] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 648.946770][T15838] ? find_held_lock+0x2b/0x80 [ 648.946814][T15838] ? hook_file_ioctl_common+0x145/0x410 [ 648.946867][T15838] ? __fget_files+0x20e/0x3c0 [ 648.946917][T15838] security_file_ioctl+0x9b/0x240 [ 648.946960][T15838] __x64_sys_ioctl+0xb7/0x210 [ 648.947000][T15838] do_syscall_64+0xcd/0xfa0 [ 648.947042][T15838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.947065][T15838] RIP: 0033:0x7f131498eec9 [ 648.947082][T15838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.947105][T15838] RSP: 002b:00007f1315893038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 648.947127][T15838] RAX: ffffffffffffffda RBX: 00007f1314be6180 RCX: 00007f131498eec9 [ 648.947142][T15838] RDX: 0010000000000402 RSI: 000000000000541b RDI: 0000000000000003 [ 648.947157][T15838] RBP: 00007f1315893090 R08: 0000000000000000 R09: 0000000000000000 [ 648.947171][T15838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.947184][T15838] R13: 00007f1314be6218 R14: 00007f1314be6180 R15: 00007ffce2f476c8 [ 648.947214][T15838] [ 648.958652][T15838] ERROR: Out of memory at tomoyo_realpath_from_path. [ 652.729192][ T52] Bluetooth: hci1: Malformed LE Event: 0x1b [ 654.885406][T15930] FAULT_INJECTION: forcing a failure. [ 654.885406][T15930] name failslab, interval 1, probability 0, space 0, times 0 [ 654.947835][T15930] CPU: 0 UID: 0 PID: 15930 Comm: syz.1.1896 Tainted: G U W I L XTNJ syzkaller #0 PREEMPT(full) [ 654.947915][T15930] Tainted: [U]=USER, [W]=WARN, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 654.947937][T15930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 654.947958][T15930] Call Trace: [ 654.947969][T15930] [ 654.947982][T15930] dump_stack_lvl+0x16c/0x1f0 [ 654.948038][T15930] should_fail_ex+0x512/0x640 [ 654.948098][T15930] should_failslab+0xc2/0x120 [ 654.948131][T15930] __kmalloc_cache_noprof+0x72/0x780 [ 654.948176][T15930] ? bdi_split_work_to_wbs+0x2bd/0xf90 [ 654.948212][T15930] ? __pfx_do_writepages+0x10/0x10 [ 654.948251][T15930] ? bdi_split_work_to_wbs+0x2bd/0xf90 [ 654.948283][T15930] bdi_split_work_to_wbs+0x2bd/0xf90 [ 654.948326][T15930] ? __pfx_bdi_split_work_to_wbs+0x10/0x10 [ 654.948374][T15930] ? __pfx_down_write+0x10/0x10 [ 654.948418][T15930] sync_inodes_sb+0x1ae/0xa70 [ 654.948459][T15930] ? __pfx_sync_inodes_sb+0x10/0x10 [ 654.948519][T15930] ? get_nr_dirty_inodes+0x170/0x1e0 [ 654.948564][T15930] sync_filesystem+0x177/0x290 [ 654.948612][T15930] ? __pfx_fs_bdev_sync+0x10/0x10 [ 654.948674][T15930] fs_bdev_sync+0x2c/0x40 [ 654.948716][T15930] blkdev_common_ioctl+0xf04/0x2470 [ 654.948761][T15930] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 654.948807][T15930] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 654.948860][T15930] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 654.948908][T15930] ? do_vfs_ioctl+0x128/0x14f0 [ 654.948946][T15930] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 654.948997][T15930] ? find_held_lock+0x2b/0x80 [ 654.949051][T15930] blkdev_ioctl+0x1cb/0x6d0 [ 654.949095][T15930] ? __pfx_blkdev_ioctl+0x10/0x10 [ 654.949144][T15930] ? __pfx_blkdev_ioctl+0x10/0x10 [ 654.949191][T15930] __x64_sys_ioctl+0x18e/0x210 [ 654.949232][T15930] do_syscall_64+0xcd/0xfa0 [ 654.949283][T15930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.949316][T15930] RIP: 0033:0x7f035cb8eec9 [ 654.949344][T15930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.949379][T15930] RSP: 002b:00007f035d95f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 654.949412][T15930] RAX: ffffffffffffffda RBX: 00007f035cde6090 RCX: 00007f035cb8eec9 [ 654.949434][T15930] RDX: 0000000000000000 RSI: 0000000000001261 RDI: 0000000000000008 [ 654.949455][T15930] RBP: 00007f035cc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 654.949482][T15930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.949503][T15930] R13: 00007f035cde6128 R14: 00007f035cde6090 R15: 00007ffd24493178 [ 654.949551][T15930] [ 657.881056][T15975] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 658.022338][T15980] FAULT_INJECTION: forcing a failure. [ 658.022338][T15980] name failslab, interval 1, probability 0, space 0, times 0 [ 658.036661][T15980] CPU: 0 UID: 0 PID: 15980 Comm: syz.2.1908 Tainted: G U W I L XTNJ syzkaller #0 PREEMPT(full) [ 658.036733][T15980] Tainted: [U]=USER, [W]=WARN, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 658.036753][T15980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 658.036772][T15980] Call Trace: [ 658.036782][T15980] [ 658.036794][T15980] dump_stack_lvl+0x16c/0x1f0 [ 658.036851][T15980] should_fail_ex+0x512/0x640 [ 658.036903][T15980] ? fs_reclaim_acquire+0xae/0x150 [ 658.036939][T15980] should_failslab+0xc2/0x120 [ 658.036972][T15980] __kmalloc_cache_noprof+0x72/0x780 [ 658.037027][T15980] ? usb_control_msg+0xbc/0x4a0 [ 658.037080][T15980] ? usb_control_msg+0xbc/0x4a0 [ 658.037126][T15980] usb_control_msg+0xbc/0x4a0 [ 658.037173][T15980] ? __pfx_usb_control_msg+0x10/0x10 [ 658.037232][T15980] hub_ext_port_status+0x14e/0x670 [ 658.037292][T15980] hub_activate+0x6e5/0x1d60 [ 658.037352][T15980] ? __pfx_hub_activate+0x10/0x10 [ 658.037394][T15980] ? find_held_lock+0x2b/0x80 [ 658.037439][T15980] ? usbdev_ioctl+0x35a0/0x4070 [ 658.037492][T15980] hub_resume+0xa8/0x3f0 [ 658.037539][T15980] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 658.037593][T15980] ? __pfx_hub_resume+0x10/0x10 [ 658.037638][T15980] ? __pfx_hcd_bus_resume+0x10/0x10 [ 658.037684][T15980] usb_resume_interface.constprop.0.isra.0+0x2c5/0x3e0 [ 658.037727][T15980] usb_resume_both+0x237/0x960 [ 658.037762][T15980] ? __pfx_usb_resume_both+0x10/0x10 [ 658.037798][T15980] ? __pfx_usb_runtime_resume+0x10/0x10 [ 658.037842][T15980] ? __pfx_usb_runtime_resume+0x10/0x10 [ 658.037882][T15980] __rpm_callback+0xc8/0x610 [ 658.037932][T15980] ? __pfx_usb_runtime_resume+0x10/0x10 [ 658.038001][T15980] rpm_callback+0x1b7/0x200 [ 658.038034][T15980] ? __pfx_usb_runtime_resume+0x10/0x10 [ 658.038064][T15980] rpm_resume+0xd16/0x1320 [ 658.038104][T15980] ? __pfx_rpm_resume+0x10/0x10 [ 658.038136][T15980] ? do_raw_spin_lock+0x12c/0x2b0 [ 658.038166][T15980] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 658.038211][T15980] __pm_runtime_resume+0xb6/0x170 [ 658.038247][T15980] usb_autoresume_device+0x23/0xe0 [ 658.038277][T15980] usbdev_open+0x228/0x8b0 [ 658.038306][T15980] ? do_raw_spin_lock+0x12c/0x2b0 [ 658.038335][T15980] ? __pfx_usbdev_open+0x10/0x10 [ 658.038363][T15980] ? chrdev_open+0x58c/0x6a0 [ 658.038403][T15980] ? __pfx_usbdev_open+0x10/0x10 [ 658.038431][T15980] chrdev_open+0x234/0x6a0 [ 658.038468][T15980] ? __pfx_chrdev_open+0x10/0x10 [ 658.038506][T15980] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 658.038546][T15980] do_dentry_open+0x982/0x1530 [ 658.038582][T15980] ? __pfx_chrdev_open+0x10/0x10 [ 658.038624][T15980] vfs_open+0x82/0x3f0 [ 658.038652][T15980] path_openat+0x1de4/0x2cb0 [ 658.038696][T15980] ? __pfx_path_openat+0x10/0x10 [ 658.038731][T15980] ? __lock_acquire+0xb8a/0x1c90 [ 658.038758][T15980] do_filp_open+0x20b/0x470 [ 658.038793][T15980] ? __pfx_do_filp_open+0x10/0x10 [ 658.038848][T15980] ? alloc_fd+0x471/0x7d0 [ 658.038887][T15980] do_sys_openat2+0x11b/0x1d0 [ 658.038913][T15980] ? __pfx_do_sys_openat2+0x10/0x10 [ 658.038950][T15980] __x64_sys_openat+0x174/0x210 [ 658.038983][T15980] ? __pfx___x64_sys_openat+0x10/0x10 [ 658.039023][T15980] do_syscall_64+0xcd/0xfa0 [ 658.039061][T15980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.039085][T15980] RIP: 0033:0x7f131498eec9 [ 658.039104][T15980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.039127][T15980] RSP: 002b:00007f13158d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 658.039150][T15980] RAX: ffffffffffffffda RBX: 00007f1314be5fa0 RCX: 00007f131498eec9 [ 658.039166][T15980] RDX: 0000000000040101 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 658.039181][T15980] RBP: 00007f1314a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 658.039195][T15980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 658.039210][T15980] R13: 00007f1314be6038 R14: 00007f1314be5fa0 R15: 00007ffce2f476c8 [ 658.039241][T15980] [ 658.494957][T15980] hub 2-0:1.0: hub_ext_port_status failed (err = -12) [ 659.963669][T16012] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 660.580368][T16021] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 660.823354][T16021] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1916'. [ 660.970604][T16032] Console: switching to colour VGA+ 32x100 [ 661.068783][T16034] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 661.173073][T16021] ipvlan0: entered promiscuous mode [ 661.173099][T16021] ipvlan0: entered allmulticast mode [ 661.173114][T16021] veth0_vlan: entered allmulticast mode [ 661.257392][T16031] ================================================================== [ 661.257417][T16031] BUG: KASAN: slab-use-after-free in fbcon_prepare_logo+0xa03/0xc70 [ 661.257478][T16031] Read of size 256 at addr ffff888058b9e3c0 by task syz.5.1917/16031 [ 661.257506][T16031] [ 661.257525][T16031] CPU: 0 UID: 0 PID: 16031 Comm: syz.5.1917 Tainted: G U W I L XTNJ syzkaller #0 PREEMPT(full) [ 661.257597][T16031] Tainted: [U]=USER, [W]=WARN, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 661.257618][T16031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 661.257638][T16031] Call Trace: [ 661.257648][T16031] [ 661.257668][T16031] dump_stack_lvl+0x116/0x1f0 [ 661.257719][T16031] print_report+0xcd/0x630 [ 661.257749][T16031] ? __virt_addr_valid+0x81/0x610 [ 661.257780][T16031] ? __phys_addr+0xe8/0x180 [ 661.257812][T16031] ? fbcon_prepare_logo+0xa03/0xc70 [ 661.257861][T16031] kasan_report+0xe0/0x110 [ 661.257894][T16031] ? fbcon_prepare_logo+0xa03/0xc70 [ 661.257952][T16031] kasan_check_range+0x100/0x1b0 [ 661.257997][T16031] __asan_memcpy+0x23/0x60 [ 661.258043][T16031] fbcon_prepare_logo+0xa03/0xc70 [ 661.258103][T16031] fbcon_init+0xd77/0x1900 [ 661.258154][T16031] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 661.258207][T16031] visual_init+0x320/0x620 [ 661.258260][T16031] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 661.258303][T16031] store_bind+0x61d/0x760 [ 661.258339][T16031] ? sysfs_file_kobj+0xe4/0x290 [ 661.258386][T16031] ? __pfx_store_bind+0x10/0x10 [ 661.258419][T16031] dev_attr_store+0x58/0x80 [ 661.258468][T16031] ? __pfx_dev_attr_store+0x10/0x10 [ 661.258517][T16031] sysfs_kf_write+0xf2/0x150 [ 661.258565][T16031] kernfs_fop_write_iter+0x3af/0x570 [ 661.258606][T16031] ? __pfx_sysfs_kf_write+0x10/0x10 [ 661.258661][T16031] iter_file_splice_write+0xa24/0x12e0 [ 661.258722][T16031] ? __pfx_iter_file_splice_write+0x10/0x10 [ 661.258773][T16031] ? __pfx_copy_splice_read+0x10/0x10 [ 661.258826][T16031] ? __pfx_iter_file_splice_write+0x10/0x10 [ 661.258874][T16031] direct_splice_actor+0x192/0x6c0 [ 661.258920][T16031] splice_direct_to_actor+0x345/0xa30 [ 661.258964][T16031] ? __pfx_direct_splice_actor+0x10/0x10 [ 661.259011][T16031] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 661.259061][T16031] do_splice_direct+0x174/0x240 [ 661.259103][T16031] ? __pfx_do_splice_direct+0x10/0x10 [ 661.259147][T16031] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 661.259194][T16031] ? rw_verify_area+0xcf/0x6c0 [ 661.259238][T16031] do_sendfile+0xb06/0xe50 [ 661.259286][T16031] ? __pfx_do_sendfile+0x10/0x10 [ 661.259333][T16031] ? __x64_sys_futex+0x1e0/0x4c0 [ 661.259367][T16031] ? __x64_sys_futex+0x1e9/0x4c0 [ 661.259404][T16031] __x64_sys_sendfile64+0x1d8/0x220 [ 661.259437][T16031] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 661.259474][T16031] do_syscall_64+0xcd/0xfa0 [ 661.259525][T16031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.259559][T16031] RIP: 0033:0x7f2587f8eec9 [ 661.259583][T16031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.259615][T16031] RSP: 002b:00007f2588d69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 661.259645][T16031] RAX: ffffffffffffffda RBX: 00007f25881e6090 RCX: 00007f2587f8eec9 [ 661.259673][T16031] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000003 [ 661.259694][T16031] RBP: 00007f2588011f91 R08: 0000000000000000 R09: 0000000000000000 [ 661.259716][T16031] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 661.259737][T16031] R13: 00007f25881e6128 R14: 00007f25881e6090 R15: 00007ffdab701558 [ 661.259771][T16031] [ 661.259783][T16031] [ 661.259792][T16031] Allocated by task 5813: [ 661.259808][T16031] kasan_save_stack+0x33/0x60 [ 661.259857][T16031] kasan_save_track+0x14/0x30 [ 661.259907][T16031] __kasan_slab_alloc+0x89/0x90 [ 661.259959][T16031] kmem_cache_alloc_node_noprof+0x28a/0x770 [ 661.260003][T16031] kmalloc_reserve+0x18b/0x2c0 [ 661.260035][T16031] __alloc_skb+0x166/0x380 [ 661.260077][T16031] tcp_stream_alloc_skb+0x34/0x560 [ 661.260116][T16031] tcp_sendmsg_locked+0x12d9/0x42e0 [ 661.260155][T16031] tcp_sendmsg+0x2e/0x50 [ 661.260191][T16031] inet_sendmsg+0xb9/0x140 [ 661.260232][T16031] sock_write_iter+0x509/0x610 [ 661.260265][T16031] vfs_write+0x7d3/0x11d0 [ 661.260309][T16031] ksys_write+0x1f8/0x250 [ 661.260354][T16031] do_syscall_64+0xcd/0xfa0 [ 661.260401][T16031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.260434][T16031] [ 661.260441][T16031] Freed by task 5826: [ 661.260456][T16031] kasan_save_stack+0x33/0x60 [ 661.260504][T16031] kasan_save_track+0x14/0x30 [ 661.260551][T16031] __kasan_save_free_info+0x3b/0x60 [ 661.260591][T16031] __kasan_slab_free+0x5f/0x80 [ 661.260642][T16031] kmem_cache_free+0x2d4/0x6c0 [ 661.260691][T16031] skb_free_head+0x1b7/0x210 [ 661.260730][T16031] skb_release_data+0x795/0x9e0 [ 661.260773][T16031] __kfree_skb+0x4f/0x70 [ 661.260820][T16031] tcp_ack+0x1d37/0x5fc0 [ 661.260852][T16031] tcp_rcv_established+0x749/0x3700 [ 661.260891][T16031] tcp_v4_do_rcv+0x5ca/0xa90 [ 661.260930][T16031] tcp_v4_rcv+0x3077/0x47d0 [ 661.260970][T16031] ip_protocol_deliver_rcu+0xba/0x4c0 [ 661.261016][T16031] ip_local_deliver_finish+0x3f2/0x720 [ 661.261063][T16031] ip_local_deliver+0x18e/0x1f0 [ 661.261106][T16031] ip_sublist_rcv_finish+0x2ce/0x660 [ 661.261149][T16031] ip_list_rcv_finish+0x590/0x780 [ 661.261193][T16031] ip_list_rcv+0x335/0x450 [ 661.261234][T16031] __netif_receive_skb_list_core+0x752/0x950 [ 661.261278][T16031] netif_receive_skb_list_internal+0x75f/0xdc0 [ 661.261322][T16031] napi_complete_done+0x23f/0x970 [ 661.261365][T16031] virtnet_poll+0x1cf0/0x3c10 [ 661.261410][T16031] __napi_poll.constprop.0+0xba/0x550 [ 661.261454][T16031] net_rx_action+0x97f/0xef0 [ 661.261495][T16031] handle_softirqs+0x219/0x8e0 [ 661.261542][T16031] __irq_exit_rcu+0x109/0x170 [ 661.261587][T16031] irq_exit_rcu+0x9/0x30 [ 661.261634][T16031] common_interrupt+0xbf/0xe0 [ 661.261679][T16031] asm_common_interrupt+0x26/0x40 [ 661.261712][T16031] [ 661.261720][T16031] The buggy address belongs to the object at ffff888058b9e3c0 [ 661.261720][T16031] which belongs to the cache skbuff_small_head of size 704 [ 661.261750][T16031] The buggy address is located 0 bytes inside of [ 661.261750][T16031] freed 704-byte region [ffff888058b9e3c0, ffff888058b9e680) [ 661.261784][T16031] [ 661.261792][T16031] The buggy address belongs to the physical page: [ 661.261818][T16031] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x58b9c [ 661.261848][T16031] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 661.261874][T16031] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 661.261901][T16031] page_type: f5(slab) [ 661.261929][T16031] raw: 00fff00000000040 ffff888140ac8b40 0000000000000000 dead000000000001 [ 661.261958][T16031] raw: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 661.261989][T16031] head: 00fff00000000040 ffff888140ac8b40 0000000000000000 dead000000000001 [ 661.262017][T16031] head: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 661.262047][T16031] head: 00fff00000000002 ffffea000162e701 00000000ffffffff 00000000ffffffff [ 661.262076][T16031] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 661.262096][T16031] page dumped because: kasan: bad access detected [ 661.262112][T16031] page_owner tracks the page as allocated [ 661.262123][T16031] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xf2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_MEMALLOC|__GFP_COMP|__GFP_NOMEMALLOC), pid 5813, tgid 5813 (syz-executor), ts 540371042516, free_ts 523123999556 [ 661.262179][T16031] post_alloc_hook+0x1c0/0x230 [ 661.262218][T16031] get_page_from_freelist+0x10a3/0x3a30 [ 661.262261][T16031] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 661.262306][T16031] alloc_pages_mpol+0x1fb/0x550 [ 661.262335][T16031] new_slab+0x24a/0x360 [ 661.262370][T16031] ___slab_alloc+0xdc4/0x1ae0 [ 661.262406][T16031] __slab_alloc.constprop.0+0x63/0x110 [ 661.262446][T16031] kmem_cache_alloc_node_noprof+0x43c/0x770 [ 661.262491][T16031] kmalloc_reserve+0x18b/0x2c0 [ 661.262521][T16031] __alloc_skb+0x166/0x380 [ 661.262564][T16031] napi_alloc_skb+0x3fa/0x830 [ 661.262610][T16031] page_to_skb+0x184/0xcc0 [ 661.262660][T16031] receive_buf+0x789/0x4510 [ 661.262704][T16031] virtnet_poll+0x10d4/0x3c10 [ 661.262749][T16031] __napi_poll.constprop.0+0xba/0x550 [ 661.262793][T16031] net_rx_action+0x97f/0xef0 [ 661.262834][T16031] page last free pid 5826 tgid 5826 stack trace: [ 661.262852][T16031] __free_frozen_pages+0x7df/0x1160 [ 661.262887][T16031] __put_partials+0x130/0x170 [ 661.262927][T16031] qlist_free_all+0x4d/0x120 [ 661.262972][T16031] kasan_quarantine_reduce+0x195/0x1e0 [ 661.263021][T16031] __kasan_slab_alloc+0x69/0x90 [ 661.263072][T16031] kmem_cache_alloc_lru_noprof+0x254/0x6e0 [ 661.263115][T16031] shmem_alloc_inode+0x25/0x50 [ 661.263167][T16031] alloc_inode+0x64/0x240 [ 661.263197][T16031] new_inode+0x22/0x1c0 [ 661.263225][T16031] shmem_get_inode+0x19a/0xfb0 [ 661.263256][T16031] shmem_mknod+0x1a8/0x450 [ 661.263286][T16031] shmem_mkdir+0x31/0x80 [ 661.263315][T16031] vfs_mkdir+0x593/0x8c0 [ 661.263351][T16031] do_mkdirat+0x304/0x3e0 [ 661.263396][T16031] __x64_sys_mkdirat+0x83/0xb0 [ 661.263442][T16031] do_syscall_64+0xcd/0xfa0 [ 661.263488][T16031] [ 661.263497][T16031] Memory state around the buggy address: [ 661.263514][T16031] ffff888058b9e280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 661.263538][T16031] ffff888058b9e300: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 661.263562][T16031] >ffff888058b9e380: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 661.263580][T16031] ^ [ 661.263599][T16031] ffff888058b9e400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 661.263623][T16031] ffff888058b9e480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 661.263642][T16031] ================================================================== [ 661.314108][T16031] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 661.314139][T16031] CPU: 1 UID: 0 PID: 16031 Comm: syz.5.1917 Tainted: G U W I L XTNJ syzkaller #0 PREEMPT(full) [ 661.314209][T16031] Tainted: [U]=USER, [W]=WARN, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 661.314231][T16031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 661.314251][T16031] Call Trace: [ 661.314263][T16031] [ 661.314276][T16031] dump_stack_lvl+0x3d/0x1f0 [ 661.314331][T16031] vpanic+0x640/0x6f0 [ 661.314369][T16031] panic+0xca/0xd0 [ 661.314404][T16031] ? __pfx_panic+0x10/0x10 [ 661.314441][T16031] ? fbcon_prepare_logo+0xa03/0xc70 [ 661.314492][T16031] ? preempt_schedule_common+0x44/0xc0 [ 661.314542][T16031] ? preempt_schedule_thunk+0x16/0x30 [ 661.314588][T16031] check_panic_on_warn+0xab/0xb0 [ 661.314628][T16031] end_report+0x107/0x170 [ 661.314660][T16031] kasan_report+0xee/0x110 [ 661.314693][T16031] ? fbcon_prepare_logo+0xa03/0xc70 [ 661.314750][T16031] kasan_check_range+0x100/0x1b0 [ 661.314791][T16031] __asan_memcpy+0x23/0x60 [ 661.314837][T16031] fbcon_prepare_logo+0xa03/0xc70 [ 661.314906][T16031] fbcon_init+0xd77/0x1900 [ 661.314958][T16031] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 661.315011][T16031] visual_init+0x320/0x620 [ 661.315065][T16031] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 661.315110][T16031] store_bind+0x61d/0x760 [ 661.315147][T16031] ? sysfs_file_kobj+0xe4/0x290 [ 661.315194][T16031] ? __pfx_store_bind+0x10/0x10 [ 661.315227][T16031] dev_attr_store+0x58/0x80 [ 661.315278][T16031] ? __pfx_dev_attr_store+0x10/0x10 [ 661.315323][T16031] sysfs_kf_write+0xf2/0x150 [ 661.315373][T16031] kernfs_fop_write_iter+0x3af/0x570 [ 661.315415][T16031] ? __pfx_sysfs_kf_write+0x10/0x10 [ 661.315466][T16031] iter_file_splice_write+0xa24/0x12e0 [ 661.315525][T16031] ? __pfx_iter_file_splice_write+0x10/0x10 [ 661.315575][T16031] ? __pfx_copy_splice_read+0x10/0x10 [ 661.315627][T16031] ? __pfx_iter_file_splice_write+0x10/0x10 [ 661.315703][T16031] direct_splice_actor+0x192/0x6c0 [ 661.315750][T16031] splice_direct_to_actor+0x345/0xa30 [ 661.315794][T16031] ? __pfx_direct_splice_actor+0x10/0x10 [ 661.315843][T16031] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 661.315891][T16031] do_splice_direct+0x174/0x240 [ 661.315940][T16031] ? __pfx_do_splice_direct+0x10/0x10 [ 661.315982][T16031] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 661.316027][T16031] ? rw_verify_area+0xcf/0x6c0 [ 661.316071][T16031] do_sendfile+0xb06/0xe50 [ 661.316117][T16031] ? __pfx_do_sendfile+0x10/0x10 [ 661.316165][T16031] ? __x64_sys_futex+0x1e0/0x4c0 [ 661.316199][T16031] ? __x64_sys_futex+0x1e9/0x4c0 [ 661.316234][T16031] __x64_sys_sendfile64+0x1d8/0x220 [ 661.316267][T16031] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 661.316306][T16031] do_syscall_64+0xcd/0xfa0 [ 661.316357][T16031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.316392][T16031] RIP: 0033:0x7f2587f8eec9 [ 661.316418][T16031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.316452][T16031] RSP: 002b:00007f2588d69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 661.316487][T16031] RAX: ffffffffffffffda RBX: 00007f25881e6090 RCX: 00007f2587f8eec9 [ 661.316510][T16031] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000003 [ 661.316532][T16031] RBP: 00007f2588011f91 R08: 0000000000000000 R09: 0000000000000000 [ 661.316553][T16031] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 661.316573][T16031] R13: 00007f25881e6128 R14: 00007f25881e6090 R15: 00007ffdab701558 [ 661.316607][T16031] [ 661.316973][T16031] Kernel Offset: disabled